offline
- Dubara
- Prijatelj foruma
- Pridružio: 26 Jul 2007
- Poruke: 1080
- Gde živiš: u blizini
|
Za sada nema znakova za uzbunu ali nasjeo sam kao malo dijete.
Na fejsbuku naletim na reklamu za Chat GPT - 5 (evo slika).
Naivno kliknem da preuzmem program i pokušam da ga instaliram. Brzopleto ga sa restore vratim iz Avira Security i tu se zaustavim.
Shvatim da je riječ o zlonamjernom programu i sjetim se mycity ambulante.
Možda nisam napravio štetu ali evo logova. Ujedno i upozorenje ostalima da ne nasjedaju kao ja.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 05-11-2023 02
Ran by x1carbon (administrator) on X1CARBON-PC (LENOVO 20FB0075MX) (21-11-2023 21:41:37)
Running from C:\Users\x1carbon\Downloads\FRST64.exe
Loaded Profiles: x1carbon
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X64) Language: Engleski (Sjedinjene Države) -> Hrvatski (Hrvatska)
Default browser: Chrome
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.UI.Application.exe
(C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.UI.Application.Messaging.exe
(C:\Program Files (x86)\Avira\Security\Avira.Spotlight.UI.Application.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\109.0.1518.140\msedgewebview2.exe <7>
(C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\splwow64.exe
(C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.332\GoogleCrashHandler.exe
(C:\Program Files (x86)\Google\Chrome\Application\chrome.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.332\GoogleCrashHandler64.exe
(C:\Program Files\Lenovo\HOTKEY\tphkload.exe ->) (Lenovo -> Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\shtctky.exe
(C:\Program Files\Lenovo\HOTKEY\tphkload.exe ->) (Lenovo -> Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPONSCR.exe
(C:\Program Files\Lenovo\HOTKEY\tphkload.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe ->) (Lenovo -> Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tpnumlkd.exe
(cmd.exe ->) (Lenovo (Beijing) Limited -> Lenovo Group Limited) C:\Users\x1carbon\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe
(Conexant Systems, Inc. -> Conexant Systems, Inc) C:\Program Files\CONEXANT\SAII\SmartAudio.exe
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe <23>
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Download Navigator\EPSDNMON.EXE
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files\EPSON\Epson Data Collection Agent\DataCollectionAgentController.exe
(explorer.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\spool\drivers\x64\3\E_YATIUNE.EXE
(explorer.exe ->) (Viber Media S.à r.l. -> Viber Media S.Ã r.l.) C:\Users\x1carbon\AppData\Local\Viber\Viber.exe
(Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxEM.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe
(SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe
(services.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe
(services.exe ->) (Conexant Systems LLC -> Conexant Systems, Inc.) C:\Program Files\CONEXANT\SAII\CxUtilSvc.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems Inc.) C:\Windows\System32\CxAudMsg64.exe
(services.exe ->) (Conexant Systems, Inc. -> Conexant Systems, Inc.) C:\Windows\System32\SASrv.exe
(services.exe ->) (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.) C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe
(services.exe ->) (Intel Corporation -> Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(services.exe ->) (Intel Corporation -> Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(services.exe ->) (Intel Corporation -> Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(services.exe ->) (Intel Corporation -> Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(services.exe ->) (Intel Corporation -> Motorola Solutions, Inc.) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\micmute.exe
(services.exe ->) (Lenovo -> Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\tphkload.exe
(services.exe ->) (LENOVO -> Lenovo Group Limited) C:\Program Files\Lenovo\HOTKEY\TPHKSVC.exe
(services.exe ->) (Lenovo -> Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\MDM.EXE
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION) C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files\EPSON\Epson Data Collection Agent\DCAgent.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Program Files\EPSON\Epson Device USB Agent\EDUSBAgent.exe
(services.exe ->) (SEIKO EPSON CORPORATION -> Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(services.exe ->) (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(taskeng.exe ->) (Avira Operations GmbH -> Avira Operations GmbH) C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe
(Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [cAudioFilterAgent] => C:\Program Files\Conexant\cAudioFilterAgent\cAudioFilterAgent64.exe [604496 2017-11-24] (Conexant Systems LLC -> Conexant Systems, Inc.)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [1841496 2016-10-13] (Logitech -> Logitech, Inc.)
HKLM\...\Run: [DataCollectionAgentController] => C:\Program Files\EPSON\Epson Data Collection Agent\DataCollectionAgentController.exe [397656 2023-05-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Run: [EPPCCMON] => C:\Program Files (x86)\EPSON Software\Epson Printer Connection Checker\EPPCCMON.EXE [455968 2023-05-26] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [DriveUtilitiesHelper] => C:\Program Files (x86)\Western Digital\WD Utilities\WDDriveUtilitiesHelper.exe [2309008 2017-11-14] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [EEventManager] => C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe [1319208 2019-05-31] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\MRT: Restriction <==== ATTENTION
HKU\S-1-5-21-589871132-164644279-1109922734-1000\...\Run: [EPLTarget\P0000000000000000] => C:\Windows\system32\spool\DRIVERS\x64\3\E_YATIUNE.EXE [416896 2017-09-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKU\S-1-5-21-589871132-164644279-1109922734-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-589871132-164644279-1109922734-1000\...\Run: [] => [X]
HKU\S-1-5-21-589871132-164644279-1109922734-1000\...\Run: [Viber] => C:\Users\x1carbon\AppData\Local\Viber\Viber.exe [49832264 2022-05-01] (Viber Media S.à r.l. -> Viber Media S.Ã r.l.)
HKU\S-1-5-21-589871132-164644279-1109922734-1000\...\Run: [EPSDNMON] => C:\Program Files (x86)\Epson Software\Download Navigator\EPSDNMON.EXE [350032 2022-07-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
HKLM\...\Print\Monitors\EPSON L3150 Series 64MonitorBE: C:\Windows\system32\E_YLMBUNE.DLL [184832 2017-07-14] (Microsoft Windows Hardware Compatibility Publisher -> Seiko Epson Corporation)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\109.0.5414.120\Installer\chrmstp.exe [2023-01-27] (Google LLC -> Google LLC)
HKLM\Software\Wow6432Node\Microsoft\Active Setup\Installed Components: [{73FA19D0-2D75-11D2-995D-00C04F98BBC9}] ->
HKLM\Software\...\Authentication\Credential Providers: [{A324AC4C-2605-40C1-BF3C-926BD2A25975}] -> C:\Windows\system32\SynaCP.dll [2016-06-28] (Synaptics Inc. -> Synaptics Incorporated.)
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {7907D2D8-B191-4A83-8052-D147494B9D8C} - System32\Tasks\AdobeAAMUpdater-1.0-x1carbon-PC-x1carbon => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {A405EDDD-D50B-439D-8FBB-A792B0A0B049} - System32\Tasks\Avira_FallbackUpdater => C:\Windows\system32\sc.exe [45056 2009-07-14] (Microsoft Windows -> Microsoft Corporation) -> start AviraFallbackUpdater Delayed=false
Task: {EF0C6578-5A35-4CA3-9F97-3B1429C17F85} - System32\Tasks\Avira_Security_Maintenance => Command(1): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> FallbackTelemetry
Task: {EF0C6578-5A35-4CA3-9F97-3B1429C17F85} - System32\Tasks\Avira_Security_Maintenance => Command(2): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> ServiceWatchdog
Task: {EF0C6578-5A35-4CA3-9F97-3B1429C17F85} - System32\Tasks\Avira_Security_Maintenance => Command(3): C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe -> CrashCollector
Task: {92D7318F-1E90-485E-A242-80B236EEC5BE} - System32\Tasks\Avira_Security_Service_SCM_Watchdog => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.Worker.exe [260360 2023-10-31] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {4D405806-3D28-4144-A692-3285858067D2} - System32\Tasks\Avira_Security_Systray => C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Systray.Application.exe [1814008 2023-10-31] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {48804FD9-1578-4984-B308-55B9AC3B6BA0} - System32\Tasks\Avira_Security_Update => C:\Windows\system32\net.exe [55808 2009-07-14] (Microsoft Windows -> Microsoft Corporation)
Task: {BE318C66-7D31-478C-A08B-FA90802787FB} - System32\Tasks\AviraSystemSpeedupVerify => C:\Program Files (x86)\Avira\System Speedup\setup\avira_speedup_setup.exe [37168176 2023-09-26] (Avira Operations GmbH -> Avira Operations GmbH)
Task: {7387E8C4-B845-4535-AF72-73875A93CDA5} - System32\Tasks\EPSON L3150 Series Update {30398576-C80B-4536-A5F8-3E33688F6EB2} => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE [680440 2017-06-07] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
Task: {810953D3-C55A-4945-8BEF-77846F8C36EC} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-06-22] (Google LLC -> Google LLC)
Task: {72DBBDD8-342D-4228-B243-E341E881E427} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156104 2020-06-22] (Google LLC -> Google LLC)
Task: {4758B7F0-53D1-4E7E-A89B-EA049EF54984} - System32\Tasks\Intel\Intel® Management and Security Status => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [232536 2020-04-01] (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) -> "C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PrivacyIconClient.exe" 60
Task: {770BF891-6F87-4CFF-BB6F-F9994AC832A8} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-589871132-164644279-1109922734-1000 => C:\Users\x1carbon\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [89096 2023-04-10] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {7CCABE89-9F03-488F-A18D-5B9AE3E52144} - System32\Tasks\Microsoft\Windows\Conexant\SA2 => C:\Program Files\CONEXANT\SAII\SACpl.exe [1831744 2016-12-06] (Conexant Systems, Inc. -> Conexant Systems, Inc.)
Task: {F0442E0C-6B37-42E8-8E64-E459ABFAA789} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [815 2021-09-08] () [File not signed]
Task: {5A13CE80-00BC-4D41-8972-4055941FD522} - System32\Tasks\TVT\TVSUUpdateTask => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904552 2023-08-15] (Lenovo -> )
Task: {E74E3787-CE72-4ECC-AFED-55EA655235C1} - System32\Tasks\TVT\TVSUUpdateTask_UserLogOn => C:\Program Files (x86)\Lenovo\System Update\tvsuShim.exe [1904552 2023-08-15] (Lenovo -> )
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\EPSON L3150 Series Update {30398576-C80B-4536-A5F8-3E33688F6EB2}.job => C:\Windows\system32\spool\DRIVERS\x64\3\E_YTSUNE.EXE:/EXE:{30398576-C80B-4536-A5F8-3E33688F6EB2} /F:UpdateSYSTEMĊSearches for EPSON software updates, and notifies you when updates are available.If this task is disabled or stopped, your EPSON software will not be automatically kept up to date.Thi
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3: <==== ATTENTION (Restriction - Zones)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{7C11C6FB-D12E-4210-B852-0B6BEE72FC89}: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @videolan.org/vlc,version=3.0.18 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2022-11-08] (VideoLAN -> VideoLAN)
Chrome:
=======
CHR DefaultProfile: Default
CHR Profile: C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default [2023-11-21]
CHR Notifications: Default -> [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici]
CHR HomePage: Default -> [Link mogu videti samo ulogovani korisnici]
CHR StartupUrls: Default -> "hxxp://google.ba/","hxxp://www.google.com/"
CHR Extension: (Avira Safe Shopping) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2023-11-20]
CHR Extension: (Web Apps by 123apps) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\dpplndkoilcedkdjicmbeoahnckdcnle [2021-11-20]
CHR Extension: (iCloud knjižne oznake) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkepacicchenbjecpbpbclokcabebhah [2022-12-02]
CHR Extension: (Avira Browser Safety) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2022-10-26]
CHR Extension: (Google dokumenti izvanmrežno) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-05-24]
CHR Extension: (AdBlock — best ad blocker) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2023-11-16]
CHR Extension: (Web Scraper - Free Web Scraping) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\jnhgnonknehpejjnehehllkliplmbmhn [2023-11-21]
CHR Extension: (ChatGPT on Google) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\lofhokdgnkibkkakjlikdmjnemooljjh [2023-03-28]
CHR Extension: (Plaćanja u web-trgovini Chrome) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-02-05]
CHR Extension: (Data Scraper - Easy Web Scraping) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\nndknepjnldbdbepjfgmncbggmopgden [2023-11-20]
CHR Extension: (Streak CRM for Gmail) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnnfemgpilpdaojpnkjdgfgbnnjojfik [2020-11-29]
CHR Extension: (Google Translate) - C:\Program Files (x86)\Software\Software\nmmhkkegccagdldgiimedpiccmgmiedagg4 [2023-05-17]
CHR Profile: C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-05-10]
CHR Profile: C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 1 [2023-10-11]
CHR HomePage: Profile 1 -> [Link mogu videti samo ulogovani korisnici]
CHR Extension: (Avira Password Manager) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2023-08-22]
CHR Extension: (Avira Safe Shopping) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2023-10-11]
CHR Extension: (Avira Browser Safety) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2023-04-08]
CHR Extension: (Google dokumenti izvanmrežno) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-05-31]
CHR Profile: C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 2 [2023-05-21]
CHR Extension: (Avira Password Manager) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\caljgklbbfbcjjanaijlacgncafpegll [2023-05-21]
CHR Extension: (Avira Safe Shopping) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ccbpbkebodcjkknkfkpmfeciinhidaeh [2023-05-21]
CHR Extension: (Avira Browser Safety) - C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2023-05-21]
CHR Profile: C:\Users\x1carbon\AppData\Local\Google\Chrome\User Data\System Profile [2023-11-21]
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll]
CHR HKLM-x32\...\Chrome\Extension: [ccbpbkebodcjkknkfkpmfeciinhidaeh]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AviraFallbackUpdater; C:\Program Files (x86)\Avira\Fallback Updater\Avira.Spotlight.FallbackUpdater.exe [6576104 2023-10-11] (Avira Operations GmbH -> Avira Operations GmbH)
R2 AviraOptimizerHost; C:\Program Files (x86)\Avira\Optimizer Host\Avira.OptimizerHost.exe [3004688 2022-07-22] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
R2 AviraPhantomVPN; C:\Program Files (x86)\Avira\VPN\Avira.VpnService.exe [389096 2023-09-06] (Avira Operations GmbH -> Avira Operations GmbH & Co. KG)
R2 AviraSecurity; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Service.exe [266936 2023-10-31] (Avira Operations GmbH -> Avira Operations GmbH)
S2 AviraSecurityUpdater; C:\Program Files (x86)\Avira\Security\Avira.Spotlight.Common.Updater.exe [297392 2023-10-31] (Avira Operations GmbH -> Avira Operations GmbH)
R2 DCAgent; C:\Program Files\EPSON\Epson Data Collection Agent\DCAgent.exe [19288 2023-05-22] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 Dolby DAX2 API Service; C:\Program Files\Dolby\Dolby DAX2\DAX2_API\DolbyDAX2API.exe [189464 2020-06-02] (Dolby Laboratories, Inc. -> Dolby Laboratories, Inc.)
R2 EDUSBAgent; C:\Program Files\EPSON\Epson Device USB Agent\EDUSBAgent.exe [21360 2022-06-27] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 EndpointProtectionService; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [8930944 2023-02-10] (Avira Operations GmbH -> Avira Operations GmbH)
S3 EndpointProtectionService2; C:\Program Files\Avira\Endpoint Protection SDK\endpointprotection.exe [8930944 2023-02-10] (Avira Operations GmbH -> Avira Operations GmbH)
R2 EpsonScanSvc; C:\Windows\system32\EscSvc64.exe [145224 2018-01-29] (SEIKO EPSON CORPORATION -> Seiko Epson Corporation)
R2 EPSON_PM_RPCV4_06; C:\Program Files\Common Files\EPSON\EPW!3 SSRP\E_S60RPB.EXE [152640 2013-04-15] (SEIKO EPSON Corporation -> SEIKO EPSON CORPORATION)
R2 iBtSiva; C:\Program Files (x86)\Intel\Bluetooth\ibtsiva.exe [532968 2018-05-19] (Intel Corporation -> Intel Corporation)
S2 LPlatSvc; C:\Windows\system32\LPlatSvc.exe [892288 2019-12-11] (Lenovo -> Lenovo.)
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation -> Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
R2 WDDriveService; C:\Program Files (x86)\Western Digital\WD Drive Manager\WDDriveService.exe [358256 2017-11-14] (Western Digital Technologies, Inc. -> Western Digital Technologies, Inc.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2018-08-22] (Microsoft Windows -> Microsoft Corporation)
R2 wuauserv; C:\Windows\system32\wuaueng2.dll [2651648 2020-06-22] (Microsoft Corporation) [File not signed]
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 ahcix64s; C:\Windows\system32\drivers\ahcix64s.sys [293720 2012-12-10] (Promise Technology, Inc. -> Advanced Micro Devices, Inc)
S3 ASUSstpt; C:\Windows\system32\drivers\ASUSstpt.sys [24648 2011-09-15] (MCCI Corporation -> MCCI Corporation)
S3 ASUSumsc; C:\Windows\system32\drivers\ASUSumsc.sys [141896 2011-09-15] (MCCI Corporation -> MCCI Corporation)
S3 ASUSxpsp; C:\Windows\system32\drivers\ASUSxpsp.sys [25160 2011-09-15] (MCCI Corporation -> MCCI Corporation)
S3 ATOL_USB_x64; C:\Windows\system32\drivers\ATOL_USB_x64.sys [74440 2014-07-15] (Management Company ATOL -> )
S3 BBDFU; C:\Windows\System32\Drivers\BBDFU.sys [46064 2015-09-17] (Action Star Technology Co., Ltd. -> Action Star Enterprise Co., Ltd.)
R0 BdNet; C:\Windows\System32\DRIVERS\BdNet.sys [180360 2022-07-12] (BullGuard LTD -> BullGuard Ltd.)
R1 BdSentry; C:\Windows\System32\DRIVERS\BdSentry.sys [219448 2023-02-01] (BullGuard LTD -> Avira Operations GmbH)
R3 btmaux; C:\Windows\System32\DRIVERS\btmaux.sys [156616 2018-05-16] (Intel Corporation -> Motorola Solutions, Inc.)
R3 btmhsf; C:\Windows\System32\DRIVERS\btmhsf.sys [1566152 2018-05-16] (Intel Corporation -> Motorola Solutions, Inc.)
S3 FlashUSB; C:\Windows\system32\drivers\FlashUSB.sys [19968 2014-01-23] (Microsoft Windows Hardware Compatibility Publisher -> Intel Mobile Communications)
S3 FPrint2_USB_x64; C:\Windows\system32\drivers\FPrint2_USB_x64.sys [73968 2013-01-30] (Thesycon Systemsoftware Consulting GmbH -> )
S3 FTDIBUS3; C:\Windows\System32\Drivers\FTDIBUS3.sys [59656 2016-09-15] (Future Technology Devices International Ltd -> FTDI Ltd.)
S3 iusb3adp; C:\Windows\system32\drivers\iusb3adp.sys [29272 2017-02-14] (Intel(R) USB eXtensible Host Controller Drivers -> Intel)
S3 iwsehub; C:\Windows\system32\drivers\iwsehub.sys [467184 2015-08-26] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation)
S3 iwsepal; C:\Windows\system32\drivers\iwsepal.sys [664304 2015-08-26] (Intel Corporation-Wireless Connectivity Solutions -> Intel Corporation)
S3 KMWDFILTER; C:\Windows\system32\drivers\KMWDFILTER.sys [30208 2009-04-29] (MLK Technologies Limited -> Windows (R) Codename Longhorn DDK provider)
S3 lci_proxykmd; C:\Windows\system32\drivers\lci_proxykmd.sys [99976 2016-10-06] (Fresco Logic Inc -> FrescoLogic)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
R3 MpKsl09921551; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{D390C371-A8C9-4341-9ECA-299A20642DA0}\MpKslDrv.sys [54680 2023-11-21] (Microsoft Windows -> Microsoft Corporation)
R1 netprotection_network_filter; C:\Windows\System32\drivers\netprotection_network_filter.sys [96088 2022-06-15] (Avira Operations GmbH & Co. KG -> Avira Operations GmbH & Co. KG)
R3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation -> Microsoft Corporation)
R1 npcap; C:\Windows\System32\DRIVERS\npcap.sys [66008 2021-04-09] (Insecure.Com LLC -> Insecure.Com LLC.)
S3 nvme; C:\Windows\system32\drivers\nvme.sys [77488 2016-08-17] (Lite-On Technology Corporation -> Windows (R) Win 7 DDK provider)
S3 ocznvme; C:\Windows\system32\drivers\ocznvme.sys [99592 2016-06-10] (Toshiba America Electronic Components, Inc. -> TOSHIBA CORPORATION)
R0 ocztrimfilter; C:\Windows\System32\drivers\ocztrimfilter.sys [29064 2016-06-10] (Toshiba America Electronic Components, Inc. -> TOSHIBA CORPORATION)
R3 phantomtap; C:\Windows\System32\DRIVERS\phantomtap.sys [39448 2022-01-25] (Avira Operations GmbH & Co. KG -> The OpenVPN Project)
R0 PMDRVS; C:\Windows\System32\DRIVERS\pmdrvs.sys [38160 2019-12-11] (Lenovo -> Lenovo.)
S3 ROCKEYNT; C:\Windows\system32\drivers\Rockey4.sys [25600 2007-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Feitian Technologies Co., Ltd.)
S3 Rockey_USB; C:\Windows\system32\drivers\Rockey4USB.sys [16384 2007-03-30] (Microsoft Windows Hardware Compatibility Publisher -> Feitian Technologies Co., Ltd.)
R2 rtp_filesystem_filter; C:\Windows\System32\DRIVERS\rtp_filesystem_filter.sys [230408 2023-02-10] (Avira Operations GmbH -> Avira Operations GmbH)
R1 rtp_process_monitor; C:\Windows\System32\DRIVERS\rtp_process_monitor.sys [224512 2023-02-10] (Avira Operations GmbH -> Avira Operations GmbH)
R1 rtp_traverse; C:\Windows\System32\DRIVERS\rtp_traverse.sys [62632 2022-12-21] (Avira Operations GmbH -> Avira Operations GmbH)
S3 secnvme; C:\Windows\system32\drivers\secnvme.sys [89312 2017-10-13] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
R0 secnvmeF; C:\Windows\System32\drivers\secnvmeF.sys [30656 2017-10-13] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd)
S3 sercpl; C:\Windows\system32\drivers\sercpl64.sys [84992 2012-04-23] (Microsoft Windows Hardware Compatibility Publisher -> 4Sun)
R3 SPUVCbv; C:\Windows\System32\Drivers\SPUVCbv64.sys [745632 2016-05-26] (SUNPLUS INNOVATION TECHNOLOGY INC. -> Sunplus Innovation Technology Inc.)
S3 UFS2XX; C:\Windows\system32\drivers\UFS2XX.sys [69192 2009-08-02] (Future Technology Devices International Ltd -> FTDI Ltd.)
S3 umpusbvista; C:\Windows\system32\drivers\umpusbvista.sys [55808 2013-03-20] (Microsoft Windows Hardware Compatibility Publisher -> Texas Instruments Inc)
S3 viausbd; C:\Windows\system32\drivers\VIAUSBD.sys [69744 2010-12-21] (VIA Technologies Inc. -> VIA Technologies, Inc.)
S3 WDC_SAM; C:\Windows\System32\DRIVERS\wdcsam64_prewin8.sys [23200 2017-11-14] (Microsoft Windows Hardware Compatibility Publisher -> Western Digital Technologies)
S3 btmaudio; system32\drivers\btmaud.sys [X]
S3 netprotection_network_filter2; System32\drivers\netprotection_network_filter2.sys [X]
U4 npcap_wifi; no ImagePath
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-11-21 21:41 - 2023-11-21 21:42 - 000030692 _____ C:\Users\x1carbon\Downloads\FRST.txt
2023-11-21 21:41 - 2023-11-21 21:41 - 002383872 _____ (Farbar) C:\Users\x1carbon\Downloads\FRST64.exe
2023-11-21 21:41 - 2023-11-21 21:41 - 000000000 ____D C:\FRST
2023-11-21 21:29 - 2023-11-21 21:29 - 002455008 _____ ( ) C:\Users\x1carbon\Downloads\kmplayer_gZgN-X1.exe
2023-11-21 21:28 - 2023-11-21 21:28 - 000000000 ____D C:\Users\x1carbon\Downloads\GPT5 Pro for PC Installation v1.0.1
2023-11-21 21:27 - 2023-11-21 21:29 - 000417110 _____ C:\Users\x1carbon\Downloads\GPT5 Pro for PC Installation v1.0.1.rar
2023-11-21 18:44 - 2023-11-21 18:57 - 001388448 _____ C:\Users\Public\VOIP.dat
2023-11-19 19:46 - 2023-11-19 19:46 - 000000000 ____D C:\Users\x1carbon\Desktop\mulabdic
2023-11-10 18:32 - 2023-11-10 18:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\lenovo
2023-11-10 18:32 - 2023-11-10 18:32 - 000000000 ____D C:\Program Files (x86)\Lenovo
2023-11-07 16:25 - 2023-11-07 16:25 - 000003710 _____ C:\Windows\system32\Tasks\Avira_Security_Maintenance
2023-11-07 16:25 - 2023-11-07 16:25 - 000003232 _____ C:\Windows\system32\Tasks\Avira_Security_Service_SCM_Watchdog
2023-11-07 16:25 - 2023-11-07 16:25 - 000002648 _____ C:\Windows\system32\Tasks\Avira_Security_Systray
2023-11-01 19:01 - 2023-11-01 19:01 - 000007655 _____ C:\Users\x1carbon\Desktop\BOSANSKOHERCEGOVAČKA INICIJATIVA - KASUMOVIĆ FUAD.html
2023-11-01 19:01 - 2023-11-01 19:01 - 000000000 ____D C:\Users\x1carbon\Desktop\BOSANSKOHERCEGOVAČKA INICIJATIVA - KASUMOVIĆ FUAD_files
2023-10-22 22:30 - 2023-10-22 22:30 - 002203133 _____ C:\Users\x1carbon\Downloads\slzdk-12-2013-hr.pdf
2023-10-22 22:30 - 2023-10-22 22:30 - 002203133 _____ C:\Users\x1carbon\Downloads\slzdk-12-2013-hr (1).pdf
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2023-11-21 21:29 - 2020-06-22 20:01 - 000000000 ____D C:\Program Files (x86)\Google
2023-11-21 20:48 - 2020-06-25 13:48 - 000000911 _____ C:\Windows\Tasks\EPSON L3150 Series Update {30398576-C80B-4536-A5F8-3E33688F6EB2}.job
2023-11-21 19:55 - 2022-08-16 11:14 - 000000000 ____D C:\Users\x1carbon\Documents\ViberDownloads
2023-11-21 19:50 - 2020-06-22 22:25 - 000000000 ____D C:\Users\x1carbon\AppData\Roaming\Microsoft\Word
2023-11-21 16:27 - 2009-07-14 05:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2023-11-21 16:27 - 2009-07-14 05:45 - 000026352 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2023-11-21 16:15 - 2009-07-14 06:13 - 000781298 _____ C:\Windows\system32\PerfStringBackup.INI
2023-11-21 16:15 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\inf
2023-11-21 16:10 - 2020-06-22 14:29 - 000000000 __SHD C:\Users\x1carbon\IntelGraphicsProfiles
2023-11-21 16:09 - 2020-06-22 14:26 - 000000000 ____D C:\Intel
2023-11-21 16:09 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2023-11-21 11:35 - 2022-07-24 17:02 - 002574048 _____ C:\Windows\system32\rtp.db
2023-11-21 02:00 - 2021-12-01 23:33 - 000000000 ____D C:\Users\x1carbon\AppData\Local\Adobe
2023-11-13 17:23 - 2020-06-22 20:01 - 000003702 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2023-11-13 17:23 - 2020-06-22 20:01 - 000003574 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2023-11-11 21:44 - 2020-06-22 20:09 - 000000000 ____D C:\ProgramData\Lenovo
2023-11-11 19:43 - 2020-06-22 14:26 - 000000000 ____D C:\Windows\TempInst
2023-11-10 18:32 - 2022-07-14 10:07 - 000002211 _____ C:\Windows\SysWOW64\InstallUtil.InstallLog
2023-11-10 18:32 - 2020-06-22 20:09 - 000000000 ____D C:\Windows\system32\Tasks\TVT
2023-11-07 16:25 - 2021-05-20 21:08 - 000003306 _____ C:\Windows\system32\Tasks\Avira_Security_Update
2023-11-07 16:25 - 2021-05-20 21:08 - 000001005 _____ C:\Users\Public\Desktop\Avira.lnk
2023-11-07 16:25 - 2021-05-20 21:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2023-11-03 20:51 - 2020-12-16 23:21 - 000000000 ___RD C:\Users\x1carbon\Documents\Scanned Documents
2023-10-30 14:39 - 2023-03-09 21:23 - 000000000 ____D C:\Users\x1carbon\Desktop\pressZDK
2023-10-28 02:26 - 2021-11-23 21:46 - 000003442 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2023-10-28 02:26 - 2021-11-23 21:46 - 000003314 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
==================== Files in the root of some directories ========
2023-11-21 18:44 - 2023-11-21 18:57 - 001388448 _____ () C:\Users\Public\VOIP.dat
2020-10-11 15:49 - 2023-07-26 20:55 - 000009216 _____ () C:\Users\x1carbon\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2023-11-18 18:40
==================== End of FRST.txt ========================
[Link mogu videti samo ulogovani korisnici]
|
