MyCity » Ambulanta -> Arhiva Ambulante » Virus (gamereleasedate.info/zpage.html)

Virus (gamereleasedate.info/zpage.html)

Napisano na dan: 26.3.2018

Virus (gamereleasedate.info/zpage.html)

Odgovori

MAKEDONAC Poslao: 26 Mar 2018 19:52 Idi na vrh
offline MAKEDONAC Ugledni građanin Pridružio: 22 Avg 2006 Poruke: 425 Gde živiš: Kranj	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav svima kako ukloniti ovaj virus ? Stalno kada upalim kompjuter otvori se ova stranica (http://gamereleasedate.info/zpage.html) koristim Chrome Web Browser .

Profil

helen1 Poslao: 26 Mar 2018 20:34 Idi na vrh
offline helen1 Anti Malware Fighter Rank 2 Master učitelj Pridružio: 27 Avg 2005 Poruke: 8617 Gde živiš: Novi Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav, https://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

Profil

MAKEDONAC Poslao: 26 Mar 2018 20:59 Idi na vrh
offline MAKEDONAC Ugledni građanin Pridružio: 22 Avg 2006 Poruke: 425 Gde živiš: Kranj	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: https://www.mycity.rs/must-login.png https://www.mycity.rs/must-login.png Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 14.03.2018 Ran by Givi (administrator) on DESKTOP-I1NHRFQ (26-03-2018 21:56:18) Running from C:\Users\Givi\Desktop Loaded Profiles: Givi (Available Profiles: Givi) Platform: Windows 10 Pro Version 1709 16299.309 (X64) Language: slovenščina (Slovenija) Internet Explorer Version 11 (Default browser: Chrome) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Electronic Arts) E:\Nova mapa\Origin\OriginWebHelperService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.1809.217.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.7\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe (Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe (© 2015 Microsoft Corporation) C:\Users\Givi\AppData\Local\Microsoft\BingSvc\BingSvc.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe (Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_11802.1001.11.0_x64__8wekyb3d8bbwe\WinStore.App.exe () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1803.711.0_x64__8wekyb3d8bbwe\Calculator.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe ==================== Registry (Whitelisted) =========================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [SecurityHealth] => C:\Program Files\Windows Defender\MSASCuiL.exe [630168 2017-09-29] (Microsoft Corporation) HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [245608 2018-03-11] (AVAST Software) HKLM-x32\...\Run: [LWS] => C:\Program Files (x86)\Logitech\LWS\Webcam Software\LWS.exe [204136 2012-09-13] (Logitech Inc.) HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation) HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3198752 2018-03-23] (Valve Corporation) HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [EADM] => E:\Nova mapa\Origin\Origin.exe [3098920 2017-12-19] (Electronic Arts) HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [BingSvc] => C:\Users\Givi\AppData\Local\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-05] (© 2015 Microsoft Corporation) HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [withSIX] => C:\Users\Givi\AppData\Local\Sync\Update.exe [1601536 2017-05-08] () HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [Discord] => C:\Users\Givi\AppData\Local\Discord\app-0.0.300\Discord.exe [57821176 2018-01-08] (Discord Inc.) HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [27832264 2017-10-06] (Skype Technologies S.A.) HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [Givi] => explorer.exe hxxp://ozirizsoos.info <==== ATTENTION HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [17074688 2018-03-06] (Piriform Ltd) ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) Tcpip\Parameters: [DhcpNameServer] 217.72.64.222 31.15.131.11 Tcpip\..\Interfaces\{c33e23f4-5dc0-4493-8f3b-67506c128223}: [DhcpNameServer] 217.72.64.222 31.15.131.11 Internet Explorer: ================== HKU\S-1-5-21-886319223-4001138074-2591277075-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.fi/?gws_rd=ssl#spf=1 BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_144\bin\ssv.dll [2017-08-10] (Oracle Corporation) BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-10] (Oracle Corporation) DPF: HKLM-x32 {CC4271BF-1582-4FD4-81CD-9AE877B17644} hxxps://elba.gbkr.si/linkprod/ESignDocControls/hslESignDoc2.cab FireFox: ======== FF DefaultProfile: xk5ay9rj.default-1504462917321 FF ProfilePath: C:\Users\Givi\AppData\Roaming\Mozilla\Firefox\Profiles\xk5ay9rj.default-1504462917321 [2018-03-26] FF Extension: (Avast SafePrice) - C:\Users\Givi\AppData\Roaming\Mozilla\Firefox\Profiles\xk5ay9rj.default-1504462917321\Extensions\sp@avast.com.xpi [2018-02-03] FF Extension: (Avast Online Security) - C:\Users\Givi\AppData\Roaming\Mozilla\Firefox\Profiles\xk5ay9rj.default-1504462917321\Extensions\wrc@avast.com.xpi [2018-02-03] FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_221.dll [2017-03-19] () FF Plugin: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-10] (Oracle Corporation) FF Plugin: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-10] (Oracle Corporation) FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_24_0_0_221.dll [2017-03-19] () FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [2013-09-16] (ESN Social Software AB) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2017-10-27] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2017-10-27] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-02-27] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2018-02-27] (Google Inc.) Chrome: ======= CHR HomePage: Default -> msn.com CHR StartupUrls: Default -> "hxxp://www.google.com/","hxxp://www.istartsurf.com/?type=hp&ts=1439507943&z=616da4003570617d07e9499gazbcat5wceam0b6w3q&from=obw&uid=WDCXWD3200AAJS-00VWA0_WD-WMARW008462484624" CHR DefaultSearchURL: Default -> hxxp://www.bing.com/search?FORM=__PARAM__DF&PC=__PARAM__&q={searchTerms} CHR DefaultSearchKeyword: Default -> bing.com CHR DefaultSuggestURL: Default -> hxxp://www.bing.com/osjson.aspx?FORM=__PARAM__DF&PC=__PARAM__&query={searchTerms} CHR Profile: C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default [2018-03-26] CHR Extension: (Predstavitve) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2018-02-27] CHR Extension: (Replace Favicon) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\akaelkiagnbfcccfnmbimdbplecgbikh [2018-03-03] CHR Extension: (Google Dokumenti) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2018-02-27] CHR Extension: (Google Drive) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-02-27] CHR Extension: (YouTube) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2018-02-27] CHR Extension: (Avast SafePrice) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2018-03-08] CHR Extension: (Preglednice) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2018-02-27] CHR Extension: (Google Dokumenti brez povezave) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2018-02-27] CHR Extension: (Avast Online Security) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2018-03-07] CHR Extension: (EasyPDFCombine) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpocjpoifmommoiiiamepombpeoaehfh [2018-03-21] CHR Extension: (Ask Web Search) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgfehfbnofiffladdncogfobimealokp [2018-03-20] CHR Extension: (FromDocToPDF) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\mallpejgeafdahhflmliiahjdpgbegpk [2018-03-21] CHR Extension: (Search with Yahoo) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmdkdncigplhkbhcfifnimpdficjhhnn [2018-02-27] CHR Extension: (Plačila v spletni trgovini Chrome) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-02-27] CHR Extension: (Gmail) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2018-02-27] CHR Extension: (Chrome Media Router) - C:\Users\Givi\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-03-07] CHR HKU\S-1-5-21-886319223-4001138074-2591277075-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - hxxps://clients2.google.com/service/update2/crx CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - hxxps://clients2.google.com/service/update2/crx ==================== Services (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7556704 2018-03-11] (AVAST Software) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [303728 2018-03-11] (AVAST Software) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [7002120 2017-12-21] () S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [774272 2018-03-15] (EasyAntiCheat Ltd) S3 mracsvc; C:\WINDOWS\System32\mracsvc.exe [8010968 2018-02-01] (LLC Mail.Ru) R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation) S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [518080 2017-10-11] (NVIDIA Corporation) S3 Origin Client Service; E:\Nova mapa\Origin\OriginClientService.exe [2155328 2017-12-19] (Electronic Arts) R2 Origin Web Helper Service; E:\Nova mapa\Origin\OriginWebHelperService.exe [3025224 2017-12-19] (Electronic Arts) R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2017-10-12] () S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [4329952 2017-12-13] (Microsoft Corporation) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [10945776 2017-12-15] (TeamViewer GmbH) S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\NisSrv.exe [356168 2018-02-26] (Microsoft Corporation) S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.12.17007.18011-0\MsMpEng.exe [105792 2018-02-26] (Microsoft Corporation) R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r ===================== Drivers (Whitelisted) ====================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [196648 2018-03-11] (AVAST Software) R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdrivera.sys [227504 2018-03-11] (AVAST Software) R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsha.sys [199440 2018-03-11] (AVAST Software) R0 aswblog; C:\WINDOWS\System32\drivers\aswbloga.sys [343752 2018-03-11] (AVAST Software) R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniva.sys [57680 2018-03-11] (AVAST Software) R1 aswHdsKe; C:\WINDOWS\System32\drivers\aswHdsKe.sys [215320 2018-03-11] (AVAST Software) S3 aswHwid; C:\WINDOWS\System32\drivers\aswHwid.sys [46968 2018-03-11] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [146656 2018-03-11] (AVAST Software) R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [110328 2018-03-11] (AVAST Software) R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [84368 2018-03-11] (AVAST Software) R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [1026696 2018-03-11] (AVAST Software) R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [460520 2018-03-11] (AVAST Software) R2 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [205976 2018-03-11] (AVAST Software) R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [380528 2018-03-11] (AVAST Software) S1 MpKsleb6f3985; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{85AEBF8D-1243-41F5-89DC-DA5B71507C9F}\MpKsleb6f3985.sys [58120 2018-02-27] () [File not signed] S3 mracdrv; C:\WINDOWS\System32\drivers\mracdrv.sys [7238880 2018-02-01] (LLC Mail.Ru) R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_ref_pubwu.inf_amd64_2e7fa54192fe16d0\nvlddmkm.sys [16936048 2017-11-09] (NVIDIA Corporation) S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [30144 2017-10-11] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [50624 2017-10-11] (NVIDIA Corporation) R3 nvvhci; C:\WINDOWS\System32\drivers\nvvhci.sys [57792 2017-10-11] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [604160 2017-09-29] (Realtek ) S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [46072 2018-02-26] (Microsoft Corporation) S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [288848 2018-02-26] (Microsoft Corporation) S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [129616 2018-02-26] (Microsoft Corporation) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-03-26 21:56 - 2018-03-26 21:56 - 000017476 _____ C:\Users\Givi\Desktop\FRST.txt 2018-03-26 21:56 - 2018-03-26 21:56 - 000000000 ____D C:\FRST 2018-03-26 21:40 - 2018-03-26 21:40 - 002403328 _____ (Farbar) C:\Users\Givi\Desktop\FRST64.exe 2018-03-26 20:20 - 2018-03-26 20:20 - 000003936 _____ C:\WINDOWS\System32\Tasks\CCleaner Update 2018-03-26 20:20 - 2018-03-26 20:20 - 000002868 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC 2018-03-26 20:20 - 2018-03-26 20:20 - 000000863 _____ C:\Users\Public\Desktop\CCleaner.lnk 2018-03-26 20:20 - 2018-03-26 20:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner 2018-03-26 20:20 - 2018-03-26 20:20 - 000000000 ____D C:\Program Files\CCleaner 2018-03-21 16:08 - 2018-03-21 16:11 - 000000000 ____D C:\Users\Givi\Desktop\rwv 2018-03-21 15:56 - 2018-03-25 10:54 - 000000000 ____D C:\Users\Givi\AppData\Roaming\Raven 2018-03-21 15:53 - 2018-03-21 15:51 - 015901279 _____ C:\Users\Givi\Desktop\ccminer-x64-2.2.5-rvn-cuda9.7z 2018-03-20 22:23 - 2018-03-20 22:23 - 000000000 ____D C:\Users\Givi\Documents\BlackSquad 2018-03-20 22:04 - 2018-03-20 22:04 - 000000222 _____ C:\Users\Givi\Desktop\Black Squad.url 2018-03-17 19:28 - 2018-03-17 00:26 - 000000237 ___SH C:\Users\Public\Libraries.ini 2018-03-17 19:23 - 2018-03-17 19:51 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat 2018-03-17 19:12 - 2018-03-17 19:12 - 000001270 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Epic Games Launcher.lnk 2018-03-17 19:12 - 2018-03-17 19:12 - 000001258 _____ C:\Users\Public\Desktop\Epic Games Launcher.lnk 2018-03-17 19:12 - 2018-03-17 19:12 - 000000000 ____D C:\Users\Givi\AppData\Local\UnrealEngineLauncher 2018-03-17 19:12 - 2018-03-17 19:12 - 000000000 ____D C:\Users\Givi\AppData\Local\EpicGamesLauncher 2018-03-17 19:11 - 2018-03-17 19:12 - 000000000 ____D C:\ProgramData\Epic 2018-03-17 19:11 - 2018-03-17 19:11 - 000000000 ____D C:\Program Files (x86)\Epic Games 2018-03-16 16:19 - 2018-03-16 16:19 - 000000000 ____D C:\Users\Givi\AppData\Local\SCE 2018-03-15 22:03 - 2018-03-15 22:03 - 000000222 _____ C:\Users\Givi\Desktop\H1Z1.url 2018-03-15 20:34 - 2018-03-15 20:34 - 000000234 _____ C:\Users\Givi\Desktop\FC5 game.url 2018-03-15 19:36 - 2018-03-02 05:36 - 017085440 _____ (Microsoft Corporation) C:\WINDOWS\system32\HologramCompositor.dll 2018-03-15 19:36 - 2018-03-02 05:02 - 000037888 _____ C:\WINDOWS\system32\SpectrumSyncClient.dll 2018-03-15 19:36 - 2018-03-02 05:01 - 000640000 _____ (Microsoft Corporation) C:\WINDOWS\system32\HeadTrackerStorage.dll 2018-03-15 19:36 - 2018-03-02 05:00 - 000329728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Feedback.Analog.dll 2018-03-15 19:36 - 2018-03-02 05:00 - 000248320 _____ (Microsoft Corporation) C:\WINDOWS\system32\svf.dll 2018-03-15 19:36 - 2018-03-02 05:00 - 000230912 _____ (Microsoft Corporation) C:\WINDOWS\system32\HoloShellRuntime.dll 2018-03-15 19:36 - 2018-03-02 04:59 - 000956416 _____ (Microsoft Corporation) C:\WINDOWS\system32\Spectrum.exe 2018-03-15 19:36 - 2018-03-01 22:28 - 000181760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\HoloShellRuntime.dll 2018-03-15 19:36 - 2018-03-01 09:50 - 000270744 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll 2018-03-15 19:36 - 2018-03-01 09:49 - 000389536 _____ (Microsoft Corporation) C:\WINDOWS\system32\invagent.dll 2018-03-15 19:36 - 2018-03-01 09:48 - 000664472 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2018-03-15 19:36 - 2018-03-01 09:47 - 000749464 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll 2018-03-15 19:36 - 2018-03-01 09:47 - 000035224 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe 2018-03-15 19:36 - 2018-03-01 09:46 - 002003352 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe 2018-03-15 19:36 - 2018-03-01 09:46 - 001568664 _____ (Microsoft Corporation) C:\WINDOWS\system32\appraiser.dll 2018-03-15 19:36 - 2018-03-01 09:46 - 000609176 _____ (Microsoft Corporation) C:\WINDOWS\system32\devinv.dll 2018-03-15 19:36 - 2018-03-01 09:46 - 000138144 _____ (Microsoft Corporation) C:\WINDOWS\system32\CompatTelRunner.exe 2018-03-15 19:36 - 2018-03-01 09:45 - 000070040 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32appinventorycsp.dll 2018-03-15 19:36 - 2018-03-01 09:40 - 002514936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KernelBase.dll 2018-03-15 19:36 - 2018-03-01 09:40 - 000461720 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcntel.dll 2018-03-15 19:36 - 2018-03-01 09:40 - 000273304 _____ (Microsoft Corporation) C:\WINDOWS\system32\aepic.dll 2018-03-15 19:36 - 2018-03-01 09:37 - 007831760 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d10warp.dll 2018-03-15 19:36 - 2018-03-01 09:31 - 008602520 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2018-03-15 19:36 - 2018-03-01 09:30 - 000540064 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcasvc.dll 2018-03-15 19:36 - 2018-03-01 09:30 - 000264040 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotifyIcon.exe 2018-03-15 19:36 - 2018-03-01 09:29 - 000733592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\acpi.sys 2018-03-15 19:36 - 2018-03-01 09:27 - 001173576 _____ (Microsoft Corporation) C:\WINDOWS\system32\rpcrt4.dll 2018-03-15 19:36 - 2018-03-01 09:26 - 000170912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys 2018-03-15 19:36 - 2018-03-01 09:25 - 000377752 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msrpc.sys 2018-03-15 19:36 - 2018-03-01 09:23 - 000749976 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms2.sys 2018-03-15 19:36 - 2018-03-01 09:19 - 000710768 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVideoDSP.dll 2018-03-15 19:36 - 2018-03-01 09:17 - 002710736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll 2018-03-15 19:36 - 2018-03-01 09:17 - 000519152 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthService.exe 2018-03-15 19:36 - 2018-03-01 09:17 - 000408984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgmms1.sys 2018-03-15 19:36 - 2018-03-01 09:15 - 002574232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dxgkrnl.sys 2018-03-15 19:36 - 2018-03-01 09:14 - 007675784 _____ (Microsoft Corporation) C:\WINDOWS\system32\windows.storage.dll 2018-03-15 19:36 - 2018-03-01 09:14 - 007384576 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Protection.PlayReady.dll 2018-03-15 19:36 - 2018-03-01 09:14 - 005105664 _____ (Microsoft Corporation) C:\WINDOWS\system32\AuthFWSnapin.dll 2018-03-15 19:36 - 2018-03-01 09:14 - 001694224 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2018-03-15 19:36 - 2018-03-01 09:14 - 000356952 _____ (Microsoft Corporation) C:\WINDOWS\system32\wintrust.dll 2018-03-15 19:36 - 2018-03-01 09:14 - 000147872 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcifs.sys 2018-03-15 19:36 - 2018-03-01 09:14 - 000128928 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll 2018-03-15 19:36 - 2018-03-01 09:12 - 000677272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2018-03-15 19:36 - 2018-03-01 09:12 - 000250264 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2018-03-15 19:36 - 2018-03-01 09:12 - 000189344 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthAgent.dll 2018-03-15 19:36 - 2018-03-01 09:11 - 000093600 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2018-03-15 19:36 - 2018-03-01 09:10 - 001779936 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll 2018-03-15 19:36 - 2018-03-01 09:10 - 000075168 _____ (Microsoft Corporation) C:\WINDOWS\system32\SecurityHealthProxyStub.dll 2018-03-15 19:36 - 2018-03-01 09:10 - 000022936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\isapnp.sys 2018-03-15 19:36 - 2018-03-01 09:09 - 001054272 _____ (Microsoft Corporation) C:\WINDOWS\system32\msvproc.dll 2018-03-15 19:36 - 2018-03-01 08:51 - 000777904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rpcrt4.dll 2018-03-15 19:36 - 2018-03-01 08:48 - 001930736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\KernelBase.dll 2018-03-15 19:36 - 2018-03-01 08:39 - 000213400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aepic.dll 2018-03-15 19:36 - 2018-03-01 08:30 - 005615968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d10warp.dll 2018-03-15 19:36 - 2018-03-01 08:29 - 006092152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\windows.storage.dll 2018-03-15 19:36 - 2018-03-01 08:29 - 000574960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVideoDSP.dll 2018-03-15 19:36 - 2018-03-01 08:28 - 006480616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Protection.PlayReady.dll 2018-03-15 19:36 - 2018-03-01 08:28 - 002193168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll 2018-03-15 19:36 - 2018-03-01 08:28 - 000115096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll 2018-03-15 19:36 - 2018-03-01 08:27 - 000284112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wintrust.dll 2018-03-15 19:36 - 2018-03-01 08:27 - 000221592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2018-03-15 19:36 - 2018-03-01 08:26 - 001524776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll 2018-03-15 19:36 - 2018-03-01 08:26 - 001057816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msvproc.dll 2018-03-15 19:36 - 2018-03-01 08:23 - 005105664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AuthFWSnapin.dll 2018-03-15 19:36 - 2018-03-01 08:21 - 001558856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2018-03-15 19:36 - 2018-03-01 08:09 - 025251840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2018-03-15 19:36 - 2018-03-01 08:03 - 002902528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2018-03-15 19:36 - 2018-03-01 08:03 - 000471552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AcSpecfc.dll 2018-03-15 19:36 - 2018-03-01 08:03 - 000344576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgeIso.dll 2018-03-15 19:36 - 2018-03-01 08:03 - 000162304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\IndexedDbLegacy.dll 2018-03-15 19:36 - 2018-03-01 08:03 - 000065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\usoapi.dll 2018-03-15 19:36 - 2018-03-01 08:01 - 019354624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2018-03-15 19:36 - 2018-03-01 08:01 - 006575616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Data.Pdf.dll 2018-03-15 19:36 - 2018-03-01 08:01 - 000155648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EdgeManager.dll 2018-03-15 19:36 - 2018-03-01 08:01 - 000019456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\credssp.dll 2018-03-15 19:36 - 2018-03-01 08:00 - 000098304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TSpkg.dll 2018-03-15 19:36 - 2018-03-01 07:59 - 000220672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MicrosoftAccountWAMExtension.dll 2018-03-15 19:36 - 2018-03-01 07:58 - 004839424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dbgeng.dll 2018-03-15 19:36 - 2018-03-01 07:58 - 000459776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\webplatstorageserver.dll 2018-03-15 19:36 - 2018-03-01 07:58 - 000405504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Payments.dll 2018-03-15 19:36 - 2018-03-01 07:58 - 000368128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\daxexec.dll 2018-03-15 19:36 - 2018-03-01 07:57 - 000369152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msIso.dll 2018-03-15 19:36 - 2018-03-01 07:56 - 018922496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2018-03-15 19:36 - 2018-03-01 07:56 - 000559104 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9diag.dll 2018-03-15 19:36 - 2018-03-01 07:55 - 000346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\zipfldr.dll 2018-03-15 19:36 - 2018-03-01 07:54 - 003664384 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2018-03-15 19:36 - 2018-03-01 07:54 - 003181568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll 2018-03-15 19:36 - 2018-03-01 07:54 - 001296896 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2018-03-15 19:36 - 2018-03-01 07:54 - 000665088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll 2018-03-15 19:36 - 2018-03-01 07:54 - 000496128 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2018-03-15 19:36 - 2018-03-01 07:54 - 000463360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll 2018-03-15 19:36 - 2018-03-01 07:53 - 000863232 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusUpdateHandlers.dll 2018-03-15 19:36 - 2018-03-01 07:53 - 000536576 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgeIso.dll 2018-03-15 19:36 - 2018-03-01 07:53 - 000399872 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotification.exe 2018-03-15 19:36 - 2018-03-01 07:53 - 000246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\MusNotificationUx.exe 2018-03-15 19:36 - 2018-03-01 07:53 - 000206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\IndexedDbLegacy.dll 2018-03-15 19:36 - 2018-03-01 07:53 - 000107520 _____ (Microsoft Corporation) C:\WINDOWS\system32\musdialoghandlers.dll 2018-03-15 19:36 - 2018-03-01 07:53 - 000097792 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatecsp.dll 2018-03-15 19:36 - 2018-03-01 07:53 - 000092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\usoapi.dll 2018-03-15 19:36 - 2018-03-01 07:53 - 000056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\AcSpecfc.dll 2018-03-15 19:36 - 2018-03-01 07:53 - 000039424 _____ (Microsoft Corporation) C:\WINDOWS\system32\UsoClient.exe 2018-03-15 19:36 - 2018-03-01 07:52 - 011923968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll 2018-03-15 19:36 - 2018-03-01 07:52 - 006030336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2018-03-15 19:36 - 2018-03-01 07:51 - 002329088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVidCtl.dll 2018-03-15 19:36 - 2018-03-01 07:51 - 000201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\EdgeManager.dll 2018-03-15 19:36 - 2018-03-01 07:51 - 000034816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\BasicRender.sys 2018-03-15 19:36 - 2018-03-01 07:51 - 000023552 _____ (Microsoft Corporation) C:\WINDOWS\system32\credssp.dll 2018-03-15 19:36 - 2018-03-01 07:50 - 003677184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript9.dll 2018-03-15 19:36 - 2018-03-01 07:50 - 002869760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll 2018-03-15 19:36 - 2018-03-01 07:50 - 000526336 _____ (Microsoft Corporation) C:\WINDOWS\system32\daxexec.dll 2018-03-15 19:36 - 2018-03-01 07:50 - 000118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\TSpkg.dll 2018-03-15 19:36 - 2018-03-01 07:50 - 000075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wcnfs.sys 2018-03-15 19:36 - 2018-03-01 07:49 - 000675328 _____ (Microsoft Corporation) C:\WINDOWS\system32\webplatstorageserver.dll 2018-03-15 19:36 - 2018-03-01 07:49 - 000529408 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\nwifi.sys 2018-03-15 19:36 - 2018-03-01 07:49 - 000301056 _____ (Microsoft Corporation) C:\WINDOWS\system32\MicrosoftAccountWAMExtension.dll 2018-03-15 19:36 - 2018-03-01 07:49 - 000066048 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2018-03-15 19:36 - 2018-03-01 07:48 - 000543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\HolographicExtensions.dll 2018-03-15 19:36 - 2018-03-01 07:48 - 000431616 _____ (Microsoft Corporation) C:\WINDOWS\system32\msIso.dll 2018-03-15 19:36 - 2018-03-01 07:47 - 023674368 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2018-03-15 19:36 - 2018-03-01 07:47 - 000579584 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Payments.dll 2018-03-15 19:36 - 2018-03-01 07:47 - 000484352 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdpusersvc.dll 2018-03-15 19:36 - 2018-03-01 07:46 - 004051968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msi.dll 2018-03-15 19:36 - 2018-03-01 07:46 - 000770048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\WdiWiFi.sys 2018-03-15 19:36 - 2018-03-01 07:46 - 000026624 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msisip.dll 2018-03-15 19:36 - 2018-03-01 07:45 - 000708096 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9diag.dll 2018-03-15 19:36 - 2018-03-01 07:45 - 000594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll 2018-03-15 19:36 - 2018-03-01 07:45 - 000386560 _____ (Microsoft Corporation) C:\WINDOWS\system32\zipfldr.dll 2018-03-15 19:36 - 2018-03-01 07:44 - 008030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Data.Pdf.dll 2018-03-15 19:36 - 2018-03-01 07:44 - 005195776 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll 2018-03-15 19:36 - 2018-03-01 07:43 - 012830208 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll 2018-03-15 19:36 - 2018-03-01 07:42 - 003505664 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVidCtl.dll 2018-03-15 19:36 - 2018-03-01 07:42 - 002084352 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2018-03-15 19:36 - 2018-03-01 07:41 - 008103936 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2018-03-15 19:36 - 2018-03-01 07:41 - 004745728 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript9.dll 2018-03-15 19:36 - 2018-03-01 07:41 - 003334144 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll 2018-03-15 19:36 - 2018-03-01 07:41 - 001548288 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2018-03-15 19:36 - 2018-03-01 07:41 - 000812032 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll 2018-03-15 19:36 - 2018-03-01 07:40 - 005833216 _____ (Microsoft Corporation) C:\WINDOWS\system32\dbgeng.dll 2018-03-15 19:36 - 2018-03-01 07:39 - 002222592 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlidsvc.dll 2018-03-15 19:36 - 2018-03-01 07:39 - 002035712 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2018-03-15 19:36 - 2018-03-01 07:39 - 000899584 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2018-03-15 19:36 - 2018-03-01 07:39 - 000666624 _____ (Microsoft Corporation) C:\WINDOWS\system32\DbgModel.dll 2018-03-15 19:36 - 2018-03-01 07:38 - 000963072 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll 2018-03-15 19:36 - 2018-03-01 07:38 - 000726016 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\srv2.sys 2018-03-15 19:36 - 2018-03-01 07:36 - 004050432 _____ (Microsoft Corporation) C:\WINDOWS\system32\msi.dll 2018-03-15 19:36 - 2018-03-01 07:36 - 000030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\msisip.dll 2018-03-15 19:36 - 2018-03-01 07:35 - 000568320 _____ (Microsoft Corporation) C:\WINDOWS\system32\msra.exe 2018-03-15 19:36 - 2018-03-01 07:35 - 000128000 _____ (Microsoft Corporation) C:\WINDOWS\system32\racpldlg.dll 2018-03-15 19:36 - 2018-03-01 07:35 - 000050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\pcalua.exe 2018-03-15 19:36 - 2018-02-22 04:23 - 001092016 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.efi 2018-03-15 19:36 - 2018-02-22 04:23 - 000924648 _____ (Microsoft Corporation) C:\WINDOWS\system32\winresume.exe 2018-03-15 19:36 - 2018-02-22 04:13 - 000279456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\msiscsi.sys 2018-03-15 19:36 - 2018-02-22 04:13 - 000077216 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvloader.dll 2018-03-15 19:36 - 2018-02-22 04:11 - 000109984 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vmbus.sys 2018-03-15 19:36 - 2018-02-22 04:10 - 000285080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdbus.sys 2018-03-15 19:36 - 2018-02-22 04:08 - 001206688 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvix64.exe 2018-03-15 19:36 - 2018-02-22 04:08 - 001055648 _____ (Microsoft Corporation) C:\WINDOWS\system32\hvax64.exe 2018-03-15 19:36 - 2018-02-22 04:08 - 000571288 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\spaceport.sys 2018-03-15 19:36 - 2018-02-22 04:07 - 001415296 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.efi 2018-03-15 19:36 - 2018-02-22 04:07 - 001209248 _____ (Microsoft Corporation) C:\WINDOWS\system32\winload.exe 2018-03-15 19:36 - 2018-02-22 04:07 - 000194456 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ataport.sys 2018-03-15 19:36 - 2018-02-22 04:03 - 000712600 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2018-03-15 19:36 - 2018-02-22 04:03 - 000082848 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\volmgr.sys 2018-03-15 19:36 - 2018-02-22 04:02 - 000149400 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storahci.sys 2018-03-15 19:36 - 2018-02-22 04:00 - 000187296 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\dumpsd.sys 2018-03-15 19:36 - 2018-02-22 03:59 - 021351624 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2018-03-15 19:36 - 2018-02-22 03:54 - 000437144 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS 2018-03-15 19:36 - 2018-02-22 03:52 - 000103328 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\stornvme.sys 2018-03-15 19:36 - 2018-02-22 03:51 - 000555424 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBHUB3.SYS 2018-03-15 19:36 - 2018-02-22 03:51 - 000097176 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys 2018-03-15 19:36 - 2018-02-22 03:51 - 000045472 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\storufs.sys 2018-03-15 19:36 - 2018-02-22 03:50 - 000362904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2018-03-15 19:36 - 2018-02-22 03:50 - 000229272 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tpm.sys 2018-03-15 19:36 - 2018-02-22 02:41 - 020286120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2018-03-15 19:36 - 2018-02-22 02:31 - 000057344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\UcmUcsi.sys 2018-03-15 19:36 - 2018-02-22 02:30 - 000192512 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\netvsc.sys 2018-03-15 19:36 - 2018-02-22 02:30 - 000046080 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\hidparse.sys 2018-03-15 19:36 - 2018-02-22 02:30 - 000043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\RfxVmt.sys 2018-03-15 19:36 - 2018-02-22 02:27 - 001282048 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2018-03-15 19:36 - 2018-02-22 02:26 - 000441344 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\HdAudio.sys 2018-03-15 19:36 - 2018-02-22 02:25 - 000086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\cldapi.dll 2018-03-15 19:36 - 2018-02-22 02:16 - 001286144 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2018-03-15 19:36 - 2018-02-22 02:12 - 000076288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cldapi.dll 2018-03-11 08:26 - 2018-03-11 08:26 - 000380768 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe 2018-03-09 11:30 - 2018-03-10 13:48 - 000000000 ____D C:\Users\Givi\AppData\LocalLow\uTorrent 2018-03-09 10:45 - 2018-03-09 10:45 - 000000000 ____D C:\Program Files (x86)\obs-studio 2018-03-06 20:37 - 2018-03-16 15:07 - 000799424 _____ (EasyAntiCheat Oy) C:\WINDOWS\system32\Drivers\EasyAntiCheat.sys 2018-03-03 09:12 - 2018-03-03 09:12 - 000000000 ___HD C:\$SysReset 2018-02-27 21:43 - 2018-02-27 21:43 - 000002373 _____ C:\Users\Givi\Desktop\Google Chrome.lnk 2018-02-27 21:29 - 2018-03-25 20:41 - 000003502 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA 2018-02-27 21:29 - 2018-03-25 20:41 - 000003278 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore 2018-02-27 21:29 - 2018-03-21 21:35 - 000002301 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk 2018-02-27 21:29 - 2018-03-21 21:35 - 000002260 _____ C:\Users\Public\Desktop\Google Chrome.lnk 2018-02-27 21:24 - 2018-02-27 21:24 - 000000000 ____D C:\WINDOWS\system32\Drivers\wd 2018-02-26 20:39 - 2018-02-26 20:39 - 000000222 _____ C:\Users\Givi\Desktop\Miscreated.url 2018-02-26 15:12 - 2018-03-06 22:21 - 000000220 _____ C:\Users\Givi\Desktop\Garry's Mod.url ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2018-03-26 20:27 - 2017-12-13 15:41 - 007710744 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2018-03-26 20:27 - 2017-03-13 23:27 - 004444188 _____ C:\WINDOWS\system32\perfh024.dat 2018-03-26 20:27 - 2017-03-13 23:27 - 001371766 _____ C:\WINDOWS\system32\perfc024.dat 2018-03-26 20:22 - 2017-05-04 15:04 - 000000000 ____D C:\ProgramData\NVIDIA 2018-03-26 20:22 - 2017-03-13 22:40 - 000000000 ____D C:\Program Files (x86)\Steam 2018-03-26 20:21 - 2017-12-13 15:37 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT 2018-03-26 20:21 - 2017-09-29 10:45 - 000524288 _____ C:\WINDOWS\system32\config\BBI 2018-03-26 20:20 - 2017-09-29 15:44 - 000000000 ____D C:\WINDOWS\INF 2018-03-26 20:20 - 2017-05-03 16:59 - 000000000 ____D C:\Users\Givi\AppData\Roaming\TeamViewer 2018-03-26 20:03 - 2017-12-13 15:31 - 000000000 ____D C:\Users\Givi 2018-03-26 19:48 - 2017-12-13 15:29 - 000000000 ____D C:\WINDOWS\system32\SleepStudy 2018-03-26 15:18 - 2018-02-03 17:46 - 000004264 _____ C:\WINDOWS\System32\Tasks\Avast Emergency Update 2018-03-25 20:41 - 2018-02-03 19:23 - 000000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software 2018-03-25 20:41 - 2018-01-29 18:36 - 000002592 _____ C:\WINDOWS\System32\Tasks\Givi 2018-03-25 20:41 - 2017-12-13 15:37 - 000003398 _____ C:\WINDOWS\System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-03-25 20:41 - 2017-12-13 15:37 - 000003176 _____ C:\WINDOWS\System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-03-25 20:41 - 2017-12-13 15:37 - 000002984 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-03-25 20:41 - 2017-12-13 15:37 - 000002956 _____ C:\WINDOWS\System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-03-25 20:41 - 2017-12-13 15:37 - 000002914 _____ C:\WINDOWS\System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-03-25 20:41 - 2017-12-13 15:37 - 000002856 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-886319223-4001138074-2591277075-1001 2018-03-25 20:41 - 2017-12-13 15:37 - 000002838 _____ C:\WINDOWS\System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-03-25 20:41 - 2017-12-13 15:37 - 000002786 _____ C:\WINDOWS\System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-03-25 20:41 - 2017-12-13 15:37 - 000002744 _____ C:\WINDOWS\System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} 2018-03-25 20:39 - 2017-11-01 16:46 - 000000000 ____D C:\Users\Givi\AppData\Roaming\Kodi 2018-03-25 19:51 - 2017-03-16 21:45 - 000000000 ____D C:\Users\Givi\AppData\Local\Arma 3 Launcher 2018-03-25 11:04 - 2017-03-19 05:37 - 000000000 ____D C:\Users\Givi\AppData\Local\Arma 3 2018-03-24 18:41 - 2017-05-03 16:59 - 000000000 ____D C:\Program Files (x86)\TeamViewer 2018-03-24 09:30 - 2017-03-14 17:44 - 000000000 ____D C:\Users\Givi\AppData\Local\ArmA 2 OA 2018-03-23 22:05 - 2017-03-13 22:10 - 000002370 _____ C:\Users\Givi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2018-03-23 22:05 - 2017-03-13 22:10 - 000000000 ___RD C:\Users\Givi\OneDrive 2018-03-23 14:54 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\DeliveryOptimization 2018-03-23 14:53 - 2017-09-29 15:46 - 000000000 ___HD C:\Program Files\WindowsApps 2018-03-23 14:53 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\AppReadiness 2018-03-20 22:04 - 2017-03-13 23:00 - 000000000 ____D C:\Users\Givi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2018-03-19 18:10 - 2017-12-05 21:43 - 000000000 ____D C:\Users\Givi\AppData\Roaming\nhm2 2018-03-19 17:51 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\LiveKernelReports 2018-03-19 17:51 - 2017-04-03 20:48 - 000000000 ____D C:\Users\Givi\AppData\Roaming\TS3Client 2018-03-19 17:51 - 2017-03-13 23:36 - 000000000 ____D C:\Users\Givi\AppData\Local\CrashDumps 2018-03-19 17:51 - 2017-03-13 23:04 - 000000000 ____D C:\Users\Givi\AppData\Roaming\uTorrent 2018-03-18 20:24 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\rescache 2018-03-17 22:10 - 2017-08-04 12:02 - 000000000 ____D C:\Users\Givi\AppData\Local\Ubisoft Game Launcher 2018-03-17 19:24 - 2017-06-02 14:02 - 000000000 ____D C:\Users\Givi\AppData\Local\UnrealEngine 2018-03-17 19:13 - 2017-10-26 16:34 - 000000000 ____D C:\Program Files\Epic Games 2018-03-16 15:07 - 2017-10-13 22:15 - 000000000 ____D C:\Users\Givi\AppData\Roaming\EasyAntiCheat 2018-03-16 15:07 - 2017-08-04 12:31 - 000000000 ____D C:\Users\Givi\Documents\My Games 2018-03-15 20:11 - 2017-12-13 15:38 - 000000000 ___RD C:\Users\Givi\3D Objects 2018-03-15 20:11 - 2017-12-13 15:29 - 000222352 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2018-03-15 20:11 - 2016-11-21 09:11 - 000000000 __RHD C:\Users\Public\AccountPictures 2018-03-15 20:10 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\TextInput 2018-03-15 20:10 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\system32\appraiser 2018-03-15 20:10 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\ShellExperiences 2018-03-15 20:10 - 2017-09-29 15:46 - 000000000 ____D C:\WINDOWS\PolicyDefinitions 2018-03-15 19:38 - 2017-09-29 15:37 - 000000000 ____D C:\WINDOWS\CbsTemp 2018-03-15 19:37 - 2017-09-29 15:41 - 000140800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakradiag.dll 2018-03-15 19:37 - 2017-09-29 15:41 - 000106496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2018-03-13 19:46 - 2017-03-13 22:29 - 000000000 ____D C:\WINDOWS\system32\MRT 2018-03-13 19:44 - 2017-10-11 16:04 - 130364688 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT-KB890830.exe 2018-03-13 19:44 - 2017-03-13 22:29 - 130364688 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2018-03-11 08:26 - 2018-02-03 17:46 - 001026696 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000460520 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000380528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000343752 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbloga.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000227504 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsdrivera.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000215320 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHdsKe.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000205976 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStm.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000199440 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbidsha.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000196648 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswArPot.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000146656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000110328 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr2.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000084368 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000057680 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswbuniva.sys 2018-03-11 08:26 - 2018-02-03 17:46 - 000046968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys 2018-03-11 08:26 - 2017-10-09 15:38 - 000061304 _____ () C:\WINDOWS\system32\Drivers\lpsport.sys 2018-03-09 11:27 - 2017-09-28 16:30 - 000000000 ____D C:\Users\Givi\AppData\Roaming\obs-studio 2018-03-09 11:26 - 2017-03-13 22:22 - 000000000 ____D C:\Users\Givi\AppData\Roaming\vlc 2018-03-09 10:45 - 2017-06-16 15:44 - 000001275 _____ C:\Users\Public\Desktop\OBS Studio.lnk 2018-03-06 21:12 - 2017-03-29 19:26 - 000000000 ____D C:\Users\Givi\AppData\Roaming\discord 2018-03-05 23:07 - 2017-03-13 22:10 - 000000000 ____D C:\Users\Givi\AppData\Roaming\Skype 2018-03-02 23:09 - 2017-09-29 15:49 - 000834552 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe 2018-03-02 23:09 - 2017-09-29 15:49 - 000179704 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl 2018-02-27 21:29 - 2017-03-13 22:11 - 000000000 ____D C:\Users\Givi\AppData\Local\Google 2018-02-27 21:29 - 2017-03-13 22:11 - 000000000 ____D C:\Program Files (x86)\Google 2018-02-26 20:39 - 2018-02-12 14:34 - 000242448 _____ (EasyAntiCheat Ltd) C:\WINDOWS\SysWOW64\EasyAntiCheat.exe 2018-02-25 14:56 - 2017-04-10 18:32 - 000000000 ____D C:\ProgramData\Apple ==================== Files in the root of some directories ======= 2017-05-31 18:26 - 2017-05-31 18:26 - 000000099 _____ () C:\Users\Givi\AppData\Roaming\LauncherSettings_live.cfg 2017-10-17 18:39 - 2017-10-17 18:39 - 000001167 _____ () C:\Users\Givi\AppData\Roaming\trace_FilterInstaller.1.txt 2017-10-17 18:39 - 2017-11-27 16:04 - 000000905 _____ () C:\Users\Givi\AppData\Roaming\trace_FilterInstaller.txt 2017-10-17 18:39 - 2017-11-27 16:04 - 000000000 _____ () C:\Users\Givi\AppData\Roaming\trace_FilterInstaller.txt-CRT.txt ==================== Bamital & volsnap ====================== (There is no automatic fix for files that do not pass verification.) C:\WINDOWS\system32\winlogon.exe => File is digitally signed C:\WINDOWS\system32\wininit.exe => File is digitally signed C:\WINDOWS\explorer.exe => File is digitally signed C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed C:\WINDOWS\system32\svchost.exe => File is digitally signed C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed C:\WINDOWS\system32\services.exe => File is digitally signed C:\WINDOWS\system32\User32.dll => File is digitally signed C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed C:\WINDOWS\system32\userinit.exe => File is digitally signed C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed C:\WINDOWS\system32\rpcss.dll => File is digitally signed C:\WINDOWS\system32\dnsapi.dll => File is digitally signed C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2018-03-16 23:23 ==================== End of FRST.txt ============================

Profil

helen1 Poslao: 26 Mar 2018 21:39 Idi na vrh
offline helen1 Anti Malware Fighter Rank 2 Master učitelj Pridružio: 27 Avg 2005 Poruke: 8617 Gde živiš: Novi Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Preuzmi AdwCleaner i sačuvaj ga na Desktop Dvoklikom pokreni program. U EULA prozoru klikni na I agree. U Tools odaberi Options. U dijaloškom okviru koji se pojavi isključi Reset Winsock settings ako je uključen. Klikni na dugme Scan i sačekaj da se završi skeniranje. Ako ti javi da postoji novija verzija, postaraj se da je preuzmeš. Klikni na dugme Clean i pričekaj da program završi. Program će zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni OK kao potvrdu. Pojavit će se poruka da računar treba restartovati. Klikni OK Računar će se restartovati, a potom otvoriti Notepad (C:\Adwcleaner\AdwCleaner[C0].txt) sa izvještajem. Sačuvaj taj izvještaj na Desktop i okači ga uz poruku koristeći opciju "Prikači fajl"

Profil

MAKEDONAC Poslao: 01 Apr 2018 12:31 Idi na vrh
offline MAKEDONAC Ugledni građanin Pridružio: 22 Avg 2006 Poruke: 425 Gde živiš: Kranj	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Jos uvek isto kada restartam kompjuter opet se pojavi ona stranica . https://www.mycity.rs/must-login.png

Profil

helen1 Poslao: 09 Apr 2018 18:57 Idi na vrh
offline helen1 Anti Malware Fighter Rank 2 Master učitelj Pridružio: 27 Avg 2005 Poruke: 8617 Gde živiš: Novi Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Postavi mi nova oba FRST loga. Nisam bio tu da pogledam ranijem a i ti se nisi javljao nekoliko dana pre nego sto sam otisao. Pa da vidim sveze stanje u logovima.

Profil

MAKEDONAC Poslao: 16 Apr 2018 14:29 Idi na vrh
offline MAKEDONAC Ugledni građanin Pridružio: 22 Avg 2006 Poruke: 425 Gde živiš: Kranj	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: https://www.mycity.rs/must-login.png https://www.mycity.rs/must-login.png

Profil

helen1 Poslao: 16 Apr 2018 18:21 Idi na vrh
offline helen1 Anti Malware Fighter Rank 2 Master učitelj Pridružio: 27 Avg 2005 Poruke: 8617 Gde živiš: Novi Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Otvori Notepad i iskopiraj sledeći tekst koji se nalazi unutar Kod polja. CreateRestorePoint: HKLM Group Policy restriction on software: %systemroot%\system32\mrt.exe <==== ATTENTION HKU\S-1-5-21-886319223-4001138074-2591277075-1001\...\Run: [Givi] => explorer.exe hxxp://ozirizsoos.info <==== ATTENTION Task: {0F8752DE-7447-43D0-957A-46FCE9B15364} - \Microsoft\Windows\UNP\RunCampaignManager -> No File <==== ATTENTION Task: {7F1C3CBB-C3F4-419D-82A8-E08C009D106B} - System32\Tasks\Givi => cmd.exe /c REG ADD HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run /f /v Givi /t REG_SZ /d "explorer.exe hxxp://ozirizsoos.info" <==== ATTENTION AlternateDataStreams: C:\Users\Public\AppData:CSM [468] EmptyTemp: U okviru Notepad-a klikni na File --> Save As Pod Encoding izaberi UTF-8. Fajl nazovi Fixlist i sačuvaj na Desktop Dvoklikom ponovo pokreni FRST.exe Klikni na Fix i sačekaj dok program ne završi. Ukoliko program zatraži restart računara, omogući mu da to nesmetano obavi. Nakon završetka rada, otvoriće se fixlog.txt, sa sadržajem koji treba da kopiraš u temu. Takođe, na Desktop-u će se nalaziti (fixlog.txt).

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Virus (gamereleasedate.info/zpage.html)

Ko je trenutno na forumu

Ukupno su 929 korisnika na forumu :: 41 registrovanih, 8 sakrivenih i 880 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: atmel, babaroga, cavatina, cinoeye, darkangel, Denaya, Dimitrise93, drimer, Fulcrum, h8propaganda, HogarStrashni, HrcAk47, hyla, ILGromovnik, JOntra, Još malo pa deda, Kubovac, kubura91, Levi, macak44, Marko Marković, marsovac 2, mean_machine, milenko crazy north, Mixelotti, naki011, nemkea71, nikoladim, opt1, Sirius, Smiljke, sombrero, Srki94, theNedjeljko, Trpe Grozni, tubular, Vlada1389, vukovi, wizzardone, šumar bk2, žeks62

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by