Avira ili neki malwer

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Napisano: 08 Feb 2026 19:55

Avira uporno obija da se deinstalira ,svakim restartom se vraca ..imam utisak da blokira neke exe fajlove ,probao deinstalaciju sa Revo ,kao deinstalirao ali opet je tu ....Evo izvestaja Frst
[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

Dopuna: 08 Feb 2026 19:57

izvestaj Frst
[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

Dopuna: 08 Feb 2026 19:59

Trenutno sam u Safe modu , ne dozvoljava mi izlaz na net ni Opera ni Crome

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Zdravo,

zbog nekih problema sa hostingom na ovom sajtu fotkica, ne mogu da vidim logove koje si okacio, moras da mi ih kopiras ovde u temu.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Moras tekst da mi kopiras.

Desni klik, copy-paste.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 09 Feb 2026 20:47

Kako da postavim ? Omatorilo se ..

Dopuna: 09 Feb 2026 20:53

Gde? u koje polje...

Dopuna: 09 Feb 2026 21:07

Ran by Leki (administrator) on LEKI-PC (08-02-2026 19:40:04)
Running from C:\Users\Leki\Desktop\FRST64.exe
Loaded Profiles: Leki
Platform: Microsoft Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Default browser: Opera
Boot Mode: Safe Mode (with Networking)

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Lespeed Technology Co., Ltd -> WiseCleaner.com) C:\Program Files (x86)\Wise\Wise Care 365\WiseTray.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [16781824 2017-01-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\amd64\CLIStart.exe [766208 2013-12-06] (Advanced Micro Devices, Inc. -> Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 <==== ATTENTION
HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\Run: [Opera Browser Assistant] => C:\Users\Leki\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4124576 2023-10-30] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\Run: [] => [X]
HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\Policies\system: [shell] explorer.exe <==== ATTENTION
HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\MountPoints2: {24fbeec9-e295-11f0-82c4-001e8cca32cb} - F:\AutoRun.exe
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\109.0.5414.120\Installer\chrmstp.exe [2025-06-15] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{2179C5D3-EBFF-11CF-B6FD-00AA00B4E220}] ->
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{22d6f312-b0f6-11d0-94ab-0080c74c7e95}] -> rundll32.exe advpack.dll,LaunchINFSection C:\Windows\INF\mswmp.inf,PerUserStub
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {36C80B1B-AE5B-4F73-9D6D-A2662002B9A8} - \Opera scheduled assistant Autoupdate 1750019549 -> No File <==== ATTENTION
Task: {0FF4A9F8-0865-4EAD-A0AC-AE86A7C659E9} - System32\Tasks\{F084809C-458D-49AF-8A40-3EA57D3E3807} => D:\AutoPlay\Docs\Reflexive Arcade Games - Word.exe (No File)
Task: {5B942233-F565-4A91-8ABD-6F8B6C33ECC8} - System32\Tasks\Avira_FallbackUpdater => C:\Windows\System32\sc.exe [45056 2009-07-14] (Microsoft Windows -> Microsoft Corporation) -> start AviraFallbackUpdater Delayed=false
Task: {66322590-89FD-48D0-8AD1-B5AE98E8C97D} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {66322590-89FD-48D0-8AD1-B5AE98E8C97D} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {66322590-89FD-48D0-8AD1-B5AE98E8C97D} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {639FDAB5-0B4D-427C-ACA1-4D7A9C2DBFFC} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [263760 2026-02-04] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {39AB6BCA-3808-4EE8-8AAA-6DE41B6B4262} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1800936 2026-02-04] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {7C256863-0104-410F-9E41-AA5D21A55C84} - System32\Tasks\Avira_Security_Update => C:\Windows\System32\net.exe [55808 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
Task: {0C90D70F-8163-4756-9860-A3A3756A4E37} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [36817136 2025-06-16] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {5348E736-16A8-4D62-8C62-07F83606C5DA} - System32\Tasks\Games\UpdateCheck_S-1-5-21-2597519041-1624793328-977483392-1001 => {CA22F5B1-E06F-4A2B-94FC-21E87FE53781} C:\Windows\System32\gameux.dll [2746880 2010-11-21] (Microsoft Windows -> Microsoft Corporation)
Task: {60944755-060B-40C2-963F-64382D1CD1A2} - System32\Tasks\GoogleUpdateTaskMachineCore{EE5FD87C-B1AA-44D1-B554-F32F4D0FF860} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162080 2025-06-15] (Google LLC -> Google LLC)
Task: {6C060FEC-3A4B-4A6C-B293-24F2AC58A04D} - System32\Tasks\GoogleUpdateTaskMachineUA{0489A318-2785-412B-9204-C1C86FC78AD4} => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [162080 2025-06-15] (Google LLC -> Google LLC)
Task: {F7480953-3307-4B18-BC2B-E85168C1AFB2} - System32\Tasks\Opera scheduled Autoupdate 1750019548 => C:\Users\Leki\AppData\Local\Programs\Opera\launcher.exe [1977760 2023-10-30] (Opera Norway AS -> Opera Software)
Task: {C5B89131-9ED1-4386-9B7F-C1BBCE4E3BD3} - System32\Tasks\Tweaking.com - Windows Repair Tray Icon => C:\Program Files (x86)\Tweaking.com\Windows Repair (All in One)\WR_Tray_Icon.exe [220816 2019-09-30] (Tweaking LLC -> Tweaking.com)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 89.216.1.30 89.216.1.40 89.216.1.50
Tcpip\..\Interfaces\{2BFE0DD9-34F4-46C4-BF08-026F994D7C0E}: [DhcpNameServer] 89.216.1.30 89.216.1.40 89.216.1.50
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

FireFox:
========
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-09-24] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.cpdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-09-24] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.fdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-09-24] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xdp -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-09-24] (FOXIT SOFTWARE INC. -> Foxit Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/vnd.xfdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2020-09-24] (FOXIT SOFTWARE INC. -> Foxit Corporation)

Edge:
=======
Edge HKLM-x32\...\Edge\Extension: [caiblelclndcckfafdaggpephhgfpoip]
Edge HKLM-x32\...\Edge\Extension: [emgfgdclgfeldebanedpihppahgngnle]

Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\Leki\AppData\Local\Google\Chrome\User Data\Default [2026-02-08]
CHR StartupUrls: Default -> "hxxps://www.google.com/"
CHR Extension: (Avira Password Manager) - C:\Users\Leki\AppData\Local\Google\Chrome\User Data\Default\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2025-06-16]
CHR Extension: (Avira Safe Shopping) - C:\Users\Leki\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2025-12-25]
CHR Extension: (uBlock Origin) - C:\Users\Leki\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2025-12-25]
CHR Extension: (Avira Browser Safety) - C:\Users\Leki\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2025-12-25]
CHR Extension: (Google Docs Offline) - C:\Users\Leki\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-06-15]
CHR Extension: (Recordify Title Discover) - C:\Users\Leki\AppData\Local\Google\Chrome\User Data\Default\Extensions\kkgbclpocodjecojibeaaglcgndegljl [2025-11-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Leki\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2025-06-15]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]

Opera:
=======
OPR Profile: C:\Users\Leki\AppData\Roaming\Opera Software\Opera Stable [2026-02-08]
OPR DownloadDir: E:\Programi
OPR Notifications: Opera Stable -> [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici]
OPR DefaultSuggestURL: Opera Stable -> [Link mogu videti samo ulogovani korisnici]{searchTerms}&ie={inputEncoding}&oe={outputEncoding}
OPR Extension: (Rich Hints Agent) - C:\Users\Leki\AppData\Roaming\Opera Software\Opera Stable\Extensions\enegjkbbakeegngfapepobipndnebkdk [2026-02-06]
OPR Extension: (Opera Wallet) - C:\Users\Leki\AppData\Roaming\Opera Software\Opera Stable\Extensions\gojhcdgcpbpfigcaejpfhfegekdgiblk [2025-07-30]
OPR Extension: (Amazon Assistant Promotion) - C:\Users\Leki\AppData\Roaming\Opera Software\Opera Stable\Extensions\kbmoiomgmchbpihhdpabemajcbjpcijk [2025-06-15]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [344064 2013-12-06] (Advanced Micro Devices, Inc.) [File not signed]
S2 AviraFallbackUpdater; C:\Program Files (x86)\Avira\Fallback Updater\Avira.Spotlight.FallbackUpdater.exe [6843728 2025-06-16] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [2977248 2024-07-16] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [270848 2026-02-04] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [300800 2026-02-04] (Avira Operations GmbH -> Avira Operations GmbH)
S2 EndpointProtectionService; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [8930944 2023-01-31] (Avira Operations GmbH -> Avira Operations GmbH)
S3 EndpointProtectionService2; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [8930944 2023-01-31] (Avira Operations GmbH -> Avira Operations GmbH)
S2 FoxitReaderUpdateService; C:\Program Files (x86)\Foxit Software\Foxit Reader\FoxitReaderUpdateService.exe [2357864 2020-08-30] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [8965728 2025-11-30] (Malwarebytes Inc. -> Malwarebytes)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
S3 WiseBootAssistant; C:\Program Files (x86)\Wise\Wise Care 365\BootTime.exe [651216 2023-09-11] (Lespeed Technology Co., Ltd -> WiseCleaner.com)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AODDriver4.2.0; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [59648 2013-09-19] (Advanced Micro Devices, Inc. -> Advanced Micro Devices)
R0 BdNet; C:\Windows\System32\DRIVERS\BdNet.sys [180360 2023-01-31] (BullGuard LTD -> BullGuard Ltd.)
S1 BdSentry; C:\Windows\System32\DRIVERS\BdSentry.sys [219448 2023-01-26] (BullGuard LTD -> Avira Operations GmbH)
S3 LSI_SAS3; C:\Windows\system32\drivers\lsi_sas3.sys [88776 2014-09-25] (LSI Corporation -> LSI Corporation)
S3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [239568 2025-11-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S3 megasas2; C:\Windows\system32\drivers\megasas2.sys [60104 2014-07-03] (LSI Corporation -> LSI Corporation)
R1 netprotection_network_filter; C:\Windows\System32\drivers\netprotection_network_filter.sys [92416 2023-01-21] (Avira Operations GmbH -> Avira Operations GmbH)
S3 netprotection_network_filter2; C:\Windows\System32\drivers\netprotection_network_filter2.sys [91752 2023-01-21] (Avira Operations GmbH -> Avira Operations GmbH)
S3 nusb3hub; C:\Windows\system32\drivers\nusb3hub.sys [80384 2010-12-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
S3 nusb3xhc; C:\Windows\system32\drivers\nusb3xhc.sys [181248 2010-12-10] (Microsoft Windows Hardware Compatibility Publisher -> Renesas Electronics Corporation)
S3 rrcflt; C:\Windows\System32\DRIVERS\rrcflt.sys [37936 2025-04-25] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)
S2 rtp_filesystem_filter; C:\Windows\System32\DRIVERS\rtp_filesystem_filter.sys [230408 2023-01-30] (Avira Operations GmbH -> Avira Operations GmbH)
S1 rtp_process_monitor; C:\Windows\System32\DRIVERS\rtp_process_monitor.sys [224512 2023-01-30] (Avira Operations GmbH -> Avira Operations GmbH)
S1 rtp_traverse; C:\Windows\System32\DRIVERS\rtp_traverse.sys [62632 2023-01-30] (Avira Operations GmbH -> Avira Operations GmbH)
S3 WiseHDInfo; C:\Windows\WiseHDInfo64.dll [33864 2026-01-04] (Beijing Lang Xingda Network Technology Co., Ltd -> wisecleaner.com)
U4 DiagTrack; no ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-02-08 19:40 - 2026-02-08 19:40 - 000014787 _____ C:\Users\Leki\Desktop\FRST.txt
2026-02-08 19:39 - 2026-02-08 19:40 - 000000000 ____D C:\FRST
2026-02-08 19:38 - 2026-02-08 19:38 - 002447360 _____ (Farbar) C:\Users\Leki\Desktop\FRST64.exe
2026-02-08 19:24 - 2023-01-21 10:46 - 000091752 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\netprotection_network_filter2.sys
2026-02-08 19:08 - 2026-02-08 19:08 - 000000975 _____ C:\Users\Public\Desktop\WinRAR.lnk
2026-02-08 19:07 - 2026-02-08 19:07 - 000000000 ____D C:\ProgramData\VS Revo Group
2026-02-08 19:07 - 2026-02-08 19:07 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Registry Cleaner
2026-02-07 21:22 - 2023-01-21 10:46 - 000092416 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\netprotection_network_filter.sys
2026-02-07 21:20 - 2023-01-31 10:26 - 000180360 _____ (BullGuard Ltd.) C:\Windows\system32\Drivers\BdNet.sys
2026-02-07 21:20 - 2023-01-30 15:23 - 000230408 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\rtp_filesystem_filter.sys
2026-02-07 21:20 - 2023-01-30 15:23 - 000224512 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\rtp_process_monitor.sys
2026-02-07 21:20 - 2023-01-30 15:23 - 000062632 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\rtp_traverse.sys
2026-02-07 21:20 - 2023-01-26 15:06 - 000219448 _____ (Avira Operations GmbH) C:\Windows\system32\Drivers\BdSentry.sys
2026-02-06 21:25 - 2026-02-08 19:07 - 000000000 ____D C:\Program Files\VS Revo Group
2026-02-06 21:25 - 2026-02-06 21:25 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2026-02-06 21:09 - 2026-02-06 21:09 - 000003710 _____ C:\Windows\system32\Tasks\Avira_Security_Maintenance
2026-02-06 21:09 - 2026-02-06 21:09 - 000003232 _____ C:\Windows\system32\Tasks\Avira_Security_Service_SCM_Watchdog
2026-02-06 21:09 - 2026-02-06 21:09 - 000002648 _____ C:\Windows\system32\Tasks\Avira_Security_Systray
2026-02-06 21:01 - 2026-02-06 21:02 - 000000225 _____ C:\ProgramData\VpnSharedSettings.config
2026-02-06 19:23 - 2026-02-06 19:23 - 000000000 ____D C:\ProgramData\Endpoint Protection SDK
2026-02-06 19:22 - 2026-02-06 21:02 - 000000225 _____ C:\ProgramData\VpnSharedSettings.backup
2026-02-06 19:04 - 2026-02-06 19:04 - 000000000 ____D C:\Windows\system32\Tasks\Avira
2026-02-06 18:37 - 2026-02-06 19:35 - 000000000 ____D C:\Windows\system32\appmgmt
2026-02-05 20:32 - 2026-02-05 20:32 - 000000000 ____D C:\RegBackup
2026-02-04 19:10 - 2026-02-04 19:10 - 000000000 ____D C:\Users\Leki\AppData\Roaming\Microsoft\Vault
2026-01-31 20:47 - 2026-02-04 18:40 - 000000000 ____D C:\Program Files (x86)\Pingus
2026-01-31 20:47 - 2026-01-31 20:47 - 000000000 ____D C:\Users\Leki\.pingus
2026-01-26 22:44 - 2026-01-26 22:44 - 000000000 ____D C:\Users\Leki\AppData\Local\CEF
2026-01-26 22:32 - 2026-01-30 21:20 - 000000000 ____D C:\Users\Leki\AppData\Local\Bluestacks
2026-01-26 22:32 - 2026-01-26 22:35 - 000000000 ____D C:\Users\Public\BlueStacks

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2026-02-08 19:33 - 2025-12-25 19:16 - 000000000 ____D C:\Users\Leki\AppData\Roaming\Wise Care 365
2026-02-08 19:31 - 2025-10-30 20:13 - 000000000 ____D C:\Users\Leki\AppData\Local\CrashDumps
2026-02-08 19:31 - 2009-07-14 06:13 - 000781298 _____ C:\Windows\system32\PerfStringBackup.INI
2026-02-08 19:31 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2026-02-08 19:27 - 2025-06-16 12:19 - 000000000 ____D C:\Program Files\WinRAR
2026-02-08 19:26 - 2025-06-16 05:55 - 001076584 _____ C:\Windows\system32\rtp.db
2026-02-08 19:13 - 2025-09-04 09:10 - 000000000 ____D C:\Users\Leki\Desktop\Alati
2026-02-08 19:08 - 2025-11-29 17:55 - 000000000 ____D C:\Users\Leki\AppData\Local\VS Revo Group
2026-02-08 19:08 - 2025-06-16 12:20 - 000001158 _____ C:\ProgramData\Microsoft\Windows\Start Menu\WinRAR.lnk
2026-02-08 19:08 - 2025-06-16 12:20 - 000000000 ____D C:\Users\Leki\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2026-02-08 19:08 - 2025-06-16 12:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2026-02-08 19:07 - 2025-06-15 21:35 - 000000000 ____D C:\Program Files (x86)\Google
2026-02-08 18:56 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2026-02-08 00:16 - 2009-07-14 05:45 - 000027120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2026-02-08 00:16 - 2009-07-14 05:45 - 000027120 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2026-02-07 21:20 - 2025-06-16 05:54 - 000000000 ____D C:\Program Files\Avira
2026-02-07 21:20 - 2025-06-16 05:39 - 000000000 ____D C:\ProgramData\Avira
2026-02-06 22:11 - 2025-06-16 12:37 - 000000000 ____D C:\Users\Leki\Desktop\Games
2026-02-06 21:34 - 2025-12-26 21:39 - 000000000 ____D C:\Users\Leki\AppData\Roaming\Disc-Soft
2026-02-06 21:34 - 2025-12-26 21:39 - 000000000 ____D C:\ProgramData\Disc-Soft
2026-02-06 21:09 - 2025-06-16 05:54 - 000003310 _____ C:\Windows\system32\Tasks\Avira_Security_Update
2026-02-06 21:09 - 2025-06-16 05:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2026-02-06 21:04 - 2025-06-16 05:53 - 000000000 ____D C:\Program Files (x86)\Avira
2026-02-06 21:01 - 2025-06-16 12:21 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\100% Free Hearts
2026-02-06 21:01 - 2025-06-15 12:22 - 000000000 ____D C:\Users\Leki
2026-02-06 21:00 - 2025-12-30 17:55 - 000000000 ____D C:\Program Files (x86)\123 Free Solitaire
2026-02-06 21:00 - 2025-07-12 20:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Foxit Reader
2026-02-06 21:00 - 2025-06-16 21:08 - 000000000 ____D C:\Users\Leki\AppData\Roaming\Pardolabs
2026-02-06 21:00 - 2025-06-16 21:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Free Chess
2026-02-06 21:00 - 2025-06-16 21:08 - 000000000 ____D C:\Program Files (x86)\Free Chess
2026-02-06 21:00 - 2025-06-16 20:24 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GameTop.com
2026-02-06 21:00 - 2025-06-16 20:24 - 000000000 ____D C:\Program Files (x86)\GameTop.com
2026-02-06 21:00 - 2025-06-16 12:52 - 000000000 ____D C:\ProgramData\Foxit ContentPlatform
2026-02-06 21:00 - 2025-06-16 12:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio Entertainment Ltd
2026-02-06 21:00 - 2025-06-16 05:57 - 000000000 ____D C:\Users\Public\Security Sessions
2026-02-06 21:00 - 2025-06-16 05:54 - 000000000 ____D C:\Users\Public\Speedup Sessions
2026-02-06 21:00 - 2025-06-16 05:54 - 000000000 ____D C:\Users\Leki\AppData\Local\Avira
2026-02-06 21:00 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2026-02-06 21:00 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\registration
2026-02-06 21:00 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\AppCompat
2026-02-06 20:59 - 2025-06-16 12:21 - 000000000 ____D C:\Program Files (x86)\DreamQuest
2026-02-05 19:39 - 2025-12-30 19:49 - 050823168 _____ C:\Windows\system32\config\SOFTWARE.rhk
2026-02-05 19:39 - 2025-12-30 19:49 - 000225280 _____ C:\Windows\system32\config\DEFAULT.rhk
2026-02-05 19:39 - 2025-12-30 19:49 - 000065536 _____ C:\Windows\system32\config\SAM.rhk
2026-02-05 19:39 - 2025-12-30 19:49 - 000024576 _____ C:\Windows\system32\config\SECURITY.rhk
2026-01-31 19:24 - 2025-11-29 17:36 - 000000000 ____D C:\ProgramData\Licenses
2026-01-31 19:24 - 2025-11-29 17:34 - 000000000 ____D C:\Program Files (x86)\Trojan Remover
2026-01-31 18:47 - 2025-10-05 18:15 - 000000000 ____D C:\ProgramData\TEMP
2026-01-31 18:44 - 2025-12-30 17:54 - 000000000 ____D C:\Users\Leki\AppData\Roaming\Microsoft\Windows Photo Viewer
2026-01-31 18:24 - 2025-11-30 18:03 - 000000000 ____D C:\Users\Leki\AppData\Local\Malwarebytes
2026-01-24 19:57 - 2025-06-16 12:26 - 000000000 ____D C:\Users\Leki\AppData\Roaming\Rovio

==================== Files in the root of some directories ========

2025-06-15 22:06 - 2025-06-15 22:06 - 000000017 _____ () C:\Users\Leki\AppData\Local\resmon.resmoncfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)



safeboot: Network => The system is configured to boot to Safe Mode <==== ATTENTION

LastRegBack: 2026-02-01 14:33
==================== End of FRST.txt ========================

Dopuna: 09 Feb 2026 21:08

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 07-02-2026
Ran by Leki (08-02-2026 19:41:20)
Running from C:\Users\Leki\Desktop
Microsoft Windows 7 Professional Service Pack 1 (X64) (2025-06-15 11:22:13)
Boot Mode: Safe Mode (with Networking)
==========================================================


==================== Accounts: =============================

(If an entry is included in the fixlist, it will be removed.)

Administrator (S-1-5-21-2597519041-1624793328-977483392-500 - Administrator - Disabled)
Guest (S-1-5-21-2597519041-1624793328-977483392-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2597519041-1624793328-977483392-1002 - Limited - Enabled)
Leki (S-1-5-21-2597519041-1624793328-977483392-1001 - Administrator - Enabled) => C:\Users\Leki

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Security (Enabled - Up to date) {76C0BF9F-9FD3-D249-DE2F-7A33A59B9258}
AS: Avira Security (Enabled - Up to date) {CDA15E7B-B9E9-DDC7-E49F-4141DE1CD8E5}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Avira Security (Enabled) {4EFB3EBA-D5BC-D311-F570-D3065B48D523}

==================== Installed Programs ======================

(Only the adware programs with "Hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

100% Free Hearts 7.18 (HKLM-x32\...\FreeHearts) (Version: 7.18 - DreamQuest)
123 Free Solitaire v12.1 (HKLM-x32\...\123 Free Solitaire_is1) (Version: - TreeCardGames)
1AVCenter Licensed to Registered User version 3.4.6.40 (HKLM-x32\...\{C3208FCF-EAF5-43EE-972B-812DEA54FC72}_is1) (Version: 3.4.6.40 - PCWinSoft Software)
AMD Accelerated Video Transcoding (HKLM\...\{034B6AC8-DCF6-585B-2AFD-3FF0D4A559BB}) (Version: 12.5.100.30429 - Advanced Micro Devices, Inc.) Hidden
AMD APP SDK Runtime (HKLM\...\{503F672D-6C84-448A-8F8F-4BC35AC83441}) (Version: 10.0.937.2 - Advanced Micro Devices Inc.) Hidden
AMD Catalyst Install Manager (HKLM\...\{3C378793-5288-0165-FCA4-D319D5E4A490}) (Version: 8.0.915.0 - Advanced Micro Devices, Inc.)
AMD Drag and Drop Transcoding (HKLM\...\{999DB5B3-EE44-8837-2B51-4AF44CD1FD22}) (Version: 2.00.0000 - Advanced Micro Devices, Inc.) Hidden
AMD Media Foundation Decoders (HKLM\...\{30921AC4-6875-F7DF-B48B-2BB68C000BB6}) (Version: 1.0.80430.0002 - Advanced Micro Devices, Inc.) Hidden
Angry Birds (HKLM-x32\...\{01509AB1-84BB-4AB9-A142-38AFA0BBDA25}) (Version: 4.0.0 - Rovio Entertainment Ltd.)
Angry Birds Seasons (HKLM-x32\...\{E52AA845-C780-4CE4-A040-840073FFA12D}) (Version: 4.1.0 - Rovio Entertainment Ltd.)
Angry Birds Space (HKLM-x32\...\{C9C763DF-F912-457F-A8BF-88E043BC45FE}) (Version: 1.6.0 - Rovio Entertainment Ltd.)
Angry Birds Star Wars II (HKLM-x32\...\{15231C14-90E3-4BBE-A11E-88C289FD0B6B}) (Version: 1.2.1 - Rovio Entertainment Ltd.)
AnyMusic 10.9.5 (HKLM-x32\...\AnyMusic) (Version: 10.9.5 - AmoyShare)
Ashampoo WinOptimizer 27 (HKLM-x32\...\{4209F371-B009-83C0-55A2-B0904D2A6CF6}_is1) (Version: 27.00.05 - Ashampoo GmbH & Co. KG)
Avira Fallback Updater (HKLM-x32\...\Avira Fallback Updater) (Version: - ) Hidden
Avira System Speedup (HKLM-x32\...\Avira System Speedup_is1) (Version: 7.5.0.552 - Avira Operations GmbH) Hidden
Catalyst Control Center - Branding (HKLM-x32\...\{CB79256B-C0E0-40C6-8EB7-BDD796203581}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.) Hidden
DeskUpdate (HKLM-x32\...\DeskUpdate_is1) (Version: 4.15.0144 - Fujitsu Technology Solutions)
Endpoint Protection SDK (HKLM\...\{68E1CCB4-4965-4713-BDEB-77F6D6C9BF9D}_is1) (Version: 1.0.2301.440 - Avira Operations GmbH & Co. KG) Hidden
Foxit Reader (HKLM-x32\...\Foxit Reader_is1) (Version: 10.1.0.37527 - Foxit Software Inc.)
Free Chess version 2.1.1 (HKLM-x32\...\FreeChess_is1) (Version: 2.1.1 - Jorge Pardo Serrano)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 109.0.5414.120 - Google LLC)
ISO to USB (HKLM-x32\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version: - isotousb.com)
Malwarebytes version 4.6.17.334 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.6.17.334 - Malwarebytes)
Microsoft .NET Framework 4.8 (HKLM\...\{16735AF7-1D8D-3681-94A5-C578A61EC832}) (Version: 4.8.03761 - Microsoft Corporation) Hidden
Microsoft Edge WebView2 Runtime (HKLM-x32\...\Microsoft EdgeWebView) (Version: 109.0.1518.140 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.30319 (HKLM\...\{DA5E371C-6333-3D8A-93A4-6FD5B20BCC6E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM-x32\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.50727 (HKLM-x32\...\{15134cb0-b767-4960-a911-f2d16ae54797}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.50727 (HKLM\...\{AC53FC8B-EE18-3F9C-9B59-60937D0B182C}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.50727 (HKLM\...\{A2CB1ACB-94A2-32BA-A15E-7D80319F7589}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.50727 (HKLM-x32\...\{FDB30193-FDA0-3DAA-ACCA-A75EEFE53607}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.50727 (HKLM-x32\...\{2F73A7B2-E50E-39A6-9ABC-EF89E4C62E36}) (Version: 11.0.50727 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.29.30156 (HKLM-x32\...\{692e16a0-c886-466d-91db-706f6f99ac96}) (Version: 14.29.30156.0 - Microsoft Corporation)
Microsoft Visual C++ 2019 X86 Additional Runtime - 14.29.30156 (HKLM-x32\...\{7ACE9888-9B5B-4041-90BA-6A5B470B21EB}) (Version: 14.29.30156 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.29.30156 (HKLM-x32\...\{1F91919D-04A6-4A8C-8B81-FAF84FDB93F0}) (Version: 14.29.30156 - Microsoft Corporation) Hidden
Opera Stable 95.0.4635.90 (HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\Opera 95.0.4635.90) (Version: 95.0.4635.90 - Opera Software)
PSPad editor (HKLM-x32\...\PSPad editor 32bit_is1) (Version: 5.0.7.775 - Jan Fiala)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8036 - Realtek Semiconductor Corp.)
Revo Registry Cleaner 2.0.7 (HKLM\...\{4DC8CC27-2130-4986-95E7-0C8266F5B82B}_is1) (Version: 2.0.7 - VS Revo Group, Ltd.)
Revo Uninstaller 2.6.5 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.6.5 - VS Revo Group, Ltd.)
Santa Claus in Trouble (HKLM-x32\...\Santa Claus in Trouble) (Version: - )
SumatraPDF (HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\SumatraPDF) (Version: 3.5.2 - Krzysztof Kowalczyk)
Tweaking.com - Windows Repair (HKLM-x32\...\Tweaking.com - Windows Repair) (Version: 4.14.0 - Tweaking.com)

Dopuna: 09 Feb 2026 21:09

Tek sad ukapirao...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Kada su problemi poceli da se javljaju?
Kako ti ne da da izadjes na internet u normal modu, da li daje neko obavestenje?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 10 Feb 2026 20:21

Mogu na net u normal modu nego kad pokusam da otvorim neki fajl ili aplikaciju exe. izbaci sledece
Windows cannot acess the specified device path, or file ,you mey not have appropriate permissions to acess the item .... probao sam sve kombinacije sa gugla ,ali nista ...pdf fajlove mogu normalno da otvaram...

Dopuna: 10 Feb 2026 20:30

Problem je poceo nznm ni ja ,uradio sam neki maunt sa Dimon tols ,neku igricu,aktivirala se Avira i posle kao da se zakljuca exe. Najgore sto ne moze da se deinstalira Avira, Da li bi pomoglo ako bi obrisao sistem restore ..?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Jesi probao uputstvo sa sajta Microsofta?
[Link mogu videti samo ulogovani korisnici]

Ja bih mozda mogao da probam nesto da uradim, nego se bojim da ne ostetimo jos vise sistem.
Nije mi jasno kako nece Avira da se obrise? Da li izbacuje i tu poruku o gresci kao kad hoces neki .exe fajl da pokrenes?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 11 Feb 2026 20:31



Dopuna: 11 Feb 2026 20:33



Dopuna: 11 Feb 2026 20:34

za Aviru i za Crome...

Dopuna: 11 Feb 2026 20:34

Ma ako nece cu udarim reinstal...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Probacemo sledece, ali da znas da moze i da pogorsa stanje. Ako nemas nesto bitno, ti probaj.


1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

CreateRestorePoint:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKLM\Software\Policies\...\system: [EnableSmartScreen] 0 <==== ATTENTION
HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\Run: [] => [X]
HKU\S-1-5-21-2597519041-1624793328-977483392-1001\...\Policies\system: [shell] explorer.exe <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Edge: Restriction <==== ATTENTION
Task: {36C80B1B-AE5B-4F73-9D6D-A2662002B9A8} - \Opera scheduled assistant Autoupdate 1750019549 -> No File <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
EmptyTemp:

2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.