API tools faq
paste
Advertisement
Guest User

bromo

a guest
Jun 23rd, 2017
134
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 31.84 KB | None | 0 0
raw download clone embed print report
  1. Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-06-2017 01
  2. Ran by User (administrator) on USER-PC (23-06-2017 23:47:06)
  3. Running from C:\Users\User\Downloads
  4. Loaded Profiles: User (Available Profiles: User)
  5. Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: Български (България)
  6. Internet Explorer Version 11 (Default browser: Chrome)
  7. Boot Mode: Normal
  8. Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
  9.  
  10. ==================== Processes (Whitelisted) =================
  11.  
  12. (If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
  13.  
  14. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  15. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
  16. (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
  17. (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieSvc.exe
  18. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
  19. (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
  20. (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
  21. (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
  22. (Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
  23. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
  24. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
  25. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  26. (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
  27. (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe
  28. (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Service.exe
  29. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
  30. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
  31. (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-Network.exe
  32. (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-BlockDevice.exe
  33. (BlueStack Systems) C:\Program Files (x86)\BlueStacks\HD-SharedFolder.exe
  34. (Microsoft Corporation) C:\Windows\System32\rundll32.exe
  35. (Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
  36. (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
  37. (Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
  38. (VIA) C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe
  39. (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
  40. (Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
  41. (Spotify Ltd) C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe
  42. (IrisTech) C:\Users\User\Downloads\iris-mini-0.1.4.exe
  43. (Sandboxie Holdings, LLC) C:\Program Files\Sandboxie\SbieCtrl.exe
  44. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
  45. (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
  46. () C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe
  47. (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
  48. (Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
  49. (Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
  50. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
  51. (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
  52. (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
  53. (Microsoft Corporation) C:\Program Files\Microsoft Security Client\MpCmdRun.exe
  54. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  55. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  56. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  57. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  58. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  59. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  60. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  61. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  62. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  63. (Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
  64. (BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Frontend.exe
  65.  
  66. ==================== Registry (Whitelisted) ====================
  67.  
  68. (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
  69.  
  70. HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [108144 2012-11-05] (Microsoft Corporation)
  71. HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1340192 2016-01-29] (Microsoft Corporation)
  72. HKLM\...\Run: [HDAudDeck] => C:\Program Files (x86)\VIA\VIAudioi\VDeck\VDeck.exe [4689072 2013-12-26] (VIA)
  73. HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-06-24] (NVIDIA Corporation)
  74. HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
  75. HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
  76. HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292088 2013-07-18] (Intel Corporation)
  77. HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [843480 2014-10-07] (BlueStack Systems, Inc.)
  78. HKLM-x32\...\Run: [ProductUpdater] => C:\Program Files (x86)\Common Files\Freemake Shared\ProductUpdater\ProductUpdater.exe [64512 2015-08-25] ()
  79. HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [3487032 2017-06-12] (Dropbox, Inc.)
  80. HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-03-15] (Oracle Corporation)
  81. HKU\S-1-5-21-3045149589-859826438-1459001048-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3673728 2012-11-06] (DT Soft Ltd)
  82. HKU\S-1-5-21-3045149589-859826438-1459001048-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8358680 2015-06-01] (Piriform Ltd)
  83. HKU\S-1-5-21-3045149589-859826438-1459001048-1000\...\Run: [CyberGhost] => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
  84. HKU\S-1-5-21-3045149589-859826438-1459001048-1000\...\Run: [Spotify Web Helper] => C:\Users\User\AppData\Roaming\Spotify\SpotifyWebHelper.exe [1431664 2017-01-18] (Spotify Ltd)
  85. HKU\S-1-5-21-3045149589-859826438-1459001048-1000\...\Run: [IrisMini] => C:\Users\User\Downloads\iris-mini-0.1.4.exe [10268160 2016-09-25] (IrisTech)
  86. HKU\S-1-5-21-3045149589-859826438-1459001048-1000\...\Run: [SandboxieControl] => C:\Program Files\Sandboxie\SbieCtrl.exe [799376 2016-12-14] (Sandboxie Holdings, LLC)
  87. ShellIconOverlayIdentifiers: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  88. ShellIconOverlayIdentifiers: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  89. ShellIconOverlayIdentifiers: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  90. ShellIconOverlayIdentifiers: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  91. ShellIconOverlayIdentifiers: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  92. ShellIconOverlayIdentifiers: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  93. ShellIconOverlayIdentifiers: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  94. ShellIconOverlayIdentifiers: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  95. ShellIconOverlayIdentifiers: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  96. ShellIconOverlayIdentifiers: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt64.16.0.dll [2017-06-12] (Dropbox, Inc.)
  97. ShellIconOverlayIdentifiers-x32: [ DropboxExt01] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  98. ShellIconOverlayIdentifiers-x32: [ DropboxExt02] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  99. ShellIconOverlayIdentifiers-x32: [ DropboxExt03] -> {FB314EE1-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  100. ShellIconOverlayIdentifiers-x32: [ DropboxExt04] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  101. ShellIconOverlayIdentifiers-x32: [ DropboxExt05] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  102. ShellIconOverlayIdentifiers-x32: [ DropboxExt06] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  103. ShellIconOverlayIdentifiers-x32: [ DropboxExt07] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  104. ShellIconOverlayIdentifiers-x32: [ DropboxExt08] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  105. ShellIconOverlayIdentifiers-x32: [ DropboxExt09] -> {FB314EE2-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  106. ShellIconOverlayIdentifiers-x32: [ DropboxExt10] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Program Files (x86)\Dropbox\Client\DropboxExt.16.0.dll [2017-06-12] (Dropbox, Inc.)
  107.  
  108. ==================== Internet (Whitelisted) ====================
  109.  
  110. (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
  111.  
  112. Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
  113. Tcpip\..\Interfaces\{41E2249E-F8B5-4798-A3D0-186514DFA37F}: [DhcpNameServer] 10.2.2.1 89.25.0.253 84.22.22.14
  114. Tcpip\..\Interfaces\{FCE05C6D-EE6C-4C5B-AE5A-40978207817C}: [DhcpNameServer] 192.168.0.1
  115.  
  116. Internet Explorer:
  117. ==================
  118. HKU\S-1-5-21-3045149589-859826438-1459001048-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.bg/
  119. HKU\S-1-5-21-3045149589-859826438-1459001048-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
  120. SearchScopes: HKU\S-1-5-21-3045149589-859826438-1459001048-1000 -> DefaultScope {802C5D16-261E-42B0-BA07-D46B9D28E55D} URL = hxxps://www.google.com/search?q={searchTerms}
  121. SearchScopes: HKU\S-1-5-21-3045149589-859826438-1459001048-1000 -> {802C5D16-261E-42B0-BA07-D46B9D28E55D} URL = hxxps://www.google.com/search?q={searchTerms}
  122. BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
  123. BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_131\bin\ssv.dll [2017-04-25] (Oracle Corporation)
  124. BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  125. BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_131\bin\jp2ssv.dll [2017-04-25] (Oracle Corporation)
  126. BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2013-12-19] (Microsoft Corporation)
  127. BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2013-03-06] (Microsoft Corporation)
  128.  
  129. FireFox:
  130. ========
  131. FF DefaultProfile: r16b0985.default
  132. FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r16b0985.default [2017-06-23]
  133. FF NetworkProxy: Mozilla\Firefox\Profiles\r16b0985.default -> socks", "99.130.95.17"
  134. FF NetworkProxy: Mozilla\Firefox\Profiles\r16b0985.default -> socks_port", 46458
  135. FF NetworkProxy: Mozilla\Firefox\Profiles\r16b0985.default -> socks_remote_dns", true
  136. FF NetworkProxy: Mozilla\Firefox\Profiles\r16b0985.default -> type", 1
  137. FF Extension: (Disable WebRTC) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r16b0985.default\Extensions\jid1-5Fs7iTLscUaZBgwr@jetpack.xpi [2016-11-03]
  138. FF Extension: (Adblock Plus) - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\r16b0985.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2017-06-18]
  139. FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_131.dll [2017-06-16] ()
  140. FF Plugin: @java.com/DTPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\dtplugin\npDeployJava1.dll [2017-04-25] (Oracle Corporation)
  141. FF Plugin: @java.com/JavaPlugin,version=11.131.2 -> C:\Program Files\Java\jre1.8.0_131\bin\plugin2\npjp2.dll [2017-04-25] (Oracle Corporation)
  142. FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
  143. FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
  144. FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  145. FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_131.dll [2017-06-16] ()
  146. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.56 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-01-06] (Intel Corporation)
  147. FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-01-06] (Intel Corporation)
  148. FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
  149. FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)
  150. FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
  151. FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
  152. FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-28] (NVIDIA Corporation)
  153. FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-28] (NVIDIA Corporation)
  154. FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
  155. FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-28] (Google Inc.)
  156. FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-04-05] (Adobe Systems Inc.)
  157. FF Plugin HKU\S-1-5-21-3045149589-859826438-1459001048-1000: SkypePlugin -> C:\Users\User\AppData\Local\SkypePlugin\7.32.6.278\npGatewayNpapi.dll [2017-04-18] (Skype Technologies S.A.)
  158. FF Plugin HKU\S-1-5-21-3045149589-859826438-1459001048-1000: SkypePlugin64 -> C:\Users\User\AppData\Local\SkypePlugin\7.32.6.278\npGatewayNpapi-x64.dll [2017-04-18] (Skype Technologies S.A.)
  159.  
  160. Chrome:
  161. =======
  162. CHR HomePage: Default -> hxxp://www.facebook.com/
  163. CHR StartupUrls: Default -> "hxxp://google.bg/"
  164. CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default [2017-06-23]
  165. CHR Extension: (Google Презентации) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-17]
  166. CHR Extension: (Google Документи) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-09-17]
  167. CHR Extension: (Google Диск) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
  168. CHR Extension: (Dark Skin for Youtube™) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfeknfgchonpnofdjokchhdhdnddhglm [2017-04-28]
  169. CHR Extension: (Повиквания в Skype) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blakpkgjpemejpbmfiglncklihnhjkij [2017-05-20]
  170. CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
  171. CHR Extension: (USPS Track) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\boobjicjbfhoonkeafgkdgkepjhlgiog [2017-06-23]
  172. CHR Extension: (Google Търсене) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
  173. CHR Extension: (Adobe Acrobat) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-03-04]
  174. CHR Extension: (Електронни таблици от Google) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-17]
  175. CHR Extension: (Google Документи офлайн) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
  176. CHR Extension: (AdBlock) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2017-06-22]
  177. CHR Extension: (AliExpress Assistant - Price Tracker) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\hihlaoogegdjakmdbpbilijdghoggkim [2017-06-16]
  178. CHR Extension: (Плащания в уеб магазина на Chrome) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-03-09]
  179. CHR Extension: (Facebook Message Seen Notification Remover) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\piohdenkodpbcigpkmicjapilbfjioil [2015-04-18]
  180. CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-17]
  181. CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
  182.  
  183. ==================== Services (Whitelisted) ====================
  184.  
  185. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  186.  
  187. R2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [409304 2014-10-07] (BlueStack Systems, Inc.)
  188. R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [388824 2014-10-07] (BlueStack Systems, Inc.)
  189. R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [782040 2014-10-07] (BlueStack Systems, Inc.)
  190. S2 dbupdate; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
  191. S3 dbupdatem; C:\Program Files (x86)\Dropbox\Update\DropboxUpdate.exe [143144 2016-11-05] (Dropbox, Inc.)
  192. R2 DbxSvc; C:\Windows\system32\DbxSvc.exe [48944 2017-06-12] (Dropbox, Inc.)
  193. R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-06-24] (NVIDIA Corporation)
  194. S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887256 2014-05-13] (Intel(R) Corporation)
  195. R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [158496 2015-01-06] (Intel Corporation)
  196. R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [23808 2016-01-29] (Microsoft Corporation)
  197. R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [374344 2016-01-29] (Microsoft Corporation)
  198. R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1868432 2015-06-24] (NVIDIA Corporation)
  199. R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23007376 2015-06-24] (NVIDIA Corporation)
  200. R2 SbieSvc; C:\Program Files\Sandboxie\SbieSvc.exe [197776 2016-12-14] (Sandboxie Holdings, LLC)
  201. R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5611280 2015-08-07] (TeamViewer GmbH)
  202. R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27768 2012-12-11] (VIA Technologies, Inc.)
  203. S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
  204. S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [X]
  205.  
  206. ===================== Drivers (Whitelisted) ======================
  207.  
  208. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  209.  
  210. R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [122072 2014-10-07] (BlueStack Systems)
  211. R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283200 2015-05-31] (DT Soft Ltd)
  212. R3 L1C; C:\Windows\System32\DRIVERS\L1C62x64.sys [129224 2013-07-18] (Qualcomm Atheros Co., Ltd.)
  213. R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2015-01-06] (Intel Corporation)
  214. R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [289120 2015-11-13] (Microsoft Corporation)
  215. S1 MpKsld8b361ca; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{EDE2B969-64F7-48DC-AB23-7F49B1ACE1E8}\MpKsld8b361ca.sys [44928 2017-06-21] () [File not signed]
  216. R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [133816 2015-11-13] (Microsoft Corporation)
  217. R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-06-24] (NVIDIA Corporation)
  218. R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46768 2015-05-19] (NVIDIA Corporation)
  219. S3 ptun0901; C:\Windows\System32\DRIVERS\ptun0901.sys [27136 2015-01-26] (The OpenVPN Project)
  220. R3 SbieDrv; C:\Program Files\Sandboxie\SbieDrv.sys [205968 2016-12-14] (Sandboxie Holdings, LLC)
  221. R3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
  222. S3 dbx; system32\DRIVERS\dbx.sys [X]
  223. S3 VGPU; System32\drivers\rdvgkmd.sys [X]
  224. S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]
  225.  
  226. ==================== NetSvcs (Whitelisted) ===================
  227.  
  228. (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
  229.  
  230.  
  231. ==================== One Month Created files and folders ========
  232.  
  233. (If an entry is included in the fixlist, the file/folder will be moved.)
  234.  
  235. 2017-06-23 22:03 - 2017-06-23 22:10 - 00005570 _____ C:\Users\User\Downloads\Fixlog.txt
  236. 2017-06-23 22:02 - 2017-06-23 22:02 - 00001996 _____ C:\Users\User\Desktop\fixlist.txt.txt
  237. 2017-06-23 17:14 - 2017-06-23 17:18 - 00055789 _____ C:\Users\User\Downloads\Addition.txt
  238. 2017-06-23 17:12 - 2017-06-23 23:47 - 00023847 _____ C:\Users\User\Downloads\FRST.txt
  239. 2017-06-23 17:12 - 2017-06-23 23:47 - 00000000 ____D C:\FRST
  240. 2017-06-23 17:10 - 2017-06-23 17:11 - 02439680 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
  241. 2017-06-18 22:44 - 2017-06-18 22:44 - 00026871 _____ C:\Users\User\Downloads\Greys Anatomy_13x22_HDTV.KILLERS.en.zip
  242. 2017-06-18 22:43 - 2017-06-18 22:43 - 00010804 _____ C:\Users\User\Downloads\Greys.Anatomy.S13E22.HDTV.x264-KILLERS.torrent
  243. 2017-06-16 17:34 - 2017-06-16 17:34 - 00001879 _____ C:\Users\User\Desktop\ICQ.lnk
  244. 2017-06-15 17:58 - 2017-06-21 15:00 - 00000000 ____D C:\Users\User\AppData\Roaming\ICQ
  245. 2017-06-15 14:14 - 2017-06-15 14:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
  246. 2017-06-12 14:52 - 2017-06-12 14:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-stable.sys
  247. 2017-06-12 14:52 - 2017-06-12 14:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-dev.sys
  248. 2017-06-12 14:52 - 2017-06-12 14:52 - 00045672 _____ (Dropbox, Inc.) C:\Windows\system32\Drivers\dbx-canary.sys
  249. 2017-06-11 23:00 - 2017-06-11 23:00 - 00021342 _____ C:\Users\User\Downloads\Greys Anatomy_13x21_HDTV.KILLERS.en.zip
  250. 2017-06-11 22:59 - 2017-06-11 22:59 - 00011304 _____ C:\Users\User\Downloads\Greys.Anatomy.S13E21.HDTV.x264-KILLERS.torrent
  251. 2017-06-04 22:51 - 2017-06-04 22:51 - 00026590 _____ C:\Users\User\Downloads\Greys Anatomy_13x20_HDTV.KILLERS.en.zip
  252. 2017-06-04 22:27 - 2017-06-04 22:27 - 00005984 _____ C:\Users\User\Downloads\Greys.Anatomy.S13E20.HDTV.x264-KILLERS.torrent
  253. 2017-05-28 22:36 - 2017-05-28 22:36 - 00023140 _____ C:\Users\User\Downloads\Greys Anatomy_13x19_HDTV.KILLERS.en.zip
  254. 2017-05-28 22:23 - 2017-05-28 22:23 - 00005804 _____ C:\Users\User\Downloads\Greys.Anatomy.S13E19.HDTV.x264-KILLERS.torrent
  255. 2017-05-27 18:03 - 2017-05-27 18:03 - 00020692 _____ C:\Users\User\Downloads\Supernatural.S12E11.HDTV.x264-LOL.torrent
  256. 2017-05-25 23:54 - 2017-05-25 23:54 - 00062012 _____ C:\Users\User\Downloads\firsttt.txt
  257. 2017-05-25 23:53 - 2017-05-25 23:53 - 00021079 _____ C:\Users\User\Downloads\New Text Document (1).txt
  258. 2017-05-25 03:30 - 2017-05-25 03:30 - 00021079 _____ C:\Users\User\Downloads\New Text Document.txt
  259. 2017-05-25 03:25 - 2017-05-25 03:25 - 00547103 _____ C:\Users\User\Downloads\combined.txt
  260. 2017-05-25 03:25 - 2017-05-25 03:25 - 00003312 _____ C:\Users\User\Downloads\dai mo be.txt
  261. 2017-05-25 03:23 - 2017-05-25 03:23 - 00081687 _____ C:\Users\User\Downloads\4ek.txt
  262. 2017-05-24 17:54 - 2017-05-24 17:54 - 00035441 _____ C:\Users\User\Downloads\изтеглен файл.htm
  263. 2017-05-24 00:16 - 2017-05-27 02:19 - 00000000 ____D C:\Users\User\Desktop\2017 ACC
  264.  
  265. ==================== One Month Modified files and folders ========
  266.  
  267. (If an entry is included in the fixlist, the file/folder will be moved.)
  268.  
  269. 2017-06-23 23:41 - 2015-09-05 15:18 - 00000904 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineUA.job
  270. 2017-06-23 23:32 - 2009-07-14 07:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
  271. 2017-06-23 23:32 - 2009-07-14 07:45 - 00026576 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
  272. 2017-06-23 23:22 - 2016-09-25 17:53 - 00000782 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Iris mini.lnk
  273. 2017-06-23 23:21 - 2016-06-06 11:11 - 00065536 _____ C:\Windows\system32\Ikeext.etl
  274. 2017-06-23 23:21 - 2015-09-05 15:18 - 00000900 _____ C:\Windows\Tasks\DropboxUpdateTaskMachineCore.job
  275. 2017-06-23 23:21 - 2009-07-14 08:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
  276. 2017-06-23 23:20 - 2015-04-16 20:05 - 00000000 ____D C:\ProgramData\NVIDIA
  277. 2017-06-23 22:38 - 2009-07-14 06:20 - 00000000 ____D C:\Windows\tracing
  278. 2017-06-23 22:07 - 2016-06-24 14:53 - 00000000 ____D C:\Users\User\AppData\LocalLow\Temp
  279. 2017-06-23 21:58 - 2015-04-17 19:55 - 00000000 ____D C:\Users\User\AppData\Local\Battle.net
  280. 2017-06-23 20:51 - 2015-04-18 01:26 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
  281. 2017-06-23 20:50 - 2015-08-31 13:17 - 00000000 ____D C:\Windows\system32\appmgmt
  282. 2017-06-23 20:48 - 2015-04-17 19:55 - 00000000 ____D C:\Program Files (x86)\Battle.net
  283. 2017-06-23 17:19 - 2017-01-19 01:57 - 00002644 _____ C:\Windows\Sandboxie.ini
  284. 2017-06-23 17:18 - 2017-04-16 16:55 - 00000000 ____D C:\Users\User\Desktop\trippin
  285. 2017-06-22 21:43 - 2017-01-03 18:31 - 00000000 ____D C:\Users\User\AppData\LocalLow\Mozilla
  286. 2017-06-22 21:38 - 2017-01-03 17:40 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
  287. 2017-06-20 21:48 - 2009-07-14 06:20 - 00000000 ____D C:\Windows\system32\NDF
  288. 2017-06-18 23:02 - 2016-04-29 14:36 - 00000000 ____D C:\Users\User\AppData\LocalLow\uTorrent
  289. 2017-06-18 23:02 - 2015-04-16 11:36 - 00000000 ____D C:\Users\User\AppData\Roaming\uTorrent
  290. 2017-06-18 14:29 - 2015-07-29 13:36 - 00000000 ____D C:\Users\User\Desktop\Tor Browser
  291. 2017-06-16 17:45 - 2015-05-07 21:36 - 00803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
  292. 2017-06-16 17:45 - 2015-05-07 21:36 - 00144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
  293. 2017-06-16 17:45 - 2015-05-07 21:36 - 00004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
  294. 2017-06-16 17:45 - 2015-05-07 21:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed
  295. 2017-06-16 17:45 - 2015-05-07 21:36 - 00000000 ____D C:\Windows\system32\Macromed
  296. 2017-06-16 17:34 - 2015-09-07 14:45 - 00001737 _____ C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\ICQ.lnk
  297. 2017-06-16 17:34 - 2015-09-07 14:45 - 00000000 ____D C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ICQ
  298. 2017-06-16 17:34 - 2015-09-07 14:45 - 00000000 ____D C:\Users\User\AppData\Roaming\ICQM
  299. 2017-06-15 18:16 - 2015-11-01 01:46 - 00000000 ____D C:\Users\User\AppData\Roaming\.purple
  300. 2017-06-15 17:19 - 2015-09-05 15:18 - 00000000 ____D C:\Users\User\AppData\Local\Dropbox
  301. 2017-06-15 14:14 - 2015-09-05 15:15 - 00000000 ____D C:\Program Files (x86)\Dropbox
  302. 2017-06-12 14:55 - 2016-10-07 00:06 - 00048944 _____ (Dropbox, Inc.) C:\Windows\system32\DbxSvc.exe
  303. 2017-06-09 19:53 - 2016-04-02 12:05 - 00000000 ____D C:\Users\User\AppData\Local\Spotify
  304. 2017-06-09 19:53 - 2016-04-02 12:04 - 00000000 ____D C:\Users\User\AppData\Roaming\Spotify
  305. 2017-06-08 13:32 - 2009-07-14 08:08 - 00032666 _____ C:\Windows\Tasks\SCHEDLGU.TXT
  306. 2017-05-31 20:59 - 2015-11-01 01:58 - 00000000 ____D C:\Users\User\AppData\Local\gtk-2.0
  307. 2017-05-30 23:45 - 2010-11-21 06:27 - 00565416 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
  308. 2017-05-27 13:33 - 2015-09-26 11:11 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
  309. 2017-05-24 01:27 - 2016-09-03 12:17 - 00000482 _____ C:\Users\User\Desktop\BRED.txt
  310.  
  311. ==================== Files in the root of some directories =======
  312.  
  313. 2016-09-25 17:53 - 2017-01-10 17:04 - 0000146 _____ () C:\Users\User\AppData\Roaming\gamma_ramp.reg
  314. 2015-12-30 13:34 - 2015-12-30 18:39 - 0000600 _____ () C:\Users\User\AppData\Local\PUTTY.RND
  315.  
  316. ==================== Bamital & volsnap ======================
  317.  
  318. (There is no automatic fix for files that do not pass verification.)
  319.  
  320. C:\Windows\system32\winlogon.exe => File is digitally signed
  321. C:\Windows\system32\wininit.exe => File is digitally signed
  322. C:\Windows\SysWOW64\wininit.exe => File is digitally signed
  323. C:\Windows\explorer.exe => File is digitally signed
  324. C:\Windows\SysWOW64\explorer.exe => File is digitally signed
  325. C:\Windows\system32\svchost.exe => File is digitally signed
  326. C:\Windows\SysWOW64\svchost.exe => File is digitally signed
  327. C:\Windows\system32\services.exe => File is digitally signed
  328. C:\Windows\system32\User32.dll => File is digitally signed
  329. C:\Windows\SysWOW64\User32.dll => File is digitally signed
  330. C:\Windows\system32\userinit.exe => File is digitally signed
  331. C:\Windows\SysWOW64\userinit.exe => File is digitally signed
  332. C:\Windows\system32\rpcss.dll => File is digitally signed
  333. C:\Windows\system32\dnsapi.dll => File is digitally signed
  334. C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
  335. C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
  336.  
  337. LastRegBack: 2016-07-10 23:12
  338.  
  339. ==================== End of FRST.txt ============================
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!