Здравейте. Искам да проверите системата, ако е възможно

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-01-2019
Ran by stillhustlin (administrator) on SHABANSKI (12-01-2019 21:39:29)
Running from C:\Documents and Settings\stillhustlin\My Documents\Downloads
Loaded Profiles: stillhustlin (Available Profiles: stillhustlin)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDCPL] => C:\WINDOWS\RTHDCPL.EXE [20145368 2018-11-08] (Realtek Semiconductor Corp.)
HKLM\...\Run: [VVSN] => C:\Program Files\VVSN\VVSN.exe [107520 2005-10-25] (WhenU.com)
HKU\S-1-5-21-1844237615-1214440339-1417001333-1003\...\Run: [uTorrent] => C:\Documents and Settings\stillhustlin\Application Data\uTorrent\uTorrent.exe [1739960 2018-12-19] (BitTorrent Inc.)
HKU\S-1-5-21-1844237615-1214440339-1417001333-1003\...\RunOnce: [FlashPlayerUpdate] => C:\WINDOWS\system32\Macromed\Flash\FlashUtil32_32_0_0_101_pepper.exe [1456128 2018-12-30] (Adobe Systems Incorporated)
HKLM\...\Drivers32: [msacm.trspch] => C:\WINDOWS\system32\tssoft32.acm [8192 2008-04-14] (DSP GROUP, INC.)
HKLM\...\Drivers32: [VIDC.I420] => C:\WINDOWS\system32\msh263.drv [294912 2008-04-14] (Microsoft Corporation)
HKLM\...\Drivers32: [vidc.iv31] => C:\WINDOWS\system32\ir32_32.dll [199168 2008-04-14] ()
HKLM\...\Drivers32: [vidc.iv32] => C:\WINDOWS\system32\ir32_32.dll [199168 2008-04-14] ()
HKLM\...\Drivers32: [vidc.iv41] => C:\WINDOWS\system32\ir41_32.ax [848384 2008-04-14] (Intel Corporation)
HKLM\...\Drivers32: [msacm.msg723] => C:\WINDOWS\system32\msg723.acm [118784 2008-04-14] (Microsoft Corporation)
HKLM\...\Drivers32: [vidc.M263] => C:\WINDOWS\system32\msh263.drv [294912 2008-04-14] (Microsoft Corporation)
HKLM\...\Drivers32: [vidc.M261] => C:\WINDOWS\system32\msh261.drv [188416 2008-04-14] (Microsoft Corporation)
HKLM\...\Drivers32: [msacm.msaudio1] => C:\WINDOWS\system32\msaud32.acm [282654 2012-11-15] (Microsoft Corporation)
HKLM\...\Drivers32: [msacm.sl_anet] => C:\WINDOWS\system32\sl_anet.acm [86016 2008-04-14] (Sipro Lab Telecom Inc.)
HKLM\...\Drivers32: [msacm.iac2] => C:\WINDOWS\system32\iac25_32.ax [199680 2008-04-14] (Intel Corporation)
HKLM\...\Drivers32: [vidc.iv50] => C:\WINDOWS\system32\ir50_32.dll [755200 2008-04-14] (Intel Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [<{12d0ed0d-0ee0-4f90-8827-78cefb8f4988}] -> C:\WINDOWS\system32\ieudinit.exe [2012-11-15] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> C:\WINDOWS\inf\unregmp2.exe [2008-04-14] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [>{60B49E34-C7CC-11D0-8953-00A0C90347FF}] -> C:\WINDOWS\system32\IEDKCS32.DLL [2012-11-15] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [>{881dd1c5-3dcf-431b-b061-f3f88e8be88a}] -> C:\WINDOWS\system32\shmgrate.exe [2008-04-14] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] -> 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> 
HKLM\Software\Microsoft\Active Setup\Installed Components: [{44BBA840-CC51-11CF-AAFA-00AA00B6015C}] -> C:\Program Files\Outlook Express\setup50.exe [2008-04-14] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{44BBA842-CC51-11CF-AAFA-00AA00B6015B}] -> C:\WINDOWS\system32\advpack.dll [2012-11-15] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{6BF52A52-394A-11d3-B153-00C04F79FAA6}] -> C:\WINDOWS\system32\advpack.dll [2012-11-15] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{7790769C-0471-11d2-AF11-00C04FA35D02}] -> C:\Program Files\Outlook Express\setup50.exe [2008-04-14] (Microsoft Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\49.0.2623.112\Installer\chrmstp.exe [2018-12-25] (Google Inc.)
HKLM\Software\...\Winlogon\GPExtensions: [{C631DF4C-088F-4156-B058-4375F0853CD8}] -> C:\WINDOWS\System32\cscui.dll [2008-04-14] (Microsoft Corporation)
SecurityProviders: msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll
ShellServiceObjects: WebCheck -> {E6FB5E20-DE35-11CF-9C87-00AA005127ED} => C:\WINDOWS\system32\webcheck.dll [2012-11-15] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 77.76.144.10 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{0B2C8203-BA43-48F3-8D85-B541FF02F51E}: [DhcpNameServer] 77.76.144.10 192.168.1.1 192.168.1.1

Internet Explorer:
==================
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-19\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-20\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-1844237615-1214440339-1417001333-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
HKU\S-1-5-21-1844237615-1214440339-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/en-xl/?ocid=iehp

FireFox:
========
FF ProfilePath: C:\Documents and Settings\stillhustlin\Application Data\Mozilla\Firefox\Profiles\5kkjb698.default-1545694735515 [2019-01-08]
FF Homepage: C:\Documents and Settings\stillhustlin\Application Data\Mozilla\Firefox\Profiles\5kkjb698.default-1545694735515 -> google.bg
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)

Chrome: 
=======
CHR StartupUrls: Default -> "hxxp://google.bg/"
CHR Profile: C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Google\Chrome\User Data\Default [2019-01-12]
CHR Extension: (Google Диск) - C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-11-08]
CHR Extension: (YouTube) - C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-11-08]
CHR Extension: (Неведомый Космос) - C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\bpjdbdbhiomamecfnjahemfimgjamhjd [2018-12-09]
CHR Extension: (Video Downloader professional) - C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\elicpjhcidhpjomhibiffojpinpmmpil [2018-11-12]
CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-11-08]
CHR Extension: (Gmail) - C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-11-08]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 AdobeFlashPlayerUpdateSvc; C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe [335872 2018-12-30] (Adobe Systems Incorporated) [File not signed]
S3 aspnet_state; %SystemRoot%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [X]
S3 WsDrvInst; "C:\Program Files\Wondershare\Video Converter Ultimate\Transfer\DriverInstall.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 Ambfilt; C:\WINDOWS\System32\drivers\Ambfilt.sys [1691480 2018-11-08] (Creative)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-13] (Microsoft Corporation)
S3 dtscsi; C:\WINDOWS\System32\Drivers\dtscsi.sys [223128 2018-12-28] (DT Soft Ltd.)
S3 Monfilt; C:\WINDOWS\System32\drivers\Monfilt.sys [1395800 2018-11-08] (Creative Technology Ltd.)
R0 mv61xxmm; C:\WINDOWS\system32\Drivers\mv61xxmm.sys [14184 2012-11-15] (Marvell Semiconductor Inc.)
R0 mv64xxmm; C:\WINDOWS\system32\Drivers\mv64xxmm.sys [5632 2012-11-15] (Marvell Semiconductor Inc.) [File not signed]
R0 mvxxmm; C:\WINDOWS\system32\Drivers\mvxxmm.sys [14184 2012-11-15] (Marvell Semiconductor Inc.)
R3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-13] (Microsoft Corporation)
R3 rtl8139; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [20992 2008-04-13] (Realtek Semiconductor Corporation)
R3 SiS315; C:\WINDOWS\System32\DRIVERS\sisgrp.sys [325120 2010-10-26] (Silicon Integrated Systems Corporation)
R0 siside; C:\WINDOWS\System32\DRIVERS\siside.sys [4096 2003-03-25] (Silicon Integrated Systems Corp.)
R1 SiSkp; C:\WINDOWS\System32\DRIVERS\srvkp.sys [19200 2010-10-26] (Silicon Integrated Systems Corporation)
R0 sptd; C:\WINDOWS\System32\Drivers\sptd.sys [664064 2018-12-28] ()
S4 IntelIde; no ImagePath
U1 WS2IFSL; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-12 21:38 - 2019-01-12 21:39 - 000000000 ____D C:\FRST
2019-01-10 23:14 - 2019-01-10 23:14 - 000000466 _____ C:\WINDOWS\setuplog.txt
2019-01-09 21:15 - 2019-01-10 03:36 - 000000000 ____D C:\Documents and Settings\stillhustlin\Desktop\ne pipai
2019-01-08 19:36 - 2019-01-09 03:48 - 000000000 ____D C:\Program Files\VITSOFT
2019-01-08 19:32 - 2019-01-08 19:32 - 000000000 ____D C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Avg2014
2019-01-08 19:28 - 2019-01-10 00:19 - 000065536 _____ C:\WINDOWS\system32\config\TuneUp.evt
2019-01-08 19:27 - 2019-01-08 19:27 - 000000000 ____D C:\Documents and Settings\stillhustlin\Local Settings\Application Data\TuneUp Software
2019-01-08 19:27 - 2019-01-08 19:27 - 000000000 ____D C:\Documents and Settings\stillhustlin\Application Data\TuneUp Software
2019-01-08 19:24 - 2019-01-08 19:28 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\TuneUp Software
2019-01-08 19:23 - 2019-01-08 19:23 - 000000000 __SHD C:\Documents and Settings\All Users\Application Data\{FE8D473A-6F06-4F99-B5F4-BED72B2A038C}
2019-01-08 19:19 - 2019-01-10 00:20 - 000000000 ____D C:\WINDOWS\SxsCaPendDel
2019-01-08 19:05 - 2019-01-08 19:05 - 000000000 ____D C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Temp
2019-01-07 10:41 - 2019-01-09 19:26 - 000000000 ____D C:\Program Files\AVG
2019-01-07 10:40 - 2019-01-09 19:26 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Avg
2019-01-07 10:40 - 2019-01-08 19:03 - 000000000 ____D C:\Documents and Settings\stillhustlin\Local Settings\Application Data\AvgSetupLog
2019-01-07 10:40 - 2019-01-07 10:40 - 000000000 ____D C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Avg
2019-01-07 10:27 - 2008-07-06 14:06 - 001676288 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpssvcs.dll
2019-01-07 10:27 - 2008-07-06 14:06 - 001676288 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpssvcs.dll
2019-01-07 10:27 - 2008-07-06 14:06 - 000575488 ____N (Microsoft Corporation) C:\WINDOWS\system32\xpsshhdr.dll
2019-01-07 10:27 - 2008-07-06 14:06 - 000575488 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\xpsshhdr.dll
2019-01-07 10:27 - 2008-07-06 14:06 - 000117760 ____N (Microsoft Corporation) C:\WINDOWS\system32\prntvpt.dll
2019-01-07 10:27 - 2008-07-06 14:06 - 000089088 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\filterpipelineprintproc.dll
2019-01-07 10:27 - 2008-07-06 12:50 - 000597504 ____C (Microsoft Corporation) C:\WINDOWS\system32\dllcache\printfilterpipelinesvc.exe
2019-01-07 10:27 - 2007-11-30 13:18 - 000026488 _____ (Microsoft Corporation) C:\WINDOWS\system32\spupdsvc.exe
2019-01-07 10:23 - 2019-01-07 10:23 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2019-01-06 23:15 - 2019-01-07 00:00 - 000000000 ____D C:\Documents and Settings\stillhustlin\My Documents\Марко Пицути - серия Какво Скриха От Нас
2018-12-28 22:59 - 2018-12-28 22:59 - 000223128 _____ (DT Soft Ltd.) C:\WINDOWS\system32\Drivers\dtscsi.sys
2018-12-28 22:59 - 2018-12-28 22:59 - 000000000 ____D C:\Program Files\VVSN
2018-12-28 22:46 - 2018-12-28 22:46 - 000664064 _____ C:\WINDOWS\system32\Drivers\sptd.sys
2018-12-28 22:46 - 2018-12-28 22:46 - 000096384 _____ C:\WINDOWS\system32\Drivers\sptd9101.sys
2018-12-28 18:10 - 2018-12-28 18:10 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\SystemAcCrux
2018-12-28 18:07 - 2018-12-28 18:07 - 000000000 ____D C:\Program Files\EaseUS
2018-12-25 01:46 - 2019-01-12 01:24 - 000000000 ___RD C:\Documents and Settings\stillhustlin\My Documents\Книги
2018-12-21 01:49 - 2018-12-21 01:49 - 000001586 _____ C:\Documents and Settings\All Users\Start Menu\Programs\SumatraPDF.lnk
2018-12-21 01:49 - 2018-12-21 01:49 - 000000000 ____D C:\Program Files\SumatraPDF
2018-12-21 01:49 - 2018-12-21 01:49 - 000000000 ____D C:\Documents and Settings\stillhustlin\Application Data\SumatraPDF
2018-12-19 05:59 - 2018-12-19 05:59 - 000000811 _____ C:\Documents and Settings\stillhustlin\Desktop\PotPlayer.lnk
2018-12-17 21:53 - 2018-12-25 01:18 - 000000000 ____D C:\Documents and Settings\stillhustlin\Application Data\Skype
2018-12-17 21:53 - 2018-12-17 21:53 - 000000000 ____D C:\Documents and Settings\stillhustlin\Tracing
2018-12-17 21:52 - 2018-12-25 01:44 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Skype
2018-12-17 21:52 - 2018-12-17 21:52 - 000000000 ____D C:\Documents and Settings\All Users\Application Data\Package Cache

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2019-01-12 21:40 - 2018-11-08 19:00 - 000000000 ____D C:\Documents and Settings\stillhustlin\Local Settings\Temp
2019-01-12 21:27 - 2018-11-08 19:16 - 000000986 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2019-01-12 21:21 - 2018-11-08 20:33 - 000000000 ____D C:\WINDOWS\system32\Macromed
2019-01-12 21:21 - 2018-11-08 19:28 - 000000892 _____ C:\WINDOWS\Tasks\Adobe Flash Player PPAPI Notifier.job
2019-01-12 21:19 - 2018-11-08 18:55 - 000000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2019-01-12 19:27 - 2018-11-08 18:59 - 000032466 _____ C:\WINDOWS\SchedLgU.Txt
2019-01-12 18:54 - 2018-11-08 21:07 - 000000390 _____ C:\WINDOWS\Tasks\update-sys.job
2019-01-12 17:58 - 2018-11-08 21:07 - 000000390 _____ C:\WINDOWS\Tasks\update-S-1-5-21-1844237615-1214440339-1417001333-1003.job
2019-01-12 06:27 - 2018-11-08 19:16 - 000000982 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2019-01-12 01:23 - 2018-11-08 21:07 - 000027008 _____ C:\Documents and Settings\stillhustlin\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2019-01-11 14:59 - 2018-11-12 19:37 - 000448512 ___SH C:\Documents and Settings\stillhustlin\Desktop\Thumbs.db
2019-01-11 06:04 - 2018-11-10 19:49 - 000000000 ____D C:\Documents and Settings\stillhustlin\Application Data\uTorrent
2019-01-10 23:45 - 2018-11-08 18:59 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2019-01-10 08:12 - 2018-11-08 19:00 - 000000178 ___SH C:\Documents and Settings\stillhustlin\ntuser.ini
2019-01-10 00:20 - 2018-11-08 20:40 - 000121336 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2019-01-10 00:20 - 2008-04-14 15:00 - 000002206 _____ C:\WINDOWS\system32\wpa.dbl
2019-01-08 19:20 - 2018-11-10 19:49 - 000000000 ____D C:\Program Files\Wondershare
2019-01-08 19:19 - 2018-11-08 20:42 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2019-01-08 19:19 - 2018-11-08 20:33 - 000000000 ___HD C:\WINDOWS\inf
2019-01-08 19:19 - 2018-11-08 20:33 - 000000000 ____D C:\WINDOWS\pchealth
2019-01-07 10:33 - 2018-11-08 20:42 - 000488794 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2019-01-07 10:33 - 2018-11-08 19:55 - 000000000 ____D C:\WINDOWS\Minidump
2019-01-07 10:27 - 2018-11-08 20:33 - 000000000 RSHDC C:\WINDOWS\system32\dllcache
2019-01-07 10:27 - 2018-11-08 20:33 - 000000000 ____D C:\WINDOWS\system32\spool
2019-01-07 00:05 - 2018-11-08 19:01 - 000000000 ___RD C:\Documents and Settings\stillhustlin\My Documents\Снимки
2019-01-01 16:12 - 2018-11-08 19:00 - 000000792 _____ C:\Documents and Settings\stillhustlin\Start Menu\Programs\Windows Media Player.lnk
2018-12-30 21:27 - 2018-11-08 19:28 - 000000000 ____D C:\Documents and Settings\stillhustlin\Local Settings\Application Data\Adobe
2018-12-30 21:27 - 2008-04-14 15:00 - 000842240 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2018-12-30 21:27 - 2008-04-14 15:00 - 000175104 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2018-12-28 00:04 - 2018-11-12 13:26 - 000009728 _____ C:\Documents and Settings\stillhustlin\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-12-25 01:33 - 2018-11-08 19:17 - 000001817 _____ C:\Documents and Settings\All Users\Start Menu\Programs\Google Chrome.lnk
2018-12-23 03:15 - 2018-11-11 01:14 - 000002621 _____ C:\Documents and Settings\stillhustlin\Desktop\µTorrent.lnk
2018-12-17 21:53 - 2018-11-08 19:00 - 000000000 ____D C:\Documents and Settings\stillhustlin
2018-12-13 00:18 - 2018-11-08 18:50 - 000001570 _____ C:\Documents and Settings\All Users\Start Menu\Microsoft Update.lnk

==================== Files in the root of some directories =======

2018-11-12 13:26 - 2018-12-28 00:04 - 000009728 _____ () C:\Documents and Settings\stillhustlin\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2018-11-08 21:07 - 2018-11-08 21:07 - 000000003 _____ () C:\Documents and Settings\stillhustlin\Local Settings\Application Data\updater.log
2018-11-08 21:07 - 2018-11-08 21:07 - 000000413 _____ () C:\Documents and Settings\stillhustlin\Local Settings\Application Data\UserProducts.xml

Some files in TEMP:
====================
2014-04-15 15:59 - 2014-04-15 15:59 - 000028984 _____ (TuneUp Software) C:\Documents and Settings\stillhustlin\Local Settings\Temp\DseShExt-x86.dll
2019-01-10 23:04 - 2019-01-10 23:04 - 002454664 _____ (                                                            ) C:\Documents and Settings\stillhustlin\Local Settings\Temp\microsoft_word_0293458756.exe
2014-04-15 15:59 - 2014-04-15 15:59 - 000032568 _____ (TuneUp Software) C:\Documents and Settings\stillhustlin\Local Settings\Temp\SDShelEx-win32.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End of FRST.txt ============================

 

Addition_12-01-2019 21.41.10.txt

Здравейте..!  Първо ми кажете каква е причината ...какво наблюдавате , какви симптоми ..?   Второ какво очаквате от операционна система която не се поддържа  отдавна..?

Фикс с Farbar Recovery Scan Tool
 
 Изтеглете прикачения файл fixlist.txt  и го запазете там, където сте свалили FRST.exe
Стартирайте отново FRST.exe и натиснете бутона Fix веднъж и изчакайте.

Ще се създаде нов лог файла FixLog.txt. Прикачете съдържанието му в следващия си коментар.
 
ЗАБЕЛЕЖКА: Този скрипт е написан специално за този потребител,и за тази конкретна машина. Изпълнението на фикса, на друг компютър може да доведе до увреждане на  операционната ви система

 

 

 

   Сканиране с SecurityCheck by glax24

• Изтеглете SecurityCheck by glax24 от тук и запомнете инструмента на десктопа .
• Стартирате програмата (ако използвате Windows XP) или стартирате с десен бутон на мишката от името на администратор (ако използватеWindows Vista/7/8/10)
• Изчакайте да приключи сканирането.Ще се отвори в текстов файл с имеSecurityCheck.txt. Копирайте съдържанието на  този файл  следващия си пост
• Можете да намерите този файл в основната директория на системния диск в папка с име SecurityCheck, напр. C:\SecurityCheck\SecurityCheck.txt

 

 

 

  Дневници
 
В следващия си отговор, моля да включите следните дневници:

• FixLog.txt
• SecurityCheck.txt (копирате съдържанието)

 

 

 

 

Fixlog_14-01-2019 02.12.37.txt

SecurityCheck.txt

SecurityCheck by glax24 & Severnyj v.1.4.0.53 [27.10.17]
WebSite: www.safezone.cc
DateLog: 14.01.2019 02:16:27
Path starting: C:\Documents and Settings\stillhustlin\Local Settings\Temp\SecurityCheck\SecurityCheck.exe
Log directory: C:\SecurityCheck\
IsAdmin: True
User: stillhustlin
VersionXML: 5.78is-03.01.2019
___________________________________________________________________________

Windows XP(5.1.2600) Service Pack 3 (x86) Lang: English(0409)
Installation date OS: 08.11.2018 16:58:30
Boot Mode: Normal
Default Browser: C:\Program Files\Google\Chrome\Application\chrome.exe
SystemDrive: C: FS: [NTFS] Capacity: [78.1 Gb] Used: [8.7 Gb] Free: [69.4 Gb]
------------------------------- [ Windows ] -------------------------------
Extended support has ended 08.04.2014, Your operating system may be vulnerable to new types of threats
Internet Explorer 8.0.6001.18702
Never check for updates
Automatic Updates (wuauserv) - The service is running
Security Center (wscsvc) - The service is running
Remote Registry (RemoteRegistry) - The service is running
Terminal Services (TermService) - The service is running
SSDP Discovery Service (SSDPSRV) - The service is running
------------------------------- [ HotFix ] --------------------------------
HotFix KB958644 Warning! Download Update
HotFix KB3197835 Warning! Download Update
HotFix KB4012598 Warning! Download Update
HotFix KB4012583 Warning! Download Update
HotFix KB4022747 Warning! Download Update
HotFix KB4024323 Warning! Download Update
HotFix KB4025218 Warning! Download Update
--------------------------- [ OtherUtilities ] ----------------------------
WinRAR 5.61 (32-bit) v.5.61.0
--------------------------------- [ P2P ] ---------------------------------
µTorrent v.3.5.5.44994 Warning! P2P-client.
--------------------------- [ AdobeProduction ] ---------------------------
Adobe Flash Player 11 ActiveX v.11.5.502.146 Warning! Download Update
Adobe Flash Player 32 PPAPI v.32.0.0.101
------------------------------- [ Browser ] -------------------------------
Google Chrome v.49.0.2623.112 Warning! Download Update
--------------------------- [ RunningProcess ] ----------------------------
C:\Program Files\Google\Chrome\Application\chrome.exe v.49.0.2623.112
----------------------------- [ End of Log ] ------------------------------

 

Препоръчително е да обновите проблемния софтуер ..Така ще затворите потенциалните уязвимости  на и без това остарялата ви операционна система..! Друго зловредно в системата ви не виждам..! Последно за контрол:

 

Моля,изтеглeте   Sophos Virus Removal Tool и го запишете на вашия работен плот.

• Кликнете два пъти върху иконата и изберете Run as administrator . Натиснете Next 
• Приемете условията в това лицензионно споразумение, след това кликнете върху Next два пъти
• Кликнете  Инсталиране ( Install )
• Натиснете Finish . Инструментът създаде икона за пряк път на работния плот на компютъра ви.
• Сега щракнете двукратно върху иконата на Sophos Virus Removal Tool, за да стартирате инструмента
• Кликнете върху Yes , за да приемете предупрежденията за сигурност, които могат да се появят
• Затворете всички отворени програми.
• Временно деактивирайте антивирусната и анти-шпионска защита в реално време.
• След като вирусната база данни е актуализирана кликнете Start Scanning
•  Когато приключите, ако открие нещо, ще има бутон " Start Clean-up ", щракнете върху него и го оставете да приключи.
• Ако са намерени заплахи кликнете на  Details и след това на  View Log file  (Долния ляв ъгъл)
•  Копирайте и поставете съдържанието му в следващия си отговор и отбележете всички възникнали грешки.
•  Затворете документа на Notepad, затворете екрана Threat Details (Подробности за заплаха), след което щракнете върху Start cleanup (Старт на почистване).
•  Щракнете върху Exit  , за да затворите програмата.
• Ако не са открити заплахи, моля да ме уведомите за това в следващия си пост

Отново няма обратна връзка с автора на темата..! Темата се затваря ..!