|
Poslao: 22 Feb 2016 07:58
|
offline
- Milos ZA

- Super građanin
- Pridružio: 31 Dec 2015
- Poruke: 1418
|
Evo izvoli
Fix result of Farbar Recovery Scan Tool (x64) Version:21-02-2016
Ran by Home (2016-02-22 07:53:30) Run:1
Running from C:\Users\Home\Desktop
Loaded Profiles: Home (Available Profiles: Home)
Boot Mode: Normal
==============================================
fixlist content:
*****************
createrestorepoint:
closeprocesses:
emptytemp:
Task: {E7ED1DF6-B7E8-4FA5-8ADB-0FE1A3D33AD3} - \AV Defender Viewer -> No File <==== ATTENTION
Task: {EDB8351C-507B-4E29-BBF6-33C861FBA17C} - \Softcomp Software Viewer -> No File <==== ATTENTION
Task: {B86EC61A-977E-460B-93A4-0142C83E5BC4} - \Full Installer -> No File <==== ATTENTION
Task: {B9277524-E144-4AC8-AD13-7CDE8AC72835} - \A-ZApps -> No File <==== ATTENTION
Task: {99DB7C6A-5027-40C9-9967-EC7D0F734C93} - \f21a5ywi -> No File <==== ATTENTION
Task: {52BE1DE4-BD11-4791-9EBA-78C4D0D0ECBA} - \3nliowci -> No File <==== ATTENTION
Task: {0EB3DBD6-5332-43B3-9E67-042989F82C17} - \ifmv3ce5 -> No File <==== ATTENTION
2016-02-20 08:24 - 2016-02-20 08:24 - 3323281 _____ () C:\Program Files\Common Files\wmp4kyg0.exe
2016-02-12 10:32 - 2016-02-12 10:32 - 7767040 _____ () C:\Users\Home\AppData\Roaming\agent.dat
2016-02-12 10:32 - 2016-02-12 10:32 - 0062976 _____ () C:\Users\Home\AppData\Roaming\Config.xml
2016-02-12 10:32 - 2016-02-12 10:32 - 0015552 _____ () C:\Users\Home\AppData\Roaming\InstallationConfiguration.xml
2016-02-12 10:32 - 2016-02-12 10:32 - 0126976 _____ () C:\Users\Home\AppData\Roaming\Installer.dat
2016-02-12 10:32 - 2016-02-12 10:32 - 0018432 _____ () C:\Users\Home\AppData\Roaming\Main.dat
2016-02-12 10:32 - 2016-02-12 10:32 - 0005568 _____ () C:\Users\Home\AppData\Roaming\md.xml
2016-02-12 10:32 - 2016-02-12 10:32 - 0126464 _____ () C:\Users\Home\AppData\Roaming\noah.dat
2016-02-12 10:32 - 2016-02-12 10:32 - 0666112 _____ () C:\Users\Home\AppData\Roaming\RedSunkix.exe
2016-02-12 10:32 - 2016-02-12 10:32 - 1827312 _____ () C:\Users\Home\AppData\Roaming\RedSunkix.tst
2016-02-12 10:32 - 2016-02-12 10:32 - 0568245 _____ () C:\Users\Home\AppData\Roaming\Strongjaydox.bin
2016-02-12 10:32 - 2016-02-12 10:32 - 0848437 _____ () C:\Users\Home\AppData\Roaming\Strongkaytom.bin
2016-02-12 10:32 - 2016-02-12 10:32 - 0189611 _____ () C:\Users\Home\AppData\Roaming\Tresit.bin
2016-02-12 10:33 - 2016-02-12 10:33 - 0001150 _____ () C:\Users\Home\AppData\Roaming\uninstall_temp.ico
2016-02-12 10:33 - 2016-02-12 10:33 - 0041472 _____ () C:\Users\Home\AppData\Local\Sailfase.dat
2016-02-12 10:33 - 2016-02-12 10:33 - 0000187 _____ () C:\Users\Home\AppData\Local\Sailfase.exe.config
2016-01-24 20:06 - 2016-01-24 20:06 - 0000003 _____ () C:\Users\Home\AppData\Local\updater.log
2016-01-24 20:06 - 2016-01-24 20:06 - 0000424 _____ () C:\Users\Home\AppData\Local\UserProducts.xml
2016-02-02 18:57 - 2016-02-02 18:56 - 00425744 _____ (Lavasoft Limited) C:\Windows\system32\LavasoftTcpService64.dll
2016-02-02 18:56 - 2016-02-02 18:56 - 00345360 _____ (Lavasoft Limited) C:\Windows\SysWOW64\LavasoftTcpService.dll
2016-02-02 18:57 - 2016-02-03 07:53 - 00002848 _____ C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini
2016-02-02 18:57 - 2016-02-03 07:53 - 00002848 _____ C:\Windows\system32\LavasoftTcpServiceOff.ini
2016-02-12 10:33 - 2016-02-21 19:45 - 00000000 ____D C:\Program Files\BitTorrent
2016-02-12 10:33 - 2016-02-12 10:33 - 00041472 _____ C:\Users\Home\AppData\Local\Sailfase.dat
2016-02-12 10:33 - 2016-02-12 10:33 - 00000187 _____ C:\Users\Home\AppData\Local\Sailfase.exe.config
2016-02-12 10:32 - 2016-02-21 19:45 - 00000000 ____D C:\ProgramData\ApplicationHosting
2016-02-12 10:32 - 2016-02-20 08:24 - 00002393 _____ C:\Windows\SysWOW64\findit.xml
2016-02-12 10:32 - 2016-02-18 20:26 - 00000000 ____D C:\ProgramData\Medlight
2016-02-12 10:32 - 2016-02-12 10:33 - 00000000 ____D C:\ProgramData\Medlights
2016-02-18 22:19 - 2016-02-18 22:19 - 00000000 ____D C:\Users\Home\AppData\Roaming\Softland
2016-02-18 22:15 - 2016-02-18 22:15 - 00003560 _____ C:\Windows\System32\Tasks\doPDF Update
2016-02-18 22:15 - 2016-02-18 22:15 - 00000000 ____D C:\ProgramData\Softland
2016-02-18 22:15 - 2016-02-18 22:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 8
2016-02-18 22:14 - 2016-02-18 22:14 - 00000000 ____D C:\Program Files\Softland
2016-02-18 22:14 - 2016-02-18 22:14 - 00000000 ____D C:\Program Files (x86)\Softland
2016-02-18 22:13 - 2016-02-18 22:13 - 00000000 ____D C:\ProgramData\regid.2008-09.org.wixtoolset
2016-02-12 13:33 - 2016-02-21 19:45 - 00000000 ____D C:\ProgramData\caMyciloP
2016-02-12 13:33 - 2016-02-12 13:33 - 00000000 ____D C:\ProgramData\caMyciloPs
2016-02-12 12:33 - 2016-02-21 19:45 - 00000000 ____D C:\Program Files\Common Files\bbgggjwr
2016-02-12 11:33 - 2016-02-21 19:45 - 00000000 ____D C:\Program Files\Common Files\5ps5zko0
2016-02-20 08:24 - 2016-02-21 19:45 - 00000000 ____D C:\ProgramData\Airtostrong
2016-02-20 08:24 - 2016-02-20 08:24 - 03323281 _____ () C:\Program Files\Common Files\wmp4kyg0.exe
2016-02-20 08:24 - 2016-02-20 08:24 - 00000000 ____D C:\ProgramData\Airtostrongs
2016-02-20 08:21 - 2016-02-21 19:45 - 00000000 ____D C:\Program Files\Common Files\4xw4gawi
*****************
Restore point was successfully created.
Processes closed successfully.
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E7ED1DF6-B7E8-4FA5-8ADB-0FE1A3D33AD3}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7ED1DF6-B7E8-4FA5-8ADB-0FE1A3D33AD3}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\AV Defender Viewer" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{EDB8351C-507B-4E29-BBF6-33C861FBA17C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{EDB8351C-507B-4E29-BBF6-33C861FBA17C}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Softcomp Software Viewer" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B86EC61A-977E-460B-93A4-0142C83E5BC4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B86EC61A-977E-460B-93A4-0142C83E5BC4}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Full Installer" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B9277524-E144-4AC8-AD13-7CDE8AC72835}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B9277524-E144-4AC8-AD13-7CDE8AC72835}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\A-ZApps" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{99DB7C6A-5027-40C9-9967-EC7D0F734C93}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{99DB7C6A-5027-40C9-9967-EC7D0F734C93}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\f21a5ywi" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{52BE1DE4-BD11-4791-9EBA-78C4D0D0ECBA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{52BE1DE4-BD11-4791-9EBA-78C4D0D0ECBA}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\3nliowci" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{0EB3DBD6-5332-43B3-9E67-042989F82C17}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0EB3DBD6-5332-43B3-9E67-042989F82C17}" => key removed successfully
"HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\ifmv3ce5" => key removed successfully
C:\Program Files\Common Files\wmp4kyg0.exe => moved successfully
C:\Users\Home\AppData\Roaming\agent.dat => moved successfully
C:\Users\Home\AppData\Roaming\Config.xml => moved successfully
C:\Users\Home\AppData\Roaming\InstallationConfiguration.xml => moved successfully
C:\Users\Home\AppData\Roaming\Installer.dat => moved successfully
C:\Users\Home\AppData\Roaming\Main.dat => moved successfully
C:\Users\Home\AppData\Roaming\md.xml => moved successfully
C:\Users\Home\AppData\Roaming\noah.dat => moved successfully
C:\Users\Home\AppData\Roaming\RedSunkix.exe => moved successfully
C:\Users\Home\AppData\Roaming\RedSunkix.tst => moved successfully
C:\Users\Home\AppData\Roaming\Strongjaydox.bin => moved successfully
C:\Users\Home\AppData\Roaming\Strongkaytom.bin => moved successfully
C:\Users\Home\AppData\Roaming\Tresit.bin => moved successfully
C:\Users\Home\AppData\Roaming\uninstall_temp.ico => moved successfully
C:\Users\Home\AppData\Local\Sailfase.dat => moved successfully
C:\Users\Home\AppData\Local\Sailfase.exe.config => moved successfully
C:\Users\Home\AppData\Local\updater.log => moved successfully
C:\Users\Home\AppData\Local\UserProducts.xml => moved successfully
C:\Windows\system32\LavasoftTcpService64.dll => moved successfully
C:\Windows\SysWOW64\LavasoftTcpService.dll => moved successfully
C:\Windows\SysWOW64\LavasoftTcpServiceOff.ini => moved successfully
C:\Windows\system32\LavasoftTcpServiceOff.ini => moved successfully
C:\Program Files\BitTorrent => moved successfully
"C:\Users\Home\AppData\Local\Sailfase.dat" => not found.
"C:\Users\Home\AppData\Local\Sailfase.exe.config" => not found.
C:\ProgramData\ApplicationHosting => moved successfully
C:\Windows\SysWOW64\findit.xml => moved successfully
C:\ProgramData\Medlight => moved successfully
C:\ProgramData\Medlights => moved successfully
C:\Users\Home\AppData\Roaming\Softland => moved successfully
C:\Windows\System32\Tasks\doPDF Update => moved successfully
C:\ProgramData\Softland => moved successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\doPDF 8 => moved successfully
C:\Program Files\Softland => moved successfully
C:\Program Files (x86)\Softland => moved successfully
C:\ProgramData\regid.2008-09.org.wixtoolset => moved successfully
C:\ProgramData\caMyciloP => moved successfully
C:\ProgramData\caMyciloPs => moved successfully
C:\Program Files\Common Files\bbgggjwr => moved successfully
C:\Program Files\Common Files\5ps5zko0 => moved successfully
C:\ProgramData\Airtostrong => moved successfully
"C:\Program Files\Common Files\wmp4kyg0.exe" => not found.
C:\ProgramData\Airtostrongs => moved successfully
C:\Program Files\Common Files\4xw4gawi => moved successfully
EmptyTemp: => 950.9 MB temporary data Removed.
The system needed a reboot.
==== End of Fixlog 07:54:22 ====
|
|
|
|
|
|
|
Poslao: 22 Feb 2016 07:59
|
offline
- TwinHeadedEagle

- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
To bi bilo to, jos da pocistimo ostatke alate.
Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop
Dvoklikom pokreni program.
Štikliraj sledeće opcije:
Remove disinfection tools
Purge System Restore
Reset system settings
Klikni na dugme "Run" i pričekaj da program završi rad.
Alat ce ukloniti sve koriscene alate u ovoj temi...
Kada alat završi, otvoriće izvestaj u notepadu.
Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt
Nije potrebno dostavljati izvestaj.
|
|
|
|
|
|
|
|
|
|
|
Poslao: 22 Feb 2016 10:12
|
offline
- Milos ZA

- Super građanin
- Pridružio: 31 Dec 2015
- Poruke: 1418
|
Ako je to sve zeleo bih da ti se zahvalim na OGROMNOJ pomoci i utrosenom vremenu i trudu.
Hvala puno.
|
|
|
|
|
|