problem sa youtube

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Poslat sma ovde da otvorim temu i postavim fajlove, problem sam opisao u ovoj temi
http://www.mycity.rs/Windows/Problem-sa-youtube-om-3.html

Sto se tice internet konekcije iznosi 3.5 Mbps
Od zastitnigh prrograma, Avira i Malwarebytes.

Evo tekst iz Attach dokumenta
Citat:.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows 7 Professional
Boot Device: \Device\HarddiskVolume2
Install Date: 25-May-13 11:48:15
System Uptime: 15-Apr-14 20:54:55 (1 hours ago)
.
Motherboard: Acer | | Fuquene
Processor: AMD Athlon(tm) 64 X2 Dual-Core Processor TK-55 | Socket A | 1800/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 120 GiB total, 98.819 GiB free.
D: is CDROM ()
E: is FIXED (NTFS) - 103 GiB total, 102.671 GiB free.
.
==== Disabled Device Manager Items =============
.
Class GUID: {4d36e97d-e325-11ce-bfc1-08002be10318}
Description: NVIDIA nForce System Management Controller
Device ID: PCI\VEN_10DE&DEV_0543&SUBSYS_01261025&REV_A2\3&2411E6FE&1&0B
Manufacturer: NVIDIA
Name: NVIDIA nForce System Management Controller
PNP Device ID: PCI\VEN_10DE&DEV_0543&SUBSYS_01261025&REV_A2\3&2411E6FE&1&0B
Service: nvsmu
.
Class GUID:
Description: Base System Device
Device ID: PCI\VEN_1180&DEV_0843&SUBSYS_01261025&REV_12\4&2A4C3A5&0&2240
Manufacturer:
Name: Base System Device
PNP Device ID: PCI\VEN_1180&DEV_0843&SUBSYS_01261025&REV_12\4&2A4C3A5&0&2240
Service:
.
Class GUID:
Description:
Device ID: ACPI\ENE0100\4&971C358&0
Manufacturer:
Name:
PNP Device ID: ACPI\ENE0100\4&971C358&0
Service:
.
Class GUID:
Description: Base System Device
Device ID: PCI\VEN_1180&DEV_0592&SUBSYS_01261025&REV_12\4&2A4C3A5&0&2340
Manufacturer:
Name: Base System Device
PNP Device ID: PCI\VEN_1180&DEV_0592&SUBSYS_01261025&REV_12\4&2A4C3A5&0&2340
Service:
.
==== System Restore Points ===================
.
RP36: 29-Mar-14 19:51:16 - Removed Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
RP37: 29-Mar-14 19:55:31 - Removed Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
RP38: 29-Mar-14 20:00:13 - Removed NVIDIA PhysX
RP39: 04-Apr-14 19:52:51 - Language Pack Removal
RP40: 14-Apr-14 23:55:19 - Scheduled Checkpoint
RP41: 15-Apr-14 14:34:18 - avast! Free Antivirus Setup
.
==== Installed Programs ======================
.
Adobe Flash Player 12 Plugin
Avira Free Antivirus
Avira SearchFree Toolbar
CCleaner
Facebook Video Calling 2.0.0.447
FastStone Image Viewer 4.8
Java 7 Update 25
Java Auto Updater
Malwarebytes Anti-Malware version 2.0.1.1004
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
NVIDIA Drivers
Opera Stable 20.0.1387.91
Skype Click to Call
Skype™ 6.14
.
==== Event Viewer Messages From Past Week ========
.
15-Apr-14 20:57:55, Error: Service Control Manager [7031] - The Windows Search service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 30000 milliseconds: Restart the service.
15-Apr-14 20:57:55, Error: Service Control Manager [7024] - The Windows Search service terminated with service-specific error %%-1073473535.
15-Apr-14 20:57:18, Error: Microsoft-Windows-WHEA-Logger [18] - A fatal hardware error has occurred. Reported by component: Processor Core Error Source: Machine Check Exception Error Type: Unknown Error Processor ID: 1 The details view of this entry contains further information.
15-Apr-14 14:14:48, Error: Disk [11] - The driver detected a controller error on \Device\Harddisk1\DR1.
15-Apr-14 13:09:05, Error: Microsoft-Windows-SharedAccess_NAT [31004] - The DNS proxy agent was unable to allocate 0 bytes of memory. This may indicate that the system is low on virtual memory, or that the memory manager has encountered an internal error.
15-Apr-14 12:04:47, Error: Microsoft-Windows-WHEA-Logger [18] - A fatal hardware error has occurred. Reported by component: Processor Core Error Source: Machine Check Exception Error Type: Bus/Interconnect Error Processor ID: 1 The details view of this entry contains further information.
14-Apr-14 22:50:49, Error: Microsoft-Windows-WHEA-Logger [18] - A fatal hardware error has occurred. Reported by component: Processor Core Error Source: Machine Check Exception Error Type: Cache Hierarchy Error Processor ID: 1 The details view of this entry contains further information.
14-Apr-14 22:40:12, Error: Service Control Manager [7023] - The Internet Connection Sharing (ICS) service terminated with the following error: %%-2147467243
14-Apr-14 22:39:29, Error: Service Control Manager [7022] - The Internet Connection Sharing (ICS) service hung on starting.
14-Apr-14 22:38:01, Error: Microsoft-Windows-WER-SystemErrorReporting [1001] - The computer has rebooted from a bugcheck. The bugcheck was: 0x00000124 (0x00000000, 0x859388fc, 0x00000000, 0x00000000). A dump was saved in: C:\Windows\Minidump\041414-22620-01.dmp. Report Id: 041414-22620-01.
13-Apr-14 16:52:10, Error: Microsoft-Windows-SharedAccess_NAT [34001] - The ICS_IPV6 failed to configure IPv6 stack.
13-Apr-14 16:52:10, Error: Microsoft-Windows-SharedAccess_NAT [30013] - The DHCP allocator has disabled itself on IP address 192.168.1.2, since the IP address is outside the 192.168.137.0/255.255.255.0 scope from which addresses are being allocated to DHCP clients. To enable the DHCP allocator on this IP address, change the scope to include the IP address, or change the IP address to fall within the scope.
.
==== End Of File ===========================



Evo tekst iz DDS dokumenta:
Citat:DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16483
Run by Branko I Irena at 21:07:25 on 2014-04-15
Microsoft Windows 7 Professional 6.1.7600.0.1252.1.1033.18.1791.818 [GMT 2:00]
.
AV: Avira Desktop *Enabled/Updated* {4D041356-F94D-285F-8768-AAE50FA36859}
SP: Avira Desktop *Enabled/Updated* {F665F2B2-DF77-27D1-BDD8-9197742422E4}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\AskPartnerNetwork\Toolbar\apnmcp.exe
C:\Program Files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
C:\Program Files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes Anti-Malware\mbamservice.exe
C:\Program Files\Malwarebytes Anti-Malware\mbam.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\Avira\AntiVir Desktop\avwebg7.exe
C:\Windows\System32\alg.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Opera\20.0.1387.91\opera.exe
C:\Program Files\Opera\20.0.1387.91\opera_crashreporter.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Program Files\Opera\20.0.1387.91\opera.exe
C:\Program Files\Opera\20.0.1387.91\opera.exe
C:\Program Files\Opera\20.0.1387.91\opera.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.com
mStart Page = hxxp://www.google.com
BHO: Avira SearchFree Toolbar: {41564952-412D-5637-4300-7A786E7484D7} -
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
TB: Avira SearchFree Toolbar: {41564952-412D-5637-4300-7A786E7484D7} -
TB: Avira SearchFree Toolbar: {41564952-412D-5637-4300-7A786E7484D7} -
uRun: [Facebook Update] "c:\users\branko i irena\appdata\local\facebook\update\FacebookUpdate.exe" /c /nocrashserver
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [ApnTBMon] "c:\program files\askpartnernetwork\toolbar\updater\TBNotifier.exe"
mRun: [VNT] c:\program files\vnt\vntldr.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
TCP: NameServer = 192.168.1.1 192.168.0.1
TCP: Interfaces\{9C2D18F1-7CDC-478F-BC0B-F05609FD5569} : DHCPNameServer = 192.168.1.1 192.168.0.1
TCP: Interfaces\{9C2D18F1-7CDC-478F-BC0B-F05609FD5569}\4716378616946716E6 : DHCPNameServer = 62.63.0.10 192.168.0.1
TCP: Interfaces\{9C2D18F1-7CDC-478F-BC0B-F05609FD5569}\D457E6A616 : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{D1026972-4728-44C9-A881-F6E13D05C72D} : DHCPNameServer = 192.168.1.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
AppInit_DLLs= c:\progra~2\wincle~1\wincle~1.dll
SSODL: WebCheck - <orphaned>
.
============= SERVICES / DRIVERS ===============
.
R1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2013-9-10 21576]
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2014-4-15 37352]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\avira\antivir desktop\sched.exe [2014-4-15 440400]
R2 AntiVirService;Avira Real-Time Protection;c:\program files\avira\antivir desktop\avguard.exe [2014-4-15 440400]
R2 AntiVirWebService;Avira Web Protection;c:\program files\avira\antivir desktop\avwebg7.exe [2014-4-15 1017424]
R2 APNMCP;Ask Update Service;c:\program files\askpartnernetwork\toolbar\apnmcp.exe [2014-2-13 166352]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2014-4-15 90400]
R2 avnetflt;avnetflt;c:\windows\system32\drivers\avnetflt.sys [2014-4-15 69240]
R2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\skype\toolbars\autoupdate\SkypeC2CAutoUpdateSvc.exe [2014-3-3 1363584]
R2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\skype\toolbars\pnrsvc\SkypeC2CPNRSvc.exe [2014-3-3 1748608]
R2 MBAMScheduler;MBAMScheduler;c:\program files\malwarebytes anti-malware\mbamscheduler.exe [2014-4-15 1809720]
R2 MBAMService;MBAMService;c:\program files\malwarebytes anti-malware\mbamservice.exe [2014-4-15 857912]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-4-15 23256]
R3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys [2014-4-15 107736]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-4-15 51416]
R3 SrvHsfHDA;SrvHsfHDA;c:\windows\system32\drivers\VSTAZL3.SYS [2009-7-14 207360]
R3 SrvHsfV92;SrvHsfV92;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-14 980992]
R3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\drivers\VSTCNXT3.SYS [2009-7-14 661504]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-10-23 172192]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 StorSvc;Storage Service;c:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted [2009-7-14 20992]
S3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\wat\WatAdminSvc.exe [2013-5-27 1343400]
.
=============== File Associations ===============
.
ShellExec: Opera.exe: open="c:\program files\opera\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2014-04-15 16:22:49 -------- d-----w- c:\users\branko i irena\appdata\local\Opera Software
2014-04-15 16:22:47 -------- d-----w- c:\users\branko i irena\appdata\roaming\Opera Software
2014-04-15 16:13:29 -------- d-----w- c:\users\branko i irena\appdata\local\AskPartnerNetwork
2014-04-15 12:56:20 -------- d-----w- c:\users\branko i irena\appdata\local\VNT
2014-04-15 12:56:16 -------- d-----w- c:\program files\VNT
2014-04-15 12:56:15 -------- d-----w- c:\programdata\AskPartnerNetwork
2014-04-15 12:56:15 -------- d-----w- c:\program files\AskPartnerNetwork
2014-04-15 12:55:49 -------- d-----w- c:\programdata\APN
2014-04-15 12:53:56 -------- d-----w- c:\users\branko i irena\appdata\roaming\Avira
2014-04-15 12:47:16 90400 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2014-04-15 12:47:16 69240 ----a-w- c:\windows\system32\drivers\avnetflt.sys
2014-04-15 12:47:16 37352 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2014-04-15 12:47:14 -------- d-----w- c:\programdata\Avira
2014-04-15 12:47:14 -------- d-----w- c:\program files\Avira
2014-04-14 22:13:48 107736 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2014-04-14 22:12:11 73432 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2014-04-14 22:12:10 51416 ----a-w- c:\windows\system32\drivers\mwac.sys
2014-04-14 22:12:10 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-04-14 22:12:10 -------- d-----w- c:\programdata\Malwarebytes
2014-04-14 22:12:10 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2014-04-08 19:49:05 -------- d-----w- c:\program files\CCleaner
2014-03-29 20:00:03 753664 ----a-w- c:\windows\system32\nvcplui.exe
2014-03-29 20:00:03 307200 ----a-w- c:\windows\system32\nvexpbar.dll
2014-03-29 20:00:03 1073152 ----a-w- c:\windows\system32\nvcpluir.dll
2014-03-29 20:00:02 413696 ----a-w- c:\windows\system32\nvcpl.cpl
2014-03-29 19:58:56 356352 ----a-w- c:\windows\system32\NVUNINST.EXE
2014-03-29 19:58:51 729088 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll
2014-03-29 19:58:51 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll
2014-03-29 19:58:51 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe
2014-03-29 19:58:51 32768 ----a-w- c:\program files\common files\installshield\professional\runtime\Objectps.dll
2014-03-29 19:58:51 266240 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll
2014-03-29 19:58:51 192512 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll
2014-03-29 19:58:45 188548 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll
2014-03-29 19:58:44 311428 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll
2014-03-29 18:52:17 -------- d-----w- c:\windows\system32\appmgmt
2014-03-26 21:48:39 -------- d-----w- c:\users\branko i irena\appdata\local\Skype
.
==================== Find3M ====================
.
2014-03-12 00:08:30 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2014-03-12 00:08:29 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-01-16 00:40:14 487016 ----a-w- C:\SecurityScanner.dll
.
============= FINISH: 21:08:20.12 ===============

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav,


Preuzmi smeenk-ov zoek.zip ili zoek.rar () sa ovog ili ovog linka i sačuvaj ga na Desktop.

Raspakuj arhivu u neki folder (uputstvo), a zatim:

zatvori browser i ostale pokrenute programe;
privremeno deaktiviraj zaštitni softver ( ukoliko je to potrebno ) Uputstvo ;
dvoklikom pokreni zoek na ikonicu programa ;
pričekaj da se alat startuje ...


U beli okvir prozora iskopiraj sledeći tekst:

C:\Program Files\AskPartnerNetwork;fs
c:\program files\vnt;fs
c:\progra~2\wincle~1;fs
APNMCP;s
c:\programdata;fs
c:\programdata\APN;fs
autoclean;
emptyclsid;
emptyalltemp;
emptyfolderscheck;delete
ipconfig /flushdns;b

Klikni na dugme i pričekaj da se skeniranje završi.


zoek ce po potrebi, restartovati Windows a na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Napomena:Izveštaj će biti sačuvan pod nazivom zoek-results.log na sistemskoj particiji (tipična lokacija: C:\zoek-results.log)


Kopiraj sadrzaj tog loga u poruku.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 16 Apr 2014 10:32

Pozdrav i tebi

Evo report
Citat:
Zoek.exe v5.0.0.0 Updated 14-April-2014
Tool run by Milan on 16-Apr-14 at 9:59:43.67.
Microsoft Windows 7 Professional 6.1.7600 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Milan\Downloads\zoek\zoek.com [Scan all users] [Script inserted]

==== System Restore Info ======================

16-Apr-14 10:00:32 Zoek.exe System Restore Point Created Succesfully.

==== Empty Folders Check ======================

C:\Program Files\OApps deleted successfully
C:\Program Files\Vaudix deleted successfully
C:\Program Files\WebSearch deleted successfully
C:\PROGRA~2\AVAST Software deleted successfully
C:\PROGRA~2\Babylon deleted successfully
C:\PROGRA~2\Vaudix deleted successfully
C:\PROGRA~2\Winclean performap deleted successfully
C:\Users\Milan\AppData\Local\Adobe deleted successfully

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-712091894-3739496460-4263350547-1000\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully
HKEY_USERS\S-1-5-21-712091894-3739496460-4263350547-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully
HKEY_USERS\S-1-5-21-712091894-3739496460-4263350547-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully

==== Deleting CLSID Registry Values ======================

HKEY_USERS\S-1-5-21-712091894-3739496460-4263350547-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{41564952-412D-5637-4300-7A786E7484D7} deleted successfully

==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\APNMCP deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\APNMCP deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Users\Milan~1\AppData\Roaming\Mozilla\Firefox\Profiles\b8r1mlel.default

user.js not found
---- Lines WebSearch removed from prefs.js ----
user_pref("browser.search.defaultenginename,S", "WebSearch");
user_pref("browser.search.defaulturl", "http://websearch.search-guide.info/?pid=1617&r=2013/11/03&hid=12452992566639099230&lg=EN&cc=NO&unqvl=40&l=1&q=
user_pref("browser.search.order.1", "WebSearch");
user_pref("browser.search.order.1,S", "WebSearch");
user_pref("browser.search.selectedEngine,S", "WebSearch");
user_pref("sweetim.toolbar.previous.browser.search.defaultenginename", "WebSearch");
user_pref("sweetim.toolbar.previous.browser.search.selectedEngine", "WebSearch");
user_pref("sweetim.toolbar.previous.browser.startup.homepage", "http://websearch.search-guide.info/?pid=1617&r=2013/11/03&hid=12452992566639099230&lg=
user_pref("sweetim.toolbar.previous.keyword.URL", "http://websearch.search-guide.info/?pid=1617&r=2013/11/03&hid=12452992566639099230&lg=EN&cc=NO&unqv
---- FireFox user.js and prefs.js backups ----

prefs__1012_.backup

==== Batch Command(s) Run By Tool======================


==== Deleting Files \ Folders ======================

c:\progra~2\wincle~1 not found
c:\program files\vnt deleted
C:\Users\Milan\AppData\LocalLow\{01060E53-9C99-48F7-CAE2-2F8899E2D773} deleted
C:\Users\Milan\AppData\LocalLow\{523323D1-DBD2-AEE0-2657-A3329E08B4B1} deleted
C:\Users\Milan\AppData\LocalLow\{F6DF78B5-E8C0-43A6-2FE4-9E209330445E} deleted
C:\Program Files\Allin1Convert_8h Chrome Extension deleted
C:\found.000 deleted
C:\Users\Milan\AppData\Roaming\SkypEmoticons deleted
C:\Users\Milan\AppData\Roaming\MetaCrawler deleted
C:\Users\Milan\AppData\Roaming\Babylon deleted
C:\Users\Milan\AppData\Local\AskPartnerNetwork deleted
C:\Users\Milan\AppData\LocalLow\Softonic deleted
C:\Windows\system32\config\systemprofile\AppData\LocalLow\AVG Secure Search deleted
C:\Windows\system32\tasks\DTReg deleted
C:\Windows\System32\searchplugins deleted
C:\Windows\System32\Extensions deleted
C:\Users\Milan~1\AppData\Roaming\Mozilla\Firefox\Profiles\b8r1mlel.default\extensions\aa-ghokv@iijccj-euii.net deleted
C:\Users\Milan~1\AppData\Roaming\Mozilla\Firefox\Profiles\b8r1mlel.default\extensions\ayylhdvoaog@atqogivuh.org deleted
C:\Users\Milan~1\AppData\Roaming\Mozilla\Firefox\Profiles\b8r1mlel.default\extensions\iuuibe@udraaa.edu deleted
C:\Users\Milan~1\AppData\Roaming\Mozilla\Firefox\Profiles\b8r1mlel.default\extensions\zc6.xw@menbtlo-rc.org deleted
"C:\Users\Milan~1\AppData\Roaming\Mozilla\Firefox\Profiles\b8r1mlel.default\extensions\toolbar_AVIRA-V7C@apn.ask.com.xpi" deleted
"C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" deleted
"c:\ProgramData\Avira\AntiVir Desktop\EVENTDB\gavid2.dat" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\EVENTDB\gavid2.dat_1" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\EVENTDB\gavid2.dat_2" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\TEMP\scaninfo(1772).tmp" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\TEMP\WEBGUARD\00002C01.html" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSStmp.log" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.2.Crwl" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.2.gthr" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.ci" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.dir" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.wid" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.ci" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.dir" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.wid" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.ci" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.dir" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.wid" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.ci" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.dir" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wid" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wsb" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.000" not deleted
"c:\ProgramData\Microsoft\Windows\Caches\cversions.2.db" deleted
"c:\ProgramData\Microsoft\Windows\Caches\{45AC748A-1FA0-4C26-B2E9-F2BCBED4E0C9}.2.ver0x0000000000000001.db" deleted
"c:\ProgramData\Microsoft\Windows\Caches\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000007.db" deleted
"c:\ProgramData\Microsoft\Windows\Caches\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" deleted
"c:\ProgramData\Microsoft\Windows\DRM\drmstore.hds" not deleted
"C:\Program Files\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe" deleted
"C:\Program Files\AskPartnerNetwork" deleted
"c:\ProgramData" not deleted
"C:\Program Files\AskPartnerNetwork" deleted
"C:\Program Files\AskPartnerNetwork\Toolbar" deleted
"C:\Program Files\AskPartnerNetwork\Toolbar\Updater" deleted
"c:\ProgramData\Avira" not deleted
"c:\ProgramData\Malwarebytes" not deleted
"c:\ProgramData\Microsoft" not deleted
"c:\ProgramData\Avira\AntiVir Desktop" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\EVENTDB" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\TEMP" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\TEMP\WEBGUARD" not deleted
"c:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware" not deleted
"c:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Configuration" not deleted
"c:\ProgramData\Malwarebytes\Malwarebytes Anti-Malware\Logs" not deleted
"c:\ProgramData\Microsoft\Search" not deleted
"c:\ProgramData\Microsoft\Windows" not deleted
"c:\ProgramData\Microsoft\Search\Data" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore" not deleted
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles" not deleted
"c:\ProgramData\Microsoft\Windows\Caches" not deleted
"c:\ProgramData\Microsoft\Windows\DRM" not deleted
"C:\Program Files\AskPartnerNetwork\Toolbar" deleted
"C:\Program Files\AskPartnerNetwork\Toolbar\Updater" deleted

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\Milan\AppData\Roaming\Mozilla\Firefox\Profiles\b8r1mlel.default
95812430959AE88CDD0301AB3A71913B - C:\Windows\system32\Macromed\Flash\NPSWF32_12_0_0_77.dll - Shockwave Flash
FF0D6F82A0EC13952E83B9439100E45D - C:\Users\Milan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll - Facebook Video Calling Plugin
D7324EB1EDCB8990F8522DE0311359E9 - C:\Windows\system32\npDeployJava1.dll - Java Deployment Toolkit 7.0.250.17
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\system32\npmproxy.dll - Microsoft® Windows® Operating System


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[03-Mar-14 10:53]
pcoohmdcpejoeggdnihdfhohjgdbllgm - C:\ProgramData\AskPartnerNetwork\Toolbar\AVIRA-V7C\CRX\ToolbarCR.crx[]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{68D1D0DE-E025-4038-A233-1AAB2C5AE605} Bing Url="http://www.bing.com/search?FORM=UP22DF&PC=UP22&q={searchTerms}&src=IE-SearchBox"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{98B70038-2F9D-16F6-58E8-D5B141A3B5D5} deleted successfully
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{DF921BDA-38C9-2791-324F-C2E5BF3694BB} deleted successfully
HKEY_LOCAL_MACHINE\Software\Policies\Google\Chrome\ExtensionInstallForcelist deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions\pcoohmdcpejoeggdnihdfhohjgdbllgm deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\Milan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\03TPMFR7 will be deleted at reboot
C:\Users\Milan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\Milan\AppData\Local\Mozilla\Firefox\Profiles\b8r1mlel.default\Cache emptied successfully

==== Empty Chrome Cache ======================

No Chrome Cache found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=1501 folders=473 441646620 bytes)

==== Empty Temp Folders ======================

C:\Users\Milan\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\Milan~1\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"c:\ProgramData\Avira\AntiVir Desktop\EVENTDB\gavid2.dat" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\EVENTDB\gavid2.dat_1" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\EVENTDB\gavid2.dat_2" not deleted
"c:\ProgramData\Avira\AntiVir Desktop\TEMP\scaninfo(1772).tmp" not found
"c:\ProgramData\Avira\AntiVir Desktop\TEMP\WEBGUARD\00002C01.html" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSS.log" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\MSStmp.log" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\tmp.edb" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Windows.edb" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.2.Crwl" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\GatherLogs\SystemIndex\SystemIndex.2.gthr" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\PropMap\CiPT0000.000" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\SecStore\CiST0000.000" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.ci" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.dir" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010001.wid" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.ci" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.dir" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010002.wid" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.ci" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.dir" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010003.wid" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.ci" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.dir" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wid" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\00010004.wsb" not found
"c:\ProgramData\Microsoft\Search\Data\Applications\Windows\Projects\SystemIndex\Indexer\CiFiles\INDEX.000" not found
"c:\ProgramData\Microsoft\Windows\DRM\drmstore.hds" not found
"C:\Users\Milan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"c:\ProgramData" not deleted
"C:\Users\Milan\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\03TPMFR7" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on 16-Apr-14 at 10:23:32.83 ======================


Dopuna: 16 Apr 2014 12:51

Twin brate, radi sve perfektno nakon tog zoek-a .

Sta je uradio bas me interesuje u cemu je bio problem ?

Inace i Malwarebytes mi je zeznuo ne radi vise pa sam ga obrisao skroz.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ima si Adware na sistemu, pa je to bio uzrok problema.


Primetio sam ostatke Avast-a na sistemu, ne bi bilo lose da ih uklonis.

Isprati ovo uputstvo --> http://www.avast.com/uninstall-utility



Jos jedna rutinska provera:


Preuzmi Farbar-ov Farbar Recovery Scan Tool () sa ove adrese na Desktop:
Postoji 32bit. i 64bit.-na verzija. Potrebno je preuzeti verziju koja je kompatibilna sa tvojim sistemom.
Ako nisi siguran koja verzija se odnosi na tvoj sistem, preuzmi ih obe i pokreni. Samo jedan od njih c´e raditi na tvom sistemu, to c´e biti prava verzija.

dvoklikom pokreni program, kada se alat pokrene klikni Yes na disclaimer prozor;
pričekati koji trenutak dok alat proverava postoji li novija verzija;
klikni na dugme Scan;
po završetku skeniranja, alat će formirati izveštaj (FRST.txt) u isti direktorijum gde je FRST alat sačuvan;
iskopiraj sadržaj FRST.txt izveštaja u poruku;
po prvom pokretanju, alat bi trebao formirati i dodatni izveštaj (Addition.txt);
okači Addition.txt izveštaj uz poruku koristeći opciju Prikači fajl

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

jbg druze sad , odneo rodjak laptop vec

• 1Ovo se svidja korisniku: nike992
  
  Registruj se da bi pohvalio/la poruku!

Nikom nista onda