Lap top otkazuje poslušnost ???

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

U redu, odradi ovaj fix gore koji sam ti napisao i dostavi mi izvestaj.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 28-06-2014 02
Ran by SYSTEM at 2014-07-01 15:43:27 Run:1
Running from g:\
Boot Mode: Recovery
==============================================

Content of fixlist:
*****************
start
HKLM-x32\...\Run: [DATAMNGR] => C:\PROGRA~2\Search Results Toolbar\Datamngr\datamngrUI.exe
C:\PROGRA~2\Search Results Toolbar\Datamngr\datamngrUI.exe
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SearchSettings] => C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe [1404736 2014-05-26] (Spigot, Inc.)
C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe
AppInit_DLLs: C:\PROGRA~2\Search Results Toolbar\Datamngr\x64\datamngr.dll => C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll [2018680 2013-02-14] (Bandoo Media Inc)
C:\PROGRA~2\Search Results Toolbar\Datamngr\x64\datamngr.dll
C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll
AppInit_DLLs: C:\PROGRA~2\Search Results Toolbar\Datamngr\x64\IEBHO.dll => C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll [1531256 2013-02-14] (Bandoo Media Inc)
C:\PROGRA~2\Search Results Toolbar\Datamngr\x64\IEBHO.dll
C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll
ShellIconOverlayIdentifiers-x32: EnhancedStorageShell -> {D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D} => No File
ShellIconOverlayIdentifiers-x32: SharingPrivate -> {08244EE6-92F0-47f2-9FC9-929BAA2E7235} => No File
S2 Update Greener Web; C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe [318752 2014-06-28] ()
S2 Util Greener Web; C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.exe [318752 2014-06-28] ()
C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe
C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.exe
S1 {a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64; C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys [61120 2014-06-19] (StdLib)
C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys
C:\Users\Guest\AppData\Local\Temp\SkypeSetup.exe
C:\Users\Vanda\AppData\Local\Temp\EBUF96D.EXE
C:\Users\Vanda\AppData\Local\Temp\EBUFCF5.DLL
C:\Users\Vanda\AppData\Local\Temp\Firefox Setup 30.0.exe
C:\Users\Vanda\AppData\Local\Temp\loygame-pro.exe
C:\Users\Vanda\AppData\Local\Temp\updatepackasc.exe
end
*****************

HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\DATAMNGR => value deleted successfully.
"C:\PROGRA~2\Search Results Toolbar\Datamngr\datamngrUI.exe" => File/Directory not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\ => Value not found.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SearchSettings => Value not found.
"C:\Program Files (x86)\Common Files\Spigot\Search Settings\SearchSettings.exe" => File/Directory not found.
"C:\PROGRA~2\Search Results Toolbar\Datamngr\x64\datamngr.dll" => Value Data removed successfully.
C:\PROGRA~2\Search Results Toolbar\Datamngr\x64\datamngr.dll => Moved successfully.
"C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\datamngr.dll" => File/Directory not found.
"C:\PROGRA~2\Search Results Toolbar\Datamngr\x64\IEBHO.dll" => Value Data removed successfully.
C:\PROGRA~2\Search Results Toolbar\Datamngr\x64\IEBHO.dll => Moved successfully.
"C:\Program Files (x86)\Search Results Toolbar\Datamngr\x64\IEBHO.dll" => File/Directory not found.
'HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\EnhancedStorageShell' => Key deleted successfully.
'HKLM\Software\Wow6432Node\Classes\CLSID\{D9144DCD-E998-4ECA-AB6A-DCD83CCBA16D}'=> Key not found.
'HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\SharingPrivate' => Key deleted successfully.
'HKLM\Software\Wow6432Node\Classes\CLSID\{08244EE6-92F0-47f2-9FC9-929BAA2E7235}'=> Key not found.
Update Greener Web => Service deleted successfully.
Util Greener Web => Service deleted successfully.
C:\Program Files (x86)\Greener Web\updateGreenerWeb.exe => Moved successfully.
C:\Program Files (x86)\Greener Web\bin\utilGreenerWeb.exe => Moved successfully.
{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64 => Service deleted successfully.
C:\Windows\System32\drivers\{a3f28269-ad17-41a8-b032-3e0313ef8979}Gw64.sys => Moved successfully.
C:\Users\Guest\AppData\Local\Temp\SkypeSetup.exe => Moved successfully.
C:\Users\Vanda\AppData\Local\Temp\EBUF96D.EXE => Moved successfully.
C:\Users\Vanda\AppData\Local\Temp\EBUFCF5.DLL => Moved successfully.
C:\Users\Vanda\AppData\Local\Temp\Firefox Setup 30.0.exe => Moved successfully.
C:\Users\Vanda\AppData\Local\Temp\loygame-pro.exe => Moved successfully.
C:\Users\Vanda\AppData\Local\Temp\updatepackasc.exe => Moved successfully.

==== End of Fixlog ====

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Mozes li sada da pokrenes FRST iz normal mode?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Mogu,pokrenuo sam ga,ali i dalje mi stoji na sred ekrana SFAUupdater.exe - Ordinal Not Found

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 01 Jul 2014 16:38

Pokreni ga i klikni scan i dostavi mi izvestaje.

Dopuna: 01 Jul 2014 16:44

Obrisacemo taj SmartFileAdvisor samo mi dostavi izvestaje da ubrzamo malo.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 28-06-2014 02
Ran by Vanda at 2014-07-01 16:50:55
Running from C:\Users\Vanda\AppData\Local\Temp\Temp1_109451_922312456_FRST64.zip
Boot Mode: Normal
==========================================================


==================== Security Center ========================

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installed Programs ======================

7 Sticky Notes (HKLM-x32\...\{2DB7DD8E-F17B-408A-B93B-92867EF7974D}_is1) (Version: - Fabio Martin)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.7.0.1860 - Adobe Systems Incorporated)
Adobe AIR (x32 Version: 3.7.0.1860 - Adobe Systems Incorporated) Hidden
Adobe Download Assistant (HKLM-x32\...\com.adobe.downloadassistant.AdobeDownloadAssistant) (Version: 1.2.6 - Adobe Systems Incorporated)
Adobe Download Assistant (x32 Version: 1.2.6 - Adobe Systems Incorporated) Hidden
Adobe Flash Player 13 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Flash Player 13 Plugin (HKLM-x32\...\Adobe Flash Player Plugin) (Version: 13.0.0.214 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.07) (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-AB0000000001}) (Version: 11.0.07 - Adobe Systems Incorporated)
Advanced SystemCare 7 (HKLM-x32\...\Advanced SystemCare 7_is1) (Version: 7.1.0 - IObit)
Akamai NetSession Interface (HKCU\...\Akamai) (Version: - Akamai Technologies, Inc)
Alcatel onetouch Manager (HKLM-x32\...\{ABEFEF38-F469-0200-0000-000000000000}) (Version: 13.03.466 - Mobile Action)
Amazing Universe (HKLM-x32\...\{19922465-1290-48FD-B87C-0FCC52FAA544}) (Version: 1.0.2 - W3i, LLC)
Apple Application Support (HKLM-x32\...\{AAC5D43E-816D-4C2D-8E51-55FFF35BE301}) (Version: 3.0.1 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{787136D2-F0F8-4625-AA3F-72D7795AC842}) (Version: 7.1.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Auslogics Duplicate File Finder (HKLM-x32\...\{6845255F-15CC-4DD1-94D5-D38F370118B3}_is1) (Version: version 2.2 - Auslogics Software Pty Ltd)
AV WebCam Morpher 2.0 (HKLM-x32\...\AV WebCam Morpher 2.0) (Version: - )
avast! Free Antivirus (HKLM-x32\...\avast) (Version: 9.0.2011 - Avast Software)
AVG 2014 (Version: 14.0.3658 - AVG Technologies) Hidden
BasicServe 1.0 build 111 (HKLM-x32\...\BasicServe) (Version: - )
BitTorrent (HKCU\...\BitTorrent) (Version: 7.8.2.30489 - BitTorrent Inc.)
Bluetooth Win7 Suite (64) (HKLM\...\{230D1595-57DA-4933-8C4E-375797EBB7E1}) (Version: 7.03.000.58 - Atheros Communications)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
CCleaner (HKLM\...\CCleaner) (Version: 3.27 - Piriform)
Championship Manager 2008 (HKLM-x32\...\{2F4E2C8A-B886-418E-BE49-0B867CBDA959}) (Version: 8.0.0 - Eidos)
Compiled Driver Disk (LG Electronics) 1.0 (HKLM\...\{3DCF00F5-04A5-4543-A088-705480811204}_is1) (Version: 1.0.2.0 - COMPELSON Labs)
Complitly (HKLM-x32\...\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1) (Version: - Complitly) <==== ATTENTION
Convert PDF to Word Desktop Software version 2.9.1 (HKLM-x32\...\{84A79DF3-D855-4671-B67A-E6B8846EC5A3}_is1) (Version: 2.9.1 - Convertpdftoword.net)
Critical Update for Microsoft Visual Studio 2010 Professional - ENU (KB2938807) (HKLM-x32\...\{D6B15AE6-B052-363E-B6BB-C4714CBA6509}.KB2938807) (Version: 1 - Microsoft Corporation)
Crystal Reports for Visual Studio (x32 Version: 12.51.0.240 - SAP) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.48.1.0347 - Disc Soft Ltd)
DAEMON Tools Ultra (HKLM-x32\...\DAEMON Tools Ultra) (Version: 2.1.0.0187 - Disc Soft Ltd)
Deadliest Catch Alaskan Storm (HKLM-x32\...\AlaskanStorm) (Version: - )
Dotfuscator Software Services - Community Edition (HKLM-x32\...\{1AA5BD63-6614-44B2-88A7-605191EDB835}) (Version: 5.0.2500.0 - PreEmptive Solutions)
Driver Booster (HKLM-x32\...\Driver Booster_is1) (Version: 1.3 - IObit)
Evernote v. 4.6.7 (HKLM-x32\...\{A6563D7C-F3AD-11E2-A4DB-984BE15F174E}) (Version: 4.6.7.8409 - Evernote Corp.)
Facebook Video Calling 2.0.0.447 (HKLM-x32\...\{8DF41A9F-FE13-43E8-A003-5F9B55A011EE}) (Version: 2.0.447 - Skype Limited)
FM PDF To Word Converter Free 1.3 (HKLM-x32\...\FM PDF To Word Converter Free_is1) (Version: 1.3 - )
FM PDF To Word Converter Pro 2.1 (HKLM-x32\...\FM PDF To Word Converter Pro_is1) (Version: 2.1 - )
FotoMix version 8.4 (HKLM-x32\...\{10A0255E-0B73-4397-AB4E-E3667EDA70E4}_is1) (Version: 8.4 - Digital Photo Software)
Free Puzzle Card Games 2010 v5.0 (HKLM-x32\...\Free Puzzle_is1) (Version: - TreeCardGames.com)
Free Spider Solitaire 2010 v2.1 (HKLM-x32\...\Free Spider_is1) (Version: - TreeCardGames.com)
Freelancer (HKLM-x32\...\Freelancer 1.0) (Version: - )
FXLider MetaTrader (HKLM-x32\...\FXLider MetaTrader) (Version: 4.00 - MetaQuotes Software Corp.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 35.0.1916.153 - Google Inc.)
Google Drive (HKLM-x32\...\{D9F75285-4864-461D-83DA-8D056BAC44D1}) (Version: 1.16.6866.4367 - Google, Inc.)
Google Earth (HKLM-x32\...\{4D2A6330-2F8B-11E3-9C40-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.24.15 - Google Inc.) Hidden
Greener Web (HKLM\...\Greener Web) (Version: 2014.06.20.061057 - Greener Web) <==== ATTENTION
Hidden Secrets Nostradamus (HKLM-x32\...\Hidden Secrets Nostradamus_is1) (Version: 1.0 - Media Contact LLC)
iLook 300 (HKLM-x32\...\{B5538179-2EA1-42E3-A760-4892C4C823B4}) (Version: 1.0.0.21 - KYE)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.3347 - Intel Corporation)
Intel(R) PROSet/Wireless for Bluetooth(R) 3.0 + High Speed (HKLM\...\{821B4CA1-D404-4CCA-AEA4-C7D3F40841B1}) (Version: 1.0.0.0142 - Intel Corporation)
Intel(R) PROSet/Wireless Software for Bluetooth(R) Technology (HKLM\...\{006B5C65-3938-4246-B182-994A7E415EDE}) (Version: 1.1.0.0537 - Intel Corporation)
IObit Malware Fighter (HKLM-x32\...\IObit Malware Fighter_is1) (Version: 2.1 - IObit)
IObit Uninstaller (HKLM-x32\...\IObitUninstall) (Version: 3.0.5.1228 - IObit)
iolo technologies' System Mechanic (HKLM-x32\...\{55FD1D5A-7AEF-4DA3-8FAF-A71B2A52FFC7}_is1) (Version: 11.7.1 - iolo technologies, LLC)
iTunes (HKLM\...\{B8BA155B-1E75-405F-9CB4-8A99615D09DC}) (Version: 11.1.5.5 - Apple Inc.)
Java 7 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86417051FF}) (Version: 7.0.510 - Oracle)
Java 7 Update 55 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83217051FF}) (Version: 7.0.550 - Oracle)
Java Auto Updater (x32 Version: 2.1.9.8 - Sun Microsystems, Inc.) Hidden
Math Problem Solver (HKCU\...\Math Problem Solver) (Version: - )
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (Version: 4.5.50938 - Microsoft Corporation) Hidden
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version: - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version: - )
Microsoft Application Error Reporting (Version: 12.0.6015.5000 - Microsoft Corporation) Hidden
Microsoft Application Error Reporting (x32 Version: 12.0.6012.5000 - Microsoft Corporation) Hidden
Microsoft ASP.NET MVC 2 - Visual Studio 2010 Tools (HKLM-x32\...\{40416836-56CC-4C0E-A6AF-5C34BADCE483}) (Version: 2.0.50217.0 - Microsoft Corporation)
Microsoft ASP.NET MVC 2 (HKLM-x32\...\{1803A630-3C38-4D2B-9B9A-0CB37243539C}) (Version: 2.0.50217.0 - Microsoft Corporation)
Microsoft Game Studios Common Redistributables Pack 1 (x32 Version: 1.0.0 - Microsoft Game Studios) Hidden
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (Version: 1.1.40219 - Microsoft Corporation) Hidden
Microsoft Office File Validation Add-In (HKLM-x32\...\{90140000-2005-0000-0000-0000000FF1CE}) (Version: 14.0.5130.5003 - Microsoft Corporation)
Microsoft Office Professional Edition 2003 (HKLM-x32\...\{90110409-6000-11D3-8CFE-0150048383C9}) (Version: 11.0.8173.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.30214.0 - Microsoft Corporation)
Microsoft Silverlight 3 SDK (HKLM-x32\...\{2012098D-EEE9-4769-8DD3-B038050854D4}) (Version: 3.0.40818.0 - Microsoft Corporation)
Microsoft Silverlight 4 SDK (HKLM-x32\...\{05855322-BE43-41FE-B583-D3AE0C326D58}) (Version: 4.0.50826.0 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (Version: - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{C688457E-03FD-4941-923B-A27F4D42A7DD}) (Version: 10.3.5500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Common Files (Version: 10.3.5500.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Services (Version: 10.3.5500.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Database Engine Shared (Version: 10.3.5500.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Native Client (HKLM\...\{2738C4AA-420E-4E13-ADEF-B5AB250E3EF1}) (Version: 10.3.5500.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Data-Tier Application Framework (HKLM-x32\...\{BC537AE0-88AF-47ED-B762-33B0D62B5188}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Data-Tier Application Project (HKLM-x32\...\{7A56D81D-6406-40E7-9184-8AC1769C4D69}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (x64) (HKLM\...\{EAEBF166-B06A-4D7F-BAF7-6615303D5C7C}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Transact-SQL Language Service (HKLM-x32\...\{09C52940-A4D1-4409-A7CC-1AAE630CF578}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server 2008 RsFx Driver (Version: 10.3.5500.0 - Microsoft Corporation) Hidden
Microsoft SQL Server 2008 Setup Support Files (HKLM\...\{6292D514-17A4-403F-98F9-E150F10C043D}) (Version: 10.3.5500.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{3A9FC03D-C685-4831-94CF-4EDFD3749497}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 ENU (HKLM\...\{D4AD39AD-091E-4D33-BB2B-59F6FCB8ADC3}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Database Publishing Wizard 1.4 (HKLM-x32\...\{ACE28263-76A4-4BF5-B6F4-8BD719595969}) (Version: 10.1.2512.8 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (x64) (HKLM\...\{1E6ED082-E32D-4B2B-8B6A-70B094815135}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{0826F9E4-787E-481D-83E0-BC6A57B056D5}) (Version: 10.3.5500.0 - Microsoft Corporation)
Microsoft Sync Framework Runtime v1.0 SP1 (x64) (HKLM\...\{8438EC02-B8A9-462D-AC72-1B521349C001}) (Version: 1.0.3010.0 - Microsoft Corporation)
Microsoft Sync Framework SDK v1.0 SP1 (HKLM-x32\...\{0E3DFC64-CC49-4BE2-8C9C-58EF129675DB}) (Version: 1.0.3010.0 - Microsoft Corporation)
Microsoft Sync Framework Services v1.0 SP1 (x64) (HKLM\...\{034106B5-54B7-467F-B477-5B7DBB492624}) (Version: 1.0.3010.0 - Microsoft Corporation)
Microsoft Sync Services for ADO.NET v2.0 SP1 (x64) (HKLM\...\{1D1CEEF8-3741-45BD-8E77-963E1DEBDDD3}) (Version: 2.0.3010.0 - Microsoft Corporation)
Microsoft Team Foundation Server 2010 Object Model - ENU (HKLM\...\Microsoft Team Foundation Server 2010 Object Model - ENU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Team Foundation Server 2010 Object Model - ENU (Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ Compilers 2010 Standard - enu - x64 (Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ Compilers 2010 Standard - enu - x86 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4974 (HKLM-x32\...\{B7E38540-E355-3503-AFD7-635B2F2F76E1}) (Version: 9.0.30729.4974 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Designtime - 10.0.30319 (HKLM\...\{F5079164-1DB9-3BDA-853B-F78AF67CE071}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation)
Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005 (x32 Version: 12.0.21005 - Microsoft Corporation) Hidden
Microsoft Visual F# 2.0 Runtime (HKLM-x32\...\{85467CBC-7A39-33C9-8940-D72D9269B84F}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{14DD7530-CCD2-3798-B37D-3839ED6A441C}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Office Developer Tools (x64) (Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Professional - ENU (HKLM-x32\...\Microsoft Visual Studio 2010 Professional - ENU) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual Studio 2010 Professional - ENU (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 SharePoint Developer Tools (x32 Version: 10.0.40219 - Microsoft Corporation) Hidden
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50325 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (Version: 10.0.50330 - Microsoft Corporation) Hidden
Microsoft Visual Studio Macro Tools (HKLM-x32\...\Microsoft Visual Studio Macro Tools) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual Studio Macro Tools (x32 Version: 9.0.30729 - Microsoft Corporation) Hidden
Microsoft XML Parser (x32 Version: 8.20.8730.4 - Microsoft Corporation) Hidden
mIRC (HKLM-x32\...\mIRC) (Version: 6.2 - mIRC Co. Ltd.)
Mozilla Firefox 30.0 (x86 en-US) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 en-US)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML4 Parser (HKLM-x32\...\{01501EBA-EC35-4F9F-8889-3BE346E5DA13}) (Version: 1.0.0 - Microsoft Game Studios)
mts mobilni internet (HKLM-x32\...\mts mobilni internet) (Version: 21.005.15.02.532 - Huawei Technologies Co.,Ltd)
My Game Long Name (HKLM\...\UDK-15e2a040-7379-441a-9df9-dd18ab7a22d1) (Version: - Epic Games, Inc.)
Nero 7 Ultra Edition (HKLM-x32\...\{CF097717-F174-4144-954A-FBC4BF301033}) (Version: 7.02.9753 - Nero AG)
neroxml (x32 Version: 1.0.0 - Nero AG) Hidden
Nitro Reader 2 (HKLM\...\{3A92A8D7-60F4-4BC0-892B-3AAE4481359D}) (Version: 2.2.1.14 - Nitro PDF Software)
NVIDIA PhysX (HKLM-x32\...\{DEA314C4-0929-4250-BC92-98E4C105F28D}) (Version: 9.10.0129 - NVIDIA Corporation)
OpenOffice.org 3.2 (HKLM-x32\...\{6C962B23-6398-4EC2-AD76-1142B7EF87AA}) (Version: 3.2.9483 - OpenOffice.org)
Opera Stable 20.0.1387.64 (HKLM-x32\...\Opera 20.0.1387.64) (Version: 20.0.1387.64 - Opera Software ASA)
Opera Stable 20.0.1387.82 (HKLM-x32\...\Opera 20.0.1387.82) (Version: 20.0.1387.82 - Opera Software ASA)
Opera Stable 22.0.1471.70 (HKLM-x32\...\Opera 22.0.1471.70) (Version: 22.0.1471.70 - Opera Software ASA)
Paket za kompatibilnost sustava Office 2007. (HKLM-x32\...\{90120000-0020-041A-0000-0000000FF1CE}) (Version: 12.0.6612.1000 - Microsoft Corporation)
Patrician 3: Rise of the Hanse (HKLM-x32\...\Patrician 3: Rise of the Hanse) (Version: - )
Phone Drivers Downloader 1.1 (HKLM\...\{BDDB58A5-F98E-4D3C-B554-4A4D31C6D405}_is1) (Version: 1.1.0.0 - COMPELSON Labs)
Picasa 3 (HKLM-x32\...\Picasa 3) (Version: 3.9 - Google, Inc.)
Pirateville (HKLM-x32\...\Pirateville_is1) (Version: - )
PowerDVD (HKLM-x32\...\{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}) (Version: - )
PowerPaint 2.50 (HKLM-x32\...\PowerPaint_is1) (Version: - FLISoft)
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
QuickTime 7 (HKLM-x32\...\{111EE7DF-FC45-40C7-98A7-753AC46B12FB}) (Version: 7.75.80.95 - Apple Inc.)
Real Mahjong (HKLM-x32\...\Real Mahjong_is1) (Version: - )
RealDownloader (x32 Version: 1.3.3 - RealNetworks, Inc.) Hidden
RealNetworks - Microsoft Visual C++ 2008 Runtime (x32 Version: 9.0 - RealNetworks, Inc) Hidden
RealNetworks - Microsoft Visual C++ 2010 Runtime (x32 Version: 10.0 - RealNetworks, Inc) Hidden
RealPlayer (HKLM-x32\...\RealPlayer 16.0) (Version: 16.0.3 - RealNetworks)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6642 - Realtek Semiconductor Corp.)
RealUpgrade 1.1 (x32 Version: 1.1.0 - RealNetworks, Inc.) Hidden
SanDisk ® Media Manager (HKLM-x32\...\{8BAF591E-B0E0-4DF6-B73C-AD10826E0DB7}) (Version: 2.1.0.4 - SanDisk)
ScanSoft OmniPage SE 4 (HKLM-x32\...\{DEE88727-779B-47A9-ACEF-F87CA5F92A65}) (Version: 15.2.0020 - Nuance Communications, Inc.)
Service Pack 3 for SQL Server 2008 (KB2546951) (64-bit) (HKLM\...\KB2546951) (Version: 10.3.5500.0 - Microsoft Corporation)
Skype Click to Call (HKLM-x32\...\{BB285C9F-C821-4770-8970-56C4AB52C87E}) (Version: 7.2.15747.10003 - Microsoft Corporation)
Skype™ 6.16 (HKLM-x32\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.16.105 - Skype Technologies S.A.)
Smart Defrag 3 (HKLM-x32\...\Smart Defrag 3_is1) (Version: 3.1 - IObit)
Smart File Advisor 1.1.3 (HKLM-x32\...\Smart File Advisor_is1) (Version: 1.1.3 - Filefacts.net)
Solitaire Haven (HKLM-x32\...\Solitaire Haven_is1) (Version: - My Real Games Ltd)
SpeedUpMyComputer (HKLM-x32\...\SpeedUpMyComputer) (Version: 38.1 - SmartTweak Software) <==== ATTENTION
Sql Server Customer Experience Improvement Program (Version: 10.3.5500.0 - Microsoft Corporation) Hidden
SUPERAntiSpyware (HKLM\...\{CDDCBBF1-2703-46BC-938B-BCC81A1EEAAA}) (Version: 5.0.1134 - SUPERAntiSpyware.com)
Supraball (HKLM-x32\...\Supraball) (Version: - Supra Games Gbr)
Surfing Protection (HKLM-x32\...\IObit Surfing Protection_is1) (Version: 1.0 - IObit)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 15.3.6.0 - Synaptics Incorporated)
Talismans Of Atlantis (HKLM-x32\...\Talismans Of Atlantis_is1) (Version: - My Real Games Ltd)
Telenor Internet (HKLM-x32\...\Telenor Internet) (Version: 23.005.03.02.208 - Huawei Technologies Co.,Ltd)
TES Construction Set (HKLM-x32\...\{FF70923C-8A51-47F4-A7E9-893C6D54EB68}) (Version: - )
The Godfather™ The Game (HKLM-x32\...\{1D2CF076-A63F-41A5-00A1-5924FADFAD9D}) (Version: - )
The KMPlayer (remove only) (HKLM-x32\...\The KMPlayer) (Version: 3.9.0.124 - PandoraTV)
Tibet Quest (HKLM-x32\...\TibetQuest_is1) (Version: 1.0 - Media Contact LLC)
Total Commander (Remove or Repair) (HKLM-x32\...\Totalcmd) (Version: 7.56a - Ghisler Software GmbH)
VC80CRTRedist - 8.0.50727.6195 (x32 Version: 1.2.0 - DivX, Inc) Hidden
Vegas Pro 9.0 (64-bit) (HKLM\...\{A2422B02-0D41-43F5-B62E-C7A5E55FCBA8}) (Version: 9.0.1146 - Sony)
VirtualDJ Home FREE (HKLM-x32\...\{77C2D5D4-ADC5-49F9-B36E-5992FCF35EA3}) (Version: 7.4.1 - Atomix Productions)
Visual Studio 2010 Prerequisites - English (HKLM\...\{662014D2-0450-37ED-ABAE-157C88127BEB}) (Version: 10.0.40219 - Microsoft Corporation)
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 ENU (HKLM-x32\...\{112C23F2-C036-4D40-BED4-0CB47BF5555C}) (Version: 4.0.8080.0 - Microsoft Corporation)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player 1.1.11 (HKLM-x32\...\VLC media player) (Version: 1.1.11 - VideoLAN)
VLC media player 2.1.0 (HKLM\...\VLC media player) (Version: 2.1.0 - VideoLAN)
WCF RIA Services V1.0 SP1 (HKLM-x32\...\{D9E6001A-5DC3-4620-AF7A-80B6CD48645D}) (Version: 4.1.60114.0 - Microsoft Corporation)
Web Deployment Tool (HKLM\...\{0F37D969-1260-419E-B308-EF7D29ABDE20}) (Version: 1.1.0618 - Microsoft Corporation)
Winamp (HKLM-x32\...\Winamp) (Version: 5.62 - Nullsoft, Inc)
Winamp Detector Plug-in (HKCU\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Windows Media Player Firefox Plugin (HKLM-x32\...\{69FDFBB6-351D-4B8C-89D8-867DC9D0A2A4}) (Version: 1.0.0.8 - Microsoft Corp)
WinRAR 4.20 (64-bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version: - Wargaming.net)
YTD Video Downloader 3.9.3 (HKLM-x32\...\{1a413f37-ed88-4fec-9666-5c48dc4b7bb7}) (Version: - GreenTree Applications SRL)

==================== Restore Points =========================

26-06-2014 18:35:50 Windows Update
26-06-2014 20:30:45 Windows Update
27-06-2014 18:27:24 Операција опоравка
27-06-2014 18:39:45 avast! antivirus system restore point
27-06-2014 19:21:26 Операција опоравка
27-06-2014 19:28:48 avast! antivirus system restore point
27-06-2014 21:13:39 Windows Update
28-06-2014 07:58:55 Операција опоравка
28-06-2014 08:07:23 avast! antivirus system restore point
28-06-2014 08:18:19 Windows Update
28-06-2014 08:23:09 Операција опоравка
28-06-2014 08:35:34 avast! antivirus system restore point
29-06-2014 10:18:02 Windows Update
30-06-2014 18:32:37 Removed IObit Apps Toolbar v9.3.

==================== Hosts content: ==========================

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (whitelisted) =============

Task: {00154302-E72D-45B6-AF4E-173D1E04F4CF} - System32\Tasks\Opera scheduled Autoupdate 1389458101 => C:\Program Files (x86)\Opera\launcher.exe [2014-06-16] (Opera Software)
Task: {1D83B1D5-74E3-4989-A091-9AE9AFB88DD2} - System32\Tasks\ReclaimerUpdateFiles_Vanda => C:\Users\Vanda\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe [2014-06-19] (RealNetworks, Inc.)
Task: {1DC36304-2358-4E4A-A5EE-4BA33739E229} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-11] (Google Inc.)
Task: {22820944-73D7-4A5C-96A3-AB5FD59495D6} - System32\Tasks\{E38FA3A8-BBD1-443B-8360-D5EB411898A0} => C:\Program Files (x86)\Telenor Internet\Telenor Internet.exe [2014-04-15] ()
Task: {2B8FAAA1-E4CC-4094-9C74-9853AC6934BF} - System32\Tasks\ReclaimerUpdateXML_Vanda => C:\Users\Vanda\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe [2014-06-19] (RealNetworks, Inc.)
Task: {2D1CC188-21C8-4FE7-A4A8-130BEAAADEB4} - System32\Tasks\{145411BA-2222-44CB-848F-71D3FC76480A} => C:\Program Files (x86)\Telenor Internet\Telenor Internet.exe [2014-04-15] ()
Task: {2F9BC692-DFAC-438F-9A49-C4E32677F33D} - System32\Tasks\RealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {32AEFF44-0512-42BD-B854-7444678F49C5} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000UA => C:\Users\Vanda\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-20] (Facebook Inc.)
Task: {480CF654-05FF-4BFC-AB63-22A28657AFC8} - System32\Tasks\{4D8B08C5-8FFF-4182-8B61-1AEA8081089E} => C:\Program Files (x86)\Telenor Internet\Telenor Internet.exe [2014-04-15] ()
Task: {4F1BC68E-E2E4-433D-A504-B4DF9A1AEC0E} - System32\Tasks\RNUpgradeHelperLogonPrompt_Vanda => C:\Users\Vanda\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe [2014-06-19] (RealNetworks, Inc.)
Task: {50540CA8-5196-4E0E-95C5-1FA14B9D112C} - System32\Tasks\{C9D6A28F-7662-4596-B4E7-C94040743288} => C:\Program Files (x86)\Telenor Internet\Telenor Internet.exe [2014-04-15] ()
Task: {55388F2A-F350-4EA3-8357-AE0054CE25F4} - System32\Tasks\RealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {5E6225FC-8560-4B80-957B-D49B4255A391} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000Core => C:\Users\Vanda\AppData\Local\Facebook\Update\FacebookUpdate.exe [2014-04-20] (Facebook Inc.)
Task: {5EE16ED8-1B57-4346-B119-ED8F46ED9AE0} - System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {5F9D26CC-519F-4F7D-9A59-B849530A1CA1} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2014-03-13] (IObit) <==== ATTENTION
Task: {65179BCB-14AD-4E7B-88E8-7A624608EADB} - System32\Tasks\{F7F740AE-B439-4E4C-98F4-86FDECDC9E80} => C:\Program Files (x86)\Telenor Internet\Telenor Internet.exe [2014-04-15] ()
Task: {6EBFCFF3-8124-4074-B418-5C7DB641AB54} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {6F4078B2-E174-4F80-A212-9260E831A530} - System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {77581848-482E-45DF-8046-D2F546511AD9} - System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\realupgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {7B0143CF-B1D5-47E9-9204-08D3321732DA} - System32\Tasks\{2024A814-C829-4BEE-AB14-8D2A978A9887} => C:\Program Files (x86)\Telenor Internet\Telenor Internet.exe [2014-04-15] ()
Task: {8379E336-967B-49C7-B99B-35AD5F66963A} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-14] (Adobe Systems Incorporated)
Task: {843E7AC7-73A3-485A-874A-D0765C036BE5} - System32\Tasks\{5098F032-DA51-418B-AB25-C9202FADD5C6} => C:\Program Files (x86)\Opera\opera.exe
Task: {87267E17-83BA-4B5C-9544-31B65B61E203} - System32\Tasks\{EAF5B087-50AA-4247-8502-0721FDFD97D2} => C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [2013-10-07] (Google)
Task: {8A21763A-36CD-4D90-9D7B-92EDB30BB2BD} - System32\Tasks\RealCreateProcessScheduledTask15922476S-1-5-21-4085335947-2511170766-3262566581-1000 => c:\program files (x86)\real\realplayer\update\realsched.exe [2013-12-16] (RealNetworks, Inc.)
Task: {8CA70A02-FC02-4E44-95B5-B9E034EF4B6F} - System32\Tasks\Microsoft\Windows\WindowsBackup\AutomaticBackup => Rundll32.exe /d sdengin2.dll,ExecuteScheduledBackup
Task: {8EA7F41D-839D-4BF5-A02B-F058368C4C94} - System32\Tasks\{1B329B52-E6EC-46D4-8861-9F62DD42E52F} => C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [2013-10-07] (Google)
Task: {93D9CCC6-0FA8-4BC7-AA1D-9A1D8288437D} - System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000 => C:\Program Files (x86)\Real\RealUpgrade\RealUpgrade.exe [2013-08-14] (RealNetworks, Inc.)
Task: {A398A530-B8ED-48E9-8ABD-188A8DDFA0AF} - System32\Tasks\{20266698-E072-45C9-BD11-555BFA8F7D7C} => C:\Program Files (x86)\Telenor Internet\Telenor Internet.exe [2014-04-15] ()
Task: {A3D257A1-85AD-42D3-9E0D-5E7A8CAACBB1} - System32\Tasks\Math Problem Solver CPU => C:\Users\Vanda\AppData\Local\Math Problem Solver\cpu\Solve.exe [2013-07-10] () <==== ATTENTION
Task: {A433F030-D4E7-42C7-AC51-2A5D02A18200} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2012-03-11] (Google Inc.)
Task: {A470E680-99E6-4060-ABC7-0FB66FEBFAE6} - System32\Tasks\Math Problem Solver Optimize => C:\Users\Vanda\AppData\Local\Math Problem Solver\Optimize.exe <==== ATTENTION
Task: {ABC8F988-27CB-418E-92F7-61288CA09A71} - System32\Tasks\ASC7_SkipUac_Vanda => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASC.exe [2014-05-04] (IObit)
Task: {AC4D4DEC-966E-4C7E-BF80-3081106C6557} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2013-12-18] (AVAST Software)
Task: {B4B71DAA-B128-441F-8DEF-B7B1700DF9D0} - System32\Tasks\SmartDefrag3_Update => C:\Program Files (x86)\IObit\Smart Defrag 3\AutoUpdate.exe [2014-03-10] (IObit)
Task: {B754B62F-C720-44C1-B047-775EB28E533A} - System32\Tasks\{79EE858D-7509-4784-A1C9-304C8C2EF736} => C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [2013-10-07] (Google)
Task: {B9F3F955-7FA6-4C41-9FD8-340F5E493783} - System32\Tasks\{8FED043F-4749-4D4A-9B62-357E6A57670B} => C:\Program Files (x86)\Skype\\Phone\Skype.exe [2014-05-08] (Skype Technologies S.A.)
Task: {BE0C8BCF-934F-450E-BB56-4FCCFD00ECDB} - System32\Tasks\Driver Booster SkipUAC (Vanda) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-03-14] (IObit) <==== ATTENTION
Task: {CBE14CE5-B48B-48BF-9FE3-3473F9765EC6} - System32\Tasks\{583C463B-5CDE-4B86-B3BE-F92547966CA3} => C:\Program Files (x86)\Telenor Internet\Telenor Internet.exe [2014-04-15] ()
Task: {CD375221-2A56-4611-BB3F-7223A1B53AF1} - System32\Tasks\RNUpgradeHelperResumePrompt_Vanda => C:\Users\Vanda\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe [2014-06-19] (RealNetworks, Inc.)
Task: {D47FCF88-C47C-4F3E-B1EE-4B08291197C4} - System32\Tasks\{2A6EFA19-703B-49DA-BA6E-A69811A272A6} => C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [2013-10-07] (Google)
Task: {D9B7A217-A660-4C27-AEFF-E28772771286} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-20] (Microsoft Corporation)
Task: {E89BDB42-33DD-4F4B-B060-F7782CD63D93} - System32\Tasks\{374506C8-75E7-4344-8210-A5C0DC091B3D} => C:\Program Files (x86)\Google\Google Earth\client\googleearth.exe [2013-10-07] (Google)
Task: {E8C0B992-4470-43B3-B204-7CF38617E23B} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-01-23] (Piriform Ltd)
Task: {EE2E7D28-D822-4F54-9206-9F2D10BEA3F6} - System32\Tasks\RealDownloaderDownloaderScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000 => C:\Program Files (x86)\RealNetworks\RealDownloader\recordingmanager.exe [2013-08-14] (RealNetworks, Inc.)
Task: {F2AC2DFA-ABCC-4DF5-89C8-63AE0EF95264} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-03-12] (IObit) <==== ATTENTION
Task: {F510C4DB-7438-4FBC-B183-54FE23378366} - System32\Tasks\Funmoods => C:\Users\Vanda\AppData\Roaming\Funmoods\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000Core.job => C:\Users\Vanda\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000UA.job => C:\Users\Vanda\AppData\Local\Facebook\Update\FacebookUpdate.exe
Task: C:\Windows\Tasks\Funmoods.job => C:\Users\Vanda\AppData\Roaming\Funmoods\UpdateProc\UpdateTask.exe <==== ATTENTION
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda(2113).job => C:\Users\Vanda\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe
Task: C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda.job => C:\Users\Vanda\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe
Task: C:\Windows\Tasks\ReclaimerUpdateXML_Vanda.job => C:\Users\Vanda\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe
Task: C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Vanda.job => C:\Users\Vanda\AppData\Roaming\Real\Update\UpgradeHelper\RealPlayer\11.01\agent\rnupgagent.exe

==================== Loaded Modules (whitelisted) =============

2011-05-06 05:30 - 2011-10-04 18:08 - 00057640 _____ () C:\Program Files\Synaptics\SynTP\SynTPEnhPS.dll
2011-09-01 04:13 - 2011-09-01 04:13 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2011-03-14 17:27 - 2011-03-14 17:27 - 00346976 _____ () C:\ProgramData\DatacardService\HWDeviceService64.exe
2013-08-21 20:10 - 2014-04-24 01:11 - 00239968 _____ () C:\ProgramData\mts mobilni internet\OnlineUpdate\ouc.exe
2013-08-14 16:19 - 2013-08-14 16:19 - 00039056 _____ () C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
2012-11-19 14:14 - 2011-12-23 12:03 - 00655712 _____ () C:\ProgramData\Telenor Internet\OnlineUpdate\ouc.exe
2013-12-07 20:43 - 2013-10-25 12:08 - 00517408 _____ () C:\Program Files (x86)\IObit\Advanced SystemCare 7\sqlite3.dll
2014-07-01 14:40 - 2014-06-30 19:59 - 02789376 _____ () C:\Program Files\AVAST Software\Avast\defs\14063001\algo.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00433664 _____ () C:\Program Files (x86)\Evernote\Evernote\libxml2.dll
2012-09-08 13:16 - 2012-09-08 13:16 - 00315392 _____ () C:\Program Files (x86)\Evernote\Evernote\libtidy.dll
2014-01-20 14:17 - 2014-01-20 14:17 - 00073544 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2014-01-20 14:16 - 2014-01-20 14:16 - 01044808 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2013-12-07 21:35 - 2013-12-07 21:35 - 19336120 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2013-08-21 20:10 - 2013-08-21 20:09 - 00011362 _____ () C:\ProgramData\mts mobilni internet\OnlineUpdate\mingwm10.dll
2013-08-21 20:10 - 2013-08-21 20:09 - 00043008 _____ () C:\ProgramData\mts mobilni internet\OnlineUpdate\libgcc_s_dw2-1.dll
2013-08-21 20:10 - 2013-08-21 20:09 - 02415104 _____ () C:\ProgramData\mts mobilni internet\OnlineUpdate\QtCore4.dll
2013-08-21 20:10 - 2013-08-21 20:09 - 01148416 _____ () C:\ProgramData\mts mobilni internet\OnlineUpdate\QtNetwork4.dll
2013-08-21 20:10 - 2013-08-21 20:09 - 00383488 _____ () C:\ProgramData\mts mobilni internet\OnlineUpdate\QueryStrategy.dll
2013-08-21 20:10 - 2013-08-21 20:09 - 00398336 _____ () C:\ProgramData\mts mobilni internet\OnlineUpdate\QtXml4.dll
2012-11-19 14:14 - 2009-01-10 12:32 - 00011362 _____ () C:\ProgramData\Telenor Internet\OnlineUpdate\mingwm10.dll
2012-11-19 14:14 - 2009-06-22 20:42 - 00043008 _____ () C:\ProgramData\Telenor Internet\OnlineUpdate\libgcc_s_dw2-1.dll
2012-11-19 14:14 - 2010-07-23 06:58 - 02415104 _____ () C:\ProgramData\Telenor Internet\OnlineUpdate\QtCore4.dll
2012-11-19 14:14 - 2010-02-10 16:10 - 01148416 _____ () C:\ProgramData\Telenor Internet\OnlineUpdate\QtNetwork4.dll
2012-11-19 14:14 - 2011-12-23 09:52 - 00843264 _____ () C:\ProgramData\Telenor Internet\OnlineUpdate\QueryStrategy.dll
2012-11-19 14:14 - 2010-02-10 16:06 - 00398336 _____ () C:\ProgramData\Telenor Internet\OnlineUpdate\QtXml4.dll
2014-06-13 20:35 - 2014-06-05 15:58 - 00716616 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libglesv2.dll
2014-06-13 20:35 - 2014-06-05 15:58 - 00126280 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\libegl.dll
2014-06-13 20:35 - 2014-06-05 15:58 - 04217672 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\pdf.dll
2014-06-13 20:36 - 2014-06-05 15:58 - 00414536 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ppGoogleNaClPluginChrome.dll
2014-06-13 20:35 - 2014-06-05 15:58 - 01732424 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\ffmpegsumo.dll
2014-06-13 20:36 - 2014-06-05 15:58 - 14612296 _____ () C:\Program Files (x86)\Google\Chrome\Application\35.0.1916.153\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (whitelisted) =========

AlternateDataStreams: C:\Windows:nlsPreferences
AlternateDataStreams: C:\ProgramData\Temp:07BF512B
AlternateDataStreams: C:\ProgramData\Temp:24C072FF
AlternateDataStreams: C:\ProgramData\Temp:363E775E
AlternateDataStreams: C:\ProgramData\Temp:D1B5B4F1

==================== Safe Mode (whitelisted) ===================

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\ioloSystemService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\ioloSystemService => ""="Service"

==================== EXE Association (whitelisted) =============


==================== MSCONFIG/TASK MANAGER disabled items =========

MSCONFIG\startupreg: Adobe ARM => c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe
MSCONFIG\startupreg: AthBtTray =>
MSCONFIG\startupreg: AtherosBtStack =>
MSCONFIG\startupreg: B2C_AGENT =>
MSCONFIG\startupreg: BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA} =>
MSCONFIG\startupreg: Browser companion helper =>
MSCONFIG\startupreg: GoogleDriveSync =>
MSCONFIG\startupreg: iTunesHelper => c:\program files (x86)\itunes\ituneshelper.exe
MSCONFIG\startupreg: QuickTime Task =>
MSCONFIG\startupreg: SearchSettings =>
MSCONFIG\startupreg: Skype =>
MSCONFIG\startupreg: snp2uvc =>
MSCONFIG\startupreg: Sony PC Companion =>
MSCONFIG\startupreg: TkBellExe => "c:\program files (x86)\real\realplayer\update\realsched.exe" -osboot

==================== Faulty Device Manager Devices =============

Name: Microsoft Virtual WiFi Miniport Adapter
Description: Microsoft Virtual WiFi Miniport Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: vwifimp
Problem: : This device is not working properly because Windows cannot load the drivers required for this device. (Code 31)
Resolution: Update the driver

Name: Microsoft ISATAP Adapter
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft ISATAP Adapter #2
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft ISATAP Adapter #3
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Microsoft ISATAP Adapter #4
Description: Microsoft ISATAP Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft Teredo Tunneling Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.

Name: Bluetooth Server
Description: Bluetooth Server
Class Guid: {34446e8e-37b4-4b16-9da6-bea2db33465a}
Manufacturer: Intel Corporation
Service: btmaux
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (07/01/2014 04:29:51 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (07/01/2014 04:18:04 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Activation context generation failed for "Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"1".
Dependent Assembly Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195" could not be found.
Please use sxstrace.exe for detailed diagnosis.

Error: (07/01/2014 03:50:02 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (07/01/2014 03:48:59 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (07/01/2014 03:37:59 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: Activation context generation failed for "1".Error in manifest or policy file "2" on line 3.
Invalid Xml syntax.

Error: (07/01/2014 03:31:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program notepad.exe version 6.1.7600.16385 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: da0

Start Time: 01cf953048ca70b1

Termination Time: 12

Application Path: C:\Windows\system32\notepad.exe

Report Id: f1231fd6-0123-11e4-80f1-742f6804af45

Error: (07/01/2014 03:27:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: The program notepad.exe version 6.1.7600.16385 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.

Process ID: 1540

Start Time: 01cf953019ab112f

Termination Time: 15

Application Path: C:\Windows\system32\notepad.exe

Report Id: 7d6d119a-0123-11e4-80f1-742f6804af45

Error: (07/01/2014 03:02:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име апликације која је проузроковала грешку: GreenerWeb.BrowserAdapter.exe, верзија: 0.0.0.0, временска ознака: 0x53b19f52
име модула који је проузроковао грешку: GreenerWeb.BrowserAdapter.exe, верзија: 0.0.0.0, временска ознака: 0x53b19f52
код изузетка: 0x40000015
помак грешке: 0x00009ea8
ID процеса који је проузроковао грешку: 0xf58
време почетка апликације која је проузроковала грешку: 0xGreenerWeb.BrowserAdapter.exe0
путања апликације која је проузроковала грешку: GreenerWeb.BrowserAdapter.exe1
путања модула који је проузроковао грешку: GreenerWeb.BrowserAdapter.exe2
ID извештаја: GreenerWeb.BrowserAdapter.exe3

Error: (07/01/2014 03:01:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име апликације која је проузроковала грешку: GreenerWeb.BrowserAdapter.exe, верзија: 0.0.0.0, временска ознака: 0x53b19f52
име модула који је проузроковао грешку: GreenerWeb.BrowserAdapter.exe, верзија: 0.0.0.0, временска ознака: 0x53b19f52
код изузетка: 0x40000015
помак грешке: 0x00009ea8
ID процеса који је проузроковао грешку: 0x130c
време почетка апликације која је проузроковала грешку: 0xGreenerWeb.BrowserAdapter.exe0
путања апликације која је проузроковала грешку: GreenerWeb.BrowserAdapter.exe1
путања модула који је проузроковао грешку: GreenerWeb.BrowserAdapter.exe2
ID извештаја: GreenerWeb.BrowserAdapter.exe3

Error: (07/01/2014 03:01:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Име апликације која је проузроковала грешку: GreenerWeb.BrowserAdapter.exe, верзија: 0.0.0.0, временска ознака: 0x53b19f52
име модула који је проузроковао грешку: GreenerWeb.BrowserAdapter.exe, верзија: 0.0.0.0, временска ознака: 0x53b19f52
код изузетка: 0x40000015
помак грешке: 0x00009ea8
ID процеса који је проузроковао грешку: 0x1684
време почетка апликације која је проузроковала грешку: 0xGreenerWeb.BrowserAdapter.exe0
путања апликације која је проузроковала грешку: GreenerWeb.BrowserAdapter.exe1
путања модула који је проузроковао грешку: GreenerWeb.BrowserAdapter.exe2
ID извештаја: GreenerWeb.BrowserAdapter.exe3


System errors:
=============
Error: (07/01/2014 03:50:13 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: The LiveUpdate service terminated unexpectedly. It has done this 1 time(s).

Error: (07/01/2014 03:49:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The Telenor Internet. OUC service failed to start due to the following error:
%%1053

Error: (07/01/2014 03:49:50 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the Telenor Internet. OUC service to connect.

Error: (07/01/2014 03:49:46 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Windows Image Acquisition (WIA) service depends on the Shell Hardware Detection service which failed to start because of the following error:
%%1058

Error: (07/01/2014 03:49:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The mts mobilni internet. OUC service failed to start due to the following error:
%%1053

Error: (07/01/2014 03:49:38 PM) (Source: Service Control Manager) (EventID: 7009) (User: )
Description: A timeout was reached (30000 milliseconds) while waiting for the mts mobilni internet. OUC service to connect.

Error: (07/01/2014 03:48:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: The lirsgt service failed to start due to the following error:
%%1275

Error: (07/01/2014 03:48:50 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \SystemRoot\SysWow64\DRIVERS\lirsgt.sys has been blocked from loading due to incompatibility with this system. Please contact your software vendor for a compatible version of the driver.

Error: (07/01/2014 03:39:44 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068

Error: (07/01/2014 03:39:44 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: The Computer Browser service depends on the Server service which failed to start because of the following error:
%%1068


Microsoft Office Sessions:
=========================
Error: (07/01/2014 04:29:51 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Vanda\Desktop\FRST64.exeC:\Users\Vanda\Desktop\FRST64.exe0

Error: (07/01/2014 04:18:04 PM) (Source: SideBySide) (EventID: 33) (User: )
Description: Microsoft.VC80.CRT,processorArchitecture="amd64",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50727.6195"C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPrinterInstallerx64.exe

Error: (07/01/2014 03:50:02 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Vanda\Desktop\FRST64.exeC:\Users\Vanda\Desktop\FRST64.exe0

Error: (07/01/2014 03:48:59 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Vanda\Desktop\FRST64.exeC:\Users\Vanda\Desktop\FRST64.exe0

Error: (07/01/2014 03:37:59 PM) (Source: SideBySide) (EventID: 59) (User: )
Description: C:\Users\Vanda\Desktop\FRST64.exeC:\Users\Vanda\Desktop\FRST64.exe0

Error: (07/01/2014 03:31:03 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: notepad.exe6.1.7600.16385da001cf953048ca70b112C:\Windows\system32\notepad.exef1231fd6-0123-11e4-80f1-742f6804af45

Error: (07/01/2014 03:27:50 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: notepad.exe6.1.7600.16385154001cf953019ab112f15C:\Windows\system32\notepad.exe7d6d119a-0123-11e4-80f1-742f6804af45

Error: (07/01/2014 03:02:18 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GreenerWeb.BrowserAdapter.exe0.0.0.053b19f52GreenerWeb.BrowserAdapter.exe0.0.0.053b19f524000001500009ea8f5801cf952cb0140644C:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exeC:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exeedd9a76b-011f-11e4-80f1-742f6804af45

Error: (07/01/2014 03:01:47 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GreenerWeb.BrowserAdapter.exe0.0.0.053b19f52GreenerWeb.BrowserAdapter.exe0.0.0.053b19f524000001500009ea8130c01cf952c9def49e1C:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exeC:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exedbb008f6-011f-11e4-80f1-742f6804af45

Error: (07/01/2014 03:01:17 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: GreenerWeb.BrowserAdapter.exe0.0.0.053b19f52GreenerWeb.BrowserAdapter.exe0.0.0.053b19f524000001500009ea8168401cf952c8bd7d421C:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exeC:\Program Files (x86)\Greener Web\bin\GreenerWeb.BrowserAdapter.exec9989335-011f-11e4-80f1-742f6804af45


CodeIntegrity Errors:
===================================
Date: 2013-09-04 21:16:11.334
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Vanda\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-09-04 21:16:11.116
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Vanda\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-09-04 21:16:10.539
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\kamera\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-09-04 21:16:10.320
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\kamera\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-08-25 19:02:28.802
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Vanda\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-08-25 19:02:28.604
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Vanda\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-08-25 19:02:27.970
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\kamera\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-08-25 19:02:27.772
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume3\kamera\kerneld.amd64 because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-02-17 16:26:30.005
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Vanda\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.

Date: 2013-02-17 16:26:29.888
Description: Windows is unable to verify the image integrity of the file \Device\HarddiskVolume2\Users\Vanda\AppData\Local\Temp\EverestDriver.sys because file hash could not be found on the system. A recent hardware or software change might have installed a file that is signed incorrectly or damaged, or that might be malicious software from an unknown source.


==================== Memory info ===========================

Percentage of memory in use: 60%
Total physical RAM: 3874.23 MB
Available physical RAM: 1536.51 MB
Total Pagefile: 7746.63 MB
Available Pagefile: 4833.83 MB
Total Virtual: 8192 MB
Available Virtual: 8191.85 MB

==================== Drives ================================

Drive c: () (Fixed) (Total:156.15 GB) (Free:74.2 GB) NTFS
Drive d: () (Fixed) (Total:309.51 GB) (Free:176.43 GB) NTFS
Drive f: (TheGodfather) (CDROM) (Total:3.18 GB) (Free:0 GB) UDF
Drive g: () (Removable) (Total:7.52 GB) (Free:6.54 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 346F6110)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=156 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=310 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows XP) (Size: 8 GB) (Disk ID: C3072E18)
Partition 1: (Not Active) - (Size=8 GB) - (Type=0B)

==================== End Of Log ============================

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Imas i FRST.txt i taj log mi treba.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 28-06-2014 02
Ran by Vanda (administrator) on VANDA-PC on 01-07-2014 17:13:47
Running from C:\Users\Vanda\AppData\Local\Temp\Temp1_109451_922312456_FRST64.zip
Platform: Windows 7 Professional Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac7302\Monitor.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Akamai Technologies, Inc.) C:\Users\Vanda\AppData\Local\Akamai\netsession_win.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Akamai Technologies, Inc.) C:\Users\Vanda\AppData\Local\Akamai\netsession_win.exe
(SanDisk Corporation) C:\Program Files (x86)\SanDisk\SanDisk Media Manager\SanDiskMediaManager-Launcher.EXE
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Filefacts.net) C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
() C:\ProgramData\mts mobilni internet\OnlineUpdate\ouc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
() C:\ProgramData\Telenor Internet\OnlineUpdate\ouc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10372368 2011-03-30] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-10-04] (Synaptics Incorporated)
HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-10-04] (Synaptics Incorporated)
HKLM\...\Run: [AthBtTray] => c:\program files (x86)\bluetooth suite\athbttray.exe [658080 2011-01-28] (Atheros Commnucations)
HKLM\...\Run: [AtherosBtStack] => c:\program files (x86)\bluetooth suite\btvstack.exe [789152 2011-01-28] (Atheros Commnucations)
HKLM\...\Run: [PAC7302_Monitor] => C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12489360 2013-12-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1177232 2013-12-25] (Realtek Semiconductor)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-18] (AVAST Software)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-12-16] (RealNetworks, Inc.)
HKLM-x32\...\Run: [Smart File Advisor] => C:\Program Files (x86)\Smart File Advisor\sfa.exe [283712 2013-10-30] (Filefacts.net)
HKLM-x32\...\Run: [SFAUpdater] => C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe [655936 2013-10-28] (Filefacts.net)
HKLM-x32\...\Run: [QuickTime Task] => D:\wendy-D\Downloads\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\Run: [Advanced SystemCare 7] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6564120 2014-06-14] (SUPERAntiSpyware)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => c:\program files (x86)\common files\ahead\lib\nmbgmonitor.exe [152872 2007-06-28] (Nero AG)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe [3192056 2013-11-14] (Disc Soft Ltd)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Vanda\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [Facebook Update] => C:\Users\Vanda\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-04-20] (Facebook Inc.)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: H - H:\RunGame.exe
AppInit_DLLs: C:\PROGRA~3\Wincert\win64cert.dll => C:\ProgramData\Wincert\win64cert.dll [8704 2013-02-07] ()
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SanDisk Media Manager.lnk
ShortcutTarget: SanDisk Media Manager.lnk -> (No File)
Startup: C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-rs
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF9E950CF7F23CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = google.rs/
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = google.com/ie
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = google.com/ie
URLSearchHook: HKCU - (No Name) - {013a635f-e3aa-4371-b682-ece95ca974b0} - No File
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKCU - DefaultScope {4111DB57-6D12-4A95-9DEE-40C96D357F24} URL = search.softonic.com/INF00176/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064&r=717
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=8ae0feac000000000000582c80139263
SearchScopes: HKCU - {4111DB57-6D12-4A95-9DEE-40C96D357F24} URL = search.softonic.com/INF00176/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064&r=717
SearchScopes: HKCU - {47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF} URL = basicserve.com/?prt=bscsrvlink&sp=&keywords={searchTerms}
SearchScopes: HKCU - {47D96116-BA41-48C6-8F5D-E09B74AB42D5} URL = search.phpnuke.org/?lang=en&cid=457c4dfc&q={searchTerms}
SearchScopes: HKCU - {5DE68092-5DC3-43E2-A0E0-A318B608716A} URL = blekko.com/ws/?source=5f97ddbe&tbp=rbox&u=8.....804af45&q={searchTerms}&r=963
SearchScopes: HKCU - {754FCE98-FD27-4BE9-BB97-F249724BCB72} URL = search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3225826&CUI=UN25720265423744111
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKCU - {E383CA20-6512-49D4-AFA6-D70FE79131EB} URL = search.yahoo.com/search?fr=chr-greentree_ie.....=114576&p={searchTerms}
BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Vanda\AppData\Roaming\Complitly\64\Complitly64.dll (SimplyGen)
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Vanda\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)
BHO-x32: Greener Web - {1973d53b-7311-45d7-8270-f44571c041a0} - C:\Program Files (x86)\Greener Web\GreenerWebbho.dll (Greener Web)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll No File
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
DPF: HKLM-x32 {7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D} browsercheck.qualys.com/qbc_ax.cab
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} active.macromedia.com/flash5/cabs/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{231AC112-6323-45FF-B9F7-3F4E2E6953C7}: [NameServer]172.21.21.157 172.21.21.158

FireFox:
========
FF ProfilePath: C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default
FF NewTab: chrome://fvd.speeddial/content/fvd_about_blank.html
FF Homepage: google.rs/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - D:\wendy-D\Downloads\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @IObit.com/np_Asc_Plugin - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll (IObit)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Vanda\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF user.js: detected! => C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\user.js
FF Extension: No Name - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\Extensions\ascsurfingprotection@iobit.com [2014-01-19]
FF Extension: No Name - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\Extensions\pavel.sherbakov@gmail.com [2014-05-30]
FF Extension: NetCrawl - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\Extensions\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}.xpi [2014-06-24]
FF Extension: DealPly - C:\Program Files (x86)\Mozilla Firefox\extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF} [2014-05-30]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-05-30]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-12-16]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-12-16]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-12-07]
FF Extension: No Name - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\extensions\sr-RS@dictionaries.addons.mozilla.org.xpi []
FF Extension: No Name - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\extensions\{a3f28269-ad17-41a8-b032-3e0313ef8979}.xpi []

Chrome:
=======
CHR HomePage: google.rs/
CHR DefaultNewTabURL:
CHR Extension: (Google Đ´ĐľĐşŃƒĐĽĐµĐ˝Ń‚Đ¸) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-30]
CHR Extension: (Google диск) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-09]
CHR Extension: (YouTube) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-26]
CHR Extension: (Google претрага) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-30]
CHR Extension: (Ebay Shopping Assistant by Spigot) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj [2014-06-30]
CHR Extension: (Domain Error Assistant) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj [2014-06-30]
CHR Extension: (RealDownloader) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-06-30]
CHR Extension: (Torch Share) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiplfnciaokpcennlkldkdaeaaomamof [2014-06-30]
CHR Extension: (Skype Click to Call) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2014-06-30]
CHR Extension: (Slick Savings) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk [2014-06-30]
CHR Extension: (Google новчаник) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Amazon Shopping Assistant by Spigot) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp [2014-06-30]
CHR Extension: (Gmail) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-26]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Vanda\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-07]
CHR HKCU\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [2013-05-07]
CHR HKLM-x32\...\Chrome\Extension: [dlfienamagdnkekbbbocojppncdambda] - C:\Program Files (x86)\Complitly\chrome\ComplitlyChrome.crx [2013-04-04]
CHR HKLM-x32\...\Chrome\Extension: [gaiilaahiahdejapggenmdmafpmbipje] - C:\Program Files (x86)\DealPly\DealPly.crx [2013-04-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-07]
CHR HKLM-x32\...\Chrome\Extension: [hbcennhacfaagdopikcegfcobcadeocj] - C:\Program Files (x86)\Common Files\Spigot\GC\saebay_1.1.crx [2013-10-14]
CHR HKLM-x32\...\Chrome\Extension: [icdlfehblmklkikfigmjhbmmpmkmpooj] - C:\Program Files (x86)\Common Files\Spigot\GC\ErrorAssistant_1.3.crx [2013-12-27]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [kiplfnciaokpcennlkldkdaeaaomamof] - C:\Users\Vanda\AppData\Local\Torch\Plugins\TorchPlugin.crx [2013-03-05]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]
CHR HKLM-x32\...\Chrome\Extension: [mhkaekfpcppmmioggniknbnbdbcigpkk] - C:\Program Files (x86)\Common Files\Spigot\GC\coupons_2.4.crx [2013-04-26]
CHR HKLM-x32\...\Chrome\Extension: [nbmafkdmkkckhggblphicnnhlgljnoje] - C:\Program Files (x86)\TornTV.com\torn2_10.crx [2013-04-26]
CHR HKLM-x32\...\Chrome\Extension: [pfndaklgolladniicklehhancnlgocpp] - C:\Program Files (x86)\Common Files\Spigot\GC\saamazon_1.0.crx [2012-11-22]
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Services (Whitelisted) =================

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-09-07] (SUPERAntiSpyware.com) [File not signed]
R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [73376 2011-01-28] (Atheros Commnucations) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2013-12-18] (AVAST Software)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R3 Disc Soft Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [723192 2013-11-14] (Disc Soft Ltd)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-01-24] (IObit)
S3 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [1072664 2013-05-29] (iolo technologies, LLC)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation)
S2 mts mobilni internet. RunOuc; C:\Program Files (x86)\mts mobilni internet\UpdateDog\ouc.exe [239968 2014-04-24] ()
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [343032 2012-02-08] (Nitro PDF Software)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-28] (Nero AG)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S2 Telenor Internet. RunOuc; C:\Program Files (x86)\Telenor Internet\UpdateDog\ouc.exe [655712 2011-12-23] ()

==================== Drivers (Whitelisted) ====================

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [78648 2013-12-18] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [92544 2013-12-07] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-07] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1034464 2013-12-18] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [422216 2013-12-18] (AVAST Software)
R3 aswStm; C:\Windows\system32\drivers\aswStm.sys [79672 2013-12-20] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-18] ()
R3 dtscsibus; C:\Windows\System32\DRIVERS\dtscsibus.sys [29696 2013-12-30] (Disc Soft Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-02-23] (Disc Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-10-18] (EldoS Corporation)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2014-04-24] (Huawei Technologies Co., Ltd.)
S2 lirsgt; C:\Windows\SysWOW64\DRIVERS\lirsgt.sys [18048 2011-12-22] () [File not signed]
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527360 2007-10-29] (PixArt Imaging Inc.)
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R2 SecDrv; C:\Windows\SysWOW64\drivers\SECDRV.SYS [11376 2003-02-04] () [File not signed]
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32496 2013-12-25] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-02-23] (Duplex Secure Ltd.)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
U3 aflsvr73; C:\Windows\System32\Drivers\aflsvr73.sys [0 ] (Advanced Micro Devices)
S3 Andbus; system32\DRIVERS\lgandbus64.sys [X]
S3 AndDiag; system32\DRIVERS\lganddiag64.sys [X]
S3 AndGps; system32\DRIVERS\lgandgps64.sys [X]
S3 ANDModem; system32\DRIVERS\lgandmodem64.sys [X]
S3 androidusb; System32\Drivers\lgandadb.sys [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 LgBttPort; system32\DRIVERS\lgbtpt64.sys [X]
S3 lgbusenum; system32\DRIVERS\lgbtbs64.sys [X]
S3 LGVMODEM; system32\DRIVERS\lgvmdm64.sys [X]
S3 SNP2UVC; system32\DRIVERS\snp2uvc.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-01 16:30 - 2014-07-01 16:30 - 01590342 _____ () C:\Users\Vanda\Downloads\109451_922312456_FRST64.zip
2014-07-01 15:50 - 2014-07-01 15:50 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-01 15:50 - 2014-07-01 15:50 - 00003206 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-01 15:48 - 2014-07-01 15:48 - 00000000 ___RD () C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-07-01 15:40 - 2014-07-01 15:40 - 00002154 _____ () C:\Fixlist.txt
2014-06-30 01:30 - 2014-07-01 17:13 - 00000000 ____D () C:\FRST
2014-06-29 14:15 - 2014-06-29 14:15 - 01584742 _____ () C:\Users\Vanda\Desktop\109451_922312456_FRST64.zip
2014-06-26 20:35 - 2014-05-30 11:11 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-06-25 21:44 - 2014-06-25 21:44 - 00000000 __SHD () C:\Users\Vanda\AppData\Local\EmieUserList
2014-06-25 21:44 - 2014-06-25 21:44 - 00000000 __SHD () C:\Users\Vanda\AppData\Local\EmieSiteList
2014-06-25 21:03 - 2014-06-25 21:03 - 00000000 _____ () C:\asc_rdflag
2014-06-25 20:05 - 2014-06-25 20:05 - 02768384 ____N (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 02266112 ____N (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 02179072 ____N (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 01790976 ____N (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 01398272 ____N (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 01143296 ____N (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-25 19:58 - 2014-06-28 10:30 - 00000000 ____D () C:\Program Files (x86)\NetCrawl
2014-06-25 19:34 - 2014-06-28 10:30 - 00000000 ____D () C:\Program Files (x86)\GUM51E.tmp
2014-06-25 19:34 - 2014-06-25 19:34 - 06010880 _____ () C:\Program Files (x86)\GUT51F.tmp
2014-06-20 08:56 - 2014-06-21 07:01 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-06-20 08:56 - 2014-06-21 07:01 - 00003228 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-06-20 08:53 - 2014-06-20 08:53 - 00003164 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-06-20 08:53 - 2014-06-20 08:53 - 00002856 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Vanda)
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Driver Booster(2093).lnk
2014-06-20 08:41 - 2014-06-20 08:41 - 00001117 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-20 08:40 - 2014-07-02 01:43 - 00000000 ____D () C:\Program Files (x86)\Greener Web
2014-06-20 08:40 - 2014-06-20 08:40 - 29836648 _____ (Mozilla) C:\Users\Vanda\Downloads\Firefox Setup 30.0_310578f044482a93caa0703841c3339e.exe
2014-06-20 08:32 - 2014-07-01 15:50 - 00000376 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Vanda.job
2014-06-20 08:32 - 2014-06-29 08:34 - 00002960 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateXML_Vanda
2014-06-20 08:32 - 2014-06-29 08:34 - 00000366 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Vanda.job
2014-06-20 08:32 - 2014-06-20 08:55 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda.job
2014-06-20 08:32 - 2014-06-20 08:55 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda(2113).job
2014-06-20 08:32 - 2014-06-20 08:32 - 00003612 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Vanda
2014-06-20 08:32 - 2014-06-20 08:32 - 00002964 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Vanda
2014-06-20 08:32 - 2014-06-20 08:32 - 00002668 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Vanda
2014-06-11 12:21 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-11 12:21 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-11 12:21 - 2014-05-24 04:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 12:21 - 2014-05-24 04:47 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\urlmon(2105).dll
2014-06-11 12:21 - 2014-05-24 04:46 - 02650112 _____ (Microsoft Corporation) C:\Windows\system32\iertutil(2102).dll
2014-06-11 12:21 - 2014-05-24 04:46 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 12:21 - 2014-05-24 04:46 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 12:21 - 2014-05-24 04:46 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 12:21 - 2014-05-24 04:45 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 12:21 - 2014-05-24 04:45 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 12:21 - 2014-05-24 04:45 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 12:21 - 2014-05-24 03:26 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet(2112).dll
2014-06-11 12:21 - 2014-05-24 03:26 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon(2111).dll
2014-06-11 12:21 - 2014-05-24 03:26 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 12:21 - 2014-05-24 03:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 13731328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil(2110).dll
2014-06-11 12:21 - 2014-05-24 03:25 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 12:21 - 2014-05-24 03:25 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 12:21 - 2014-05-24 03:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 12:21 - 2014-05-24 03:03 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-11 12:21 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 12:21 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-11 12:21 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 12:21 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-11 12:21 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 12:21 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 12:21 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 12:21 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 12:21 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-11 12:21 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-11 12:21 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-11 12:21 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 12:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-11 12:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-11 12:20 - 2014-05-24 04:47 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet(2108).dll
2014-06-11 12:20 - 2014-05-24 04:46 - 19290112 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 15368704 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 12:20 - 2014-05-24 03:26 - 14365696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 12:20 - 2014-05-24 03:26 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 12:20 - 2014-05-24 03:25 - 02862080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 12:20 - 2014-05-24 03:25 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-06-11 12:20 - 2014-05-24 03:25 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-06-11 12:20 - 2014-05-24 03:25 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 12:20 - 2014-05-24 02:13 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-11 12:20 - 2014-05-24 02:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-06-07 13:51 - 2014-06-07 14:33 - 00000000 ____D () C:\Users\Vanda\Documents\FIFA 14
2014-06-07 13:50 - 2014-06-07 13:50 - 00000924 _____ () C:\Users\Vanda\Desktop\Play FIFA 14.lnk
2014-06-06 14:36 - 2014-06-18 14:37 - 00003846 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1389458101
2014-06-01 20:07 - 2014-06-01 20:07 - 00000680 _____ () C:\Users\Public\Desktop\The Godfather™ The Game.lnk
2014-06-01 20:06 - 2014-06-01 20:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2014-06-01 19:07 - 2014-06-01 20:19 - 00000000 ____D () C:\Users\Vanda\Documents\GF
2014-06-01 19:07 - 2005-06-24 16:24 - 00438272 ____R (EA.com/On2.com) C:\Windows\SysWOW64\vp6vfw.dll
2014-06-01 19:07 - 2004-12-10 09:06 - 00327680 _____ (On2.com Inc.) C:\Windows\SysWOW64\vp6dec.ax

==================== One Month Modified Files and Folders =======

2014-07-02 01:43 - 2014-06-20 08:40 - 00000000 ____D () C:\Program Files (x86)\Greener Web
2014-07-01 17:13 - 2014-06-30 01:30 - 00000000 ____D () C:\FRST
2014-07-01 17:13 - 2011-10-09 15:47 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{39C419FF-9009-44A0-8FF3-468E5FD87E8B}
2014-07-01 16:54 - 2011-10-05 20:12 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Skype
2014-07-01 16:52 - 2012-04-03 20:59 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-01 16:46 - 2014-01-13 09:30 - 01567601 _____ () C:\Windows\WindowsUpdate.log
2014-07-01 16:39 - 2014-02-05 19:39 - 00000300 _____ () C:\Windows\Tasks\Funmoods.job
2014-07-01 16:38 - 2011-10-06 05:24 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-01 16:30 - 2014-07-01 16:30 - 01590342 _____ () C:\Users\Vanda\Downloads\109451_922312456_FRST64.zip
2014-07-01 16:30 - 2011-12-25 23:53 - 00000000 ____D () C:\Users\Vanda\AppData\Local\CrashDumps
2014-07-01 15:57 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-01 15:57 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-01 15:51 - 2013-12-07 21:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-01 15:50 - 2014-07-01 15:50 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-01 15:50 - 2014-07-01 15:50 - 00003206 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-01 15:50 - 2014-06-20 08:32 - 00000376 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Vanda.job
2014-07-01 15:50 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-07-01 15:49 - 2011-10-06 05:24 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-01 15:48 - 2014-07-01 15:48 - 00000000 ___RD () C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-07-01 15:48 - 2013-12-20 20:10 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-07-01 15:48 - 2011-12-25 23:52 - 00000035 _____ () C:\ProgramData\AtherosServiceConfig.ini
2014-07-01 15:48 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-01 15:40 - 2014-07-01 15:40 - 00002154 _____ () C:\Fixlist.txt
2014-07-01 14:47 - 2014-04-20 23:42 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000UA.job
2014-07-01 14:42 - 2013-02-17 21:37 - 00000272 _____ () C:\Windows\win.ini
2014-07-01 14:38 - 2013-12-07 20:43 - 00000000 ____D () C:\ProgramData\ProductData
2014-06-29 15:10 - 2009-07-14 07:13 - 00880170 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-29 15:08 - 2011-10-09 01:05 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Nitro PDF
2014-06-29 14:15 - 2014-06-29 14:15 - 01584742 _____ () C:\Users\Vanda\Desktop\109451_922312456_FRST64.zip
2014-06-29 08:34 - 2014-06-20 08:32 - 00002960 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateXML_Vanda
2014-06-29 08:34 - 2014-06-20 08:32 - 00000366 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Vanda.job
2014-06-28 10:41 - 2013-12-07 20:37 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-06-28 10:32 - 2011-10-04 00:13 - 00000000 ____D () C:\Users\Vanda
2014-06-28 10:31 - 2014-05-30 21:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-28 10:31 - 2014-04-07 23:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-28 10:31 - 2014-02-05 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3
2014-06-28 10:31 - 2014-01-27 19:38 - 00000000 ____D () C:\Users\Vanda\AppData\Local\Akamai
2014-06-28 10:31 - 2013-12-19 20:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-28 10:31 - 2013-12-07 21:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-06-28 10:31 - 2013-12-07 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-06-28 10:31 - 2013-11-15 21:16 - 00000000 ____D () C:\Users\Vanda\Desktop\SRKI
2014-06-28 10:31 - 2013-10-13 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-28 10:31 - 2013-10-08 12:01 - 00000000 ____D () C:\Users\Guest
2014-06-28 10:31 - 2012-08-11 13:09 - 00000000 ____D () C:\ProgramData\IObit
2014-06-28 10:31 - 2012-07-01 22:41 - 00000000 ___RD () C:\Users\Vanda\Google диск
2014-06-28 10:31 - 2012-07-01 22:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-06-28 10:31 - 2011-10-05 20:15 - 00000000 ____D () C:\Windows\SysWOW64\sr-Cyrl-CS
2014-06-28 10:31 - 2011-10-05 20:15 - 00000000 ____D () C:\Windows\system32\sr-Cyrl-CS
2014-06-28 10:31 - 2011-10-05 17:49 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-28 10:31 - 2011-10-04 17:41 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\GHISLER
2014-06-28 10:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-28 10:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-28 10:30 - 2014-06-25 19:58 - 00000000 ____D () C:\Program Files (x86)\NetCrawl
2014-06-28 10:30 - 2014-06-25 19:34 - 00000000 ____D () C:\Program Files (x86)\GUM51E.tmp
2014-06-28 10:30 - 2012-08-11 13:09 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\IObit
2014-06-28 10:30 - 2012-01-09 23:08 - 00000000 ____D () C:\ProgramData\Real
2014-06-28 10:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-06-28 10:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-06-28 10:29 - 2014-01-02 20:35 - 00000000 ____D () C:\Users\Vanda\Desktop\Cipele, ednik, rogovi,sto
2014-06-28 10:29 - 2012-08-21 20:40 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Mozilla
2014-06-28 10:28 - 2013-12-19 20:18 - 00000000 ____D () C:\Users\Vanda\AppData\Local\Mozilla
2014-06-28 10:27 - 2012-11-28 22:24 - 00000000 ____D () C:\Program Files\Java
2014-06-28 10:17 - 2011-10-04 00:57 - 00000000 ____D () C:\Windows\Panther
2014-06-27 20:34 - 2011-10-08 06:01 - 00000000 ____D () C:\Windows\Minidump
2014-06-25 22:28 - 2012-05-25 20:00 - 00000000 ____D () C:\Users\Vanda\Desktop\smajli
2014-06-25 21:53 - 2012-11-11 21:12 - 01427968 ___SH () C:\Users\Vanda\Desktop\Thumbs.db
2014-06-25 21:44 - 2014-06-25 21:44 - 00000000 __SHD () C:\Users\Vanda\AppData\Local\EmieUserList
2014-06-25 21:44 - 2014-06-25 21:44 - 00000000 __SHD () C:\Users\Vanda\AppData\Local\EmieSiteList
2014-06-25 21:03 - 2014-06-25 21:03 - 00000000 _____ () C:\asc_rdflag
2014-06-25 21:03 - 2014-03-15 03:38 - 50958336 _____ () C:\Windows\system32\config\components.iodefrag.bak
2014-06-25 21:03 - 2014-01-09 13:51 - 109113344 _____ () C:\Windows\system32\config\software.iodefrag.bak
2014-06-25 21:03 - 2014-01-09 13:51 - 04354048 _____ () C:\Windows\system32\config\default.iodefrag.bak
2014-06-25 21:03 - 2014-01-09 13:51 - 00069632 _____ () C:\Windows\system32\config\sam.iodefrag.bak
2014-06-25 21:03 - 2014-01-09 13:51 - 00036864 _____ () C:\Windows\system32\config\security.iodefrag.bak
2014-06-25 20:05 - 2014-06-25 20:05 - 02768384 ____N (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 02266112 ____N (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 02179072 ____N (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 01790976 ____N (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 01398272 ____N (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 01143296 ____N (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-25 20:05 - 2014-06-25 20:05 - 00147968 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll
2014-06-25 19:34 - 2014-06-25 19:34 - 06010880 _____ () C:\Program Files (x86)\GUT51F.tmp
2014-06-24 13:55 - 2009-07-14 07:08 - 00032638 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-24 00:00 - 2014-04-20 23:42 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000Core.job
2014-06-23 18:07 - 2012-10-03 21:18 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-06-23 12:32 - 2013-03-05 12:47 - 00000000 ____D () C:\ProgramData\Wincert
2014-06-21 07:01 - 2014-06-20 08:56 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-06-21 07:01 - 2014-06-20 08:56 - 00003228 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-06-20 08:55 - 2014-06-20 08:32 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda.job
2014-06-20 08:55 - 2014-06-20 08:32 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda(2113).job
2014-06-20 08:53 - 2014-06-20 08:53 - 00003164 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-06-20 08:53 - 2014-06-20 08:53 - 00002856 _____ () C:\Windows\System32\Tasks\Driver Booster SkipUAC (Vanda)
2014-06-20 08:53 - 2013-10-13 21:08 - 00003214 _____ () C:\Windows\System32\Tasks\Driver Booster Scan
2014-06-20 08:53 - 2013-10-13 21:08 - 00003158 _____ () C:\Windows\System32\Tasks\Driver Booster Update
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Driver Booster(2093).lnk
2014-06-20 08:48 - 2013-06-17 11:02 - 00000000 ___RD () C:\Users\Vanda\Desktop\ČIŠĆENJE
2014-06-20 08:41 - 2014-06-20 08:41 - 00001117 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-20 08:41 - 2013-12-19 20:18 - 00001129 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-20 08:40 - 2014-06-20 08:40 - 29836648 _____ (Mozilla) C:\Users\Vanda\Downloads\Firefox Setup 30.0_310578f044482a93caa0703841c3339e.exe
2014-06-20 08:32 - 2014-06-20 08:32 - 00003612 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Vanda
2014-06-20 08:32 - 2014-06-20 08:32 - 00002964 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Vanda
2014-06-20 08:32 - 2014-06-20 08:32 - 00002668 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Vanda
2014-06-18 14:37 - 2014-06-06 14:36 - 00003846 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1389458101
2014-06-17 07:33 - 2011-10-06 05:24 - 00003892 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-17 07:33 - 2011-10-06 05:24 - 00003640 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-14 20:16 - 2012-01-16 21:27 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-06-12 18:50 - 2014-05-06 21:09 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-11 21:06 - 2013-07-13 20:59 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 21:01 - 2011-10-04 07:47 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-08 18:37 - 2013-02-16 19:32 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\BitTorrent
2014-06-08 11:13 - 2014-06-11 12:21 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-11 12:21 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 14:33 - 2014-06-07 13:51 - 00000000 ____D () C:\Users\Vanda\Documents\FIFA 14
2014-06-07 13:50 - 2014-06-07 13:50 - 00000924 _____ () C:\Users\Vanda\Desktop\Play FIFA 14.lnk
2014-06-05 08:21 - 2011-12-21 13:49 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\DAEMON Tools Lite
2014-06-01 20:19 - 2014-06-01 19:07 - 00000000 ____D () C:\Users\Vanda\Documents\GF
2014-06-01 20:07 - 2014-06-01 20:07 - 00000680 _____ () C:\Users\Public\Desktop\The Godfather™ The Game.lnk
2014-06-01 20:07 - 2011-10-24 11:23 - 00000000 ___HD () C:\Program Files (x86)\InstallShield Installation Information
2014-06-01 20:06 - 2014-06-01 20:06 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2014-06-01 19:06 - 2011-10-20 19:57 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-28 13:08

==================== End Of Log ============================

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

Start
Complitly (HKLM-x32\...\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1) (Version: - Complitly) <==== ATTENTION
SpeedUpMyComputer (HKLM-x32\...\SpeedUpMyComputer) (Version: 38.1 - SmartTweak Software) <==== ATTENTION
Task: {5F9D26CC-519F-4F7D-9A59-B849530A1CA1} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2014-03-13] (IObit) <==== ATTENTION
Task: {A3D257A1-85AD-42D3-9E0D-5E7A8CAACBB1} - System32\Tasks\Math Problem Solver CPU => C:\Users\Vanda\AppData\Local\Math Problem Solver\cpu\Solve.exe [2013-07-10] () <==== ATTENTION
Task: {A470E680-99E6-4060-ABC7-0FB66FEBFAE6} - System32\Tasks\Math Problem Solver Optimize => C:\Users\Vanda\AppData\Local\Math Problem Solver\Optimize.exe <==== ATTENTION
Task: {BE0C8BCF-934F-450E-BB56-4FCCFD00ECDB} - System32\Tasks\Driver Booster SkipUAC (Vanda) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-03-14] (IObit) <==== ATTENTION
Task: {F2AC2DFA-ABCC-4DF5-89C8-63AE0EF95264} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-03-12] (IObit) <==== ATTENTION
Task: {F510C4DB-7438-4FBC-B183-54FE23378366} - System32\Tasks\Funmoods => C:\Users\Vanda\AppData\Roaming\Funmoods\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: C:\Windows\Tasks\Funmoods.job => C:\Users\Vanda\AppData\Roaming\Funmoods\UpdateProc\UpdateTask.exe <==== ATTENTION
HKLM-x32\...\Run: [Smart File Advisor] => C:\Program Files (x86)\Smart File Advisor\sfa.exe [283712 2013-10-30] (Filefacts.net)
HKLM-x32\...\Run: [SFAUpdater] => C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe [655936 2013-10-28] (Filefacts.net)
C:\Program Files (x86)\Smart File Advisor\sfa.exe
C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: H - H:\RunGame.exe
ShortcutTarget: SanDisk Media Manager.lnk -> (No File)
URLSearchHook: HKCU - (No Name) - {013a635f-e3aa-4371-b682-ece95ca974b0} - No File
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKCU - DefaultScope {4111DB57-6D12-4A95-9DEE-40C96D357F24} URL = http://search.softonic.com/INF00176/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064&r=717
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=8ae0feac000000000000582c80139263
SearchScopes: HKCU - {4111DB57-6D12-4A95-9DEE-40C96D357F24} URL = http://search.softonic.com/INF00176/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064&r=717
SearchScopes: HKCU - {47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF} URL = http://www.basicserve.com/?prt=bscsrvlink&sp=&keywords={searchTerms}
SearchScopes: HKCU - {47D96116-BA41-48C6-8F5D-E09B74AB42D5} URL = http://search.phpnuke.org/?lang=en&cid=457c4dfc&q={searchTerms}
SearchScopes: HKCU - {5DE68092-5DC3-43E2-A0E0-A318B608716A} URL = http://blekko.com/ws/?source=5f97ddbe&tbp=rbox&u=8.....804af45&q={searchTerms}&r=963
SearchScopes: HKCU - {754FCE98-FD27-4BE9-BB97-F249724BCB72} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3225826&CUI=UN25720265423744111
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKCU - {E383CA20-6512-49D4-AFA6-D70FE79131EB} URL = http://search.yahoo.com/search?fr=chr-greentree_ie.....=114576&p={searchTerms}
BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Vanda\AppData\Roaming\Complitly\64\Complitly64.dll (SimplyGen)
BHO-x32: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Vanda\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)
BHO-x32: Greener Web - {1973d53b-7311-45d7-8270-f44571c041a0} - C:\Program Files (x86)\Greener Web\GreenerWebbho.dll (Greener Web)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
2014-07-02 01:43 - 2014-06-20 08:40 - 00000000 ____D () C:\Program Files (x86)\Greener Web
2014-07-01 16:39 - 2014-02-05 19:39 - 00000300 _____ () C:\Windows\Tasks\Funmoods.job
CMD: DEL %TEMP%\*.* /F /S /Q
CMD: RD /S /Q %TEMP%
Reboot:
End

2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.






Korak 2



Preuzmi "Xplode"-ov AdwCleaner () i sacuvaj ga na Desktop

Dvoklikom pokreni program.
Klikni na dugme [Scan] i pricekaj da program zavrsi.
Klikni na dugme [Clean]
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok

Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"
Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S0].txt




Korak 3.


Preuzmi AVG Remover(64bit) 2014 i pokreni ga da ocisti ostatke.

http://www.avg.com/ww-en/utilities







Ponovo pokreni FRST i klikni scan

Dostavi mi taj FRST.txt log

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 04 Jul 2014 8:18

AdwCleaner nece da pokrene,tj hoce ali stane sa skeniranjem na pola i izbaci ovo- The ordinal 572 could not be located in the dynamic link library iertutil.dll.

Dopuna: 04 Jul 2014 8:18

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 01-07-2014
Ran by Vanda at 2014-07-03 10:55:56 Run:2
Running from C:\Users\Vanda\Desktop
Boot Mode: Safe Mode (with Networking)
==============================================

Content of fixlist:
*****************
Start
Complitly (HKLM-x32\...\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1) (Version: - Complitly) <==== ATTENTION
SpeedUpMyComputer (HKLM-x32\...\SpeedUpMyComputer) (Version: 38.1 - SmartTweak Software) <==== ATTENTION
Task: {5F9D26CC-519F-4F7D-9A59-B849530A1CA1} - System32\Tasks\Driver Booster Update => C:\Program Files (x86)\IObit\Driver Booster\AutoUpdate.exe [2014-03-13] (IObit) <==== ATTENTION
Task: {A3D257A1-85AD-42D3-9E0D-5E7A8CAACBB1} - System32\Tasks\Math Problem Solver CPU => C:\Users\Vanda\AppData\Local\Math Problem Solver\cpu\Solve.exe [2013-07-10] () <==== ATTENTION
Task: {A470E680-99E6-4060-ABC7-0FB66FEBFAE6} - System32\Tasks\Math Problem Solver Optimize => C:\Users\Vanda\AppData\Local\Math Problem Solver\Optimize.exe <==== ATTENTION
Task: {BE0C8BCF-934F-450E-BB56-4FCCFD00ECDB} - System32\Tasks\Driver Booster SkipUAC (Vanda) => C:\Program Files (x86)\IObit\Driver Booster\DriverBooster.exe [2014-03-14] (IObit) <==== ATTENTION
Task: {F2AC2DFA-ABCC-4DF5-89C8-63AE0EF95264} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2014-03-12] (IObit) <==== ATTENTION
Task: {F510C4DB-7438-4FBC-B183-54FE23378366} - System32\Tasks\Funmoods => C:\Users\Vanda\AppData\Roaming\Funmoods\UpdateProc\UpdateTask.exe [2013-04-12] () <==== ATTENTION
Task: C:\Windows\Tasks\Funmoods.job => C:\Users\Vanda\AppData\Roaming\Funmoods\UpdateProc\UpdateTask.exe <==== ATTENTION
HKLM-x32\...\Run: [Smart File Advisor] => C:\Program Files (x86)\Smart File Advisor\sfa.exe [283712 2013-10-30] (Filefacts.net)
HKLM-x32\...\Run: [SFAUpdater] => C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe [655936 2013-10-28] (Filefacts.net)
C:\Program Files (x86)\Smart File Advisor\sfa.exe
C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: H - H:\RunGame.exe
ShortcutTarget: SanDisk Media Manager.lnk -> (No File)
URLSearchHook: HKCU - (No Name) - {013a635f-e3aa-4371-b682-ece95ca974b0} - No File
SearchScopes: HKLM - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM-x32 - DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKLM-x32 - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKCU - DefaultScope {4111DB57-6D12-4A95-9DEE-40C96D357F24} URL = search.softonic.com/INF00176/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064&r=717
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = delta-search.com/?q={searchTerms}&affID=119816&babsrc=SP_ss&mntrId=8ae0feac000000000000582c80139263
SearchScopes: HKCU - {4111DB57-6D12-4A95-9DEE-40C96D357F24} URL = search.softonic.com/INF00176/tb_v1?q={searchTerms}&SearchSource=4&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064&r=717
SearchScopes: HKCU - {47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF} URL = basicserve.com/?prt=bscsrvlink&sp=&keywords={searchTerms}
SearchScopes: HKCU - {47D96116-BA41-48C6-8F5D-E09B74AB42D5} URL = search.phpnuke.org/?lang=en&cid=457c4dfc&q={searchTerms}
SearchScopes: HKCU - {5DE68092-5DC3-43E2-A0E0-A318B608716A} URL = blekko.com/ws/?source=5f97ddbe&tbp=rbox&u=8.....804af45&q={searchTerms}&r=963
SearchScopes: HKCU - {754FCE98-FD27-4BE9-BB97-F249724BCB72} URL = search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3225826&CUI=UN25720265423744111
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = dts.search-results.com/sr?src=ieb&gct=ds&ap.....5994674&q={searchTerms}
SearchScopes: HKCU - {E383CA20-6512-49D4-AFA6-D70FE79131EB} URL = search.yahoo.com/search?fr=chr-greentree_ie.....=114576&p={searchTerms}
BHO: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Vanda\AppData\Roaming\Complitly\64\Complitly64.dll (SimplyGen)
BHO-x32: Complitly - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Users\Vanda\AppData\Roaming\Complitly\Complitly.dll (SimplyGen)
BHO-x32: Greener Web - {1973d53b-7311-45d7-8270-f44571c041a0} - C:\Program Files (x86)\Greener Web\GreenerWebbho.dll (Greener Web)
Toolbar: HKCU - No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
CHR HKCU\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
2014-07-02 01:43 - 2014-06-20 08:40 - 00000000 ____D () C:\Program Files (x86)\Greener Web
2014-07-01 16:39 - 2014-02-05 19:39 - 00000300 _____ () C:\Windows\Tasks\Funmoods.job
CMD: DEL %TEMP%\*.* /F /S /Q
CMD: RD /S /Q %TEMP%
Reboot:
End
*****************

'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5F9D26CC-519F-4F7D-9A59-B849530A1CA1}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5F9D26CC-519F-4F7D-9A59-B849530A1CA1}' => Key deleted successfully.
C:\Windows\System32\Tasks\Driver Booster Update => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Update' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A3D257A1-85AD-42D3-9E0D-5E7A8CAACBB1}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A3D257A1-85AD-42D3-9E0D-5E7A8CAACBB1}' => Key deleted successfully.
C:\Windows\System32\Tasks\Math Problem Solver CPU => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Math Problem Solver CPU' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{A470E680-99E6-4060-ABC7-0FB66FEBFAE6}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A470E680-99E6-4060-ABC7-0FB66FEBFAE6}' => Key deleted successfully.
C:\Windows\System32\Tasks\Math Problem Solver Optimize => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Math Problem Solver Optimize' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BE0C8BCF-934F-450E-BB56-4FCCFD00ECDB}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BE0C8BCF-934F-450E-BB56-4FCCFD00ECDB}' => Key deleted successfully.
C:\Windows\System32\Tasks\Driver Booster SkipUAC (Vanda) => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster SkipUAC (Vanda)' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{F2AC2DFA-ABCC-4DF5-89C8-63AE0EF95264}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F2AC2DFA-ABCC-4DF5-89C8-63AE0EF95264}' => Key deleted successfully.
C:\Windows\System32\Tasks\Driver Booster Scan => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Driver Booster Scan' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{F510C4DB-7438-4FBC-B183-54FE23378366}' => Key deleted successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{F510C4DB-7438-4FBC-B183-54FE23378366}' => Key deleted successfully.
C:\Windows\System32\Tasks\Funmoods => Moved successfully.
'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Funmoods' => Key deleted successfully.
C:\Windows\Tasks\Funmoods.job => Moved successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\Smart File Advisor => value deleted successfully.
HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\SFAUpdater => value deleted successfully.
C:\Program Files (x86)\Smart File Advisor\sfa.exe => Moved successfully.
C:\Program Files (x86)\Smart File Advisor\SFAUpdater.exe => Moved successfully.
'HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-4085335947-2511170766-3262566581-1000'=> Key not found.
'HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-4085335947-2511170766-3262566581-1000'=> Key not found.
'HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\S-1-5-21-4085335947-2511170766-3262566581-1000'=> Key not found.
ShortcutTarget: SanDisk Media Manager.lnk -> (No File) not found.
HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{013a635f-e3aa-4371-b682-ece95ca974b0} => value deleted successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}' => Key deleted successfully.
'HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}'=> Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}'=> Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}' => Key deleted successfully.
'HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{4111DB57-6D12-4A95-9DEE-40C96D357F24}' => Key deleted successfully.
'HKCR\CLSID\{4111DB57-6D12-4A95-9DEE-40C96D357F24}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF}' => Key deleted successfully.
'HKCR\CLSID\{47AE1BA9-0BD1-44F4-88AE-45F8F7B605EF}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{47D96116-BA41-48C6-8F5D-E09B74AB42D5}' => Key deleted successfully.
'HKCR\CLSID\{47D96116-BA41-48C6-8F5D-E09B74AB42D5}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{5DE68092-5DC3-43E2-A0E0-A318B608716A}' => Key deleted successfully.
'HKCR\CLSID\{5DE68092-5DC3-43E2-A0E0-A318B608716A}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{754FCE98-FD27-4BE9-BB97-F249724BCB72}' => Key deleted successfully.
'HKCR\CLSID\{754FCE98-FD27-4BE9-BB97-F249724BCB72}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}' => Key deleted successfully.
'HKCR\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{E383CA20-6512-49D4-AFA6-D70FE79131EB}' => Key deleted successfully.
'HKCR\CLSID\{E383CA20-6512-49D4-AFA6-D70FE79131EB}'=> Key not found.
'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}' => Key deleted successfully.
'HKCR\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}' => Key deleted successfully.
'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{0FB6A909-6086-458F-BD92-1F8EE10042A0}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{0FB6A909-6086-458F-BD92-1F8EE10042A0}' => Key deleted successfully.
'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{1973d53b-7311-45d7-8270-f44571c041a0}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{1973d53b-7311-45d7-8270-f44571c041a0}' => Key deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} => value deleted successfully.
'HKCR\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}'=> Key not found.
'HKCU\SOFTWARE\Policies\Google' => Key deleted successfully.
C:\Program Files (x86)\Greener Web => Moved successfully.
"C:\Windows\Tasks\Funmoods.job" => File/Directory not found.

========= DEL %TEMP%\*.* /F /S /Q =========

Deleted file - C:\Users\Vanda\AppData\Local\Temp\AdobeARM.log
Deleted file - C:\Users\Vanda\AppData\Local\Temp\detect.log
C:\Users\Vanda\AppData\Local\Temp\FXSAPIDebugLogFile.txt
The process cannot access the file because it is being used by another process.
Deleted file - C:\Users\Vanda\AppData\Local\Temp\jusched.log
Deleted file - C:\Users\Vanda\AppData\Local\Temp\opera_crashreporter.log
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-606MS.tmp\UninstallPromote.exe
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-606MS.tmp\_isetup\_setup64.tmp
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-606MS.tmp\_isetup\_shfoldr.dll
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-CN8LB.tmp\UninstallPromote.exe
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-CN8LB.tmp\_isetup\_setup64.tmp
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-CN8LB.tmp\_isetup\_shfoldr.dll
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-QLOQI.tmp\UninstallPromote.exe
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-QLOQI.tmp\_isetup\_setup64.tmp
Deleted file - C:\Users\Vanda\AppData\Local\Temp\is-QLOQI.tmp\_isetup\_shfoldr.dll
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\csshover3.htc
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\form.bmp.Mask
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\wnzpw.dll
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\ie6_main.css
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\main.css
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\sdk-ui\browse.css
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\sdk-ui\button.css
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\sdk-ui\checkbox.css
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\sdk-ui\progress-bar.css
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\sdk-ui\images\button-bg.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\sdk-ui\images\progress-bg-corner.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\sdk-ui\images\progress-bg.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\css\sdk-ui\images\progress-bg2.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\arrow.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\BG.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Close.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Close_Hover.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Color_Button.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Color_Button_Hover.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Grey_Button.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Grey_Button_Hover.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Loader.gif
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Logo.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Progress.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\ProgressBar.png
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\images\Welcome_BG.jpg
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\CS.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\DE.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\EN.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\ES.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\FR.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\IT.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\JA.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\KO.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\NL.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\PT.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\RU.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\TW.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\ish339380\locale\ZH.locale
Deleted file - C:\Users\Vanda\AppData\Local\Temp\Skype\DbTemp\temp-0BPEOYOcb40p1skjF2fR08cR
Deleted file - C:\Users\Vanda\AppData\Local\Temp\Skype\DbTemp\temp-EADmkoAMsVzripZhAwYuSRdk
Deleted file - C:\Users\Vanda\AppData\Local\Temp\Temp1_109451_922312456_FRST64.zip\Addition.txt
Deleted file - C:\Users\Vanda\AppData\Local\Temp\Temp1_109451_922312456_FRST64.zip\FRST.txt
Deleted file - C:\Users\Vanda\AppData\Local\Temp\Temp1_109451_922312456_FRST64.zip\FRST64.exe

========= End of CMD: =========


========= RD /S /Q %TEMP% =========

C:\Users\Vanda\AppData\Local\Temp\etilqs_0qeuad6TQHxwnHe - The process cannot access the file because it is being used by another process.
C:\Users\Vanda\AppData\Local\Temp\etilqs_OWaLOFdVScJ3haS - The process cannot access the file because it is being used by another process.
C:\Users\Vanda\AppData\Local\Temp\FXSAPIDebugLogFile.txt - The process cannot access the file because it is being used by another process.

========= End of CMD: =========



The system needed a reboot.

==== End of Fixlog ====