Lap top otkazuje poslušnost ???

3

Lap top otkazuje poslušnost ???

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Pokreni command prompt. Start - > search -> cmd
Klikni na cmd desni klik - > Run as administrator
Kad se otvori command prompt kucaj naredbu sfc /scannow

Ovo bi trebalo da zameni sve ostecene fajlove sa sledece lokacije %WinDir%\System32\dllcache.
Rstartuj komjuter.



Ako sve uspesno prodje pokusaj ponovo da pokrenes AdwCleaner.



offline
  • Pridružio: 29 Avg 2007
  • Poruke: 50
  • Gde živiš: vojvodina

Napisano: 04 Jul 2014 22:29

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 01-07-2014
Ran by Vanda (administrator) on VANDA-PC on 04-07-2014 21:57:56
Running from C:\Users\Vanda\Desktop
Platform: Windows 7 Ultimate (X64) OS Language: English (United States)
Internet Explorer Version 10
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: [Link mogu videti samo ulogovani korisnici]
Download link for 64-Bit Version: [Link mogu videti samo ulogovani korisnici]
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: [Link mogu videti samo ulogovani korisnici]

==================== Processes (Whitelisted) =================

(IObit) C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
(SUPERAntiSpyware.com) C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE
(Intel Corporation) C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.24.15\GoogleCrashHandler64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Intel(R) Corporation) C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
() C:\ProgramData\DatacardService\HWDeviceService64.exe
(Huawei Technologies Co., Ltd.) C:\ProgramData\DatacardService\DCSHelper.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe
() C:\ProgramData\mts mobilni internet\OnlineUpdate\ouc.exe
(Nitro PDF Software) C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe
() C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe
(StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe
() C:\ProgramData\Telenor Internet\OnlineUpdate\ouc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(PixArt Imaging Incorporation) C:\Windows\PixArt\Pac7302\Monitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe
(SUPERAntiSpyware) C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMBgMonitor.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe
(Akamai Technologies, Inc.) C:\Users\Vanda\AppData\Local\Akamai\netsession_win.exe
(Nero AG) C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexStoreSvr.exe
(Akamai Technologies, Inc.) C:\Users\Vanda\AppData\Local\Akamai\netsession_win.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(SanDisk Corporation) C:\Program Files (x86)\SanDisk\SanDisk Media Manager\SanDiskMediaManager-Launcher.EXE
(Nuance Communications, Inc.) C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe
(Evernote Corp., 305 Walnut Street, Redwood City, CA 94063) C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe
(Apple Inc.) C:\Program Files (x86)\iTunes\iTunesHelper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(RealNetworks, Inc.) C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Disc Soft Ltd) C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [BTMTrayAgent] => C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll [10372368 2011-03-30] (Intel Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [2785064 2011-10-04] (Synaptics Incorporated)
HKLM\...\Run: [SynAsusAcpi] => C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe [97064 2011-10-04] (Synaptics Incorporated)
HKLM\...\Run: [AthBtTray] => c:\program files (x86)\bluetooth suite\athbttray.exe [658080 2011-01-28] (Atheros Commnucations)
HKLM\...\Run: [AtherosBtStack] => c:\program files (x86)\bluetooth suite\btvstack.exe [789152 2011-01-28] (Atheros Commnucations)
HKLM\...\Run: [PAC7302_Monitor] => C:\Windows\PixArt\PAC7302\Monitor.exe [319488 2006-11-03] (PixArt Imaging Incorporation)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [12489360 2013-12-25] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1177232 2013-12-25] (Realtek Semiconductor)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [43848 2014-02-12] (Apple Inc.)
HKLM-x32\...\Run: [SSBkgdUpdate] => C:\Program Files (x86)\Common Files\Scansoft Shared\SSBkgdUpdate\SSBkgdupdate.exe [210472 2006-10-25] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [OpwareSE4] => C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe [79400 2007-02-04] (Nuance Communications, Inc.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-11-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [iTunesHelper] => C:\Program Files (x86)\iTunes\iTunesHelper.exe [152392 2014-02-21] (Apple Inc.)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3764024 2013-12-18] (AVAST Software)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [295512 2013-12-16] (RealNetworks, Inc.)
HKLM-x32\...\Run: [QuickTime Task] => D:\wendy-D\Downloads\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\.DEFAULT\...\Run: [Advanced SystemCare 7] => C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe [2295584 2014-04-21] (IObit)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [SUPERAntiSpyware] => C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [6564120 2014-06-14] (SUPERAntiSpyware)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] => c:\program files (x86)\common files\ahead\lib\nmbgmonitor.exe [152872 2007-06-28] (Nero AG)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [DAEMON Tools Ultra Agent] => C:\Program Files (x86)\DAEMON Tools Ultra\DTAgent.exe [3192056 2013-11-14] (Disc Soft Ltd)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [Akamai NetSession Interface] => C:\Users\Vanda\AppData\Local\Akamai\netsession_win.exe [4672920 2014-04-17] (Akamai Technologies, Inc.)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3675352 2013-10-28] (Disc Soft Ltd)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [21444224 2014-05-08] (Skype Technologies S.A.)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Run: [Facebook Update] => C:\Users\Vanda\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2014-04-20] (Facebook Inc.)
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\Policies\Explorer: [NoInstrumentation] 1
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: F - F:\Autorun.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: G - G:\AutoRun.exe
HKU\S-1-5-21-4085335947-2511170766-3262566581-1000\...\MountPoints2: H - H:\RunGame.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SanDisk Media Manager.lnk
ShortcutTarget: SanDisk Media Manager.lnk -> (No File)
Startup: C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EvernoteClipper.lnk
ShortcutTarget: EvernoteClipper.lnk -> C:\Program Files (x86)\Evernote\Evernote\EvernoteClipper.exe (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
ShellIconOverlayIdentifiers: 00avast -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll (AVAST Software)
ShellIconOverlayIdentifiers: GDriveBlacklistedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedEditOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D44} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSharedViewOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D43} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncedOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)
ShellIconOverlayIdentifiers: GDriveSyncingOverlay -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files (x86)\Google\Drive\googledrivesync64.dll (Google)

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [Link mogu videti samo ulogovani korisnici]
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-rs
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF9E950CF7F23CC01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [Link mogu videti samo ulogovani korisnici]
HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Link mogu videti samo ulogovani korisnici]
SearchScopes: HKLM-x32 - DefaultScope value is missing.
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
BHO: avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll (RealDownloader)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO-x32: Evernote extension - {92EF2EAD-A7CE-4424-B0DB-499CF856608E} - C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll (Evernote Corp., 305 Walnut Street, Redwood City, CA 94063)
BHO-x32: Ads Removal - {9D974C8C-6D92-44FB-BEAF-B45A1C0CF17F} - C:\Program Files (x86)\IObit\IObit Malware Fighter\adsremoval\IE\Adblock.dll No File
BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
Toolbar: HKLM-x32 - avast! Online Security - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
DPF: HKLM-x32 {7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D} [Link mogu videti samo ulogovani korisnici]
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} [Link mogu videti samo ulogovani korisnici]
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Microsoft Corporation)
Handler-x32: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Program Files (x86)\Common Files\SYSTEM\OLE DB\msdaipp.dll (Microsoft Corporation)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll (Microsoft Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Filter: text/xml - {807553E5-5146-11D5-A672-00B0D022E945} - No File
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{231AC112-6323-45FF-B9F7-3F4E2E6953C7}: [NameServer]172.21.21.157 172.21.21.158

FireFox:
========
FF ProfilePath: C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default
FF NewTab: chrome://fvd.speeddial/content/fvd_about_blank.html
FF Homepage: [Link mogu videti samo ulogovani korisnici]
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_13_0_0_214.dll ()
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.0 - D:\wendy-D\Downloads\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 - C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @google.com/npPicasa3,version=3.0.0 - C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin-x32: @IObit.com/np_Asc_Plugin - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\np_Asc_plugin.dll (IObit)
FF Plugin-x32: @java.com/JavaPlugin,version=10.55.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\5.1.30214.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @real.com/nppl3260;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlchromebrowserrecordext;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlchromebrowserrecordext.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlhtml5videoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlhtml5videoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprndlpepperflashvideoshim;version=1.3.3 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\MozillaPlugins\nprndlpepperflashvideoshim.dll (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=16.0.3.51 - c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer)
FF Plugin-x32: @realnetworks.com/npdlplugin;version=1 - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\npdlplugin.dll (RealDownloader)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Vanda\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Extension: No Name - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\Extensions\ascsurfingprotection@iobit.com [2014-01-19]
FF Extension: No Name - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\Extensions\pavel.sherbakov@gmail.com [2014-05-30]
FF Extension: NetCrawl - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\Extensions\{57f143ae-1ecd-493d-9ddb-32c45a3cecd5}.xpi [2014-06-24]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-05-30]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-12-16]
FF HKLM-x32\...\Firefox\Extensions: [{DF153AFF-6948-45d7-AC98-4FC4AF8A08E2}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext
FF Extension: RealDownloader - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext [2013-12-16]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-12-07]
FF Extension: No Name - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\extensions\sr-RS@dictionaries.addons.mozilla.org.xpi []
FF Extension: No Name - C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\extensions\{a3f28269-ad17-41a8-b032-3e0313ef8979}.xpi []

Chrome:
=======
CHR HomePage: [Link mogu videti samo ulogovani korisnici]
CHR DefaultNewTabURL:
CHR Extension: (Google Đ´ĐľĐşŃƒĐĽĐµĐ˝Ń‚Đ¸) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-06-30]
CHR Extension: (Google диск) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2013-05-09]
CHR Extension: (YouTube) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2013-07-26]
CHR Extension: (Google претрага) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-06-30]
CHR Extension: (RealDownloader) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\idhngdhcfkoamngbedgpaokgjbnpdiji [2014-06-30]
CHR Extension: (Google новчаник) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-28]
CHR Extension: (Gmail) - C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2013-07-26]
CHR HKCU\...\Chrome\Extension: [apdfllckaahabafndbhieahigkjlhalf] - C:\Users\Vanda\AppData\Local\Google\Drive\apdfllckaahabafndbhieahigkjlhalf_live.crx [2013-05-07]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2013-12-07]
CHR HKLM-x32\...\Chrome\Extension: [idhngdhcfkoamngbedgpaokgjbnpdiji] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Chrome\Ext\realdownloader.crx [2013-08-14]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-04-11]

==================== Services (Whitelisted) =================

Locked "aswMonFlt" service could not be unlocked. <===== ATTENTION
Locked "aswRdr" service could not be unlocked. <===== ATTENTION
Locked "aswRvrt" service could not be unlocked. <===== ATTENTION
Locked "aswSnx" service could not be unlocked. <===== ATTENTION
Locked "aswSP" service could not be unlocked. <===== ATTENTION
Locked "aswStm" service could not be unlocked. <===== ATTENTION
Locked "aswVmm" service could not be unlocked. <===== ATTENTION
Locked "avast! Antivirus" service could not be unlocked. <===== ATTENTION

R2 !SASCORE; C:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [140672 2012-09-07] (SUPERAntiSpyware.com) [File not signed]
R2 AdvancedSystemCareService7; C:\Program Files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [881952 2014-01-14] (IObit)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [73376 2011-01-28] (Atheros Commnucations) [File not signed]
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390720 2014-04-11] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1764992 2014-04-11] (Microsoft Corporation)
R3 Disc Soft Bus Service; C:\Program Files (x86)\DAEMON Tools Ultra\DiscSoftBusService.exe [723192 2013-11-14] (Disc Soft Ltd)
R2 HWDeviceService64.exe; C:\ProgramData\DatacardService\HWDeviceService64.exe [346976 2011-03-14] ()
R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [342336 2014-01-24] (IObit)
S3 ioloSystemService; C:\Program Files (x86)\iolo\Common\Lib\ioloServiceManager.exe [1072664 2013-05-29] (iolo technologies, LLC)
S2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-12-03] (IObit)
R2 MSSQL$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\sqlservr.exe [58345832 2011-09-22] (Microsoft Corporation)
S2 mts mobilni internet. RunOuc; C:\Program Files (x86)\mts mobilni internet\UpdateDog\ouc.exe [239968 2014-04-24] ()
R2 NitroReaderDriverReadSpool2; C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe [343032 2012-02-08] (Nitro PDF Software)
R3 NMIndexingService; C:\Program Files (x86)\Common Files\Ahead\Lib\NMIndexingService.exe [279848 2007-06-28] (Nero AG)
R2 RealNetworks Downloader Resolver Service; C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe [39056 2013-08-14] ()
S4 SQLAgent$SQLEXPRESS; C:\Program Files\Microsoft SQL Server\MSSQL10.SQLEXPRESS\MSSQL\Binn\SQLAGENT.EXE [431464 2011-09-22] (Microsoft Corporation)
R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software) [File not signed]
S2 Telenor Internet. RunOuc; C:\Program Files (x86)\Telenor Internet\UpdateDog\ouc.exe [655712 2011-12-23] ()

==================== Drivers (Whitelisted) ====================

R5 aswMonFlt; C:\Windows\System32\Drivers\aswMonFlt.sys [78648 2013-12-18] (AVAST Software)
R5 aswRdr; C:\Windows\System32\Drivers\aswRdr.sys [31064 2011-07-04] (AVAST Software)
R5 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65776 2013-12-07] ()
R5 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1034464 2013-12-18] (AVAST Software)
R5 aswSP; C:\Windows\System32\Drivers\aswSP.sys [422216 2013-12-18] (AVAST Software)
R5 aswStm; C:\Windows\System32\Drivers\aswStm.sys [79672 2013-12-20] (AVAST Software)
R5 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [207904 2013-12-18] ()
R3 dtscsibus; C:\Windows\System32\DRIVERS\dtscsibus.sys [29696 2013-12-30] (Disc Soft Ltd)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-02-23] (Disc Soft Ltd)
R1 ElRawDisk; C:\Windows\system32\drivers\ElRawDsk.sys [30752 2012-10-18] (EldoS Corporation)
S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
S3 huawei_wwanecm; C:\Windows\System32\DRIVERS\ew_juwwanecm.sys [212992 2014-04-24] (Huawei Technologies Co., Ltd.)
S2 lirsgt; C:\Windows\SysWOW64\DRIVERS\lirsgt.sys [18048 2011-12-22] () [File not signed]
S3 PAC7302; C:\Windows\System32\DRIVERS\PAC7302.SYS [527360 2007-10-29] (PixArt Imaging Inc.)
S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34848 2013-11-19] (IObit.com)
R1 SASDIFSV; C:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; C:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R2 SecDrv; C:\Windows\SysWOW64\drivers\SECDRV.SYS [11376 2003-02-04] () [File not signed]
R0 SmartDefragDriver; C:\Windows\System32\Drivers\SmartDefragDriver.sys [21184 2013-12-24] (IObit)
R3 SmbDrvI; C:\Windows\System32\DRIVERS\Smb_driver_Intel.sys [32496 2013-12-25] (Synaptics Incorporated)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [386680 2014-02-23] (Duplex Secure Ltd.)
S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-11-19] (IObit.com)
U3 afq1k2fj; C:\Windows\System32\Drivers\afq1k2fj.sys [0 ] (Advanced Micro Devices)
S3 Andbus; system32\DRIVERS\lgandbus64.sys [X]
S3 AndDiag; system32\DRIVERS\lganddiag64.sys [X]
S3 AndGps; system32\DRIVERS\lgandgps64.sys [X]
S3 ANDModem; system32\DRIVERS\lgandmodem64.sys [X]
S3 androidusb; System32\Drivers\lgandadb.sys [X]
S3 clwvd; system32\DRIVERS\clwvd.sys [X]
S3 ewusbnet; system32\DRIVERS\ewusbnet.sys [X]
S3 hwusbdev; system32\DRIVERS\ewusbdev.sys [X]
S3 LgBttPort; system32\DRIVERS\lgbtpt64.sys [X]
S3 lgbusenum; system32\DRIVERS\lgbtbs64.sys [X]
S3 LGVMODEM; system32\DRIVERS\lgvmdm64.sys [X]
S3 SNP2UVC; system32\DRIVERS\snp2uvc.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-07-04 21:57 - 2014-07-04 21:57 - 00029062 _____ () C:\Users\Vanda\Desktop\FRST.txt
2014-07-04 21:55 - 2014-07-04 21:55 - 00000000 ___RD () C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-07-04 21:49 - 2014-07-04 21:49 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit
2014-07-04 21:49 - 2014-07-04 21:49 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit
2014-07-04 21:41 - 2014-07-04 21:50 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-04 21:41 - 2014-07-04 21:50 - 00003228 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-04 19:24 - 2014-07-04 19:24 - 00027285 _____ () C:\Users\Vanda\Desktop\AdwCleaner[S0].txt
2014-07-04 19:18 - 2014-07-04 21:50 - 00000594 _____ () C:\Windows\PFRO.log
2014-07-04 19:15 - 2010-08-30 08:34 - 00536576 _____ (SQLite Development Team) C:\Windows\SysWOW64\sqlite3.dll
2014-07-04 08:06 - 2014-07-04 19:19 - 00003206 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-03 10:59 - 2014-07-04 19:19 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-03 10:55 - 2014-07-04 21:54 - 00477222 _____ () C:\Users\Vanda\Downloads\avgremover.log
2014-07-03 10:55 - 2014-07-03 10:56 - 00018434 _____ () C:\Users\Vanda\Desktop\fx.txt
2014-07-03 10:55 - 2014-07-03 10:55 - 03386520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Vanda\Downloads\avg_remover_stf_x64_2014_4116.exe
2014-07-03 10:55 - 2014-07-03 10:55 - 00000000 ____D () C:\Users\Vanda\Desktop\FRST-OlderVersion
2014-07-03 10:54 - 2014-07-04 19:17 - 00000000 ____D () C:\AdwCleaner
2014-07-03 10:54 - 2014-07-03 10:54 - 01346519 _____ () C:\Users\Vanda\Downloads\AdwCleaner.exe
2014-07-03 10:52 - 2014-07-03 10:55 - 02083840 _____ (Farbar) C:\Users\Vanda\Desktop\FRST64.exe
2014-07-03 10:51 - 2014-07-03 10:51 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-03 10:51 - 2014-07-03 10:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-03 10:51 - 2014-07-03 10:51 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-07-03 10:42 - 2014-07-03 10:42 - 00858832 _____ ( ) C:\Users\Vanda\Downloads\winzip18-dl.exe
2014-07-02 11:09 - 2014-07-04 21:50 - 00000448 _____ () C:\Windows\setupact.log
2014-07-02 11:09 - 2014-07-02 11:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-01 16:30 - 2014-07-01 16:30 - 01590342 _____ () C:\Users\Vanda\Downloads\109451_922312456_FRST64.zip
2014-07-01 15:40 - 2014-07-01 15:40 - 00002154 _____ () C:\Fixlist.txt
2014-06-30 01:30 - 2014-07-04 21:58 - 00000000 ____D () C:\FRST
2014-06-29 14:15 - 2014-06-29 14:15 - 01584742 _____ () C:\Users\Vanda\Desktop\109451_922312456_FRST64.zip
2014-06-25 21:44 - 2014-06-25 21:44 - 00000000 __SHD () C:\Users\Vanda\AppData\Local\EmieUserList
2014-06-25 21:44 - 2014-06-25 21:44 - 00000000 __SHD () C:\Users\Vanda\AppData\Local\EmieSiteList
2014-06-25 21:03 - 2014-06-25 21:03 - 00000000 _____ () C:\asc_rdflag
2014-06-25 19:34 - 2014-06-28 10:30 - 00000000 ____D () C:\Program Files (x86)\GUM51E.tmp
2014-06-25 19:34 - 2014-06-25 19:34 - 06010880 _____ () C:\Program Files (x86)\GUT51F.tmp
2014-06-20 08:53 - 2014-06-20 08:53 - 00003164 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Driver Booster(2093).lnk
2014-06-20 08:41 - 2014-06-20 08:41 - 00001117 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-20 08:40 - 2014-06-20 08:40 - 29836648 _____ (Mozilla) C:\Users\Vanda\Downloads\Firefox Setup 30.0_310578f044482a93caa0703841c3339e.exe
2014-06-20 08:32 - 2014-07-04 21:50 - 00000376 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Vanda.job
2014-06-20 08:32 - 2014-07-04 08:36 - 00002960 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateXML_Vanda
2014-06-20 08:32 - 2014-07-04 08:36 - 00000366 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Vanda.job
2014-06-20 08:32 - 2014-06-20 08:55 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda.job
2014-06-20 08:32 - 2014-06-20 08:55 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda(2113).job
2014-06-20 08:32 - 2014-06-20 08:32 - 00003612 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Vanda
2014-06-20 08:32 - 2014-06-20 08:32 - 00002964 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Vanda
2014-06-20 08:32 - 2014-06-20 08:32 - 00002668 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Vanda
2014-06-11 12:21 - 2014-06-08 11:13 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-11 12:21 - 2014-06-08 11:08 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-11 12:21 - 2014-05-24 04:48 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-06-11 12:21 - 2014-05-24 04:47 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-06-11 12:21 - 2014-05-24 04:47 - 01366016 _____ (Microsoft Corporation) C:\Windows\system32\urlmon(2105).dll
2014-06-11 12:21 - 2014-05-24 04:46 - 02650112 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-06-11 12:21 - 2014-05-24 04:46 - 02650112 _____ (Microsoft Corporation) C:\Windows\system32\iertutil(2102).dll
2014-06-11 12:21 - 2014-05-24 04:46 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-06-11 12:21 - 2014-05-24 04:46 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-06-11 12:21 - 2014-05-24 04:46 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-06-11 12:21 - 2014-05-24 04:45 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-06-11 12:21 - 2014-05-24 04:45 - 00452096 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-06-11 12:21 - 2014-05-24 04:45 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-06-11 12:21 - 2014-05-24 03:26 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-06-11 12:21 - 2014-05-24 03:26 - 01766400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet(2112).dll
2014-06-11 12:21 - 2014-05-24 03:26 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-06-11 12:21 - 2014-05-24 03:26 - 01141248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon(2111).dll
2014-06-11 12:21 - 2014-05-24 03:26 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-06-11 12:21 - 2014-05-24 03:26 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 13731328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 02050560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil(2110).dll
2014-06-11 12:21 - 2014-05-24 03:25 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-06-11 12:21 - 2014-05-24 03:25 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-06-11 12:21 - 2014-05-24 03:25 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-06-11 12:21 - 2014-05-24 03:09 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-06-11 12:21 - 2014-05-24 03:03 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-06-11 12:21 - 2014-05-08 11:32 - 03178496 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-06-11 12:21 - 2014-05-08 11:32 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\RdpGroupPolicyExtension.dll
2014-06-11 12:21 - 2014-04-25 04:34 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\usp10.dll
2014-06-11 12:21 - 2014-04-25 04:06 - 00626688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\usp10.dll
2014-06-11 12:21 - 2014-04-05 04:47 - 01903552 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2014-06-11 12:21 - 2014-04-05 04:47 - 00288192 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2014-06-11 12:21 - 2014-03-26 16:44 - 02002432 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2014-06-11 12:21 - 2014-03-26 16:44 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2014-06-11 12:21 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml6r.dll
2014-06-11 12:21 - 2014-03-26 16:41 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2014-06-11 12:21 - 2014-03-26 16:27 - 01389056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2014-06-11 12:21 - 2014-03-26 16:27 - 01237504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll
2014-06-11 12:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6r.dll
2014-06-11 12:21 - 2014-03-26 16:25 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll
2014-06-11 12:20 - 2014-05-24 04:47 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-06-11 12:20 - 2014-05-24 04:47 - 02239488 _____ (Microsoft Corporation) C:\Windows\system32\wininet(2108).dll
2014-06-11 12:20 - 2014-05-24 04:46 - 19290112 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 15368704 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 03958784 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00097792 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-06-11 12:20 - 2014-05-24 04:46 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-06-11 12:20 - 2014-05-24 03:26 - 14365696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-06-11 12:20 - 2014-05-24 03:26 - 00080896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-06-11 12:20 - 2014-05-24 03:25 - 02862080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-06-11 12:20 - 2014-05-24 03:25 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-06-11 12:20 - 2014-05-24 03:25 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-06-11 12:20 - 2014-05-24 03:25 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-06-11 12:20 - 2014-05-24 02:13 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
2014-06-11 12:20 - 2014-05-24 02:06 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
2014-06-07 13:51 - 2014-06-07 14:33 - 00000000 ____D () C:\Users\Vanda\Documents\FIFA 14
2014-06-07 13:50 - 2014-06-07 13:50 - 00000924 _____ () C:\Users\Vanda\Desktop\Play FIFA 14.lnk
2014-06-06 14:36 - 2014-06-18 14:37 - 00003846 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1389458101

==================== One Month Modified Files and Folders =======

2014-07-04 22:02 - 2011-10-09 15:47 - 00003926 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{39C419FF-9009-44A0-8FF3-468E5FD87E8B}
2014-07-04 22:00 - 2014-07-04 21:57 - 00029062 _____ () C:\Users\Vanda\Desktop\FRST.txt
2014-07-04 21:58 - 2014-06-30 01:30 - 00000000 ____D () C:\FRST
2014-07-04 21:57 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-07-04 21:57 - 2009-07-14 06:45 - 00014416 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-07-04 21:56 - 2011-10-05 20:12 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Skype
2014-07-04 21:55 - 2014-07-04 21:55 - 00000000 ___RD () C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2014-07-04 21:55 - 2011-12-25 23:52 - 00000035 _____ () C:\ProgramData\AtherosServiceConfig.ini
2014-07-04 21:54 - 2014-07-03 10:55 - 00477222 _____ () C:\Users\Vanda\Downloads\avgremover.log
2014-07-04 21:53 - 2014-01-13 09:30 - 01728688 _____ () C:\Windows\WindowsUpdate.log
2014-07-04 21:52 - 2012-04-03 20:59 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-07-04 21:50 - 2014-07-04 21:41 - 00003362 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-04 21:50 - 2014-07-04 21:41 - 00003228 _____ () C:\Windows\System32\Tasks\RealDownloaderRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-04 21:50 - 2014-07-04 19:18 - 00000594 _____ () C:\Windows\PFRO.log
2014-07-04 21:50 - 2014-07-02 11:09 - 00000448 _____ () C:\Windows\setupact.log
2014-07-04 21:50 - 2014-06-20 08:32 - 00000376 _____ () C:\Windows\Tasks\RNUpgradeHelperLogonPrompt_Vanda.job
2014-07-04 21:50 - 2013-12-20 20:10 - 00065536 _____ () C:\Windows\system32\Ikeext.etl
2014-07-04 21:50 - 2011-10-06 05:24 - 00000892 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-07-04 21:50 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-07-04 21:49 - 2014-07-04 21:49 - 00000000 ____D () C:\Users\Default\AppData\Roaming\IObit
2014-07-04 21:49 - 2014-07-04 21:49 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\IObit
2014-07-04 19:24 - 2014-07-04 19:24 - 00027285 _____ () C:\Users\Vanda\Desktop\AdwCleaner[S0].txt
2014-07-04 19:19 - 2014-07-04 08:06 - 00003206 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeLogonTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-04 19:19 - 2014-07-03 10:59 - 00003340 _____ () C:\Windows\System32\Tasks\RealPlayerRealUpgradeScheduledTaskS-1-5-21-4085335947-2511170766-3262566581-1000
2014-07-04 19:17 - 2014-07-03 10:54 - 00000000 ____D () C:\AdwCleaner
2014-07-04 19:11 - 2013-12-07 21:26 - 00004182 _____ () C:\Windows\System32\Tasks\avast! Emergency Update
2014-07-04 18:38 - 2011-10-06 05:24 - 00000896 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-07-04 17:47 - 2014-04-20 23:42 - 00000928 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000UA.job
2014-07-04 10:16 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\tracing
2014-07-04 08:36 - 2014-06-20 08:32 - 00002960 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateXML_Vanda
2014-07-04 08:36 - 2014-06-20 08:32 - 00000366 _____ () C:\Windows\Tasks\ReclaimerUpdateXML_Vanda.job
2014-07-03 10:56 - 2014-07-03 10:55 - 00018434 _____ () C:\Users\Vanda\Desktop\fx.txt
2014-07-03 10:55 - 2014-07-03 10:55 - 03386520 _____ (AVG Technologies CZ, s.r.o.) C:\Users\Vanda\Downloads\avg_remover_stf_x64_2014_4116.exe
2014-07-03 10:55 - 2014-07-03 10:55 - 00000000 ____D () C:\Users\Vanda\Desktop\FRST-OlderVersion
2014-07-03 10:55 - 2014-07-03 10:52 - 02083840 _____ (Farbar) C:\Users\Vanda\Desktop\FRST64.exe
2014-07-03 10:55 - 2014-02-23 11:26 - 00000000 ____D () C:\Program Files (x86)\Smart File Advisor
2014-07-03 10:54 - 2014-07-03 10:54 - 01346519 _____ () C:\Users\Vanda\Downloads\AdwCleaner.exe
2014-07-03 10:51 - 2014-07-03 10:51 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-03 10:51 - 2014-07-03 10:51 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2014-07-03 10:51 - 2014-07-03 10:51 - 00000000 ____D () C:\Program Files (x86)\WinRAR
2014-07-03 10:42 - 2014-07-03 10:42 - 00858832 _____ ( ) C:\Users\Vanda\Downloads\winzip18-dl.exe
2014-07-02 11:09 - 2014-07-02 11:09 - 00000000 _____ () C:\Windows\setuperr.log
2014-07-01 16:30 - 2014-07-01 16:30 - 01590342 _____ () C:\Users\Vanda\Downloads\109451_922312456_FRST64.zip
2014-07-01 16:30 - 2011-12-25 23:53 - 00000000 ____D () C:\Users\Vanda\AppData\Local\CrashDumps
2014-07-01 15:40 - 2014-07-01 15:40 - 00002154 _____ () C:\Fixlist.txt
2014-07-01 14:42 - 2013-02-17 21:37 - 00000272 _____ () C:\Windows\win.ini
2014-07-01 14:38 - 2013-12-07 20:43 - 00000000 ____D () C:\ProgramData\ProductData
2014-06-29 15:10 - 2009-07-14 07:13 - 00880170 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-06-29 15:08 - 2011-10-09 01:05 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Nitro PDF
2014-06-29 14:15 - 2014-06-29 14:15 - 01584742 _____ () C:\Users\Vanda\Desktop\109451_922312456_FRST64.zip
2014-06-28 10:41 - 2013-12-07 20:37 - 00001966 _____ () C:\Users\Public\Desktop\avast! Free Antivirus.lnk
2014-06-28 10:32 - 2011-10-04 00:13 - 00000000 ____D () C:\Users\Vanda
2014-06-28 10:31 - 2014-05-30 21:39 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-06-28 10:31 - 2014-04-07 23:33 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-06-28 10:31 - 2014-02-05 22:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Smart Defrag 3
2014-06-28 10:31 - 2014-01-27 19:38 - 00000000 ____D () C:\Users\Vanda\AppData\Local\Akamai
2014-06-28 10:31 - 2013-12-19 20:17 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-06-28 10:31 - 2013-12-07 21:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-06-28 10:31 - 2013-12-07 20:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 7
2014-06-28 10:31 - 2013-11-15 21:16 - 00000000 ____D () C:\Users\Vanda\Desktop\SRKI
2014-06-28 10:31 - 2013-10-13 21:07 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster
2014-06-28 10:31 - 2013-10-08 12:01 - 00000000 ____D () C:\Users\Guest
2014-06-28 10:31 - 2012-08-11 13:09 - 00000000 ____D () C:\ProgramData\IObit
2014-06-28 10:31 - 2012-07-01 22:41 - 00000000 ___RD () C:\Users\Vanda\Google диск
2014-06-28 10:31 - 2012-07-01 22:38 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2014-06-28 10:31 - 2011-10-05 20:15 - 00000000 ____D () C:\Windows\SysWOW64\sr-Cyrl-CS
2014-06-28 10:31 - 2011-10-05 20:15 - 00000000 ____D () C:\Windows\system32\sr-Cyrl-CS
2014-06-28 10:31 - 2011-10-05 17:49 - 00000000 ____D () C:\Program Files (x86)\Opera
2014-06-28 10:31 - 2011-10-04 17:41 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\GHISLER
2014-06-28 10:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\rescache
2014-06-28 10:31 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\PolicyDefinitions
2014-06-28 10:30 - 2014-06-25 19:34 - 00000000 ____D () C:\Program Files (x86)\GUM51E.tmp
2014-06-28 10:30 - 2012-08-11 13:09 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\IObit
2014-06-28 10:30 - 2012-01-09 23:08 - 00000000 ____D () C:\ProgramData\Real
2014-06-28 10:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\registration
2014-06-28 10:30 - 2009-07-14 05:20 - 00000000 ____D () C:\Program Files\Common Files\Microsoft Shared
2014-06-28 10:29 - 2014-01-02 20:35 - 00000000 ____D () C:\Users\Vanda\Desktop\Cipele, ednik, rogovi,sto
2014-06-28 10:29 - 2012-08-21 20:40 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\Mozilla
2014-06-28 10:28 - 2013-12-19 20:18 - 00000000 ____D () C:\Users\Vanda\AppData\Local\Mozilla
2014-06-28 10:27 - 2012-11-28 22:24 - 00000000 ____D () C:\Program Files\Java
2014-06-28 10:17 - 2011-10-04 00:57 - 00000000 ____D () C:\Windows\Panther
2014-06-27 20:34 - 2011-10-08 06:01 - 00000000 ____D () C:\Windows\Minidump
2014-06-25 22:28 - 2012-05-25 20:00 - 00000000 ____D () C:\Users\Vanda\Desktop\smajli
2014-06-25 21:53 - 2012-11-11 21:12 - 01427968 ___SH () C:\Users\Vanda\Desktop\Thumbs.db
2014-06-25 21:44 - 2014-06-25 21:44 - 00000000 __SHD () C:\Users\Vanda\AppData\Local\EmieUserList
2014-06-25 21:44 - 2014-06-25 21:44 - 00000000 __SHD () C:\Users\Vanda\AppData\Local\EmieSiteList
2014-06-25 21:03 - 2014-06-25 21:03 - 00000000 _____ () C:\asc_rdflag
2014-06-25 21:03 - 2014-03-15 03:38 - 50958336 _____ () C:\Windows\system32\config\components.iodefrag.bak
2014-06-25 21:03 - 2014-01-09 13:51 - 109113344 _____ () C:\Windows\system32\config\software.iodefrag.bak
2014-06-25 21:03 - 2014-01-09 13:51 - 04354048 _____ () C:\Windows\system32\config\default.iodefrag.bak
2014-06-25 21:03 - 2014-01-09 13:51 - 00069632 _____ () C:\Windows\system32\config\sam.iodefrag.bak
2014-06-25 21:03 - 2014-01-09 13:51 - 00036864 _____ () C:\Windows\system32\config\security.iodefrag.bak
2014-06-25 19:34 - 2014-06-25 19:34 - 06010880 _____ () C:\Program Files (x86)\GUT51F.tmp
2014-06-24 13:55 - 2009-07-14 07:08 - 00032638 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-06-24 00:00 - 2014-04-20 23:42 - 00000906 _____ () C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000Core.job
2014-06-23 18:07 - 2012-10-03 21:18 - 00000000 ____D () C:\Program Files (x86)\The KMPlayer
2014-06-20 08:55 - 2014-06-20 08:32 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda.job
2014-06-20 08:55 - 2014-06-20 08:32 - 00000370 _____ () C:\Windows\Tasks\ReclaimerUpdateFiles_Vanda(2113).job
2014-06-20 08:53 - 2014-06-20 08:53 - 00003164 _____ () C:\Windows\System32\Tasks\SmartDefrag3_Update
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Smart Defrag 3.lnk
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Driver Booster.lnk
2014-06-20 08:52 - 2014-06-20 08:52 - 00001142 _____ () C:\Users\Public\Desktop\Driver Booster(2093).lnk
2014-06-20 08:48 - 2013-06-17 11:02 - 00000000 ___RD () C:\Users\Vanda\Desktop\ČIŠĆENJE
2014-06-20 08:41 - 2014-06-20 08:41 - 00001117 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-06-20 08:41 - 2013-12-19 20:18 - 00001129 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-06-20 08:40 - 2014-06-20 08:40 - 29836648 _____ (Mozilla) C:\Users\Vanda\Downloads\Firefox Setup 30.0_310578f044482a93caa0703841c3339e.exe
2014-06-20 08:32 - 2014-06-20 08:32 - 00003612 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperResumePrompt_Vanda
2014-06-20 08:32 - 2014-06-20 08:32 - 00002964 _____ () C:\Windows\System32\Tasks\ReclaimerUpdateFiles_Vanda
2014-06-20 08:32 - 2014-06-20 08:32 - 00002668 _____ () C:\Windows\System32\Tasks\RNUpgradeHelperLogonPrompt_Vanda
2014-06-18 14:37 - 2014-06-06 14:36 - 00003846 _____ () C:\Windows\System32\Tasks\Opera scheduled Autoupdate 1389458101
2014-06-17 07:33 - 2011-10-06 05:24 - 00003892 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-06-17 07:33 - 2011-10-06 05:24 - 00003640 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-06-14 20:16 - 2012-01-16 21:27 - 00000000 ____D () C:\Program Files\SUPERAntiSpyware
2014-06-12 18:50 - 2014-05-06 21:09 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-06-11 21:06 - 2013-07-13 20:59 - 00000000 ____D () C:\Windows\system32\MRT
2014-06-11 21:01 - 2011-10-04 07:47 - 95414520 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-06-08 18:37 - 2013-02-16 19:32 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\BitTorrent
2014-06-08 11:13 - 2014-06-11 12:21 - 00506368 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-06-08 11:08 - 2014-06-11 12:21 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-06-07 14:33 - 2014-06-07 13:51 - 00000000 ____D () C:\Users\Vanda\Documents\FIFA 14
2014-06-07 13:50 - 2014-06-07 13:50 - 00000924 _____ () C:\Users\Vanda\Desktop\Play FIFA 14.lnk
2014-06-05 08:21 - 2011-12-21 13:49 - 00000000 ____D () C:\Users\Vanda\AppData\Roaming\DAEMON Tools Lite

Some content of TEMP:
====================
C:\Users\Vanda\AppData\Local\Temp\Quarantine.exe


==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-06-28 13:08

==================== End Of Log ============================

Dopuna: 04 Jul 2014 22:30

# AdwCleaner v3.214 - Report created 04/07/2014 at 19:16:21
# Updated 29/06/2014 by Xplode
# Operating System : Windows 7 Professional Service Pack 1 (64 bits)
# Username : Vanda - VANDA-PC
# Running from : C:\Users\Vanda\Downloads\AdwCleaner.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Deleted : C:\ProgramData\AVG Secure Search
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\BasicServe
[#] Folder Deleted : C:\ProgramData\Browser Manager
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\wincert
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DealPly
Folder Deleted : C:\Program Files (x86)\BasicServe
Folder Deleted : C:\Program Files (x86)\Complitly
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\NetCrawl
Folder Deleted : C:\Program Files (x86)\RegClean Pro
Folder Deleted : C:\Program Files (x86)\registry mechanic
Folder Deleted : C:\Program Files (x86)\Search Results Toolbar
Folder Deleted : C:\Program Files (x86)\SmartTweak
Folder Deleted : C:\Program Files (x86)\TornTV.com
Folder Deleted : C:\Program Files (x86)\Common Files\Spigot
Folder Deleted : C:\Users\Guest\AppData\LocalLow\AVG Secure Search
Folder Deleted : C:\Users\Guest\AppData\LocalLow\Search Settings
Folder Deleted : C:\Users\Guest\AppData\LocalLow\searchresultstb
Folder Deleted : C:\Users\Public\Documents\iWin
Folder Deleted : C:\Users\Vanda\AppData\Local\Conduit
Folder Deleted : C:\Users\Vanda\AppData\Local\genienext
Folder Deleted : C:\Users\Vanda\AppData\Local\PackageAware
Folder Deleted : C:\Users\Vanda\AppData\Local\torch
Folder Deleted : C:\Users\Vanda\AppData\LocalLow\blekko
Folder Deleted : C:\Users\Vanda\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\Vanda\AppData\LocalLow\Delta
Folder Deleted : C:\Users\Vanda\AppData\LocalLow\searchresultstb
Folder Deleted : C:\Users\Vanda\AppData\LocalLow\Softonic
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Babylon
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Complitly
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Funmoods
Folder Deleted : C:\Users\Vanda\AppData\Roaming\newnext.me
Folder Deleted : C:\Users\Vanda\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\Vanda\AppData\Roaming\registry mechanic
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Systweak
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\SmartTweak Software
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Folder Deleted : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\[opt]rs0\Extensions\{33E0DAA6-3AF3-D8B5-6752-10E949C61516}
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\{EB9394A3-4AD6-4918-9537-31A1FD8E8EDF}
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\dlfienamagdnkekbbbocojppncdambda
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Folder Deleted : C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Folder Deleted : C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Folder Deleted : C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\kiplfnciaokpcennlkldkdaeaaomamof
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Folder Deleted : C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
Folder Deleted : C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\pfndaklgolladniicklehhancnlgocpp
Folder Deleted : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nlmjcfadckpgbkpjnkdedeamecbjogal
File Deleted : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\0\Extensions\torntv@torntv.com.xpi
File Deleted : C:\Windows\System32\roboot64.exe
File Deleted : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\0\user.js
File Deleted : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\user.js
File Deleted : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\[opt]rs0\user.js
File Deleted : C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Local Storage\chrome-extension_elchiiiejkobdbblfejjkbphbddgmljf_0.localstorage

***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\dlfienamagdnkekbbbocojppncdambda
Key Deleted : HKCU\Software\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\gaiilaahiahdejapggenmdmafpmbipje
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\hbcennhacfaagdopikcegfcobcadeocj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\icdlfehblmklkikfigmjhbmmpmkmpooj
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\jbpkiefagocgkmemidfngdkamloieekf
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\kiplfnciaokpcennlkldkdaeaaomamof
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\mhkaekfpcppmmioggniknbnbdbcigpkk
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\nbmafkdmkkckhggblphicnnhlgljnoje
Key Deleted : HKLM\SOFTWARE\Google\Chrome\Extensions\pfndaklgolladniicklehhancnlgocpp
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKLM\SOFTWARE\Classes\AppID\Complitly.DLL
Key Deleted : HKLM\SOFTWARE\Classes\AppID\ScriptHelper.EXE
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetup.exe
Key Deleted : HKLM\SOFTWARE\Classes\driverscanner
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO
Key Deleted : HKLM\SOFTWARE\Classes\SuggestMeYes.SuggestMeYesBHO.1
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apnstub_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\apntoolbarinstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askchecker_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askchecker_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\AskInstallChecker_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\askpartnercobrandingtool_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\au__rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\biclient_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\blekko_1311013_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\blekko_1311013_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\blekkoTb_1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\blekkoTb_1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\driverscanner_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoods_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\facemoodssrv_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\FunmoodsSetup_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividMediaBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasapi32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\sweetimsetup_rasmancs
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\UpdateTask_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\YontooDesktop_RASMANCS
Key Deleted : HKCU\Software\53578bd9e269bd12
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_av-webcam-morpher_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_av-webcam-morpher_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_bittorrent_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_bittorrent_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_powerpaint_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_powerpaint_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_second-life-igre za odrasle_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_second-life-igre za odrasle_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_ship-simulator-extremes_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_for_ship-simulator-extremes_RASMANCS
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{1005247F-A178-490A-8DC3-6BAF09EA427B}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{442F13BC-2031-42D5-9520-437F65271153}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{608D3067-77E8-463D-9084-908966806826}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{BB711CB0-C70B-482E-9852-EC05EBD71DBB}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{EA28B360-05E0-4F93-8150-02891F1D8D3C}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{5A4E3A41-FA55-4BDA-AED7-CEBE6E7BCB52}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{80922EE0-8A76-46AE-95D5-BD3C3FE0708D}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{AF175732-0D59-716D-F757-9F1492D808D9}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{D95E57C2-53B3-4C38-BA1E-7980CB5E1803}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{01BCB858-2F62-4F06-A8F4-48F927C15333}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{3A1BEABE-0DC5-4615-8099-83973B843C06}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{1973D53B-7311-45D7-8270-F44571C041A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{0FB6A909-6086-458F-BD92-1F8EE10042A0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{1185823F-F22F-4027-80E5-4F68ACD5DE5E}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{98889811-442D-49DD-99D7-DC866BE87DBC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{A6174F27-1FFF-E1D6-A93F-BA48AD5DD448}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{FD72061E-9FDE-484D-A58A-0BAB4151CAD8}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{377E5D4D-77E5-476A-8716-7E70A9272DA0}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{03EB0E9C-7A91-4381-A220-9B52B641CDB1}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\CLSID\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{087CDC12-0A11-4D1D-8DCF-44185D7C3496}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{088BF3A9-6AE8-47B9-A3FB-26262F236C79}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2AC7B9EB-3881-4EB9-8DEE-0A731A309FDE}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{349C0469-ACDD-49DF-9B3E-0D82E7C7DC4D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{41226591-6F7A-4082-B63A-67FE4A0CF7A6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{4E92DB5F-AAD9-49D3-8EAB-B40CBE5B1FF7}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{55D69CD1-6715-4C40-BF05-9519AC4DC6E6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{66C8FD57-54C4-4D4F-BC95-DCCC763B410A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{717BAE33-7061-4279-8AE5-6C13BC8AF3F9}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{84F06F7A-F811-48D7-8B34-3F4145183D8F}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{88F6D55F-AA3F-4003-BE69-4AC1998D6492}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{8DBCDED5-08AD-41A2-9BBC-235D84F4FE06}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{A0F66203-1A86-4812-9603-A57E09A4D7A3}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{BC39D1B3-4471-41C1-AACA-E097FAF4B7AA}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C401D2CE-DC27-45C7-BC0C-8E6EA7F085D6}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{C9AE652B-8C99-4AC2-B556-8B501182874E}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D95E57C2-53B3-4C38-BA1E-7980CB5E1803}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{DEB85542-1311-4EC6-8A32-5372EB27FC94}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
Key Deleted : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AE805869-2E5C-4ED4-8F7B-F1F7851A4497}
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\APN PIP
Key Deleted : HKCU\Software\AVG Secure Search
Key Deleted : HKCU\Software\BI
Key Deleted : HKCU\Software\Blabbers
Key Deleted : HKCU\Software\Complitly
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\distromatic
Key Deleted : HKCU\Software\Funmoods
Key Deleted : HKCU\Software\Greener Web
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\powerpack
Key Deleted : HKCU\Software\smarttweak
Key Deleted : HKCU\Software\Softonic
Key Deleted : HKCU\Software\SweetIM
Key Deleted : HKCU\Software\torch
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\Search Settings
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKLM\Software\BasicServe
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\Greener Web
Key Deleted : HKLM\Software\iLividSRTB
Key Deleted : HKLM\Software\PIP
Key Deleted : HKLM\Software\SimplyGen
Key Deleted : HKLM\Software\Softonic
Key Deleted : HKLM\Software\systweak
Key Deleted : HKLM\Software\torch
Key Deleted : HKLM\Software\Trymedia Systems
Key Deleted : HKLM\Software\Uniblue
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{4FFBB818-B13C-11E0-931D-B2664824019B}_is1
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BasicServe
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SpeedUpMyComputer
Key Deleted : [x64] HKLM\SOFTWARE\Tarma Installer
Key Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Greener Web
Data Deleted : [x64] HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows [AppInit_DLLs] - C:\PROGRA~3\Wincert\win64cert.dll

***** [ Browsers ] *****

-\\ Internet Explorer v10.0.9200.16921


-\\ Mozilla Firefox v30.0 (en-US)

[ File : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\0\prefs.js ]


[ File : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\yyy18lg6.default\prefs.js ]

Line Deleted : user_pref("extensions.Softonic.admin", false);
Line Deleted : user_pref("extensions.Softonic.aflt", "SD");
Line Deleted : user_pref("extensions.Softonic.appId", "{7ABBFE1C-E485-44AA-8F36-353751B4124D}");
Line Deleted : user_pref("extensions.Softonic.autoRvrt", "false");
Line Deleted : user_pref("extensions.Softonic.dfltLng", "");
Line Deleted : user_pref("extensions.Softonic.dfltSrch", true);
Line Deleted : user_pref("extensions.Softonic.dnsErr", true);
Line Deleted : user_pref("extensions.Softonic.excTlbr", false);
Line Deleted : user_pref("extensions.Softonic.ffxUnstlRst", false);
Line Deleted : user_pref("extensions.Softonic.hmpg", true);
Line Deleted : user_pref("extensions.Softonic.hmpgUrl", "hxxp://search.softonic.com/INF00176/tb_v1?SearchSource=13&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064");
Line Deleted : user_pref("extensions.Softonic.hpOld0", "www.google.rs");
Line Deleted : user_pref("extensions.Softonic.id", "8ae0feac000000000000742f6804af45");
Line Deleted : user_pref("extensions.Softonic.instlDay", "16064");
Line Deleted : user_pref("extensions.Softonic.instlRef", "INF00176");
Line Deleted : user_pref("extensions.Softonic.kw_url", "hxxp://search.softonic.com/INF00176/tb_v1?SearchSource=2&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064&q=");
Line Deleted : user_pref("extensions.Softonic.newTab", true);
Line Deleted : user_pref("extensions.Softonic.newTabUrl", "hxxp://search.softonic.com/INF00176/tb_v1/?SearchSource=15&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064");
Line Deleted : user_pref("extensions.Softonic.prdct", "Softonic");
Line Deleted : user_pref("extensions.Softonic.prtnrId", "softonic");
Line Deleted : user_pref("extensions.Softonic.rvrt", "false");
Line Deleted : user_pref("extensions.Softonic.smplGrp", "none");
Line Deleted : user_pref("extensions.Softonic.srchPrvdr", "Search the web (Softonic)");
Line Deleted : user_pref("extensions.Softonic.tlbrId", "2013desingbrand");
Line Deleted : user_pref("extensions.Softonic.tlbrSrchUrl", "hxxp://search.softonic.com/INF00176/tb_v1?SearchSource=1&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064&q=");
Line Deleted : user_pref("extensions.Softonic.vrsn", "1.8.29.3");
Line Deleted : user_pref("extensions.Softonic.vrsnTs", "1.8.29.315:26:08");
Line Deleted : user_pref("extensions.Softonic.vrsni", "1.8.29.3");

[ File : C:\Users\Vanda\AppData\Roaming\Mozilla\Firefox\Profiles\[opt]rs0\prefs.js ]


-\\ Google Chrome v35.0.1916.153

[ File : C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111008230000563&tb_oid=08-10-2011&tb_mrud=08-10-2011
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&affID=119816&babsrc=SP_ss&mntrId=8ae0feac000000000000582c80139263
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&SearchSource=4&ctid=CT3225826&CUI=UN25720265423744111
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&affID=111434&tt=050412_30b&babsrc=SP_ss&mntrId=8ae0feac000000000000742f6804af45
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{F09754F1-475A-4DFF-BA4F-FA740F741B54}&mid=2b906542a4044ab78b64b72e7e7f63d6-369a7ed5599543e27a6166925fef16b6f19fcba5&lang=en&ds=hk011&coid=avgtbdishk&pr=sa&d=2013-11-03%2014:16:31&v=17.0.1.12&pid=avg&sg=0&sap=dsp&q={searchTerms}
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&f=4
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&r=963
Deleted [Extension] : dlfienamagdnkekbbbocojppncdambda
Deleted [Extension] : gaiilaahiahdejapggenmdmafpmbipje
Deleted [Extension] : hbcennhacfaagdopikcegfcobcadeocj
Deleted [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
Deleted [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
Deleted [Extension] : nbmafkdmkkckhggblphicnnhlgljnoje
Deleted [Extension] : nlmjcfadckpgbkpjnkdedeamecbjogal
Deleted [Extension] : pfndaklgolladniicklehhancnlgocpp

[ File : C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\preferences ]

Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&SearchSource=49&cc=&mi=8ae0feac000000000000742f6804af45&toi=16064
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&f=4
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&affID=111434&tt=050412_30b&babsrc=SP_ss&mntrId=8ae0feac000000000000742f6804af45
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20120812092002302&tb_oid=12-08-2012&tb_mrud=12-08-2012
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&affID=119816&babsrc=SP_ss&mntrId=8ae0feac000000000000582c80139263
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&r=343
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&SearchSource=4&ctid=CT2431400
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{F09754F1-475A-4DFF-BA4F-FA740F741B54}&mid=2b906542a4044ab78b64b72e7e7f63d6-369a7ed5599543e27a6166925fef16b6f19fcba5&lang=en&ds=hk011&coid=avgtbdishk&pr=sa&d=2013-11-03%2014:16:31&v=17.0.1.12&pid=avg&sg=0&sap=dsp&q={searchTerms}
Deleted [Search Provider] : [Link mogu videti samo ulogovani korisnici]{searchTerms}&loc=IB_DS&a=6R8OiNZE1G&i=26
Deleted [Extension] : dlfienamagdnkekbbbocojppncdambda
Deleted [Extension] : hbcennhacfaagdopikcegfcobcadeocj
Deleted [Extension] : icdlfehblmklkikfigmjhbmmpmkmpooj
Deleted [Extension] : kiplfnciaokpcennlkldkdaeaaomamof
Deleted [Extension] : mhkaekfpcppmmioggniknbnbdbcigpkk
Deleted [Extension] : pfndaklgolladniicklehhancnlgocpp

*************************

AdwCleaner[R0].txt - [5185 octets] - [03/07/2014 11:01:02]
AdwCleaner[R1].txt - [5185 octets] - [03/07/2014 11:05:01]
AdwCleaner[R2].txt - [5185 octets] - [04/07/2014 08:02:02]
AdwCleaner[R3].txt - [5185 octets] - [04/07/2014 08:08:24]
AdwCleaner[R4].txt - [27544 octets] - [04/07/2014 19:14:10]
AdwCleaner[S0].txt - [26979 octets] - [04/07/2014 19:16:21]

########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [27040 octets] ##########



rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Deinstaliraj Avast iz Control Panela regularno.

Zatim preuzmi sa donjeg linka njegov uninstaler i pokreni ga iz Safe Mode da ocisti ostatke sevisa.
[Link mogu videti samo ulogovani korisnici]

Preuzmi novu instalaciju Avasta sa donjeg linka i instaliraj ga ponovo.
[Link mogu videti samo ulogovani korisnici]


Ponovo pokreno FRST i postavi mi najsveziji njegov log.

offline
  • Pridružio: 29 Avg 2007
  • Poruke: 50
  • Gde živiš: vojvodina

Kaze nemate dovoljno prava pristupa.

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

wendy.mrs ::Kaze nemate dovoljno prava pristupa.

Za deinstalaciju Avasta?

offline
  • Pridružio: 29 Avg 2007
  • Poruke: 50
  • Gde živiš: vojvodina

Da. Kada ga pokrenem iz Control Panela pise nemate dovoljno prava pristupa,obratite se administratoru sistema.

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Odradi ovaj fix pa probaj posle toga ono sto sam ti vec napisao.



1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

Start
Locked "aswMonFlt" service could not be unlocked. <===== ATTENTION
Locked "aswRdr" service could not be unlocked. <===== ATTENTION
Locked "aswRvrt" service could not be unlocked. <===== ATTENTION
Locked "aswSnx" service could not be unlocked. <===== ATTENTION
Locked "aswSP" service could not be unlocked. <===== ATTENTION
Locked "aswStm" service could not be unlocked. <===== ATTENTION
Locked "aswVmm" service could not be unlocked. <===== ATTENTION
Locked "avast! Antivirus" service could not be unlocked. <===== ATTENTION
Reboot:
End


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.

offline
  • Pridružio: 29 Avg 2007
  • Poruke: 50
  • Gde živiš: vojvodina

Sad nece da pokrene windows, izbacuje ono za psihicku memoriju, onaj plavi ekran

rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Udji u Safe Mode i deinstaliraj Avast odatle.

offline
  • Pridružio: 29 Avg 2007
  • Poruke: 50
  • Gde živiš: vojvodina

Nece ni tako, i dalje izbacuje isto

Ko je trenutno na forumu
 

Ukupno su 987 korisnika na forumu :: 68 registrovanih, 5 sakrivenih i 914 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 6footboy, A.R.Chafee.Jr., advokat84, Barista, blankspace, bobo85, Branke90, comi991, cuculo, darkojbn, dearg, debeli, Djota1, DonRumataEstorski, dozorni, dusan2022, Feller, Foxdie, Georgius, Gogi_avio, hyla, ikan, ivan979, jalos, Još malo pa deda, Kajzer Soze, KimiMR, Kobrim, Komentator, Kosmos Banja Luka, kovacicbozo, laki_bb, larix, laurusri, lima, LJUSMI, lord sir giga, MaksicZoran, Medojed, milan124, mile23, Miler88, milos97, milutin134, Mitrast, mkukoleca, Mrav Obrad, mrzimregistraciju, Nole, OKT, pacika, pein, Schmidt, Sharpshooter, Sinisa76, sistem22, stegonosa, tanzanija, Tila Painen, Tvrtko I, vathra, Vatreni Zmaj, VJ, Vlada78, vlahale, Vojkan Petrovic, vpetrovic, vrgudinac