С този е по-различно:

Welcome to SFCFix by niemiro and sysnative.com.

Checking for updates . . .

Failed to check for updates. This may be due to an internet connection problem
or a temporary availability failure of the update servers. Please ensure you are
using the very latest version of the program before continuing by downloading it
today from: https://www.sysnative.com/niemiro/apps/SFCFix.exe

If you are already using the latest version, press any key to continue . . .
 

Your computer must be restarted in order to complete the fix. Please save and close all open programs and click OK to continue.

Рестартира се компютъра и това е новия лог:

SFCFix version 3.0.2.1 by niemiro.
Start time: 2020-10-24 16:19:24.603
Microsoft Windows 7 Service Pack 1 - amd64
Using .zip script file at C:\Users\SPUNKI\Desktop\SFCFix.zip [0]

PowerCopy::
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\credssp.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\TSpkg.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\tspkg.mof
Successfully took permissions for file or folder C:\Windows\WinSxS\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34\kerberos.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102\schannel.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59\msv1_0.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39\kerberos.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70\wdigest.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\credssp.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\TSpkg.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\tspkg.mof
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a\ncrypt.dll
Successfully took permissions for file or folder C:\Windows\WinSxS\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c.manifest
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a.manifest
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12.manifest
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70.manifest
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39.manifest
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59.manifest
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102.manifest
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34.manifest
Successfully took permissions for file or folder C:\Windows\WinSxS\Manifests\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc.manifest

The file \\?\C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\credssp.dll is in use and must be replaced over a reboot.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\TSpkg.dll to C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\TSpkg.dll.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\tspkg.mof to C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\tspkg.mof.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\WinSxS\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34\kerberos.dll to C:\Windows\WinSxS\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34\kerberos.dll.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102\schannel.dll to C:\Windows\WinSxS\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102\schannel.dll.
The file \\?\C:\Windows\WinSxS\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59\msv1_0.dll is in use and must be replaced over a reboot.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39\kerberos.dll to C:\Windows\WinSxS\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39\kerberos.dll.
The file \\?\C:\Windows\WinSxS\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70\wdigest.dll is in use and must be replaced over a reboot.
The file \\?\C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\credssp.dll is in use and must be replaced over a reboot.
The file \\?\C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\TSpkg.dll is in use and must be replaced over a reboot.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\tspkg.mof to C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\tspkg.mof.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\WinSxS\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a\ncrypt.dll to C:\Windows\WinSxS\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a\ncrypt.dll.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\WinSxS\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c\mdmhandy.inf to C:\Windows\WinSxS\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c\mdmhandy.inf.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c.manifest to C:\Windows\WinSxS\Manifests\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c.manifest.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a.manifest to C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a.manifest.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12.manifest to C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12.manifest.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70.manifest to C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70.manifest.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39.manifest to C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39.manifest.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59.manifest to C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59.manifest.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102.manifest to C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102.manifest.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34.manifest to C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34.manifest.
Successfully copied file C:\Users\SPUNKI\AppData\Local\niemiro\Archive\Manifests\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc.manifest to C:\Windows\WinSxS\Manifests\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc.manifest.

Successfully pended file for replace over reboot: \\?\C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\credssp.dll
Successfully pended file for replace over reboot: \\?\C:\Windows\WinSxS\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59\msv1_0.dll
Successfully pended file for replace over reboot: \\?\C:\Windows\WinSxS\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70\wdigest.dll
Successfully pended file for replace over reboot: \\?\C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\credssp.dll
Successfully pended file for replace over reboot: \\?\C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\TSpkg.dll

Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\TSpkg.dll
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\TSpkg.dll
Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\tspkg.mof
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\tspkg.mof
Successfully restored ownership for C:\Windows\WinSxS\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34\kerberos.dll
Successfully restored permissions on C:\Windows\WinSxS\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34\kerberos.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102\schannel.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102\schannel.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39\kerberos.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39\kerberos.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\tspkg.mof
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\tspkg.mof
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a\ncrypt.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a\ncrypt.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c
Successfully restored permissions on C:\Windows\WinSxS\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c
Successfully restored ownership for C:\Windows\WinSxS\Manifests\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\amd64_mdmhandy.inf_31bf3856ad364e35_6.1.7600.16385_none_1e79dade4d15a79c.manifest
Successfully restored ownership for C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-ncrypt-dll_31bf3856ad364e35_6.1.7600.16385_none_b9d347390b4d154a.manifest
Successfully restored ownership for C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12.manifest
Successfully restored ownership for C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70.manifest
Successfully restored ownership for C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_44fce29ac76d1a39.manifest
Successfully restored ownership for C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59.manifest
Successfully restored ownership for C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\amd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.17514_none_803c507d6be26102.manifest
Successfully restored ownership for C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\wow64_microsoft-windows-security-kerberos_31bf3856ad364e35_6.1.7601.17514_none_4f518cecfbcddc34.manifest
Successfully restored ownership for C:\Windows\WinSxS\Manifests\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc.manifest
Successfully restored permissions on C:\Windows\WinSxS\Manifests\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc.manifest
PowerCopy:: directive completed successfully.

Reboot:: directive completed successfully.

PostRebootCorruptionDetection::
No hash verification failures detected.
PostRebootCorruptionDetection:: directive completed successfully.

PostRebootRestorePermissions::
Successfully restored ownership for C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\credssp.dll
Successfully restored permissions on C:\Windows\WinSxS\x86_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_c5bf9b5affd21ddc\credssp.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59\msv1_0.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.1.7601.17514_none_dad8f242792a4d59\msv1_0.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70\wdigest.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-security-digest_31bf3856ad364e35_6.1.7600.16385_none_96c23cbe96661a70\wdigest.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\credssp.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\credssp.dll
Successfully restored ownership for C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\TSpkg.dll
Successfully restored permissions on C:\Windows\WinSxS\amd64_microsoft-windows-security-credssp_31bf3856ad364e35_6.1.7601.17514_none_21de36deb82f8f12\TSpkg.dll
PostRebootRestorePermissions:: directive completed successfully.

Successfully processed all directives.
SFCFix version 3.0.2.1 by niemiro has completed.
Currently storing 22 datablocks.
Finish time: 2020-10-24 16:23:50.324
----------------------EOF-----------------------

Така, изпълнете отново стъпките от този пост да видим дали ремонта е успешен:

https://www.kaldata.com/forums/topic/298063-съмнение-за-вируси/?do=findComment&comment=4703295

преди 5 часа, B-boy/StyLe/ написа:

 

След това в търсачката на Windows изберете CMD.exe => десен клик и Run as administrator стартиран като администратор въведете командата:

SFC /SCANNOW

Натиснете Enter. Изчакайте да се изпълни на 100% и след това въведете командата:

findstr /c:"[SR]" %windir%\Logs\CBS\CBS.log >"%userprofile%\Desktop\sfcdetails.txt"

Прикачете съдържанието на лог файла sfcdetails.txt

 

Имате в предвид това ли само да изпълня отново?

Не, и проверката с инструмента:

https://www.microsoft.com/en-us/download/details.aspx?id=20858

Това ми изписа след инсталирането на инструмента и след проерката със SFC /SCANNOW:

Windows Resource Protection did not find any integrity violations.

Това са новите лог файлове:

https://dox.abv.bg/download?id=815d4d40ef# - Линк за сваляне

Пфу, ремонта е бил успешен. Сега да направим това, Защо не деинсталирате временно KIS. (Kaspersky Internet Security),

След това почистете остатъците с този инструмент:

https://support.kaspersky.com/common/uninstall/1464

От падащото меню трябва да изберете и версията на ползваната от вас програма.

След това я изтеглете наново (не ползвайте вашия инсталатор ако го имате на твърдия диск) и я инсталирайте пак. Да видим дали ще се появи онова съобщение.

Аз през това време ще разгледам логовете от FRST, защото видях някои нередности там и ще напиша скрипт.

И скрипта е готов:

Изтеглете fixlist.txtи го запазете в папката, където сте свалили FRST64.exe (на десктопа)

Стартирайте FRST64.exe и натиснете бутона Fix веднъж!

След като приключи, ако ви поиска рестарт - съгласете се. След рестарта публикувайте лог файла - Fixlog.txt, който ще се създаде след работата на програмата.

Внимание: Скрипта е създаден за текущата система. Да не се ползва за други системи с подобни проблеми!

Деинсталирах касперски с посочения от вас инструмент, но все още не съм инсталирал за сега никаква антивирусна понеже инсталатора на касперски го имам на твърдия си диск, изпълних скрипта за почистването по-вашите инструкции с FRST и това е лог файла:

Fix result of Farbar Recovery Scan Tool (x64) Version: 24-10-2020
Ran by SPUNKI (24-10-2020 21:04:59) Run:1
Running from C:\Users\SPUNKI\Desktop\FRST-OlderVersion
Loaded Profiles: SPUNKI
Boot Mode: Normal
==============================================

fixlist content:
*****************
start
CloseProcesses:
HKLM\...\Run: [New Value #1] => “Ctfmon” = ”CTFMON.EXE”
HKLM\...\Run: [CTFMON] => 😄 \ Windows \ System32 \ ctfmon.exe
reg: reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ctfmon" /t REG_SZ /d "C:\WINDOWS\system32\ctfmon.exe" /f
GroupPolicy: Restriction ? <==== ATTENTION
GroupPolicy\User: Restriction ? <==== ATTENTION
S3 BstHdDrv; \??\C:\Program Files (x86)\Bluestacks\HD-Hypervisor-amd64.sys [X]
S3 BstkDrv; \??\C:\Program Files (x86)\Bluestacks\BstkDrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
S3 VMnetAdapter; system32\DRIVERS\vmnetadapter.sys [X]
2020-10-23 21:33 - 2020-10-23 21:33 - 000000000 ____D C:\AdwCleaner
2020-10-22 17:47 - 2020-10-23 01:37 - 000000000 ____D C:\KVRT_Data
Folder: C:\Windows\M35738
Folder: C:\Windows\SysWOW64\X51334go
cmd: type C:\Windows\system.ini
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> No File
WMI:subscription\__FilterToConsumerBinding->CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"::
WMI:subscription\__EventFilter->BVTFilter::[Query => SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99]
WMI:subscription\CommandLineEventConsumer->BVTConsumer::[CommandLineTemplate => cscript KernCap.vbs][WorkingDirectory => C:\\tools\\kernrate]
AlternateDataStreams: C:\ProgramData\TEMP:1CE11B51 [152]
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
Toolbar: HKU\S-1-5-21-799607816-380638346-1815449528-1000 -> No Name - {4853DF44-7D6B-48E9-9258-D800EEE54AF6} -  No File
cmd: del %temp%\*.* /f /s /q
cmd: rd /s /q %temp%
Hosts:
cmd: bitsadmin /reset /allusers
cmd: netsh winsock reset catalog
cmd: ipconfig /flushdns
RemoveProxy:
EmptyTemp:
end
*****************

Processes closed successfully.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\New Value #1" => removed successfully
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\CTFMON" => removed successfully

========= reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "ctfmon" /t REG_SZ /d "C:\WINDOWS\system32\ctfmon.exe" /f =========

ЋЇҐа жЁпв  § ўкаиЁ гбЇҐи­®.

========= End of Reg: =========

C:\Windows\system32\GroupPolicy\Machine => moved successfully
C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully
C:\Windows\system32\GroupPolicy\User => moved successfully
HKLM\System\CurrentControlSet\Services\BstHdDrv => removed successfully
BstHdDrv => service removed successfully
HKLM\System\CurrentControlSet\Services\BstkDrv => removed successfully
BstkDrv => service removed successfully
HKLM\System\CurrentControlSet\Services\VGPU => removed successfully
VGPU => service removed successfully
HKLM\System\CurrentControlSet\Services\VMnetAdapter => removed successfully
VMnetAdapter => service removed successfully
C:\AdwCleaner => moved successfully
"C:\KVRT_Data" => not found

========================= Folder: C:\Windows\M35738 ========================

====== End of Folder: ======

========================= Folder: C:\Windows\SysWOW64\X51334go ========================

====== End of Folder: ======

========= type C:\Windows\system.ini =========

; for 16-bit app support
[386Enh]
woafont=dosapp.fon
EGA80WOA.FON=EGA80WOA.FON
EGA40WOA.FON=EGA40WOA.FON
CGA80WOA.FON=CGA80WOA.FON
CGA40WOA.FON=CGA40WOA.FON

[drivers]
wave=mmdrv.dll
timer=timer.drv

[mci]
[MCIDRV_VER]
DEVICEMB=11946401625

========= End of CMD: =========

HKLM\Software\Classes\Directory\Background\ShellEx\ContextMenuHandlers\igfxcui => removed successfully
"CommandLineEventConsumer.Name=\"BVTConsumer\"",Filter="__EventFilter.Name=\"BVTFilter\"" => removed successfully
"BVTFilter" => removed successfully
"BVTConsumer" => removed successfully
C:\ProgramData\TEMP => ":1CE11B51" ADS removed successfully
HKLM\System\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => removed successfully
HKLM\System\CurrentControlSet\Control\SafeBoot\Network\MBAMService => removed successfully
"HKU\S-1-5-21-799607816-380638346-1815449528-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{4853DF44-7D6B-48E9-9258-D800EEE54AF6}" => removed successfully

========= del %temp%\*.* /f /s /q =========

Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\098bed1f-8bbd-4f73-9373-ecf3b8692823.tmp
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\1f251084-57ac-496e-a9a4-fa679419b597.tmp.ico
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\2e53dd30-2d7a-4e88-a07d-c0770afd5894.tmp.ico
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\2f60591d-8d17-4cf4-a8ba-225e691aa7bc.tmp.ico
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\45685f73-ee23-42bb-b888-5f249aca250d.tmp
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\61ab929e-9402-4ba3-832f-49330f8da745.tmp
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\6a09cad5-a620-4611-b099-320c8437e0ba.tmp.ico
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\795e1a4b-2a68-4253-bd08-ce92ca759a44.tmp
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\98a13a59-54af-4e14-99a8-05ec30f60296.tmp
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\ad.php
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\adb.log
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\bts.db
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\c8a7dbac-5819-4c45-b307-ce1aa51a2d9c.tmp.ico
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\d4238596-b427-400f-b77d-f84f624e71f8.tmp.ico
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\DProgramiProgrami 8 Opraviani I SybiraniOpera Next 15 Installer72.0.3815.133opera_autoupdate.download.lock
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\DProgramiProgrami 8 Opraviani I SybiraniOpera Next 15 Installer72.0.3815.133opera_autoupdate.metrics.lock
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\ec229400-83e3-4aa2-97dc-4208c77b98ab.tmp.ico
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epocwind.out
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\f81f766f-aaf0-4bc1-aa13-e3cd17324a8c.tmp.ico
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\kavremvr 2020-10-24 20-47-51 (pid 1896).log
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\kl-uninstall-2020-10-24-20-50-15.log
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\MEmuDef.db
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\news.ini
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\s3.exe
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPUNKI.bmp
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\UnKIS.reg
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\UnKIS.vbs
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\WT5BD5.tmp
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\~2409855671.tmp
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\AGSVEXE.EXE(1746-92)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\ailaunch.exe(1746-38)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\akncapserver.exe(1746-19)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\AknIconSrv.exe(1746-21)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\aknnfysrv.exe(1746-29)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\AknSkinSrv.exe(1746-24)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\AlarmServer.EXE(1746-28)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\alwaysonlinestarter.exe(1746-60)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\apsexe.exe(1746-16)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\baksrvs.EXE(1746-17)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\c32exe.exe(1746-11)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\C32start.exe(1746-10)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\calensvr.exe(1746-55)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\cbsserver.exe(1746-57)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\cdlserver.exe(1746-22)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\centralrepositorysrv.EXE(1746-4)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\clknitzmdls.exe(1746-39)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\CNTSRV.EXE(1746-48)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\COMSDBGSVR.EXE(1746-9)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\ConnMonExe.EXE(1746-8)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\DcfRepSrv.EXE(1746-71)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\domainSrv.exe(1746-2)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\DosServer.exe(1746-6)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\DRMHelperServer.EXE(1746-72)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\ecmtcore.exe(1746-47)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\ecomserver.EXE(1746-5)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\EDBSRV.EXE(1746-36)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\eiksrvs.exe(1746-23)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\FavouritesSrv.EXE(1746-53)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\FeatMgrServer.exe(1746-12)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\FLOGSVR.EXE(1746-7)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\HWRMServer.exe(1746-32)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\j9midps60.exe(1746-90)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\javaregistry.exe(1746-75)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\locod.exe(1746-73)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\LogServ.EXE(1746-37)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\mcserver.exe(1746-65)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\menu2.exe(1746-74)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\MIDP2SilentMIDletInstall.exe(1746-77)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\MMFAudioServer.exe(1746-26)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\msexe.exe(1746-50)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\ncnlist.exe(1746-52)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\phone.exe(1746-33)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\PhoneServer.exe(1746-31)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\remconserver.exe(1746-34)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\rightsserver.exe(1746-69)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\SatServer.exe(1746-45)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\schexe.exe(1746-58)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\ShimNotifierSvr.EXE(1746-20)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\swidaemon.exe(1746-61)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\sysap.exe(1746-30)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\SYSSTART.EXE(1746-3)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\systemams.exe(1746-40)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\SystemAMSCore.exe(1746-79)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\TZSERVER.EXE(1746-42)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\vcommandmanager.exe(1746-68)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\VPbkSimServer.EXE(1746-46)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\WidgetRegistry.EXE(1746-27)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\WimServer.EXE(1746-43)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\wserv.exe(1746-15)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\epoc\c\s60\devices\s60_3rd_fp2_sdk_v1.1\epoc32\release\winscw\udeb\xnthemeserver.EXE(1746-44)
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SDK Descriptors\S60_3rd_FP2_SDK_v1.1_v2.xml
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SDK Descriptors\S60_3rd_FP2_SDK_v1.1_v3.xml
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SDK Descriptors\SDK_deviceIdChange.pl
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\skype-preview Crashes\CrashpadMetrics-active.pma
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\skype-preview Crashes\CrashpadMetrics.pma
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\skype-preview Crashes\metadata
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\skype-preview Crashes\operation_log.txt
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\skype-preview Crashes\settings.dat
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\CBSCreateVC.dll_0x30ebdc01d3ab9fb3772445cb4a9ebbba.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\DAQExp.dll_0x4f12c1286540ac5546808c70a0ba0590.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\Fotophire.exe_0x5d034f37a12a396c9aeafb4aeff418f7.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\FotophirePhotoCutter.exe_0x92f8dcc911d17f3b5ebac2928806bca8.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\FotophirePhotoEditor.exe_0xb4ffa9b274bc77935b47bea45b097ae8.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\FotophirePhotoEraser.exe_0xe7f4abec19ab5c68fecd08d6ea4adf5d.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.IPP.dll_0x62524e49ecdefa75812ec959d60591a3.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.IPP.dll_0x881a6a700866181d1ba83e33cdfd56ad.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.IPP.dll_0x8cef43cbd2c6d40df8cbdd0f374d002e.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.OpenCV.dll_0x2347fc536e410b360b262f5b97fd3f8f.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.OpenCV.dll_0x4324409e4b85821f668f546da710e545.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.OpenCV.dll_0xbb1c9e9cca5a7fa4f3786a9551b22472.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.SSE.dll_0xa235b944e990dcb824e2448b945ee3ef.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.SSE.dll_0xd0801e625fcee434ed10182fc7a43ae4.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\InPixio.Imaging.SSE.dll_0xe482950cd0625ff5878e6eaa36f97bf7.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\ISSetup.dll_0xa17a7931b3524d05253c5aa3d06fd364.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\opencv_core320.dll_0x5f7f5fd0311ea61948c346c0aeeca1ed.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\opencv_imgproc320.dll_0x9036d21977611c1e90e78c62b64382d5.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\opencv_ml320.dll_0x30bd6475cd713f3f04d2a0344d54af56.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\opencv_objdetect320.dll_0xf78cd3a7eeff8b0fd427db95bc69ea98.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\opencv_photo320.dll_0xf3380bfc3e99ce81127c993b82dab30b.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\opencv_saliency320.dll_0x58d524d6ff8008789a3f101c07fc47d2.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\opencv_ximgproc320.dll_0x16be40b9940edcee534871ff93b29c4d.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\setup.exe_0xa30d35e9b94e1495ff0fc55fdb967fcf.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\unins000.exe_0x470b03b20d6fcacad49e47cc05c176e8.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\unins000.exe_0xa4a1b98720fa70874d30de97f079f516.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\Manifests\WSHelper.exe_0xc6bdf0f7c7354ce2073bab2c8b1be845.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\[email protected]\JR.Inno.Setup.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\[email protected]\[email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\[email protected]\Setup.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\[email protected]\[email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\_CodeGear RAD [email protected]\CodeGear RAD Studio.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\_CodeGear RAD [email protected]\_CodeGear RAD [email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\[email protected]\MyApplication.app.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x0FD034D47E792390\sxs\[email protected]\[email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\binding.node\binding.node.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\face_detector.node\face_detector.node.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\libvips-cpp.dll\libvips-cpp.dll.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\binding.node_0x76df1951279285059ff58ba3f2f9332f.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\binding.node_0xd6ab4bbd5e6709ebe4ec217ff043c189.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\face_detector.node_0x242fe48034197ce0e73e69459bdfd94a.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\libvips-cpp.dll_0x943702c3d901bd5977eaf70663e2e7e9.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\node.dll_0xefc431e86f01224aa92ed07e28a5454f.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\node_libraw.node_0x7e65a4c6bd8beb3e090c71c22624ea66.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\Polarr.exe_0xac16c32358467a39109cb2ecd0127da1.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\sharp.node_0x24aa7be83caa45fe981afbe2a5e8549e.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Manifests\windows.storage.node_0xa124072d12774d2b8f1d9b431a9d8187.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\node.dll\node.dll.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\node_libraw.node\node_libraw.node.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\Polarr.exe\Polarr.exe.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\sharp.node\sharp.node.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x10C728F5EC5FF3AB\sxs\windows.storage.node\windows.storage.node.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x3F5337F9F96EB3DD\sxs\general.exe\general.exe.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x3F5337F9F96EB3DD\sxs\Manifests\general.exe_0x66148f38a2e8e4b26ac67cab80ce30a5.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\AppManager.dll_0x8312921d17ff8d521ccc3e65f3d40e58.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\ASSWrapper.dll_0x5c1a4755eff05881d5f114038578ca0b.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\AudioRenderers.dll_0x8e0a00a07bc57261682861715e212d14.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\CharsetRecode.dll_0x03d362b3549528881af32f51723b5513.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\ClientAPI.dll_0x6a3319e8c3cbcbb69da666f79efb64de.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\CodecFactory.dll_0x04fee4bc18aae67b1d6fd3f2dddee8e4.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\CompositionManager.dll_0xe44264ccc96e0ba0fb34b6a0ecdde7bf.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\ComputingResourceManager.dll_0x6dfe51d5bdc917db0914b73e901db6d0.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\ConfInt.dll_0xe51bad73f1aedf8b47fe980038972023.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\ConverterCore.dll_0x53cb8f446f0f18e6d29166077f68b0f4.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Converters.dll_0x6b63c44db23a4adbc62e1fa3734becd9.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\CoreInt.dll_0x3959385a16c497de5140d13bb0ed81d2.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\CoreLocalization.dll_0xb190364578a2738f8f203fc41743b9e5.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\CoreManager.dll_0xb2b2c3cab4228c3b63c5d5de4cb2f688.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\CudaManager.dll_0x5d8268fcb435005f8eefb8ae01296f3b.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\DataHelpers.dll_0x30929cbfa9d6b3de21a9b75f62857684.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Decoders.ff.dll_0x910e42c816f0ccffcc3db918bb115955.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Demuxers.dll_0x2e6d1f5465a344469061586cef0c686e.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\downloadmanager.exe_0xbd0bd8a5860efc84670d0a99ca3598cf.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\EffectFactory.dll_0x3649e0479c10700d85e721f74a442759.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Effects.dll_0x3f71c239c7a26f369d53667a8472595a.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\EffectsFF.dll_0x40c3d08def1de073d9911a932b86c63f.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Encoders.ff.dll_0xe6e8213e911e9146043e0413b92ec45d.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\encoder_CUDA.dll_0x67cf2196cb3a00347cb41ae4875e3638.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Encoder_IM.dll_0xbab3f06b65a4094e6b2d5f83e5e17bcf.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\FFWrapper.dll_0x51100ef849558500eee06bc2c76dbfeb.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\FilterFactory.dll_0x92dc420e2a13661e4cafc0a853a32676.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Filters.dll_0x07e40929215e71227fcacf0757ed7ffd.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\FiltersFF.dll_0x391785b46bd5d4e0e25d67148b73bc69.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\FrameworkQt.dll_0xe26f82d8900af8ce538ccb4fedc48cd4.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\GetMovaviLogs.exe_0x2db898eaea08bc959c143d757bcec326.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\GuiInt.dll_0x972222153fdc2081179570aef330a3ef.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\libglog-msvc-10.dll_0xb77b9a80f547e2e5debc932b9bf14f5b.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\MediaTypes.dll_0x26b15e50a07c96ccb26e097e3912d963.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Movavi.io.dll_0xc7ad21eedf00c618d8d0523b4cb5f002.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\MuxerFactory.dll_0x718a327506763c9d9d72a7493a0c0c75.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Muxers.dll_0x54a8cde4666b6588ebbcb49c96c93fd9.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\ParserFactory.dll_0xd8d40687ef1c883192d43b98422e6ea9.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\ParsersFF.dll_0x4ac8bb105b99f395c946a9995f0da504.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\PlaybackQt.dll_0xafeb54946bbdd4abb4f38cf48460e013.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\PlayerView.dll_0x5e3c79072a1f21804928f516e7f798ff.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Policies.dll_0x386a0e27bb01dc04e19e6c1534296e00.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Presets.dll_0x4c47f9f42c7eb9ed8d641332dbdcfb69.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\PresetsQt.dll_0xd7d14b8c7a2d4d75967d7f78d1c579d6.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\ProcInt.dll_0xf315311c9e7e2e26d7419653519b841b.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\PurchaseManager.dll_0x6d5e9f861ebde98b2b4f4bb7c7e855b2.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\qgif4.dll_0x24a64544e7bbcb9274b5844dbfc5259e.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\qjpeg4.dll_0x98bf4f9e2e525e0b8a481b754caf2abc.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\QtCore4.dll_0x51200cf9780b8b85b42eb0c2efee85cb.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\QtGui4.dll_0xb256b554a99d9f8fd50f561058537456.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\qtiff4.dll_0xb6290022a0cce08d31a06fe229ca62a9.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\QtNetwork4.dll_0x66d3dd43f4dcc8ba6eb9bedcd00f470b.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\QtOpenGL4.dll_0xb8fdec1cc15b5a8fb787933235453e02.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\QtWebKit4.dll_0x6113b4379c31e62ec64fa9422b6b5bed.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\quazip.dll_0xcdbab23d016f6fe72d1e65fb1f9e5490.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Resize.dll_0xaba8f613f6bb02ffbf624993c965a3d9.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\SDL.dll_0x216d11c6d2d4a0f6ac87bfb36de99ea5.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Settings.dll_0x7757ccb7cb6a97e68822bf70cb706019.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\SoftwareStatisticsService.dll_0x80e1da8ada1950cdb489b3d302b4a751.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\SSSTracker.dll_0xf8194eb1524efac95c106f4586581960.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\StreamReader.dll_0xc43d32aaf67880c49a2d4dd3ba0b2b9d.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Threading.dll_0xc759272a42d4ec64dc25f47a32f3eb38.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Tracker.dll_0x0fd5941dcfbb89257439050f79214572.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\TrackerFactory.dll_0x0a5359d93f94d4ebdf828e07cd225483.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\Transcoder.exe_0xa65a48899426c4a23111def19f43d99d.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\TranscodingControllers.dll_0x9a2d3378e050df947662aedd273815be.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\UpdateChecker.dll_0x5ed419f2e978de027d5b0a54edfc691e.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\vcContext.dll_0x7c9b6134d9ef2cacb3a8c10c88b872e1.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\VideoConverter.exe_0x30645aab268d93872ca2f14135941543.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\Manifests\VideoRenderers.dll_0x6bcef95ef0b7768c3a89f450919aa8b8.2.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\[email protected]\Nullsoft.NSIS.exehead.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\[email protected]\[email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\[email protected]\7-Zip.SfxMod.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x50F9AA1F47A909BE\sxs\[email protected]\[email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\Manifests\bspadmin.exe_0x476eef440469777c8ae4346eb89960ac.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\Manifests\bsplayer.exe.manifest_0x14bc00d4767312742c303eecff6abdec.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\Manifests\bsplayer.exe_0xd63b30a51fb17bc94f0c21dfcc227bb2.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\Manifests\codecmanager.exe_0xca4c7335b59494598d01de058e316b53.1.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\[email protected]\BST.BSPlayer.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\[email protected]\[email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\[email protected]\BST.BST.BSPlayer.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\[email protected]\[email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\[email protected]\DelphiApplication.manifest
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\SPOON\CACHE\0x521B428E3DD5BCFB\sxs\[email protected]\[email protected]
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\{09B87357-92AA-4809-AD6E-D54567D18ADD}\setup.isn
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\{1B798233-22EF-4123-BF3E-3E0791271AA4}\setup.isn
Deleted file - C:\Users\SPUNKI\AppData\Local\Temp\{514437F3-4B8D-47E8-A4DC-3F49EDE64818}\test_log.txt

========= End of CMD: =========

========= rd /s /q %temp% =========

========= End of CMD: =========

C:\Windows\System32\Drivers\etc\hosts => moved successfully
Hosts restored successfully.

========= bitsadmin /reset /allusers =========

BITSADMIN version 3.0 [ 7.5.7601 ]
BITS administration utility.
(C) Copyright 2000-2006 Microsoft Corp.

BITSAdmin is deprecated and is not guaranteed to be available in future versions of Windows.
Administrative tools for the BITS service are now provided by BITS PowerShell cmdlets.

0 out of 0 jobs canceled.

========= End of CMD: =========

========= netsh winsock reset catalog =========

Sucessfully reset the Winsock Catalog.
You must restart the computer in order to complete the reset.

========= End of CMD: =========

========= ipconfig /flushdns =========

Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========

========= RemoveProxy: =========

"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\S-1-5-21-799607816-380638346-1815449528-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => removed successfully
"HKU\S-1-5-21-799607816-380638346-1815449528-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => removed successfully

========= End of RemoveProxy: =========

=========== EmptyTemp: ==========

BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 37317194 B
Java, Flash, Steam htmlcache => 464 B
Windows/system/drivers => 31502625 B
Edge => 0 B
Chrome => 0 B
Firefox => 383420763 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 16802 B
systemprofile32 => 83158 B
LocalService => 83158 B
NetworkService => 83158 B
SPUNKI => 10448098 B

RecycleBin => 0 B
EmptyTemp: => 449.5 MB temporary data Removed.

================================

The system needed a reboot.

==== End of Fixlog 21:05:14 ====

Отворете C:\Windows\system.ini файла и от него изтрийте САМО следните два реда:

Цитат

[MCIDRV_VER]
DEVICEMB=11946401625

Затворете файла и запазете промените.

Стартирайте CMD.exe с десен бутон и Run as administrator и въведете командите (една по една и след всяка натиснете Enter):

rd /s /q "C:\Windows\M35738"

rd /s /q "C:\Windows\SysWOW64\X51334go"

преди 28 минути, grizly написа:

Деинсталирах касперски с посочения от вас инструмент, но все още не съм инсталирал за сега никаква антивирусна понеже инсталатора на касперски го имам на твърдия си диск, изпълних скрипта за почистването по-вашите инструкции с FRST и това е лог файла:

Аз написах да НЕ използвате наличния инсталатор от твърдия диск. Изтеглете наново инсталатора на Kaspersky Internet Security или тази, която ползвахте преди и я инсталирайте от чистия инсталатор. След това обновете дефинициите и направете пълна проверка на системата. Пишете за резултатите. След това ако няма проблеми ще оставя темата отворена няколко дни за да наблюдавате как се държи системата и ако няма проблеми ще се ориентираме към приключване.

Поздрави!

Отворих C:\Windows\system.ini файла и изтрих 2 та реда които посочихте и запазих промените.

След това изтеглих чисто копие на инсталатора и инсталирах касперски отново. Това го направих снощи и до днес до обяд общо взето компютъра ми се държеше нормално и не откри нищо.

Обаче днес при пускането на компютъра изведнъж касперски пак извади абсолютно същото съобщение и веднага попита дали да дезинфектира вируса Открито MEM:Virus.Win32.Sality.Gen Обект: Системна памет, срещу него като чукнах на бутон дезинфектирай го изтри и мисля че под карантина го постави.

Това е снимка на всички вируси които са поставени под карантина от касперски:

https://prikachi.net/image/PvDjw

http://alfa.kachi-snimka.info/vij.php?id=klz1603626460t.jpg

Незнам от тук нататък какво да правя и как да постъпя, вие ще кажете, нови сканирания ли да правя и ако да с кои програми по-точно?

ПОПРАВКА: Не му дадох да го изтрие а да го дезинфектира.

Момент, момент. От снимката става ясно, че заразените обекти са на другите дялове. Вие сигурни ли сте, че с KVRT сканирахте всички дялове според инструкциите. В смисъл много е важно да добавите ръчно с + Add object...

всички дялове на системата един по един... защото ми се струва, че това сте го пропуснали...

Цитат

 

Преди да натиснете бутона Start Scan от Change Parameters се убедете, че всички отметки са избрани (включително и пред System drive ако няма там) и от +Add object... вкарайте в проверката и всички налични дялове в системата ръчно.

 

Сега вместо да теглите наново KVRT директно с Kaspersky направете един FULL SCAN на системата. Преди това обаче променете настройките така:

След това изберете FULL SCAN (пълно сканиране на системата).

Всъщност дължа ви извинение, заблудил съм Ви без да искам и не нарочно.

Букви I, J са на сменями носители когато включа такива към компютъра си, а аз в същото време забравих да спомена че бях включил да изпробвам 2 твърди диска на същия компютър който го чистихме до снощи и щом го включих него веднага се появи съобщението за заплахи.

Иначе не ми пречи да пусна пълно сканиране с касперски, но ще открие пачове и кракове на програми които до сега не са ми правили проблеми изобщо но от повечето антивирусни се тълкуват като вируси.

Иначе мисля че системния ми дял е вече чист и излекуван, но нека както предложихте вие да видим дали ще имам някакви проблеми и заплахи  няколко дни и ако няма и е нормално всичко можете да маркирате темата като приключена.

Ами дори да са сменяеми устройства в описанието ви пак става ясно, че досега ПЪЛНА проверка не е пускана, защото не искате да се разделите с нелегалните софтуер. Е да, но както казах в началото, Sality е полиморфен вирус, който заразява ВСИЧКИ изпълними файлове на ВСИЧКИ дялове (явно това сте го забравили). Какво чистим тогава, като пропускаме проверката на останалите дялове? Така се въртим в кръг. Само при този тип вируси се налага пълна проверка на системата (и при някои червеи). При всички останали е необходимо да се сканира само системния дял, но не и тук. Пачовете винаги можете да ги възстановите от карантината (при условие, че не са заразени от Sality) или при условие, че наистина са чисти. Доста често потребителите решават, че намерените пачове са фалшиви тревоги и игнорират засичането (и често сигурно е така), но и доста често засичането е правилно. А сега дори да са чисти (сами по себе си), може да са заразени и от Sality. Риска е двоен просто. Та за мен, тази зараза ще е почистена едва след като направите пълна проверка на системата и на всички възможни носители, които сте включвали докато системата е била заразена (и по възможност сте заразили и тях). Видях, поне, че сте спрели Autorun и System Restore. Две важни стъпки при лекуването на Sality, но за по-сигурно аз бих проверил цялата система и всички външни устройства.

преди 42 минути, B-boy/StyLe/ написа:

 Пачовете винаги можете да ги възстановите от карантината (при условие, че не са заразени от Sality) или при условие, че наистина са чисти.

А как можем да разберем дали наистина са заразени от Sality (със сигурност дали той ли ги е заразил) и съответно да ги излекуваме/почистим от него?

В момента се изпълнява пълно сканиране с касперски.

Ами като направите пълна проверка и дори да ги премахне, то ще се види с каква дефиниция ги я засякъл. Няма друг начин. Няма как за стотици файлове да ползвате VirusTotal (а и риска така да стартирате заразен файл и да почне всичко НАНОВО е почти сигурен). Та, проблема тук е, не с какви приложения ще сканираме още, а КАКВО ще сканираме. Не са необходими използването на допълнителни инструменти. Нужно е само да се направи една ПЪЛНА проверка, от която явно много ви е страх. Ами трябва да си прецените кое ви е по-важното на вас като приоритет. Но ако е да си запазите краковете, аз не мисля, да си губя повече времето тук, защото цялата ситуация е абсурдна просто.

Поздрави!

Гошка, не се обиждай, ти от някога още по-времето когато бях с Windows XP си започнал да ми помагаш в борби с вируси за което съм ти безкрайно много благодарен жив и здрав да си и да помагаш и занапред така на всички които имат проблеми с вируси, ни най-малко не съм искал да ти загубя времето ти тук с мен специално.

Пълното сканиране с касперски приключи, прилагам лог файл:

25.10.2020 17.36.06    Пълно сканиране    Открити обекти: 1, изтрити: 1, недезинфектирани: 0    Открити: 1    Неутрализирани: 1    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 12:50 ч.    Обща продължителност: 45 минути 48 секунди    Време на завършване: 25.10.2020 г. 18:21 ч.
25.10.2020 12.44.06    Сканиране за скрити процеси (отменено)    Не са открити заплахи    Открити: 0    Неутрализирани: 0    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 09:19 ч.    Обща продължителност: 5 часа 38 минути    Време на завършване: 25.10.2020 г. 12:56 ч.
25.10.2020 12.43.19    Сканиране на външни устройства    Не са открити заплахи    Открити: 0    Неутрализирани: 0    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 09:19 ч.    Обща продължителност: 0 секунди    Време на завършване: 25.10.2020 г. 12:43 ч.
25.10.2020 12.43.18    Сканиране на външни устройства    Не са открити заплахи    Открити: 0    Неутрализирани: 0    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 09:19 ч.    Обща продължителност: 0 секунди    Време на завършване: 25.10.2020 г. 12:43 ч.
25.10.2020 12.43.18    Сканиране на външни устройства    Не са открити заплахи    Открити: 0    Неутрализирани: 0    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 09:19 ч.    Обща продължителност: 0 секунди    Време на завършване: 25.10.2020 г. 12:43 ч.
25.10.2020 12.27.48    Сканиране на външни устройства    Не са открити заплахи    Открити: 0    Неутрализирани: 0    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 05:35 ч.    Обща продължителност: 5 секунди    Време на завършване: 25.10.2020 г. 12:27 ч.
25.10.2020 12.26.12    Сканиране на външни устройства    Не са открити заплахи    Открити: 0    Неутрализирани: 0    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 05:35 ч.    Обща продължителност: 1 минута 10 секунди    Време на завършване: 25.10.2020 г. 12:27 ч.
25.10.2020 12.20.53    Сканиране на външни устройства    Открити обекти: 2, изтрити: 2, недезинфектирани: 0    Открити: 2    Неутрализирани: 2    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 05:35 ч.    Обща продължителност: 56 секунди    Време на завършване: 25.10.2020 г. 12:21 ч.
25.10.2020 12.20.51    Сканиране на външни устройства    Открити обекти: 2, изтрити: 2, недезинфектирани: 0    Открити: 2    Неутрализирани: 2    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 25.10.2020 г. 05:35 ч.    Обща продължителност: 1 минута    Време на завършване: 25.10.2020 г. 12:21 ч.
24.10.2020 23.53.00    Сканиране за скрити процеси    Не са открити заплахи    Открити: 0    Неутрализирани: 0    Не е дезинфектирано: 0    Дата на публикуване на базата данни, използвана за сканиране: 24.10.2020 г. 19:33 ч.    Обща продължителност: 10 минути 31 секунди    Време на завършване: 25.10.2020 г. 00:03 ч.

https://dox.abv.bg/download?id=4f663271a6# - Линк за сваляне

Не, аз имах предвид, че ще е загуба на време ако не проверим и останалите дялове и започнем да се въртим в кръг. А не работата ни до момента. Аз най-много се радвам на успешния ремонт на повредените системни файлове дори. От лог файла не става ясно, кой е изтрития обект, но се вижда, че при цялата пълна проверка има само един намерен файл, което е добре. Да се надяваме, че онези открити зарази на външните устройства са били последните намерени (а видях, че сте проверили и тях, което е добре). Можете да видите в карантината, кой е бил последния изтрит обект. Останалите, можете да изтриете и от карантината (говоря за тези с *.pif разширенията с името Virus.Win32.Sality.gen и autorun.unf файловете).

А иначе относно краковете, винаги можете да ги сложите в изключенията на антивирусната (но ако не сте ги сложили не се вижда в лог файла Касперски да ги е закачал).

Ами това е от мен. Наблюдавайте системата няколко дни и пишете после какво е състоянието за да знам какъв статус да и сложа.

Поздрави!

Автора на темата сподели, че няма повече проблеми и затова маркирам случая като решен.