Provera

Provera

offline
  • Long drive and music.
  • Pridružio: 02 Nov 2014
  • Poruke: 595

Molim za proveru, ceo sistem je skeniran sa EsetNod32 i nije našao ništa u opisu kačim izveštaj.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 04-10-2020
Ran by Mihajlo (administrator) on KRSTIC (ASUSTeK Computer Inc. K53SC) (07-10-2020 22:04:07)
Running from C:\Users\Mihajlo\Desktop
Loaded Profiles: Mihajlo
Platform: Windows 8.1 (Update) (X64) Language: English (United Kingdom)
Default browser: Opera
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\egui.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation -> Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\Camera\Camera.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Opera Software AS -> Opera Software) C:\Users\Mihajlo\AppData\Local\Programs\Opera\71.0.3770.198\opera.exe <20>
(Opera Software AS -> Opera Software) C:\Users\Mihajlo\AppData\Local\Programs\Opera\71.0.3770.198\opera_crashreporter.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [185648 2020-08-27] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [456160 2019-09-15] (Power Software Limited -> Power Software Ltd)
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\Run: [Viber] => C:\Users\Mihajlo\AppData\Local\Viber\Viber.exe [43061264 2020-08-17] (Viber Media S.à r.l. -> Viber Media S.à r.l.)
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\Run: [Discord] => C:\Users\Mihajlo\AppData\Local\Discord\app-0.0.307\Discord.exe [91023672 2020-08-04] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\Run: [Opera Browser Assistant] => C:\Users\Mihajlo\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3085336 2020-10-06] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\85.0.4183.121\Installer\chrmstp.exe [2020-09-23] (Google LLC -> Google LLC)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [182784 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [159704 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)
GroupPolicy: Restriction ? <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) ============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {1953E247-2B9D-4906-9982-CDDADA39B60D} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [510912 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {1E8210DF-E74D-402C-AAC2-13F4C2A2ED7C} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4DC1A8A3-EBE1-4F4D-BDDF-D519A1DB09E3} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [976832 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {568178EC-161C-45C8-B050-5A5B44A25376} - System32\Tasks\WiseCleaner\WDCSkipUAC => C:\Program Files (x86)\Wise\Wise Disk Cleaner\WiseDiskCleaner.exe [9109080 2020-09-04] (Lespeed Technology Ltd. -> WiseCleaner.com)
Task: {5C60CCD4-276F-4227-BC13-5F5103CBD0D1} - System32\Tasks\WiseCleaner\WRCSkipUAC => C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe [5541464 2020-04-23] (Lespeed Technology Ltd. -> WiseCleaner.com)
Task: {6D417B42-6E2F-4C82-8F40-CE224FBA2318} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {7FC29162-8076-403C-B931-837CAF8C551A} - System32\Tasks\Opera scheduled assistant Autoupdate 1582282773 => C:\Users\Mihajlo\AppData\Local\Programs\Opera\launcher.exe [1712152 2020-09-29] (Opera Software AS -> Opera Software)
Task: {83D03133-2EA6-4382-A503-43A88031AD8E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {885B7F7E-3A19-4E01-98FE-02C2CB759BC0} - System32\Tasks\{A7A0E935-A287-45B2-BF13-D63EF55AB23B} => C:\Windows\system32\pcalua.exe -a "C:\Program Files (x86)\Intel\OpenCL SDK\2.0\Uninstall\setup.exe" -c -uninstall
Task: {8C855E74-CF8D-4291-8884-BE512B64903E} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe [469952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {9E04243A-808F-4139-B1B0-D005582EDB4B} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [757184 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {AF891AD1-90C1-43C1-BD6B-BD7E80324556} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2069952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C4CBEA83-9568-43E7-80E4-52AF13F20C02} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-10-23] (Google Inc -> Google LLC)
Task: {EE075BA3-85F8-40A0-B89D-E9F17C56BE0B} - System32\Tasks\Opera scheduled Autoupdate 1571852220 => C:\Users\Mihajlo\AppData\Local\Programs\Opera\launcher.exe [1712152 2020-09-29] (Opera Software AS -> Opera Software)
Task: {F565A825-A897-4E11-9D9B-9171D45E550A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-10-23] (Google Inc -> Google LLC)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{382EECF8-FB42-4D1F-A8F4-AB41C5AE82B9}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{DF508885-F8D9-400F-9736-119C3EBBB40B}: [DhcpNameServer] 192.168.0.1

FireFox:
========
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]

Chrome:
=======
CHR Profile: C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default [2020-09-25]
CHR StartupUrls: Default -> "hxxp://netflix.com/"
CHR Extension: (Slides) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-04-14]
CHR Extension: (Just Black) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aghfnjkcakhmadgdomlmlhhaocbkloab [2020-08-14]
CHR Extension: (Docs) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-04-14]
CHR Extension: (Google Drive) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-04-14]
CHR Extension: (YouTube) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-04-14]
CHR Extension: (Sheets) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-04-14]
CHR Extension: (Google Docs Offline) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-09-24]
CHR Extension: (Super Netflix) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iakpdiefpdniabbekcbofaanjcpjkloe [2020-04-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-14]
CHR Extension: (Gmail) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-04-14]
CHR Extension: (Chrome Media Router) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-09-24]

Opera:
=======
OPR Extension: (Install Chrome Extensions) - C:\Users\Mihajlo\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2020-01-24]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [383016 2019-10-26] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2371760 2020-08-27] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2371760 2020-08-27] (ESET, spol. s r.o. -> ESET)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2020-01-24] (Mixbyte Inc -> Freemake)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
S3 uncheater_bgl; C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe [2097008 2019-10-24] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [158512 2020-08-27] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [106640 2020-08-27] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15288 2020-09-15] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [195976 2020-08-27] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [53064 2020-08-27] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79552 2020-08-27] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [116488 2020-08-27] (ESET, spol. s r.o. -> ESET)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [237824 2020-05-14] (Oracle Corporation -> Oracle Corporation)
S3 VOICEMOD_Driver; C:\Windows\system32\drivers\vmdrv.sys [31744 2020-09-08] (Windows (R) Win 7 DDK provider) [File not signed]
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S2 MBAMChameleon; \SystemRoot\System32\Drivers\MbamChameleon.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) ===================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-10-07 22:04 - 2020-10-07 22:08 - 000015169 _____ C:\Users\Mihajlo\Desktop\FRST.txt
2020-10-07 22:02 - 2020-10-07 22:06 - 000000000 ____D C:\FRST
2020-10-07 22:01 - 2020-10-07 22:01 - 002299392 _____ (Farbar) C:\Users\Mihajlo\Desktop\FRST64.exe
2020-10-04 21:39 - 2020-10-04 21:39 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\CreamAPI
2020-10-04 21:39 - 2020-10-04 21:39 - 000000000 ____D C:\Users\Mihajlo\AppData\LocalLow\Innersloth
2020-10-04 21:36 - 2020-10-04 21:37 - 105302415 _____ C:\Users\Mihajlo\Downloads\Among.Us.Incl.DLC.v09.22.2020s.zip
2020-09-29 22:58 - 2020-09-29 23:10 - 000000000 ____D C:\Users\Mihajlo\Desktop\Agencije
2020-09-25 14:58 - 2020-09-25 14:58 - 004996864 _____ C:\Windows\system32\FNTCACHE.DAT
2020-09-25 03:59 - 2020-10-02 19:25 - 000001346 _____ C:\Users\Mihajlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera browser.lnk
2020-09-25 03:56 - 2020-09-25 03:56 - 002310216 _____ (Opera Software) C:\Users\Mihajlo\Downloads\OperaSetup.exe
2020-09-24 19:54 - 2020-09-25 04:02 - 000000000 ____D C:\Users\Mihajlo\Documents\Icons
2020-09-24 19:28 - 2020-10-07 16:40 - 000000000 ___RD C:\Users\Mihajlo\Desktop\𝒢𝒶𝓂𝑒𝓈
2020-09-24 19:10 - 2020-09-24 19:10 - 000003152 _____ C:\Windows\system32\Tasks\{A7A0E935-A287-45B2-BF13-D63EF55AB23B}
2020-09-24 18:41 - 2020-09-24 18:41 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\4kdownload.com
2020-09-24 18:16 - 2020-09-24 18:16 - 000000000 ____D C:\Users\Mihajlo\HD
2020-09-24 18:13 - 2020-09-24 18:48 - 000000000 ____D C:\ProgramData\Stardock
2020-09-24 18:13 - 2020-09-24 18:17 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\Stardock
2020-09-24 18:13 - 2020-09-24 18:13 - 000000000 ____D C:\Users\Mihajlo\Documents\Stardock
2020-09-17 22:03 - 2020-09-24 19:12 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Intel
2020-09-17 22:03 - 2020-09-17 22:03 - 000000000 ___HD C:\Windows\system32\WLANProfiles
2020-09-17 21:27 - 2020-09-17 21:27 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\Intel
2020-09-17 21:26 - 2020-09-24 19:12 - 000000000 ____D C:\Program Files\Intel
2020-09-17 20:55 - 2020-09-17 20:55 - 000000000 ____D C:\Windows\LastGood.Tmp
2020-09-17 02:14 - 2020-09-17 02:14 - 000000000 ____D C:\Users\Mihajlo\Documents\PassMark
2020-09-17 02:14 - 2020-09-17 02:14 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\PassMark
2020-09-17 02:13 - 2020-09-24 19:10 - 000000000 ____D C:\Program Files\PerformanceTest
2020-09-17 02:13 - 2020-09-17 02:13 - 000000000 ____D C:\ProgramData\Passmark
2020-09-16 23:39 - 2020-09-16 23:42 - 000000000 ____D C:\Program Files (x86)\Hard Disk Sentinel
2020-09-16 18:47 - 2020-10-06 22:04 - 000004296 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1582282773
2020-09-14 18:30 - 2020-09-14 18:30 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\CefSharp
2020-09-14 18:27 - 2020-09-08 18:34 - 000031744 _____ (Windows (R) Win 7 DDK provider) C:\Windows\system32\Drivers\vmdrv.sys
2020-09-09 14:25 - 2020-09-02 07:52 - 003332608 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2020-09-09 14:25 - 2020-09-02 07:25 - 003641344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2020-09-09 14:25 - 2020-08-29 04:41 - 001313792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2020-09-09 14:25 - 2020-08-27 07:04 - 004169216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2020-09-09 14:25 - 2020-08-20 22:54 - 022382424 _____ (Microsoft Corporation) C:\Windows\system32\shell32.dll
2020-09-09 14:25 - 2020-08-20 22:51 - 019805104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\shell32.dll
2020-09-09 14:25 - 2020-08-15 09:22 - 001370680 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2020-09-09 14:25 - 2020-08-15 09:18 - 007363328 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2020-09-09 14:25 - 2020-08-15 09:18 - 002012928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2020-09-09 14:25 - 2020-08-15 09:18 - 000373512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\clfs.sys
2020-09-09 14:25 - 2020-08-15 07:11 - 000061440 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2020-09-09 14:25 - 2020-08-15 06:43 - 000445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2020-09-09 14:25 - 2020-08-15 06:39 - 000047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2020-09-09 14:25 - 2020-08-15 06:33 - 000248832 _____ (Microsoft Corporation) C:\Windows\system32\FXSCOVER.exe
2020-09-09 14:25 - 2020-08-15 06:23 - 001993728 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2020-09-09 14:25 - 2020-08-15 06:17 - 000943616 _____ (Microsoft Corporation) C:\Windows\system32\WFS.exe
2020-09-09 14:25 - 2020-08-15 06:17 - 000324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2020-09-09 14:25 - 2020-08-15 06:14 - 001442304 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2020-09-09 14:25 - 2020-08-15 06:14 - 001383936 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2020-09-09 14:25 - 2020-08-15 06:12 - 000364032 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore.dll
2020-09-09 14:25 - 2020-08-15 06:12 - 000066048 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc6.dll
2020-09-09 14:25 - 2020-08-15 06:11 - 000269312 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcore6.dll
2020-09-09 14:25 - 2020-08-15 06:11 - 000089088 _____ (Microsoft Corporation) C:\Windows\system32\dhcpcsvc.dll
2020-09-09 14:25 - 2020-08-15 06:04 - 001757184 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2020-09-09 14:25 - 2020-08-15 06:02 - 000121344 _____ (Microsoft Corporation) C:\Windows\system32\cryptcatsvc.dll
2020-09-09 14:25 - 2020-08-15 05:59 - 001088512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2020-09-09 14:25 - 2020-08-15 05:57 - 001559040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2020-09-09 14:25 - 2020-08-15 05:55 - 000292352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore.dll
2020-09-09 14:25 - 2020-08-15 05:55 - 000228864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcore6.dll
2020-09-09 14:25 - 2020-08-15 05:55 - 000064512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc.dll
2020-09-09 14:25 - 2020-08-15 05:55 - 000057344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dhcpcsvc6.dll
2020-09-09 14:25 - 2020-08-15 05:50 - 001495552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2020-09-09 14:25 - 2020-08-13 07:25 - 001308256 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2020-09-09 14:25 - 2020-08-13 07:24 - 000355576 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msrpc.sys
2020-09-09 14:25 - 2020-08-13 06:41 - 025756672 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2020-09-09 14:25 - 2020-08-13 06:17 - 000581120 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2020-09-09 14:25 - 2020-08-13 06:06 - 020291072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2020-09-09 14:25 - 2020-08-13 06:06 - 005500416 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2020-09-09 14:25 - 2020-08-13 06:06 - 000785408 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2020-09-09 14:25 - 2020-08-13 05:50 - 000498176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2020-09-09 14:25 - 2020-08-13 05:40 - 000653824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2020-09-09 14:25 - 2020-08-13 05:37 - 001033216 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2020-09-09 14:25 - 2020-08-13 05:30 - 000809472 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2020-09-09 14:25 - 2020-08-13 05:29 - 015480320 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2020-09-09 14:25 - 2020-08-13 05:26 - 000056320 _____ (Microsoft Corporation) C:\Windows\system32\rtutils.dll
2020-09-09 14:25 - 2020-08-13 05:20 - 000880640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2020-09-09 14:25 - 2020-08-13 05:18 - 004112384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2020-09-09 14:25 - 2020-08-13 05:16 - 004859392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2020-09-09 14:25 - 2020-08-13 05:15 - 000747520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2020-09-09 14:25 - 2020-08-13 05:15 - 000696320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2020-09-09 14:25 - 2020-08-13 05:12 - 000044544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rtutils.dll
2020-09-09 14:25 - 2020-08-13 05:11 - 013862400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2020-09-09 14:25 - 2020-08-13 05:04 - 001566720 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2020-09-09 14:25 - 2020-08-13 04:57 - 004387840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2020-09-09 14:25 - 2020-08-13 04:54 - 000801280 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2020-09-09 14:25 - 2020-08-13 04:53 - 001341952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2020-09-09 14:25 - 2020-08-13 04:52 - 000710656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2020-09-09 14:25 - 2020-08-11 08:19 - 000136824 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2020-09-09 14:25 - 2020-08-11 08:17 - 000537632 _____ (Microsoft Corporation) C:\Windows\system32\wer.dll
2020-09-09 14:25 - 2020-08-11 08:16 - 001210112 _____ (Microsoft Corporation) C:\Windows\system32\WMADMOD.DLL
2020-09-09 14:25 - 2020-08-11 08:16 - 000376072 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2020-09-09 14:25 - 2020-08-11 08:12 - 002173376 _____ (Microsoft Corporation) C:\Windows\system32\combase.dll
2020-09-09 14:25 - 2020-08-11 08:12 - 001665104 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2020-09-09 14:25 - 2020-08-11 06:33 - 001037600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMADMOD.DLL
2020-09-09 14:25 - 2020-08-11 06:33 - 000450312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wer.dll
2020-09-09 14:25 - 2020-08-11 06:33 - 000317176 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2020-09-09 14:25 - 2020-08-11 06:31 - 001561296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\combase.dll
2020-09-09 14:25 - 2020-08-11 06:31 - 001215736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2020-09-09 14:25 - 2020-08-11 05:30 - 000477696 _____ (Microsoft Corporation) C:\Windows\system32\puiobj.dll
2020-09-09 14:25 - 2020-08-11 05:03 - 000367616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\puiobj.dll
2020-09-09 14:25 - 2020-08-11 05:03 - 000110080 _____ (Microsoft Corporation) C:\Windows\system32\fdSSDP.dll
2020-09-09 14:25 - 2020-08-11 05:00 - 003720192 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2020-09-09 14:25 - 2020-08-11 04:57 - 000249344 _____ (Microsoft Corporation) C:\Windows\system32\ssdpsrv.dll
2020-09-09 14:25 - 2020-08-11 04:56 - 000172032 _____ (Microsoft Corporation) C:\Windows\system32\fdWSD.dll
2020-09-09 14:25 - 2020-08-11 04:55 - 000380416 _____ (Microsoft Corporation) C:\Windows\system32\pnrpsvc.dll
2020-09-09 14:25 - 2020-08-11 04:45 - 000092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdSSDP.dll
2020-09-09 14:25 - 2020-08-11 04:44 - 001099264 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2020-09-09 14:25 - 2020-08-11 04:44 - 000453632 _____ (Microsoft Corporation) C:\Windows\system32\upnphost.dll
2020-09-09 14:25 - 2020-08-11 04:41 - 000145920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fdWSD.dll
2020-09-09 14:25 - 2020-08-11 04:32 - 000329728 _____ (Microsoft Corporation) C:\Windows\SysWOW64\upnphost.dll
2020-09-09 14:25 - 2020-08-11 02:44 - 000272896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstext40.dll
2020-09-09 14:25 - 2020-08-10 11:18 - 000160144 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2020-09-09 14:25 - 2020-08-10 02:04 - 003223552 _____ (Microsoft Corporation) C:\Windows\system32\aitstatic.exe
2020-09-09 14:25 - 2020-08-10 02:04 - 001998848 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2020-09-09 14:25 - 2020-08-10 02:04 - 000843776 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2020-09-09 14:25 - 2020-08-10 02:04 - 000700416 _____ (Microsoft Corporation) C:\Windows\system32\centel.dll
2020-09-09 14:25 - 2020-08-10 02:04 - 000667648 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2020-09-09 14:25 - 2020-08-10 02:04 - 000593920 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2020-09-09 14:25 - 2020-08-10 02:04 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2020-09-09 14:25 - 2020-08-10 02:04 - 000475136 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2020-09-09 14:25 - 2020-08-10 02:04 - 000380928 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2020-09-09 14:25 - 2020-08-08 15:43 - 001545912 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2020-09-09 14:25 - 2020-08-06 15:37 - 000436224 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2020-09-09 14:25 - 2020-08-06 15:35 - 000359424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2020-10-07 21:08 - 2019-10-23 15:38 - 000003782 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{511FE2DD-3690-4758-BFDF-E286B335D6FE}
2020-10-07 20:01 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2020-10-07 19:38 - 2019-10-24 00:21 - 000000000 ____D C:\ProgramData\Riot Games
2020-10-07 19:21 - 2020-03-19 17:55 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\discord
2020-10-07 16:38 - 2019-10-23 19:40 - 000000000 ____D C:\ProgramData\NVIDIA
2020-10-07 16:37 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-10-07 14:39 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2020-10-07 14:35 - 2020-07-09 02:41 - 000000000 ____D C:\Users\Mihajlo\AppData\LocalLow\BitTorrent
2020-10-07 14:35 - 2019-10-23 16:59 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\BitTorrent
2020-10-05 19:59 - 2020-05-30 21:59 - 000000000 ____D C:\Users\Mihajlo\Documents\ViberDownloads
2020-10-05 19:58 - 2020-03-17 19:05 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\ViberPC
2020-10-05 01:04 - 2019-10-23 15:36 - 000003598 _____ C:\Windows\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1294692145-876352972-4198589163-1001
2020-10-04 01:22 - 2019-10-23 15:30 - 000000000 ____D C:\Users\Mihajlo
2020-10-02 19:25 - 2019-10-23 19:37 - 000004058 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1571852220
2020-09-25 17:30 - 2014-11-22 03:01 - 000865068 _____ C:\Windows\system32\PerfStringBackup.INI
2020-09-25 14:58 - 2019-10-23 17:51 - 000000000 ____D C:\ProgramData\Package Cache
2020-09-25 03:43 - 2020-07-14 21:43 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\Ubisoft Game Launcher
2020-09-25 03:41 - 2019-11-23 01:37 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Wise Disk Cleaner
2020-09-25 03:41 - 2019-10-23 23:33 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\CrashDumps
2020-09-24 19:56 - 2019-12-08 19:26 - 000000000 ___RD C:\Users\Mihajlo\Desktop\🐧🐧
2020-09-24 19:12 - 2020-06-15 16:43 - 000000000 ____D C:\ProgramData\Intel
2020-09-24 19:12 - 2019-10-23 18:24 - 000000000 ____D C:\Program Files (x86)\Intel
2020-09-24 19:09 - 2019-10-26 02:41 - 000000000 ____D C:\Program Files (x86)\Steam
2020-09-24 18:52 - 2020-03-06 00:01 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\WiseUpdate
2020-09-24 18:21 - 2020-02-28 23:58 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\vlc
2020-09-24 00:49 - 2019-11-03 23:11 - 000000000 ____D C:\Users\Mihajlo\Documents\Camtasia Studio
2020-09-23 21:03 - 2020-04-14 14:01 - 000002244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-09-18 01:38 - 2020-04-14 16:07 - 000001413 _____ C:\Users\Mihajlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA GeForce NOW.lnk
2020-09-18 01:38 - 2019-10-23 19:43 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\NVIDIA Corporation
2020-09-17 22:40 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\system32\NDF
2020-09-16 21:45 - 2020-05-31 18:14 - 000000258 __RSH C:\ProgramData\ntuser.pol
2020-09-16 20:00 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2020-09-16 19:59 - 2013-08-22 17:36 - 000000000 ___HD C:\Program Files\WindowsApps
2020-09-15 14:56 - 2019-10-16 14:04 - 000015288 _____ (ESET) C:\Windows\system32\Drivers\eelam.sys
2020-09-14 18:19 - 2020-06-13 15:58 - 000000000 _____ C:\Recovery.txt
2020-09-13 19:54 - 2019-10-24 15:12 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\ElevatedDiagnostics
2020-09-13 13:53 - 2020-03-19 17:55 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\Discord
2020-09-12 15:00 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\rescache
2020-09-12 03:22 - 2019-10-24 18:58 - 000000000 ____D C:\Windows\system32\Appraiser
2020-09-12 03:22 - 2014-11-22 07:25 - 000000000 ___SD C:\Windows\system32\CompatTel
2020-09-12 03:22 - 2013-08-22 17:36 - 000000000 ___RD C:\Windows\ToastData
2020-09-11 15:35 - 2013-08-22 17:20 - 000000000 ____D C:\Windows\CbsTemp
2020-09-11 15:19 - 2019-10-24 17:54 - 000000000 ____D C:\Windows\system32\MRT
2020-09-11 15:14 - 2019-10-24 17:54 - 129170736 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Files in the root of some directories ========

2020-02-29 00:18 - 2020-06-26 17:55 - 000000132 _____ () C:\Users\Mihajlo\AppData\Roaming\Adobe PNG Format CS6 Prefs
2020-06-11 20:36 - 2020-06-11 20:36 - 000000218 _____ () C:\Users\Mihajlo\AppData\Local\recently-used.xbel

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)


LastRegBack: 2020-10-01 18:14
==================== End of FRST.txt ========================

https://www.mycity.rs/must-login.png

offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10581
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Čist si.

offline
  • Long drive and music.
  • Pridružio: 02 Nov 2014
  • Poruke: 595

Dobio sam neki sumnjivi mejl kako mi je računar pod virusom, razne ucene itd... Jako kreativan mejl pa sam kasnije instalirao malwarebytes, i kaspersky skenirao i sve je ok. Hvala ti na brzom odgovoru! Ziveli

Ko je trenutno na forumu
 

Ukupno su 467 korisnika na forumu :: 24 registrovanih, 1 sakriven i 442 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3028 - dana 22 Nov 2019 07:47

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: Atomski čoban, Dimitrise93, Doc, esx66, goxin, indja, MB120mm, mean_machine, miodrag, plavii, raketaš, raso76, renoje2, ruma, sakota79, sevenino, sombrero, stalker, su27, TetkaPersa, theBorer, Toni, vathra, vlvl