Koci PC

Koci PC

offline
  • Absolut Gut
  • Pridružio: 13 Avg 2012
  • Poruke: 561
  • Gde živiš: Atakama

1. detaljan opis problema: Problem je u tome sto mi u poslednje vreme PC koci i desilo mi se upravo malo pre, da zakoci komp pojavi se plava slika, ispisa nesto, nisam zapamtio i restartova se.. Inace ovako glavi mi, imam hiljadu nepotrebnih stvari, ali ne znam istinski da odaberem sta je potrebno a sta ne, tu mi je potrebna vasa pomoc, skenirao sam Avast-om OS , i imao je par virusa i to sam uklonio, e sad za malwere i ostale stvari nisam .. Kad ulazim u Folder , malo sporije otvara, sporije dize sistem ..

2. postavljanje dijagnostičkog izveštaja (log-a, logfile-a): DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 10.0.9200.16686 BrowserJavaVersion: 10.25.2
Run by Zorica at 22:30:58 on 2013-09-29
Microsoft Windows 7 Ultimate 6.1.7601.1.1250.381.1033.18.3562.1835 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\WinFLService.exe
C:\Program Files\Intel\iCLS Client\HeciServer.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
C:\Program Files\Nitro\Reader 3\NitroPDFReaderDriverService3.exe
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\My Lockbox\mylbx.exe
C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
C:\Windows\System32\WinFLTray.exe
C:\Program Files\NewSoftware's\Folder Lock\FLComServCtrl.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\NewSoftware's\Folder Lock\FLComServ.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Program Files\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\System32\svchost.exe -k secsvcs
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1708250
uURLSearchHooks: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - <orphaned>
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
uRun: [WinFLTray] c:\windows\system32\WinFLTray.exe
uRun: [FLBackup] c:\program files\newsoftware's\folder lock\FLComServCtrl.exe
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
mRun: [avast5] "c:\program files\alwil software\avast5\avastUI.exe" /nogui
mRun: [mylbx] c:\program files\my lockbox\mylbx.exe /a
dRunOnce: [SPReview] "c:\windows\system32\spreview\SPReview.exe" /sp:1 /errorfwlink:"http://go.microsoft.com/fwlink/?LinkID=122915" /build:7601
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
mPolicies-Windows\System: AllowBlockingAppsAtShutdown = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office14\EXCEL.EXE/3000
IE: Se&nd to OneNote - c:\progra~1\micros~4\office14\ONBttnIE.dll/105
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
TCP: NameServer = 89.216.1.40 89.216.1.50
TCP: Interfaces\{13978892-A382-43E0-80F1-D29699EEF638} : DHCPNameServer = 89.216.1.40 89.216.1.50
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
AppInit_DLLs= c:\progra~1\musict~1\datamngr\mgrldr.dll
SSODL: WebCheck - <orphaned>
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\wpdshserviceobj.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\29.0.1547.76\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\zorica\appdata\roaming\mozilla\firefox\profiles\pq6l3t1i.default\
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://www.search.ask.com/?o=APN10646A&gct=hp&d=102-118&v=n9092-114&t=4
FF - prefs.js: keyword.URL - hxxp://dts.search.ask.com/sr?src=ffb&gct=ds&appid=118&systemid=102&v=n9092-114&apn_dtid=BND102&apn_ptnrs=AG7&apn_uid=9959230414934034&o=APN10646&q=
FF - plugin: c:\progra~1\micros~4\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~4\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: c:\program files\intel\intel(r) management engine components\ipt\npIntelWebAPIIPT.dll
FF - plugin: c:\program files\intel\intel(r) management engine components\ipt\npIntelWebAPIUpdater.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\nitro\reader 3\npdf.dll
FF - plugin: c:\program files\nitro\reader 3\npnitroie.dll
FF - plugin: c:\program files\nitro\reader 3\npnitromozilla.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll
FF - plugin: c:\users\zorica\appdata\locallow\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_8_800_168.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
FF - ExtSQL: 2013-09-23 22:24; {083f85f7-38b4-458e-bf5f-f2844cba8b8a}; c:\users\zorica\appdata\roaming\mozilla\firefox\profiles\pq6l3t1i.default\extensions\{083f85f7-38b4-458e-bf5f-f2844cba8b8a}
.
============= SERVICES / DRIVERS ===============
.
R0 FSProFilter;FSPro File Filter;c:\windows\system32\drivers\FSPFltd.sys [2013-9-14 41912]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-8-19 165456]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2013-8-19 242240]
R1 WinFLAdrv;WinFLAdrv;c:\windows\system32\WinFLAdrv.sys [2013-8-24 29184]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-8-19 17744]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-8-19 50256]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2013-8-19 40384]
R2 FLService;FLService;c:\windows\system32\WinFLService.exe [2013-8-24 92360]
R2 Intel(R) Capability Licensing Service Interface;Intel(R) Capability Licensing Service Interface;c:\program files\intel\icls client\HeciServer.exe [2012-12-10 583680]
R2 jhi_service;Intel(R) Dynamic Application Loader Host Interface Service;c:\program files\intel\intel(r) management engine components\dal\Jhi_service.exe [2013-8-20 165336]
R2 NEWDRIVER;NEWDRIVER;c:\windows\system32\WinVDEdrv6.sys [2013-8-24 188176]
R2 NitroReaderDriverReadSpool3;NitroPDFReaderDriverCreatorReadSpool3;c:\program files\nitro\reader 3\NitroPDFReaderDriverService3.exe [2012-10-30 196624]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\skype\toolbars\skype c2c service\c2c_service.exe [2013-9-16 3273088]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2013-1-18 383264]
R2 TeamViewer8;TeamViewer 8;c:\program files\teamviewer\version8\TeamViewer_Service.exe [2013-9-8 4308320]
R2 UNS;Intel(R) Management and Security Application User Notification Service;c:\program files\intel\intel(r) management engine components\uns\UNS.exe [2013-8-20 366040]
R2 WinVDEDrv;WinVDEDrv;c:\windows\system32\WinVDEdrv.sys [2013-8-24 228112]
R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2013-8-19 40384]
R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast5\AvastSvc.exe [2013-8-19 40384]
R3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\drivers\HECI.sys [2013-8-20 55104]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2013-8-19 514152]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-7-25 162672]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 Intel(R) Capability Licensing Service TCP IP Interface;Intel(R) Capability Licensing Service TCP IP Interface;c:\program files\intel\icls client\SocketHeciServer.exe [2012-12-10 627744]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2013-8-19 15872]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2013-8-31 52224]
.
=============== File Associations ===============
.
ShellExec: Opera.exe: open="c:\program files\opera\Launcher.exe" "%1"
.
=============== Created Last 30 ================
.
2013-09-29 19:17:48 -------- d-----w- c:\program files\CLARION Counter-Strike 1.6
2013-09-29 19:13:09 -------- d-----w- c:\programdata\SystemRequirementsLab
2013-09-29 19:13:09 -------- d-----w- c:\program files\SystemRequirementsLab
2013-09-29 15:30:39 60872 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{b32e4a3f-49bb-494d-b9d5-16f4004a96ea}\offreg.dll
2013-09-27 14:30:35 -------- d-----w- c:\programdata\EA Core
2013-09-27 05:57:05 7328304 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{b32e4a3f-49bb-494d-b9d5-16f4004a96ea}\mpengine.dll
2013-09-26 17:58:08 -------- d-----w- c:\users\zorica\appdata\roaming\Origin
2013-09-26 17:58:06 -------- d-----w- c:\users\zorica\appdata\local\Origin
2013-09-26 17:55:19 -------- d-----w- c:\programdata\Origin
2013-09-26 17:55:18 -------- d-----w- c:\programdata\Electronic Arts
2013-09-26 17:55:11 -------- d-----w- c:\program files\Origin
2013-09-25 23:47:08 -------- d-----w- c:\users\zorica\appdata\roaming\Sports Interactive
2013-09-25 23:47:08 -------- d-----w- c:\users\zorica\appdata\local\Sports Interactive
2013-09-25 23:33:59 -------- d-----w- c:\program files\Football Manager 2013
2013-09-24 13:22:45 -------- d-----w- c:\program files\Microsoft Synchronization Services
2013-09-24 13:20:53 -------- d-----w- c:\windows\PCHEALTH
2013-09-24 13:20:53 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2013-09-24 13:18:14 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2013-09-24 13:17:19 -------- d-----w- c:\program files\Microsoft Analysis Services
2013-09-24 13:16:35 -------- d-----w- c:\users\zorica\appdata\local\Microsoft Help
2013-09-23 22:39:54 -------- d-----w- c:\programdata\Browser Manager
2013-09-23 20:25:51 -------- d-----w- c:\users\zorica\appdata\local\jZip
2013-09-20 05:06:37 -------- d-----w- c:\program files\games
2013-09-19 15:09:00 -------- d-----w- c:\program files\TeamSpeak 3 Client
2013-09-19 07:05:17 27152 ----a-w- c:\windows\system32\nitrolocalmon2.dll
2013-09-19 07:05:17 18448 ----a-w- c:\windows\system32\nitrolocalui2.dll
2013-09-19 07:05:02 -------- d-----w- c:\programdata\Nitro
2013-09-19 07:05:02 -------- d-----w- c:\program files\Nitro
2013-09-19 07:05:02 -------- d-----w- c:\program files\common files\Nitro
2013-09-19 07:04:23 -------- d-----w- c:\users\zorica\appdata\local\Conduit
2013-09-17 16:21:25 -------- d-----w- c:\users\zorica\appdata\local\Overwolf
2013-09-14 19:54:33 41912 ----a-w- c:\windows\system32\drivers\FSPFltd.sys
2013-09-14 19:54:33 -------- d-----w- c:\program files\My Lockbox
2013-09-13 22:49:00 -------- d-----w- c:\programdata\FaceOnBody2
2013-09-13 22:37:21 -------- d-----w- c:\users\zorica\appdata\local\Rockstar Games
2013-09-13 22:36:06 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2013-09-12 18:50:22 411480 ----a-w- c:\windows\system32\tsccvid.dll
2013-09-12 18:50:20 -------- d-----w- c:\windows\system32\QuickTime
2013-09-12 18:49:24 -------- d-----w- c:\program files\common files\TechSmith Shared
2013-09-11 07:51:39 133056 ----a-w- c:\windows\system32\drivers\ataport.sys
2013-09-11 07:50:23 2348544 ----a-w- c:\windows\system32\win32k.sys
2013-09-10 21:37:25 -------- d-----w- c:\windows\system32\appmgmt
2013-09-10 21:09:39 -------- d-----w- c:\users\zorica\appdata\local\ElevatedDiagnostics
2013-09-09 12:27:05 1824000 ----a-w- c:\windows\system32\WavesGUILib.dll
2013-09-09 12:27:05 1379760 ----a-w- c:\windows\system32\tosade.dll
2013-09-09 12:27:04 819648 ----a-w- c:\windows\system32\tadefxapo2.dll
2013-09-09 12:27:04 58264 ----a-w- c:\windows\system32\TepeqAPO.dll
2013-09-09 12:27:04 134584 ----a-w- c:\windows\system32\tadefxapo.dll
2013-09-09 12:27:03 546560 ----a-w- c:\windows\system32\sltech32.dll
2013-09-09 12:27:03 184576 ----a-w- c:\windows\system32\slprp32.dll
2013-09-09 12:27:01 912432 ----a-w- c:\windows\system32\SFSS_APO.dll
2013-09-09 12:27:01 674560 ----a-w- c:\windows\system32\slcnt32.dll
2013-09-09 12:27:01 340224 ----a-w- c:\windows\system32\sl3apo32.dll
2013-09-09 12:27:00 214368 ----a-w- c:\windows\system32\SFNHK.dll
2013-09-09 12:13:24 -------- d-----w- c:\windows\system32\RTCOM
2013-09-08 20:14:32 -------- d-----w- c:\program files\Skillbrains
2013-09-08 20:14:30 -------- d-----w- c:\users\zorica\appdata\local\Skillbrains
2013-09-08 18:00:36 -------- d-----w- c:\program files\SmartTweak
2013-09-08 17:28:53 -------- d-----w- c:\program files\TeamViewer
2013-09-08 12:57:35 -------- d-----w- c:\users\zorica\appdata\local\SecondLife
2013-09-08 12:55:31 -------- d-----w- c:\program files\SecondLifeViewer
2013-09-07 19:44:07 -------- d-----w- c:\program files\Counter-Strike 1.6
2013-09-07 09:59:20 -------- d-----w- c:\users\zorica\appdata\local\Macromedia
2013-09-07 09:58:04 -------- d-----w- c:\users\zorica\appdata\local\Mozilla
2013-09-04 07:16:54 48648 ----a-w- c:\programdata\microsoft\ehome\packages\mceclientux\updateablemarkup\Markup.dll
2013-09-03 18:54:04 1230336 ----a-w- c:\windows\system32\WindowsCodecs.dll
2013-09-01 17:03:07 -------- d-----w- c:\users\zorica\appdata\local\Microsoft Games
2013-09-01 01:53:06 1247744 ----a-w- c:\windows\system32\DWrite.dll
2013-09-01 01:09:38 49152 ----a-w- c:\windows\system32\taskhost.exe
2013-09-01 01:03:19 1505280 ----a-w- c:\windows\system32\d3d11.dll
2013-08-31 23:52:39 652800 ----a-w- c:\windows\system32\rpcrt4.dll
2013-08-31 23:52:31 712048 ----a-w- c:\windows\system32\drivers\ndis.sys
2013-08-31 23:52:31 33280 ----a-w- c:\windows\system32\drivers\RNDISMP.sys
2013-08-31 23:52:23 175104 ----a-w- c:\windows\system32\wintrust.dll
2013-08-31 23:52:23 1166848 ----a-w- c:\windows\system32\crypt32.dll
2013-08-31 23:52:22 140288 ----a-w- c:\windows\system32\cryptsvc.dll
2013-08-31 23:52:21 103936 ----a-w- c:\windows\system32\cryptnet.dll
2013-08-31 23:50:30 245760 ----a-w- c:\windows\system32\OxpsConverter.exe
2013-08-31 23:50:12 3913664 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-08-31 23:50:11 3968960 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-08-31 23:50:11 1289096 ----a-w- c:\windows\system32\ntdll.dll
2013-08-31 23:50:03 40960 ----a-w- c:\windows\system32\wwanprotdim.dll
2013-08-31 23:50:03 186368 ----a-w- c:\windows\system32\wwansvc.dll
2013-08-31 23:50:01 24576 ----a-w- c:\windows\system32\cryptdlg.dll
2013-08-31 23:49:42 492544 ----a-w- c:\windows\system32\win32spl.dll
2013-08-31 23:49:28 903168 ----a-w- c:\windows\system32\certutil.exe
2013-08-31 23:49:28 43008 ----a-w- c:\windows\system32\certenc.dll
2013-08-31 23:49:02 52224 ----a-w- c:\windows\system32\nlaapi.dll
2013-08-31 23:49:02 499712 ----a-w- c:\windows\system32\iphlpsvc.dll
2013-08-31 23:49:02 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2013-08-31 23:49:02 242176 ----a-w- c:\windows\system32\nlasvc.dll
2013-08-31 23:49:02 18944 ----a-w- c:\windows\system32\netevent.dll
2013-08-31 23:49:02 175104 ----a-w- c:\windows\system32\netcorehc.dll
2013-08-31 23:49:02 156672 ----a-w- c:\windows\system32\ncsi.dll
2013-08-31 23:48:24 1293760 ----a-w- c:\windows\system32\drivers\tcpip.sys
2013-08-31 23:48:22 509440 ----a-w- c:\windows\system32\qedit.dll
2013-08-31 23:48:19 1620992 ----a-w- c:\windows\system32\WMVDECOD.DLL
2013-08-31 23:48:06 936448 ----a-w- c:\program files\common files\microsoft shared\ink\journal.dll
2013-08-31 23:48:05 988672 ----a-w- c:\program files\windows journal\JNTFiltr.dll
2013-08-31 23:48:05 969216 ----a-w- c:\program files\windows journal\JNWDRV.dll
2013-08-31 23:48:05 1221632 ----a-w- c:\program files\windows journal\NBDoc.DLL
2013-08-31 23:47:23 728424 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2013-08-31 23:47:23 218984 ----a-w- c:\windows\system32\drivers\dxgmms1.sys
2013-08-31 23:46:30 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2013-08-31 23:46:30 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
2013-08-31 23:46:04 2048 ----a-w- c:\windows\system32\tzres.dll
2013-08-31 23:45:09 680960 ----a-w- c:\program files\windows defender\MpSvc.dll
2013-08-31 23:45:09 392704 ----a-w- c:\program files\windows defender\MpClient.dll
2013-08-31 23:45:09 224768 ----a-w- c:\program files\windows defender\MpCommu.dll
2013-08-31 23:45:07 918528 ----a-w- c:\windows\system32\rdpcorets.dll
2013-08-31 23:45:07 31232 ----a-w- c:\windows\system32\drivers\tssecsrv.sys
2013-08-31 23:41:37 -------- d-----w- c:\users\zorica\appdata\local\DM
2013-08-31 23:24:22 101720 ----a-w- c:\windows\system32\consent.exe
2013-08-31 23:24:20 1796096 ----a-w- c:\windows\system32\authui.dll
2013-08-31 23:24:17 47104 ----a-w- c:\windows\system32\appinfo.dll
2013-08-31 19:12:37 -------- d-----w- c:\users\zorica\appdata\roaming\Unity
2013-08-31 17:43:15 -------- d-----w- c:\users\zorica\appdata\roaming\2K Sports
2013-08-31 17:35:11 -------- d-----w- c:\program files\2K Sports
2013-08-31 12:54:54 -------- d-----w- c:\windows\system32\MRT
2013-08-31 12:47:35 -------- d-----w- c:\windows\system32\SPReview
2013-08-31 04:35:04 1130824 ----a-w- c:\windows\system32\dfshim.dll
2013-08-31 04:35:01 53760 ----a-w- c:\windows\system32\LSCSHostPolicy.dll
2013-08-31 04:35:01 52224 ----a-w- c:\windows\system32\drivers\TsUsbFlt.sys
2013-08-31 04:35:00 11776 ----a-w- c:\windows\system32\TsUsbRedirectionGroupPolicyExtension.dll
2013-08-31 04:33:59 778240 ----a-w- c:\windows\system32\sqlsrv32.dll
2013-08-31 04:32:57 220160 ----a-w- c:\windows\system32\SndVolSSO.dll
2013-08-31 04:31:58 98304 ----a-w- c:\windows\system32\fphc.dll
2013-08-31 04:30:58 189952 ----a-w- c:\windows\system32\wdscore.dll
2013-08-31 04:30:03 606208 ----a-w- c:\windows\system32\wbem\fastprox.dll
2013-08-31 04:30:03 363008 ----a-w- c:\windows\system32\wbemcomn.dll
2013-08-31 04:30:03 189952 ----a-w- c:\program files\windows portable devices\sqmapi.dll
2013-08-31 04:29:15 189952 ----a-w- c:\windows\system32\sqmapi.dll
2013-08-31 03:29:17 -------- d-----w- c:\programdata\GroupPolicy
.
==================== Find3M ====================
.
2013-09-10 18:38:11 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-09-10 18:38:11 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-09-01 01:08:50 9728 ---ha-w- c:\windows\system32\api-ms-win-downlevel-shlwapi-l1-1-0.dll
2013-08-31 13:04:42 152576 ----a-w- c:\windows\system32\msclmd.dll
2013-08-24 19:26:28 29184 ----a-w- c:\windows\system32\WinFLAdrv.sys
2013-08-24 19:26:26 188176 ----a-w- c:\windows\system32\WinVDEdrv6.sys
2013-08-24 19:26:23 228112 ----a-w- c:\windows\system32\WinVDEdrv.sys
2013-08-24 19:26:04 92360 ----a-w- c:\windows\system32\WinFLService.exe
2013-08-24 19:26:03 14024 ----a-w- c:\windows\system32\WinFLMsgService.exe
2013-08-24 19:26:02 40960 ----a-w- c:\windows\system32\nwsftUninstall.exe
2013-08-24 19:26:01 321736 ----a-w- c:\windows\system32\WinFLTray.exe
2013-08-24 19:26:00 321736 ----a-w- c:\windows\system32\WinFLTrayShred.exe
2013-08-19 19:04:15 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-08-19 19:00:39 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-08-19 19:00:37 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-08-19 19:00:37 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-08-10 03:59:10 1767936 ----a-w- c:\windows\system32\wininet.dll
2013-08-10 03:58:09 2876928 ----a-w- c:\windows\system32\jscript9.dll
2013-08-10 03:58:06 61440 ----a-w- c:\windows\system32\iesetup.dll
2013-08-10 03:58:06 109056 ----a-w- c:\windows\system32\iesysprep.dll
2013-08-10 03:07:50 2706432 ----a-w- c:\windows\system32\mshtml.tlb
2013-08-10 02:17:19 71680 ----a-w- c:\windows\system32\RegisterIEPKEYs.exe
2013-08-07 02:22:04 238872 ------w- c:\windows\system32\MpSigStub.exe
2013-08-02 01:50:36 169984 ----a-w- c:\windows\system32\winsrv.dll
2013-08-02 01:49:19 293376 ----a-w- c:\windows\system32\KernelBase.dll
2013-08-02 00:52:57 271360 ----a-w- c:\windows\system32\conhost.exe
2013-08-02 00:43:05 6144 ---ha-w- c:\windows\system32\api-ms-win-security-base-l1-1-0.dll
2013-08-02 00:43:05 4608 ---ha-w- c:\windows\system32\api-ms-win-core-threadpool-l1-1-0.dll
2013-08-02 00:43:05 3584 ---ha-w- c:\windows\system32\api-ms-win-core-xstate-l1-1-0.dll
2013-08-02 00:43:05 3072 ---ha-w- c:\windows\system32\api-ms-win-core-util-l1-1-0.dll
2013-07-02 20:20:48 2700312 ----a-w- c:\windows\system32\drivers\RTKVHDA.sys
2013-07-02 14:20:24 121048 ----a-w- c:\windows\system32\RtkCoInstII.dll
2013-07-02 13:56:46 28280832 ----a-w- c:\windows\system32\RCoRes.dat
.
============= FINISH: 22:31:45,36 ===============

https://www.mycity.rs/must-login.png

offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Arrow Korak 1

Preuzmi "Xplode"-ov AdwCleaner i sačuvaj ga na Desktop
Dvoklikom pokreni program.
Klikni na dugme Scan i sačekaj da se završi skeniranje.
Klikni na dugme Clean i pričekaj da program završi.
Program će zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni OK kao potvrdu.
Na sljedeća dva prozora koja se otvore (Informations i Restart required ) klikni OK

Računar će se restartovati, a potom otvoriti Notepad (C:\AdwCleaner[S1].txt) sa izvještajem.
Sačuvaj taj izvještaj na Desktop i okači ga uz poruku koristeći opciju "Prikači fajl"

Napomena: Izvještaj ce takođe biti sačuvan na C:\Adwcleaner\AdwCleaner[0].txt



Arrow Korak 2

Preuzmite program GMER sa donjeg linka na Desktop:


GMER download
Kliknite dati link;
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberite Desktop i kliknite Save.



Dvoklikom pokrenite GMER.
Sačekajte da se završi uvodno skeniranje - ukoliko se pojavi bilo kakav upit, kliknite No;

kliknite Scan i sačekajte da skeniranje bude završeno;

kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom Gmer1);

kliknite desnim tasterom u prozor programa Gmer i odaberite Options > 3rd party - kliknite Scan;

po završetku skeniranja kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom Gmer2);

kliknite taster >>> i odaberite Autostart karticu;

po završetku kratkotrajnog skeniranja, kliknite Copy;

otvorite Notepad i u njega postavite kopirani tekst - izveštaj sačuvajte na Desktop (pod nazivom Gmer3);


Slikoviti prikaz postupka

Priložite sva tri izveštaja uz poruku korišćenjem opcije Prikači fajl.

offline
  • Absolut Gut
  • Pridružio: 13 Avg 2012
  • Poruke: 561
  • Gde živiš: Atakama

1: AdwCleaner: https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png

2:
https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png

offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Ne vidim tragove aktivnog malware-a u postavljenim izvještajima. Da li je sistem išta brži nakon pokretanja AdwCleaner-a?

offline
  • Absolut Gut
  • Pridružio: 13 Avg 2012
  • Poruke: 561
  • Gde živiš: Atakama

Pa kao jeste, ali i dalje imam problem kad se pali racunar , malo duze mu treba, a ovako sad radi super, ali ne znam dokle ce samo ..

offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Ovdje smo završili i ostaje ti još da uradiš sljedeće:


Arrow

Ponovo pokreni AdwCleaner
Klikni na dugme Uninstall i pričekaj da se postupak deinstalacije završi.




Arrow

Posjeti temu Testirajte da li vam je pretraživač ranjiv, pročitaj i isprati link koji stoji u njoj.



Arrow

Preporučujem da za zaštitu USB memorijskih uređaja koristiš MCShield.
Nema nikakve veze sa antivirus-om tj. neće ometati njegov rad, a pokazao se kao jedan od najboljih vida zaštite od malware-a koji se prenosi putem USB mem. uređaja.


Home Page MCShield-a: http://www.mcshield.net
Više o MCShield-u možeš saznati u ovoj temi: http://www.mycity.rs/MyCity-Laboratorija/MCShield-v2.html
Facebook stranica MCShield-a: http://www.facebook.com/MCShield



Arrow

Probaj sa isključivanje Windows Defendera

Idi u Control Panel -> Windows Defender -> Options -> Administrator i odčekiraj Use this program.
Ovdje imaš i video uputstvo:
http://windows.microsoft.com/en-us/windows/turn-wi.....=windows-7

Ukoliko ni to ne pomogne, otvori temu u Windows forumu i tamo opiši svoj problem.
http://www.mycity.rs/Windows/

offline
  • Absolut Gut
  • Pridružio: 13 Avg 2012
  • Poruke: 561
  • Gde živiš: Atakama

Hvala ti, uradicu kako si nalozio.. i hvala ti za MCShield, skroz sam zaboravio na taj program, a imam problem sa USB portom kad ubacujem FotoAparat, nece da otvori slike, hvala sto me podseti Smile..

Ko je trenutno na forumu
 

Ukupno su 853 korisnika na forumu :: 32 registrovanih, 4 sakrivenih i 817 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., aleksmajstor, Apok, bojankrstc, comi_pfc, crnitrn, darkangel, Dimitrije Paunovic, Dimitrise93, Djokislav, Dorcolac, Dovla, Fog of War, HrcAk47, ILGromovnik, JOntra, ladro, Mi lao shu, Milometer, nikoladim, Panter, panzerwaffe, pein, Rakenica, saputnik plavetnila, Srki94, vathra, Vlajman1957, voja64, vukovi, Zimbabwe, |_MeD_|