Trojan:VBS/Redeshaca

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Napisano: 16 Jun 2018 2:46

Zdravo imam problem, skeniro sam preko MSE i nasao mi je virus Trojan:VBS/Redeshaca, pa cisto da provjerim.Windows 10 64bit je laptop

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 06.06.2018 01
Ran by Milaca (administrator) on MILACA-PC (16-06-2018 02:42:31)
Running from C:\Users\Milaca\Desktop
Loaded Profiles: Milaca (Available Profiles: Milaca)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 8 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [Link mogu videti samo ulogovani korisnici]

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.17\GoogleCrashHandler64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe
(IObit) C:\Program Files (x86)\IObit\Driver Booster\5.4.0\Pub\PubMonitor.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-21-1263543626-1104554536-4166779498-1000\...\MountPoints2: {6e3f678c-4897-11e7-8c0e-8056f215a770} - F:\AutoRun.exe
Startup: C:\Users\Milaca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6.lnk [2017-06-05]
ShortcutTarget: 6.lnk -> C:\Users\Milaca\AppData\Roaming\ee0MuGoicW.exe (No File)
Startup: C:\Users\Milaca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\HP_3b050369-8d19-413d-9dec-84ff278472eb.lnk [2017-11-10]
ShortcutTarget: HP_3b050369-8d19-413d-9dec-84ff278472eb.lnk -> C:\Program Files (x86)\HP\csiInstaller\3b050369-8d19-413d-9dec-84ff278472eb\Setup.exe (No File)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
Tcpip\..\Interfaces\{6210D249-DEA0-41DE-A427-B0BB81737F29}: [DhcpNameServer] 192.168.1.254

Internet Explorer:
==================
HKU\S-1-5-21-1263543626-1104554536-4166779498-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [Link mogu videti samo ulogovani korisnici]
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_162\bin\ssv.dll [2018-06-16] (Oracle Corporation)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_162\bin\jp2ssv.dll [2018-06-16] (Oracle Corporation)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-01-21] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_162\bin\ssv.dll [2018-06-16] (Oracle Corporation)
BHO-x32: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2009-08-18] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-01-16] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_162\bin\jp2ssv.dll [2018-06-16] (Oracle Corporation)
Filter: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: deflate - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\system32\urlmon.dll [2010-11-21] (Microsoft Corporation)
Filter-x32: gzip - {8f6b0360-b80d-11d0-a9b3-006097942311} - C:\Windows\SysWOW64\urlmon.dll [2010-11-21] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: wu9226wq.default
FF ProfilePath: C:\Users\Milaca\AppData\Roaming\Mozilla\Firefox\Profiles\wu9226wq.default [2018-06-16]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_30_0_0_113.dll [2018-06-07] ()
FF Plugin: @java.com/DTPlugin,version=11.162.2 -> C:\Program Files\Java\jre1.8.0_162\bin\dtplugin\npDeployJava1.dll [2018-06-16] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.162.2 -> C:\Program Files\Java\jre1.8.0_162\bin\plugin2\npjp2.dll [2018-06-16] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_30_0_0_113.dll [2018-06-07] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.162.2 -> C:\Program Files (x86)\Java\jre1.8.0_162\bin\dtplugin\npDeployJava1.dll [2018-06-16] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.162.2 -> C:\Program Files (x86)\Java\jre1.8.0_162\bin\plugin2\npjp2.dll [2018-06-16] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50907.0\npctrl.dll [2017-05-03] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-01-10] (Microsoft Corporation)
FF Plugin-x32: @qq.com/npqscall -> C:\Program Files (x86)\Common Files\Tencent\NPQSCALL\npqscall.dll [2017-10-04] (Tencent)
FF Plugin-x32: @qq.com/TXSSO -> C:\Program Files (x86)\Common Files\Tencent\TXSSO\1.2.1.38\Bin\npSSOAxCtrlForPTLogin.dll [2011-12-22] ()
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.17\npGoogleUpdate3.dll [2018-05-17] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2018-05-11] (Adobe Systems Inc.)

Chrome:
=======
CHR HomePage: Default -> [Link mogu videti samo ulogovani korisnici]
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR DefaultSearchURL: Default -> [Link mogu videti samo ulogovani korisnici]{searchTerms}
CHR DefaultSearchKeyword: Default -> Default Search
CHR Profile: C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default [2018-06-16]
CHR Extension: (Slides) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-10-25]
CHR Extension: (Docs) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-10-25]
CHR Extension: (Google Drive) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2017-06-03]
CHR Extension: (YouTube) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2017-06-03]
CHR Extension: (Adobe Acrobat) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-06-03]
CHR Extension: (Sheets) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-10-25]
CHR Extension: (Google Docs Offline) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2017-06-04]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-04]
CHR Extension: (Gmail) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2017-06-03]
CHR Extension: (Chrome Media Router) - C:\Users\Milaca\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-06-15]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - [Link mogu videti samo ulogovani korisnici]
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - [Link mogu videti samo ulogovani korisnici]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
R3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
R2 RtkAudioService; C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe [324544 2018-06-16] (Realtek Semiconductor)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
S2 HP LaserJet Service; "C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe" [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 btUrbFilterDrv; C:\Windows\System32\Drivers\IvtUrbBtFlt.sys [51936 2014-01-20] (Ralink Corporation)
R1 HWiNFO32; C:\Windows\SysWOW64\drivers\HWiNFO64A.SYS [27552 2018-06-15] (REALiX(tm))
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [181304 2018-06-16] (Intel Corporation)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
R3 netr28x; C:\Windows\System32\DRIVERS\netr28x.sys [2502288 2015-04-20] (MediaTek Inc.)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 RSP2STOR; C:\Windows\System32\DRIVERS\RtsP2Stor.sys [329664 2018-06-16] (Realtek Semiconductor Corp.)
R3 rtbth; C:\Windows\System32\DRIVERS\rtbth.sys [1210480 2014-12-24] (Ralink Technology, Corp.)
S3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [33960 2015-09-25] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2018-02-14] (Duplex Secure Ltd.)
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-16 02:42 - 2018-06-16 02:43 - 000013490 _____ C:\Users\Milaca\Desktop\FRST.txt
2018-06-16 02:42 - 2018-06-16 02:42 - 000000000 ____D C:\FRST
2018-06-16 02:38 - 2018-06-16 02:38 - 007271632 _____ (Malwarebytes) C:\Users\Milaca\Downloads\AdwCleaner.exe
2018-06-16 02:37 - 2018-06-16 02:38 - 002413056 _____ (Farbar) C:\Users\Milaca\Desktop\FRST64.exe
2018-06-16 02:34 - 2018-06-16 02:34 - 000004478 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2018-06-16 02:23 - 2018-06-16 02:23 - 000000000 ____D C:\Windows\ERUNT
2018-06-16 01:58 - 2012-02-17 08:38 - 001112064 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2018-06-16 01:58 - 2012-02-17 08:38 - 001031680 _____ (Microsoft Corporation) C:\Windows\system32\rdpcore.dll
2018-06-16 01:58 - 2012-02-17 07:34 - 000826880 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2018-06-16 01:58 - 2012-02-17 06:58 - 000210944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2018-06-16 01:58 - 2012-02-17 06:57 - 000023552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tdtcp.sys
2018-06-16 01:36 - 2018-06-16 01:36 - 000001153 _____ C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player PRO.lnk
2018-06-16 01:36 - 2018-06-16 01:36 - 000001147 _____ C:\Users\Public\Desktop\BS.Player PRO.lnk
2018-06-16 01:36 - 2018-06-16 01:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
2018-06-16 01:35 - 2018-06-16 01:36 - 000000000 ____D C:\Users\Milaca\AppData\Roaming\BSplayer PRO
2018-06-16 01:35 - 2018-06-16 01:35 - 000000000 ____D C:\Program Files (x86)\Webteh
2018-06-16 01:34 - 2014-05-14 18:23 - 002477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2018-06-16 01:34 - 2014-05-14 18:23 - 000700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2018-06-16 01:34 - 2014-05-14 18:23 - 000581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2018-06-16 01:34 - 2014-05-14 18:23 - 000058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2018-06-16 01:34 - 2014-05-14 18:23 - 000044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2018-06-16 01:34 - 2014-05-14 18:23 - 000038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2018-06-16 01:34 - 2014-05-14 18:23 - 000036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2018-06-16 01:34 - 2014-05-14 18:21 - 002620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2018-06-16 01:34 - 2014-05-14 18:20 - 000097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2018-06-16 01:34 - 2014-05-14 18:17 - 000092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2018-06-16 01:34 - 2014-05-14 09:23 - 000198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2018-06-16 01:34 - 2014-05-14 09:23 - 000179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2018-06-16 01:34 - 2014-05-14 09:20 - 000036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2018-06-16 01:34 - 2014-05-14 09:17 - 000033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2018-06-16 01:33 - 2018-06-16 01:33 - 000002117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2018-06-16 01:33 - 2018-06-16 01:33 - 000001945 _____ C:\Windows\epplauncher.mif
2018-06-16 01:33 - 2018-06-16 01:33 - 000001254 _____ C:\Users\Public\Desktop\Virtual CloneDrive.lnk
2018-06-16 01:33 - 2018-06-16 01:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Elaborate Bytes
2018-06-16 01:33 - 2018-06-16 01:33 - 000000000 ____D C:\Program Files\Microsoft Security Client
2018-06-16 01:33 - 2018-06-16 01:33 - 000000000 ____D C:\Program Files (x86)\Microsoft Security Client
2018-06-16 01:33 - 2018-06-16 01:33 - 000000000 ____D C:\Program Files (x86)\Elaborate Bytes
2018-06-16 01:25 - 2018-06-16 01:25 - 000002300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-06-16 01:23 - 2018-06-16 01:23 - 000000000 ____D C:\Users\Milaca\AppData\Local\Deployment
2018-06-16 01:23 - 2018-06-16 01:23 - 000000000 ____D C:\Users\Milaca\AppData\Local\Apps\2.0
2018-06-16 01:11 - 2018-06-16 01:11 - 000466456 _____ (Creative Labs) C:\Windows\system32\wrap_oal.dll
2018-06-16 01:11 - 2018-06-16 01:11 - 000444952 _____ (Creative Labs) C:\Windows\SysWOW64\wrap_oal.dll
2018-06-16 01:11 - 2018-06-16 01:11 - 000122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll
2018-06-16 01:11 - 2018-06-16 01:11 - 000109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll
2018-06-16 01:11 - 2018-06-16 01:11 - 000000000 ____D C:\Program Files (x86)\OpenAL
2018-06-16 01:11 - 2013-01-13 23:17 - 000009728 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 23:17 - 000002560 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-normaliz-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 23:16 - 000010752 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 23:12 - 000003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-advapi32-l2-1-0.dll
2018-06-16 01:11 - 2013-01-13 23:11 - 000005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2018-06-16 01:11 - 2013-01-13 23:11 - 000005632 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-ole32-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 23:11 - 000004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-user32-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 23:11 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-version-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 23:11 - 000003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-downlevel-shell32-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:35 - 000010752 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:35 - 000009728 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:35 - 000002560 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-normaliz-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:32 - 000003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-advapi32-l2-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:31 - 001247744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2018-06-16 01:11 - 2013-01-13 22:31 - 000005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shlwapi-l2-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:31 - 000005632 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-ole32-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:31 - 000004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-user32-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:31 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-version-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:31 - 000003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-downlevel-shell32-l1-1-0.dll
2018-06-16 01:11 - 2013-01-13 22:22 - 001988096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2018-06-16 01:11 - 2013-01-13 22:20 - 000293376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxgi.dll
2018-06-16 01:11 - 2013-01-13 22:09 - 000249856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2018-06-16 01:11 - 2013-01-13 22:08 - 001504768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d11.dll
2018-06-16 01:11 - 2013-01-13 22:08 - 000220160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10core.dll
2018-06-16 01:11 - 2013-01-13 21:59 - 001643520 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2018-06-16 01:11 - 2013-01-13 21:58 - 001175552 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2018-06-16 01:11 - 2013-01-13 21:54 - 000604160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll
2018-06-16 01:11 - 2013-01-13 21:53 - 000207872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecsExt.dll
2018-06-16 01:11 - 2013-01-13 21:53 - 000187392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UIAnimation.dll
2018-06-16 01:11 - 2013-01-13 21:51 - 002565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2018-06-16 01:11 - 2013-01-13 21:49 - 000363008 _____ (Microsoft Corporation) C:\Windows\system32\dxgi.dll
2018-06-16 01:11 - 2013-01-13 21:48 - 000161792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2018-06-16 01:11 - 2013-01-13 21:46 - 001080832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10.dll
2018-06-16 01:11 - 2013-01-13 21:43 - 001230336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll
2018-06-16 01:11 - 2013-01-13 21:38 - 001887232 _____ (Microsoft Corporation) C:\Windows\system32\d3d11.dll
2018-06-16 01:11 - 2013-01-13 21:38 - 000333312 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1core.dll
2018-06-16 01:11 - 2013-01-13 21:38 - 000296960 _____ (Microsoft Corporation) C:\Windows\system32\d3d10core.dll
2018-06-16 01:11 - 2013-01-13 21:37 - 003419136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2018-06-16 01:11 - 2013-01-13 21:25 - 000245248 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecsExt.dll
2018-06-16 01:11 - 2013-01-13 21:24 - 000648192 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll
2018-06-16 01:11 - 2013-01-13 21:24 - 000221184 _____ (Microsoft Corporation) C:\Windows\system32\UIAnimation.dll
2018-06-16 01:11 - 2013-01-13 21:20 - 001238528 _____ (Microsoft Corporation) C:\Windows\system32\d3d10.dll
2018-06-16 01:11 - 2013-01-13 21:20 - 000194560 _____ (Microsoft Corporation) C:\Windows\system32\d3d10_1.dll
2018-06-16 01:11 - 2013-01-13 21:15 - 001424384 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll
2018-06-16 01:11 - 2013-01-13 21:10 - 003928064 _____ (Microsoft Corporation) C:\Windows\system32\d2d1.dll
2018-06-16 01:11 - 2013-01-13 21:02 - 000417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
2018-06-16 01:11 - 2013-01-13 20:34 - 000364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsGdiConverter.dll
2018-06-16 01:11 - 2013-01-13 20:32 - 000465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
2018-06-16 01:11 - 2013-01-13 20:09 - 000522752 _____ (Microsoft Corporation) C:\Windows\system32\XpsGdiConverter.dll
2018-06-16 01:11 - 2013-01-13 19:26 - 001158144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XpsPrint.dll
2018-06-16 01:11 - 2013-01-13 19:05 - 001682432 _____ (Microsoft Corporation) C:\Windows\system32\XpsPrint.dll
2018-06-16 01:11 - 2013-01-04 08:11 - 002776576 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2018-06-16 01:11 - 2013-01-04 08:11 - 002284544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2018-06-16 01:10 - 2018-06-16 01:08 - 000110144 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-64.dll
2018-06-16 01:07 - 2009-09-04 17:29 - 001892184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_42.dll
2018-06-16 01:07 - 2009-09-04 17:29 - 000453456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_42.dll
2018-06-16 01:06 - 2018-06-16 01:06 - 000001338 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live ID.lnk
2018-06-16 01:06 - 2018-06-16 01:06 - 000000000 ____D C:\Windows\SysWOW64\xlive
2018-06-16 01:06 - 2018-06-16 01:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2018-06-16 01:06 - 2018-06-16 01:06 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Games for Windows Marketplace
2018-06-16 01:06 - 2018-06-16 01:06 - 000000000 ____D C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2018-06-16 01:05 - 2018-06-16 01:05 - 000000000 ____D C:\Program Files\Microsoft Silverlight
2018-06-16 01:05 - 2018-06-16 01:05 - 000000000 ____D C:\Program Files (x86)\Microsoft Silverlight
2018-06-16 01:04 - 2017-04-28 00:50 - 003550208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_47.dll
2018-06-16 01:04 - 2017-04-12 15:05 - 004296704 _____ (Microsoft Corporation) C:\Windows\system32\D3DCompiler_47.dll
2018-06-16 00:56 - 2009-03-16 14:18 - 000517448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_4.dll
2018-06-16 00:56 - 2009-03-16 14:18 - 000235352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine3_4.dll
2018-06-16 00:56 - 2009-03-16 14:18 - 000069448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_3.dll
2018-06-16 00:56 - 2009-03-16 14:18 - 000022360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_6.dll
2018-06-16 00:56 - 2008-05-30 14:19 - 000507400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAudio2_1.dll
2018-06-16 00:56 - 2008-05-30 14:17 - 000065032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\XAPOFX1_0.dll
2018-06-16 00:56 - 2008-05-30 14:17 - 000025608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\X3DAudio1_4.dll
2018-06-16 00:56 - 2007-07-20 00:57 - 000267112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xactengine2_9.dll
2018-06-16 00:56 - 2007-07-20 00:54 - 000018280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\x3daudio1_2.dll
2018-06-16 00:56 - 2007-04-04 18:53 - 000081768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\xinput1_3.dll
2018-06-16 00:56 - 2007-03-12 16:42 - 003495784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_33.dll
2018-06-16 00:56 - 2006-09-28 16:05 - 002414360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx9_31.dll
2018-06-16 00:55 - 2018-06-16 00:55 - 000000000 ____D C:\Program Files (x86)\Microsoft XNA
2018-06-16 00:54 - 2018-06-16 00:54 - 009891328 _____ (Realtek Semiconductor Corp.) C:\Windows\SysWOW64\RsCRIcon.dll
2018-06-16 00:54 - 2018-06-16 00:54 - 001059776 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
2018-06-16 00:54 - 2018-06-16 00:54 - 000329664 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RtsP2Stor.sys
2018-06-16 00:54 - 2018-06-16 00:54 - 000122816 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
2018-06-16 00:54 - 2018-06-16 00:54 - 000003174 _____ C:\Windows\System32\Tasks\RtHDVBg
2018-06-16 00:53 - 2018-06-16 00:53 - 000003148 _____ C:\Windows\System32\Tasks\RTKCPL
2018-06-16 00:53 - 2018-06-16 00:53 - 000000000 ____D C:\Windows\SysWOW64\RTCOM
2018-06-16 00:53 - 2018-06-16 00:53 - 000000000 ____D C:\Windows\system32\SRSLabs
2018-06-16 00:53 - 2018-06-16 00:53 - 000000000 ____D C:\Program Files\Realtek
2018-06-16 00:52 - 2018-06-16 00:52 - 072520672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
2018-06-16 00:52 - 2018-06-16 00:52 - 015464151 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
2018-06-16 00:52 - 2018-06-16 00:52 - 006105024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
2018-06-16 00:52 - 2018-06-16 00:52 - 003677120 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
2018-06-16 00:52 - 2018-06-16 00:52 - 003571504 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RltkAPO64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 003509160 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 003410288 _____ (DTS, Inc.) C:\Windows\system32\slcnt64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 003205568 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 003121080 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 002922944 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 001435104 _____ (Synopsys, Inc.) C:\Windows\system32\SRRPTR64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 001353280 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 001242440 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDHF64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 001154912 _____ (Sound Research, Corp.) C:\Windows\system32\SECOMN64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 001105920 _____ (Sound Research, Corp.) C:\Windows\system32\SEHDRA64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 001009544 _____ (Sound Research, Corp.) C:\Windows\system32\SEAPO64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000986960 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000691640 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000532336 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000467120 _____ (Synopsys, Inc.) C:\Windows\system32\SRAPO64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000392832 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000381368 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000343672 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000341112 _____ (Synopsys, Inc.) C:\Windows\system32\SRCOM.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000327232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000327232 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000258824 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000220352 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000192944 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000166160 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000122280 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000116504 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000093864 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
2018-06-16 00:52 - 2018-06-16 00:52 - 000023656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
2018-06-16 00:50 - 2018-06-16 00:50 - 000181304 _____ (Intel Corporation) C:\Windows\system32\Drivers\TeeDriverx64.sys
2018-06-15 19:14 - 2018-06-15 19:14 - 000001217 _____ C:\Users\Milaca\Desktop\My Documents.lnk
2018-06-15 19:11 - 2018-06-15 19:11 - 000000000 ____D C:\Users\Milaca\Desktop\Sacuvano Desktop 15.06.2018
2018-06-15 19:10 - 2018-06-15 19:10 - 000000000 ____D C:\Windows\IObit
2018-06-15 19:10 - 2018-06-15 19:10 - 000000000 ____D C:\ProgramData\ProductData
2018-06-15 19:09 - 2018-06-16 02:31 - 000002890 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Milaca)
2018-06-15 19:09 - 2018-06-16 01:14 - 000002278 _____ C:\Users\Public\Desktop\Driver Booster 5.lnk
2018-06-15 19:09 - 2018-06-16 00:44 - 000000000 ____D C:\Users\Milaca\AppData\Roaming\IObit
2018-06-15 19:09 - 2018-06-15 19:10 - 000000000 ____D C:\Users\Milaca\AppData\LocalLow\IObit
2018-06-15 19:09 - 2018-06-15 19:10 - 000000000 ____D C:\ProgramData\IObit
2018-06-15 19:09 - 2018-06-15 19:09 - 000027552 _____ (REALiX(tm)) C:\Windows\SysWOW64\Drivers\HWiNFO64A.SYS
2018-06-15 19:09 - 2018-06-15 19:09 - 000003258 _____ C:\Windows\System32\Tasks\Driver Booster Scheduler
2018-06-15 19:09 - 2018-06-15 19:09 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 5
2018-06-15 19:09 - 2018-06-15 19:09 - 000000000 ____D C:\Program Files (x86)\IObit
2018-06-15 19:05 - 2018-06-15 19:05 - 000000000 ____D C:\Users\Milaca\AppData\LocalLow\uTorrent
2018-06-15 18:28 - 2018-06-15 18:28 - 000001077 _____ C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2018-06-15 18:28 - 2018-06-15 18:28 - 000000000 ____D C:\Users\Milaca\AppData\Local\VS Revo Group
2018-06-15 18:28 - 2018-06-15 18:28 - 000000000 ____D C:\ProgramData\VS Revo Group
2018-06-15 18:28 - 2018-06-15 18:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2018-06-15 18:28 - 2018-06-15 18:28 - 000000000 ____D C:\Program Files\VS Revo Group
2018-06-15 18:28 - 2016-12-21 14:52 - 000040240 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2018-06-15 18:01 - 2018-06-16 02:31 - 000000000 ____D C:\Windows\pss
2018-05-17 09:12 - 2018-06-13 14:43 - 000000000 _____ C:\Windows\SysWOW64\last.dump

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2018-06-16 02:34 - 2017-05-30 16:21 - 000842240 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-06-16 02:34 - 2017-05-30 16:21 - 000175104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-06-16 02:34 - 2017-05-30 16:21 - 000004324 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-06-16 02:34 - 2017-05-30 16:21 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2018-06-16 02:34 - 2017-05-30 16:21 - 000000000 ____D C:\Windows\system32\Macromed
2018-06-16 02:34 - 2017-05-30 16:13 - 000000000 ____D C:\Users\Milaca\AppData\Local\Adobe
2018-06-16 02:12 - 2009-07-14 07:13 - 000781874 _____ C:\Windows\system32\PerfStringBackup.INI
2018-06-16 02:12 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-06-16 02:09 - 2018-02-21 14:51 - 000000000 ____D C:\Users\Milaca\AppData\Roaming\libraries
2018-06-16 02:06 - 2017-06-02 08:43 - 000000266 _____ C:\Windows\Tasks\AutoKMS.job
2018-06-16 02:06 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-06-16 02:05 - 2009-07-14 06:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-06-16 02:05 - 2009-07-14 06:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-06-16 01:30 - 2018-01-30 08:50 - 000001151 _____ C:\Users\Public\Desktop\CDBurnerXP.lnk
2018-06-16 01:30 - 2018-01-30 08:50 - 000001109 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CDBurnerXP.lnk
2018-06-16 01:30 - 2018-01-30 08:50 - 000000000 ____D C:\Program Files (x86)\CDBurnerXP
2018-06-16 01:25 - 2017-05-30 16:00 - 000000000 ____D C:\Program Files (x86)\Google
2018-06-16 01:22 - 2018-02-12 13:56 - 000000000 ____D C:\Program Files\Google
2018-06-16 01:10 - 2017-05-30 16:02 - 000097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2018-06-16 01:10 - 2017-05-30 16:02 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2018-06-16 01:09 - 2017-05-30 16:02 - 000000000 ____D C:\Program Files (x86)\Java
2018-06-16 01:08 - 2017-05-30 16:03 - 000110144 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2018-06-16 01:08 - 2017-05-30 16:03 - 000000000 ____D C:\Program Files\Java
2018-06-16 01:07 - 2017-05-30 16:07 - 000000000 ____D C:\ProgramData\Package Cache
2018-06-16 01:06 - 2009-07-14 07:32 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2018-06-16 01:06 - 2009-07-14 05:20 - 000000000 ____D C:\Program Files\Common Files\Microsoft Shared
2018-06-16 01:00 - 2017-06-02 08:39 - 000774004 _____ C:\Windows\SysWOW64\PerfStringBackup.INI
2018-06-16 00:54 - 2017-05-30 13:57 - 000118784 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
2018-06-16 00:34 - 2017-05-30 16:03 - 000000000 ____D C:\Program Files\WinRAR
2018-06-15 19:15 - 2017-10-11 14:30 - 000000000 ____D C:\Users\Milaca\AppData\Roaming\uTorrent
2018-06-15 19:14 - 2017-05-30 13:50 - 000000000 ____D C:\Users\Milaca
2018-06-15 18:52 - 2017-05-30 16:03 - 000000000 ____D C:\Users\Milaca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-06-15 18:52 - 2017-05-30 16:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-06-15 18:29 - 2017-10-11 14:31 - 000000000 ____D C:\Users\Milaca\AppData\Local\Opera Software
2018-06-15 18:27 - 2017-10-11 14:30 - 000000833 _____ C:\Users\Milaca\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2018-06-15 18:26 - 2017-12-25 09:35 - 000000000 ____D C:\Users\Milaca\Downloads\New folder
2018-06-15 18:18 - 2017-10-11 14:30 - 000000000 ____D C:\ProgramData\AVAST Software
2018-06-15 18:17 - 2017-12-06 16:16 - 000000000 ____D C:\Program Files\Common Files\Avast Software
2018-06-14 12:58 - 2017-10-11 14:34 - 000004168 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-06-08 09:43 - 2017-11-10 09:21 - 000000000 ____D C:\ProgramData\Hewlett-Packard
2018-06-07 12:38 - 2018-03-14 09:10 - 000004466 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-06-06 21:46 - 2017-10-10 14:55 - 000032768 ___SH C:\Users\Milaca\Thumbs.db
2018-05-30 10:06 - 2017-11-10 09:17 - 000000000 ____D C:\ProgramData\HP
2018-05-29 15:32 - 2017-10-11 14:30 - 000000000 ___SD C:\Users\Milaca\AppData\LocalLow\Temp
2018-05-17 08:57 - 2017-05-30 16:00 - 000003332 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2018-05-17 08:57 - 2017-05-30 16:00 - 000003204 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

Some files in TEMP:
====================
2017-06-14 14:39 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo1181595864.dll
2017-06-20 23:36 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo1500364249.dll
2017-08-10 10:51 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo1791220548.dll
2017-06-18 19:05 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo2425493682.dll
2017-06-06 20:42 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo2574911955.dll
2017-06-16 21:56 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo2734200530.dll
2017-06-14 17:56 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo2750641089.dll
2017-06-28 09:57 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo3166623147.dll
2017-06-16 11:31 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo3912790653.dll
2017-06-29 21:16 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo3985616951.dll
2017-06-14 14:39 - 2010-11-21 05:24 - 000805376 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\cdo823073676.dll
2018-02-14 10:46 - 2018-02-14 10:47 - 000040448 _____ () C:\Users\Milaca\AppData\Local\Temp\CmdLineExt03.dll
2017-10-06 08:10 - 2010-11-21 05:24 - 000837632 _____ (Microsoft Corporation) C:\Users\Milaca\AppData\Local\Temp\kernel32.dll
2017-10-06 08:13 - 2017-10-06 08:13 - 013483360 _____ (Nero AG ) C:\Users\Milaca\AppData\Local\Temp\Nero TuneItUp_2.6.0.134.exe
2018-03-13 08:58 - 2018-03-13 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180313065808806.dll
2018-03-13 08:58 - 2018-03-13 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180313065809024.dll
2018-03-13 08:58 - 2018-03-13 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180313065809336.dll
2018-03-13 08:58 - 2018-03-13 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180313065809539.dll
2018-03-13 08:58 - 2018-03-13 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180313065813205.dll
2018-03-13 08:58 - 2018-03-13 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180313065813595.dll
2018-03-13 08:58 - 2018-03-13 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180313065827136.dll
2018-03-13 08:58 - 2018-03-13 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180313065848793.dll
2018-03-14 08:58 - 2018-03-14 08:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180314065839397.dll
2018-03-14 09:02 - 2018-03-14 09:02 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180314070229220.dll
2018-03-15 09:04 - 2018-03-15 09:04 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180315070434929.dll
2018-03-15 09:10 - 2018-03-15 09:10 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180315071005936.dll
2018-03-15 09:42 - 2018-03-15 09:42 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180315074243628.dll
2018-03-16 14:31 - 2018-03-16 14:31 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180316123151181.dll
2018-03-16 14:38 - 2018-03-16 14:38 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180316123800397.dll
2018-03-17 09:19 - 2018-03-17 09:19 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180317071906492.dll
2018-03-17 09:26 - 2018-03-17 09:26 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180317072603473.dll
2018-03-19 09:15 - 2018-03-19 09:15 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180319071501383.dll
2018-03-19 09:22 - 2018-03-19 09:22 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180319072210859.dll
2018-03-20 09:32 - 2018-03-20 09:32 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180320073217697.dll
2018-03-20 09:39 - 2018-03-20 09:39 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180320073916391.dll
2018-03-20 11:13 - 2018-03-20 11:13 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180320091343829.dll
2018-03-21 09:58 - 2018-03-21 09:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180321075837029.dll
2018-03-21 10:03 - 2018-03-21 10:03 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180321080352231.dll
2018-03-21 14:23 - 2018-03-21 14:23 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180321122358263.dll
2018-03-24 09:40 - 2018-03-24 09:40 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180324074054788.dll
2018-03-26 08:06 - 2018-03-26 08:06 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180326060629790.dll
2018-03-26 08:12 - 2018-03-26 08:12 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180326061217086.dll
2018-03-27 08:08 - 2018-03-27 08:08 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180327060800824.dll
2018-03-27 08:14 - 2018-03-27 08:14 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180327061406935.dll
2018-03-27 09:57 - 2018-03-27 09:57 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180327075749993.dll
2018-03-28 08:27 - 2018-03-28 08:27 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180328062752522.dll
2018-03-28 08:33 - 2018-03-28 08:33 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180328063325599.dll
2018-03-29 08:13 - 2018-03-29 08:13 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180329061345496.dll
2018-03-29 08:19 - 2018-03-29 08:19 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180329061928752.dll
2018-03-30 07:58 - 2018-03-30 07:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180330055835030.dll
2018-03-30 08:02 - 2018-03-30 08:02 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180330060207388.dll
2018-03-31 08:16 - 2018-03-31 08:16 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180331061653407.dll
2018-03-31 08:22 - 2018-03-31 08:22 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180331062218000.dll
2018-04-02 08:06 - 2018-04-02 08:06 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180402060641991.dll
2018-04-02 08:11 - 2018-04-02 08:11 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180402061152618.dll
2018-04-02 09:26 - 2018-04-02 09:26 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180402072607881.dll
2018-04-03 07:46 - 2018-04-03 07:46 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180403054652648.dll
2018-04-03 07:58 - 2018-04-03 07:58 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180403055832866.dll
2018-04-04 08:05 - 2018-04-04 08:05 - 001857024 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404060541982.dll
2018-04-04 08:06 - 2018-04-04 08:06 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404060656854.dll
2018-04-04 08:06 - 2018-04-04 08:06 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404060657213.dll
2018-04-04 08:06 - 2018-04-04 08:06 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404060657572.dll
2018-04-04 08:06 - 2018-04-04 08:06 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404060657790.dll
2018-04-04 08:06 - 2018-04-04 08:06 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404060658789.dll
2018-04-04 08:07 - 2018-04-04 08:07 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404060700193.dll
2018-04-04 08:07 - 2018-04-04 08:07 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404060703406.dll
2018-04-04 08:58 - 2018-04-04 08:58 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180404065801136.dll
2018-04-05 07:58 - 2018-04-05 07:58 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180405055838604.dll
2018-04-05 08:07 - 2018-04-05 08:07 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180405060711798.dll
2018-04-05 17:42 - 2018-04-05 17:42 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180405154209348.dll
2018-04-06 08:03 - 2018-04-06 08:03 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180406060318550.dll
2018-04-06 08:07 - 2018-04-06 08:07 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180406060711383.dll
2018-04-07 08:06 - 2018-04-07 08:06 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180407060630442.dll
2018-04-07 08:07 - 2018-04-07 08:07 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180407060711456.dll
2018-04-10 08:43 - 2018-04-10 08:43 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180410064354264.dll
2018-04-10 08:49 - 2018-04-10 08:49 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180410064936183.dll
2018-04-11 07:57 - 2018-04-11 07:57 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180411055732587.dll
2018-04-11 08:07 - 2018-04-11 08:07 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180411060712028.dll
2018-04-12 08:02 - 2018-04-12 08:02 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180412060200600.dll
2018-04-12 08:07 - 2018-04-12 08:07 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180412060711625.dll
2018-04-13 08:51 - 2018-04-13 08:51 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180413065132292.dll
2018-04-13 09:11 - 2018-04-13 09:11 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180413071103655.dll
2018-04-13 10:53 - 2018-04-13 10:53 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180413085355131.dll
2018-04-14 08:03 - 2018-04-14 08:03 - 001876992 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180414060315917.dll
2018-04-14 08:04 - 2018-04-14 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180414060412043.dll
2018-04-14 08:04 - 2018-04-14 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180414060412402.dll
2018-04-14 08:04 - 2018-04-14 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180414060412754.dll
2018-04-14 08:04 - 2018-04-14 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180414060413108.dll
2018-04-14 08:04 - 2018-04-14 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180414060413990.dll
2018-04-14 08:04 - 2018-04-14 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180414060414787.dll
2018-04-14 08:04 - 2018-04-14 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180414060418068.dll
2018-04-16 08:19 - 2018-04-16 08:19 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180416061917392.dll
2018-04-16 08:25 - 2018-04-16 08:25 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180416062511293.dll
2018-04-17 09:53 - 2018-04-17 09:53 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180417075356323.dll
2018-04-17 09:59 - 2018-04-17 09:59 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180417075904086.dll
2018-04-18 08:04 - 2018-04-18 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180418060426831.dll
2018-04-18 08:04 - 2018-04-18 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180418060458348.dll
2018-04-19 08:44 - 2018-04-19 08:44 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180419064443235.dll
2018-04-20 08:12 - 2018-04-20 08:12 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180420061223617.dll
2018-04-20 08:17 - 2018-04-20 08:17 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180420061750525.dll
2018-04-21 08:29 - 2018-04-21 08:29 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180421062928400.dll
2018-04-21 08:34 - 2018-04-21 08:34 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180421063458395.dll
2018-04-23 08:59 - 2018-04-23 08:59 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180423065932339.dll
2018-04-23 09:04 - 2018-04-23 09:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180423070436101.dll
2018-04-23 11:04 - 2018-04-23 11:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180423090431079.dll
2018-04-24 09:05 - 2018-04-24 09:05 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180424070527462.dll
2018-04-24 09:11 - 2018-04-24 09:11 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180424071112254.dll
2018-04-25 09:21 - 2018-04-25 09:21 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180425072157660.dll
2018-04-25 09:40 - 2018-04-25 09:40 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180425074003687.dll
2018-04-27 09:48 - 2018-04-27 09:48 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180427074803990.dll
2018-04-27 09:52 - 2018-04-27 09:52 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180427075255420.dll
2018-04-28 07:47 - 2018-04-28 07:47 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180428054722060.dll
2018-04-28 08:04 - 2018-04-28 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180428060425699.dll
2018-04-30 09:25 - 2018-04-30 09:25 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180430072526896.dll
2018-04-30 09:31 - 2018-04-30 09:31 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180430073128992.dll
2018-05-03 09:14 - 2018-05-03 09:14 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180503071429529.dll
2018-05-03 13:41 - 2018-05-03 13:41 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180503114138982.dll
2018-05-03 14:07 - 2018-05-03 14:07 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180503120717509.dll
2018-05-04 07:58 - 2018-05-04 07:58 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180504055830451.dll
2018-05-04 08:04 - 2018-05-04 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180504060425536.dll
2018-05-07 11:04 - 2018-05-07 11:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180507090442409.dll
2018-05-07 11:10 - 2018-05-07 11:10 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180507091021962.dll
2018-05-08 07:57 - 2018-05-08 07:57 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180508055734518.dll
2018-05-08 08:04 - 2018-05-08 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180508060425750.dll
2018-05-09 08:17 - 2018-05-09 08:17 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180509061747294.dll
2018-05-09 08:23 - 2018-05-09 08:23 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180509062323047.dll
2018-05-11 08:26 - 2018-05-11 08:26 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180511062636614.dll
2018-05-11 08:32 - 2018-05-11 08:32 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180511063238992.dll
2018-05-11 15:42 - 2018-05-11 15:42 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180511134229878.dll
2018-05-11 15:55 - 2018-05-11 15:55 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180511135535069.dll
2018-05-12 08:21 - 2018-05-12 08:21 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180512062104696.dll
2018-05-12 08:29 - 2018-05-12 08:29 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180512062917871.dll
2018-05-12 10:12 - 2018-05-12 10:12 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180512081251516.dll
2018-05-15 07:56 - 2018-05-15 07:56 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180515055603802.dll
2018-05-15 08:01 - 2018-05-15 08:01 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180515060102323.dll
2018-05-15 08:04 - 2018-05-15 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180515060425460.dll
2018-05-16 07:52 - 2018-05-16 07:52 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180516055205977.dll
2018-05-16 08:04 - 2018-05-16 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180516060425927.dll
2018-05-17 09:05 - 2018-05-17 09:05 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180517070541523.dll
2018-05-18 08:33 - 2018-05-18 08:33 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180518063302658.dll
2018-05-23 08:04 - 2018-05-23 08:04 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180523060426343.dll
2018-05-23 08:23 - 2018-05-23 08:23 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180523062359093.dll
2018-05-26 09:52 - 2018-05-26 09:52 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180526075228640.dll
2018-05-26 09:58 - 2018-05-26 09:58 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180526075812399.dll
2018-05-26 10:21 - 2018-05-26 10:21 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180526082156334.dll
2018-05-26 11:23 - 2018-05-26 11:23 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180526092310739.dll
2018-05-26 14:19 - 2018-05-26 14:19 - 001876480 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_180526121928238.dll
2018-02-21 15:15 - 2018-02-21 15:15 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182211544962.dll
2018-02-21 08:51 - 2018-02-21 08:51 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018221514532.dll
2018-02-21 08:51 - 2018-02-21 08:51 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182215146265.dll
2018-02-21 08:51 - 2018-02-21 08:51 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182215146592.dll
2018-02-21 08:51 - 2018-02-21 08:51 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182215146826.dll
2018-02-21 08:51 - 2018-02-21 08:51 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182215148386.dll
2018-02-21 08:51 - 2018-02-21 08:51 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182215148698.dll
2018-02-21 08:51 - 2018-02-21 08:51 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182215150929.dll
2018-02-22 15:00 - 2018-02-22 15:00 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018222052326.dll
2018-02-22 11:01 - 2018-02-22 11:01 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018222143386.dll
2018-02-22 11:30 - 2018-02-22 11:30 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018222303650.dll
2018-02-22 08:39 - 2018-02-22 08:39 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018222397299.dll
2018-02-22 08:51 - 2018-02-22 08:51 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182225159836.dll
2018-02-23 09:13 - 2018-02-23 09:13 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182231333378.dll
2018-02-23 09:19 - 2018-02-23 09:19 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182231951172.dll
2018-02-23 09:35 - 2018-02-23 09:35 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182233531850.dll
2018-02-24 09:21 - 2018-02-24 09:21 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018224213923.dll
2018-02-24 09:27 - 2018-02-24 09:27 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018224271356.dll
2018-02-26 09:33 - 2018-02-26 09:33 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018226338339.dll
2018-02-26 19:44 - 2018-02-26 19:44 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018226441765.dll
2018-02-26 16:52 - 2018-02-26 16:52 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018226523985.dll
2018-02-27 09:25 - 2018-02-27 09:25 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182272511751.dll
2018-02-27 09:30 - 2018-02-27 09:30 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182273032505.dll
2018-02-27 14:45 - 2018-02-27 14:45 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182274513682.dll
2018-02-28 11:28 - 2018-02-28 11:28 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018228287171.dll
2018-02-28 11:33 - 2018-02-28 11:33 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20182283345753.dll
2018-03-10 08:47 - 2018-03-10 08:47 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018310478562.dll
2018-03-10 08:53 - 2018-03-10 08:53 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018310532570.dll
2018-03-10 09:06 - 2018-03-10 09:06 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201831063666.dll
2018-03-01 12:10 - 2018-03-01 12:10 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018311052745.dll
2018-03-01 12:17 - 2018-03-01 12:17 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20183117261.dll
2018-03-12 10:20 - 2018-03-12 10:20 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20183122021658.dll
2018-03-12 08:51 - 2018-03-12 08:51 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20183125156783.dll
2018-03-12 08:56 - 2018-03-12 08:56 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018312565597.dll
2018-03-12 09:06 - 2018-03-12 09:06 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201831265331.dll
2018-03-13 08:56 - 2018-03-13 08:56 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20183135621336.dll
2018-03-02 09:36 - 2018-03-02 09:36 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018323641765.dll
2018-03-02 09:42 - 2018-03-02 09:42 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018324242343.dll
2018-03-03 09:21 - 2018-03-03 09:21 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201833211795.dll
2018-03-03 09:27 - 2018-03-03 09:27 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018332719655.dll
2018-03-05 09:10 - 2018-03-05 09:10 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018351053130.dll
2018-03-05 09:16 - 2018-03-05 09:16 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018351624357.dll
2018-03-06 09:05 - 2018-03-06 09:05 - 001862144 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201836512302.dll
2018-03-06 09:05 - 2018-03-06 09:05 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201836553605.dll
2018-03-06 09:05 - 2018-03-06 09:05 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201836553812.dll
2018-03-06 09:05 - 2018-03-06 09:05 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201836554262.dll
2018-03-06 09:05 - 2018-03-06 09:05 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201836554406.dll
2018-03-06 09:05 - 2018-03-06 09:05 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201836555256.dll
2018-03-06 09:05 - 2018-03-06 09:05 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201836556472.dll
2018-03-06 09:05 - 2018-03-06 09:05 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20183655826.dll
2018-03-07 09:02 - 2018-03-07 09:02 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_201837256993.dll
2018-03-07 09:06 - 2018-03-07 09:06 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20183766137.dll
2018-03-08 08:56 - 2018-03-08 08:56 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_2018385619302.dll
2018-03-08 09:06 - 2018-03-08 09:06 - 001853440 _____ (Opera Software) C:\Users\Milaca\AppData\Local\Temp\Opera_installer_20183865313.dll
2017-10-04 08:19 - 2017-11-06 11:13 - 000031096 _____ (Tencent) C:\Users\Milaca\AppData\Local\Temp\qqsafeud.exe
2018-02-14 10:46 - 2018-02-14 10:47 - 000012305 ____T () C:\Users\Milaca\AppData\Local\Temp\SIntf16.dll
2018-02-14 10:46 - 2018-02-14 10:47 - 000017324 ____T () C:\Users\Milaca\AppData\Local\Temp\SIntf32.dll
2018-02-14 10:46 - 2018-02-14 10:47 - 000022068 ____T () C:\Users\Milaca\AppData\Local\Temp\SIntfNT.dll
2018-03-23 16:01 - 2018-03-23 17:12 - 000000000 _____ () C:\Users\Milaca\AppData\Local\Temp\{E99BB489-FA0F-4BBD-9E94-EC8F5FBEC87F}-65.0.3325.181_64.0.3282.186_chrome_updater.exe

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2018-06-09 08:40

==================== End of FRST.txt ============================


[Link mogu videti samo ulogovani korisnici]

Unaprijed Hvala

Dopuna: 16 Jun 2018 2:47

Greska Windows 7 64 bita je nije Windows 10 64bita

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Otvori Notepad i iskopiraj sljedeći tekst koji se nalazi unutar Kod polja.

Startup: C:\Users\Milaca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6.lnk [2017-06-05]
ShortcutTarget: 6.lnk -> C:\Users\Milaca\AppData\Roaming\ee0MuGoicW.exe (No File)
C:\Users\Milaca\AppData\Roaming\ee0MuGoicW.exe


U okviru Notepad-a klikni na File --> Save As
Pod Encoding izaberi UTF-8.
Fajl nazovi Fixlist i sačuvaj na Desktop
Dvoklikom ponovo pokreni FRST.exe
Klikni na Fix i sačekaj dok program ne završi.
Ukoliko program zatraži restart računara, omogući mu da to nesmetano obavi.
Nakon završetka rada, otvoriće se fixlog.txt, sa sadržajem koji treba da kopiraš u temu.
Takođe, na Desktop-u će se nalaziti (fixlog.txt).

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Fix result of Farbar Recovery Scan Tool (x64) Version: 06.06.2018 01
Ran by Milaca (16-06-2018 12:16:02) Run:1
Running from C:\Users\Milaca\Desktop
Loaded Profiles: Milaca (Available Profiles: Milaca)
Boot Mode: Normal
==============================================

fixlist content:
*****************
Startup: C:\Users\Milaca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6.lnk [2017-06-05]
ShortcutTarget: 6.lnk -> C:\Users\Milaca\AppData\Roaming\ee0MuGoicW.exe (No File)
C:\Users\Milaca\AppData\Roaming\ee0MuGoicW.exe
*****************

"C:\Users\Milaca\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\6.lnk" => not found
"C:\Users\Milaca\AppData\Roaming\ee0MuGoicW.exe" => not found
"C:\Users\Milaca\AppData\Roaming\ee0MuGoicW.exe" => not found

==== End of Fixlog 12:16:02 ====

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ako još detektuje, uslikaj obavještenje na kome se vidi putanja do detektovanog fajla.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Da li ga još uvijek detektuje nakon tog brisanja?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Skeniro sam nakon brisanja i sad nema vise virusa, jel sad sve ok?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Sad će da vidimo.

Preuzmi Malwarebytes Anti-Malware sa ovog ili ovog ili ovog linka i instaliraj aplikaciju.
Pokreni mb3-setup-consumer-{verzija}.exe i isprati uputstva za instalaciju programa. Nakon instalacije, klikni na Finish

Prilikom prvog pokretanja, program će prikazati prozor "dobrodošlice". Slobodno zatvori taj prozor.
Napomena: Premium funkcije programa su već aktivirane i važe 13 dana od trenutka instalacije. Premium funkcije možeš isključiti preko Settings > My Account tab podešavanja.

• Podešavanja skenera - u Settings, klikni na Protection tab. Ispod Scan Options sekcije, uključi "Scan for rootkits" opciju.
• Pripremi podešavanja za Threat Scan - u Dashboard , klikni na Scan Now dugme. MBAM će ažurirati bazu i započeti skeniranje.

Kada se skeniranje završi, ako je infekcija detektovana, obrati pažnju da je sve označeno, pa klikni na Remove Selected. Restartuj računar ako program upita za restart.
• Dostavi log: Pod Reports izaberi trenutni datum izveštaja Scan Report i potom klikni na View Report.

Izvezi log na Desktop;
- Klikni na Export dugme na dnu, pa onda izaberi 'Text file (*.txt)'
# U Save File dijalogu koji se pojavi, klikni na Desktop. U File name: polje, upiši "mbam" (bez navodnika) i klikni na Save.
- Pojaviće se poruka "Your file has been successfully exported", klikni Ok i zatvori prozor.


• U odgovoru prikači mbam.txt log koristeći "Prikači fajl" opciju.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

[Link mogu videti samo ulogovani korisnici]

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Čist si.

• Sledeća procedura će implementirati završno čišćenje.

Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.
Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;

Remove disinfection tools
Create registry backup
Purge System Restore

Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.
Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)

Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
Alat briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.