svchost.exe

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Pre par dana sam poceo da primecujem da mi kompjuter previse sporo radi. U task manager-u. Upaljena su 7 svchost.exe processa. Koliko ja mogu da se setim ranije ih je najvise bilo 3 ili 4. Nisam pokusavao da ih gasim jer koliko znam sistemski processi ne smeju da se gase. Trazio sam po internetu i na vise mesta sam procitao da je verovatno infekcija. Nigde nisam nasao resenje. Sve ljude su upucivali na mesta kao sto je Ambulanta. Hvala unapred

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_26
Run by Petar at 12:06:40 on 2011-09-01
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1320 [GMT -7:00]
.
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
E:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Avira\AntiVir Desktop\sched.exe
E:\WINDOWS\Explorer.EXE
E:\WINDOWS\System32\svchost.exe -k Akamai
E:\Program Files\Avira\AntiVir Desktop\avguard.exe
E:\Program Files\Bonjour\mDNSResponder.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\Program Files\Avira\AntiVir Desktop\avshadow.exe
E:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\svchost.exe -k imgsvc
E:\WINDOWS\RTHDCPL.EXE
E:\Program Files\Avira\AntiVir Desktop\avgnt.exe
E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
E:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
E:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
E:\Program Files\Common Files\Java\Java Update\jusched.exe
E:\Program Files\MCShield\MCShieldRTM.exe
E:\Program Files\MCShield\MCShieldTray.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\DAEMON Tools Lite\DTLite.exe
E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
E:\WINDOWS\System32\svchost.exe -k HTTPFilter
E:\Program Files\AIMP3\AIMP3.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Mozilla Firefox\plugin-container.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
mWinlogon: SFCDisable=-99 (0xffffff9d)
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - e:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - e:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - e:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [MCShield] e:\program files\mcshield\MCShieldRTM.exe
uRun: [MCShieldTray] e:\program files\mcshield\MCShieldTray.exe
uRun: [ctfmon.exe] e:\windows\system32\ctfmon.exe
uRun: [Mefcfo] e:\documents and settings\petar\application data\Mefcfo.exe
uRun: [Google Update] "e:\documents and settings\petar\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [DAEMON Tools Lite] "e:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [StartCCC] "e:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [avgnt] "e:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [GrooveMonitor] "e:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Malwarebytes' Anti-Malware] "e:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [SunJavaUpdateSched] "e:\program files\common files\java\java update\jusched.exe"
IE: E&xport to Microsoft Excel - e:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - e:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - e:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - e:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - [Link mogu videti samo ulogovani korisnici]
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
TCP: Interfaces\{71EF94A7-EECE-4023-8188-D3A42987AA45} : NameServer = 192.168.0.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - e:\progra~1\micros~2\office12\GR99D3~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - e:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - e:\progra~1\micros~2\office12\GRA8E1~1.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - e:\documents and settings\petar\application data\mozilla\firefox\profiles\i77265j5.default\
FF - plugin: e:\documents and settings\petar\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: e:\documents and settings\petar\application data\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: e:\documents and settings\petar\local settings\application data\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: e:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: e:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: e:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: e:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: e:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R1 avgio;avgio;e:\program files\avira\antivir desktop\avgio.sys [2011-6-21 11608]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;e:\windows\system32\drivers\dtsoftbus01.sys [2011-6-24 218688]
R2 Akamai;Akamai NetSession Interface;e:\windows\system32\svchost.exe -k Akamai [2004-8-3 14336]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;e:\program files\avira\antivir desktop\sched.exe [2011-6-21 136360]
R2 AntiVirService;Avira AntiVir Guard;e:\program files\avira\antivir desktop\avguard.exe [2011-6-21 269480]
R2 avgntflt;avgntflt;e:\windows\system32\drivers\avgntflt.sys [2011-6-21 66616]
R2 MBAMService;MBAMService;e:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-7-1 366640]
R3 MBAMProtector;MBAMProtector;e:\windows\system32\drivers\mbam.sys [2011-7-1 22712]
S2 gupdate;Google Update Service (gupdate);e:\program files\google\update\GoogleUpdate.exe [2011-7-10 136176]
S3 Ambfilt;Ambfilt;e:\windows\system32\drivers\Ambfilt.sys [2011-6-21 1691480]
S3 FLASHSYS;FLASHSYS;e:\program files\msi\live update 4\lu4\FlashSys.sys [2011-6-20 9216]
S3 GGSAFERDriver;GGSAFER Driver;\??\e:\program files\garena\safedrv.sys --> e:\program files\garena\safedrv.sys [?]
S3 gupdatem;Google Update Service (gupdatem);e:\program files\google\update\GoogleUpdate.exe [2011-7-10 136176]
S3 MsibiosDevice;MsibiosDevice;e:\program files\msi\live update 4\lu4\msibios.sys [2011-6-20 18432]
.
=============== Created Last 30 ================
.
2011-08-28 23:34:19 -------- d-----w- e:\documents and settings\petar\.jagex_cache_32
2011-08-23 21:07:44 -------- d-----w- e:\documents and settings\all users\application data\KONAMI
2011-08-22 23:10:24 -------- d-----w- e:\documents and settings\all users\application data\Sports Interactive
2011-08-22 23:09:55 -------- d-----w- e:\documents and settings\petar\local settings\application data\Sports Interactive
2011-08-22 23:09:55 -------- d-----w- e:\documents and settings\petar\application data\Sports Interactive
2011-08-22 22:30:03 -------- d--h--w- e:\program files\Zero G Registry
2011-08-22 22:02:58 -------- d--h--w- e:\documents and settings\petar\InstallAnywhere
2011-08-17 12:46:52 -------- d-----w- e:\documents and settings\petar\application data\Registry Mechanic
2011-08-17 11:20:28 -------- d-----w- e:\program files\CCleaner
2011-08-14 03:44:02 5632 ----a-w- e:\windows\system32\ptpusb.dll
2011-08-14 03:44:01 159232 ----a-w- e:\windows\system32\ptpusd.dll
2011-08-14 03:44:01 15104 -c--a-w- e:\windows\system32\dllcache\usbscan.sys
2011-08-14 03:44:01 15104 ----a-w- e:\windows\system32\drivers\usbscan.sys
2011-08-08 23:08:28 -------- d-----w- e:\documents and settings\petar\local settings\application data\Rockstar Games
2011-08-08 22:21:21 462864 ----a-w- e:\windows\system32\d3dx10_37.dll
2011-08-08 22:21:21 1420824 ----a-w- e:\windows\system32\D3DCompiler_37.dll
2011-08-08 22:21:20 3786760 ----a-w- e:\windows\system32\D3DX9_37.dll
2011-08-08 22:21:19 81768 ----a-w- e:\windows\system32\xinput1_3.dll
2011-08-08 22:21:15 -------- d-----w- e:\windows\system32\xlive
2011-08-08 22:21:15 -------- d-----w- e:\program files\Microsoft Games for Windows - LIVE
2011-08-08 21:55:16 -------- d-----w- e:\windows\system32\XPSViewer
2011-08-08 21:54:44 27648 ----a-w- e:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-08-08 21:54:39 14048 ------w- e:\windows\system32\spmsg2.dll
2011-08-07 04:45:59 221184 ----a-w- e:\windows\system32\wmpns.dll
2011-08-06 19:15:27 -------- d-----w- e:\program files\common files\Symantec Shared
2011-08-06 19:15:24 -------- d-----w- e:\windows\system32\drivers\nss\0305010.006
2011-08-06 19:15:24 -------- d-----w- e:\windows\system32\drivers\NSS
2011-08-06 19:15:24 -------- d-----w- e:\program files\Norton Security Scan
2011-08-06 19:15:23 -------- d-----w- e:\documents and settings\all users\application data\Norton
2011-08-06 19:15:22 -------- d-----w- e:\program files\NortonInstaller
2011-08-06 19:15:22 -------- d-----w- e:\documents and settings\all users\application data\NortonInstaller
2011-08-06 17:15:26 -------- d-----w- e:\windows\system32\Adobe
2011-08-06 17:13:04 -------- d-----w- e:\documents and settings\all users\application data\BigFishGamesCache
2011-08-04 06:13:44 385774350 ---ha-w- e:\program files\Nero-10.6.11300_trial.exe.part
2011-08-04 06:13:25 -------- d-----w- e:\program files\common files\Akamai
2011-08-04 06:03:06 -------- d-----w- e:\program files\MagicISO
.
==================== Find3M ====================
.
2011-08-17 12:38:13 404640 ----a-w- e:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-05 23:22:30 137464 ----a-w- e:\windows\system32\drivers\PnkBstrK.sys
2011-08-05 23:22:21 214520 ----a-w- e:\windows\system32\PnkBstrB.xtr
2011-08-05 23:22:21 214520 ----a-w- e:\windows\system32\PnkBstrB.exe
2011-07-25 02:49:47 94208 ----a-w- e:\windows\DIIUnin.exe
2011-07-25 02:49:47 2829 ----a-w- e:\windows\DIIUnin.pif
2011-07-24 07:40:35 73728 ----a-w- e:\windows\system32\javacpl.cpl
2011-07-24 07:40:34 472808 ----a-w- e:\windows\system32\deployJava1.dll
2011-07-21 22:46:31 75064 ----a-w- e:\windows\system32\PnkBstrA.exe
2011-07-07 09:47:37 98304 ----a-w- e:\windows\system32\CmdLineExt.dll
2011-07-07 02:52:42 41272 ----a-w- e:\windows\system32\drivers\mbamswissarmy.sys
2011-07-07 02:52:42 22712 ----a-w- e:\windows\system32\drivers\mbam.sys
2011-07-02 01:59:56 66616 ----a-w- e:\windows\system32\drivers\avgntflt.sys
2011-06-26 20:59:32 393 ----a-w- e:\documents and settings\petar\application data\6C.tmp
2011-06-26 18:57:49 393 ----a-w- e:\documents and settings\petar\application data\3E.tmp
2011-06-25 09:19:39 393 ----a-w- e:\documents and settings\petar\application data\35.tmp
2011-06-25 05:04:03 285 ----a-w- e:\documents and settings\petar\application data\24.tmp
2011-06-24 12:20:15 218688 ----a-w- e:\windows\system32\drivers\dtsoftbus01.sys
2011-06-23 02:33:31 0 ----a-w- e:\windows\system32\ConduitEngine.tmp
2011-06-21 19:26:47 431672 ----a-w- e:\windows\system32\drivers\sptd.sys
2011-06-20 08:52:40 0 ----a-w- e:\windows\ativpsrm.bin
2011-06-15 02:38:12 6359656 ----a-w- e:\windows\system32\drivers\RtkHDAud.sys
.
============= FINISH: 12:06:58.96 ===============


[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]


Sto se tice rootapeala. Nisam mogao da napravim log. Vec pet puta pokusavam, i svaki put kada pocne da radi scan racunar se zablokira i moram da ga restartujem.

• 1Ovo se svidja korisniku: ThePhilosopher
  
  Registruj se da bi pohvalio/la poruku!

Pozdrav Pek. Odradi sledece:


Preuzmi program OTM na Desktop.

Dvoklikom pokreni OTM.exe

U (levi) prozor programa (ispod Paste Instructions for Items to be Moved) iskopiraj sve što se nalazi unutar Kod polja:

:reg
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Mefcfo"=-

:files
e:\documents and settings\petar\application data\Mefcfo.exe
e:\documents and settings\petar\application data\6C.tmp
e:\documents and settings\petar\application data\3E.tmp
e:\documents and settings\petar\application data\35.tmp
e:\documents and settings\petar\application data\24.tmp

:Commands
[purity]
[emptytemp]
[EMPTYFLASH]
[Reboot]


Klikni MoveIt!
Po završetku procesa, u desnom prozoru programa (ispod Results), će se nalaziti tekst koji je potrebno iskopirati u poruku na forumu.


Ukoliko se pojavi upit:

Confirm ::The system requires a reboot to finish removing files.
Do you want to reboot now?

kliknuti Yes kako bi se kompjuter restartovao i proces bio dovršen.

Nakon ponovnog pokretanja sistema, logfile će se automatski otvoriti u Notepadu.
Potrebno je iskopirati sadržaj tog loga u poruku na forumu.



Ponovo pokreni DDS program i kopiraj mi svez DDS.txt log.

Reci mi ima li promena u radu.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

All processes killed
========== REGISTRY ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\\Mefcfo deleted successfully.
========== FILES ==========
File/Folder e:\documents and settings\petar\application data\Mefcfo.exe not found.
e:\documents and settings\petar\application data\6C.tmp moved successfully.
e:\documents and settings\petar\application data\3E.tmp moved successfully.
e:\documents and settings\petar\application data\35.tmp moved successfully.
e:\documents and settings\petar\application data\24.tmp moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 211738 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes

User: Petar
->Temp folder emptied: 18868967 bytes
->Temporary Internet Files folder emptied: 1523003 bytes
->Java cache emptied: 1625255 bytes
->FireFox cache emptied: 84707838 bytes
->Google Chrome cache emptied: 296176687 bytes
->Flash cache emptied: 17842256 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2272875 bytes
%systemroot%\System32 .tmp files removed: 2577 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 98304 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temp folder emptied: 1057 bytes
%systemroot%\system32\config\systemprofile\Local Settings\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 404.00 mb


OTM by OldTimer - Version 3.1.18.0 log created on 09012011_105312

Files moved on Reboot...
File E:\WINDOWS\temp\Perflib_Perfdata_718.dat not found!

Registry entries deleted on Reboot...

evo dds

E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\DAEMON Tools Lite\DTLite.exe
E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
E:\WINDOWS\System32\svchost.exe -k HTTPFilter
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Mozilla Firefox\plugin-container.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
mWinlogon: SFCDisable=-99 (0xffffff9d)
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - e:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - e:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - e:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [MCShield] e:\program files\mcshield\MCShieldRTM.exe
uRun: [MCShieldTray] e:\program files\mcshield\MCShieldTray.exe
uRun: [ctfmon.exe] e:\windows\system32\ctfmon.exe
uRun: [Google Update] "e:\documents and settings\petar\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [DAEMON Tools Lite] "e:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [StartCCC] "e:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [avgnt] "e:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [GrooveMonitor] "e:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Malwarebytes' Anti-Malware] "e:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [SunJavaUpdateSched] "e:\program files\common files\java\java update\jusched.exe"
IE: E&xport to Microsoft Excel - e:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - e:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - e:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - e:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - [Link mogu videti samo ulogovani korisnici]
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
TCP: Interfaces\{71EF94A7-EECE-4023-8188-D3A42987AA45} : NameServer = 192.168.0.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - e:\progra~1\micros~2\office12\GR99D3~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - e:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - e:\progra~1\micros~2\office12\GRA8E1~1.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - e:\documents and settings\petar\application data\mozilla\firefox\profiles\i77265j5.default\
FF - plugin: e:\documents and settings\petar\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: e:\documents and settings\petar\application data\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: e:\documents and settings\petar\local settings\application data\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: e:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: e:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: e:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: e:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: e:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R1 avgio;avgio;e:\program files\avira\antivir desktop\avgio.sys [2011-6-21 11608]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;e:\windows\system32\drivers\dtsoftbus01.sys [2011-6-24 218688]
R2 Akamai;Akamai NetSession Interface;e:\windows\system32\svchost.exe -k Akamai [2004-8-3 14336]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;e:\program files\avira\antivir desktop\sched.exe [2011-6-21 136360]
R2 AntiVirService;Avira AntiVir Guard;e:\program files\avira\antivir desktop\avguard.exe [2011-6-21 269480]
R2 avgntflt;avgntflt;e:\windows\system32\drivers\avgntflt.sys [2011-6-21 66616]
R2 MBAMService;MBAMService;e:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-7-1 366640]
R3 MBAMProtector;MBAMProtector;e:\windows\system32\drivers\mbam.sys [2011-7-1 22712]
S2 gupdate;Google Update Service (gupdate);e:\program files\google\update\GoogleUpdate.exe [2011-7-10 136176]
S3 Ambfilt;Ambfilt;e:\windows\system32\drivers\Ambfilt.sys [2011-6-21 1691480]
S3 FLASHSYS;FLASHSYS;e:\program files\msi\live update 4\lu4\FlashSys.sys [2011-6-20 9216]
S3 GGSAFERDriver;GGSAFER Driver;\??\e:\program files\garena\safedrv.sys --> e:\program files\garena\safedrv.sys [?]
S3 gupdatem;Google Update Service (gupdatem);e:\program files\google\update\GoogleUpdate.exe [2011-7-10 136176]
S3 MsibiosDevice;MsibiosDevice;e:\program files\msi\live update 4\lu4\msibios.sys [2011-6-20 18432]
S3 rootrepeal;rootrepeal;\??\e:\windows\system32\drivers\rootrepeal.sys --> e:\windows\system32\drivers\rootrepeal.sys [?]
.
=============== Created Last 30 ================
.
2011-09-01 17:53:12 -------- d-----w- E:\_OTM
2011-08-28 23:34:19 -------- d-----w- e:\documents and settings\petar\.jagex_cache_32
2011-08-23 21:07:44 -------- d-----w- e:\documents and settings\all users\application data\KONAMI
2011-08-22 23:10:24 -------- d-----w- e:\documents and settings\all users\application data\Sports Interactive
2011-08-22 23:09:55 -------- d-----w- e:\documents and settings\petar\local settings\application data\Sports Interactive
2011-08-22 23:09:55 -------- d-----w- e:\documents and settings\petar\application data\Sports Interactive
2011-08-22 22:30:03 -------- d--h--w- e:\program files\Zero G Registry
2011-08-22 22:02:58 -------- d--h--w- e:\documents and settings\petar\InstallAnywhere
2011-08-17 12:46:52 -------- d-----w- e:\documents and settings\petar\application data\Registry Mechanic
2011-08-17 11:20:28 -------- d-----w- e:\program files\CCleaner
2011-08-14 03:44:02 5632 ----a-w- e:\windows\system32\ptpusb.dll
2011-08-14 03:44:01 159232 ----a-w- e:\windows\system32\ptpusd.dll
2011-08-14 03:44:01 15104 -c--a-w- e:\windows\system32\dllcache\usbscan.sys
2011-08-14 03:44:01 15104 ----a-w- e:\windows\system32\drivers\usbscan.sys
2011-08-08 23:08:28 -------- d-----w- e:\documents and settings\petar\local settings\application data\Rockstar Games
2011-08-08 22:21:21 462864 ----a-w- e:\windows\system32\d3dx10_37.dll
2011-08-08 22:21:21 1420824 ----a-w- e:\windows\system32\D3DCompiler_37.dll
2011-08-08 22:21:20 3786760 ----a-w- e:\windows\system32\D3DX9_37.dll
2011-08-08 22:21:19 81768 ----a-w- e:\windows\system32\xinput1_3.dll
2011-08-08 22:21:15 -------- d-----w- e:\windows\system32\xlive
2011-08-08 22:21:15 -------- d-----w- e:\program files\Microsoft Games for Windows - LIVE
2011-08-08 21:55:16 -------- d-----w- e:\windows\system32\XPSViewer
2011-08-08 21:54:44 27648 ----a-w- e:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-08-08 21:54:39 14048 ------w- e:\windows\system32\spmsg2.dll
2011-08-07 04:45:59 221184 ----a-w- e:\windows\system32\wmpns.dll
2011-08-06 19:15:27 -------- d-----w- e:\program files\common files\Symantec Shared
2011-08-06 19:15:24 -------- d-----w- e:\windows\system32\drivers\nss\0305010.006
2011-08-06 19:15:24 -------- d-----w- e:\windows\system32\drivers\NSS
2011-08-06 19:15:24 -------- d-----w- e:\program files\Norton Security Scan
2011-08-06 19:15:23 -------- d-----w- e:\documents and settings\all users\application data\Norton
2011-08-06 19:15:22 -------- d-----w- e:\program files\NortonInstaller
2011-08-06 19:15:22 -------- d-----w- e:\documents and settings\all users\application data\NortonInstaller
2011-08-06 17:15:26 -------- d-----w- e:\windows\system32\Adobe
2011-08-06 17:13:04 -------- d-----w- e:\documents and settings\all users\application data\BigFishGamesCache
2011-08-04 06:13:44 385774350 ---ha-w- e:\program files\Nero-10.6.11300_trial.exe.part
2011-08-04 06:13:25 -------- d-----w- e:\program files\common files\Akamai
2011-08-04 06:03:06 -------- d-----w- e:\program files\MagicISO
.
==================== Find3M ====================
.
2011-08-17 12:38:13 404640 ----a-w- e:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-05 23:22:30 137464 ----a-w- e:\windows\system32\drivers\PnkBstrK.sys
2011-08-05 23:22:21 214520 ----a-w- e:\windows\system32\PnkBstrB.xtr
2011-08-05 23:22:21 214520 ----a-w- e:\windows\system32\PnkBstrB.exe
2011-07-25 02:49:47 94208 ----a-w- e:\windows\DIIUnin.exe
2011-07-25 02:49:47 2829 ----a-w- e:\windows\DIIUnin.pif
2011-07-24 07:40:35 73728 ----a-w- e:\windows\system32\javacpl.cpl
2011-07-24 07:40:34 472808 ----a-w- e:\windows\system32\deployJava1.dll
2011-07-21 22:46:31 75064 ----a-w- e:\windows\system32\PnkBstrA.exe
2011-07-07 09:47:37 98304 ----a-w- e:\windows\system32\CmdLineExt.dll
2011-07-07 02:52:42 41272 ----a-w- e:\windows\system32\drivers\mbamswissarmy.sys
2011-07-07 02:52:42 22712 ----a-w- e:\windows\system32\drivers\mbam.sys
2011-07-02 01:59:56 66616 ----a-w- e:\windows\system32\drivers\avgntflt.sys
2011-06-24 12:20:15 218688 ----a-w- e:\windows\system32\drivers\dtsoftbus01.sys
2011-06-21 19:26:47 431672 ----a-w- e:\windows\system32\drivers\sptd.sys
2011-06-20 08:52:40 0 ----a-w- e:\windows\ativpsrm.bin
2011-06-15 02:38:12 6359656 ----a-w- e:\windows\system32\drivers\RtkHDAud.sys
.
============= FINISH: 10:57:07.57 ===============

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Nisi lepo kopirao DDS log.

I nisi mi odgovorio ima li promena u radi PC-a.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Izvinjavam se. Sad sam video da si pitao za promene u radu. Ima definitivno sad sam isprobavao neke igrice koje su seckale, i mozila ne blokira.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 1.6.0_26
Run by Petar at 11:03:26 on 2011-09-01
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1269 [GMT -7:00]
.
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
E:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\Avira\AntiVir Desktop\sched.exe
E:\WINDOWS\System32\svchost.exe -k Akamai
E:\Program Files\Avira\AntiVir Desktop\avguard.exe
E:\Program Files\Bonjour\mDNSResponder.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Java\jre6\bin\jqs.exe
E:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
E:\Program Files\Avira\AntiVir Desktop\avshadow.exe
E:\WINDOWS\system32\PnkBstrA.exe
E:\WINDOWS\system32\svchost.exe -k imgsvc
E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
E:\WINDOWS\RTHDCPL.EXE
E:\Program Files\Avira\AntiVir Desktop\avgnt.exe
E:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
E:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
E:\Program Files\Common Files\Java\Java Update\jusched.exe
E:\Program Files\MCShield\MCShieldRTM.exe
E:\Program Files\MCShield\MCShieldTray.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\DAEMON Tools Lite\DTLite.exe
E:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
E:\WINDOWS\System32\svchost.exe -k HTTPFilter
E:\Program Files\Mozilla Firefox\firefox.exe
E:\Program Files\Mozilla Firefox\plugin-container.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
mWinlogon: SFCDisable=-99 (0xffffff9d)
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - e:\progra~1\micros~2\office12\GRA8E1~1.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - e:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - e:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
uRun: [MCShield] e:\program files\mcshield\MCShieldRTM.exe
uRun: [MCShieldTray] e:\program files\mcshield\MCShieldTray.exe
uRun: [ctfmon.exe] e:\windows\system32\ctfmon.exe
uRun: [Google Update] "e:\documents and settings\petar\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [DAEMON Tools Lite] "e:\program files\daemon tools lite\DTLite.exe" -autorun
mRun: [StartCCC] "e:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [avgnt] "e:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [GrooveMonitor] "e:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Malwarebytes' Anti-Malware] "e:\program files\malwarebytes' anti-malware\mbamgui.exe" /starttray
mRun: [SunJavaUpdateSched] "e:\program files\common files\java\java update\jusched.exe"
IE: E&xport to Microsoft Excel - e:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - e:\program files\messenger\msmsgs.exe
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - e:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - e:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - [Link mogu videti samo ulogovani korisnici]
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
TCP: Interfaces\{71EF94A7-EECE-4023-8188-D3A42987AA45} : NameServer = 192.168.0.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - e:\progra~1\micros~2\office12\GR99D3~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - e:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - e:\progra~1\micros~2\office12\GRA8E1~1.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - e:\documents and settings\petar\application data\mozilla\firefox\profiles\i77265j5.default\
FF - plugin: e:\documents and settings\petar\application data\mozilla\plugins\npgoogletalk.dll
FF - plugin: e:\documents and settings\petar\application data\mozilla\plugins\npgtpo3dautoplugin.dll
FF - plugin: e:\documents and settings\petar\local settings\application data\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: e:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: e:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: e:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: e:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: e:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
============= SERVICES / DRIVERS ===============
.
R1 avgio;avgio;e:\program files\avira\antivir desktop\avgio.sys [2011-6-21 11608]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;e:\windows\system32\drivers\dtsoftbus01.sys [2011-6-24 218688]
R2 Akamai;Akamai NetSession Interface;e:\windows\system32\svchost.exe -k Akamai [2004-8-3 14336]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;e:\program files\avira\antivir desktop\sched.exe [2011-6-21 136360]
R2 AntiVirService;Avira AntiVir Guard;e:\program files\avira\antivir desktop\avguard.exe [2011-6-21 269480]
R2 avgntflt;avgntflt;e:\windows\system32\drivers\avgntflt.sys [2011-6-21 66616]
R2 MBAMService;MBAMService;e:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-7-1 366640]
R3 MBAMProtector;MBAMProtector;e:\windows\system32\drivers\mbam.sys [2011-7-1 22712]
S2 gupdate;Google Update Service (gupdate);e:\program files\google\update\GoogleUpdate.exe [2011-7-10 136176]
S3 Ambfilt;Ambfilt;e:\windows\system32\drivers\Ambfilt.sys [2011-6-21 1691480]
S3 FLASHSYS;FLASHSYS;e:\program files\msi\live update 4\lu4\FlashSys.sys [2011-6-20 9216]
S3 GGSAFERDriver;GGSAFER Driver;\??\e:\program files\garena\safedrv.sys --> e:\program files\garena\safedrv.sys [?]
S3 gupdatem;Google Update Service (gupdatem);e:\program files\google\update\GoogleUpdate.exe [2011-7-10 136176]
S3 MsibiosDevice;MsibiosDevice;e:\program files\msi\live update 4\lu4\msibios.sys [2011-6-20 18432]
S3 rootrepeal;rootrepeal;\??\e:\windows\system32\drivers\rootrepeal.sys --> e:\windows\system32\drivers\rootrepeal.sys [?]
.
=============== Created Last 30 ================
.
2011-09-01 17:53:12 -------- d-----w- E:\_OTM
2011-08-28 23:34:19 -------- d-----w- e:\documents and settings\petar\.jagex_cache_32
2011-08-23 21:07:44 -------- d-----w- e:\documents and settings\all users\application data\KONAMI
2011-08-22 23:10:24 -------- d-----w- e:\documents and settings\all users\application data\Sports Interactive
2011-08-22 23:09:55 -------- d-----w- e:\documents and settings\petar\local settings\application data\Sports Interactive
2011-08-22 23:09:55 -------- d-----w- e:\documents and settings\petar\application data\Sports Interactive
2011-08-22 22:30:03 -------- d--h--w- e:\program files\Zero G Registry
2011-08-22 22:02:58 -------- d--h--w- e:\documents and settings\petar\InstallAnywhere
2011-08-17 12:46:52 -------- d-----w- e:\documents and settings\petar\application data\Registry Mechanic
2011-08-17 11:20:28 -------- d-----w- e:\program files\CCleaner
2011-08-14 03:44:02 5632 ----a-w- e:\windows\system32\ptpusb.dll
2011-08-14 03:44:01 159232 ----a-w- e:\windows\system32\ptpusd.dll
2011-08-14 03:44:01 15104 -c--a-w- e:\windows\system32\dllcache\usbscan.sys
2011-08-14 03:44:01 15104 ----a-w- e:\windows\system32\drivers\usbscan.sys
2011-08-08 23:08:28 -------- d-----w- e:\documents and settings\petar\local settings\application data\Rockstar Games
2011-08-08 22:21:21 462864 ----a-w- e:\windows\system32\d3dx10_37.dll
2011-08-08 22:21:21 1420824 ----a-w- e:\windows\system32\D3DCompiler_37.dll
2011-08-08 22:21:20 3786760 ----a-w- e:\windows\system32\D3DX9_37.dll
2011-08-08 22:21:19 81768 ----a-w- e:\windows\system32\xinput1_3.dll
2011-08-08 22:21:15 -------- d-----w- e:\windows\system32\xlive
2011-08-08 22:21:15 -------- d-----w- e:\program files\Microsoft Games for Windows - LIVE
2011-08-08 21:55:16 -------- d-----w- e:\windows\system32\XPSViewer
2011-08-08 21:54:44 27648 ----a-w- e:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2011-08-08 21:54:39 14048 ------w- e:\windows\system32\spmsg2.dll
2011-08-07 04:45:59 221184 ----a-w- e:\windows\system32\wmpns.dll
2011-08-06 19:15:27 -------- d-----w- e:\program files\common files\Symantec Shared
2011-08-06 19:15:24 -------- d-----w- e:\windows\system32\drivers\nss\0305010.006
2011-08-06 19:15:24 -------- d-----w- e:\windows\system32\drivers\NSS
2011-08-06 19:15:24 -------- d-----w- e:\program files\Norton Security Scan
2011-08-06 19:15:23 -------- d-----w- e:\documents and settings\all users\application data\Norton
2011-08-06 19:15:22 -------- d-----w- e:\program files\NortonInstaller
2011-08-06 19:15:22 -------- d-----w- e:\documents and settings\all users\application data\NortonInstaller
2011-08-06 17:15:26 -------- d-----w- e:\windows\system32\Adobe
2011-08-06 17:13:04 -------- d-----w- e:\documents and settings\all users\application data\BigFishGamesCache
2011-08-04 06:13:44 385774350 ---ha-w- e:\program files\Nero-10.6.11300_trial.exe.part
2011-08-04 06:13:25 -------- d-----w- e:\program files\common files\Akamai
2011-08-04 06:03:06 -------- d-----w- e:\program files\MagicISO
.
==================== Find3M ====================
.
2011-08-17 12:38:13 404640 ----a-w- e:\windows\system32\FlashPlayerCPLApp.cpl
2011-08-05 23:22:30 137464 ----a-w- e:\windows\system32\drivers\PnkBstrK.sys
2011-08-05 23:22:21 214520 ----a-w- e:\windows\system32\PnkBstrB.xtr
2011-08-05 23:22:21 214520 ----a-w- e:\windows\system32\PnkBstrB.exe
2011-07-25 02:49:47 94208 ----a-w- e:\windows\DIIUnin.exe
2011-07-25 02:49:47 2829 ----a-w- e:\windows\DIIUnin.pif
2011-07-24 07:40:35 73728 ----a-w- e:\windows\system32\javacpl.cpl
2011-07-24 07:40:34 472808 ----a-w- e:\windows\system32\deployJava1.dll
2011-07-21 22:46:31 75064 ----a-w- e:\windows\system32\PnkBstrA.exe
2011-07-07 09:47:37 98304 ----a-w- e:\windows\system32\CmdLineExt.dll
2011-07-07 02:52:42 41272 ----a-w- e:\windows\system32\drivers\mbamswissarmy.sys
2011-07-07 02:52:42 22712 ----a-w- e:\windows\system32\drivers\mbam.sys
2011-07-02 01:59:56 66616 ----a-w- e:\windows\system32\drivers\avgntflt.sys
2011-06-24 12:20:15 218688 ----a-w- e:\windows\system32\drivers\dtsoftbus01.sys
2011-06-21 19:26:47 431672 ----a-w- e:\windows\system32\drivers\sptd.sys
2011-06-20 08:52:40 0 ----a-w- e:\windows\ativpsrm.bin
2011-06-15 02:38:12 6359656 ----a-w- e:\windows\system32\drivers\RtkHDAud.sys
.
============= FINISH: 11:03:35.48 ===============

[Link mogu videti samo ulogovani korisnici]

• 1Ovo se svidja korisniku: ThePhilosopher
  
  Registruj se da bi pohvalio/la poruku!

@Pek

Logovi su sada cisti i nema tragove aktivnog malware-a.


Ponovo pokreni program OTM i klikni na dugme CleanUp!


Takodje,logovi pokazuju ostatke od Norton AntiVirusa. Potrebno je ukloniti njihove ostatke.


Preuzmi Norton Uninstaller i sacuvaj ga na Desktop.
Pokreni ga dvoklikom i isprati uputstvo.


To je to.

• 1Ovo se svidja korisniku: ThePhilosopher
  
  Registruj se da bi pohvalio/la poruku!

Hvala kompjuter radi kako treba.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Opet mi se isto desava sa racunarom. Da li imas vremena da mi pomognes?

• 1Ovo se svidja korisniku: ThePhilosopher
  
  Registruj se da bi pohvalio/la poruku!

Pek, otvori temu u Windows forumu, najverovatnije je problem druge prirode, nije malware.

Moje je misljenje da ti audio drajver pravi problem.

Ako ne budes uspeo da resis problem, onda se vrati u ambulantu i postavi odgovarajuce logove da pogledamo.