Chrome se gasi

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Pozdrav narode,

Sinoc sam htio da pogledam film i instalirao sam neki program Hide me setup

Pustio sam film, chrome mi je bio upaljen i zaspao sam.

Jutros kad sam ustao zatvorim hide me i vidim da mi je chrome ugasen. Pokrenem ga ponovo i kaze mi da se nije ispravno zatvorio. I potom se ugasi. I tako u krug. Cim ga upalim ugasi se. Instalirao sam update i dalje isto

U nastavku je log
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 01-01-2017
Ran by korisnik (administrator) on HOME (02-01-2017 17:01:14)
Running from C:\Users\korisnik\Desktop
Loaded Profiles: korisnik (Available Profiles: korisnik)
Platform: Windows 10 Pro Version 1511 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Viber Media S.à r.l.) C:\Users\korisnik\AppData\Local\Viber\Viber.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.16112.10221.0_x64__8wekyb3d8bbwe\Video.UI.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe

==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [1804432 2015-11-10] (NVIDIA Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2015-09-24] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2015-09-24] (Adobe Systems Inc.)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\Run: [GoogleChromeAutoLaunch_DE12B0A0DC4C510A6B6E84213107D218] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe [1104728 2016-12-08] (Google Inc.)
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\Run: [Viber] => C:\Users\korisnik\AppData\Local\Viber\Viber.exe [41351248 2016-12-07] (Viber Media S.à r.l.)
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\RunOnce: [Uninstall C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\RunOnce: [Uninstall C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\amd64"
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\RunOnce: [Uninstall C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6301.0127\amd64"
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\RunOnce: [Uninstall C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6302.0225\amd64"
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\RunOnce: [Uninstall C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6386.0412\amd64"
HKU\S-1-5-21-408945527-1895528593-2215237323-1001\...\RunOnce: [Uninstall C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\korisnik\AppData\Local\Microsoft\OneDrive\17.3.6390.0509\amd64"
GroupPolicy: Restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\..\Interfaces\{3f6964a1-fcab-4a85-808e-40318db07811}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
BHO: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\OCHelper.dll [2016-12-04] (Microsoft Corporation)
BHO: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX64\Microsoft Office\Office16\GROOVEEX.DLL [2016-12-04] (Microsoft Corporation)
BHO-x32: Lync Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files (x86)\Microsoft Office\root\Office16\OCHelper.dll [2016-12-04] (Microsoft Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated)
BHO-x32: Microsoft OneDrive for Business Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files (x86)\Microsoft Office\root\Office16\GROOVEEX.DLL [2016-12-04] (Microsoft Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2015-09-24] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-408945527-1895528593-2215237323-1001 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-04] (Microsoft Corporation)
Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-04] (Microsoft Corporation)
Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-04] (Microsoft Corporation)
Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files (x86)\Microsoft Office\root\Office16\MSOSB.DLL [2016-12-04] (Microsoft Corporation)

FireFox:
========
FF DefaultProfile: gcpakdxl.default
FF ProfilePath: C:\Users\korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\gcpakdxl.default [2017-01-02]
FF Extension: (ScrapBook Plus) - C:\Users\korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\gcpakdxl.default\Extensions\scrapbookplus@addons.mozilla.org.xpi [2016-10-23]
FF Extension: (Tamper Data) - C:\Users\korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\gcpakdxl.default\Extensions\{9c51bd27-6ed8-4000-a2bf-36cb95c0c947}.xpi [2016-10-23]
FF Extension: (Pearl Crescent Page Saver) - C:\Users\korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\gcpakdxl.default\Extensions\{c151d79e-e61b-4a90-a887-5a46d38fba99}.xpi [2016-09-04]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2016-12-03] [not signed]
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-30] (VideoLAN)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2016-12-04] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [2016-12-04] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Profile 1
CHR HomePage: Profile 1 -> hxxps://www.google.ba/
CHR StartupUrls: Profile 1 -> "hxxp://www.google.rs/","hxxp://start.mysearchdial.com/?f=1&a=md_14_11_ch&cd=2XzuyEtN2Y1L1QzutDtD0EtDyB0DzyyByCzz0D0FtB0ByCtBtN0D0Tzu0SzztDyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtA0CyEyCtCyDtAtGtC0FyE0AtG0A0FtCyDtGyEzytB0DtGyByE0CzztD0AyCtC0AtD0AyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0D0DyCzyyDzyyEtGtA0D0FtAtGyD0AyEtCtGyE0BtDyBtGtB0B0E0FyC0DtCtB0AtCtDyD2Q&cr=569384714&ir="
CHR DefaultSearchURL: Profile 1 -> hxxps://creativemarket.com/coloformia/399869?u=bestplugins
CHR Profile: C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default [2017-01-02]
CHR Extension: (Google презентације) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-01-07]
CHR Extension: (Google документи) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-01-07]
CHR Extension: (Google диск) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-01-07]
CHR Extension: (YouTube) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-01-07]
CHR Extension: (Google Search) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2016-01-07]
CHR Extension: (Google табеле) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-01-07]
CHR Extension: (Google документи офлајн) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-26]
CHR Extension: (Плаћања у Chrome веб-продавници) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-26]
CHR Extension: (Gmail) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-01-07]
CHR Extension: (Chrome Media Router) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-26]
CHR Profile: C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Guest Profile [2017-01-02]
CHR Profile: C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1 [2017-01-02]
CHR Extension: (Google презентације) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-12-30]
CHR Extension: (Allow Copy - Click to activate on this tab) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\abidndjnodakeaicodfpgcnlkpppapah [2016-08-06]
CHR Extension: (Google документи) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2015-12-30]
CHR Extension: (Google диск) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-12-30]
CHR Extension: (Note Board Web) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apgackkfllmckgkbdfmbfodpinmnnpab [2015-12-30]
CHR Extension: (YouTube) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-12-30]
CHR Extension: (X-notifier (for Gmail™,Hotmail,Yahoo,AOL...)) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cdfjbkbddpfnoplfhceolpopfoepleco [2016-11-22]
CHR Extension: (Google Search) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-12-30]
CHR Extension: (Session Buddy) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\edacconmaakjimmfgnblocblbcdcpbko [2016-11-22]
CHR Extension: (Google табеле) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-12-30]
CHR Extension: (Google документи офлајн) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-18]
CHR Extension: (AdBlock) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2016-12-29]
CHR Extension: (Wappalyzer) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2016-09-05]
CHR Extension: (PDF Mergy) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\hgecghmkcdefnknohcimkoemhaofpoha [2015-12-30]
CHR Extension: (Bitly
Unleash the power of the link) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\iabeihobmhlgpkcgjiloemdbofjbdcic [2016-09-13]
CHR Extension: (Auto Replay for YouTube™) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kanbnempkjnhadplbfgdaagijdbdbjeb [2016-12-16]
CHR Extension: (Momentum) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\laookkfknpbbblfpciffpaejjkokdgca [2017-01-01]
CHR Extension: (Google провера поште) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-12-30]
CHR Extension: (Плаћања у Chrome веб-продавници) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-03]
CHR Extension: (Buffer) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\noojglkidnpfjbincgijbaiedldjfbhh [2016-12-26]
CHR Extension: (X-notifier Neo) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pheccebhjjlenlidbnddkjgpgfhokmio [2016-09-08]
CHR Extension: (Gmail) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-12-30]
CHR Extension: (Chrome Media Router) - C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-16]
CHR Profile: C:\Users\korisnik\AppData\Local\Google\Chrome\User Data\System Profile [2017-01-02]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [3698888 2016-12-04] (Microsoft Corporation)
R2 igfxCUIService2.0.0.0; C:\WINDOWS\system32\igfxCUIService.exe [373160 2015-12-19] (Intel Corporation)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2013-09-13] (arvato digital services llc)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2016-08-26] (Popcorn Time) [File not signed]
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2016-07-01] (Microsoft Corporation)

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus.sys [129152 2016-04-24] (Samsung Electronics Co., Ltd.)
R3 MEIx64; C:\WINDOWS\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [221824 2016-04-24] (Samsung Electronics Co., Ltd.)
R3 tapoas; C:\WINDOWS\system32\DRIVERS\tapoas.sys [30720 2012-07-15] (The OpenVPN Project)
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-02 17:01 - 2017-01-02 17:01 - 00019557 _____ C:\Users\korisnik\Desktop\FRST.txt
2017-01-02 17:00 - 2017-01-02 17:01 - 00000000 ____D C:\FRST
2017-01-02 17:00 - 2017-01-02 17:00 - 02418176 _____ (Farbar) C:\Users\korisnik\Desktop\FRST64.exe
2017-01-02 16:56 - 2017-01-02 16:56 - 00000000 ____D C:\Users\korisnik\Desktop\zip
2017-01-02 16:55 - 2017-01-02 16:56 - 01760256 _____ (Farbar) C:\Users\korisnik\Downloads\FRST.exe
2017-01-02 16:46 - 2017-01-02 16:46 - 01065376 _____ (Google Inc.) C:\Users\korisnik\Downloads\ChromeSetup(1).exe
2017-01-02 07:45 - 2017-01-02 07:45 - 01065376 _____ (Google Inc.) C:\Users\korisnik\Downloads\ChromeSetup.exe
2017-01-02 00:24 - 2017-01-02 00:24 - 05880064 _____ (eVenture Limited ) C:\Users\korisnik\Desktop\Hide.me-Setup-1.2.8.exe
2017-01-01 16:55 - 2017-01-01 16:55 - 67966364 _____ C:\Users\korisnik\Desktop\book21.psd
2017-01-01 16:16 - 2017-01-01 16:31 - 17721029 _____ C:\Users\korisnik\Desktop\coverzeljo.ai
2016-12-31 18:50 - 2016-12-31 18:50 - 00248992 _____ C:\Users\korisnik\Desktop\lazic3.png
2016-12-31 18:42 - 2016-12-31 18:42 - 00234843 _____ C:\Users\korisnik\Desktop\lazic2.png
2016-12-31 18:33 - 2016-12-31 19:14 - 01382242 _____ C:\Users\korisnik\Desktop\lazic.psd
2016-12-31 18:33 - 2016-12-31 18:33 - 00218328 _____ C:\Users\korisnik\Desktop\lazic.png
2016-12-31 18:15 - 2016-12-31 18:15 - 00528677 _____ C:\Users\korisnik\Desktop\testslika.png
2016-12-31 18:13 - 2016-12-31 18:13 - 01121384 _____ C:\Users\korisnik\Desktop\logop.ai
2016-12-31 14:33 - 2017-01-01 18:56 - 00000000 __SHD C:\Config.Msi
2016-12-31 14:33 - 2016-12-31 14:33 - 00000000 ____D C:\WINDOWS\System32\Tasks\Apple
2016-12-31 14:33 - 2016-12-31 14:33 - 00000000 ____D C:\Program Files (x86)\Apple Software Update
2016-12-30 23:24 - 2016-12-30 23:24 - 00214552 _____ C:\Users\korisnik\Desktop\sda.jpg
2016-12-30 19:15 - 2016-12-30 19:16 - 10782417 _____ C:\Users\korisnik\Desktop\49.jpg
2016-12-29 23:26 - 2016-12-29 23:26 - 00200411 _____ C:\Users\korisnik\Desktop\skola.png
2016-12-29 18:25 - 2016-12-29 18:25 - 00000025 _____ C:\Users\korisnik\Desktop\coming.html
2016-12-29 18:24 - 2016-12-29 18:24 - 00000000 _____ C:\Users\korisnik\Desktop\index.txt
2016-12-29 17:14 - 2016-12-29 17:14 - 08709277 _____ C:\Users\korisnik\Desktop\wordpress-4.7.zip
2016-12-29 00:57 - 2016-12-29 00:57 - 02955898 _____ C:\Users\korisnik\Desktop\zoran knjiga.pdf
2016-12-29 00:53 - 2016-12-29 00:56 - 33829792 _____ C:\Users\korisnik\Desktop\zoran knjiga.ai
2016-12-29 00:32 - 2016-12-29 00:32 - 00669595 _____ C:\Users\korisnik\Desktop\zoran2.png
2016-12-28 17:59 - 2016-12-28 17:59 - 00658405 _____ C:\Users\korisnik\Desktop\zoran.png
2016-12-28 17:43 - 2016-12-28 17:43 - 05905270 _____ C:\Users\korisnik\Desktop\books-683897_1920.psd
2016-12-28 17:42 - 2016-12-28 17:42 - 00418845 _____ C:\Users\korisnik\Desktop\books-683897_1920.jpg
2016-12-28 17:39 - 2016-12-28 17:39 - 05012765 _____ C:\Users\korisnik\Desktop\books-441866_1920.psd
2016-12-28 17:19 - 2016-12-28 17:40 - 38929393 _____ C:\Users\korisnik\Desktop\pozadina2.psd
2016-12-28 00:12 - 2016-12-28 01:00 - 23888116 _____ C:\Users\korisnik\Desktop\pozadina.psd
2016-12-27 22:43 - 2016-12-27 22:43 - 00029090 _____ C:\Users\korisnik\Desktop\received_1308319272524687.webp
2016-12-27 21:59 - 2016-12-29 00:51 - 35302193 _____ C:\Users\korisnik\Desktop\zoran.ai
2016-12-27 17:00 - 2016-12-27 17:00 - 00680684 _____ C:\Users\korisnik\Desktop\public-chat2.png
2016-12-27 01:50 - 2016-12-27 17:00 - 24634844 _____ C:\Users\korisnik\Desktop\public chat.psd
2016-12-27 01:26 - 2016-12-27 01:26 - 01056312 _____ C:\Users\korisnik\Desktop\Viber_logo&Viber_desktop_icon_Updated.ai
2016-12-27 00:50 - 2016-12-27 00:51 - 30667679 _____ C:\Users\korisnik\Desktop\Public chats_white_nexus.psd
2016-12-27 00:43 - 2016-12-27 00:43 - 28895901 _____ C:\Users\korisnik\Desktop\public_chats.psd
2016-12-26 23:58 - 2016-12-26 23:59 - 59760906 _____ C:\Users\korisnik\Desktop\Full Media Kit.pdf
2016-12-26 21:59 - 2017-01-01 21:50 - 41699614 _____ C:\Users\korisnik\Desktop\zeljo.psd
2016-12-22 07:52 - 2016-12-22 07:52 - 01339929 _____ C:\Users\korisnik\Desktop\slika-01.jpg
2016-12-22 02:30 - 2016-12-22 02:34 - 13249758 _____ C:\Users\korisnik\Desktop\cestitka.ai
2016-12-20 20:24 - 2016-12-20 20:24 - 00000000 ____D C:\Users\korisnik\Desktop\fwdveceatletikebrcko
2016-12-18 20:51 - 2016-12-18 20:51 - 00048468 _____ C:\Users\korisnik\Desktop\ufonts.com_kandal-black.ttf
2016-12-18 14:32 - 2017-01-02 16:39 - 00000000 ____D C:\Users\korisnik\Documents\ViberDownloads
2016-12-18 14:32 - 2017-01-02 16:23 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\ViberPC
2016-12-18 14:32 - 2016-12-18 14:32 - 00001066 _____ C:\Users\korisnik\AppData\Roaming\Microsoft\Windows\Start Menu\Viber.lnk
2016-12-18 14:32 - 2016-12-18 14:32 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Viber
2016-12-18 14:32 - 2016-12-18 14:32 - 00000000 ____D C:\Users\korisnik\AppData\Local\Viber
2016-12-18 14:32 - 2016-12-18 14:32 - 00000000 ____D C:\Users\korisnik\AppData\Local\Package Cache
2016-12-16 23:58 - 2016-12-16 23:58 - 00003274 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2016-12-13 16:30 - 2016-12-13 16:30 - 00105327 _____ C:\Users\korisnik\Desktop\2016-12-13-Preliminarna_lista-studenata_generacije-Lat.pdf
2016-12-13 00:49 - 2016-12-13 00:49 - 00018179 _____ C:\Users\korisnik\AppData\LocalLow\wbkA800.tmp
2016-12-13 00:12 - 2016-12-13 00:12 - 06880664 _____ (Tim Kosse) C:\Users\korisnik\Downloads\FileZilla_3.23.0.2_win64-setup.exe
2016-12-10 00:08 - 2016-12-27 01:21 - 00000000 ____D C:\Users\korisnik\Desktop\poklon privremeno
2016-12-09 20:32 - 2016-12-12 01:14 - 07201056 _____ C:\Users\korisnik\Desktop\pokloni.ai
2016-12-09 01:22 - 2016-12-09 01:22 - 75741644 _____ C:\Users\korisnik\Desktop\Stefan Simic pozadina sa donjim tekstom.ai
2016-12-08 18:24 - 2016-12-08 18:33 - 00000000 ____D C:\Users\korisnik\Desktop\biznis plan
2016-12-08 00:28 - 2016-12-08 00:28 - 03709390 _____ C:\Users\korisnik\Downloads\merry_christmas.zip
2016-12-03 19:21 - 2016-12-03 19:21 - 00002103 _____ C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2017-01-02 16:57 - 2016-05-15 11:51 - 00000000 ____D C:\Users\korisnik\Desktop\dsk
2017-01-02 16:57 - 2016-01-29 00:27 - 04032000 ___SH C:\Users\korisnik\Desktop\Thumbs.db
2017-01-02 16:46 - 2015-12-25 01:04 - 00002344 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2017-01-02 16:46 - 2015-12-25 01:04 - 00002332 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-01-02 16:37 - 2016-11-29 20:07 - 00000000 ____D C:\Users\korisnik\AppData\LocalLow\Mozilla
2017-01-02 16:34 - 2016-11-26 00:27 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-01-02 16:34 - 2015-12-25 01:05 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-01-02 16:33 - 2016-03-20 12:10 - 00000000 ____D C:\ProgramData\KMSAutoS
2017-01-02 16:31 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-01-02 16:29 - 2016-02-11 23:02 - 00003808 _____ C:\WINDOWS\System32\Tasks\AutoKMS
2017-01-02 16:25 - 2016-01-31 22:47 - 00004150 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{EBDBF941-DB78-4DAB-8D94-DAD0F19CD173}
2017-01-02 16:22 - 2015-12-25 01:14 - 00000180 _____ C:\WINDOWS\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2017-01-02 16:22 - 2015-12-25 01:12 - 00000000 __SHD C:\Users\korisnik\IntelGraphicsProfiles
2017-01-02 07:50 - 2015-12-25 09:49 - 00834360 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-01-02 07:50 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2017-01-02 07:44 - 2015-12-25 09:41 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-01-02 07:44 - 2015-12-25 01:59 - 00000000 ____D C:\ProgramData\NVIDIA
2017-01-02 07:43 - 2016-07-16 00:28 - 00000000 ____D C:\WINDOWS\Minidump
2017-01-02 07:43 - 2016-05-15 11:53 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\TeamViewer
2017-01-02 07:43 - 2016-01-04 22:32 - 00000000 ____D C:\Users\korisnik\AppData\Local\CrashDumps
2017-01-02 07:43 - 2015-12-26 20:45 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\FileZilla
2017-01-02 07:43 - 2015-10-30 07:28 - 01048576 ___SH C:\WINDOWS\system32\config\BBI
2017-01-02 07:35 - 2015-12-25 09:40 - 00000000 ____D C:\Users\korisnik
2017-01-01 21:44 - 2016-01-31 22:06 - 00001456 _____ C:\Users\korisnik\AppData\Local\Adobe Save for Web 13.0 Prefs
2017-01-01 18:56 - 2015-12-25 09:39 - 05591464 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-01 14:49 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2016-12-31 16:52 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Fonts
2016-12-31 14:33 - 2016-04-29 18:31 - 00002535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Apple Software Update.lnk
2016-12-31 14:33 - 2015-10-30 08:24 - 00000000 __SHD C:\WINDOWS\Installer
2016-12-30 18:04 - 2015-12-25 01:00 - 00000000 ____D C:\Users\korisnik\AppData\LocalLow
2016-12-30 07:55 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2016-12-30 07:55 - 2015-10-30 07:28 - 00000000 ____D C:\Program Files (x86)\Common Files
2016-12-30 07:54 - 2016-03-20 11:27 - 00000000 ____D C:\Program Files (x86)\Microsoft Office
2016-12-29 16:43 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\config\RegBack
2016-12-26 01:37 - 2015-12-25 01:00 - 00000000 ____D C:\Users\korisnik\AppData\Local\Packages
2016-12-22 20:04 - 2015-12-25 01:08 - 00003948 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1451002090
2016-12-22 20:04 - 2015-12-25 01:08 - 00001120 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2016-12-22 20:04 - 2015-12-25 01:08 - 00000000 ____D C:\Program Files (x86)\Opera
2016-12-18 14:32 - 2015-12-25 09:40 - 00000000 ___RD C:\Users\korisnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs
2016-12-18 14:32 - 2015-12-25 01:00 - 00000000 ___RD C:\Users\korisnik\Documents
2016-12-16 23:58 - 2015-12-25 09:45 - 00002406 _____ C:\Users\korisnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2016-12-16 23:58 - 2015-12-25 09:45 - 00000000 ___RD C:\Users\korisnik\OneDrive
2016-12-16 21:37 - 2015-12-25 01:03 - 00003416 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-12-16 21:37 - 2015-12-25 01:03 - 00003292 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-12-16 21:37 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\Tasks
2016-12-16 01:31 - 2016-01-04 22:23 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2016-12-15 19:47 - 2016-01-20 22:12 - 00000132 _____ C:\Users\korisnik\AppData\Roaming\Adobe PNG Format CS6 Prefs
2016-12-14 17:31 - 2015-10-30 07:28 - 43778048 _____ C:\WINDOWS\system32\config\COMPONENTS
2016-12-12 00:14 - 2016-08-07 12:45 - 00002283 _____ C:\Users\korisnik\Desktop\Atom.lnk
2016-12-12 00:14 - 2016-08-07 12:45 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
2016-12-12 00:14 - 2016-08-07 12:45 - 00000000 ____D C:\Users\korisnik\AppData\Local\atom
2016-12-12 00:11 - 2016-08-07 12:44 - 00000000 ____D C:\Users\korisnik\AppData\Local\SquirrelTemp
2016-12-09 20:58 - 2015-12-25 09:40 - 00524288 ___SH C:\WINDOWS\system32\config\COMPONENTS{62e13469-7ee5-11e5-80c4-a4badb40df56}.TMContainer00000000000000000002.regtrans-ms
2016-12-09 20:58 - 2015-12-25 09:40 - 00065536 ___SH C:\WINDOWS\system32\config\COMPONENTS{62e13469-7ee5-11e5-80c4-a4badb40df56}.TM.blf
2016-12-08 01:36 - 2015-12-25 01:06 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\vlc
2016-12-08 01:35 - 2015-12-25 01:00 - 00000000 ___RD C:\Users\korisnik\Videos
2016-12-05 18:45 - 2015-12-25 01:02 - 00000000 ___SD C:\Users\korisnik\AppData\LocalLow\Microsoft
2016-12-03 19:21 - 2016-01-03 20:37 - 00002481 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk
2016-12-03 19:21 - 2016-01-03 20:37 - 00002469 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk
2016-12-03 19:21 - 2016-01-03 20:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2
2016-12-03 19:21 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64
2016-12-03 19:21 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\DriverStore

==================== Files in the root of some directories =======

2016-01-20 22:12 - 2016-12-15 19:47 - 0000132 _____ () C:\Users\korisnik\AppData\Roaming\Adobe PNG Format CS6 Prefs
2016-08-07 14:54 - 2016-08-08 16:42 - 0071278 _____ () C:\Users\korisnik\AppData\Roaming\PS13_panel.log
2016-01-31 22:06 - 2017-01-01 21:44 - 0001456 _____ () C:\Users\korisnik\AppData\Local\Adobe Save for Web 13.0 Prefs
2016-03-15 20:26 - 2016-03-15 20:26 - 0007606 _____ () C:\Users\korisnik\AppData\Local\Resmon.ResmonCfg

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

LastRegBack: 2016-12-29 16:43

==================== End of FRST.txt ============================

mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Otvori Notepad i iskopiraj sljedeći tekst koji se nalazi unutar Kod polja.

CHR StartupUrls: Profile 1 -> "hxxp://www.google.rs/","hxxp://start.mysearchdial.com/?f=1&a=md_14_11_ch&cd=2XzuyEtN2Y1L1QzutDtD0EtDyB0DzyyByCzz0D0FtB0ByCtBtN0D0Tzu0SzztDyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtA0CyEyCtCyDtAtGtC0FyE0AtG0A0FtCyDtGyEzytB0DtGyByE0CzztD0AyCtC0AtD0AyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0D0DyCzyyDzyyEtGtA0D0FtAtGyD0AyEtCtGyE0BtDyBtGtB0B0E0FyC0DtCtB0AtCtDyD2Q&cr=569384714&ir="
CHR DefaultSearchURL: Profile 1 -> hxxps://creativemarket.com/coloformia/399869?u=bestplugins


U okviru Notepad-a klikni na File --> Save As
Pod Encoding izaberi UTF-8.
Fajl nazovi Fixlist i sačuvaj na Desktop
Dvoklikom ponovo pokreni FRST.exe
Klikni na Fix i sačekaj dok program ne završi.
Ukoliko program zatraži restart računara, omogući mu da to nesmetano obavi.
Nakon završetka rada, otvoriće se fixlog.txt, sa sadržajem koji treba da kopiraš u temu.
Takođe, na Desktop-u će se nalaziti (fixlog.txt).

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Fix result of Farbar Recovery Scan Tool (x64) Version: 01-01-2017
Ran by korisnik (04-01-2017 17:41:33) Run:1
Running from C:\Users\korisnik\Desktop
Loaded Profiles: korisnik (Available Profiles: korisnik)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CHR StartupUrls: Profile 1 -> "hxxp://www.google.rs/","hxxp://start.mysearchdial.com/?f=1&a=md_14_11_ch&cd=2XzuyEtN2Y1L1QzutDtD0EtDyB0DzyyByCzz0D0FtB0ByCtBtN0D0Tzu0SzztDyDtN1L2XzutBtFtCzztFtBtFtDtN1L1CzutCyEtDtAtDyD1V1TtN1L1G1B1V1N2Y1L1Qzu2SyDtA0CyEyCtCyDtAtGtC0FyE0AtG0A0FtCyDtGyEzytB0DtGyByE0CzztD0AyCtC0AtD0AyE2QtN1M1F1B2Z1V1N2Y1L1Qzu2SyC0D0DyCzyyDzyyEtGtA0D0FtAtGyD0AyEtCtGyE0BtDyBtGtB0B0E0FyC0DtCtB0AtCtDyD2Q&cr=569384714&ir="
CHR DefaultSearchURL: Profile 1 -> hxxps://creativemarket.com/coloformia/399869?u=bestplugins
*****************

Chrome StartupUrls => removed successfully
Chrome DefaultSearchURL => not found.

==== End of Fixlog 17:41:34 ====

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Kakvo je sada stanje?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Sada radi ok. Hvala puno

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

• Sledeća procedura će implementirati završno čišćenje.

Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.
Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;

Remove disinfection tools
Create registry backup
Purge System Restore

Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.
Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)

Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
Alat briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.