Hakovan facebook ili kompjuter

Hakovan facebook ili kompjuter

offline
  • Pridružio: 15 Feb 2016
  • Poruke: 13

Napisano: 15 Feb 2016 16:20

Pozdrav. Sinoć sam trebao poslati poruku svim prijateljima na fecebook i tražio sam kako bi to odmah riješio. Našao sam jedan tutorijal i nažalost slijedio ga. Tek kasnije sam pročitao da je moguće da sam hakovan zbog toga. Video je ovaj:

[Link mogu videti samo ulogovani korisnici]

Kad sam vidio da sm možda hakovan, odmah sam promjenio lozinke i na fb i na mailu i nisam našao upade s drugih kompjutera osim moga.


Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:07-02-2016
Ran by Ante (administrator) on ANAANTE (15-02-2016 16:14:38)
Running from C:\Users\Ante\Downloads
Loaded Profiles: Ante (Available Profiles: Ante & Administrator)
Platform: Windows 8.1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [Link mogu videti samo ulogovani korisnici]

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Broadcom Corp.) C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\dsiwmis.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Dritek System INC.) C:\Windows\RfBtnSvc64.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Nero AG) C:\Program Files (x86)\Nero\Update\NASvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LMutilps32.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\LManager.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_17.5.9600.20911_x64__8wekyb3d8bbwe\livecomm.exe
(Microsoft Corporation) C:\Windows\System32\SkyDrive.exe
(Dritek System Inc.) C:\Program Files (x86)\Launch Manager\MMDx64Fx.exe
(Intel Corporation) C:\Windows\System32\igfxext.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrl.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(ELAN Microelectronics Corp.) C:\Program Files\Elantech\ETDCtrlHelper.exe
(Dritek System Inc.) C:\Program Files (x86)\RadioController\RfBtnHelper.exe
(Adobe Systems Inc.) C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerTray.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Microsoft Corporation) C:\Windows\WinStore\WSHost.exe
(Acer Incorporated) C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerEvent.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\ielowutil.exe
(Farbar) C:\Users\Ante\Downloads\FRST64 (1).exe


==================== Registry (Whitelisted) ===========================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [ETDCtrl] => C:\Program Files\Elantech\ETDCtrl.exe [2873744 2012-11-20] (ELAN Microelectronics Corp.)
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12503184 2012-06-11] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] => C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [Zune Launcher] => C:\Program Files\Zune\ZuneLauncher.exe [163552 2011-08-05] (Microsoft Corporation)
HKLM-x32\...\Run: [RadioController] => C:\Program Files (x86)\RadioController\RfBtnHelper.exe [111216 2013-05-22] (Dritek System Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [843712 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [36760 2012-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Acrobat Assistant 8.0] => C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [815512 2012-04-04] (Adobe Systems Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-03-07] (Oracle Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [803200 2016-02-12] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-05] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-3822460687-1371615998-2300488824-1001\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-3822460687-1371615998-2300488824-1001\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe [152872 2007-06-27] (Nero AG)
HKU\S-1-5-21-3822460687-1371615998-2300488824-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-3822460687-1371615998-2300488824-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7451928 2015-03-13] (Piriform Ltd)
HKU\S-1-5-21-3822460687-1371615998-2300488824-1001\...\MountPoints2: {d2a7fbd6-a513-11e3-be84-208984b4132a} - "E:\LGAutoRun.exe"
HKU\S-1-5-21-3822460687-1371615998-2300488824-1001\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\System32\scrnsave.scr [11776 2013-08-22] (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 77.77.192.20 94.140.66.194
Tcpip\..\Interfaces\{00F27E5E-335B-4ABC-A408-8AFE6E885C3D}: [DhcpNameServer] 77.77.192.20 94.140.66.194

Internet Explorer:
==================
HKU\S-1-5-21-3822460687-1371615998-2300488824-1001\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]{19A88AEB-95E5-42F4-9C68-4FABEC548EC1}&mid=16699c0bbaa247cda1eaf1c0c250fad9-c803bb2b042d9e430309357f793d58cf57c6960c&lang=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2016-01-12 19:12:13&v=4.2.4.155&pid=wtu&sg=&sap=hp
HKU\S-1-5-21-3822460687-1371615998-2300488824-1001\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
SearchScopes: HKLM-x32 -> DefaultScope {11D2FA4E-3CF7-463D-A418-6EB1E4181AB4} URL =
SearchScopes: HKU\S-1-5-21-3822460687-1371615998-2300488824-1001 -> DefaultScope {95B7759C-8C7F-4BF1-B163-73684A933233} URL = [Link mogu videti samo ulogovani korisnici]{19A88AEB-95E5-42F4-9C68-4FABEC548EC1}&mid=16699c0bbaa247cda1eaf1c0c250fad9-c803bb2b042d9e430309357f793d58cf57c6960c&lang=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2016-01-12 19:12:13&v=4.2.4.155&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3822460687-1371615998-2300488824-1001 -> {11D2FA4E-3CF7-463D-A418-6EB1E4181AB4} URL =
SearchScopes: HKU\S-1-5-21-3822460687-1371615998-2300488824-1001 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = [Link mogu videti samo ulogovani korisnici]{19A88AEB-95E5-42F4-9C68-4FABEC548EC1}&mid=16699c0bbaa247cda1eaf1c0c250fad9-c803bb2b042d9e430309357f793d58cf57c6960c&lang=en&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2016-01-12 19:12:13&v=4.2.4.155&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3822460687-1371615998-2300488824-1001 -> {FEBFCAD9-5723-4946-A71C-2D4E82DDAC22} URL =
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2012-04-04] (Adobe Systems Incorporated)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-04-01] (Oracle Corporation)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-04-04] (Adobe Systems Incorporated)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-04-01] (Oracle Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-04-04] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-04-04] (Adobe Systems Incorporated)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\Ante\AppData\Roaming\Mozilla\Firefox\Profiles\7AI1vDW5.default
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf -> C:\Program Files (x86)\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll [2011-05-23] (Foxit Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-07] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-04-01] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-04-01] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-03] (Google Inc.)
FF Plugin-x32: @verimatrix.com/ViewRightWeb -> C:\Program Files (x86)\Verimatrix\ViewRight Web\\npViewRight.dll [2015-04-06] (Verimatrix, Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\0\NP_wtapp.dll [No File]
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-04-04] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-3822460687-1371615998-2300488824-1001: @verimatrix.com/ViewRightWeb -> C:\Program Files (x86)\Verimatrix\ViewRight Web\\npViewRight.dll [2015-04-06] (Verimatrix, Inc.)
FF Plugin HKU\S-1-5-21-3822460687-1371615998-2300488824-1001: [Link mogu videti samo ulogovani korisnici] -> C:\Users\Ante\AppData\Roaming\AVIIONMediadoo\AviionAuthTokenMaker\1.0.0.2\npAviionAuthTokenMaker.dll [2013-11-20] (AVIION Media d.o.o.)
FF Extension: Avira Browser Safety - C:\Users\Ante\AppData\Roaming\Mozilla\Firefox\Profiles\7AI1vDW5.default\Extensions\abs@avira.com.xpi [2016-02-15]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2015-03-04] [not signed]

Chrome:
=======
CHR StartupUrls: Default -> "hxxps://www.google.ba/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8"
CHR Profile: C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-06]
CHR Extension: (Google Docs) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google disk) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Google pretraživanje) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (Google Sheets) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-06]
CHR Extension: (Avira Browser Safety) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2016-02-15]
CHR Extension: (Google dokumenti izvanmrežno) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-19]
CHR Extension: (Plaćanja u web-trgovini Chrome) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-07-26]
CHR Extension: (Gmail) - C:\Users\Ante\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-29]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - [Link mogu videti samo ulogovani korisnici]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - [Link mogu videti samo ulogovani korisnici]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Services (Whitelisted) ========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2016-02-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2016-02-12] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2016-02-12] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1418560 2016-02-12] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [249120 2016-01-05] (Avira Operations GmbH & Co. KG)
R2 BrcmCardReader; C:\Program Files\Broadcom\MemoryCard\BrcmCardReader.exe [176640 2012-08-21] (Broadcom Corp.) [File not signed]
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
S3 DeviceFastLaneService; C:\Program Files\Packard Bell\Packard Bell Device Fast-lane\DeviceFastLaneSvc.exe [469648 2012-11-16] (Acer Incorporated)
R3 ePowerSvc; C:\Program Files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [662088 2013-03-15] (Acer Incorporated)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [165760 2012-07-18] (Intel Corporation)
S3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-27] (Nero AG)
R2 RfButtonDriverService; C:\Windows\RfBtnSvc64.exe [96880 2013-05-22] (Dritek System INC.)
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2015-10-19] (Popcorn Time) [File not signed]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [368632 2014-09-22] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2014-09-22] (Microsoft Corporation)

===================== Drivers (Whitelisted) ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2016-02-12] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146696 2016-02-12] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2016-02-12] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2016-02-12] (Avira Operations GmbH & Co. KG)
S0 ebdrv; C:\Windows\System32\drivers\evbda.sys [3357024 2013-08-22] (Broadcom Corporation)
R3 Ps2Kb2Hid; C:\Windows\System32\drivers\aPs2Kb2Hid.sys [26736 2013-05-22] (Dritek System Inc.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [35320 2014-09-22] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [258368 2014-09-22] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2014-09-22] (Microsoft Corporation)
S3 MBAMSwissArmy; \??\C:\WINDOWS\system32\drivers\MBAMSwissArmy.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-15 16:14 - 2016-02-15 16:15 - 00020903 _____ C:\Users\Ante\Downloads\FRST.txt
2016-02-15 16:13 - 2016-02-15 16:13 - 02370560 _____ (Farbar) C:\Users\Ante\Downloads\FRST64 (1).exe
2016-02-15 01:36 - 2016-02-15 01:36 - 00000000 ____D C:\Users\Ante\AppData\Roaming\Mozilla
2016-02-12 14:18 - 2016-02-13 13:38 - 00000000 ____D C:\Users\Ante\Desktop\Mostar Slike
2016-02-12 14:17 - 2016-02-12 14:19 - 00001122 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2016-02-12 14:17 - 2016-02-12 14:19 - 00000000 ____D C:\ProgramData\Package Cache
2016-02-12 14:01 - 2016-02-12 14:19 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-02-12 13:48 - 2016-02-12 14:06 - 00000000 ____D C:\Users\Ante\AppData\Roaming\Avira
2016-02-12 13:47 - 2016-02-12 14:17 - 00000000 ____D C:\ProgramData\Avira
2016-02-12 13:47 - 2016-02-12 14:17 - 00000000 ____D C:\Program Files (x86)\Avira
2016-02-12 13:47 - 2016-02-12 13:59 - 00146696 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2016-02-12 13:47 - 2016-02-12 13:59 - 00135880 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2016-02-12 13:47 - 2016-02-12 13:59 - 00073032 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2016-02-12 13:47 - 2016-02-12 13:59 - 00035488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2016-02-12 13:42 - 2016-02-13 22:46 - 00000000 ____D C:\Users\Ante\Downloads\Avira
2016-02-10 22:45 - 2016-02-10 22:45 - 00008277 _____ C:\Users\Ante\Downloads\468X120 (2).html
2016-02-08 15:36 - 2016-02-08 15:36 - 00059766 _____ C:\Users\Ante\Downloads\188312-just.go.with.it.2011.720p.bluray.x264felony.zip
2016-02-08 15:33 - 2016-02-08 15:33 - 00051816 _____ C:\Users\Ante\Downloads\124351-JustGoWithIt_2011_R5XviDExtraTorrentRG.zip
2016-02-06 23:42 - 2016-02-08 14:53 - 00000000 ____D C:\Users\Ante\Downloads\Dirty.Grandpa.2016.TS.x264-Garmin
2016-02-06 17:47 - 2016-02-11 18:06 - 00000000 ____D C:\Users\Ante\Desktop\Nogofan
2016-02-04 22:17 - 2016-02-04 22:17 - 01418752 _____ C:\Users\Ante\Downloads\din-renalna-scint.pps
2016-02-03 15:36 - 2016-02-03 17:26 - 00000000 ____D C:\Users\Ante\Desktop\Mariola
2016-01-19 20:42 - 2016-01-19 20:42 - 00008277 _____ C:\Users\Ante\Downloads\468X120.html
2016-01-19 20:42 - 2016-01-19 20:42 - 00008277 _____ C:\Users\Ante\Downloads\468X120 (1).html
2016-01-18 22:43 - 2016-01-18 22:43 - 00198378 _____ C:\Users\Ante\Desktop\flamengo1.html
2016-01-18 22:43 - 2016-01-18 22:43 - 00000000 ____D C:\Users\Ante\Desktop\flamengo1_files
2016-01-17 00:03 - 2016-02-13 22:16 - 00000000 ____D C:\Users\Ante\Downloads\PopcornTime
2016-01-17 00:03 - 2016-01-17 00:03 - 00001225 _____ C:\Users\Public\Desktop\Popcorn Time.lnk
2016-01-17 00:03 - 2016-01-17 00:03 - 00000000 ____D C:\Users\Ante\AppData\Local\PopcornTimeDesktop
2016-01-17 00:03 - 2016-01-17 00:03 - 00000000 ____D C:\Program Files (x86)\Popcorn Time
2016-01-17 00:01 - 2016-01-17 00:02 - 48359224 _____ (Popcorn Time ) C:\Users\Ante\Downloads\PopcornTime-latest.exe
2016-01-16 11:10 - 2016-01-16 11:10 - 00216601 _____ C:\Users\Ante\Desktop\PUB KVIZ.pdf

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-02-15 16:14 - 2015-03-03 16:44 - 00003918 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{F2B5AAA9-E873-4969-B89C-E3D31C4AA720}
2016-02-15 16:14 - 2014-12-02 10:33 - 00000000 ____D C:\FRST
2016-02-15 16:13 - 2014-12-15 21:33 - 00000000 __RDO C:\Users\Ante\OneDrive
2016-02-15 16:11 - 2014-12-02 12:13 - 00000918 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2016-02-15 16:08 - 2013-08-22 14:36 - 00000000 ____D C:\WINDOWS\Inf
2016-02-15 02:40 - 2014-12-02 12:14 - 00000000 ____D C:\Program Files (x86)\Steam
2016-02-15 01:53 - 2014-12-02 12:13 - 00000922 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2016-02-14 00:57 - 2014-12-22 15:37 - 00000000 ____D C:\Users\Ante\AppData\Roaming\uTorrent
2016-02-13 22:45 - 2014-08-08 16:58 - 00000000 ____D C:\Users\Ante\Downloads\Filmovi
2016-02-13 22:20 - 2015-12-20 00:15 - 00000000 ____D C:\Users\Ante\AppData\LocalLow\uTorrent
2016-02-13 11:26 - 2014-12-06 10:36 - 00003600 _____ C:\WINDOWS\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3822460687-1371615998-2300488824-1001
2016-02-12 14:15 - 2013-08-22 15:45 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2016-02-12 14:14 - 2015-12-11 16:03 - 00000000 ____D C:\ProgramData\Avg
2016-02-12 14:14 - 2015-05-23 10:36 - 00000000 ____D C:\Users\Ante\AppData\Local\Avg
2016-02-12 14:14 - 2014-12-11 18:39 - 00000000 ____D C:\Program Files (x86)\AVG
2016-02-12 14:14 - 2014-12-11 18:31 - 00000000 ____D C:\ProgramData\MFAData
2016-02-12 14:14 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2016-02-12 13:26 - 2015-11-25 10:50 - 00000000 ____D C:\Users\Ante\AppData\Local\AvgSetupLog
2016-02-12 13:25 - 2012-07-26 09:12 - 00000000 ___HD C:\WINDOWS\ELAMBKUP
2016-02-10 22:55 - 2014-12-02 12:13 - 00002240 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-10 17:32 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-02-10 17:32 - 2013-08-22 16:36 - 00000000 ____D C:\WINDOWS\AppReadiness
2016-02-09 11:29 - 2014-02-28 16:56 - 00000000 ____D C:\Users\Ante\Desktop\glupostići ana
2016-02-08 18:55 - 2013-08-22 14:25 - 00262144 ___SH C:\WINDOWS\system32\config\ELAM
2016-02-08 14:50 - 2014-04-16 12:31 - 00000000 ____D C:\Users\Ante\Desktop\Slike-moje
2016-02-03 16:27 - 2014-09-24 08:15 - 00863592 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2016-02-03 15:48 - 2014-12-02 12:13 - 00003894 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-03 15:48 - 2014-12-02 12:13 - 00003658 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-03 15:37 - 2014-03-13 15:13 - 00000000 ____D C:\Users\Ante\Desktop\Slike vjenčanje
2016-01-27 17:07 - 2013-12-08 14:03 - 00000000 ____D C:\Users\Ante\Desktop\Tekstovi
2016-01-20 23:03 - 2014-12-15 21:02 - 00000000 ____D C:\Users\Ante
2016-01-20 16:40 - 2014-12-15 21:02 - 00000000 ____D C:\Users\Administrator
2016-01-20 16:37 - 2013-08-22 15:44 - 00485432 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2016-01-17 15:22 - 2014-12-03 17:08 - 00000000 ____D C:\Users\Ante\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-01-17 15:19 - 2016-01-14 18:17 - 00000000 ____D C:\Users\Ante\Documents\My Quiz
2016-01-17 15:19 - 2016-01-14 18:17 - 00000000 ____D C:\Program Files (x86)\Wondershare

==================== Files in the root of some directories =======

2014-12-23 11:27 - 2014-12-23 11:27 - 0000037 ___SH () C:\Users\Ante\AppData\Local\20986331705021ca58edc424.96250074
2015-02-22 00:32 - 2015-02-22 00:32 - 0003584 _____ () C:\Users\Ante\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini

Some files in TEMP:
====================
C:\Users\Ante\AppData\Local\Temp\avg-cd99ac05-921d-4d74-a27d-f27acf3a707e.exe
C:\Users\Ante\AppData\Local\Temp\avgnt.exe
C:\Users\Ante\AppData\Local\Temp\avguirn_081337966329.exe
C:\Users\Ante\AppData\Local\Temp\UNINSTALL.EXE


==================== Bamital & volsnap =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\wininit.exe => File is digitally signed
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\SysWOW64\explorer.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\SysWOW64\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\SysWOW64\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\SysWOW64\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\SysWOW64\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-02-13 11:26

==================== End of FRST.txt ============================
[Link mogu videti samo ulogovani korisnici]

Dopuna: 15 Feb 2016 17:03

Da Vas samo pitam, ako je moguće- koliko može biti ozbiljno, jel mi može hakovat i nešto drugo osim fb profila i tog maila, koji su Vaši savjeti dok se ne riješi i vidi ima li problema? Što mi je činiti?



offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Zdravo,

Arrow Kopirao si taj kod u Chrome?

----------

Arrow Deinstaliraj YTD Video Downloader preko Control Panela.

----------

Arrow Preuzmi "Xplode"-ov AdwCleaner () i sacuvaj ga na Desktop

Dvoklikom pokreni program.
Klikni na dugme [Scan] i pricekaj da program zavrsi.
Klikni na dugme [Clean]
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok


Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"

Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S0].txt



offline
  • Pridružio: 15 Feb 2016
  • Poruke: 13

Ne znam na koji mislite kod? Ako mislite na ono iz Youtuba uradio sam nažalost sve što je napisano....

Deinstaliran je. Taj program je odavno na pc-u, preko njega povremeno skinem neke youtube filmove.

Pokrenuo scan, piše mi: waiting for action. Please uncheck elements you want to keep. Dole mi nema nikakvih elemenata. Dali sad da stavim cleaning?

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Da, ako je nesto pronasao, kliknes na Cleaning i dostavis izvestaj na kraju kad se pojavi.

offline
  • Pridružio: 15 Feb 2016
  • Poruke: 13

[Link mogu videti samo ulogovani korisnici]

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Malo da pogledamo detaljnije:

1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:


CreateRestorePoint:
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
File: C:\Users\Ante\AppData\Local\20986331705021ca58edc424.96250074
File: C:\Users\Ante\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini 
EmptyTemp:


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.

offline
  • Pridružio: 15 Feb 2016
  • Poruke: 13

Fix result of Farbar Recovery Scan Tool (x64) Version:07-02-2016
Ran by Ante (2016-02-15 23:42:09) Run:2
Running from C:\Users\Ante\Desktop
Loaded Profiles: Ante (Available Profiles: Ante & Administrator)
Boot Mode: Normal
==============================================

fixlist content:
*****************

CreateRestorePoint:
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
File: C:\Users\Ante\AppData\Local\20986331705021ca58edc424.96250074
File: C:\Users\Ante\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
EmptyTemp:
*****************

Restore point was successfully created.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} => key not found.
HKCR\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} => key not found.

========================= File: C:\Users\Ante\AppData\Local\20986331705021ca58edc424.96250074 ========================

File not signed
MD5: 75921FDA3F33AB613E8B98028CAF1A66
Creation and modification date: 2014-12-23 11:27 - 2014-12-23 11:27
Size: 0000037
Attributes: ---SH
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:

====== End of File: ======


========================= File: C:\Users\Ante\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini ========================

File not signed
MD5: 67FFD1906DAC2719290BE700B895B9D2
Creation and modification date: 2015-02-22 00:32 - 2015-02-22 00:32
Size: 0003584
Attributes: ----A
Company Name:
Internal Name:
Original Name:
Product:
Description:
File Version:
Product Version:
Copyright:

====== End of File: ======

EmptyTemp: => 2.7 GB temporary data Removed.


The system needed a reboot.

==== End of Fixlog 23:43:19 ====

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Reinstaliraj Chrome za svaki slucaj i obrisi sve podatke prilikom reinstalacije. Bookmarke mozes da exportujes i posle da importujes kad instaliras Chrome.
[Link mogu videti samo ulogovani korisnici]

Drugih znakova infekcije nema.

Sledeća procedura će implementirati završno čišćenje.



Arrow Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.

Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;
Remove disinfection tools
Create registry backup
Purge System Restore


Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.

Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Ukoliko neki alat ili izveštaj nije uklonjen, slobodno ih obriši ručno.


Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)
- Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
- DelFix briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.

offline
  • Pridružio: 15 Feb 2016
  • Poruke: 13

Puno Vam hvala na svemu!

Ko je trenutno na forumu
 

Ukupno su 968 korisnika na forumu :: 108 registrovanih, 7 sakrivenih i 853 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: aleph_one, BAKI89, bax0904, berste23, Bob.Rock, Bojan5150, bojank, celt, Cicumile, Clouseau, comi, cvrle312, Dannyboy, darkdruid72, DejanCG, del boy, deLacy, desmeki, dexteroza, djukapfc, DonRumataEstorski, dradex, draganl, Dragon Order, Duh16, dulleo, Dusko_Dugousko, GaleDJ, Gligo01, Goxy1, Hans Gajger, Ice, ILGromovnik, IQ116, istina, istokzapad, ivanb, Joint Chief, Joja, Kajzer_Soze, Kaneda, kaput21, king111, Koce, Kontrausluga, Kozara1, kybonacci, Leonov, Levi, Malahit, mane123, markoskjk, mercedesamg, mikrimaus, milenko crazy north, Miler88, milivoje_vatrogasac, Milun24, mir juzni, mishkooo, moldway, Nemanja94, nemkea71, oblivion, oldtimer, opt1, Parker, pds, Pekman, Pero Petković, Plavi Jadran, Povratak1912, Prašinar, predragc, promajauglavi, redstar72, royst33, samocitam, sasa76, sasics, Semberija, Semprini, Shilok, Sir Budimir, Skakac7, Srna, Steeeefan, stegonosa, Stoorb, Tas011, tomo2, Topaz9, trutcina, US_Rank_0, vidra1, vjetar, Vlad000, VladaKG1980, VPV, wexy, Yekaterinburg, zauzet, Zdenko, zemljanin, zixmix, zoran77, zule2, Zuna77