Rkill 2.8.3 by Lawrence Abrams (Grinler) http://www.bleepingcomputer.com/ Copyright 2008-2016 BleepingComputer.com More Information about Rkill can be found at this link: http://www.bleepingcomputer.com/forums/topic308364.html Program started at: 02/15/2016 01:18:04 AM in x86 mode. Windows Version: الحقوق للمهندس:حسام الجاموس© Service Pack 1 Checking for Windows services to stop: * No malware services found to stop. Checking for processes to terminate: * C:\ProgramData\Airtostrong\Airtostrong.exe (PID: 1564) [AU-HEUR] * C:\ProgramData\caMyciloP\caMyciloP.exe (PID: 1832) [AU-HEUR] * C:\ProgramData\dlohn\dlohn.exe (PID: 2044) [AU-HEUR] * C:\Users\admin\AppData\Local\Ranelectronics.exe (PID: 2784) [UP-HEUR] * C:\Users\admin\AppData\Local\Newfinhigh.exe (PID: 2876) [UP-HEUR] * C:\ProgramData\dlohn\dlohn.exe (PID: 1956) [AU-HEUR] 6 proccesses terminated! Checking Registry for malware related settings: * No issues found in the Registry. Resetting .EXE, .COM, & .BAT associations in the Windows Registry. Performing miscellaneous checks: * No issues found. Checking Windows Service Integrity: * No issues found. Searching for Missing Digital Signatures: * No issues found. Checking HOSTS File: * HOSTS file entries found: 127.0.0.1 localhost 13.69.186.195 1and1.com 13.69.186.195 22find.com 13.69.186.195 24img.com 13.69.186.195 a4.bing.com 13.69.186.195 abcsearch.ru 13.69.186.195 airzip.inspsearch.com 13.69.186.195 allsearch.ca 13.69.186.195 allsearch.space 13.69.186.195 alternativesearch.ru 13.69.186.195 amaizingsearches.info 13.69.186.195 amazon.smart-search.com 13.69.186.195 appiance.com 13.69.186.195 asiasearch.co 13.69.186.195 ask.com 13.69.186.195 atajitos.com 13.69.186.195 autosearch.centurylink.com 13.69.186.195 autosearch.zoominternet.net 13.69.186.195 avg.com 13.69.186.195 avg.nation.com 20 out of 776 HOSTS entries shown. Please review HOSTS file for further entries. Program finished at: 02/15/2016 01:20:34 AM Execution time: 0 hours(s), 2 minute(s), and 30 seconds(s)