MyCity » Ambulanta -> Arhiva Ambulante » Malwarbytes

Malwarbytes

Napisano na dan: 2.3.2016

Strana:
1
2

Malwarbytes

Sledeća strana

Pagination

Odgovori

Strana:
1
2

Ratnik84 Poslao: 02 Mar 2016 12:28 Idi na vrh
offline Ratnik84 Novi MyCity građanin Pridružio: 20 Maj 2012 Poruke: 19 Gde živiš: Čačak	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav svima; interesuje me da li neko može da mi pomogne u vezi sa problemom koji mi se javlja sa "Malwarwbytes?" Naime, u poslednjih desetak dana, prilikom završetka skeniranja, na kraju pronađe nekoliko potencijalno neželjenih programa. E sad, kada odem na opciju da ih premestim u karantin, sistem mi daje obaveštenje da je program prestao sa radom i automatski zatvara program. OS koji koristim je "Windows 7 Ultimate 64 bita." Pokusao sam da deinstaliram i ponovo instaliram Malwarbytes, prvo putem Revo unninstalera, a potom i preko posebne alatke malvarbytesclean.exe. I nakon svega toga problem je isti. Unapred hvala!

Profil

magna86 Poslao: 02 Mar 2016 12:37 Idi na vrh
offline magna86 Anti Malware Fighter Rank 2 Pridružio: 21 Jun 2008 Poruke: 6104	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav, Molim isprati ovu temu da bi dobili uvid u stanje tvog sistema; http://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html Takodje, postavi MBAM log da vidimo sta je detektovano; Postaviti izvestaj (export-ovati logfile) na uvid; Ponovo pokrenuti MBAM, klik na History tab > Application Logs. Dvoklik na 'Scan Log' koji pokazuje vreme i datum izvrsenog skeniranja. 1. U novom prozoru klik na 'Export' dugme, pa izabrati 'Text file (*.txt)'; 2. Kada se pojavi Save File dialog, izabrati da se log sacuva na Desktop. U tom istom prozoru, dole pod File name: upisi 'mbam' kao naziv izvestaja i klikni dugme Save. - Po dobijenoj poruci ("Your file has been successfully exported") izvestaj koji si nazvao kao 'mbam' bice sacuvan na Desktop. Okaci mbam.txt uz poruku koristeci opciju Prikači fajl.

Profil

Ratnik84 Poslao: 02 Mar 2016 23:00 Idi na vrh
offline Ratnik84 Novi MyCity građanin Pridružio: 20 Maj 2012 Poruke: 19 Gde živiš: Čačak	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Napisano: 02 Mar 2016 20:37 mycity.rs/must-login.png mycity.rs/must-login.png Dopuna: 02 Mar 2016 22:17 Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:02-03-2016 Ran by Ivan (administrator) on IVAN-PC (02-03-2016 20:31:31) Running from C:\Users\Ivan\Downloads Loaded Profiles: Ivan (Available Profiles: Ivan) Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (AMD) C:\Windows\System32\atiesrxx.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (AMD) C:\Windows\System32\atieclxx.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe (Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe (Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe (CHENGDU YIWO Tech Development Co., Ltd) C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\EpmNews.exe () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\TrayPopupE\TrayTipAgentE.exe (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe (ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM-x32\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [3031664 2011-04-06] (VIA) HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-07-28] (Advanced Micro Devices, Inc.) HKLM-x32\...\Run: [BCSSync] => C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe [91520 2010-01-21] (Microsoft Corporation) HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7139768 2016-02-16] (AVAST Software) HKLM-x32\...\Run: [EaseUS EPM tray] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\EpmNews.exe [2089056 2015-04-14] (CHENGDU YIWO Tech Development Co., Ltd) HKLM-x32\...\Run: [EaseUS EPM Tray Agent] => C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\TrayPopupE\TrayTipAgentE.exe [255072 2014-11-18] () HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [595504 2016-01-29] (Oracle Corporation) HKU\S-1-5-21-2534258434-3789365811-2451158048-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7404312 2015-01-20] (Piriform Ltd) HKU\S-1-5-21-2534258434-3789365811-2451158048-1000\...\Run: [OfficeSyncProcess] => C:\Program Files (x86)\Microsoft Office\Office14\MSOSYNC.EXE [717696 2010-01-16] (Microsoft Corporation) HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-10-28] (Microsoft Corporation) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-02-09] (AVAST Software) GroupPolicy: Restriction - Chrome <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0 Tcpip\..\Interfaces\{2BDCEC93-B1F5-438D-948E-0C883E71A443}: [DhcpNameServer] 192.168.1.1 0.0.0.0 Internet Explorer: ================== HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.com/?trackid=sp-006 HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?q={searchTerms} HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = HKU\S-1-5-21-2534258434-3789365811-2451158048-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://www.google.com/search?q={searchTerms} HKU\S-1-5-21-2534258434-3789365811-2451158048-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.rs/ HKU\S-1-5-21-2534258434-3789365811-2451158048-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxps://www.google.com/?trackid=sp-006 SearchScopes: HKLM -> {6586d803-df30-46d3-a89a-4136c8571d45} URL = SearchScopes: HKLM-x32 -> DefaultScope {EFE522B3-7ABD-49CB-A5C3-A2AFBBA83B9D} URL = hxxps://www.google.com/search?q={searchTerms} SearchScopes: HKLM-x32 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKLM-x32 -> {EFE522B3-7ABD-49CB-A5C3-A2AFBBA83B9D} URL = hxxps://www.google.com/search?q={searchTerms} SearchScopes: HKU\S-1-5-21-2534258434-3789365811-2451158048-1000 -> {632F07F3-19A1-4d16-A23F-E6CE9486BAB5} URL = hxxp://www.bing.com/search?q={searchTerms}&FORM=AVASDF&PC=AV01 SearchScopes: HKU\S-1-5-21-2534258434-3789365811-2451158048-1000 -> {6586d803-df30-46d3-a89a-4136c8571d45} URL = hxxps://www.google.com/search?q={searchTerms} BHO: No Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_74\bin\ssv.dll [2016-02-05] (Oracle Corporation) BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-02-09] (AVAST Software) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-02-05] (Oracle Corporation) BHO-x32: No Name -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> No File BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_74\bin\ssv.dll [2016-02-05] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-02-09] (AVAST Software) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_74\bin\jp2ssv.dll [2016-02-05] (Oracle Corporation) Toolbar: HKU\S-1-5-21-2534258434-3789365811-2451158048-1000 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File FireFox: ======== FF ProfilePath: C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\pgykchy7.default-1443393288306 FF Homepage: google.rs FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-09] () FF Plugin: @java.com/DTPlugin,version=11.74.2 -> C:\Program Files\Java\jre1.8.0_74\bin\dtplugin\npDeployJava1.dll [2016-02-05] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.74.2 -> C:\Program Files\Java\jre1.8.0_74\bin\plugin2\npjp2.dll [2016-02-05] (Oracle Corporation) FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin: @unity3d.com/UnityPlayer64,version=1.0 -> C:\Program Files\Unity\WebPlayer64\loader-x64\npUnity3D64.dll [2014-09-27] (Unity Technologies ApS) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-09] () FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [No File] FF Plugin-x32: @java.com/DTPlugin,version=11.74.2 -> C:\Program Files (x86)\Java\jre1.8.0_74\bin\dtplugin\npDeployJava1.dll [2016-02-05] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.74.2 -> C:\Program Files (x86)\Java\jre1.8.0_74\bin\plugin2\npjp2.dll [2016-02-05] (Oracle Corporation) FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation) FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.) FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.) FF Plugin HKU\S-1-5-21-2534258434-3789365811-2451158048-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Ivan\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-09] (Unity Technologies ApS) FF Extension: Adblock Plus - C:\Users\Ivan\AppData\Roaming\Mozilla\Firefox\Profiles\pgykchy7.default-1443393288306\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2016-02-23] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-02-09] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF FF Extension: Avast SafePrice - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-02-09] Chrome: ======= CHR HomePage: Default -> hxxps://www.google.rs/maps/preview#!q=Mokra+Gora%2C+5%2C+%D0%9C%D0%BE%D0%BA%D1%80%D0%B0+%D0%93%D0%BE%D1%80%D0%B0&data=!1m7!1m3!1d918!2d19.4908312!3d43.851404!2m2!1f180!2f78.23!2m1!1e3!4m12!1m11!4m8!1m3!1d2109873!2d22.2797526!3d44.1824675!3m2!1i1366!2i643!4f35!9m1!5e2&fid=7 CHR StartupUrls: Default -> "hxxps://www.google.com/?trackid=sp-006","hxxp://www.mystartsearch.com/?type=hp&ts=1414880515&from=amt&uid=ST31000340AS_9QJ2ZVMKXXXX9QJ2ZVMK","hxxp://websearch.searc-hall.info/?pid=3458&r=2014/11/05&hid=4963118503357014206&lg=EN&cc=RS&unqvl=65" CHR Profile: C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default CHR Extension: (Google документи) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-25] CHR Extension: (AdBlock) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-02-06] CHR Extension: (Avast Online Security) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-03-01] CHR Extension: (Плаћања у Chrome веб-продавници) - C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-25] CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx [2016-02-09] CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2016-02-09] Opera: ======= StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe ==================== Services (Whitelisted) ======================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [237096 2016-02-09] (AVAST Software) S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27760 2011-03-29] (VIA Technologies, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ===================== Drivers (Whitelisted) ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-02-09] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-02-09] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-02-09] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-02-09] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1065720 2016-02-09] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [463744 2016-02-23] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [165344 2016-02-09] (AVAST Software) S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2014-10-06] (The OpenVPN Project) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287016 2016-02-10] (AVAST Software) S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation) S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [18528 2014-11-18] () S3 epmntdrv; C:\Windows\SysWOW64\epmntdrv.sys [14944 2014-11-18] () S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2014-11-18] () S3 EuGdiDrv; C:\Windows\SysWOW64\EuGdiDrv.sys [10208 2014-11-18] () R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation) S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X] S3 tsusbhub; system32\drivers\tsusbhub.sys [X] S3 VGPU; System32\drivers\rdvgkmd.sys [X] ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-03-02 20:31 - 2016-03-02 20:31 - 00014943 _____ C:\Users\Ivan\Downloads\FRST.txt 2016-03-02 20:31 - 2016-03-02 20:31 - 00000000 ____D C:\FRST 2016-03-02 20:28 - 2016-03-02 20:28 - 02371584 _____ (Farbar) C:\Users\Ivan\Downloads\FRST64.exe 2016-03-01 21:56 - 2016-03-01 21:59 - 161222416 _____ (Microsoft Corporation) C:\Users\Ivan\Downloads\msert.exe 2016-03-01 21:53 - 2016-03-01 21:53 - 00002976 _____ C:\Windows\System32\Tasks\{96E29776-C487-4367-8B54-D3CD8EBC2C30} 2016-03-01 21:11 - 2016-02-19 20:02 - 00038336 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe 2016-03-01 21:11 - 2016-02-19 19:54 - 01168896 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll 2016-03-01 21:11 - 2016-02-19 15:07 - 01373184 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll 2016-03-01 21:11 - 2016-02-12 19:52 - 03169792 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll 2016-03-01 21:11 - 2016-02-12 19:52 - 00192512 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll 2016-03-01 21:11 - 2016-02-12 19:52 - 00098816 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll 2016-03-01 21:11 - 2016-02-12 19:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll 2016-03-01 21:11 - 2016-02-12 19:39 - 00174080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll 2016-03-01 21:11 - 2016-02-12 19:22 - 02610688 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll 2016-03-01 21:11 - 2016-02-12 19:19 - 00709120 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll 2016-03-01 21:11 - 2016-02-12 19:18 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe 2016-03-01 21:11 - 2016-02-12 19:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll 2016-03-01 21:11 - 2016-02-12 19:18 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe 2016-03-01 21:11 - 2016-02-12 19:18 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll 2016-03-01 21:11 - 2016-02-12 19:18 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll 2016-03-01 21:11 - 2016-02-12 19:06 - 00573440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll 2016-03-01 21:11 - 2016-02-12 19:05 - 00093696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll 2016-03-01 21:11 - 2016-02-12 19:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe 2016-03-01 21:11 - 2016-02-12 19:05 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll 2016-03-01 21:11 - 2016-02-11 15:07 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll 2016-03-01 21:11 - 2016-02-05 15:07 - 00696832 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll 2016-03-01 21:11 - 2016-02-05 15:07 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll 2016-03-01 21:11 - 2016-02-05 15:07 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll 2016-03-01 20:46 - 2016-03-02 20:28 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2016-03-01 20:46 - 2016-03-01 20:46 - 00001106 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk 2016-03-01 20:46 - 2016-03-01 20:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware 2016-03-01 20:46 - 2016-03-01 20:46 - 00000000 ____D C:\ProgramData\Malwarebytes 2016-03-01 20:46 - 2016-03-01 20:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware 2016-03-01 20:46 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys 2016-03-01 20:46 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys 2016-03-01 20:46 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys 2016-03-01 20:45 - 2016-03-01 20:46 - 22908888 _____ (Malwarebytes ) C:\Users\Ivan\Downloads\mbam-setup-2.2.0.1024.exe 2016-03-01 20:38 - 2016-03-01 20:38 - 00321848 _____ (Malwarebytes Corporation) C:\Users\Ivan\Downloads\mbam-clean-2.1.1.1001.exe 2016-02-28 23:11 - 2016-02-28 23:11 - 00002976 _____ C:\Windows\System32\Tasks\{BF67D38D-D31F-4324-AC77-528C0345E75E} 2016-02-26 23:41 - 2016-02-26 23:41 - 00002976 _____ C:\Windows\System32\Tasks\{1B5E7F6A-0012-4E34-A4D8-1E9845FE2BCD} 2016-02-26 23:18 - 2016-02-26 23:18 - 00002976 _____ C:\Windows\System32\Tasks\{174F9C21-4C91-4D5B-AA8F-F990C8927AAE} 2016-02-26 22:47 - 2016-02-26 22:47 - 00002976 _____ C:\Windows\System32\Tasks\{83EFF08F-344F-4EAF-ABAE-526C488E33AC} 2016-02-26 21:35 - 2016-02-26 21:35 - 00002976 _____ C:\Windows\System32\Tasks\{FCC2B8EE-C0C3-4EF8-B7A2-D206DDE57A57} 2016-02-26 21:26 - 2016-02-26 21:26 - 00002976 _____ C:\Windows\System32\Tasks\{8B8D12E7-9085-4069-87AB-E48C6589679F} 2016-02-26 20:45 - 2016-02-26 20:45 - 00002976 _____ C:\Windows\System32\Tasks\{AF63FF05-9294-4CF3-AE17-0E93525E33C5} 2016-02-24 21:02 - 2016-02-24 21:02 - 00002976 _____ C:\Windows\System32\Tasks\{4DB164AF-FF81-499E-BC1E-6171C993DDC3} 2016-02-23 19:28 - 2016-02-23 19:28 - 00002976 _____ C:\Windows\System32\Tasks\{8D814D8C-E46B-4EDC-8481-4610DCFC25D2} 2016-02-23 19:18 - 2016-02-23 19:18 - 00002976 _____ C:\Windows\System32\Tasks\{C4FB4A3E-9545-4D84-ADDD-0886C820AD6A} 2016-02-21 22:39 - 2016-02-21 22:39 - 00002976 _____ C:\Windows\System32\Tasks\{D563CC48-031D-4460-B9AF-815FFB417A81} 2016-02-21 22:32 - 2016-02-21 22:32 - 00002976 _____ C:\Windows\System32\Tasks\{0DC9BA0F-0744-437E-91C3-17AD93C210D0} 2016-02-21 15:07 - 2016-02-21 15:07 - 00002976 _____ C:\Windows\System32\Tasks\{635BF91B-6284-4A7F-B8C8-426CC3F4EC54} 2016-02-21 14:54 - 2016-02-21 14:54 - 00002976 _____ C:\Windows\System32\Tasks\{99D1FA49-6726-4275-8E9F-548D9F468A42} 2016-02-21 14:54 - 2016-02-21 14:54 - 00002976 _____ C:\Windows\System32\Tasks\{14711C94-6819-452A-ABC6-D45108009151} 2016-02-21 14:39 - 2016-02-21 14:39 - 00002976 _____ C:\Windows\System32\Tasks\{F21FC7B2-8F8D-496E-882A-F04A4947BB24} 2016-02-21 14:38 - 2016-02-21 14:38 - 00002976 _____ C:\Windows\System32\Tasks\{2B110463-415E-4E18-930E-6A5A96072783} 2016-02-20 15:56 - 2016-02-20 15:56 - 00002976 _____ C:\Windows\System32\Tasks\{C74D3815-D96A-49AB-9D23-838B6ECA7FCA} 2016-02-20 15:38 - 2016-02-20 15:38 - 00002976 _____ C:\Windows\System32\Tasks\{BFDD83B0-E587-4D12-BAFF-5C97F3EF7CCE} 2016-02-20 15:30 - 2016-02-20 15:30 - 00002976 _____ C:\Windows\System32\Tasks\{C0EC5736-7F5D-4DDE-AC18-48CE4A7D4252} 2016-02-20 15:28 - 2016-02-20 15:28 - 00002976 _____ C:\Windows\System32\Tasks\{2DCA4193-4310-4E6E-8140-F868DC73DC91} 2016-02-20 15:25 - 2016-02-20 15:25 - 00002976 _____ C:\Windows\System32\Tasks\{1D277071-CAEA-4AAB-8562-3041BAB6E2FE} 2016-02-20 15:20 - 2015-11-19 15:07 - 00994760 _____ (Microsoft Corporation) C:\Windows\system32\ucrtbase.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00063840 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-private-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00020832 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-math-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00019808 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-multibyte-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-string-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00017760 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-stdio-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00016224 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-runtime-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00015712 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-convert-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-time-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00014176 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-2-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00013664 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-filesystem-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-process-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-heap-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00012640 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-conio-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-utility-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-locale-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-crt-environment-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-2-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00012128 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-1.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l2-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-timezone-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l2-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:07 - 00011616 _____ (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-2-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00922432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ucrtbase.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00066400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-private-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00022368 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-math-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00019808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-multibyte-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-string-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00017760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-stdio-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00016224 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-runtime-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00015712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-convert-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-time-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00014176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-2-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00013664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-filesystem-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-process-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-heap-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00012640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-conio-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-utility-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-locale-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-crt-environment-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-2-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00012128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-1.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l2-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-timezone-l1-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l2-1-0.dll 2016-02-20 15:20 - 2015-11-19 15:06 - 00011616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-2-0.dll 2016-02-20 15:19 - 2016-01-11 20:11 - 01684416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys 2016-02-20 15:10 - 2016-02-20 15:10 - 00002976 _____ C:\Windows\System32\Tasks\{2EBA0D5A-8F38-4E66-B336-A1D7371FEFDA} 2016-02-20 14:39 - 2016-02-20 14:39 - 00002976 _____ C:\Windows\System32\Tasks\{330E6698-0AEE-4BCB-B55E-C5DC0D759B0E} 2016-02-20 14:24 - 2016-02-20 14:24 - 00002976 _____ C:\Windows\System32\Tasks\{44EE4319-2360-4477-9860-C4324BBDF032} 2016-02-20 14:21 - 2016-02-20 14:21 - 00002976 _____ C:\Windows\System32\Tasks\{2150BFD4-6B39-4EF7-85EA-D33A1E65AE36} 2016-02-20 14:18 - 2016-02-20 14:18 - 00002976 _____ C:\Windows\System32\Tasks\{4A8F8480-40FE-4060-A4D1-C5715BA5C3FA} 2016-02-19 23:59 - 2016-02-19 23:59 - 00002976 _____ C:\Windows\System32\Tasks\{2A8C51DC-A5E7-4E31-89A0-FCEA09BC00E3} 2016-02-19 23:33 - 2016-02-19 23:33 - 00002976 _____ C:\Windows\System32\Tasks\{D4B11749-4BE5-4F4A-B5C5-963F2B0FDB5E} 2016-02-19 23:17 - 2016-02-19 23:17 - 00002976 _____ C:\Windows\System32\Tasks\{FA779D9C-8AC7-4546-8570-3E45889BC192} 2016-02-19 23:15 - 2016-02-19 23:15 - 00002976 _____ C:\Windows\System32\Tasks\{671CA060-29A9-480E-8864-AF16FD097A84} 2016-02-19 22:55 - 2016-02-19 22:55 - 00002976 _____ C:\Windows\System32\Tasks\{CFD8C03D-F233-45CE-9146-3A3B412E5725} 2016-02-19 22:55 - 2016-02-19 22:55 - 00002976 _____ C:\Windows\System32\Tasks\{321CF015-E07D-4A88-8C62-7505BDC5B9AB} 2016-02-19 22:52 - 2016-02-19 22:52 - 00002976 _____ C:\Windows\System32\Tasks\{E069C2AD-D047-471E-8A30-F97AA42CBFE8} 2016-02-19 22:46 - 2016-02-19 22:46 - 00002976 _____ C:\Windows\System32\Tasks\{60E6B0D5-B7FC-4269-BBC6-3E28805C0CA5} 2016-02-19 22:30 - 2016-02-19 22:30 - 00002976 _____ C:\Windows\System32\Tasks\{686B9B4E-8CA4-46A2-A565-AD6226FED5E9} 2016-02-19 19:20 - 2016-02-19 19:20 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf 2016-02-11 20:13 - 2016-02-12 20:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2016-02-09 20:49 - 2016-01-22 21:10 - 00341200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2016-02-09 20:49 - 2016-01-22 07:40 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2016-02-09 20:49 - 2016-01-22 07:32 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2016-02-09 20:49 - 2016-01-22 07:27 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2016-02-09 20:49 - 2016-01-22 07:09 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2016-02-09 20:49 - 2016-01-22 07:08 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll 2016-02-09 20:49 - 2016-01-22 07:02 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2016-02-09 20:49 - 2016-01-22 07:01 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2016-02-09 20:49 - 2016-01-22 06:55 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2016-02-09 20:49 - 2016-01-22 06:48 - 00718336 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2016-02-09 20:49 - 2016-01-22 06:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2016-02-09 20:49 - 2016-01-22 06:38 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll 2016-02-09 20:49 - 2016-01-22 06:35 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2016-02-09 20:49 - 2016-01-22 06:34 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2016-02-09 20:49 - 2016-01-22 06:33 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll 2016-02-09 20:49 - 2016-01-22 06:25 - 00687104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2016-02-09 20:48 - 2016-02-06 11:48 - 25839104 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2016-02-09 20:48 - 2016-02-06 11:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2016-02-09 20:48 - 2016-02-06 11:24 - 02887680 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2016-02-09 20:48 - 2016-02-06 11:11 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2016-02-09 20:48 - 2016-02-06 11:10 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2016-02-09 20:48 - 2016-02-06 11:01 - 20366848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2016-02-09 20:48 - 2016-02-06 10:54 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2016-02-09 20:48 - 2016-02-06 10:43 - 02280448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2016-02-09 20:48 - 2016-02-06 10:38 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2016-02-09 20:48 - 2016-02-06 10:37 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2016-02-09 20:48 - 2016-02-06 10:32 - 14458368 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2016-02-09 20:48 - 2016-02-06 10:16 - 12857856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2016-02-09 20:48 - 2016-02-06 10:09 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2016-02-09 20:48 - 2016-02-06 09:54 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2016-02-09 20:48 - 2016-01-22 21:31 - 00387784 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2016-02-09 20:48 - 2016-01-22 07:56 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2016-02-09 20:48 - 2016-01-22 07:41 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2016-02-09 20:48 - 2016-01-22 07:40 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2016-02-09 20:48 - 2016-01-22 07:40 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2016-02-09 20:48 - 2016-01-22 07:40 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2016-02-09 20:48 - 2016-01-22 07:33 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2016-02-09 20:48 - 2016-01-22 07:29 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2016-02-09 20:48 - 2016-01-22 07:27 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2016-02-09 20:48 - 2016-01-22 07:27 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2016-02-09 20:48 - 2016-01-22 07:20 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2016-02-09 20:48 - 2016-01-22 07:17 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2016-02-09 20:48 - 2016-01-22 07:05 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2016-02-09 20:48 - 2016-01-22 07:04 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2016-02-09 20:48 - 2016-01-22 07:02 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2016-02-09 20:48 - 2016-01-22 07:02 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2016-02-09 20:48 - 2016-01-22 07:01 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2016-02-09 20:48 - 2016-01-22 07:00 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll 2016-02-09 20:48 - 2016-01-22 07:00 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2016-02-09 20:48 - 2016-01-22 06:55 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2016-02-09 20:48 - 2016-01-22 06:51 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2016-02-09 20:48 - 2016-01-22 06:51 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2016-02-09 20:48 - 2016-01-22 06:50 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll 2016-02-09 20:48 - 2016-01-22 06:47 - 00798208 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2016-02-09 20:48 - 2016-01-22 06:46 - 02123264 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2016-02-09 20:48 - 2016-01-22 06:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2016-02-09 20:48 - 2016-01-22 06:43 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2016-02-09 20:48 - 2016-01-22 06:37 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2016-02-09 20:48 - 2016-01-22 06:35 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2016-02-09 20:48 - 2016-01-22 06:31 - 02597376 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2016-02-09 20:48 - 2016-01-22 06:27 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll 2016-02-09 20:48 - 2016-01-22 06:24 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2016-02-09 20:48 - 2016-01-22 06:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2016-02-09 20:48 - 2016-01-22 06:08 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2016-02-09 20:48 - 2016-01-22 06:07 - 02120704 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2016-02-09 20:48 - 2016-01-22 06:02 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2016-02-09 20:47 - 2016-01-16 20:01 - 02085888 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll 2016-02-09 20:47 - 2016-01-16 19:36 - 01413632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll 2016-02-09 20:47 - 2016-01-07 18:53 - 03211776 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2016-02-09 20:47 - 2016-01-07 18:42 - 00141312 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxdav.sys 2016-02-09 20:47 - 2016-01-06 20:02 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll 2016-02-09 20:47 - 2016-01-06 20:02 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll 2016-02-09 20:47 - 2016-01-06 19:41 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll 2016-02-09 20:47 - 2015-12-20 19:50 - 03180544 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll 2016-02-09 20:47 - 2015-12-20 19:50 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll 2016-02-09 20:47 - 2015-12-20 15:08 - 00243200 _____ (Microsoft Corporation) C:\Windows\system32\rdpudd.dll 2016-02-09 20:46 - 2016-01-22 07:27 - 05573056 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe 2016-02-09 20:46 - 2016-01-22 07:27 - 00154560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys 2016-02-09 20:46 - 2016-01-22 07:27 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys 2016-02-09 20:46 - 2016-01-22 07:24 - 01733592 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll 2016-02-09 20:46 - 2016-01-22 07:20 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2016-02-09 20:46 - 2016-01-22 07:19 - 01214464 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll 2016-02-09 20:46 - 2016-01-22 07:19 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll 2016-02-09 20:46 - 2016-01-22 07:19 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll 2016-02-09 20:46 - 2016-01-22 07:18 - 00961024 _____ (Microsoft Corporation) C:\Windows\system32\CPFilters.dll 2016-02-09 20:46 - 2016-01-22 07:18 - 00723968 _____ (Microsoft Corporation) C:\Windows\system32\EncDec.dll 2016-02-09 20:46 - 2016-01-22 07:18 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2016-02-09 20:46 - 2016-01-22 07:17 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll 2016-02-09 20:46 - 2016-01-22 07:17 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll 2016-02-09 20:46 - 2016-01-22 07:17 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll 2016-02-09 20:46 - 2016-01-22 07:16 - 01461248 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll 2016-02-09 20:46 - 2016-01-22 07:16 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll 2016-02-09 20:46 - 2016-01-22 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll 2016-02-09 20:46 - 2016-01-22 07:15 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2016-02-09 20:46 - 2016-01-22 07:15 - 00730112 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll 2016-02-09 20:46 - 2016-01-22 07:15 - 00422400 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2016-02-09 20:46 - 2016-01-22 07:13 - 03993536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe 2016-02-09 20:46 - 2016-01-22 07:13 - 03938752 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe 2016-02-09 20:46 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll 2016-02-09 20:46 - 2016-01-22 07:13 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll 2016-02-09 20:46 - 2016-01-22 07:13 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00880128 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:12 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 07:09 - 01314328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll 2016-02-09 20:46 - 2016-01-22 07:06 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2016-02-09 20:46 - 2016-01-22 07:06 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll 2016-02-09 20:46 - 2016-01-22 07:06 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2016-02-09 20:46 - 2016-01-22 07:06 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll 2016-02-09 20:46 - 2016-01-22 07:06 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll 2016-02-09 20:46 - 2016-01-22 07:06 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll 2016-02-09 20:46 - 2016-01-22 07:06 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll 2016-02-09 20:46 - 2016-01-22 07:06 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2016-02-09 20:46 - 2016-01-22 07:05 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll 2016-02-09 20:46 - 2016-01-22 07:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll 2016-02-09 20:46 - 2016-01-22 07:04 - 00642048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\CPFilters.dll 2016-02-09 20:46 - 2016-01-22 07:04 - 00535040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll 2016-02-09 20:46 - 2016-01-22 07:02 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll 2016-02-09 20:46 - 2016-01-22 07:02 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll 2016-02-09 20:46 - 2016-01-22 07:02 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll 2016-02-09 20:46 - 2016-01-22 07:02 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll 2016-02-09 20:46 - 2016-01-22 07:02 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll 2016-02-09 20:46 - 2016-01-22 07:02 - 00114176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll 2016-02-09 20:46 - 2016-01-22 07:02 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00642560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 06:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe 2016-02-09 20:46 - 2016-01-22 06:07 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2016-02-09 20:46 - 2016-01-22 06:07 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe 2016-02-09 20:46 - 2016-01-22 06:05 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe 2016-02-09 20:46 - 2016-01-22 05:59 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys 2016-02-09 20:46 - 2016-01-22 05:58 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys 2016-02-09 20:46 - 2016-01-22 05:58 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys 2016-02-09 20:46 - 2016-01-22 05:57 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe 2016-02-09 20:46 - 2016-01-22 05:57 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe 2016-02-09 20:46 - 2016-01-22 05:53 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2016-02-09 20:46 - 2016-01-22 05:53 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2016-02-09 20:46 - 2016-01-22 05:53 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2016-02-09 20:46 - 2016-01-22 05:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2016-02-09 20:46 - 2016-01-22 05:51 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll 2016-02-09 20:46 - 2016-01-22 05:51 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 05:51 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 05:51 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2016-02-09 20:46 - 2016-01-22 05:51 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2016-02-09 20:10 - 2016-02-09 20:09 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2016-02-09 20:09 - 2016-02-09 20:09 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr 2016-02-06 23:38 - 2016-02-06 23:38 - 00001040 _____ C:\Users\Ivan\Documents\cc_20160206_233816.reg 2016-02-06 22:45 - 2016-01-22 07:19 - 14179840 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll 2016-02-06 22:45 - 2016-01-22 07:15 - 01866752 _____ (Microsoft Corporation) C:\Windows\system32\ExplorerFrame.dll 2016-02-06 22:45 - 2016-01-22 07:12 - 01940992 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll 2016-02-06 22:45 - 2016-01-22 07:05 - 12877824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll 2016-02-06 22:45 - 2016-01-22 07:00 - 01498624 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ExplorerFrame.dll 2016-02-06 22:45 - 2016-01-22 06:59 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll 2016-02-06 22:45 - 2016-01-22 06:19 - 03231232 _____ (Microsoft Corporation) C:\Windows\explorer.exe 2016-02-06 22:45 - 2016-01-22 06:12 - 02973184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\explorer.exe 2016-02-06 22:45 - 2015-12-16 19:55 - 00069120 _____ (Microsoft Corporation) C:\Windows\system32\nlsbres.dll 2016-02-06 22:45 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\kbdgeoqw.dll 2016-02-06 22:45 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZEL.DLL 2016-02-06 22:45 - 2015-12-16 19:53 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDAZE.DLL 2016-02-06 22:45 - 2015-12-16 19:48 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZE.DLL 2016-02-06 22:45 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kbdgeoqw.dll 2016-02-06 22:45 - 2015-12-16 19:48 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDAZEL.DLL 2016-02-06 22:45 - 2015-12-16 19:47 - 00069120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\nlsbres.dll 2016-02-05 21:14 - 2016-02-05 21:13 - 00110176 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2016-03-02 20:20 - 2015-01-04 20:20 - 00001334 _____ C:\Windows\Tasks\EIQWMN.job 2016-03-02 20:20 - 2015-01-04 20:20 - 00001334 _____ C:\Windows\Tasks\DLAUVH.job 2016-03-02 20:20 - 2015-01-04 20:19 - 00001334 _____ C:\Windows\Tasks\QVOZFC.job 2016-03-02 20:19 - 2015-01-04 20:19 - 00001330 _____ C:\Windows\Tasks\XBPD.job 2016-03-02 20:18 - 2009-07-14 05:45 - 00012624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2016-03-02 20:18 - 2009-07-14 05:45 - 00012624 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2016-03-02 20:11 - 2015-12-05 20:55 - 00003844 _____ C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1449345352 2016-03-02 20:11 - 2014-10-04 22:35 - 00000000 ____D C:\Program Files (x86)\Opera 2016-03-02 20:10 - 2009-07-14 06:13 - 00782470 _____ C:\Windows\system32\PerfStringBackup.INI 2016-03-02 20:10 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf 2016-03-02 20:05 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2016-03-01 23:35 - 2014-10-06 21:45 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2016-03-01 23:00 - 2015-10-21 19:44 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job 2016-03-01 21:11 - 2015-04-08 19:31 - 00000000 ____D C:\Windows\system32\appraiser 2016-03-01 20:48 - 2015-03-25 00:29 - 00003918 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{C5F15B88-C145-44B0-95CC-0C25FA8970BC} 2016-03-01 20:41 - 2015-02-02 20:45 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2016-02-26 21:46 - 2015-03-30 19:58 - 00000000 ___SD C:\Windows\SysWOW64\GWX 2016-02-26 21:46 - 2015-03-30 19:58 - 00000000 ___SD C:\Windows\system32\GWX 2016-02-23 21:17 - 2015-09-11 21:56 - 00000000 ____D C:\Windows\rescache 2016-02-23 19:19 - 2015-02-02 20:45 - 00463744 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys 2016-02-21 14:34 - 2009-07-14 06:08 - 00032576 _____ C:\Windows\Tasks\SCHEDLGU.TXT 2016-02-20 15:03 - 2015-11-25 22:34 - 00002214 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2016-02-20 15:03 - 2015-11-25 22:34 - 00002185 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2016-02-16 19:13 - 2015-11-01 23:48 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk 2016-02-12 20:05 - 2015-09-27 23:46 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2016-02-10 20:05 - 2015-02-02 20:45 - 00287016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswvmm.sys 2016-02-09 22:35 - 2014-10-06 21:45 - 00003768 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2016-02-09 22:35 - 2014-10-04 18:50 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2016-02-09 22:35 - 2014-10-04 18:50 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2016-02-09 22:04 - 2009-07-14 05:45 - 00408584 _____ C:\Windows\system32\FNTCACHE.DAT 2016-02-09 22:02 - 2009-07-14 08:46 - 00000000 ____D C:\Program Files\Windows Journal 2016-02-09 22:01 - 2014-10-10 21:13 - 00000000 ____D C:\Windows\system32\MRT 2016-02-09 21:57 - 2014-10-10 21:13 - 146614896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2016-02-09 20:09 - 2015-02-02 20:45 - 01065720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys 2016-02-09 20:09 - 2015-02-02 20:45 - 00165344 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2016-02-09 20:09 - 2015-02-02 20:45 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2016-02-09 20:09 - 2015-02-02 20:45 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2016-02-09 20:09 - 2015-02-02 20:45 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2016-02-09 20:09 - 2015-02-02 20:45 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2016-02-06 22:58 - 2015-04-08 19:31 - 00000000 ___SD C:\Windows\system32\CompatTel 2016-02-06 22:51 - 2014-10-04 20:30 - 00774592 _____ C:\Windows\SysWOW64\PerfStringBackup.INI 2016-02-05 21:15 - 2014-10-24 21:04 - 00000000 ____D C:\ProgramData\Oracle 2016-02-05 21:14 - 2015-03-06 21:38 - 00000000 ____D C:\Program Files (x86)\Java 2016-02-05 21:14 - 2014-10-24 21:04 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java 2016-02-05 21:14 - 2014-10-24 21:04 - 00000000 ____D C:\Program Files\Java 2016-02-05 21:13 - 2015-08-19 20:07 - 00000000 ____D C:\Users\Ivan\.oracle_jre_usage 2016-02-05 21:13 - 2014-10-24 21:05 - 00110176 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll 2016-02-05 21:12 - 2016-01-25 19:59 - 00097888 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll 2016-02-03 20:55 - 2015-10-21 19:44 - 00003894 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA 2016-02-03 20:55 - 2015-10-21 19:44 - 00003642 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore 2016-02-03 20:55 - 2015-10-21 19:44 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job 2016-02-02 22:52 - 2015-12-20 20:16 - 00000000 ____D C:\ProgramData\YTD Video Downloader ==================== Files in the root of some directories ======= 2015-10-20 20:56 - 2015-10-20 21:06 - 6420480 _____ () C:\Program Files (x86)\GUTE38B.tmp 2015-11-24 00:18 - 2015-11-24 00:18 - 0003584 _____ () C:\Users\Ivan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 2015-09-30 18:24 - 2015-09-30 18:24 - 0007609 _____ () C:\Users\Ivan\AppData\Local\Resmon.ResmonCfg ==================== Bamital & volsnap ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\system32\winlogon.exe => File is digitally signed C:\Windows\system32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\system32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\system32\services.exe => File is digitally signed C:\Windows\system32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\system32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\system32\rpcss.dll => File is digitally signed C:\Windows\system32\dnsapi.dll => File is digitally signed C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2016-02-22 00:19 ==================== End of FRST.txt ============================ Additional scan result of Farbar Recovery Scan Tool (x64) Version:02-03-2016 Ran by Ivan (2016-03-02 20:32:08) Running from C:\Users\Ivan\Downloads Windows 7 Ultimate Service Pack 1 (X64) (2014-10-04 17:22:32) Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-2534258434-3789365811-2451158048-500 - Administrator - Disabled) Guest (S-1-5-21-2534258434-3789365811-2451158048-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-2534258434-3789365811-2451158048-1002 - Limited - Enabled) Ivan (S-1-5-21-2534258434-3789365811-2451158048-1000 - Administrator - Enabled) => C:\Users\Ivan ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== (Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Acrobat Reader DC (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AC0F074E4100}) (Version: 15.010.20059 - Adobe Systems Incorporated) Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated) Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated) Adobe Flash Player 20 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated) Avast Free Antivirus (HKLM-x32\...\Avast) (Version: 11.1.2253 - AVAST Software) CCleaner (HKLM\...\CCleaner) (Version: 5.02 - Piriform) EaseUS Partition Master 10.5 (HKLM-x32\...\EaseUS Partition Master_is1) (Version: - EaseUS) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.) Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden Java 8 Update 71 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418071F0}) (Version: 8.0.710.15 - Oracle Corporation) Java 8 Update 71 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218071F0}) (Version: 8.0.710.15 - Oracle Corporation) Java 8 Update 74 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418074F0}) (Version: 8.0.740.2 - Oracle Corporation) Java 8 Update 74 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218074F0}) (Version: 8.0.740.2 - Oracle Corporation) Malwarebytes Anti-Malware version 2.2.0.1024 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.0.1024 - Malwarebytes) Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation) Microsoft Office Professional Plus 2010 (HKLM-x32\...\Office14.PROPLUS) (Version: 14.0.4734.1000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation) Mozilla Firefox 44.0.2 (x86 sr) (HKLM-x32\...\Mozilla Firefox 44.0.2 (x86 sr)) (Version: 44.0.2 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 44.0.2.5884 - Mozilla) Opera Stable 35.0.2066.92 (HKLM-x32\...\Opera 35.0.2066.92) (Version: 35.0.2066.92 - Opera Software) Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group) Unity Web Player (HKU\S-1-5-21-2534258434-3789365811-2451158048-1000\...\UnityWebPlayer) (Version: 4.5.4f2 - Unity Technologies ApS) Unity Web Player (x64) (All users) (HKLM\...\UnityWebPlayer) (Version: 4.5.4f2 - Unity Technologies ApS) World of Warplanes (HKU\S-1-5-21-2534258434-3789365811-2451158048-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813eu}_is1) (Version: - Wargaming.net) YTD Video Downloader 5.1.0 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 5.1.0 - GreenTree Applications SRL) <==== ATTENTION ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {015FFF4D-5134-4021-A2E6-17DE6174193A} - System32\Tasks\{D4B11749-4BE5-4F4A-B5C5-963F2B0FDB5E} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {02AB36E8-6042-4D4F-A939-65EC4FBDCFFE} - System32\Tasks\EIQWMN => C:\Users\Ivan\AppData\Roaming\EIQWMN.exe <==== ATTENTION Task: {0BAA09F6-DA5E-4D13-8A7E-AB0D2573B5C2} - System32\Tasks\{2A8C51DC-A5E7-4E31-89A0-FCEA09BC00E3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {0D0662ED-05A8-44BA-90C8-A69CC61A234F} - System32\Tasks\Opera scheduled Autoupdate 1449345352 => C:\Program Files (x86)\Opera\launcher.exe [2016-03-01] (Opera Software) Task: {0E741BB8-20AF-42CB-B561-E0D864098989} - System32\Tasks\{671CA060-29A9-480E-8864-AF16FD097A84} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {0EE75584-7B9F-41E3-A4CB-E608F0FDDF85} - System32\Tasks\{14711C94-6819-452A-ABC6-D45108009151} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {1582388E-6534-43DA-B73B-C0EFBCA21AAA} - System32\Tasks\{BFDD83B0-E587-4D12-BAFF-5C97F3EF7CCE} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {1B185380-806D-4871-9709-6EB2BDB24404} - System32\Tasks\{F21FC7B2-8F8D-496E-882A-F04A4947BB24} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {1D470CD7-B9E3-4AA4-A0C0-429F06D044CD} - System32\Tasks\{30322987-3804-463B-B1F1-75A31D4B7F6B} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller" Task: {268C7E4E-90D9-4222-8844-1DD12903AEF6} - System32\Tasks\{321CF015-E07D-4A88-8C62-7505BDC5B9AB} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {28BC46F8-3F14-4942-93EA-C039D3C295B3} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2016-02-09] (AVAST Software) Task: {33E95C4D-8D28-4CC9-B9D4-1812E644D3E7} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-09] (Adobe Systems Incorporated) Task: {373B076B-2208-499C-A9C5-CA52900862C1} - System32\Tasks\{C74D3815-D96A-49AB-9D23-838B6ECA7FCA} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {39F1A91E-B009-41A1-A22D-A99A505CEA21} - System32\Tasks\SafeZone scheduled Autoupdate 1448224517 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe Task: {3BFF6BA3-1D4C-4B66-910F-B65831959235} - System32\Tasks\{2DCA4193-4310-4E6E-8140-F868DC73DC91} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {3EC1C8FB-AA2D-4B06-89EA-D4CD6926D99C} - System32\Tasks\{96E29776-C487-4367-8B54-D3CD8EBC2C30} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {464C53AE-8A98-4506-ACF7-ED2851E845B2} - System32\Tasks\{AF63FF05-9294-4CF3-AE17-0E93525E33C5} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {5A0B6DE9-FA01-45B0-80D4-64B43776C807} - System32\Tasks\{2150BFD4-6B39-4EF7-85EA-D33A1E65AE36} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {5AA2C366-0A64-4EFA-B902-771F97895138} - System32\Tasks\{1B5E7F6A-0012-4E34-A4D8-1E9845FE2BCD} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {698F6018-9B9B-4AD7-B5D0-38921361B978} - System32\Tasks\QVOZFC => C:\Users\Ivan\AppData\Roaming\QVOZFC.exe <==== ATTENTION Task: {6BACB482-BEC0-4CB4-95EB-18EBC6F9CFC8} - System32\Tasks\{44EE4319-2360-4477-9860-C4324BBDF032} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {6BD08525-465D-4A17-90FC-2AEF0BFF1922} - System32\Tasks\RichMediaHelperService => C:\Users\Ivan\AppData\Local\Rich Media Player\data\rmhelper.exe Task: {78A7E206-0E8D-4B47-A022-6053F9F9F320} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-21] (Google Inc.) Task: {7C906351-EAD1-4132-969A-B95CB3C1B98C} - System32\Tasks\{4DB164AF-FF81-499E-BC1E-6171C993DDC3} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {8667DEC6-6E93-44D6-AD78-A7B476C10500} - System32\Tasks\{2B110463-415E-4E18-930E-6A5A96072783} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {8A483B56-7B4F-40A4-948C-CE6AD21A5740} - System32\Tasks\{330E6698-0AEE-4BCB-B55E-C5DC0D759B0E} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {9226988C-120F-4E47-9D4D-3B912495A0D3} - System32\Tasks\{99D1FA49-6726-4275-8E9F-548D9F468A42} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {96EE77A0-440F-4DF3-B387-C98CBA40FB1D} - System32\Tasks\{C0EC5736-7F5D-4DDE-AC18-48CE4A7D4252} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {98520E51-87FF-465A-8945-EE88C399502A} - System32\Tasks\{60E6B0D5-B7FC-4269-BBC6-3E28805C0CA5} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {9915F475-4C84-4832-B377-88139508423D} - System32\Tasks\XBPD => C:\Users\Ivan\AppData\Roaming\XBPD.exe <==== ATTENTION Task: {A131248D-2518-46A0-9472-83D4B2909C61} - System32\Tasks\{686B9B4E-8CA4-46A2-A565-AD6226FED5E9} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {AF523E39-00CD-4E94-BCF6-4F65CFAE29E7} - System32\Tasks\{0DC9BA0F-0744-437E-91C3-17AD93C210D0} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {B1BD0DE3-9F67-400F-A399-B6BCB4245C2B} - System32\Tasks\{2EBA0D5A-8F38-4E66-B336-A1D7371FEFDA} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {B9A7DFB3-86CB-42D2-BAAA-AE2247C2FD21} - System32\Tasks\{635BF91B-6284-4A7F-B8C8-426CC3F4EC54} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {BCAF5BDB-C8F4-43CF-86E6-A9D14762D801} - System32\Tasks\{8D814D8C-E46B-4EDC-8481-4610DCFC25D2} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {BCBCE5A1-88ED-4D58-BBCE-A972FF34934F} - System32\Tasks\{E069C2AD-D047-471E-8A30-F97AA42CBFE8} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {C3C56B75-ABDC-441D-8147-759CF1F45899} - System32\Tasks\{83EFF08F-344F-4EAF-ABAE-526C488E33AC} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {CEF59C32-12EA-4D14-9E0F-2E315FA4D42D} - System32\Tasks\{4A8F8480-40FE-4060-A4D1-C5715BA5C3FA} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {D03F0D50-222E-4FC9-A9C8-13FD226623AF} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-10-21] (Google Inc.) Task: {D1D6A967-17EF-453B-9AD6-7489000F7681} - System32\Tasks\{174F9C21-4C91-4D5B-AA8F-F990C8927AAE} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {D571D0EB-FD8B-4C31-8054-29A2F8DCB4EE} - System32\Tasks\{FCC2B8EE-C0C3-4EF8-B7A2-D206DDE57A57} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {DF1B4CD6-929A-4B4C-805D-74097A7DFA90} - System32\Tasks\{CFD8C03D-F233-45CE-9146-3A3B412E5725} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {E1B30DD7-FE30-4FCB-B38C-7590D3AFEA69} - System32\Tasks\{1D277071-CAEA-4AAB-8562-3041BAB6E2FE} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {E2212D65-44A9-41FC-85EA-8FD0084D7E13} - System32\Tasks\DLAUVH => C:\Users\Ivan\AppData\Roaming\DLAUVH.exe <==== ATTENTION Task: {E60A86A7-ABF2-4E5C-A7F7-C34069C1F686} - System32\Tasks\{8B8D12E7-9085-4069-87AB-E48C6589679F} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {E9BB2799-5ABD-4370-BE2E-5374973D6987} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-01-20] (Piriform Ltd) Task: {EB55E547-4B8E-4F8E-84E8-007EEA3D904F} - System32\Tasks\{C4FB4A3E-9545-4D84-ADDD-0886C820AD6A} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {F03E47FB-E9AE-4045-AF18-91F29F17BB00} - System32\Tasks\{D563CC48-031D-4460-B9AF-815FFB417A81} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {F0579419-6015-4603-8A4E-7E51BB1241A1} - System32\Tasks\{BF67D38D-D31F-4324-AC77-528C0345E75E} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) Task: {F0CF495F-0E2D-4E28-8E24-C8CEEED72559} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-13] (Adobe Systems Incorporated) Task: {F52CEEDD-FDBB-4346-BE13-2615A071B0EE} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe <==== ATTENTION Task: {FE34B27B-7D3D-4805-B960-4F1A6393E012} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-02-17] (AVAST Software) Task: {FE9F2875-3D70-4A33-B16D-0C16CAD5DD86} - System32\Tasks\{FA779D9C-8AC7-4546-8570-3E45889BC192} => C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe [2015-10-05] (Malwarebytes) (If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe Task: C:\Windows\Tasks\DLAUVH.job => C:\Users\Ivan\AppData\Roaming\DLAUVH.exe <==== ATTENTION Task: C:\Windows\Tasks\EIQWMN.job => C:\Users\Ivan\AppData\Roaming\EIQWMN.exe <==== ATTENTION Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe Task: C:\Windows\Tasks\QVOZFC.job => C:\Users\Ivan\AppData\Roaming\QVOZFC.exe <==== ATTENTION Task: C:\Windows\Tasks\XBPD.job => C:\Users\Ivan\AppData\Roaming\XBPD.exe <==== ATTENTION ==================== Shortcuts ============================= (The entries could be listed to be restored or removed.) ==================== Loaded Modules (Whitelisted) ============== 2010-01-09 20:17 - 2010-01-09 20:17 - 04254560 _____ () C:\Program Files\Common Files\Microsoft Shared\OFFICE14\Cultures\OFFICE.ODF 2010-01-21 01:40 - 2010-01-21 01:40 - 08794464 _____ () C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll 2014-10-04 18:29 - 2011-04-06 11:20 - 00078448 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\QsApoApi64.dll 2014-10-04 18:29 - 2011-04-06 11:20 - 00386160 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Dts2ApoApi64.dll 2014-10-04 18:29 - 2011-04-06 11:20 - 00621168 ____R () C:\Program Files (x86)\VIA\VIAudioi\VDeck\Skin.dll 2015-06-03 20:18 - 2014-11-18 13:44 - 00255072 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\TrayPopupE\TrayTipAgentE.exe 2015-01-21 03:06 - 2015-01-21 03:06 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-2074.dll 2011-07-28 16:55 - 2011-07-28 16:55 - 00369152 _____ () C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLI.Aspect.CrossDisplay.Graphics.Dashboard.dll 2016-02-09 20:09 - 2016-02-09 20:09 - 00113496 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2016-02-09 20:09 - 2016-02-09 20:09 - 00133768 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2016-03-01 20:42 - 2016-03-01 20:42 - 02836480 _____ () C:\Program Files\AVAST Software\Avast\defs\16030102\algo.dll 2016-02-09 20:09 - 2016-02-09 20:09 - 00480760 _____ () C:\Program Files\AVAST Software\Avast\ffl2.dll 2016-03-02 20:07 - 2016-03-02 20:07 - 02836992 _____ () C:\Program Files\AVAST Software\Avast\defs\16030201\algo.dll 2015-12-03 21:57 - 2015-12-03 21:57 - 40539648 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-06-03 20:18 - 2014-02-13 14:27 - 00222792 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\TrayPopupE\traynet.dll 2015-06-03 20:18 - 2014-02-13 14:27 - 00275528 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\TrayPopupE\libcurl.dll 2015-06-03 20:18 - 2014-02-13 14:27 - 00113166 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\TrayPopupE\zlib1.dll 2015-06-03 20:18 - 2014-02-13 14:27 - 00249928 _____ () C:\Program Files (x86)\EaseUS\EaseUS Partition Master 10.5\bin\TrayPopupE\uexper.dll 2010-01-09 20:18 - 2010-01-09 20:18 - 04254560 _____ () C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF 2010-01-21 01:34 - 2010-01-21 01:34 - 08793952 _____ () C:\Program Files (x86)\Microsoft Office\Office14\1033\GrooveIntlResource.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) ==================== Safe Mode (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-2534258434-3789365811-2451158048-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ivan\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall is enabled. ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{25E5D168-069E-4D0B-AD08-6EFF315AD5D6}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{480B93E6-D912-447B-9BD7-4740F37C1EBB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{9CC3EDD0-FF4E-4045-B0FE-B379B094B9E5}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{80F58314-7309-4AAE-98E5-4114983F3B6B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{CEB2DFB2-D82D-4AF7-820A-91EBAC1D7F18}] => (Allow) C:\Games\World_of_Warplanes\WoWPLauncher.exe FirewallRules: [{D32B9CF4-8729-4736-83BF-6B83E52B8358}] => (Allow) C:\Games\World_of_Warplanes\WoWPLauncher.exe FirewallRules: [{B0A8C6C0-C3DE-4C51-A8C9-AAA2F1780D60}] => (Allow) C:\Games\World_of_Warplanes\worldofwarplanes.exe FirewallRules: [{F3E9E458-9CD0-4DF7-BAE9-7186E832CB5D}] => (Allow) C:\Games\World_of_Warplanes\worldofwarplanes.exe FirewallRules: [{24B32AAE-046A-42C4-96BE-22D8C5A3A702}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ==================== Restore Points ========================= 23-02-2016 19:20:33 Windows Update 26-02-2016 21:46:18 Windows Update 26-02-2016 22:59:05 Revo Uninstaller's restore point - Malwarebytes Anti-Malware version 2.2.0.1024 26-02-2016 23:00:09 Revo Uninstaller's restore point - Malwarebytes Anti-Malware version 2.2.0.1024 01-03-2016 19:33:19 Windows Update 01-03-2016 21:11:33 Windows Update ==================== Faulty Device Manager Devices ============= Name: avast! SecureLine TAP Adapter v3 Description: avast! SecureLine TAP Adapter v3 Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318} Manufacturer: TAP-Windows Provider V9 Service: aswTap Problem: : This device is disabled. (Code 22) Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions. ==================== Event log errors: ========================= Application errors: ================== Error: (03/02/2016 08:27:41 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: mbam.exe, version: 2.3.125.0, time stamp: 0x5612a56b Faulting module name: ntdll.dll, version: 6.1.7601.19135, time stamp: 0x56a1c6fa Exception code: 0xc0000005 Fault offset: 0x00065852 Faulting process id: 0x106c Faulting application start time: 0xmbam.exe0 Faulting application path: mbam.exe1 Faulting module path: mbam.exe2 Report Id: mbam.exe3 Error: (03/01/2016 10:12:41 PM) (Source: SideBySide) (EventID: 59) (User: ) Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3. Invalid Xml syntax. Error: (03/01/2016 10:02:26 PM) (Source: SideBySide) (EventID: 59) (User: ) Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3. Invalid Xml syntax. Error: (03/01/2016 09:55:34 PM) (Source: SideBySide) (EventID: 59) (User: ) Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3. Invalid Xml syntax. Error: (03/01/2016 08:56:58 PM) (Source: SideBySide) (EventID: 59) (User: ) Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3. Invalid Xml syntax. Error: (03/01/2016 08:56:36 PM) (Source: SideBySide) (EventID: 59) (User: ) Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3. Invalid Xml syntax. Error: (03/01/2016 08:54:58 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: mbam.exe, version: 2.3.125.0, time stamp: 0x5612a56b Faulting module name: ntdll.dll, version: 6.1.7601.19135, time stamp: 0x56a1c6fa Exception code: 0xc0000005 Fault offset: 0x00065852 Faulting process id: 0xbc4 Faulting application start time: 0xmbam.exe0 Faulting application path: mbam.exe1 Faulting module path: mbam.exe2 Report Id: mbam.exe3 Error: (03/01/2016 08:45:14 PM) (Source: SideBySide) (EventID: 59) (User: ) Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3. Invalid Xml syntax. Error: (03/01/2016 08:45:08 PM) (Source: SideBySide) (EventID: 59) (User: ) Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3. Invalid Xml syntax. Error: (03/01/2016 08:37:23 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Faulting application name: mbam.exe, version: 2.3.125.0, time stamp: 0x5612a56b Faulting module name: ntdll.dll, version: 6.1.7601.19135, time stamp: 0x56a1c6fa Exception code: 0xc0000005 Fault offset: 0x00065852 Faulting process id: 0x624 Faulting application start time: 0xmbam.exe0 Faulting application path: mbam.exe1 Faulting module path: mbam.exe2 Report Id: mbam.exe3 System errors: ============= Error: (03/01/2016 11:56:36 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (03/01/2016 09:12:21 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (03/01/2016 08:39:10 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (03/01/2016 12:15:32 AM) (Source: DCOM) (EventID: 10010) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (02/29/2016 07:39:56 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The MBAMService service failed to start due to the following error: %%1053 Error: (02/29/2016 07:39:56 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the MBAMService service to connect. Error: (02/28/2016 11:38:03 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} Error: (02/28/2016 09:01:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: The MBAMService service failed to start due to the following error: %%1053 Error: (02/28/2016 09:01:39 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: A timeout was reached (30000 milliseconds) while waiting for the MBAMService service to connect. Error: (02/28/2016 09:00:07 PM) (Source: DCOM) (EventID: 10010) (User: ) Description: {E10F6C3A-F1AE-4ADC-AA9D-2FE65525666E} ==================== Memory info =========================== Processor: Intel(R) Pentium(R) CPU G620 @ 2.60GHz Percentage of memory in use: 41% Total physical RAM: 4078.32 MB Available physical RAM: 2402.5 MB Total Virtual: 8154.86 MB Available Virtual: 6121.65 MB ==================== Drives ================================ Drive c: () (Fixed) (Total:100.99 GB) (Free:40.12 GB) NTFS ==>[drive with boot components (obtained from BCD)] Drive d: () (Fixed) (Total:402.18 GB) (Free:319.35 GB) NTFS Drive e: (Podaci) (Fixed) (Total:428.34 GB) (Free:391.94 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 8FE48FE4) Partition 1: (Active) - (Size=101 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=402.2 GB) - (Type=07 NTFS) Partition 3: (Not Active) - (Size=428.3 GB) - (Type=07 NTFS) ==================== End of Addition.txt ============================ Dopuna: 02 Mar 2016 23:00

Profil

return void Poslao: 03 Mar 2016 09:05 Idi na vrh
offline return void Anti Malware Fighter Rank 1 Pridružio: 02 Jan 2008 Poruke: 2167	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Za pocetka, predlozio bih ti da obrises YTD Video Downloader. Nakon toga, 1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod: CreateRestorePoint: GroupPolicy: Restriction - Chrome <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION CHR StartupUrls: Default -> "hxxps://www.google.com/?trackid=sp-006","hxxp://www.mystartsearch.com/?type=hp&ts=1414880515&from=amt&uid=ST31000340AS_9QJ2ZVMKXXXX9QJ2ZVMK","hxxp://websearch.searc-hall.info/?pid=3458&r=2014/11/05&hid=4963118503357014206&lg=EN&cc=RS&unqvl=65" Task: {02AB36E8-6042-4D4F-A939-65EC4FBDCFFE} - System32\Tasks\EIQWMN => C:\Users\Ivan\AppData\Roaming\EIQWMN.exe <==== ATTENTION C:\Users\Ivan\AppData\Roaming\EIQWMN.exe Task: {698F6018-9B9B-4AD7-B5D0-38921361B978} - System32\Tasks\QVOZFC => C:\Users\Ivan\AppData\Roaming\QVOZFC.exe <==== ATTENTION C:\Users\Ivan\AppData\Roaming\QVOZFC.exe Task: {9915F475-4C84-4832-B377-88139508423D} - System32\Tasks\XBPD => C:\Users\Ivan\AppData\Roaming\XBPD.exe <==== ATTENTION C:\Users\Ivan\AppData\Roaming\XBPD.exe Task: {E2212D65-44A9-41FC-85EA-8FD0084D7E13} - System32\Tasks\DLAUVH => C:\Users\Ivan\AppData\Roaming\DLAUVH.exe <==== ATTENTION C:\Users\Ivan\AppData\Roaming\DLAUVH.exe Task: {F52CEEDD-FDBB-4346-BE13-2615A071B0EE} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe <==== ATTENTION C:\Program Files (x86)\YTDownloader C:\ProgramData\YTD Video Downloader Task: C:\Windows\Tasks\DLAUVH.job => C:\Users\Ivan\AppData\Roaming\DLAUVH.exe <==== ATTENTION Task: C:\Windows\Tasks\EIQWMN.job => C:\Users\Ivan\AppData\Roaming\EIQWMN.exe <==== ATTENTION Task: C:\Windows\Tasks\QVOZFC.job => C:\Users\Ivan\AppData\Roaming\QVOZFC.exe <==== ATTENTION Task: C:\Windows\Tasks\XBPD.job => C:\Users\Ivan\AppData\Roaming\XBPD.exe <==== ATTENTION EmptyTemp: 2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi. 3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj. Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema. Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku. Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a. Nakon toga, Preuzmi "Xplode"-ov AdwCleaner () i sacuvaj ga na Desktop Dvoklikom pokreni program. Klikni na dugme [Scan] i pricekaj da program zavrsi. Klikni na dugme [Clean] Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu. Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem. Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl" Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S0].txt

Profil

Ratnik84 Poslao: 03 Mar 2016 19:50 Idi na vrh
offline Ratnik84 Novi MyCity građanin Pridružio: 20 Maj 2012 Poruke: 19 Gde živiš: Čačak	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Napisano: 03 Mar 2016 19:39 Fix result of Farbar Recovery Scan Tool (x64) Version:02-03-2016 Ran by Ivan (2016-03-03 19:31:47) Run:1 Running from C:\Users\Ivan\Downloads Loaded Profiles: Ivan (Available Profiles: Ivan) Boot Mode: Normal ============================================== fixlist content: *************** CreateRestorePoint: GroupPolicy: Restriction - Chrome <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION CHR StartupUrls: Default -> "hxxps://www.google.com/?trackid=sp-006","hxxp://www.mystartsearch.com/?type=hp&ts=1414880515&from=amt&uid=ST31000340AS_9QJ2ZVMKXXXX9QJ2ZVMK","hxxp://websearch.searc-hall.info/?pid=3458&r=2014/11/05&hid=4963118503357014206&lg=EN&cc=RS&unqvl=65" Task: {02AB36E8-6042-4D4F-A939-65EC4FBDCFFE} - System32\Tasks\EIQWMN => C:\Users\Ivan\AppData\Roaming\EIQWMN.exe <==== ATTENTION C:\Users\Ivan\AppData\Roaming\EIQWMN.exe Task: {698F6018-9B9B-4AD7-B5D0-38921361B978} - System32\Tasks\QVOZFC => C:\Users\Ivan\AppData\Roaming\QVOZFC.exe <==== ATTENTION C:\Users\Ivan\AppData\Roaming\QVOZFC.exe Task: {9915F475-4C84-4832-B377-88139508423D} - System32\Tasks\XBPD => C:\Users\Ivan\AppData\Roaming\XBPD.exe <==== ATTENTION C:\Users\Ivan\AppData\Roaming\XBPD.exe Task: {E2212D65-44A9-41FC-85EA-8FD0084D7E13} - System32\Tasks\DLAUVH => C:\Users\Ivan\AppData\Roaming\DLAUVH.exe <==== ATTENTION C:\Users\Ivan\AppData\Roaming\DLAUVH.exe Task: {F52CEEDD-FDBB-4346-BE13-2615A071B0EE} - System32\Tasks\YTDownloader => C:\Program Files (x86)\YTDownloader\YTDownloader.exe <==== ATTENTION C:\Program Files (x86)\YTDownloader C:\ProgramData\YTD Video Downloader Task: C:\Windows\Tasks\DLAUVH.job => C:\Users\Ivan\AppData\Roaming\DLAUVH.exe <==== ATTENTION Task: C:\Windows\Tasks\EIQWMN.job => C:\Users\Ivan\AppData\Roaming\EIQWMN.exe <==== ATTENTION Task: C:\Windows\Tasks\QVOZFC.job => C:\Users\Ivan\AppData\Roaming\QVOZFC.exe <==== ATTENTION Task: C:\Windows\Tasks\XBPD.job => C:\Users\Ivan\AppData\Roaming\XBPD.exe <==== ATTENTION EmptyTemp: ************* Restore point was successfully created. C:\Windows\system32\GroupPolicy\Machine => moved successfully C:\Windows\system32\GroupPolicy\GPT.ini => moved successfully C:\Windows\SysWOW64\GroupPolicy\GPT.ini => moved successfully "HKLM\SOFTWARE\Policies\Google" => key removed successfully Chrome StartupUrls => removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{02AB36E8-6042-4D4F-A939-65EC4FBDCFFE}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{02AB36E8-6042-4D4F-A939-65EC4FBDCFFE}" => key removed successfully C:\Windows\System32\Tasks\EIQWMN => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EIQWMN" => key removed successfully "C:\Users\Ivan\AppData\Roaming\EIQWMN.exe" => not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{698F6018-9B9B-4AD7-B5D0-38921361B978}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{698F6018-9B9B-4AD7-B5D0-38921361B978}" => key removed successfully C:\Windows\System32\Tasks\QVOZFC => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\QVOZFC" => key removed successfully "C:\Users\Ivan\AppData\Roaming\QVOZFC.exe" => not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{9915F475-4C84-4832-B377-88139508423D}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9915F475-4C84-4832-B377-88139508423D}" => key removed successfully C:\Windows\System32\Tasks\XBPD => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\XBPD" => key removed successfully "C:\Users\Ivan\AppData\Roaming\XBPD.exe" => not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E2212D65-44A9-41FC-85EA-8FD0084D7E13}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E2212D65-44A9-41FC-85EA-8FD0084D7E13}" => key removed successfully C:\Windows\System32\Tasks\DLAUVH => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\DLAUVH" => key removed successfully "C:\Users\Ivan\AppData\Roaming\DLAUVH.exe" => not found. "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F52CEEDD-FDBB-4346-BE13-2615A071B0EE}" => key removed successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F52CEEDD-FDBB-4346-BE13-2615A071B0EE}" => key removed successfully C:\Windows\System32\Tasks\YTDownloader => moved successfully "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\YTDownloader" => key removed successfully "C:\Program Files (x86)\YTDownloader" => not found. "C:\ProgramData\YTD Video Downloader" => not found. C:\Windows\Tasks\DLAUVH.job => moved successfully C:\Windows\Tasks\EIQWMN.job => moved successfully C:\Windows\Tasks\QVOZFC.job => moved successfully C:\Windows\Tasks\XBPD.job => moved successfully EmptyTemp: => 98.3 MB temporary data Removed. The system needed a reboot. ==== End of Fixlog 19:32:13 ==== Dopuna: 03 Mar 2016 19:50 mycity.rs/must-login.png # AdwCleaner v5.037 - Logfile created 03/03/2016 at 19:43:56 # Updated 28/02/2016 by Xplode # Database : 2016-03-02.1 [Server] # Operating system : Windows 7 Ultimate Service Pack 1 (x64) # Username : Ivan - IVAN-PC # Running from : C:\Users\Ivan\Downloads\AdwCleaner.exe # Option : Clean # Support : toolslib.net/forum * [ Services ] * * [ Folders ] * [-] Folder Deleted : C:\Program Files\TotalSystemCare [-] Folder Deleted : C:\Program Files (x86)\DeltaFix [-] Folder Deleted : C:\Program Files (x86)\globalUpdate [-] Folder Deleted : C:\Program Files (x86)\GreenTree Applications [-] Folder Deleted : C:\ProgramData\apn [-] Folder Deleted : C:\ProgramData\Trusted Publisher [-] Folder Deleted : C:\ProgramData\42f509480679402 [-] Folder Deleted : C:\Users\Ivan\AppData\Local\globalUpdate [-] Folder Deleted : C:\Users\Ivan\AppData\Local\torch [-] Folder Deleted : C:\Users\Ivan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\afpabppcibfahafilhkbbgfnlncppdnc [-] Folder Deleted : C:\Users\Ivan\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\bkfoggbmaeddfflfppchdlbakjilclbp [-] Folder Deleted : C:\Users\Ivan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\afpabppcibfahafilhkbbgfnlncppdnc [-] Folder Deleted : C:\Users\Ivan\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\bkfoggbmaeddfflfppchdlbakjilclbp [-] Folder Deleted : C:\Users\Ivan\AppData\Local\Installer\Installsense_22996 [-] Folder Deleted : C:\Users\Ivan\AppData\LocalLow\Senses [-] Folder Deleted : C:\Users\Ivan\AppData\Roaming\RHEng [-] Folder Deleted : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\CalendarTool [-] Folder Deleted : C:\Windows\SysWOW64\config\systemprofile\AppData\Roaming\WeatherTool * [ Files ] * * [ DLLs ] * * [ Shortcuts ] * * [ Scheduled tasks ] * * [ Registry ] * [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\SysMenu.DLL [-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [iWebar-bg.exe] [-] Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_BROWSER_EMULATION [Senses-bg.exe] [-] Key Deleted : HKLM\SOFTWARE\1120175f-253a-4d76-84b3-c59a6cfdefab [-] Key Deleted : HKLM\SOFTWARE\168956f9-f34a-493f-a6b0-b71290215c58 [-] Key Deleted : HKLM\SOFTWARE\2b53f9dc-e6b1-4d8e-8704-c0ed6ecc8e21 [-] Key Deleted : HKLM\SOFTWARE\53437d3b-3c1e-4dab-a362-7dd8438f48f1 [-] Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D813D5BB-EBC7-45F9-B8A4-36A305168069} [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{02A96331-0CA6-40E2-A87D-C224601985EB} [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52} [-] Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A8F7D0A5-7074-40B8-9BDC-1174BDD0A132} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D14D64BC-A0E4-42E3-BB72-FB41EA43C198} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{DD1F043F-ABC8-4643-8B95-D2C5B22BB019} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{E3F3E8F9-F747-4DD6-BA6B-82A6CE1E0860} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{ED0B64D4-BF27-4521-AD27-190F49BF5EA7} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{023E9EC8-B147-40EB-B0B3-DF90618FB371} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0522D9A4-4D57-437D-978D-E5B3B6C9005D} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{07F41522-AF7D-4F26-B394-094F059FDB8A} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{0C40F472-7407-4467-8914-1DEA7C326972} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{212E6D43-6062-492A-B8CC-144669FF11ED} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{224FE662-1E6D-4BC0-AEBB-9E2FB4057BE9} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3A807417-B46D-4D37-8C9A-19AC6DE204F9} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{3CC60715-D6C5-429D-830E-43FA3F86C61D} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4517D94C-19BA-46FA-BE66-2A30CEAC4A85} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{555D7146-94A8-4C94-AE76-C39CDC7F7705} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{59D188FA-757A-424E-8C93-F58FFD896BD7} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{8120D9D6-785C-4413-9C0C-DF2028C56FAD} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{823AE2EB-E62C-4847-B192-C99B91B92416} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B4F7CFE-987D-410E-A8E4-20182E0B3C24} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9B9A45F4-18FC-484A-BACA-076D78273D8E} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A6D54287-7939-466A-8579-92546D946C8C} [-] Key Deleted : HKLM\SOFTWARE\Classes\Interface\{A78EDAFB-926F-4D93-AB13-8232D7378EB1} [-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66} [-] Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{82351433-9094-11D1-A24B-00A0C932C7DF} [-] Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{54739D49-AC03-4C57-9264-C5195596B3A1} [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{5645E0E7-FC12-43BF-A6E4-F9751942B298} [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C7BF8F4B-7BC7-4F42-B944-3D28A3A86D8A} [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2871f4d0-79e0-4fa1-86fd-29d8bc7626a1} [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70886617-f78b-499d-82a3-00cc2611ad2b} [-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52} [-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{A07E5BFF-B16C-4ABA-A30F-514213A945E6} [-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB} [-] Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5} [-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{2871f4d0-79e0-4fa1-86fd-29d8bc7626a1} [-] Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{70886617-f78b-499d-82a3-00cc2611ad2b} [-] Key Deleted : HKCU\Software\GlobalUpdate [-] Key Deleted : HKCU\Software\Linkey [-] Key Deleted : HKCU\Software\SlimWare Utilities Inc [-] Key Deleted : HKCU\Software\Softonic [-] Key Deleted : HKCU\Software\WEBAPP [-] Key Deleted : HKCU\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [-] Key Deleted : HKCU\Software\AppDataLow\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9} [-] Key Deleted : HKLM\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0} [-] Key Deleted : HKLM\SOFTWARE\{4A0F38A9-FE55-4B89-B73F-E60FDC0F72E9} [-] Key Deleted : HKLM\SOFTWARE\GlobalUpdate [-] Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{AD11DADE-C597-45D9-D8C5-1D2EB0B89613} [-] Key Deleted : [x64] HKLM\SOFTWARE\YTDownloader [-] Key Deleted : HKU\.DEFAULT\Software\AppDataLow\{12DA0E6F-5543-440C-BAA2-28BF01070AFA} [-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\_CrossriderRegNamePlaceHolder_ [-] Key Deleted : HKU\.DEFAULT\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\windows_ie_ac_001\Software\iWebar [-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg.AniGIFPpg [-] Key Deleted : HKLM\SOFTWARE\Classes\AniGIFPpg2.AniGIFPpg2 * [ Web browsers ] * [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.conduit.com_ [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystartsearch [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : websearch [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.conduit.com [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : aol.com [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : softonic [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : ask.com [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : search.yahoo.com [-] [C:\Users\Ivan\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Deleted : mystart.incredibar.com/ ********************* :: "Tracing" keys removed :: Winsock settings cleared *********************** C:\AdwCleaner\AdwCleaner[C1].txt - [9036 bytes] - [03/03/2016 19:43:56] C:\AdwCleaner\AdwCleaner[S1].txt - [8569 bytes] - [03/03/2016 19:40:25] ########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [9182 bytes] ##########

Profil

return void Poslao: 03 Mar 2016 21:22 Idi na vrh
offline return void Anti Malware Fighter Rank 1 Pridružio: 02 Jan 2008 Poruke: 2167	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Preuzmi Malwarebytes Anti-Rootkit (MBAR) sa sledeceg linka i sacuvaj ga na Desktop. Dvoklikom pokreni MBAR () na ikonicu programa: - Klikni OK na sledecem prozoru da bi dozvolio raspakivanje u zaseban mbar folder na desktop-u; - mbar.exe ce biti startovan. Na nekim sistemima to moze da potraje nekoliko dodatnih sekundi, te pricekati pokretanje.; - U uvodnom prozoru klikni dugme Next ukoliko si saglasan; • Na 'Update Database' prozoru klik na dugme Update da bi preuzeo sveze definicije. Kada se ispise poruka 'Success: Database was successfully updated' klik na dugme Next; • Pod sekcijom 'Scan Targets' proveri da su sve opcije stiklirane, te klikni na dugme Scan; Obavestenje: sa nekim infekcijama moze se desiti da se prikaze neka od sledecih poruka: - 'Could not load protection driver' => u tom slucaju klikni OK. - 'Could not load DDA driver' => klikni Yes na to obavestenje da bi dozvolio ucitavanje nakon restarta. Dozvoli restart i nastavi sa ostatkom instrukcija posle restarta. >> Ukoliko malware nije detektovan, klik na Exit dugme da zatvoris program. U sledecu poruku postavi mbar-log-year-month-day (sat-minuti-sekundi).txt i system-log.txt izveštaje. >> Ukoliko su infekcija/e pronadjene, proveriti da li je obelezena opcija 'Create Restore Point' i klikni na dugme Cleanup! da bi uklonili pretnje. - Procedura uklanjanje malware-a (scheduled) ce biti zakazana po restartu, bice prikazano obavestenje u pop-up prozoru. Klikni dugme Yes i sistem bi trebao da se restartuje i da zavrsi proceduru ciscenja. Obavestenje! samo ukoliko je RootKit detektovan: - postaraj se da pokrenes fixdamage.exe alat koji se nalazi u mbar folderu, \Plugins\fixdamage.exe: - Dvoklikom pokreni fixdamage, u crnom prozoru koji se otvori (command prompt) ukucaj Y (Y stoji za Yes) da bi nastavio izvrsenje, pricekati da alat odradi sve popravke ... - Kada vidis poruku 'press any key to exit' popravka je kompletirana. Pritisnuti bilo koju tipku na tastaturi da bi se prozor zatvorio. Restartovati sistem. Sledeci izvestaji ce biti formirani u mbar folderu. 1. mbar-log-year-month-day (hour-minute-second).txt 2. system-log.txt Iskopiraj sadrzaj mbar log-a u poruku a system log okaci uz poruku koristeci opciju Prikači fajl.

Profil

Ratnik84 Poslao: 03 Mar 2016 21:54 Idi na vrh
offline Ratnik84 Novi MyCity građanin Pridružio: 20 Maj 2012 Poruke: 19 Gde živiš: Čačak	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Napisano: 03 Mar 2016 21:53 Malwarebytes Anti-Rootkit BETA 1.9.3.1001 malwarebytes.org Database version: main: v2016.03.03.06 rootkit: v2016.02.27.01 Windows 7 Service Pack 1 x64 NTFS Internet Explorer 11.0.9600.18204 Ivan :: IVAN-PC [administrator] 3/3/2016 9:40:03 PM mbar-log-2016-03-03 (21-40-03).txt Scan type: Quick scan Scan options enabled: Anti-Rootkit \| Drivers \| MBR \| Physical Sectors \| Memory \| Startup \| Registry \| File System \| Heuristics/Extra \| Heuristics/Shuriken Scan options disabled: Objects scanned: 376213 Time elapsed: 11 minute(s), 20 second(s) Memory Processes Detected: 0 (No malicious items detected) Memory Modules Detected: 0 (No malicious items detected) Registry Keys Detected: 0 (No malicious items detected) Registry Values Detected: 0 (No malicious items detected) Registry Data Items Detected: 0 (No malicious items detected) Folders Detected: 0 (No malicious items detected) Files Detected: 0 (No malicious items detected) Physical Sectors Detected: 0 (No malicious items detected) (end) Dopuna: 03 Mar 2016 21:54 Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 6.1.7601 Windows 7 Service Pack 1 x64 Account is Administrative Internet Explorer version: 11.0.9600.18204 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, E:\ DRIVE_FIXED CPU speed: 2.594000 GHz Memory total: 4276432896, free: 2862641152 --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 6.1.7601 Windows 7 Service Pack 1 x64 Account is Administrative Internet Explorer version: 11.0.9600.18204 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, E:\ DRIVE_FIXED CPU speed: 2.594000 GHz Memory total: 4276432896, free: 2835636224 Downloaded database version: v2016.03.03.06 Downloaded database version: v2016.02.27.01 Downloaded database version: v2016.02.22.02 ======================================= Initializing... Driver version: 0.3.0.4 ------------ Kernel report ------------ 03/03/2016 21:39:54 ------------ Loaded modules ----------- \SystemRoot\system32\ntoskrnl.exe \SystemRoot\system32\hal.dll \SystemRoot\system32\kdcom.dll \SystemRoot\system32\mcupdate_GenuineIntel.dll \SystemRoot\system32\PSHED.dll \SystemRoot\system32\CLFS.SYS \SystemRoot\system32\CI.dll \SystemRoot\system32\drivers\Wdf01000.sys \SystemRoot\system32\drivers\WDFLDR.SYS \SystemRoot\system32\drivers\ACPI.sys \SystemRoot\system32\drivers\WMILIB.SYS \SystemRoot\system32\drivers\msisadrv.sys \SystemRoot\system32\drivers\pci.sys \SystemRoot\system32\drivers\vdrvroot.sys \SystemRoot\System32\drivers\partmgr.sys \SystemRoot\system32\drivers\volmgr.sys \SystemRoot\System32\drivers\volmgrx.sys \SystemRoot\system32\drivers\pciide.sys \SystemRoot\system32\drivers\PCIIDEX.SYS \SystemRoot\System32\drivers\mountmgr.sys \SystemRoot\system32\drivers\vmbus.sys \SystemRoot\system32\drivers\winhv.sys \SystemRoot\system32\drivers\atapi.sys \SystemRoot\system32\drivers\ataport.SYS \SystemRoot\system32\drivers\amdxata.sys \SystemRoot\system32\drivers\fltmgr.sys \SystemRoot\system32\drivers\fileinfo.sys \SystemRoot\System32\Drivers\Ntfs.sys \SystemRoot\System32\Drivers\msrpc.sys \SystemRoot\System32\Drivers\ksecdd.sys \SystemRoot\System32\Drivers\cng.sys \SystemRoot\System32\drivers\pcw.sys \SystemRoot\System32\Drivers\Fs_Rec.sys \SystemRoot\system32\drivers\ndis.sys \SystemRoot\system32\drivers\NETIO.SYS \SystemRoot\System32\Drivers\ksecpkg.sys \SystemRoot\System32\drivers\tcpip.sys \SystemRoot\System32\drivers\fwpkclnt.sys \SystemRoot\System32\Drivers\aswRvrt.sys \SystemRoot\System32\Drivers\aswVmm.sys \SystemRoot\system32\drivers\vmstorfl.sys \SystemRoot\system32\drivers\volsnap.sys \SystemRoot\System32\Drivers\spldr.sys \SystemRoot\System32\drivers\rdyboost.sys \SystemRoot\System32\Drivers\mup.sys \SystemRoot\System32\drivers\hwpolicy.sys \SystemRoot\System32\DRIVERS\fvevol.sys \SystemRoot\system32\DRIVERS\disk.sys \SystemRoot\system32\DRIVERS\CLASSPNP.SYS \SystemRoot\system32\drivers\cdrom.sys \SystemRoot\system32\drivers\aswSP.sys \SystemRoot\system32\drivers\aswSnx.sys \SystemRoot\System32\Drivers\Null.SYS \SystemRoot\System32\Drivers\Beep.SYS \SystemRoot\System32\drivers\vga.sys \SystemRoot\System32\drivers\VIDEOPRT.SYS \SystemRoot\System32\drivers\watchdog.sys \SystemRoot\System32\DRIVERS\RDPCDD.sys \SystemRoot\system32\drivers\rdpencdd.sys \SystemRoot\system32\drivers\rdprefmp.sys \SystemRoot\System32\Drivers\Msfs.SYS \SystemRoot\System32\Drivers\Npfs.SYS \SystemRoot\system32\DRIVERS\tdx.sys \SystemRoot\system32\DRIVERS\TDI.SYS \SystemRoot\system32\drivers\afd.sys \SystemRoot\system32\drivers\aswRdr2.sys \SystemRoot\System32\DRIVERS\netbt.sys \SystemRoot\system32\DRIVERS\wfplwf.sys \SystemRoot\system32\DRIVERS\pacer.sys \SystemRoot\system32\DRIVERS\netbios.sys \SystemRoot\system32\DRIVERS\wanarp.sys \SystemRoot\system32\drivers\termdd.sys \SystemRoot\system32\DRIVERS\rdbss.sys \SystemRoot\system32\drivers\nsiproxy.sys \SystemRoot\system32\drivers\mssmbios.sys \SystemRoot\System32\drivers\discache.sys \SystemRoot\system32\drivers\csc.sys \SystemRoot\System32\Drivers\dfsc.sys \SystemRoot\system32\DRIVERS\blbdrive.sys \SystemRoot\system32\DRIVERS\tunnel.sys \SystemRoot\system32\DRIVERS\atikmpag.sys \SystemRoot\system32\DRIVERS\atikmdag.sys \SystemRoot\System32\drivers\dxgkrnl.sys \SystemRoot\System32\drivers\dxgmms1.sys \SystemRoot\system32\drivers\HDAudBus.sys \SystemRoot\system32\DRIVERS\HECIx64.sys \SystemRoot\system32\drivers\usbehci.sys \SystemRoot\system32\drivers\USBPORT.SYS \SystemRoot\system32\DRIVERS\Rtlh64.sys \SystemRoot\system32\drivers\i8042prt.sys \SystemRoot\system32\drivers\kbdclass.sys \SystemRoot\system32\drivers\wmiacpi.sys \SystemRoot\system32\DRIVERS\intelppm.sys \SystemRoot\system32\drivers\CompositeBus.sys \SystemRoot\system32\DRIVERS\AgileVpn.sys \SystemRoot\system32\DRIVERS\rasl2tp.sys \SystemRoot\system32\DRIVERS\ndistapi.sys \SystemRoot\system32\DRIVERS\ndiswan.sys \SystemRoot\system32\DRIVERS\raspppoe.sys \SystemRoot\system32\DRIVERS\raspptp.sys \SystemRoot\system32\DRIVERS\rassstp.sys \SystemRoot\system32\DRIVERS\rdpbus.sys \SystemRoot\system32\DRIVERS\mouclass.sys \SystemRoot\system32\drivers\swenum.sys \SystemRoot\system32\drivers\ks.sys \SystemRoot\system32\drivers\umbus.sys \SystemRoot\system32\DRIVERS\usbhub.sys \SystemRoot\System32\Drivers\NDProxy.SYS \SystemRoot\system32\drivers\AtihdW76.sys \SystemRoot\system32\drivers\portcls.sys \SystemRoot\system32\drivers\drmk.sys \SystemRoot\system32\drivers\ksthunk.sys \SystemRoot\system32\drivers\viahduaa.sys \SystemRoot\System32\win32k.sys \SystemRoot\System32\drivers\Dxapi.sys \SystemRoot\System32\Drivers\crashdmp.sys \SystemRoot\System32\Drivers\dump_dumpata.sys \SystemRoot\System32\Drivers\dump_atapi.sys \SystemRoot\System32\Drivers\dump_dumpfve.sys \SystemRoot\system32\DRIVERS\hidusb.sys \SystemRoot\system32\DRIVERS\HIDCLASS.SYS \SystemRoot\system32\DRIVERS\HIDPARSE.SYS \SystemRoot\system32\DRIVERS\USBD.SYS \SystemRoot\system32\DRIVERS\mouhid.sys \SystemRoot\system32\DRIVERS\monitor.sys \SystemRoot\System32\TSDDD.dll \SystemRoot\System32\cdd.dll \SystemRoot\system32\drivers\luafv.sys \SystemRoot\system32\drivers\aswMonFlt.sys \??\C:\Windows\system32\drivers\mbam.sys \SystemRoot\system32\drivers\aswStm.sys \SystemRoot\system32\DRIVERS\lltdio.sys \SystemRoot\system32\DRIVERS\rspndr.sys \SystemRoot\system32\drivers\HTTP.sys \SystemRoot\system32\DRIVERS\bowser.sys \SystemRoot\System32\drivers\mpsdrv.sys \SystemRoot\system32\DRIVERS\mrxsmb.sys \SystemRoot\system32\DRIVERS\mrxsmb10.sys \SystemRoot\system32\DRIVERS\mrxsmb20.sys \SystemRoot\system32\drivers\aswHwid.sys \SystemRoot\system32\drivers\peauth.sys \SystemRoot\System32\DRIVERS\srvnet.sys \SystemRoot\System32\drivers\tcpipreg.sys \SystemRoot\System32\DRIVERS\srv2.sys \SystemRoot\System32\DRIVERS\srv.sys \??\C:\Windows\system32\drivers\mbamchameleon.sys \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys \Windows\System32\ntdll.dll \Windows\System32\smss.exe \Windows\System32\apisetschema.dll \Windows\System32\autochk.exe \Windows\System32\rpcrt4.dll \Windows\System32\usp10.dll \Windows\System32\kernel32.dll \Windows\System32\wininet.dll \Windows\System32\user32.dll \Windows\System32\normaliz.dll \Windows\System32\sechost.dll \Windows\System32\psapi.dll \Windows\System32\ole32.dll \Windows\System32\urlmon.dll \Windows\System32\setupapi.dll \Windows\System32\advapi32.dll \Windows\System32\difxapi.dll \Windows\System32\lpk.dll \Windows\System32\comdlg32.dll \Windows\System32\iertutil.dll \Windows\System32\imm32.dll \Windows\System32\oleaut32.dll \Windows\System32\ws2_32.dll \Windows\System32\shlwapi.dll \Windows\System32\msvcrt.dll \Windows\System32\clbcatq.dll \Windows\System32\shell32.dll \Windows\System32\Wldap32.dll \Windows\System32\imagehlp.dll \Windows\System32\nsi.dll \Windows\System32\gdi32.dll \Windows\System32\msctf.dll \Windows\System32\cfgmgr32.dll \Windows\System32\api-ms-win-downlevel-version-l1-1-0.dll \Windows\System32\api-ms-win-downlevel-normaliz-l1-1-0.dll \Windows\System32\devobj.dll \Windows\System32\api-ms-win-downlevel-advapi32-l1-1-0.dll \Windows\System32\comctl32.dll \Windows\System32\userenv.dll \Windows\System32\crypt32.dll \Windows\System32\api-ms-win-downlevel-ole32-l1-1-0.dll \Windows\System32\KernelBase.dll \Windows\System32\api-ms-win-downlevel-shlwapi-l1-1-0.dll \Windows\System32\wintrust.dll \Windows\System32\api-ms-win-downlevel-user32-l1-1-0.dll \Windows\System32\profapi.dll \Windows\System32\msasn1.dll \Windows\SysWOW64\normaliz.dll ----------- End ----------- Done! Scan started Database versions: main: v2016.03.03.06 rootkit: v2016.02.27.01 <<<2>>> Physical Sector Size: 512 Drive: 0, DevicePointer: 0xfffffa8004c29060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ --------- Disk Stack ------ DevicePointer: 0xfffffa8004c29b90, DeviceName: Unknown, DriverName: \Driver\partmgr\ DevicePointer: 0xfffffa8004c29060, DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ DevicePointer: 0xfffffa8004728580, DeviceName: Unknown, DriverName: \Driver\ACPI\ DevicePointer: 0xfffffa800476d060, DeviceName: \Device\Ide\IdeDeviceP0T0L0-0\, DriverName: \Driver\atapi\ ------------ End ---------- Alternate DeviceName: \Device\Harddisk0\DR0\, DriverName: \Driver\Disk\ Upper DeviceData: 0x0, 0x0, 0x0 Lower DeviceData: 0x0, 0x0, 0x0 <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes <<<2>>> <<<3>>> Volume: C: File system type: NTFS SectorSize = 512, ClusterSize = 4096, MFTRecordSize = 1024, MFTIndexSize = 4096 bytes Scanning drivers directory: C:\WINDOWS\SYSTEM32\drivers... Done! Drive 0 This is a System drive Scanning MBR on drive 0... Inspecting partition table: MBR Signature: 55AA Disk Signature: 8FE48FE4 Partition information: Partition 0 type is Primary (0x7) Partition is ACTIVE. Partition starts at LBA: 63 Numsec = 211784832 Partition is bootable Partition file system is NTFS Partition 1 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 211784896 Numsec = 843443008 Partition is not bootable Partition file system is NTFS Partition 2 type is Primary (0x7) Partition is NOT ACTIVE. Partition starts at LBA: 1055227904 Numsec = 898291712 Partition is not bootable Partition file system is NTFS Partition 3 type is Empty (0x0) Partition is NOT ACTIVE. Partition starts at LBA: 0 Numsec = 0 Partition is not bootable Disk Size: 1000204886016 bytes Sector size: 512 bytes Done! File "C:\ProgramData\AVAST Software\Avast\log\StreamFilter.log" is compressed (flags = 1) File "C:\ProgramData\AVAST Software\Avast\log\AvastSvc.log" is compressed (flags = 1) File "C:\ProgramData\AVAST Software\Avast\log\AvastUI.log" is compressed (flags = 1) File "C:\ProgramData\AVAST Software\Avast\log\Cleanup.log" is compressed (flags = 1) File "C:\ProgramData\AVAST Software\Avast\log\CommChannel.Protocol.log" is compressed (flags = 1) File "C:\ProgramData\AVAST Software\Avast\log\event_manager.log" is compressed (flags = 1) ======================================= Scan finished ======================================= Removal queue found; removal started Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-0-63-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-1-211784896-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\VBR-0-2-1055227904-i.mbam... Removing C:\ProgramData\Malwarebytes' Anti-Malware (portable)\MBR-0-r.mbam... Removal finished --------------------------------------- Malwarebytes Anti-Rootkit BETA 1.09.3.1001 (c) Malwarebytes Corporation 2011-2012 OS version: 6.1.7601 Windows 7 Service Pack 1 x64 Account is Administrative Internet Explorer version: 11.0.9600.18204 File system is: NTFS Disk drives: C:\ DRIVE_FIXED, D:\ DRIVE_FIXED, E:\ DRIVE_FIXED CPU speed: 2.594000 GHz Memory total: 4276432896, free: 2781642752 =======================================

Profil

return void Poslao: 04 Mar 2016 13:29 Idi na vrh
offline return void Anti Malware Fighter Rank 1 Pridružio: 02 Jan 2008 Poruke: 2167	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Kakvo je stanje sada?

Profil

Ratnik84 Poslao: 04 Mar 2016 14:12 Idi na vrh
offline Ratnik84 Novi MyCity građanin Pridružio: 20 Maj 2012 Poruke: 19 Gde živiš: Čačak	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Ista se greska pojavljuje. Odnosno Windows, zatvara program, kada treba da ocistim Pup-ove. Kada odem na resavanje probkema, daje poruku da aplikacija mbam nije kompatabilna.

Profil

return void Poslao: 04 Mar 2016 18:51 Idi na vrh
offline return void Anti Malware Fighter Rank 1 Pridružio: 02 Jan 2008 Poruke: 2167	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Isprati ove korake i javi stanje posle zavrsetka. Preuzmi mbam-clean.exe sa ovog linka i sačuvaj ga na Desktop. Zatvori sve trenutno pokrenute programe i privremeno isključi antivirus, kako ne bi došlo do mogućih problema. Pokreni mbam-clean.exe i isprati ono što ti program nudi. Program će tražiti restart računara. Nakon restarta, ponovo aktiviraj antivirus i preuzmi najnoviju Malwarebytes Anti-Malware verziju programa sa ovog linka i sačuvaj je na Desktop. Zatvori sve trenutno pokrenute programe i ponovo privremeno isključi antivirusnu zaštitu, pa onda pokreni Malwarebytes instalaciju. Kada se instalacija završi, ponovo aktiviraj antivirusnu zaštitu.

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Malwarbytes

Ko je trenutno na forumu

Ukupno su 1039 korisnika na forumu :: 35 registrovanih, 10 sakrivenih i 994 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: 357magnum, A.R.Chafee.Jr., aleksmajstor, ArchaBasha, Ben Roj, bobomicek, BORUTUS, Brana01, cemix, dankisha, Djokislav, DPera, dragoljub11987, Hans Gajger, havoc995, HrcAk47, Još malo pa deda, Koca Popovic, koom0001, Kubovac, kunktator, ljuba, Mercury, minmatar34957, okopanja, Panter, royst33, Sirius, sombrero, trajkoni018, vathra, virked, vukdra, wizzardone, Wrangler

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by