MyCity » Ambulanta -> Arhiva Ambulante » Infekcije: URL: Mal

Infekcije: URL: Mal

Napisano na dan: 11.8.2014

Infekcije: URL: Mal
Sledeća strana Pagination

Idi na vrh

Poslao: 11 Avg 2014 11:41
Idi na vrh
offline
  • Pridružio: 05 Mar 2010
  • Poruke: 41

Imam odnedavno problem sa Mozilom, naime kada pokrenem Mozilu Avastov web stit je blokira i izbaci porku Infekcija URL Mal i tu potuku izdacuje nekada i na svakih 30 sec.Pomozite ako mozete, unapred hvala
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 10-08-2014 01
Ran by Misa (administrator) on MISA-PC on 11-08-2014 11:22:25
Running from C:\Users\Misa\Desktop
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: [Link mogu videti samo ulogovani korisnici]
Download link for 64-Bit Version: [Link mogu videti samo ulogovani korisnici]
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: [Link mogu videti samo ulogovani korisnici]

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(BitTorrent Inc.) C:\Users\Misa\AppData\Roaming\BitTorrent\BitTorrent.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe
() C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12445288 2012-01-16] (Realtek Semiconductor)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [4085896 2014-08-03] (AVAST Software)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Search Protection] => C:\ProgramData\Search Protection\SearchProtection.exe
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-1890293220-3972844489-3551522598-1000\...\Run: [GarminExpressTrayApp] => "E:\Garmin\Express Tray\ExpressTray.exe"
HKU\S-1-5-21-1890293220-3972844489-3551522598-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-1890293220-3972844489-3551522598-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21445248 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-1890293220-3972844489-3551522598-1000\...\Run: [BitTorrent] => C:\Users\Misa\AppData\Roaming\BitTorrent\BitTorrent.exe [1941592 2014-08-05] (BitTorrent Inc.)
Startup: C:\Users\Misa\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici]{searchTerms}&src=IE-SearchBox&FORM=IE10SR
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [Link mogu videti samo ulogovani korisnici]
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x68203B3487FFCD01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
SearchScopes: HKCU - DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = [Link mogu videti samo ulogovani korisnici]{searchTerms}
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = [Link mogu videti samo ulogovani korisnici]{searchTerms}
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO-x32: No Name -> {6DE732A4-D18F-1A5F-4F48-85988FA697AB} -> No File
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll No File
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 89.216.1.40 89.216.1.50

FireFox:
========
FF ProfilePath: C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default
FF Homepage: [Link mogu videti samo ulogovani korisnici]
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1211151.dll (Adobe Systems, Inc.)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.0.52 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll No File
FF Plugin-x32: @java.com/JavaPlugin,version=10.65.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll No File
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Misa\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pogodakyu.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\vokabular.xml
FF Extension: SaverExtEnsiOn - C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\eeya_5arbd@fzisrbjv-lj.co.uk [2014-05-04]
FF Extension: SaverExtension - C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\wttv@tfqt-.com [2014-05-22]
FF Extension: SaveNEEwaAppz - C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\ya.ey@tnit-mkmm.com [2014-05-21]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-02-20]
FF StartMenuInternet: FIREFOX.EXE - firefox.exe

Chrome:
=======
CHR HomePage: [Link mogu videti samo ulogovani korisnici]
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_9&idate=2014-08-11&gen=cnet&ent=hp&u=D982C0854520C314538A8053E81B1577"
CHR Extension: (Google Docs) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-12]
CHR Extension: (Google Drive) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-12]
CHR Extension: (YouTube) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-12]
CHR Extension: (Google Search) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-12]
CHR Extension: (SaverExtension) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddcpefaiokdkphmonhlefpopkipcnfch [2014-05-22]
CHR Extension: (SaveNEEwaAppz) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghcopghgckibaefejlicbfekjffepkmj [2014-05-21]
CHR Extension: (Google Wallet) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-12]
CHR Extension: (No Name) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk [2014-05-12]
CHR Extension: (Gmail) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-12]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-19]
CHR HKLM-x32\...\Chrome\Extension: [ihdajafpecbpbjebgkllkpkmglfifdho] - C:\ProgramData\ADDICT-THING\ihdajafpecbpbjebgkllkpkmglfifdho.crx [2014-07-19]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-07-19] (AVAST Software)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
S2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [136704 2009-06-24] (HP) [File not signed]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [161560 2011-12-16] (Intel Corporation)
R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\PandoraService.exe [625816 2012-06-22] (Pandora.TV)
R2 RichVideo; C:\Program Files (x86)\CyberLink\Shared files\RichVideo.exe [167936 2005-08-08] () [File not signed]
S2 Garmin Core Update Service; "E:\Garmin\Core Update Service\Garmin.Cartography.MapUpdate.CoreService.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21104 2011-01-10] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29208 2014-07-19] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [79184 2014-07-19] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93568 2014-07-19] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2014-07-19] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1041168 2014-07-19] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427360 2014-08-03] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [92008 2014-07-19] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [224896 2014-07-19] ()
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2013-12-06] (Disc Soft Ltd)
S2 hwpsgt; C:\Windows\SysWOW64\DRIVERS\hwpsgt.sys [137344 2014-03-01] () [File not signed]
S2 lemsgt; C:\Windows\SysWOW64\DRIVERS\lemsgt.sys [9472 2014-03-01] () [File not signed]
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2013-12-05] (Duplex Secure Ltd.)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [40712 2012-11-01] (Anchorfree Inc.)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 gdrv; \??\C:\Windows\gdrv.sys [X]
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-11 11:22 - 2014-08-11 11:22 - 00015347 _____ () C:\Users\Misa\Desktop\FRST.txt
2014-08-11 11:15 - 2014-08-11 11:22 - 00000000 ____D () C:\FRST
2014-08-11 11:13 - 2014-08-11 11:14 - 02099712 _____ (Farbar) C:\Users\Misa\Downloads\FRST64.exe
2014-08-11 11:13 - 2014-08-11 11:14 - 02099712 _____ (Farbar) C:\Users\Misa\Desktop\FRST64.exe
2014-08-11 11:02 - 2014-08-11 11:02 - 00002300 _____ () C:\Windows\PFRO.log
2014-08-11 11:02 - 2014-08-11 11:02 - 00000056 _____ () C:\Windows\setupact.log
2014-08-11 11:02 - 2014-08-11 11:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-11 09:51 - 2014-08-11 09:51 - 00000000 _____ () C:\autoexec.bat
2014-08-11 09:44 - 2014-08-11 10:53 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-11 09:44 - 2014-08-11 09:44 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-08-11 09:38 - 2014-08-11 10:41 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-11 09:38 - 2014-08-11 09:38 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\ParetoLogic
2014-08-11 09:38 - 2014-08-11 09:38 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\DriverCure
2014-08-11 09:36 - 2014-08-11 09:36 - 00001205 _____ () C:\Users\Misa\Downloads\FixNCR.reg
2014-08-11 03:24 - 2014-08-11 03:24 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\LavasoftStatistics
2014-08-11 03:24 - 2014-08-11 03:24 - 00000000 ____D () C:\Program Files\Lavasoft
2014-08-11 03:23 - 2014-08-11 10:40 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-08-11 03:23 - 2014-08-11 03:23 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\SecureSearch
2014-08-11 03:22 - 2014-08-11 10:39 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\Lavasoft
2014-08-11 03:20 - 2014-08-11 03:20 - 01707144 _____ () C:\Users\Misa\Downloads\Adaware_Installer.exe
2014-08-11 03:20 - 2014-08-11 03:20 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-08-11 03:14 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-08-11 03:13 - 2014-08-11 03:14 - 00000000 ____D () C:\AdwCleaner
2014-08-11 03:12 - 2014-08-11 03:12 - 01366203 _____ () C:\Users\Misa\Downloads\adwcleaner_3.304.exe
2014-08-10 21:23 - 2014-08-10 21:23 - 00001153 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player PRO.lnk
2014-08-10 21:23 - 2014-08-10 21:23 - 00001147 _____ () C:\Users\Public\Desktop\BS.Player PRO.lnk
2014-08-10 21:23 - 2014-08-10 21:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
2014-08-05 23:04 - 2014-08-05 23:04 - 00000869 _____ () C:\Users\Misa\Desktop\BitTorrent.lnk
2014-08-05 23:04 - 2014-08-05 23:04 - 00000849 _____ () C:\Users\Misa\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-08-05 23:01 - 2014-08-05 23:02 - 01941592 _____ (BitTorrent Inc.) C:\Users\Misa\Downloads\BitTorrent.exe
2014-08-03 22:39 - 2014-08-03 22:39 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-03 22:39 - 2014-08-03 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-01 09:07 - 2014-05-14 18:23 - 02477536 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-08-01 09:07 - 2014-05-14 18:23 - 00700384 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-08-01 09:07 - 2014-05-14 18:23 - 00581600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-08-01 09:07 - 2014-05-14 18:23 - 00058336 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-08-01 09:07 - 2014-05-14 18:23 - 00044512 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2014-08-01 09:07 - 2014-05-14 18:23 - 00038880 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2014-08-01 09:07 - 2014-05-14 18:23 - 00036320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2014-08-01 09:07 - 2014-05-14 18:21 - 02620928 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-08-01 09:07 - 2014-05-14 18:20 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-08-01 09:07 - 2014-05-14 18:17 - 00092672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-08-01 09:07 - 2014-05-14 09:23 - 00198600 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-08-01 09:07 - 2014-05-14 09:23 - 00179656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-08-01 09:07 - 2014-05-14 09:20 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-08-01 09:07 - 2014-05-14 09:17 - 00033792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-08-01 00:14 - 2014-08-01 00:14 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-01 00:14 - 2014-08-01 00:14 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-01 00:14 - 2014-08-01 00:14 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-01 00:14 - 2014-08-01 00:14 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-07-23 08:32 - 2014-08-03 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-07-22 23:25 - 2014-07-22 23:25 - 00000000 ____D () C:\ProgramData\GreenBay App
2014-07-22 09:51 - 2014-08-05 21:13 - 00028160 _____ () C:\Users\Misa\Documents\PONUDA.xls
2014-07-19 16:57 - 2014-08-10 19:39 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-19 16:57 - 2014-07-19 16:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-08-11 11:22 - 2014-08-11 11:22 - 00015347 _____ () C:\Users\Misa\Desktop\FRST.txt
2014-08-11 11:22 - 2014-08-11 11:15 - 00000000 ____D () C:\FRST
2014-08-11 11:22 - 2014-05-17 11:29 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\BitTorrent
2014-08-11 11:21 - 2012-08-23 01:45 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\Skype
2014-08-11 11:14 - 2014-08-11 11:13 - 02099712 _____ (Farbar) C:\Users\Misa\Downloads\FRST64.exe
2014-08-11 11:14 - 2014-08-11 11:13 - 02099712 _____ (Farbar) C:\Users\Misa\Desktop\FRST64.exe
2014-08-11 11:07 - 2009-07-14 06:45 - 00014512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-08-11 11:07 - 2009-07-14 06:45 - 00014512 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-08-11 11:06 - 2013-02-23 02:45 - 01673395 _____ () C:\Windows\WindowsUpdate.log
2014-08-11 11:02 - 2014-08-11 11:02 - 00002300 _____ () C:\Windows\PFRO.log
2014-08-11 11:02 - 2014-08-11 11:02 - 00000056 _____ () C:\Windows\setupact.log
2014-08-11 11:02 - 2014-08-11 11:02 - 00000000 _____ () C:\Windows\setuperr.log
2014-08-11 11:02 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-08-11 10:53 - 2014-08-11 09:44 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-08-11 10:41 - 2014-08-11 09:38 - 00000000 ____D () C:\ProgramData\ParetoLogic
2014-08-11 10:40 - 2014-08-11 03:23 - 00000000 ____D () C:\Program Files (x86)\Lavasoft
2014-08-11 10:39 - 2014-08-11 03:22 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\Lavasoft
2014-08-11 10:23 - 2012-08-30 12:43 - 00000000 ____D () C:\db
2014-08-11 09:51 - 2014-08-11 09:51 - 00000000 _____ () C:\autoexec.bat
2014-08-11 09:44 - 2014-08-11 09:44 - 00000000 ____D () C:\Program Files\Enigma Software Group
2014-08-11 09:38 - 2014-08-11 09:38 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\ParetoLogic
2014-08-11 09:38 - 2014-08-11 09:38 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\DriverCure
2014-08-11 09:36 - 2014-08-11 09:36 - 00001205 _____ () C:\Users\Misa\Downloads\FixNCR.reg
2014-08-11 03:24 - 2014-08-11 03:24 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\LavasoftStatistics
2014-08-11 03:24 - 2014-08-11 03:24 - 00000000 ____D () C:\Program Files\Lavasoft
2014-08-11 03:23 - 2014-08-11 03:23 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\SecureSearch
2014-08-11 03:20 - 2014-08-11 03:20 - 01707144 _____ () C:\Users\Misa\Downloads\Adaware_Installer.exe
2014-08-11 03:20 - 2014-08-11 03:20 - 00000000 ____D () C:\ProgramData\Lavasoft
2014-08-11 03:14 - 2014-08-11 03:13 - 00000000 ____D () C:\AdwCleaner
2014-08-11 03:12 - 2014-08-11 03:12 - 01366203 _____ () C:\Users\Misa\Downloads\adwcleaner_3.304.exe
2014-08-11 01:50 - 2012-08-25 03:24 - 00000000 ____D () C:\Users\Misa\Documents\Titlovi
2014-08-11 01:08 - 2012-08-23 00:10 - 00000000 ____D () C:\Users\Misa\AppData\Local\CRE
2014-08-11 00:58 - 2012-12-08 15:11 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-08-10 22:04 - 2012-09-18 01:42 - 00002516 ___SH () C:\Windows\SysWOW64\KGyGaAvL.sys
2014-08-10 21:26 - 2012-08-23 00:46 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\BSplayer Pro
2014-08-10 21:23 - 2014-08-10 21:23 - 00001153 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\BS.Player PRO.lnk
2014-08-10 21:23 - 2014-08-10 21:23 - 00001147 _____ () C:\Users\Public\Desktop\BS.Player PRO.lnk
2014-08-10 21:23 - 2014-08-10 21:23 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Webteh
2014-08-10 21:22 - 2012-08-23 00:46 - 00000000 ____D () C:\Program Files (x86)\Webteh
2014-08-10 21:21 - 2012-08-23 00:46 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\BSplayer
2014-08-10 20:36 - 2013-05-12 02:29 - 00003918 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D3D6CC07-69E6-4482-8485-8C79A5E1A5F1}
2014-08-10 19:39 - 2014-07-19 16:57 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-08-07 17:23 - 2009-07-14 07:13 - 00730512 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-08-06 14:01 - 2012-08-23 00:08 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\uTorrent
2014-08-05 23:04 - 2014-08-05 23:04 - 00000869 _____ () C:\Users\Misa\Desktop\BitTorrent.lnk
2014-08-05 23:04 - 2014-08-05 23:04 - 00000849 _____ () C:\Users\Misa\AppData\Roaming\Microsoft\Windows\Start Menu\BitTorrent.lnk
2014-08-05 23:02 - 2014-08-05 23:01 - 01941592 _____ (BitTorrent Inc.) C:\Users\Misa\Downloads\BitTorrent.exe
2014-08-05 21:13 - 2014-07-22 09:51 - 00028160 _____ () C:\Users\Misa\Documents\PONUDA.xls
2014-08-03 22:49 - 2013-02-20 16:11 - 00427360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsp.sys
2014-08-03 22:49 - 2013-02-20 16:11 - 00001926 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-08-03 22:39 - 2014-08-03 22:39 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-08-03 22:39 - 2014-08-03 22:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-08-03 22:39 - 2014-07-23 08:32 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-08-02 10:20 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-08-01 00:14 - 2014-08-01 00:14 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-08-01 00:14 - 2014-08-01 00:14 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-08-01 00:14 - 2014-08-01 00:14 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-08-01 00:14 - 2014-08-01 00:14 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-08-01 00:14 - 2014-06-16 23:46 - 00000000 ____D () C:\Program Files (x86)\Java
2014-07-30 22:26 - 2009-07-14 07:08 - 00032608 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-07-25 21:59 - 2013-01-03 19:30 - 00000000 ____D () C:\Users\Misa\AppData\Roaming\XBMC
2014-07-25 21:58 - 2012-08-23 01:45 - 00000000 ___RD () C:\Program Files (x86)\Skype
2014-07-23 17:40 - 2012-08-25 14:19 - 00000116 _____ () C:\Windows\NeroDigital.ini
2014-07-22 23:25 - 2014-07-22 23:25 - 00000000 ____D () C:\ProgramData\GreenBay App
2014-07-22 23:25 - 2012-08-26 18:19 - 00000000 ____D () C:\ProgramData\InstallMate
2014-07-19 16:57 - 2014-07-19 16:57 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-07-19 16:57 - 2014-05-01 14:38 - 00029208 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-07-19 16:57 - 2014-01-02 17:20 - 00092008 _____ (AVAST Software) C:\Windows\system32\Drivers\aswstm.sys
2014-07-19 16:57 - 2013-03-17 02:45 - 00224896 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-07-19 16:57 - 2013-03-17 02:45 - 00065776 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-07-19 16:57 - 2013-02-20 16:11 - 01041168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswsnx.sys
2014-07-19 16:57 - 2013-02-20 16:11 - 00093568 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-07-19 16:57 - 2013-02-20 16:11 - 00079184 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-07-19 16:57 - 2012-08-21 21:51 - 00307344 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-07-19 16:49 - 2009-07-14 06:45 - 00421144 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-07-19 16:48 - 2009-07-14 09:46 - 00000000 ____D () C:\Program Files\Windows Journal
2014-07-19 16:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\SysWOW64\Dism
2014-07-19 16:48 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\Dism

Some content of TEMP:
====================
C:\Users\Misa\AppData\Local\Temp\462af554-9942-4a83-95ab-9477bc1f7ec6.exe
C:\Users\Misa\AppData\Local\Temp\Quarantine.exe
C:\Users\Misa\AppData\Local\Temp\SHSetup.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-08-07 09:58

==================== End Of Log ============================



Poslao: 11 Avg 2014 15:02
Idi na vrh
rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

Start
Task: {40905402-07A2-4295-AD64-D6900162DEBC} - \{C67F2EDA-88A6-49C3-BF8A-777473189F91} No Task File <==== ATTENTION
Task: {8855BB7C-D1E4-47B8-BEC0-F633C75CBE86} - \CCleanerSkipUAC No Task File <==== ATTENTION
Task: {F1365FC2-F9F8-495F-AECF-FC75FDA1F309} - \{23C49FB3-13D2-4F01-B5E7-B765C90ED63C} No Task File <==== ATTENTION
HKLM-x32\...\Run: [Search Protection] => C:\ProgramData\Search Protection\SearchProtection.exe
C:\ProgramData\Search Protection\SearchProtection.exe
SearchScopes: HKCU - DefaultScope {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://securedsearch2.lavasoft.com/results.php?pr=.....=ch&q={searchTerms}
SearchScopes: HKCU - {3BD44F0E-0596-4008-AEE0-45D47E3A8F0E} URL = http://securedsearch2.lavasoft.com/results.php?pr=.....=ch&q={searchTerms}
BHO-x32: No Name -> {6DE732A4-D18F-1A5F-4F48-85988FA697AB} -> No File
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
FF Extension: SaverExtEnsiOn - C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\eeya_5arbd@fzisrbjv-lj.co.uk [2014-05-04]
FF Extension: SaverExtension - C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\wttv@tfqt-.com [2014-05-22]
C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\eeya_5arbd@fzisrbjv-lj.co.uk
C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\wttv@tfqt-.com
FF Extension: SaveNEEwaAppz - C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\ya.ey@tnit-mkmm.com [2014-05-21]
C:\Users\Misa\AppData\Roaming\Mozilla\Firefox\Profiles\lud8ptlv.default\Extensions\ya.ey@tnit-mkmm.com
CHR Extension: (SaverExtension) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddcpefaiokdkphmonhlefpopkipcnfch [2014-05-22]
CHR Extension: (SaveNEEwaAppz) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghcopghgckibaefejlicbfekjffepkmj [2014-05-21]
C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddcpefaiokdkphmonhlefpopkipcnfch
C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghcopghgckibaefejlicbfekjffepkmj
CHR HKLM-x32\...\Chrome\Extension: [ihdajafpecbpbjebgkllkpkmglfifdho] - C:\ProgramData\ADDICT-THING\ihdajafpecbpbjebgkllkpkmglfifdho.crx [2014-07-19]
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
C:\ProgramData\ADDICT-THING\ihdajafpecbpbjebgkllkpkmglfifdho.crx
C:\Users\Misa\AppData\Local\Temp\462af554-9942-4a83-95ab-9477bc1f7ec6.exe
C:\Users\Misa\AppData\Local\Temp\Quarantine.exe
C:\Users\Misa\AppData\Local\Temp\SHSetup.exe
CHR HomePage: hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_9&idate=2014-08-11&gen=cnet&ent=hp&u=D982C0854520C314538A8053E81B1577
CHR StartupUrls: "hxxp://securedsearch2.lavasoft.com/index.php?pr=vmn&id=adawaretb&v=3_9&idate=2014-08-11&gen=cnet&ent=hp&u=D982C0854520C314538A8053E81B1577"
CHR Extension: (No Name) - C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk [2014-05-12]
C:\Users\Misa\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfmopbbadnfoelckkcmjjeaaegjpjjbk
End

2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.



Poslao: 11 Avg 2014 16:14
Idi na vrh
offline
  • Pridružio: 05 Mar 2010
  • Poruke: 41

Hvala bate ovo je bilo spasenje u zadnji cas, vec sam poceo da ludim

Poslao: 11 Avg 2014 17:44
Idi na vrh
rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

• Sledeća procedura će implementirati završno čišćenje.

Arrow Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.
Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;

Remove disinfection tools
Create registry backup
Purge System Restore

Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.
Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)

Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
Alat briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.

MyCity » Ambulanta -> Arhiva Ambulante » Infekcije: URL: Mal

Ko je trenutno na forumu
 

Ukupno su 1109 korisnika na forumu :: 114 registrovanih, 6 sakrivenih i 989 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, A.R.Chafee.Jr., ajo baba, alternator, AndrejPetar, Aristotle2002, Avalon015, batana, bigvlada, bluesky, Bobrock1, Bojan198527, bojcistv, Botovac, Branko Matić, bufanje, Camposam, ccoogg123, DalmatinacMF, dane007, darkdruid72, dejandr, dekan.m, desmeki, dj.ape, doktor097, Dorijan Grej, Draganac, draganca, draganl, Duh sa sekirom, elenemste, GH69, glados, goran.vvv, goxin, Igritelj, istina, Istman, ivan1973, j-22orao, JankoS, JimmyNapoli, JK, joca83, Khaless, king011, koneks, kovac9mm, laki_bb, Lazur_01, Lep1na, Ljusa, M74AB3, marko.markovic, Marko1238, mercedesamg, mikrimaus, milanpb, Millennium, Milos ZA, Milos1389, miodrag, miroslav milanović, mkukoleca, Mrav Obrad, N.e.m.a.nj.a., nebidrag, nebojsag, nixos, Ns1975, Paklenica, Papadubi, Pekman, Pero, PlayerOne, precan, predragc, procesor, raf87, raster12, royst33, ruma, sekretar, sevenino, sickmouse, Sinduk, Singidunumac, skok, Solunac na steroidima, stalja, Stefan M, suton, t84dar, UAV operator, umpah-pah, uruk, vaci, varda, vathra, vensla, virked, VJ, vlahale, vukovi, Walkers, wizzardone, XBMC, Zastava, Zvrk, Žrnov, 1107, 79693, 800077