Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Infected PC and browser problem


  • Please log in to reply
1 reply to this topic

#1 Jesenjin

Jesenjin

  • Members
  • 2 posts
  • OFFLINE
  •  
  • Local time:05:03 PM

Posted 20 November 2015 - 10:02 PM

Hello, when using Chrome i get popups and also constantly redirected to a different websites. I am also having problems with programs like antivirus which i cant uninstall. Cant download antivirus because im getting error messages. I cant do anything when on internet because im always redirected or my browser crashes. I cannot upload Addition.txt, i get error "Upload skipped (Error503)

 

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:20-11-2015
Ran by Famelie (administrator) on VEDRANMARIJA (21-11-2015 03:58:37)
Running from C:\Users\Famelie\Downloads
Loaded Profiles: Famelie (Available Profiles: Famelie)
Platform: Microsoft Windows 7 Ultimate  Service Pack 1 (X86) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
 
==================== Processes (Whitelisted) =================
 
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
 
(AMD) C:\Windows\System32\atiesrxx.exe
(Logitech Inc.) C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
() C:\ProgramData\ApplicationHosting\ApplicationHosting.exe
() C:\Windows\System32\PnkBstrA.exe
(Razer Inc.) C:\Program Files\Razer\Razer Game Booster\RzKLService.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
() C:\Program Files\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-10.exe
() C:\Program Files\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-1-6.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
() C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.11.226\SSScheduler.exe
(Disc Soft Ltd) C:\Program Files\DAEMON Tools Pro Advanced\DTShellHlp.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.28.15\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
() C:\Program Files\Google\Google Desktop Search\GoogleDesktopIndex.exe
() C:\Program Files\Google\Google Desktop Search\GoogleDesktopCrawl.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Cinema PlusV09.11) C:\Program Files\CinemaP-1.9cV09.11\40db1533-f551-4998-8bca-934da85073e3-6.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(CobianSoft, Luis Cobian) C:\Program Files\Cobian Backup 11\cbVSCService11.exe
(Luis Cobian, CobianSoft) C:\Program Files\Cobian Backup 11\cbInterface.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Farbar) C:\Users\Famelie\Downloads\FRST (2).exe
 
 
==================== Registry (Whitelisted) ===========================
 
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
 
HKLM\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe [39792 2008-01-11] (Adobe Systems Incorporated)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-06-28] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2014\avgui.exe [4971024 2014-03-19] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [DApp] => C:\Program Files\PCDApp\start.vbs [178 2014-04-10] ()
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-06-30] (Avast Software s.r.o.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM\...\Run: [Cobian Backup 11 interface] => C:\Program Files\Cobian Backup 11\cbInterface.exe [4407808 2013-03-07] (Luis Cobian, CobianSoft)
HKLM\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] => C:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\mbamdor.exe [54072 2015-10-05] (Malwarebytes)
HKU\S-1-5-21-2242160561-2063767234-543261399-1000\...\Run: [Google Desktop Search] => C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe [120320 2014-03-01] ()
HKU\S-1-5-21-2242160561-2063767234-543261399-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files\DAEMON Tools Pro Advanced\DTAgent.exe [3125280 2013-10-17] (Disc Soft Ltd)
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [280576 2014-03-03] (Microsoft Corporation)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-06-29] (Avast Software s.r.o.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-11-10]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.11.226\SSScheduler.exe (McAfee, Inc.)
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
 
==================== Internet (Whitelisted) ====================
 
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
 
Winsock: Catalog9 01 C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork1.dll [9216 2014-03-01] ()
Winsock: Catalog9 02 C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork1.dll [9216 2014-03-01] ()
Winsock: Catalog9 13 C:\Program Files\Google\Google Desktop Search\GoogleDesktopNetwork1.dll [9216 2014-03-01] ()
Hosts: 0.0.0.1 mssplus.mcafee.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{6E22B39E-9A66-4918-AB5F-0916A2CC7472}: [DhcpNameServer] 192.168.1.1
 
Internet Explorer:
==================
SearchScopes: HKU\S-1-5-21-2242160561-2063767234-543261399-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
BHO: Adobe PDF Reader Link Helper -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2006-10-22] (Adobe Systems Incorporated)
BHO: Java™ Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-23] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-06-29] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> c:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> c:\program files\google\googletoolbar1.dll [2014-03-01] (Google Inc.)
BHO: Java™ Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-23] (Oracle Corporation)
Toolbar: HKLM - &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll [2014-03-01] (Google Inc.)
Toolbar: HKU\S-1-5-21-2242160561-2063767234-543261399-1000 -> &Google - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll [2014-03-01] (Google Inc.)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: belarc - {6318E0AB-2E93-11D1-B8ED-00608CC9A71F} - C:\Program Files\Belarc\BelarcAdvisor\System\BAVoilaX.dll [2013-04-16] (Belarc, Inc.)
 
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-23] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-18] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-06-29] [not signed]
 
Chrome: 
=======
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.8.824\_platform_specific\win_x86\widevinecdmadapter.dll (Google Inc.)
CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\46.0.2490.86\PepperFlash\pepflashplayer.dll ()
CHR Profile: C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (A Quotation) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aafpohheobbibbehfjogminpinjhlpmg [2014-06-24]
CHR Extension: (Sky map) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\acnecepeneiomaebkkagcfbbakcfljdc [2014-10-10]
CHR Extension: (Learn English - Beelingo.com) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aeefohgoiafgjjpihnoeofgijggpbmmf [2014-08-16]
CHR Extension: (BIODIGITAL HUMAN) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\agoenciogemlojlhccbcpcfflicgnaak [2014-11-05]
CHR Extension: (Duolingo on the Web) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\aiahmijlpehemcpleichkcokhegllfjl [2015-01-10]
CHR Extension: (UJAM - Make your music.) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdiogojbmdncjdpljocafnigiokgmci [2014-06-24]
CHR Extension: (Intelligence Quiz) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bddnmcopphcfjagpabphnpdnoemoapgo [2014-06-24]
CHR Extension: (Desmos Graphing Calculator) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhdheahnajobgndecdbggfmcojekgdko [2014-06-24]
CHR Extension: (Audiotool) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkgoccjhfjgjedhkiefaclppgbmoobnk [2015-08-16]
CHR Extension: (Adblock za Youtube™) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2015-10-17]
CHR Extension: (Learn Italian - Molto Bene) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\dadgddaepklpemjojmnhgdjmmkmefihe [2014-06-24]
CHR Extension: (Visoki kontrast) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\djcfdncoelnlbldjfhinnjlhdjlikmph [2015-09-25]
CHR Extension: (500px) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\egpociadnldbkfkjpmjoaibnbcoeplja [2014-09-26]
CHR Extension: (Readium) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepbnnnkkadjhjahcafoaglimekefifl [2015-07-28]
CHR Extension: (Magisto - Magical Video Editor) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghmngbmfdgknokcefmkbjlcjabdklnlk [2015-01-17]
CHR Extension: (AdBlock) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2015-11-18]
CHR Extension: (Visnos Interactive Mathematics) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\gkaehphddognnolhgnimoadpoacbdhbd [2014-06-24]
CHR Extension: (Science Games) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\hmhkbmeofdbocbikifackchhdginkkok [2014-06-24]
CHR Extension: (Blackball Pool) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjkhefodfbgjpcmahghmfggbcpjabnag [2014-06-24]
CHR Extension: (Typing Test - KeyHero) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\jkcieoaeooeidmpaopkpjpjfakidlabm [2014-08-02]
CHR Extension: (English vocabulary) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\mgmklfohhllfpjjmjejencmaodgiknmj [2014-06-24]
CHR Extension: (Anatronica - 3D Interactive Anatomy) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nalpooddpdnhjicpjgnhaihnnfnmbpee [2014-06-24]
CHR Extension: (How Smart Are You?) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ndkgicicpnkhjcialfmhpebhhgjekbgn [2014-06-24]
CHR Extension: (Speed ​​Test Internet) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\njlidiknbdbkmdpfklacbdhhibkdccld [2015-05-14]
CHR Extension: (Plaćanja u web-trgovini Chrome) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-22]
CHR Extension: (Meaning of Names) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\nninaahoaamcnfhioafhfnaaegmkfmed [2014-06-24]
CHR Extension: (Chords Free) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\ojkklbkdfandejkpjihngoglljkgegof [2014-06-24]
CHR Extension: (Glogster) - C:\Users\Famelie\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgoigcdmeplpebbdfjcofinjnlghmefh [2015-05-14]
CHR HKLM\...\Chrome\Extension: [bacmhbpcpggpejckjicbghlgdlhgelbc] - C:\Program Files\ZappAddon\chrome\ZappAddon.crx <not found>
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-06-29]
 
==================== Services (Whitelisted) ========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [294400 2011-06-28] (Advanced Micro Devices, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-06-29] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3207800 2015-06-29] (Avast Software)
S4 avgfws; C:\Program Files\AVG\AVG2014\avgfws.exe [1358944 2013-09-24] (AVG Technologies CZ, s.r.o.)
S4 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3782672 2014-02-23] (AVG Technologies CZ, s.r.o.)
S4 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [348008 2013-09-24] (AVG Technologies CZ, s.r.o.)
R2 cbVSCService11; C:\Program Files\Cobian Backup 11\cbVSCService11.exe [67584 2013-03-07] (CobianSoft, Luis Cobian) [File not signed]
S2 MBAMScheduler; C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe [1513784 2015-10-05] (Malwarebytes)
S2 MBAMService; C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.11.226\McCHSvc.exe [235696 2015-10-30] (McAfee, Inc.)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [66872 2015-11-07] ()
R2 RzKLService; C:\Program Files\Razer\Razer Game Booster\RzKLService.exe [105448 2014-02-25] (Razer Inc.)
R2 UMVPFSrv; C:\Program Files\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-18] (Logitech Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
 
===================== Drivers (Whitelisted) ==========================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-06-29] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [74976 2015-06-29] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-06-29] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-06-29] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [787760 2015-06-29] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [428120 2015-06-30] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-06-29] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209048 2015-06-29] ()
R1 Avgdiskx; C:\Windows\System32\DRIVERS\avgdiskx.sys [120600 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6x.sys [47928 2013-09-26] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\Windows\System32\DRIVERS\avgidshx.sys [149272 2013-11-25] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\Windows\System32\DRIVERS\avgldx86.sys [176952 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\Windows\System32\DRIVERS\avglogx.sys [222520 2013-10-31] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\Windows\System32\DRIVERS\avgmfx86.sys [102712 2013-10-01] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\Windows\System32\DRIVERS\avgtdix.sys [193848 2013-08-01] (AVG Technologies CZ, s.r.o.)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [243128 2014-06-05] (Disc Soft Ltd)
R2 ISOMount; C:\Program Files\Free ISO Mount\FIMx86.sys [26984 2014-04-10] ()
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [23256 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [51928 2015-10-05] (Malwarebytes Corporation)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220752 2015-06-29] (Avast Software)
S4 AVGIDSDriver; system32\DRIVERS\avgidsdriverx.sys [X]
S4 AVGIDSShim; system32\DRIVERS\avgidsshimx.sys [X]
S4 Avgrkx86; system32\DRIVERS\avgrkx86.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
U3 Winsock - Google Desktop Search Backup Before First Install; no ImagePath
U3 Winsock - Google Desktop Search Backup Before Last Install; no ImagePath
 
==================== NetSvcs (Whitelisted) ===================
 
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
 
 
==================== One Month Created files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-21 03:58 - 2015-11-21 03:58 - 01716736 _____ (Farbar) C:\Users\Famelie\Downloads\FRST (2).exe
2015-11-21 03:57 - 2015-11-21 03:57 - 01716736 _____ (Farbar) C:\Users\Famelie\Downloads\FRST (1).exe
2015-11-21 03:57 - 2015-11-21 03:57 - 00772016 _____ (Reimage®) C:\Users\Famelie\Downloads\ReimageRepair.exe
2015-11-21 03:42 - 2015-11-21 03:44 - 00032240 _____ C:\Users\Famelie\Downloads\Addition.txt
2015-11-21 03:41 - 2015-11-21 03:58 - 00019522 _____ C:\Users\Famelie\Downloads\FRST.txt
2015-11-21 03:41 - 2015-11-21 03:58 - 00000000 ____D C:\FRST
2015-11-21 03:41 - 2015-11-21 03:41 - 01716736 _____ (Farbar) C:\Users\Famelie\Downloads\FRST.exe
2015-11-21 03:32 - 2015-11-21 03:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cobian Backup 11
2015-11-21 03:32 - 2015-11-21 03:32 - 00000000 ____D C:\Program Files\Cobian Backup 11
2015-11-21 03:31 - 2015-11-21 03:31 - 19709440 _____ (Luis Cobian, CobianSoft) C:\Users\Famelie\Downloads\cbSetup.exe
2015-11-18 19:48 - 2015-11-21 03:17 - 00000000 ____D C:\New folder
2015-11-18 14:21 - 2015-11-18 14:22 - 54890200 _____ (Microsoft Corporation) C:\Users\Famelie\Downloads\Windows-KB890830-V5.30.exe
2015-11-18 14:02 - 2015-11-20 23:47 - 00001006 _____ C:\Windows\Tasks\Mfq2zLRigZ5Oi.job
2015-11-18 14:01 - 2015-11-21 02:27 - 00000000 ____D C:\Program Files\ca373d01-2b6e-4153-b669-af6ed8d41ee2
2015-11-18 14:00 - 2015-11-21 02:27 - 00000000 ____D C:\Program Files\CinemaP-1.9cV09.11
2015-11-18 14:00 - 2015-11-20 22:45 - 00000004 _____ C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
2015-11-18 14:00 - 2015-11-18 14:00 - 00000000 ____D C:\Users\Famelie\AppData\Roaming\Opera Software
2015-11-18 14:00 - 2015-11-18 14:00 - 00000000 ____D C:\Users\Famelie\AppData\Local\Opera Software
2015-11-18 13:59 - 2015-11-18 13:59 - 00001093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-11-18 13:58 - 2015-11-21 02:27 - 00000000 ____D C:\ProgramData\ApplicationHosting
2015-11-18 13:58 - 2015-11-18 13:58 - 00000000 ____D C:\Program Files\Common Files\Alphafind
2015-11-18 01:09 - 2015-11-18 19:37 - 00000000 ____D C:\mw3
2015-11-17 12:45 - 2015-11-17 12:45 - 00101534 _____ C:\Users\Famelie\Downloads\tiket.xps
2015-11-15 22:21 - 2015-11-15 22:21 - 00000000 ____D C:\Users\Famelie\AppData\Roaming\WinRAR
2015-11-12 18:10 - 2015-11-12 18:18 - 00003519 _____ C:\Users\Famelie\Documents\Zamolba za posao - Kaufland.odt
2015-11-12 14:45 - 2015-11-03 18:46 - 02386944 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-11-10 20:21 - 2015-11-03 22:51 - 00342728 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-11-10 20:21 - 2015-10-30 23:58 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-11-10 20:21 - 2015-10-30 23:58 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-11-10 20:21 - 2015-10-30 23:52 - 20331520 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-11-10 20:21 - 2015-10-30 23:47 - 00504832 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-11-10 20:21 - 2015-10-30 23:46 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-11-10 20:21 - 2015-10-30 23:45 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-11-10 20:21 - 2015-10-30 23:45 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-11-10 20:21 - 2015-10-30 23:44 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-11-10 20:21 - 2015-10-30 23:42 - 02279936 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-11-10 20:21 - 2015-10-30 23:39 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-11-10 20:21 - 2015-10-30 23:39 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-11-10 20:21 - 2015-10-30 23:37 - 00480256 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-11-10 20:21 - 2015-10-30 23:36 - 00663552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-11-10 20:21 - 2015-10-30 23:36 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-11-10 20:21 - 2015-10-30 23:36 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-11-10 20:21 - 2015-10-30 23:36 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-11-10 20:21 - 2015-10-30 23:31 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-11-10 20:21 - 2015-10-30 23:28 - 00416256 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-11-10 20:21 - 2015-10-30 23:23 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-11-10 20:21 - 2015-10-30 23:21 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-11-10 20:21 - 2015-10-30 23:19 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-11-10 20:21 - 2015-10-30 23:18 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-11-10 20:21 - 2015-10-30 23:17 - 00130048 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2015-11-10 20:21 - 2015-10-30 23:16 - 04527616 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-11-10 20:21 - 2015-10-30 23:11 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-11-10 20:21 - 2015-10-30 23:10 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-11-10 20:21 - 2015-10-30 23:09 - 12854272 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-11-10 20:21 - 2015-10-30 23:09 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-11-10 20:21 - 2015-10-30 23:09 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-11-10 20:21 - 2015-10-30 23:09 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-11-10 20:21 - 2015-10-30 22:51 - 02011136 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-11-10 20:21 - 2015-10-30 22:48 - 01311744 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-11-10 20:21 - 2015-10-30 22:46 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-11-10 20:21 - 2015-09-23 14:09 - 00371920 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-11-10 20:21 - 2015-09-23 14:09 - 00251000 _____ (Microsoft Corporation) C:\Windows\system32\bcryptprimitives.dll
2015-11-10 20:17 - 2015-10-20 18:46 - 02955776 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-11-10 20:17 - 2015-10-20 18:46 - 02061824 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-11-10 20:17 - 2015-10-20 18:46 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-11-10 20:17 - 2015-10-20 18:46 - 00174080 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-11-10 20:17 - 2015-10-20 18:46 - 00093696 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-11-10 20:17 - 2015-10-20 18:46 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-11-10 20:17 - 2015-10-20 18:46 - 00030208 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-11-10 20:17 - 2015-10-20 18:45 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-11-10 20:17 - 2015-10-20 18:45 - 00073728 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-11-10 20:17 - 2015-10-20 18:45 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-11-10 20:17 - 2015-10-20 18:45 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-11-10 20:17 - 2015-10-01 18:50 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-11-10 20:17 - 2015-10-01 18:50 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-11-10 20:16 - 2015-10-29 18:50 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-11-10 20:16 - 2015-10-29 18:49 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-11-10 20:16 - 2015-10-29 18:49 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-11-10 20:16 - 2015-10-29 18:49 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-11-10 20:16 - 2015-10-20 01:52 - 03991488 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-11-10 20:16 - 2015-10-20 01:52 - 03935680 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-11-10 20:16 - 2015-10-20 01:52 - 00138176 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-11-10 20:16 - 2015-10-20 01:52 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-11-10 20:16 - 2015-10-20 01:48 - 01308160 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00655360 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00552960 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-11-10 20:16 - 2015-10-20 01:45 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00251392 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00223232 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-11-10 20:16 - 2015-10-20 01:45 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-11-10 20:16 - 2015-10-20 01:45 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-11-10 20:16 - 2015-10-20 01:44 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-11-10 20:16 - 2015-10-20 01:44 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-11-10 20:16 - 2015-10-20 01:39 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-11-10 20:16 - 2015-10-20 01:39 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-11-10 20:16 - 2015-10-20 01:35 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-11-10 20:16 - 2015-10-20 01:35 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-11-10 20:16 - 2015-10-20 00:29 - 00225792 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-11-10 20:16 - 2015-10-20 00:28 - 00124416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-11-10 20:16 - 2015-10-20 00:28 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-11-10 20:16 - 2015-10-13 17:31 - 00338944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\afd.sys
2015-11-10 20:16 - 2015-10-13 17:31 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdx.sys
2015-11-10 20:16 - 2015-10-13 05:50 - 00712640 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ndis.sys
2015-11-10 14:52 - 2015-11-10 14:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2015-11-10 14:52 - 2015-11-10 14:52 - 00000000 ____D C:\Program Files\McAfee Security Scan
2015-11-08 14:02 - 2015-11-08 14:02 - 00000000 ____D C:\Users\Famelie\AppData\Local\WinZip
2015-11-08 14:02 - 2015-11-08 14:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
2015-11-08 14:02 - 2015-11-08 14:02 - 00000000 ____D C:\Program Files\WinZip
2015-11-07 15:40 - 2008-05-30 14:19 - 00507400 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_1.dll
2015-11-07 15:40 - 2008-05-30 14:18 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_1.dll
2015-11-07 15:40 - 2008-05-30 14:17 - 00065032 _____ (Microsoft Corporation) C:\Windows\system32\XAPOFX1_0.dll
2015-11-07 15:40 - 2008-05-30 14:17 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_4.dll
2015-11-07 15:40 - 2008-05-30 14:11 - 03850760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_38.dll
2015-11-07 15:40 - 2008-05-30 14:11 - 01491992 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_38.dll
2015-11-07 15:40 - 2008-05-30 14:11 - 00467984 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_38.dll
2015-11-07 15:40 - 2008-03-05 16:03 - 00479752 _____ (Microsoft Corporation) C:\Windows\system32\XAudio2_0.dll
2015-11-07 15:40 - 2008-03-05 16:03 - 00238088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine3_0.dll
2015-11-07 15:40 - 2008-03-05 16:00 - 00025608 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_3.dll
2015-11-07 15:40 - 2008-03-05 15:56 - 03786760 _____ (Microsoft Corporation) C:\Windows\system32\D3DX9_37.dll
2015-11-07 15:40 - 2008-03-05 15:56 - 01420824 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_37.dll
2015-11-07 15:40 - 2008-02-05 23:07 - 00462864 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_37.dll
2015-11-07 15:40 - 2007-10-22 03:39 - 00267272 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_10.dll
2015-11-07 15:40 - 2007-10-22 03:37 - 00017928 _____ (Microsoft Corporation) C:\Windows\system32\X3DAudio1_2.dll
2015-11-07 15:40 - 2007-10-12 15:14 - 03734536 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_36.dll
2015-11-07 15:40 - 2007-10-12 15:14 - 01374232 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_36.dll
2015-11-07 15:40 - 2007-10-02 09:56 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_36.dll
2015-11-07 15:40 - 2007-07-20 00:57 - 00267112 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_9.dll
2015-11-07 15:40 - 2007-07-19 18:14 - 03727720 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_35.dll
2015-11-07 15:40 - 2007-07-19 18:14 - 01358192 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_35.dll
2015-11-07 15:40 - 2007-07-19 18:14 - 00444776 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_35.dll
2015-11-07 15:40 - 2007-06-20 20:46 - 00266088 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_8.dll
2015-11-07 15:40 - 2007-05-16 16:45 - 03497832 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_34.dll
2015-11-07 15:40 - 2007-05-16 16:45 - 01124720 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_34.dll
2015-11-07 15:40 - 2007-05-16 16:45 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_34.dll
2015-11-07 15:40 - 2007-04-04 18:55 - 00261480 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_7.dll
2015-11-07 15:40 - 2007-04-04 18:53 - 00081768 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_3.dll
2015-11-07 15:40 - 2007-03-15 16:57 - 00443752 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10_33.dll
2015-11-07 15:40 - 2007-03-12 16:42 - 03495784 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_33.dll
2015-11-07 15:40 - 2007-03-12 16:42 - 01123696 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_33.dll
2015-11-07 15:40 - 2007-03-05 12:42 - 00015128 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_1.dll
2015-11-07 15:40 - 2007-01-24 15:27 - 00255848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_6.dll
2015-11-07 15:40 - 2006-12-08 12:02 - 00251672 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_5.dll
2015-11-07 15:40 - 2006-11-29 13:06 - 03426072 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_32.dll
2015-11-07 15:40 - 2006-11-29 13:06 - 00440080 _____ (Microsoft Corporation) C:\Windows\system32\d3dx10.dll
2015-11-07 15:40 - 2006-09-28 16:05 - 02414360 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_31.dll
2015-11-07 15:40 - 2006-09-28 16:05 - 00237848 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_4.dll
2015-11-07 15:40 - 2006-07-28 09:30 - 00236824 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_3.dll
2015-11-07 15:40 - 2006-07-28 09:30 - 00062744 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_2.dll
2015-11-07 15:40 - 2006-05-31 07:24 - 00230168 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_2.dll
2015-11-07 15:40 - 2006-03-31 12:39 - 00229584 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_1.dll
2015-11-07 15:40 - 2006-03-31 12:39 - 00062672 _____ (Microsoft Corporation) C:\Windows\system32\xinput1_1.dll
2015-11-07 15:39 - 2006-03-31 12:40 - 02388176 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_30.dll
2015-11-07 15:39 - 2006-02-03 08:43 - 02332368 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_29.dll
2015-11-07 15:39 - 2006-02-03 08:42 - 00230096 _____ (Microsoft Corporation) C:\Windows\system32\xactengine2_0.dll
2015-11-07 15:39 - 2006-02-03 08:41 - 00014032 _____ (Microsoft Corporation) C:\Windows\system32\x3daudio1_0.dll
2015-11-07 15:39 - 2005-12-05 18:09 - 02323664 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_28.dll
2015-11-07 15:39 - 2005-07-22 19:59 - 02319568 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_27.dll
2015-11-07 15:39 - 2005-05-26 15:34 - 02297552 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_26.dll
2015-11-07 15:39 - 2005-03-18 17:19 - 02337488 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_25.dll
2015-11-07 15:39 - 2005-02-05 19:45 - 02222800 _____ (Microsoft Corporation) C:\Windows\system32\d3dx9_24.dll
2015-11-07 15:38 - 2015-11-08 12:33 - 00138464 _____ C:\Windows\system32\Drivers\PnkBstrK.sys
2015-11-07 15:38 - 2015-11-08 12:33 - 00111928 _____ C:\Windows\system32\PnkBstrB.exe
2015-11-07 15:38 - 2015-11-07 15:38 - 00682280 _____ C:\Windows\system32\pbsvc.exe
2015-11-07 15:38 - 2015-11-07 15:38 - 00066872 _____ C:\Windows\system32\PnkBstrA.exe
2015-11-07 15:38 - 2015-11-07 15:38 - 00022328 _____ C:\Users\Famelie\AppData\Roaming\PnkBstrK.sys
2015-11-07 12:36 - 2015-11-07 12:36 - 00032163 _____ C:\Users\Famelie\Downloads\Call.Of.Duty.World.At.War+-+RELOADED+%283741850%29.torrent
2015-11-07 12:34 - 2015-11-07 12:34 - 00032110 _____ C:\Users\Famelie\Downloads\Call+Of+Duty+World+At+War-RELOADED+.torrent
2015-11-02 11:28 - 2015-11-02 11:28 - 00000383 _____ C:\ftconfig.ini
2015-11-01 18:00 - 2015-11-01 18:00 - 00000000 ____D C:\HOI3
2015-10-30 01:10 - 2015-10-30 01:10 - 01926703 _____ C:\Users\Famelie\Downloads\betting_tracker_v2_20_basic.xlsx
2015-10-25 17:32 - 2015-10-25 17:32 - 00000000 ____D C:\metro 2033
2015-10-25 17:31 - 2015-10-25 17:32 - 83552566 _____ C:\Users\Famelie\Downloads\Metro 2033 OST.rar
2015-10-25 13:23 - 2015-10-25 13:23 - 00017678 _____ C:\Users\Famelie\Downloads\fixed match.rar
2015-10-23 18:26 - 2015-10-23 18:26 - 00012747 _____ C:\Users\Famelie\Downloads\[kat.cr]21.2008.720p.550mb.yify.torrent
 
==================== One Month Modified files and folders ========
 
(If an entry is included in the fixlist, the file/folder will be moved.)
 
2015-11-21 03:55 - 2014-03-01 19:47 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-21 03:48 - 2015-04-28 19:12 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-21 03:27 - 2015-04-28 19:12 - 00000892 _____ C:\Windows\Tasks\Adobe Flash Player PPAPI Notifier.job
2015-11-21 03:18 - 2015-06-15 15:01 - 00000000 ____D C:\rar
2015-11-21 03:00 - 2013-08-22 06:32 - 01105086 _____ C:\Windows\WindowsUpdate.log
2015-11-21 02:28 - 2014-03-01 19:53 - 00000000 ____D C:\ProgramData\MFAData
2015-11-21 02:27 - 2014-06-05 21:02 - 00000000 ____D C:\Program Files\globalUpdate
2015-11-21 02:27 - 2014-03-01 19:36 - 00000000 ____D C:\Program Files\AMD APP
2015-11-21 00:41 - 2015-04-29 13:24 - 00170200 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-11-20 22:58 - 2009-07-14 05:34 - 00038384 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-20 22:58 - 2009-07-14 05:34 - 00038384 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-20 22:50 - 2013-08-22 06:39 - 00781782 _____ C:\Windows\system32\PerfStringBackup.INI
2015-11-20 22:48 - 2014-03-07 20:25 - 00000382 _____ C:\Windows\Tasks\FreeFileViewerUpdateChecker.job
2015-11-20 22:45 - 2014-03-01 19:47 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-20 22:43 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-20 22:43 - 2009-07-14 05:39 - 00063013 _____ C:\Windows\setupact.log
2015-11-18 19:14 - 2014-03-01 20:22 - 00000000 ____D C:\Users\Famelie\AppData\Roaming\uTorrent
2015-11-18 02:31 - 2014-05-28 20:58 - 00000000 ___HD C:\Windows\msdownld.tmp
2015-11-18 02:31 - 2014-05-28 20:58 - 00000000 ____D C:\Windows\system32\directx
2015-11-13 14:53 - 2009-07-14 05:33 - 00269136 _____ C:\Windows\system32\FNTCACHE.DAT
2015-11-12 18:09 - 2015-08-23 22:13 - 00003565 _____ C:\Users\Famelie\Documents\Zamolba za posao - LIDL d.o.o (Dubrava).odt
2015-11-12 06:57 - 2014-03-01 19:48 - 00002125 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-11 15:48 - 2014-03-02 01:21 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-11-11 15:48 - 2014-03-02 01:21 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-11-11 04:22 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\rescache
2015-11-11 03:50 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Microsoft.NET
2015-11-11 03:42 - 2009-07-14 08:50 - 00000000 ____D C:\Program Files\Windows Journal
2015-11-11 03:27 - 2014-06-24 13:54 - 00000000 ____D C:\Windows\system32\MRT
2015-11-10 14:52 - 2015-05-16 13:38 - 00002007 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2015-11-09 16:46 - 2015-06-24 11:17 - 00000000 ____D C:\Users\Famelie\Downloads\(1) Mikrovalna Hladnjača_files
2015-11-08 20:36 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\NDF
2015-11-08 14:03 - 2014-03-01 19:29 - 00000000 ____D C:\ProgramData\WinZip
2015-11-08 14:02 - 2014-03-01 19:29 - 00002205 _____ C:\Users\Public\Desktop\WinZip.lnk
2015-11-08 14:02 - 2013-08-21 21:51 - 00000000 ____D C:\Users\Famelie
2015-11-08 13:14 - 2009-07-14 05:52 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-11-07 15:43 - 2014-04-26 23:05 - 00000000 ____D C:\Users\Famelie\AppData\Local\PunkBuster
2015-11-07 15:38 - 2014-03-01 19:38 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-11-07 15:38 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-11-01 15:54 - 2014-03-01 20:38 - 00000000 ____D C:\ProgramData\TEMP
2015-10-27 18:44 - 2014-06-24 13:54 - 143250520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 
==================== Files in the root of some directories =======
 
2014-08-16 19:19 - 2014-02-06 19:06 - 0070210 _____ () C:\Program Files\EULA.eng
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\Famelie\AppData\Roaming\Mfq2zLRigZ5Oi
2015-11-07 15:38 - 2015-11-07 15:38 - 0022328 _____ () C:\Users\Famelie\AppData\Roaming\PnkBstrK.sys
2014-03-03 00:11 - 2014-03-04 23:43 - 1626786 _____ () C:\Users\Famelie\AppData\Roaming\temp.bmp
2014-03-06 01:25 - 2014-03-06 01:25 - 0002238 _____ () C:\Users\Famelie\AppData\Local\QuickLink-777 Dragon Flash Casino.ico
 
Some files in TEMP:
====================
C:\Users\Famelie\AppData\Local\Temp\Opera_NI_stable.exe
 
 
==================== Bamital & volsnap =================
 
(There is no automatic fix for files that do not pass verification.)
 
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
 
 
LastRegBack: 2015-11-11 04:14
 
==================== End of FRST.txt ============================


BC AdBot (Login to Remove)

 


#2 shelf life

shelf life

  • Malware Response Team
  • 2,673 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:@localhost
  • Local time:12:03 PM

Posted 22 November 2015 - 02:23 PM

hi,

​Iam only online once or twice per day so you may not get a reply back from me until the following day. We will use FRST to remove some items.

​Copy/paste whats below in the code box into notepad. Save it as fixlist.txt
in the same location you have FRST.

Start FRST like you did before except this time click on the fix button once. Machine may reboot to finish. Upon restart you will find a new log in the same location as FRST called fixlog.txt. Please post the fixlog.txt in your reply.

HKLM\...\Run: [DApp] => C:\Program Files\PCDApp\start.vbs [178 2014-04-10] ()
GroupPolicy: Restriction - Chrome <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
SearchScopes: HKU\S-1-5-21-2242160561-2063767234-543261399-1000 -> {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = 
C:\Program Files\PCDApp\start.vbs
2015-11-18 14:02 - 2015-11-20 23:47 - 00001006 _____ C:\Windows\Tasks\Mfq2zLRigZ5Oi.job
2015-11-18 14:01 - 2015-11-21 02:27 - 00000000 ____D C:\Program Files\ca373d01-2b6e-4153-b669-af6ed8d41ee2
2014-08-16 19:19 - 2014-02-06 19:06 - 0070210 _____ () C:\Program Files\EULA.eng
2015-04-19 13:20 - 2015-04-19 13:20 - 0005872 _____ () C:\Users\Famelie\AppData\Roaming\Mfq2zLRigZ5Oi
2015-11-07 15:38 - 2015-11-07 15:38 - 0022328 _____ () C:\Users\Famelie\AppData\Roaming\PnkBstrK.sys
2014-03-03 00:11 - 2014-03-04 23:43 - 1626786 _____ () C:\Users\Famelie\AppData\Roaming\temp.bmp
2014-03-06 01:25 - 2014-03-06 01:25 - 0002238 _____ () C:\Users\Famelie\AppData\Local\QuickLink-777 Dragon Flash Casino.ico
EmptyTemp

​Upon reboot update and run Malwarebytes. You have two AV installed, AVAST and AVG. Only need one. you can remove one of them via the add/remove programs panel. See how all that goes and we will go from there.


How Can I Reduce My Risk to Malware?





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users