offline
- njuskalo75
- Ugledni građanin
- Pridružio: 03 Feb 2011
- Poruke: 445
- Gde živiš: Landau and der Pfalz
|
Postovani,
Evo dosao malo kod mojih roditelja u goste a oni imaju stari racunar koji im sluzi samo da bi se sa nama po inostranstvu culi preko skajpa.
E sada taj racunar je starijega datuma i instaliran mu je sistem xp ali nije prepakovan na sa xp2 na xp3 ali za cudo skajp mu radi pa bih ja ako mozemo da to nista nediramo dok se nenabavi novijeg datuma racunar.Jedino da se malo ocisti od viruscica i od smeca koje ga pomalo koci.
Znam da ste vi za to strucni,
Unapred zahvalan.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:07-01-2015
Ran by KORISNIK (administrator) on COMPANY-D1A342B (08-01-2016 17:24:24)
Running from C:\Documents and Settings\KORISNIK\Desktop
Loaded Profiles: KORISNIK (Available Profiles: KORISNIK)
Platform: Microsoft Windows XP Professional Service Pack 2 (X86) Language: English (United States)
Internet Explorer Version 6 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAMain.exe
(© 2015 Microsoft Corporation) C:\Documents and Settings\KORISNIK\Local Settings\Application Data\Microsoft\BingSvc\BingSvc.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Devices Agent\AgentSvc.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAService.exe
(Panda Security, S.L.) C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Adobe ARM] => C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1021128 2014-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [PSUAMain] => C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAMain.exe [40184 2015-02-27] (Panda Security, S.L.)
HKU\S-1-5-21-343818398-879983540-1417001333-1003\...\Run: [BingSvc] => C:\Documents and Settings\KORISNIK\Local Settings\Application Data\Microsoft\BingSvc\BingSvc.exe [144008 2015-11-11] (© 2015 Microsoft Corporation)
HKU\S-1-5-21-343818398-879983540-1417001333-1003\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner.exe [5489944 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-343818398-879983540-1417001333-1003\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [57981568 2015-09-28] (Skype Technologies S.A.)
HKU\S-1-5-21-343818398-879983540-1417001333-1003\...\RunOnce: [Adobe Speed Launcher] => 1452268892
HKU\S-1-5-21-343818398-879983540-1417001333-1003\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
GroupPolicyScripts: Restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.5.1
Tcpip\..\Interfaces\{5D514E8B-6252-45D1-A002-9893D3356B11}: [DhcpNameServer] 192.168.5.1
Internet Explorer:
==================
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-19\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-20\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKU\S-1-5-21-343818398-879983540-1417001333-1003\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKU\S-1-5-21-343818398-879983540-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.hr/
HKU\S-1-5-21-343818398-879983540-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-343818398-879983540-1417001333-1003\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = hxxp://home.tb.ask.com/index.jhtml?n=77DE8857&p2=^HJ^xdm073^YYA^hr&ptb=AB53B7F6-8B6A-4186-A5F1-B76A04AA388E&si=right
URLSearchHook: HKU\S-1-5-21-343818398-879983540-1417001333-1003 - Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\WINDOWS\system32\shdocvw.dll (Microsoft Corporation)
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "" <======= ATTENTION
SearchScopes: HKLM -> DefaultScope value is missing
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
FireFox:
========
FF ProfilePath: C:\Documents and Settings\KORISNIK\Application Data\Mozilla\Firefox\Profiles\ul4zfxgd.default
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: Bing
FF Homepage: www.google.rs
FF Keyword.URL: hxxp://www.bing.com/search?FORM=SK2MDF&PC=SK2M&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_17_0_0_134.dll [2015-04-02] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw_1217157.dll [2015-02-16] (Adobe Systems, Inc.)
FF Plugin: @FromDocToPDF_65.com/Plugin -> C:\Program Files\FromDocToPDF_65\bar\1.bin\NP65Stub.dll [2013-07-25] (MindSpark)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Extension: Bing Search - C:\Documents and Settings\KORISNIK\Application Data\Mozilla\Firefox\Profiles\ul4zfxgd.default\Extensions\bingsearch.full@microsoft.com [2015-06-10] [not signed]
FF HKLM\...\Firefox\Extensions: [65ffxtbr@FromDocToPDF_65.com] - C:\Program Files\FromDocToPDF_65\bar\1.bin
FF Extension: No Name - C:\Program Files\FromDocToPDF_65\bar\1.bin [2013-07-25] [not signed]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 NanoServiceMain; C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe [142584 2015-02-27] (Panda Security, S.L.)
R2 PandaAgent; C:\Program Files\Panda Security\Panda Devices Agent\AgentSvc.exe [66808 2014-10-09] (Panda Security, S.L.)
R2 PSUAService; C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUAService.exe [38136 2015-02-27] (Panda Security, S.L.)
S3 WMConnectCDS; C:\Program Files\Windows Media Connect 2\wmccds.exe [855552 2005-10-06] (Microsoft Corporation) [File not signed]
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 ac97intc; C:\WINDOWS\System32\drivers\ac97intc.sys [96256 2001-08-17] (Intel Corporation)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2004-08-03] (Microsoft Corporation)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2004-08-03] (Microsoft Corporation)
R1 NNSALPC; C:\WINDOWS\System32\DRIVERS\NNSAlpc.sys [86800 2015-02-09] (Panda Security, S.L.)
R1 NNSHTTP; C:\WINDOWS\System32\DRIVERS\NNSHttp.sys [202128 2015-02-09] (Panda Security, S.L.)
R1 NNSHTTPS; C:\WINDOWS\System32\DRIVERS\NNSHttps.sys [109584 2015-02-09] (Panda Security, S.L.)
R1 NNSIDS; C:\WINDOWS\System32\DRIVERS\NNSIds.sys [126480 2015-02-09] (Panda Security, S.L.)
R3 NNSNAHS; C:\WINDOWS\System32\DRIVERS\NNSNAHS.sys [46480 2014-10-21] (Panda Security, S.L.)
R1 NNSPICC; C:\WINDOWS\System32\DRIVERS\NNSPicc.sys [99856 2015-02-09] (Panda Security, S.L.)
R1 NNSPIHS; C:\WINDOWS\System32\DRIVERS\NNSPihs.sys [52112 2015-02-09] (Panda Security, S.L.)
R1 NNSPOP3; C:\WINDOWS\System32\DRIVERS\NNSPop3.sys [120592 2015-02-09] (Panda Security, S.L.)
R1 NNSPROT; C:\WINDOWS\System32\DRIVERS\NNSProt.sys [281232 2015-02-09] (Panda Security, S.L.)
R1 NNSPRV; C:\WINDOWS\System32\DRIVERS\NNSPrv.sys [205456 2015-02-09] (Panda Security, S.L.)
R1 NNSSMTP; C:\WINDOWS\System32\DRIVERS\NNSSmtp.sys [108432 2015-02-09] (Panda Security, S.L.)
R1 NNSSTRM; C:\WINDOWS\System32\DRIVERS\NNSStrm.sys [239888 2015-02-09] (Panda Security, S.L.)
R1 NNSTLSC; C:\WINDOWS\System32\DRIVERS\NNSTlsc.sys [94864 2015-02-09] (Panda Security, S.L.)
R2 PSINAflt; C:\WINDOWS\System32\DRIVERS\PSINAflt.sys [140816 2015-02-25] (Panda Security, S.L.)
R2 PSINFile; C:\WINDOWS\System32\DRIVERS\PSINFile.sys [103312 2015-02-25] (Panda Security, S.L.)
R1 PSINKNC; C:\WINDOWS\System32\DRIVERS\psinknc.sys [172432 2015-02-25] (Panda Security, S.L.)
R2 PSINProc; C:\WINDOWS\System32\DRIVERS\PSINProc.sys [114704 2015-02-25] (Panda Security, S.L.)
R2 PSINProt; C:\WINDOWS\System32\DRIVERS\PSINProt.sys [124944 2015-02-25] (Panda Security, S.L.)
R2 PSINReg; C:\WINDOWS\System32\DRIVERS\PSINReg.sys [100624 2015-02-25] (Panda Security, S.L.)
R3 PSKMAD; C:\WINDOWS\System32\DRIVERS\PSKMAD.sys [50320 2015-01-29] (Panda Security, S.L.)
R2 Secdrv; C:\WINDOWS\System32\DRIVERS\secdrv.sys [163644 2007-02-18] (Macrovision Corporation, Macrovision Europe Limited, and Macrovision Japan and Asia K.K.) [File not signed]
S2 StarOpen; no ImagePath
U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [4096 2010-07-04] () [File not signed]
U1 WS2IFSL; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-01-08 17:24 - 2016-01-08 17:25 - 00010214 _____ C:\Documents and Settings\KORISNIK\Desktop\FRST.txt
2016-01-08 17:24 - 2016-01-08 17:24 - 00000000 ____D C:\FRST
2016-01-08 17:18 - 2016-01-08 17:19 - 01721856 _____ (Farbar) C:\Documents and Settings\KORISNIK\Desktop\FRST.exe
2016-01-06 15:41 - 2016-01-06 15:41 - 00000000 ___SD C:\Documents and Settings\KORISNIK\UserData
2016-01-05 16:02 - 2015-01-29 18:21 - 00050320 _____ (Panda Security, S.L.) C:\WINDOWS\system32\Drivers\PSKMAD.sys
2016-01-05 15:55 - 2016-01-05 15:55 - 00008192 ___SH C:\Documents and Settings\RESANOVIC\My Documents\Thumbs.db
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-01-08 17:25 - 2013-05-23 00:27 - 00000000 ____D C:\Documents and Settings\KORISNIK\Local Settings\Temp
2016-01-08 17:25 - 2013-05-22 19:16 - 00000000 ____D C:\Documents and Settings\KORISNIK\Application Data\Skype
2016-01-08 17:24 - 2010-03-01 23:17 - 00000000 ____D C:\WINDOWS
2016-01-08 17:22 - 2013-05-22 19:32 - 00000000 ____D C:\Documents and Settings\KORISNIK\My Documents\Preuzimanja
2016-01-08 17:10 - 2013-05-23 00:27 - 00000000 ____D C:\Documents and Settings\KORISNIK
2016-01-08 17:03 - 2013-05-22 19:16 - 00001744 _____ C:\WINDOWS\system32\d3d9caps.dat
2016-01-08 17:01 - 2013-05-23 00:23 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-01-08 16:57 - 2015-03-10 19:15 - 04325376 _____ C:\WINDOWS\system32\config\Nano.evt
2016-01-08 16:57 - 2013-05-23 00:27 - 00000278 ___SH C:\Documents and Settings\KORISNIK\ntuser.ini
2016-01-08 16:57 - 2013-05-23 00:23 - 00032534 ____N C:\WINDOWS\SchedLgU.Txt
2016-01-08 16:57 - 2013-05-22 19:34 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2016-01-08 15:27 - 2001-08-23 13:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2016-01-05 15:57 - 2010-03-02 04:48 - 00000000 ___RD C:\Documents and Settings\RESANOVIC\My Documents\My Pictures
2016-01-05 15:55 - 2010-03-02 04:47 - 00000000 ___RD C:\Documents and Settings\RESANOVIC\My Documents
2016-01-05 12:38 - 2015-08-30 15:49 - 00002267 _____ C:\Documents and Settings\All Users.WINDOWS\Desktop\Skype.lnk
2016-01-04 21:43 - 2015-08-26 13:04 - 00000300 _____ C:\Documents and Settings\KORISNIK\Desktop\opća bolnica šilo.txt
2016-01-04 19:02 - 2013-05-22 19:05 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\CCleaner
2016-01-04 19:02 - 2013-05-22 19:05 - 00000000 ____D C:\Documents and Settings\All Users.WINDOWS\Start Menu\Programs\CCleaner
2015-12-29 12:28 - 2015-10-26 13:16 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-12-29 12:28 - 2013-05-22 19:03 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
==================== Files in the root of some directories =======
2015-03-10 18:57 - 2013-07-25 11:28 - 0194936 _____ () C:\Program Files\1gres.dll
2015-03-10 18:57 - 2013-07-25 11:28 - 0712264 _____ (MindSpark) C:\Program Files\1gUninstall InboxAce.dll
2015-03-10 18:59 - 2013-07-25 11:25 - 0194968 _____ () C:\Program Files\4zres.dll
2015-03-10 18:59 - 2013-07-25 11:25 - 0712264 _____ (MindSpark) C:\Program Files\4zUninstall VideoDownloadConverter.dll
2014-12-10 16:12 - 2014-12-10 16:12 - 0000083 _____ () C:\Documents and Settings\KORISNIK\Application Data\mbam.context.scan
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of FRST.txt ============================
https://www.mycity.rs/must-login.png
|
