Countless ads popping up

Hi everyone, my computer has been infected with an adware (at least thats what I think)... I tried adwcleaner but it didnt help (cleaner did delete some files but the problem returned the day after) I also ran some scans with malwarebytes, and same happened, few viruses deleted, nothing helped...

One example...

So what can I do to delete these files forever and also what can I do to prevent this from happening in the future?

FRST file:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:06-09-2015 01

Ran by Dushan (administrator) on DUSHAN-PC (08-09-2015 17:31:42)

Running from C:\Users\Dushan\Desktop

Loaded Profiles: Dushan (Available Profiles: Dushan)

Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X86) Language: engleski (SAD)

Internet Explorer Version 9 (Default browser: FF)

Boot Mode: Normal

Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo...very-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(APN LLC.) C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe

(Microsoft Corporation) C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe

(Microsoft Corporation) C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe

() C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe

(CyberLink) C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe

(CyberLink) C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe

(Intel Corporation) C:\Windows\System32\hkcmd.exe

(Intel Corporation) C:\Windows\System32\igfxpers.exe

(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe

(Intel Corporation) C:\Windows\System32\igfxsrvc.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe

(APN) C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe

(Diskeeper Corporation) C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe

(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jucheck.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

(Nullsoft, Inc.) C:\Program Files\Winamp\winamp.exe

(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe [7625248 2009-07-28] (Realtek Semiconductor)

HKLM\...\Run: [RemoteControl11] => C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe [234792 2011-04-20] (CyberLink Corp.)

HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [271744 2014-09-26] (Oracle Corporation)

HKLM\...\Run: [ApnTBMon] => C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1843088 2015-08-21] (APN)

HKU\S-1-5-21-3528197946-984489926-4213029029-1000\...\Run: [DAEMON Tools Pro Agent] => C:\Program Files\DAEMON Tools Pro\DTAgent.exe [3111744 2012-04-26] (DT Soft Ltd)

HKU\S-1-5-21-3528197946-984489926-4213029029-1000\...\Run: [Facebook Update] => "C:\Users\Dushan\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

HKU\S-1-5-21-3528197946-984489926-4213029029-1000\...\Run: [GoogleChromeAutoLaunch_1CA4DED810D7C91D2F0860269CAF7743] => C:\Program Files\Google\Chrome\Application\chrome.exe [815944 2015-08-28] (Google Inc.)

HKU\S-1-5-21-3528197946-984489926-4213029029-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [53729824 2015-08-07] (Skype Technologies S.A.)

CHR HKU\S-1-5-21-3528197946-984489926-4213029029-1000\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: Hosts file not detected in the default directory

Tcpip\Parameters: [DhcpNameServer] 212.200.191.166 212.200.190.166

Tcpip\..\Interfaces\{4CC4D4A7-166E-41D1-AA3D-58B69205A17C}: [DhcpNameServer] 212.200.191.166 212.200.190.166

Internet Explorer:

==================

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com

HKU\S-1-5-21-3528197946-984489926-4213029029-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://www.google.com/ie

HKU\S-1-5-21-3528197946-984489926-4213029029-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com/ie

SearchScopes: HKU\S-1-5-21-3528197946-984489926-4213029029-1000 -> {b9982636-3c0e-4190-a29e-ecd77bfb5da9} URL = hxxp://www.searchshock.com/search.html?&q={searchTerms}&cid=3975

BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation)

FireFox:

========

FF ProfilePath: C:\Users\Dushan\AppData\Roaming\Mozilla\Firefox\Profiles\bm6t0y92.default

FF Homepage: hxxp://www.search.ask.com/?tpid=SGTSP-SAT&o=APN11005&pf=V7&trgb=FF&p2=%5EB3R%5Eaaa274%5ECA%5ERS&gct=hp&apn_ptnrs=%5EB3R&apn_dtid=%5Eaaa274%5ECA%5ERS&apn_dbr=firefox.exe_0_39.0.0.5659&apn_uid=901153B5-83BD-47C6-A084-A5FE2ED9F03C&itbv=12.34.1.2200&doi=2015-09-06&psv=&pt=tb

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_162.dll [2015-08-28] ()

FF Plugin: @google.com/npPicasa3,version=3.0.0 -> D:\Picasa3\npPicasa3.dll [2014-01-06] (Google, Inc.)

FF Plugin: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll [2014-10-23] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll [2014-10-23] (Oracle Corporation)

FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.)

FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.13\npGoogleUpdate3.dll [2015-08-29] (Google Inc.)

FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF Plugin HKU\S-1-5-21-3528197946-984489926-4213029029-1000: @Skype Limited.com/Facebook Video Calling Plugin -> C:\Users\Dushan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File

FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2015-06-29] (Adobe Systems Inc.)

FF SearchPlugin: C:\Users\Dushan\AppData\Roaming\Mozilla\Firefox\Profiles\bm6t0y92.default\searchplugins\ask-search.xml [2015-09-07]

FF Extension: TheAdBlock - C:\Users\Dushan\AppData\Roaming\Mozilla\Firefox\Profiles\bm6t0y92.default\Extensions\[email protected] [2015-08-21]

FF Extension: Shopping App by Ask - C:\Users\Dushan\AppData\Roaming\Mozilla\Firefox\Profiles\bm6t0y92.default\Extensions\[email protected] [2015-09-02]

FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-05-01]

Chrome:

=======

CHR HomePage: Default -> hxxp://www.search.ask.com/?gct=hp

CHR DefaultSearchURL: Default -> http://www.search.as...q={searchTerms}

CHR DefaultSearchKeyword: Default -> search.ask.com

CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com...q={searchTerms}

CHR Plugin: (Shockwave Flash) - C:\Program Files\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll ()

CHR Plugin: (Chrome Remote Desktop Viewer) - internal-remoting-viewer

CHR Plugin: (Native Client) - C:\Program Files\Google\Chrome\Application\45.0.2454.85\ppGoogleNaClPluginChrome.dll No File

CHR Plugin: (Chrome PDF Viewer) - C:\Program Files\Google\Chrome\Application\45.0.2454.85\pdf.dll No File

CHR Plugin: (Adobe Acrobat) - C:\Program Files\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)

CHR Plugin: (Google Update) - C:\Program Files\Google\Update\1.3.21.124\npGoogleUpdate3.dll No File

CHR Plugin: (Java™ Platform SE 7 U13) - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)

CHR Plugin: (Shockwave Flash) - C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_124.dll No File

CHR Plugin: (Java Deployment Toolkit 7.0.130.20) - C:\Windows\system32\npDeployJava1.dll No File

CHR Profile: C:\Users\Dushan\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Chrome Web Store Payments) - C:\Users\Dushan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-23]

CHR HKLM\...\Chrome\Extension: [aaaaafhgaihilbkellglkpeiegabpjem] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaafhgaihilbkellglkpeiegabpjem.crx [2015-08-26]

CHR HKLM\...\Chrome\Extension: [aaaaapdcjfaomkafnbpoclmfakjianjd] - C:\ProgramData\AskPartnerNetwork\Toolbar\Shared\CRX\aaaaapdcjfaomkafnbpoclmfakjianjd.crx [2015-08-26]

CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2015-05-01]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 APNMCP; C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe [201616 2015-08-21] (APN LLC.)

R2 c2cautoupdatesvc; C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation)

R2 c2cpnrsvc; C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation)

R2 CLHNServiceForPowerDVD; C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe [83240 2011-04-20] ()

R2 CyberLink PowerDVD 11.0 Monitor Service; C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSMonitorService.exe [70952 2011-03-31] (CyberLink)

R2 CyberLink PowerDVD 11.0 Service; C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe [312616 2011-03-31] (CyberLink)

R2 Diskeeper; C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe [2148176 2011-03-03] (Diskeeper Corporation)

S3 TrustedInstaller; %SystemRoot%\servicing\TrustedInstaller.exe [X]

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 DKRtWrt; C:\Windows\System32\DRIVERS\DKRtWrt.sys [38608 2011-02-14] (Diskeeper Corporation)

R2 ntk_PowerDVD; C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\ntk_PowerDVD.sys [71664 2011-04-20] (Cyberlink Corp.)

R0 sptd; C:\Windows\System32\Drivers\sptd.sys [477240 2013-02-20] (Duplex Secure Ltd.)

R2 SSPORT; C:\Windows\system32\Drivers\SSPORT.sys [5120 2009-07-29] (Samsung Electronics) [File not signed]

R2 {329F96B6-DF1E-4328-BFDA-39EA953C1312}; C:\Program Files\CyberLink\PowerDVD11\Common\NavFilter\000.fcl [77296 2011-04-12] (CyberLink Corp.)

U3 aiento69; C:\Windows\system32\Drivers\aiento69.sys [0 ] (Microsoft Corporation) <==== ATTENTION (zero byte File/Folder)

S2 DgiVecp; \??\C:\Windows\system32\Drivers\DgiVecp.sys [X]

S3 mcdbus; system32\DRIVERS\mcdbus.sys [X]

S3 VGPU; System32\drivers\rdvgkmd.sys [X]

S3 ZTEusbmdm6k; system32\DRIVERS\ZTEusbmdm6k.sys [X]

S3 ZTEusbnet; system32\DRIVERS\ZTEusbnet.sys [X]

S3 ZTEusbnmea; system32\DRIVERS\ZTEusbnmea.sys [X]

S3 ZTEusbser6k; system32\DRIVERS\ZTEusbser6k.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-08 17:31 - 2015-09-08 17:32 - 00012479 _____ C:\Users\Dushan\Desktop\FRST.txt

2015-09-08 17:30 - 2015-09-08 17:31 - 00000000 ____D C:\FRST

2015-09-08 17:29 - 2015-09-08 17:29 - 01692160 _____ (Farbar) C:\Users\Dushan\Desktop\FRST.exe

2015-09-08 17:25 - 2015-09-08 17:26 - 00000000 ____D C:\Users\Dushan\Desktop\1234

2015-09-07 01:32 - 2015-09-07 01:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader

2015-09-07 01:30 - 2015-09-07 01:30 - 00000000 ____D C:\ProgramData\AskPartnerNetwork

2015-09-07 01:30 - 2015-09-07 01:30 - 00000000 ____D C:\Program Files\AskPartnerNetwork

2015-09-07 01:29 - 2015-09-07 01:32 - 00001247 _____ C:\Users\Public\Desktop\YTD Video Downloader.lnk

2015-09-07 01:29 - 2015-09-07 01:32 - 00000000 ____D C:\ProgramData\YTD Video Downloader

2015-09-07 01:29 - 2015-09-07 01:29 - 00000000 ____D C:\ProgramData\APN

2015-09-07 01:29 - 2015-09-07 01:29 - 00000000 ____D C:\Program Files\GreenTree Applications

2015-09-07 01:27 - 2015-09-07 01:27 - 00102704 _____ (GreenTree Applications SRL) C:\Users\Dushan\Downloads\YTDsetup.exe

2015-09-07 01:23 - 2015-09-07 01:23 - 00000000 ____D C:\Users\Dushan\AppData\Roaming\Super PC Cleaner

2015-09-07 01:23 - 2015-09-07 01:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Super PC Cleaner

2015-09-06 21:24 - 2015-09-06 21:24 - 00017519 _____ C:\Users\Dushan\Downloads\avgust_Razvojna_U_jun_2015_I god_PORTFOLIO.xlsx

2015-08-23 22:13 - 2015-08-23 22:33 - 00098520 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2015-08-23 22:12 - 2015-08-23 22:12 - 00001060 _____ C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk

2015-08-23 22:12 - 2015-08-23 22:12 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware

2015-08-23 22:12 - 2015-08-23 22:12 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Malware

2015-08-23 22:12 - 2015-06-18 08:41 - 00094936 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys

2015-08-23 22:12 - 2015-06-18 08:41 - 00051928 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys

2015-08-23 22:12 - 2015-06-18 08:41 - 00023256 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys

2015-08-23 22:11 - 2015-08-23 22:11 - 00000000 __SHD C:\Windows\system32\%APPDATA%

2015-08-23 22:05 - 2015-08-23 22:05 - 00002687 _____ C:\Users\Public\Desktop\Skype.lnk

2015-08-23 22:05 - 2015-08-23 22:05 - 00000000 ____D C:\Users\Dushan\AppData\Local\Skype

2015-08-23 22:05 - 2015-08-23 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-08-23 22:05 - 2015-08-23 22:05 - 00000000 ____D C:\Program Files\Common Files\Skype

2015-08-23 22:03 - 2015-08-23 22:03 - 01385504 _____ (Skype Technologies S.A.) C:\Users\Dushan\Downloads\SkypeSetup.exe

2015-08-23 21:47 - 2015-09-08 17:23 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-08-23 21:47 - 2015-09-08 17:16 - 00000886 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-08-23 21:39 - 2015-08-23 21:39 - 01605632 _____ C:\Users\Dushan\Downloads\adwcleaner_5.003.exe

2015-08-21 22:36 - 2015-08-23 22:31 - 00000000 ____D C:\Program Files\DO IT

2015-08-21 22:11 - 2015-08-23 22:31 - 00000000 ____D C:\Program Files\IncludeFoobar

2015-08-21 22:07 - 2015-08-23 22:31 - 00000000 ____D C:\Program Files\SeekerInstance

2015-08-21 22:07 - 2015-08-21 22:07 - 00000000 _____ C:\Users\Dushan\AppData\Local\Temp.dat

2015-08-21 22:06 - 2015-08-23 22:31 - 00000000 ____D C:\Program Files\TrimEdit

2015-08-14 06:22 - 2015-08-14 06:22 - 00000000 ____D C:\ProgramData\ojgdllkiddlhdogopjignogcdmdkeolg

2015-08-12 15:33 - 2015-08-21 21:21 - 00000000 ____D C:\Users\Dushan\Downloads\rezi

2015-08-12 14:54 - 2015-08-12 14:54 - 00000000 ____D C:\ProgramData\bhdnmfcilodnhenifmipiflolpnmcbjn

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-09-08 17:15 - 2013-02-20 22:20 - 01831894 _____ C:\Windows\WindowsUpdate.log

2015-09-08 17:15 - 2013-02-20 14:48 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-09-08 15:27 - 2009-07-14 06:34 - 00023680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-09-08 15:27 - 2009-07-14 06:34 - 00023680 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-09-08 15:21 - 2013-02-20 14:47 - 00000000 ____D C:\Users\Dushan\AppData\Roaming\Skype

2015-09-08 15:20 - 2009-07-14 06:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-08 15:20 - 2009-07-14 06:39 - 00115015 _____ C:\Windows\setupact.log

2015-09-08 00:20 - 2013-02-21 16:15 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3528197946-984489926-4213029029-1000UA.job

2015-09-07 15:20 - 2013-02-21 16:15 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3528197946-984489926-4213029029-1000Core.job

2015-09-06 17:40 - 2015-05-15 16:17 - 00000024 _____ C:\Users\Dushan\AppData\Roaming\appdataFr25.bin

2015-09-05 17:30 - 2010-11-20 23:01 - 00785302 _____ C:\Windows\system32\PerfStringBackup.INI

2015-08-28 14:05 - 2013-02-20 14:48 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe

2015-08-28 14:05 - 2013-02-20 14:48 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

2015-08-24 12:56 - 2010-11-20 23:48 - 00050790 _____ C:\Windows\PFRO.log

2015-08-23 22:37 - 2015-07-15 15:29 - 00000000 ____D C:\Program Files\Zealous Nothing

2015-08-23 22:36 - 2015-04-21 17:17 - 00000000 ____D C:\Program Files\Cookie Killer for Facebook

2015-08-23 22:36 - 2015-03-13 17:49 - 00000000 ____D C:\Program Files\Faster Chrome Pro

2015-08-23 22:36 - 2015-02-13 20:19 - 00000000 ____D C:\Program Files\ezAutoCorrect for GMail

2015-08-23 22:36 - 2015-01-05 00:40 - 00000000 ____D C:\Program Files\KeyRocket for Gmail

2015-08-23 22:32 - 2015-06-11 14:16 - 00000000 ____D C:\Program Files\Miniature Judge

2015-08-23 22:31 - 2015-03-04 00:15 - 00000000 ____D C:\Users\Dushan\AppData\Roaming\SkypeFall

2015-08-23 22:31 - 2015-01-18 22:31 - 00000000 ____D C:\ProgramData\SaavErExteNsiion

2015-08-23 22:31 - 2015-01-10 02:03 - 00000000 ____D C:\ProgramData\cOuinsavE

2015-08-23 22:31 - 2013-04-22 18:48 - 00000000 ____D C:\Users\Dushan\AppData\Roaming\uTorrent

2015-08-23 22:31 - 2013-02-22 23:16 - 00000000 ____D C:\ProgramData\ReviverSoft

2015-08-23 22:31 - 2013-02-22 23:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ReviverSoft

2015-08-23 22:11 - 2013-02-20 14:47 - 00000000 ___RD C:\Program Files\Skype

2015-08-23 22:06 - 2015-05-26 22:12 - 00000000 ____D C:\Program Files\Mozilla Firefox

2015-08-23 22:05 - 2013-02-20 14:47 - 00000000 ____D C:\ProgramData\Skype

2015-08-23 21:41 - 2014-09-04 16:52 - 00000000 ____D C:\AdwCleaner

2015-08-21 22:08 - 2013-02-20 14:29 - 00000000 ___HD C:\Program Files\InstallShield Installation Information

==================== Files in the root of some directories =======

2015-05-15 16:17 - 2015-09-06 17:40 - 0000024 _____ () C:\Users\Dushan\AppData\Roaming\appdataFr25.bin

2015-01-29 03:02 - 2015-05-13 16:01 - 0000020 _____ () C:\Users\Dushan\AppData\Roaming\appdataFr3.bin

2013-03-04 22:10 - 2014-12-17 00:40 - 0005632 _____ () C:\Users\Dushan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

2014-08-24 20:58 - 2014-08-24 20:58 - 0000017 _____ () C:\Users\Dushan\AppData\Local\resmon.resmoncfg

2015-08-21 22:07 - 2015-08-21 22:07 - 0000000 _____ () C:\Users\Dushan\AppData\Local\Temp.dat

Some files in TEMP:

====================

C:\Users\Dushan\AppData\Local\Temp\jre-7u71-windows-i586-iftw.exe

C:\Users\Dushan\AppData\Local\Temp\Quarantine.exe

C:\Users\Dushan\AppData\Local\Temp\setacl.exe

C:\Users\Dushan\AppData\Local\Temp\sqlite3.dll

C:\Users\Dushan\AppData\Local\Temp\sSetup-se.exe

==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed

C:\Windows\system32\winlogon.exe => File is digitally signed

C:\Windows\system32\wininit.exe => File is digitally signed

C:\Windows\system32\svchost.exe => File is digitally signed

C:\Windows\system32\services.exe => File is digitally signed

C:\Windows\system32\User32.dll => File is digitally signed

C:\Windows\system32\userinit.exe => File is digitally signed

C:\Windows\system32\rpcss.dll => File is digitally signed

C:\Windows\system32\dnsapi.dll => File is digitally signed

C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2015-09-01 15:44

==================== End of FRST.txt ============================

Second (addition)

Additional scan result of Farbar Recovery Scan Tool (x86) Version:06-09-2015 01

Ran by Dushan (2015-09-08 17:32:53)

Running from C:\Users\Dushan\Desktop

Microsoft Windows 7 Ultimate Service Pack 1 (X86) (2013-02-20 12:02:03)

Boot Mode: Normal

==========================================================

==================== Accounts: =============================

Administrator (S-1-5-21-3528197946-984489926-4213029029-500 - Administrator - Disabled)

Dushan (S-1-5-21-3528197946-984489926-4213029029-1000 - Administrator - Enabled) => C:\Users\Dushan

Guest (S-1-5-21-3528197946-984489926-4213029029-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-3528197946-984489926-4213029029-1002 - Limited - Enabled)

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AS: Windows Defender (Disabled - Out of date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

µTorrent (HKU\S-1-5-21-3528197946-984489926-4213029029-1000\...\uTorrent) (Version: 3.4.2.34537 - BitTorrent Inc.)

2007 Microsoft Office Suite Service Pack 2 (SP2) (HKLM\...\{90120000-0014-0000-0000-0000000FF1CE}_PRO_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}) (Version: - Microsoft)

2007 Microsoft Office Suite Service Pack 2 (SP2) (Version: - Microsoft) Hidden

7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )

ACDSee Pro 2.5 (HKLM\...\{2D95950E-6D76-43E7-94A5-D9DBA2FD29E4}) (Version: 2.5.363 - ACD Systems International)

Adobe Flash Player 19 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 19.0.0.162 - Adobe Systems Incorporated)

Adobe Flash Player 19 NPAPI (HKLM\...\Adobe Flash Player NPAPI) (Version: 19.0.0.162 - Adobe Systems Incorporated)

Adobe Reader XI (11.0.12) (HKLM\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.12 - Adobe Systems Incorporated)

CCleaner (HKLM\...\CCleaner) (Version: 3.21 - Piriform)

Counter Strike 1.6 FULL v44 (HKLM\...\Counter Strike 1.6 FULL v44) (Version: - )

CyberLink PowerDVD 11 (HKLM\...\InstallShield_{F232C87C-6E92-4775-8210-DFE90B7777D9}) (Version: 11.0.1620.51 - CyberLink Corp.)

DAEMON Tools Pro (HKLM\...\DAEMON Tools Pro) (Version: 5.1.0.0333 - DT Soft Ltd)

Diskeeper 2011 (HKLM\...\{9E0F1FA9-771E-4E6F-81EB-BDA8662AF971}) (Version: 15.0.951.32 - Diskeeper Corporation)

Facebook Video Calling 2.0.0.447 (HKLM\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)

ffdshow v1.2.4422 [2012-04-09] (HKLM\...\ffdshow_is1) (Version: 1.2.4422.0 - FreeCodecPack)

Google Chrome (HKLM\...\Google Chrome) (Version: 45.0.2454.85 - Google Inc.)

Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden

Google Update Helper (Version: 1.3.28.13 - Google Inc.) Hidden

Intel® Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1883 - Intel Corporation)

Java 7 Update 71 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F03217071FF}) (Version: 7.0.710 - Oracle)

Malwarebytes Anti-Malware version 2.1.8.1057 (HKLM\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)

Mario Forever v 2.16 ! (HKLM\...\Mario Forever v 2.16 !) (Version: - )

Media Search App by Ask (HKLM\...\{53475453-5031-2D4D-4544-A758B70C2201}) (Version: 12.34.1.2127 - APN, LLC)

Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)

Microsoft Office 2003 programski dodatak za preslovljavanje (HKLM\...\{51312349-0B4D-450E-AFAA-03CC28A9531F}) (Version: 1.0.0527.0 - Microsoft)

Microsoft Office Professional 2007 (HKLM\...\PRO) (Version: 12.0.6425.1000 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Mozilla Firefox 39.0 (x86 en-US) (HKLM\...\Mozilla Firefox 39.0 (x86 en-US)) (Version: 39.0 - Mozilla)

MSXML4 Parser (HKLM\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)

Opera 12.12 (HKLM\...\Opera 12.12.1707) (Version: 12.12.1707 - Opera Software ASA)

Picasa 3 (HKLM\...\Picasa 3) (Version: 3.9 - Google, Inc.)

Realtek High Definition Audio Driver (HKLM\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.5904 - Realtek Semiconductor Corp.)

Realtek WLAN Driver (HKLM\...\{0FB630AB-7BD8-40AE-B223-60397D57C3C9}) (Version: 2.00.0006 - Realtek)

Shopping App by Ask (HKLM\...\{53475453-502D-5341-5400-A758B70C2201}) (Version: 12.34.1.2200 - APN, LLC)

Skype Click to Call (HKLM\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation)

Skype™ 7.8 (HKLM\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)

Super PC Cleaner (HKLM\...\SuperPCCleaner) (Version: 2.00.00.1 - SuperPCCleaner)

The KMPlayer (remove only) (HKLM\...\The KMPlayer) (Version: 3.5.0.77 - KMP Media co., Ltd)

Winamp (HKLM\...\Winamp) (Version: 5.63 - Nullsoft, Inc)

WinRAR 4.10 beta 1 (32-bit) (HKLM\...\WinRAR archiver) (Version: 4.10.1 - win.rar GmbH)

YTD Video Downloader 4.9.1 (HKLM\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: 4.9.1 - GreenTree Applications SRL) <==== ATTENTION

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3528197946-984489926-4213029029-1000_Classes\CLSID\{2053984E-D49A-4007-A67F-E79B249960FA}\InprocServer32 -> C:\Program Files\Microsoft\Microsoft Office 2003 programski dodatak za preslovljavanje\Translit.dll (Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3528197946-984489926-4213029029-1000_Classes\CLSID\{8B9F5BF4-0407-4BB2-9FED-4C0372DABD00}\localserver32 -> C:\Users\Dushan\AppData\Local\Facebook\Video\Skype\FacebookVideoCallingProxy.exe No File

CustomCLSID: HKU\S-1-5-21-3528197946-984489926-4213029029-1000_Classes\CLSID\{CBE9C57E-FFA9-4123-8354-AD360D6DD3CC}\InprocServer32 -> C:\Users\Dushan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll No File

==================== Restore Points =========================

ATTENTION: System Restore is disabled

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {5000F060-457D-4B4F-B3AB-C2600C1E82B3} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-28] (Adobe Systems Incorporated)

Task: {73392102-DE31-4B62-AA5A-2770520CBF5C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-23] (Google Inc.)

Task: {75ECF44B-67F3-47F5-B031-5F620E44EFE8} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-08-23] (Google Inc.)

Task: {76E84390-7D70-4D45-AF6E-ECFF33265FEC} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2012-07-24] (Piriform Ltd)

Task: {7C8AFDD4-252F-4A25-9EBF-D4652C1C58BB} - System32\Tasks\Super PC Cleaner Monitor => C:\Program Files\SuperPCCleaner\PerformanceMonitor.exe

Task: {8D695888-4FA6-4E8C-B996-C643558C4675} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)

Task: {A8A53E40-BBF7-42BE-8CEF-81817DD6A42B} - System32\Tasks\{5F334E3F-6421-49A2-B3C8-0CE089F935CD} => Chrome.exe http://ui.skype.com/...e=tsProgressBar

Task: {BF19F8F7-2F7C-4043-907F-E651CB649DE8} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3528197946-984489926-4213029029-1000Core => C:\Users\Dushan\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: {C4A7E51D-B453-41FD-932E-0A5ACBBB94EE} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-3528197946-984489926-4213029029-1000UA => C:\Users\Dushan\AppData\Local\Facebook\Update\FacebookUpdate.exe

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3528197946-984489926-4213029029-1000Core.job => C:\Users\Dushan\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-3528197946-984489926-4213029029-1000UA.job => C:\Users\Dushan\AppData\Local\Facebook\Update\FacebookUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2014-03-29 13:07 - 2009-08-10 09:07 - 00026624 _____ () C:\Windows\System32\ssp7ml3.dll

2013-02-20 14:34 - 2011-10-14 03:07 - 00166912 _____ () C:\Program Files\WinRAR\rarext.dll

2013-02-20 14:46 - 2011-04-20 05:56 - 00083240 _____ () C:\Program Files\CyberLink\PowerDVD11\Kernel\DMP\CLHNServiceForPowerDVD.exe

2015-09-03 13:41 - 2015-08-28 02:17 - 01501512 _____ () C:\Program Files\Google\Chrome\Application\45.0.2454.85\libglesv2.dll

2015-09-03 13:41 - 2015-08-28 02:17 - 00081224 _____ () C:\Program Files\Google\Chrome\Application\45.0.2454.85\libegl.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00417280 _____ () C:\Program Files\Winamp\nsutil.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00078848 _____ () C:\Program Files\Winamp\nde.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00023552 _____ () C:\Program Files\Winamp\System\albumart.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00174080 _____ () C:\Program Files\Winamp\System\auth.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00019456 _____ () C:\Program Files\Winamp\System\bmp.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00064512 _____ () C:\Program Files\Winamp\zlib.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00044544 _____ () C:\Program Files\Winamp\System\devices.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00016896 _____ () C:\Program Files\Winamp\System\dlmgr.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00014336 _____ () C:\Program Files\Winamp\System\filereader.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00019456 _____ () C:\Program Files\Winamp\System\gif.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00016384 _____ () C:\Program Files\Winamp\System\gracenote.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00623616 _____ () C:\Program Files\Winamp\System\jnetlib.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00154624 _____ () C:\Program Files\Winamp\System\jpeg.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00084480 _____ () C:\Program Files\Winamp\System\playlist.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00087552 _____ () C:\Program Files\Winamp\System\png.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00013824 _____ () C:\Program Files\Winamp\System\primo.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00021504 _____ () C:\Program Files\Winamp\System\tagz.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00035328 _____ () C:\Program Files\Winamp\System\timer.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00091136 _____ () C:\Program Files\Winamp\System\xml.w5s

2012-06-28 17:42 - 2013-05-17 10:29 - 00068608 _____ () C:\Program Files\Winamp\Plugins\in_avi.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00102400 _____ () C:\Program Files\Winamp\Plugins\in_cdda.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00072192 _____ () C:\Program Files\Winamp\Plugins\in_dshow.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00061440 _____ () C:\Program Files\Winamp\Plugins\in_flac.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00043008 _____ () C:\Program Files\Winamp\Plugins\in_flv.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00007168 _____ () C:\Program Files\Winamp\Plugins\in_linein.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00109568 _____ () C:\Program Files\Winamp\Plugins\in_midi.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00049152 _____ () C:\Program Files\Winamp\Plugins\in_mkv.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00164864 _____ () C:\Program Files\Winamp\Plugins\in_mod.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00290816 _____ () C:\Program Files\Winamp\Plugins\in_mp3.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00052736 _____ () C:\Program Files\Winamp\Plugins\in_mp4.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00023552 _____ () C:\Program Files\Winamp\Plugins\in_swf.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00253440 _____ () C:\Program Files\Winamp\Plugins\in_vorbis.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00016896 _____ () C:\Program Files\Winamp\Plugins\in_wave.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00253440 _____ () C:\Program Files\Winamp\libsndfile.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00313344 _____ () C:\Program Files\Winamp\Plugins\in_wm.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00022528 _____ () C:\Program Files\Winamp\Plugins\out_disk.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00052224 _____ () C:\Program Files\Winamp\Plugins\out_ds.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00018432 _____ () C:\Program Files\Winamp\Plugins\out_wave.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 01737728 _____ () C:\Program Files\Winamp\Plugins\gen_ff.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00083968 _____ () C:\Program Files\Winamp\tataki.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00340992 _____ () C:\Program Files\Winamp\Plugins\freeform\wacs\freetype\freetype.wac

2012-06-28 17:42 - 2013-05-17 10:29 - 00028160 _____ () C:\Program Files\Winamp\Plugins\gen_hotkeys.dll

2011-11-11 00:10 - 2013-05-17 10:29 - 00185344 _____ () C:\Program Files\Winamp\Plugins\gen_jumpex.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00318976 _____ () C:\Program Files\Winamp\Plugins\gen_ml.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00294912 _____ () C:\Program Files\Winamp\Plugins\ml_local.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00084480 _____ () C:\Program Files\Winamp\Plugins\ml_playlists.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00249856 _____ () C:\Program Files\Winamp\Plugins\ml_devices.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00201728 _____ () C:\Program Files\Winamp\Plugins\ml_disc.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00240640 _____ () C:\Program Files\Winamp\Plugins\ml_pmp.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00060928 _____ () C:\Program Files\Winamp\Plugins\pmp_android.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00170496 _____ () C:\Program Files\Winamp\Plugins\pmp_ipod.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00020480 _____ () C:\Program Files\Winamp\Plugins\pmp_njb.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00118272 _____ () C:\Program Files\Winamp\Plugins\pmp_p4s.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00053760 _____ () C:\Program Files\Winamp\Plugins\pmp_usb.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00113664 _____ () C:\Program Files\Winamp\Plugins\pmp_wifi.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00028672 _____ () C:\Program Files\Winamp\Plugins\ml_bookmarks.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00052224 _____ () C:\Program Files\Winamp\Plugins\ml_history.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00028672 _____ () C:\Program Files\Winamp\Plugins\ml_autotag.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00057344 _____ () C:\Program Files\Winamp\Plugins\ml_impex.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00083456 _____ () C:\Program Files\Winamp\Plugins\ml_plg.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00033792 _____ () C:\Program Files\Winamp\Plugins\ml_rg.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00032256 _____ () C:\Program Files\Winamp\Plugins\ml_transcode.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00057344 _____ () C:\Program Files\Winamp\Plugins\gen_orgler.dll

2012-06-28 17:42 - 2013-05-17 10:29 - 00025600 _____ () C:\Program Files\Winamp\Plugins\gen_tray.dll

2015-09-03 13:41 - 2015-08-28 02:17 - 16393032 _____ () C:\Program Files\Google\Chrome\Application\45.0.2454.85\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)

==================== Safe Mode (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The "AlternateShell" value will be restored.)

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)

==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)

IE restricted site: HKU\.DEFAULT\...\007guard.com -> install.007guard.com

IE restricted site: HKU\.DEFAULT\...\008i.com -> 008i.com

IE restricted site: HKU\.DEFAULT\...\008k.com -> www.008k.com

IE restricted site: HKU\.DEFAULT\...\00hq.com -> www.00hq.com

IE restricted site: HKU\.DEFAULT\...\010402.com -> 010402.com

IE restricted site: HKU\.DEFAULT\...\032439.com -> 80gw6ry3i3x3qbrkwhxhw.032439.com

IE restricted site: HKU\.DEFAULT\...\0scan.com -> www.0scan.com

IE restricted site: HKU\.DEFAULT\...\1-2005-search.com -> www.1-2005-search.com

IE restricted site: HKU\.DEFAULT\...\1-domains-registrations.com -> www.1-domains-registrations.com

IE restricted site: HKU\.DEFAULT\...\1000gratisproben.com -> www.1000gratisproben.com

IE restricted site: HKU\.DEFAULT\...\1001namen.com -> www.1001namen.com

IE restricted site: HKU\.DEFAULT\...\100888290cs.com -> mir.100888290cs.com

IE restricted site: HKU\.DEFAULT\...\100sexlinks.com -> www.100sexlinks.com

IE restricted site: HKU\.DEFAULT\...\10sek.com -> www.10sek.com

IE restricted site: HKU\.DEFAULT\...\12-26.net -> user1.12-26.net

IE restricted site: HKU\.DEFAULT\...\12-27.net -> user1.12-27.net

IE restricted site: HKU\.DEFAULT\...\123fporn.info -> www.123fporn.info

IE restricted site: HKU\.DEFAULT\...\123haustiereundmehr.com -> www.123haustiereundmehr.com

IE restricted site: HKU\.DEFAULT\...\123moviedownload.com -> www.123moviedownload.com

IE restricted site: HKU\.DEFAULT\...\123simsen.com -> www.123simsen.com

There are 7865 more restricted sites.

==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3528197946-984489926-4213029029-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Dushan\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 212.200.191.166 - 212.200.190.166

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall is disabled.

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [{05D09310-B978-442D-BCFD-1288D540FD73}] => (Allow) C:\Windows\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe

FirewallRules: [{871223D6-B5FA-4AC7-B5D4-590533DE941C}] => (Allow) C:\Program Files\CyberLink\PowerDVD11\PowerDVD11.exe

FirewallRules: [{5340841C-A8DB-4C58-AD3E-E1F0E8F4A894}] => (Allow) C:\Program Files\CyberLink\PowerDVD11\PDVD11Serv.exe

FirewallRules: [{A180799B-B2EC-484B-B3DA-2AEAFE06D67B}] => (Allow) C:\Program Files\CyberLink\PowerDVD11\Common\MediaServer\CLMSServer.exe

FirewallRules: [{5B0E77D7-CCB2-483E-AD56-C9367522496E}] => (Allow) C:\Program Files\CyberLink\PowerDVD11\Movie\MovieModule.exe

FirewallRules: [{4530EB6D-8896-4446-9D5A-1F1420885F30}] => (Allow) C:\Program Files\CyberLink\PowerDVD11\Movie\PowerDVD Cinema\PowerDVDCinema11.exe

FirewallRules: [{DEA86256-44FA-4934-8544-04112ED2FCCB}] => (Allow) C:\Program Files\Opera\opera.exe

FirewallRules: [{B9952514-FB41-432D-8DB8-A6FA5CEFF4A5}] => (Allow) C:\Program Files\Opera\opera.exe

FirewallRules: [{BF2A1421-893F-4582-A028-74725E71B5B1}] => (Allow) C:\Users\Dushan\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{74BDCDE9-6396-4E67-A842-9F1B349571B5}] => (Allow) C:\Users\Dushan\AppData\Roaming\uTorrent\uTorrent.exe

FirewallRules: [{29BDC71A-1518-4C2B-825C-6FC178CD9700}] => (Allow) C:\Users\Dushan\AppData\Local\Facebook\Video\Skype\FacebookVideoCalling.exe

FirewallRules: [{FBC2A7D6-AC1E-4650-8C28-4D1792F922BE}] => (Allow) D:\Program Files\KONAMI\Pro Evolution Soccer 2013\pes2013.exe

FirewallRules: [{7FA566D3-0944-4F3C-AA32-AC9D92F59CD5}] => (Allow) D:\Program Files\KONAMI\Pro Evolution Soccer 2013\pes2013.exe

FirewallRules: [{85AC48F0-46F2-4B2C-98B0-0689929E8DDA}] => (Allow) D:\Program Files\KONAMI\Pro Evolution Soccer 2013\pes2013.exe

FirewallRules: [{9FD4A46F-1564-4484-8670-2C07C736C42F}] => (Allow) D:\Program Files\KONAMI\Pro Evolution Soccer 2013\pes2013.exe

FirewallRules: [{AC8B2BD2-ADB1-48B6-9D77-F34BF104FD1B}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{1D2539AD-FFC3-4DFC-9D63-5D4B7CDA7457}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe

FirewallRules: [{C662E4B4-1D8F-4BAD-A6C8-3FC68AD906A6}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe

FirewallRules: [{11D96ECD-5435-4C8B-ADB0-A498C0F3118A}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Faulty Device Manager Devices =============

==================== Event log errors: =========================

Application errors:

==================

Error: (09/08/2015 03:22:05 PM) (Source: WinMgmt) (EventID: 10) (User: )