ne mogu da obrisem fanli90

ne mogu da obrisem fanli90

offline
  • Pridružio: 12 Nov 2012
  • Poruke: 505
  • Gde živiš: Banja Luka

ne mogu da obrisem nikako ovaj fanli90 stalno se pojavljue kada otvorim ili chrome ili mozilu probao sam malwerebytes i sa adwcleaner ali se opet pojavi brisao sam pretrazivace i opet instal ali opet isto

offline
  • Pridružio: 02 Jan 2008
  • Poruke: 2167

Zamolio bih te da ispratis uputstvo o otvaranju teme u Ambulanti: https://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

offline
  • Pridružio: 12 Nov 2012
  • Poruke: 505
  • Gde živiš: Banja Luka

Problem je u tome kada pokrenem bilo koji pretrazivac prva stranica koju ucita je fanli90. Problem se pojavio kada sam nesto preuyeo sa interneta i onda su se samo poceli sami instalirati njih par. Par sam ih bar ja mislim obrisao uz pomoc antimalwerebytes i adw scanera.
Tu su i izvjestaji
https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png

offline
  • Pridružio: 02 Jan 2008
  • Poruke: 2167

1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

CreateRestorePoint:
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\Run: [CT7PyAZXY-.exe] => C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}\CT7PyAZXY-.exe [1192448 2017-01-28] ()
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\Run: [nS+q-7t-Lx.exe] => C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}\nS+q-7t-Lx.exe [1437184 2017-01-28] (dshgghsd)
C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}
HKLM\...\Providers\1j5dun8q: C:\Program Files\Nabsthenoly Core\local32spl.dll
C:\Program Files\Nabsthenoly Core
ShellExecuteHooks: No Name - {50F91B90-DE41-11E6-950F-64006A5CFC23} - C:\Users\korisnik\AppData\Roaming\Chsetazle\Masersegisuward.dll -> No File
C:\Users\korisnik\AppData\Roaming\Chsetazle
R2 Pettckirertain; C:\Program Files\Cluvigegowory\pdyCnt.dll [149504 2017-01-28] () [File not signed]
C:\Program Files\Cluvigegowory
2017-01-28 16:23 - 2017-01-28 16:23 - 00000000 ____D C:\Users\korisnik\AppData\Local\NetworkTiles
2017-01-28 16:11 - 2017-01-28 16:51 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\Chsetazle
2017-01-28 16:11 - 2017-01-28 16:11 - 00000000 ____D C:\Users\korisnik\AppData\Local\Vhachthilige
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk
2017-01-28 16:11 - 2017-01-28 16:11 - 00149504 _____ () c:\program files\cluvigegowory\pdycnt.dll
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\StartupApproved\Run: => "CT7PyAZXY-.exe"
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\StartupApproved\Run: => "nS+q-7t-Lx.exe"
File: C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
Hosts:
EmptyTemp:


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.



Nakon toga,



Preuzmi AdwCleaner i sačuvaj ga na Desktop
Dvoklikom pokreni program.
U EULA prozoru klikni na I agree.
U Options isključi Reset Winsock settings ako je uključen.
Klikni na dugme Scan i sačekaj da se završi skeniranje.
Klikni na dugme Cleaning i pričekaj da program završi.
Program će zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni OK kao potvrdu.
Na sljedeća dva prozora koja se otvore (Informations i Restart required ) klikni OK

Računar će se restartovati, a potom otvoriti Notepad (C:\Adwcleaner\AdwCleaner[C1].txt) sa izvještajem.
Sačuvaj taj izvještaj na Desktop i okači ga uz poruku koristeći opciju "Prikači fajl"

offline
  • Pridružio: 12 Nov 2012
  • Poruke: 505
  • Gde živiš: Banja Luka

https://www.mycity.rs/must-login.png

offline
  • Pridružio: 02 Jan 2008
  • Poruke: 2167

Nisi dostavio Fixlog.txt.
Pazljivo isprati uputstvo koje sam ti dao.

offline
  • Pridružio: 04 Feb 2017
  • Poruke: 1

Fix result of Farbar Recovery Scan Tool (x64) Version: 29-01-2017
Ran by PC (04-02-2017 22:10:04) Run:1
Running from C:\Users\PC\Desktop
Loaded Profiles: PC (Available Profiles: PC)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\Run: [CT7PyAZXY-.exe] => C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}\CT7PyAZXY-.exe [1192448 2017-01-28] ()
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\Run: [nS+q-7t-Lx.exe] => C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}\nS+q-7t-Lx.exe [1437184 2017-01-28] (dshgghsd)
C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}
HKLM\...\Providers\1j5dun8q: C:\Program Files\Nabsthenoly Core\local32spl.dll
C:\Program Files\Nabsthenoly Core
ShellExecuteHooks: No Name - {50F91B90-DE41-11E6-950F-64006A5CFC23} - C:\Users\korisnik\AppData\Roaming\Chsetazle\Masersegisuward.dll -> No File
C:\Users\korisnik\AppData\Roaming\Chsetazle
R2 Pettckirertain; C:\Program Files\Cluvigegowory\pdyCnt.dll [149504 2017-01-28] () [File not signed]
C:\Program Files\Cluvigegowory
2017-01-28 16:23 - 2017-01-28 16:23 - 00000000 ____D C:\Users\korisnik\AppData\Local\NetworkTiles
2017-01-28 16:11 - 2017-01-28 16:51 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\Chsetazle
2017-01-28 16:11 - 2017-01-28 16:11 - 00000000 ____D C:\Users\korisnik\AppData\Local\Vhachthilige
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk
2017-01-28 16:11 - 2017-01-28 16:11 - 00149504 _____ () c:\program files\cluvigegowory\pdycnt.dll
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\StartupApproved\Run: => "CT7PyAZXY-.exe"
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\StartupApproved\Run: => "nS+q-7t-Lx.exe"
File: C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
Hosts:
EmptyTemp:
*****************

Restore point was successfully created.



ZNAČI ISTA STVAR, slijedio sam upute i ovo mi je izbacilo

offline
  • Pridružio: 02 Jan 2008
  • Poruke: 2167

romano.comic ::Fix result of Farbar Recovery Scan Tool (x64) Version: 29-01-2017
Ran by PC (04-02-2017 22:10:04) Run:1
Running from C:\Users\PC\Desktop
Loaded Profiles: PC (Available Profiles: PC)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\Run: [CT7PyAZXY-.exe] => C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}\CT7PyAZXY-.exe [1192448 2017-01-28] ()
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\Run: [nS+q-7t-Lx.exe] => C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}\nS+q-7t-Lx.exe [1437184 2017-01-28] (dshgghsd)
C:\Users\korisnik\AppData\Roaming\{97d-95-e8-b74dc-a8008-b3bb-9e426}
HKLM\...\Providers\1j5dun8q: C:\Program Files\Nabsthenoly Core\local32spl.dll
C:\Program Files\Nabsthenoly Core
ShellExecuteHooks: No Name - {50F91B90-DE41-11E6-950F-64006A5CFC23} - C:\Users\korisnik\AppData\Roaming\Chsetazle\Masersegisuward.dll -> No File
C:\Users\korisnik\AppData\Roaming\Chsetazle
R2 Pettckirertain; C:\Program Files\Cluvigegowory\pdyCnt.dll [149504 2017-01-28] () [File not signed]
C:\Program Files\Cluvigegowory
2017-01-28 16:23 - 2017-01-28 16:23 - 00000000 ____D C:\Users\korisnik\AppData\Local\NetworkTiles
2017-01-28 16:11 - 2017-01-28 16:51 - 00000000 ____D C:\Users\korisnik\AppData\Roaming\Chsetazle
2017-01-28 16:11 - 2017-01-28 16:11 - 00000000 ____D C:\Users\korisnik\AppData\Local\Vhachthilige
WMI_ActiveScriptEventConsumer_ASEC: <===== ATTENTION
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\korisnik\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\Public\Desktop\Google Chrome.lnk -> C:\Program Files\Google\Chrome\Application\chrome.exe (Google Inc.) -> --load-extension="C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk" hxxp://fanli90.cn/
ShortcutWithArgument: C:\Users\Public\Desktop\Mozilla Firefox.lnk -> C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation) -> hxxp://fanli90.cn/
C:\Users\korisnik\AppData\Local\kemgadeojglibflomicgnfeopkdfflnk
2017-01-28 16:11 - 2017-01-28 16:11 - 00149504 _____ () c:\program files\cluvigegowory\pdycnt.dll
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\StartupApproved\Run: => "CT7PyAZXY-.exe"
HKU\S-1-5-21-3813550502-1410529358-1024537911-1002\...\StartupApproved\Run: => "nS+q-7t-Lx.exe"
File: C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
Hosts:
EmptyTemp:
*****************

Restore point was successfully created.



ZNAČI ISTA STVAR, slijedio sam upute i ovo mi je izbacilo


Logovi koji se nalaze u ovoj temi namenjeni su iskljucivo za racunar korisnika koji je temu kreirao. U skladu sa tim, clanovi AMF tima za svakog korisnika prave poseban "fix", i koriscenje jednog fix-a na drugom racunaru nije preporucljivo i moze izazvati stetu!

Preporucujem ti da ispratis uputstvo o tome kako kreirati temu u Ambulanti, u kojoj cemo nastaviti diskusiju o problemu koji imas: https://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

Ko je trenutno na forumu
 

Ukupno su 1385 korisnika na forumu :: 30 registrovanih, 6 sakrivenih i 1349 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., Ageofloneliness, Arahne, babaroga, bojcistv, celik, d bos, darkangel, Dorcolac, GandorCC, hatman, kinez88, Kubovac, Magistar78, MB120mm, Mixelotti, nedeljkovici, Nemanja.M, nenaddz, powSrb, procesor, royst33, S2M, Skywhaler, Toper, vathra, VitezKoja, Vlada78, YugoSlav, zlaya011