Pomoc

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Napisano: 08 Avg 2013 1:25

pozdrav ljudi, imam problem kao lazar96 i topicu "dva problema" sa delta search toolbarom, youtube mi koci na sve preko 240p, i imam mozda taj cudan osjecaj da jos neko ima kontrolu nad ovim racunarom,zato jer mi samo nekad otvara foldere,sam se izgasi i interent mi stalno izbacuje "crush",imam instaliran avast koji ne ocitava nikakve viruse


mycity.rs/must-login.png

mycity.rs/must-login.png




DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.25.2
Run by Marko at 1:20:22 on 2013-08-08
Microsoft Windows XP Professional 5.1.2600.3.1252.7.1033.18.1022.231 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesService32.exe
C:\Program Files\TuneUp Utilities 2013\TuneUpUtilitiesApp32.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www1.delta-search.com/?babsrc=HP_ss&mntrId=40DD001D7DCACC38&affID=121564&tsp=4967
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Rich Media Downloader: {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - c:\documents and settings\marko\local settings\application data\rich media player\browserextensions\ie\RichMediaDownloader.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: Rich Media Player: {FEB703F7-E7B2-4AB0-9566-87658AC70095} - c:\documents and settings\marko\local settings\application data\rich media player\browserextensions\ie\PluginRichmediaplayer.dll
TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [KernelFaultCheck] c:\windows\system32\dumprep 0 -k
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
dRunOnce: [RunNarrator] Narrator.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - c:\documents and settings\marko\local settings\application data\rich media player\browserextensions\ie\RichMediaDownloader.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{8299DF68-FBBF-415C-A31D-9C21A6B55443} : DHCPNameServer = 192.168.1.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: AtiExtEvent - Ati2evxx.dll
AppInit_DLLs= c:\docume~1\alluse~1\applic~1\browse~1\261519~1.190\{c16c1~1\browse~1.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SecurityProviders: SecurityProviders = msapsspc.dll, schannel.dll, credssp.dll, digest.dll, msnsspc.dll
LSA: Security Packages = kerberos msv1_0 schannel wdigest tspkg
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\28.0.1500.95\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys [2013-8-1 49376]
R0 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys [2013-8-1 175176]
R0 mv61xxmm;mv61xxmm;c:\windows\system32\drivers\mv61xxmm.sys [2012-1-12 13616]
R0 mv64xxmm;mv64xxmm;c:\windows\system32\drivers\mv64xxmm.sys [2012-1-12 5632]
R0 mvxxmm;mvxxmm;c:\windows\system32\drivers\mvxxmm.sys [2012-1-12 13616]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-8-1 770344]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-8-1 369584]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2013-5-16 242240]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-8-1 29816]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-8-1 66336]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2013-8-1 46808]
R2 BrowserDefendert;BrowserDefendert;c:\documents and settings\all users\application data\browserdefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe [2013-8-7 2847696]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2013\TuneUpUtilitiesService32.exe [2013-1-31 1724192]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2013\TuneUpUtilitiesDriver32.sys [2012-11-16 10088]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-4-19 161384]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2013-5-16 1691480]
S3 cpudrv;cpudrv;c:\program files\systemrequirementslab\cpudrv.sys [2011-6-2 11336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2013-4-18 754856]
.
=============== Created Last 30 ================
.
2013-08-07 14:18:49 93976 ----a-w- c:\program files\mozilla firefox\plugins\nppluginrichmediaplayer.dll
2013-08-07 14:17:36 -------- d-----w- c:\documents and settings\marko\local settings\application data\Rich Media Player
2013-08-07 14:12:34 965120 ----a-w- c:\windows\system32\ac3filter.acm
2013-08-07 14:12:32 -------- d-----w- c:\program files\AC3Filter
2013-08-07 14:09:06 -------- d-----w- c:\program files\GRETECH
2013-08-07 13:59:34 -------- d-----w- c:\documents and settings\all users\application data\BrowserDefender
2013-08-07 13:58:12 -------- d-----w- c:\documents and settings\marko\application data\OpenCandy
2013-08-06 19:38:09 -------- d-----w- c:\documents and settings\all users\application data\Tarma Installer
2013-08-06 19:29:24 -------- d-----w- c:\program files\pazera-software
2013-08-02 01:03:56 -------- d-----w- C:\1aad19d216c515c807299b
2013-08-01 23:10:59 -------- d-----w- c:\program files\MSXML 4.0
2013-08-01 22:45:04 -------- d-----w- c:\windows\ie8updates
2013-08-01 22:16:10 29984 ----a-w- c:\windows\system32\uxtuneup.dll
2013-08-01 22:11:52 -------- d--h--w- c:\windows\Icons
2013-08-01 22:08:31 2288640 ----a-w- c:\windows\system32\TUKernel.exe
2013-08-01 21:32:36 770344 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-08-01 21:32:35 175176 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-08-01 21:32:34 49376 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-08-01 21:32:33 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-08-01 21:31:40 41664 ----a-w- c:\windows\avastSS.scr
2013-08-01 21:30:32 -------- d-----w- c:\program files\AVAST Software
2013-08-01 21:30:19 -------- d-----w- c:\documents and settings\all users\application data\AVAST Software
2013-08-01 17:02:02 2193536 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2013-08-01 17:02:02 2149888 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2013-08-01 17:02:01 2070144 -c----w- c:\windows\system32\dllcache\ntkrnlpa.exe
2013-08-01 17:02:01 2028544 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2013-08-01 16:48:27 12928 -c----w- c:\windows\system32\dllcache\usb8023x.sys
2013-08-01 16:41:17 55296 -c----w- c:\windows\system32\dllcache\msfeedsbs.dll
2013-08-01 16:41:17 247808 -c----w- c:\windows\system32\dllcache\ieproxy.dll
2013-08-01 16:41:17 12800 -c----w- c:\windows\system32\dllcache\xpshims.dll
2013-08-01 16:41:16 743424 -c----w- c:\windows\system32\dllcache\iedvtool.dll
2013-08-01 16:41:16 630272 -c----w- c:\windows\system32\dllcache\msfeeds.dll
2013-08-01 16:41:15 11112960 -c----w- c:\windows\system32\dllcache\ieframe.dll
2013-08-01 16:41:14 522240 -c----w- c:\windows\system32\dllcache\jsdbgui.dll
2013-08-01 16:41:14 2005504 -c----w- c:\windows\system32\dllcache\iertutil.dll
2013-08-01 16:34:22 3072 -c----w- c:\windows\system32\dllcache\iacenc.dll
2013-08-01 16:34:22 3072 ------w- c:\windows\system32\iacenc.dll
2013-08-01 16:20:17 -------- d-----w- c:\windows\system32\SoftwareDistribution
2013-08-01 16:15:50 -------- d-----w- c:\program files\KillProcess
2013-08-01 16:09:12 32032 ----a-w- c:\windows\system32\TURegOpt.exe
2013-08-01 16:08:57 -------- d-----w- c:\documents and settings\marko\application data\TuneUp Software
2013-08-01 16:08:49 -------- d-----w- c:\program files\TuneUp Utilities 2013
2013-08-01 16:08:39 -------- d-----w- c:\documents and settings\all users\application data\TuneUp Software
2013-08-01 16:08:19 -------- d-sh--w- c:\documents and settings\all users\application data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-07-23 12:07:45 -------- d-----w- C:\Ubisoft
2013-07-23 08:27:10 -------- d-----w- c:\documents and settings\marko\local settings\application data\Ubisoft Game Launcher
2013-07-21 15:47:06 -------- d-----w- c:\documents and settings\marko\local settings\application data\WMTools Downloaded Files
2013-07-17 00:24:55 -------- d-----w- c:\program files\SystemRequirementsLab
2013-07-17 00:24:55 -------- d-----w- c:\documents and settings\all users\application data\SystemRequirementsLab
2013-07-09 18:34:52 21504 -c--a-w- c:\windows\system32\dllcache\hidserv.dll
2013-07-09 18:34:52 21504 ----a-w- c:\windows\system32\hidserv.dll
2013-07-09 18:34:48 14592 -c--a-w- c:\windows\system32\dllcache\kbdhid.sys
2013-07-09 18:34:48 14592 ----a-w- c:\windows\system32\drivers\kbdhid.sys
2013-07-09 18:34:40 10368 -c--a-w- c:\windows\system32\dllcache\hidusb.sys
2013-07-09 18:34:40 10368 ----a-w- c:\windows\system32\drivers\hidusb.sys
2013-07-09 18:34:32 32128 -c--a-w- c:\windows\system32\dllcache\usbccgp.sys
2013-07-09 18:34:32 32128 ----a-w- c:\windows\system32\drivers\usbccgp.sys
.
==================== Find3M ====================
.
2013-06-25 09:33:17 773968 ----a-w- c:\windows\system32\msvcr100.dll
2013-06-24 18:06:06 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2013-06-12 19:48:23 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-06-12 19:48:17 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-06-12 19:48:00 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-06-12 19:35:55 144896 ----a-w- c:\windows\system32\javacpl.cpl
2013-06-07 21:56:06 920064 ----a-w- c:\windows\system32\wininet.dll
2013-06-07 21:56:06 43520 ----a-w- c:\windows\system32\licmgr10.dll
2013-06-07 21:56:05 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2013-06-07 21:55:44 385024 ----a-w- c:\windows\system32\html.iec
2013-06-04 07:23:02 562688 ----a-w- c:\windows\system32\qedit.dll
2013-06-04 01:40:45 1876736 ----a-w- c:\windows\system32\win32k.sys
2013-05-16 19:42:19 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2013-05-16 18:43:05 0 ----a-w- c:\windows\ativpsrm.bin
.
============= FINISH: 1:21:14,01 ===============





Dopuna: 08 Avg 2013 1:27

I da zaboravio sam dok se racunar pali jedno je 2 do 3 puta sporiji, kada ga palim slika leti gore dole, uglavno citav racunar je usporen dosta

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav,

Prvo idi Start > Control Panel > Add or Remove Programs

Deinstaliraj ( Uninstall ) sledece:

BrowserDefender
Rich Media Player


============= potom =============



Preuzmi zoek.exe sa ovog ili ovog linka i sačuvaj ga na Desktop.


zatvori browser i ostale pokrenute programe;
deaktiviraj zaštitni softver ( po potrebi ) Uputstvo ;
dvoklikom pokreni zoek.exe;
pričekaj da se alat startuje ...


U beli okvir prozora iskopiraj sledeći tekst:


emptyclsid;
C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe;f
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main];r
"Start Page"="https://www.google.com/";r
{A7DF592F-6E2A-45C4-9A87-4BD217D714ED};c
{FEB703F7-E7B2-4AB0-9566-87658AC70095};c
c:\documents and settings\marko\local settings\application data\rich media player\browserextensions;fs
iedefaults;
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows];r
"AppInit_DLLs"="";r
BrowserDefendert;s
FFdefaults;
c:\documents and settings\all users\application data\browserdefender;fs
c:\program files\mozilla firefox\plugins\nppluginrichmediaplayer.dll;f
c:\documents and settings\marko\local settings\application data\Rich Media Player;fs
c:\documents and settings\all users\application data\BrowserDefender;fs
c:\documents and settings\marko\application data\OpenCandy;fs
c:\documents and settings\all users\application data\Tarma Installer;fs
resethosts;
emptyalltemp;
autoclean;
ipconfig /flushdns >> %temp%\log.txt;b
filesrcm;
startupall;
firefoxlook;
chromelook;


Klikni na dugme i pričekaj da se skeniranje završi.


zoek ce po potrebi, restartovati Windows a na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Napomena:Izveštaj će biti sačuvan pod nazivom zoek-results.log na sistemskoj particiji (tipična lokacija: C:\zoek-results.log)


Kopiraj sadrzaj tog loga u poruku.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Zoek.exe Version 4.0.0.4 Updated 07-August-2013
Tool run by Marko on 08.08.2013 at 12:24:24,90.
Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Marko\My Documents\Downloads\zoek.exe [Script inserted]

==== System Restore Info ======================

08.08.2013 12:24:48 Zoek.exe System Restore Point Created Succesfully.

==== Reset Hosts File ======================

# Copyright (c) 1993-2006 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host

127.0.0.1 localhost

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-448539723-842925246-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED} deleted successfully
HKEY_USERS\S-1-5-21-448539723-842925246-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FEB703F7-E7B2-4AB0-9566-87658AC70095} deleted successfully
HKEY_USERS\S-1-5-21-448539723-842925246-1801674531-1003\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED} deleted successfully
HKEY_CLASSES_ROOT\CLSID\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{A7DF592F-6E2A-45C4-9A87-4BD217D714ED} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\BrowserDefendert deleted successfully

==== Registry Fix Code ======================

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.com/"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=""
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"bProtectTabs"=-

==== Batch Command(s) Run By Tool======================



Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


==== Deleting Files \ Folders ======================

"c:\documents and settings\marko\local settings\application data\rich media player\browserextensions" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" not deleted
"c:\program files\mozilla firefox\plugins\nppluginrichmediaplayer.dll" deleted
"C:\WINDOWS\system32\roboot.exe" deleted
"C:\WINDOWS\System32\SET76.tmp" deleted
"C:\WINDOWS\System32\SET7A.tmp" deleted
"C:\WINDOWS\System32\SET7B.tmp" deleted
"C:\WINDOWS\System32\SET82.tmp" deleted
"C:\Documents and Settings\Marko\Local Settings\Application Data\Google\Chrome\User Data\Default\bprotector web data" deleted
"C:\Documents and Settings\Marko\Desktop\Flvto Youtube Downloader.lnk" deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\bprotector.js" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23" not deleted
"c:\documents and settings\marko\local settings\application data\Rich Media Player\{3CC8798C-FCE2-4842-935F-CC2C5405CFFE}\IE\PluginRichmediaplayer.dll" deleted
"c:\documents and settings\marko\local settings\application data\Rich Media Player\{3CC8798C-FCE2-4842-935F-CC2C5405CFFE}\IE\RichMediaDownloader.dll" deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\bprotector.js" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\bprotector.js" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23" not deleted
"c:\documents and settings\all users\application data\BrowserDefender" not deleted
"c:\documents and settings\marko\local settings\application data\Rich Media Player" not deleted
"c:\documents and settings\all users\application data\BrowserDefender" not deleted
"c:\documents and settings\marko\application data\OpenCandy" deleted
"c:\documents and settings\all users\application data\Tarma Installer" deleted
"C:\Documents and Settings\Marko\Application Data\Babylon" deleted
"C:\Documents and Settings\Marko\Application Data\systweak" deleted
"C:\Documents and Settings\Marko\Application Data\OpenCandy" deleted
"C:\WINDOWS\System32\searchplugins" deleted
"C:\WINDOWS\System32\Extensions" deleted
"C:\Documents and Settings\All Users\Application Data\Tarma Installer" deleted
"C:\Documents and Settings\All Users\Application Data\Babylon" deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings" not deleted
"c:\documents and settings\marko\local settings\application data\Rich Media Player\{3CC8798C-FCE2-4842-935F-CC2C5405CFFE}" not deleted
"c:\documents and settings\marko\local settings\application data\Rich Media Player\{3CC8798C-FCE2-4842-935F-CC2C5405CFFE}\IE" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension" not deleted
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension" not deleted
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings" not deleted

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
2013-08-01 21:31:40 E9C8673674ECF840EE59ED805DBE9966 41664 ----a-w- C:\WINDOWS\avastSS.scr
====== C:\DOCUME~1\Marko\LOCALS~1\Temp ====
2013-08-07 14:02:18 DB521C3DC7B679226322033B09719ECA 339440 ----a-w- C:\DOCUME~1\Marko\LOCALS~1\Temp\uninst1.exe
====== C:\WINDOWS\system32 =====
2013-08-07 14:12:34 60803318DA3B3DA02020DE6CA130AA2B 965120 ----a-w- C:\WINDOWS\System32\ac3filter.acm
2013-08-01 22:19:54 96C9A439DCDA7643DCB20D88F6DB66F3 17272 ------w- C:\WINDOWS\System32\spmsg.dll
2013-08-01 22:16:10 08D6390A4150577C1FA0330B98485AB5 29984 ----a-w- C:\WINDOWS\System32\uxtuneup.dll
2013-08-01 22:08:31 12AE3DDA0C4B094BE2E85AA6E7A8C79C 2288640 ----a-w- C:\WINDOWS\System32\TUKernel.exe
2013-08-01 21:32:32 CFE4114B963AB0AB22F6EBEF89564194 229648 ----a-w- C:\WINDOWS\System32\aswBoot.exe
2013-08-01 16:34:22 C30B851A482C4549125F4209788791E6 3072 ------w- C:\WINDOWS\System32\iacenc.dll
2013-08-01 16:09:12 C60BAFC69A51CC383052B4FD5DB8AC66 32032 ----a-w- C:\WINDOWS\System32\TURegOpt.exe
====== C:\WINDOWS\system32\drivers =====
2013-08-01 21:32:50 FAF091AA45A6A6CF3CF94FE065950956 175 ----a-w- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
2013-08-01 21:32:50 3FFBEE694566CADB0A64D8A1ACD7DBCE 175 ----a-w- C:\WINDOWS\System32\drivers\aswSP.sys.sum
2013-08-01 21:32:50 22EA82FFE8CA4965C1994F24C35DC202 175 ----a-w- C:\WINDOWS\System32\drivers\aswVmm.sys.sum
2013-08-01 21:32:40 937300BC7C4CDF7576BCCE44E19BBB9D 369584 ----a-w- C:\WINDOWS\System32\drivers\aswSP.sys
2013-08-01 21:32:40 4AF5F360BA1E8794D32B366E45A64A0A 29816 ----a-w- C:\WINDOWS\System32\drivers\aswFsBlk.sys
2013-08-01 21:32:38 7B43265F92257A21CBFD88E7A651044C 49760 ----a-w- C:\WINDOWS\System32\drivers\aswRdr.sys
2013-08-01 21:32:37 1F71F170D90E42EFDE9633D81D5E12DC 56080 ----a-w- C:\WINDOWS\System32\drivers\aswTdi.sys
2013-08-01 21:32:36 CCD565A8A72AF7D45F9A242013870926 770344 ----a-w- C:\WINDOWS\System32\drivers\aswSnx.sys
2013-08-01 21:32:35 8CFAA2B965773A653F48F1207A9CB9C4 175176 ----a-w- C:\WINDOWS\System32\drivers\aswVmm.sys
2013-08-01 21:32:34 B680134BA1813B78B47FDD1DFF223CA5 49376 ----a-w- C:\WINDOWS\System32\drivers\aswRvrt.sys
2013-08-01 21:32:33 1F7094D4268D46F718C51286DC189791 66336 ----a-w- C:\WINDOWS\System32\drivers\aswMonFlt.sys
2013-07-09 18:34:48 9EF487A186DEA361AA06913A75B3FA99 14592 ----a-w- C:\WINDOWS\System32\drivers\kbdhid.sys
2013-07-09 18:34:40 CCF82C5EC8A7326C3066DE870C06DAF1 10368 ----a-w- C:\WINDOWS\System32\drivers\hidusb.sys
2013-07-09 18:34:32 173F317CE0DB8E21322E71B7E60A27E8 32128 ----a-w- C:\WINDOWS\System32\drivers\usbccgp.sys
====== C:\WINDOWS\Tasks ======
2013-08-01 21:32:36 206593BDEEED9024DBC9DC010058C034 362 ---ha-w- C:\WINDOWS\Tasks\avast! Emergency Update.job
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
2013-08-07 14:12:32 -------- d-----w- C:\Program Files\AC3Filter
2013-08-07 14:09:06 -------- d-----w- C:\Program Files\GRETECH
2013-08-06 19:29:24 -------- d-----w- C:\Program Files\pazera-software
2013-08-01 23:10:59 -------- d-----w- C:\Program Files\MSXML 4.0
2013-08-01 16:15:50 -------- d-----w- C:\Program Files\KillProcess
2013-08-01 16:08:49 -------- d-----w- C:\Program Files\TuneUp Utilities 2013
2013-07-23 08:17:06 -------- d-----w- C:\Program Files\Ubisoft
2013-07-17 00:24:55 -------- d-----w- C:\Program Files\SystemRequirementsLab
======= C: =====
====== C:\Documents and Settings\Marko\Application Data ======
2013-08-08 10:24:30 -------- d-----w- C:\Documents and Settings\Marko\Application Data\KillProcess
2013-08-07 23:20:22 -------- d-----r- C:\Documents and Settings\Marko\Start Menu\Programs\Administrative Tools
2013-08-07 14:18:49 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\Rich Media Player
2013-08-07 14:17:36 -------- d-----w- C:\Documents and Settings\Marko\Local Settings\Application Data\Rich Media Player
2013-08-07 14:12:37 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\AC3Filter
2013-08-07 14:09:24 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\GOM Player
2013-08-07 14:09:21 -------- d-----w- C:\Documents and Settings\Marko\Application Data\GRETECH
2013-08-07 13:59:34 -------- d-----w- C:\Documents and Settings\All Users\Application Data\BrowserDefender
2013-08-04 16:10:18 -------- d-----w- C:\Documents and Settings\LocalService\Application Data\TuneUp Software
2013-08-01 21:32:41 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
2013-08-01 16:15:50 -------- d-----w- C:\Documents and Settings\Marko\Start Menu\Programs\KillProcess
2013-08-01 16:09:08 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\TuneUp Utilities 2013\All functions
2013-08-01 16:09:08 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\TuneUp Utilities 2013
2013-08-01 16:08:57 -------- d-----w- C:\Documents and Settings\Marko\Application Data\TuneUp Software
2013-08-01 16:08:39 -------- d-----w- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2013-08-01 16:08:19 -------- d-sh--w- C:\Documents and Settings\All Users\Application Data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-08-01 13:07:06 -------- d-----w- C:\Documents and Settings\Marko\Start Menu\Programs\Flvto Youtube Downloader
2013-07-23 08:27:10 -------- d-----w- C:\Documents and Settings\Marko\Local Settings\Application Data\Ubisoft Game Launcher
2013-07-21 20:06:40 -------- d-----w- C:\Documents and Settings\Marko\Application Data\SystemRequirementsLab
2013-07-21 15:47:06 -------- d-----w- C:\Documents and Settings\Marko\Local Settings\Application Data\WMTools Downloaded Files
2013-07-17 00:24:55 -------- d-----w- C:\Documents and Settings\All Users\Application Data\SystemRequirementsLab
====== C:\Documents and Settings\Marko ======

====== C: exe-files ==
2013-08-07 23:13:44 4C47469F47FD9F8437B62A86F6E0874F 666633 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\adwcleaner.exe
2013-08-07 14:12:34 E2410B72B8D482696BC7B300F5EFAC91 198144 ----a-w- C:\Program Files\AC3Filter\spdif_test.exe
2013-08-07 14:12:34 55641BBBBDF132A41CD327F0DE10D25D 97792 ----a-w- C:\Program Files\AC3Filter\ac3config.exe
2013-08-07 14:12:32 A384E942387E0C51516FD54F5B97DFAE 1174979 ----a-w- C:\Program Files\AC3Filter\unins000.exe
2013-08-07 14:10:39 28577A1789F98076F5A32ABC78CB379E 4563950 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\ac3filter_2_5b.exe
2013-08-07 14:09:22 FF162CB0C618DB6258053662C7806BD8 108307 ----a-w- C:\Program Files\GRETECH\GomPlayer\Uninstall.exe
2013-08-07 14:04:53 8B363D73F69887DEB888B7484E6E3B01 11158200 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\GOMPLAYERENSETUP.EXE
2013-08-07 14:02:18 DB521C3DC7B679226322033B09719ECA 339440 ----a-w- C:\Documents and Settings\Marko\Local Settings\Temp\uninst1.exe
2013-08-07 13:59:45 5CBFC34F7799303C311D03CB00BBC917 54912160 ----a-w- C:\Documents and Settings\Marko\My Documents\rmi\rmp.exe
2013-08-07 13:59:43 D3BE6DAFE53839261BCA69EE9D88E912 66896 ----a-w- C:\Documents and Settings\Marko\Local Settings\Temp\rmi\download-GOMPLAYERENSETUP.EXE
2013-08-07 13:59:39 BD2D29BAF273E029BBAC627AACA37594 2847696 ----a-w- C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe
2013-08-07 13:59:37 BD2D29BAF273E029BBAC627AACA37594 2847696 ----a-w- C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe
2013-08-07 13:58:14 5CBFC34F7799303C311D03CB00BBC917 54912160 ----a-w- C:\Documents and Settings\Marko\Local Settings\Temp\rmi\rmp.exe
2013-08-07 13:57:37 ED643D474FB5BF6587154A6F35D0F611 489544 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\GOMPLAYERENSETUP-oc-jd.exe
2013-08-06 19:38:10 361ED14144827F528A83F0C5A7DF5A92 1238504 ----a-w- C:\Documents and Settings\Marko\Local Settings\Temporary Internet Files\Content.IE5\SKQYLQKO\WebCakesetup[1].exe
2013-08-06 19:26:12 37AFC1AB18143A2EB04CCAB7B5C037EA 892040 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\cbsidlm-cbsi127-Pazera_Free_MP4_to_AVI_Converter-ORG-10784027.exe
2013-08-04 14:04:57 ADB62392BC0711707E58E70186CC4AC2 10224 ----a-w- C:\Documents and Settings\Marko\Local Settings\Temp\1DC2ABC1-BAB0-7891-AFEE-F803E0A0880C\Latest\BabMaint.exe
2013-08-02 23:22:25 4171248D562805AFE0A496D6F977407C 2829544 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\hw32_420.exe
2013-08-02 01:03:36 D41D8CD98F00B204E9800998ECF8427E 0 ----a-w- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\L524IUUU\dotnetfx35setup[1].exe
2013-08-01 22:45:11 78141AD888BA82E3ABC854D229A59F07 231288 -c----w- C:\WINDOWS\ie8updates\KB2846071-IE8\spuninst\spuninst.exe
2013-08-01 22:45:07 53B0CAD5E59D74CDA47F3BA3D58F3439 174080 -c----w- C:\WINDOWS\ie8updates\KB2846071-IE8\ie4uinit.exe
2013-08-01 22:08:31 12AE3DDA0C4B094BE2E85AA6E7A8C79C 2288640 ----a-w- C:\WINDOWS\system32\TUKernel.exe
2013-08-01 21:32:32 CFE4114B963AB0AB22F6EBEF89564194 229648 ----a-w- C:\WINDOWS\system32\aswBoot.exe
2013-08-01 17:02:02 C97D686343987EEECB2600C15D4762E4 2193536 -c----w- C:\WINDOWS\system32\dllcache\ntoskrnl.exe
2013-08-01 17:02:02 C97D686343987EEECB2600C15D4762E4 2193536 ------w- C:\WINDOWS\Driver Cache\i386\ntoskrnl.exe
2013-08-01 17:02:02 0F1ECE75329996EBDCF2774F9E46623D 2149888 -c----w- C:\WINDOWS\system32\dllcache\ntkrnlmp.exe
2013-08-01 17:02:02 0F1ECE75329996EBDCF2774F9E46623D 2149888 ------w- C:\WINDOWS\Driver Cache\i386\ntkrnlmp.exe
2013-08-01 17:02:01 E9549ED22AC6A6D8A937DE88EA42646C 2070144 -c----w- C:\WINDOWS\system32\dllcache\ntkrnlpa.exe
2013-08-01 17:02:01 E9549ED22AC6A6D8A937DE88EA42646C 2070144 ------w- C:\WINDOWS\Driver Cache\i386\ntkrnlpa.exe
2013-08-01 17:02:01 70F7DF7268C6AB388319A03375DAC4E5 2028544 -c----w- C:\WINDOWS\system32\dllcache\ntkrpamp.exe
2013-08-01 17:02:01 70F7DF7268C6AB388319A03375DAC4E5 2028544 ------w- C:\WINDOWS\Driver Cache\i386\ntkrpamp.exe
2013-08-01 16:21:25 0EA95F1E762494B5D928ED4D5B5DA29B 117478104 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\avast_free_antivirus_setup.exe
2013-08-01 16:15:50 993584C3D00A2B517F57FCCDED3D9D6A 63156 ----a-w- C:\Program Files\KillProcess\uninst.exe
2013-08-01 16:09:12 C60BAFC69A51CC383052B4FD5DB8AC66 32032 ----a-w- C:\WINDOWS\system32\TURegOpt.exe
2013-08-01 15:59:49 26A4A3F678DD5CB4A62A5D777BDC89F1 47791831 ----a-r- C:\Documents and Settings\Marko\My Documents\Downloads\TuneUp Utilities 2013 v13.0.3020.7 Installer-2010kaiser.exe
2013-08-01 13:07:06 D94F6C4CE3BEB2F80A16533B79289712 146565 ----a-w- C:\Documents and Settings\Marko\Local Settings\Application Data\Flvto Youtube Downloader\UninstallFlvtoYoutubeDownloader.exe
2013-08-01 13:05:40 39D049869F19916489DC8AB8DFEA8D22 159368 ----a-w- C:\Documents and Settings\Marko\Local Settings\Application Data\Flvto Youtube Downloader\setupinit.exe
2013-08-01 13:05:25 069580BFAA29B384A23B277E8FB54167 679256 ----a-w- C:\Documents and Settings\Marko\Local Settings\Application Data\Flvto Youtube Downloader\FlvtoConverterSetupV0.3.5.exe
=== C: other files ==
2013-08-03 13:38:10 E6DDC0DF320CB7BE2D49377B0BE1C3E5 5791984 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\Realtek_Win7-64_Win7(7048).zip
2013-08-01 21:32:40 937300BC7C4CDF7576BCCE44E19BBB9D 369584 ----a-w- C:\WINDOWS\system32\drivers\aswSP.sys
2013-08-01 21:32:40 4AF5F360BA1E8794D32B366E45A64A0A 29816 ----a-w- C:\WINDOWS\system32\drivers\aswFsBlk.sys
2013-08-01 21:32:38 7B43265F92257A21CBFD88E7A651044C 49760 ----a-w- C:\WINDOWS\system32\drivers\aswRdr.sys
2013-08-01 21:32:37 1F71F170D90E42EFDE9633D81D5E12DC 56080 ----a-w- C:\WINDOWS\system32\drivers\aswTdi.sys
2013-08-01 21:32:36 CCD565A8A72AF7D45F9A242013870926 770344 ----a-w- C:\WINDOWS\system32\drivers\aswSnx.sys
2013-08-01 21:32:35 8CFAA2B965773A653F48F1207A9CB9C4 175176 ----a-w- C:\WINDOWS\system32\drivers\aswVmm.sys
2013-08-01 21:32:34 B680134BA1813B78B47FDD1DFF223CA5 49376 ----a-w- C:\WINDOWS\system32\drivers\aswRvrt.sys
2013-08-01 21:32:33 1F7094D4268D46F718C51286DC189791 66336 ----a-w- C:\WINDOWS\system32\drivers\aswMonFlt.sys
2013-08-01 16:48:27 B4D7B7AD8A9F7C063C5CC3E2C1A0724E 12928 -c----w- C:\WINDOWS\system32\dllcache\usb8023x.sys
2013-08-01 16:48:27 B4D7B7AD8A9F7C063C5CC3E2C1A0724E 12928 ------w- C:\WINDOWS\Driver Cache\i386\usb8023x.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-448539723-842925246-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE"
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"
"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"
"avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui"
"KernelFaultCheck"="%systemroot%\system32\dumprep 0 -k"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="DTLite"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe\" -autorun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skype]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Skype"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /minimized /regrun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="uTorrent"
"hkey"="HKCU"
"command"="\"C:\\Documents and Settings\\Marko\\Application Data\\uTorrent\\uTorrent.exe\" /MINIMIZED"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run-]
"DAEMON Tools Lite"="\"C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe\" -autorun"
"uTorrent"="\"C:\\Documents and Settings\\Marko\\Application Data\\uTorrent\\uTorrent.exe\" /MINIMIZED"


==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\avast\Undetermined Task.exe []
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [16.05.2013 20:36]
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [16.05.2013 20:36]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="https://www.google.com/"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Empty IE Cache ======================

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\Marko\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Documents and Settings\Marko\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\Marko\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\bprotector.js" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\bprotector.js" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22" not found
"c:\documents and settings\all users\application data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\bl" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.dll" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.exe" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserDefender.settings" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\dm" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\uninstall.exe" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\bprotector.js" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\00" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\01" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\02" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\03" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\10" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\11" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\12" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\13" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\20" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\21" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\22" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\traking_settings\23" not found
"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Documents and Settings\Marko\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"c:\documents and settings\all users\application data\BrowserDefender" not found
"c:\documents and settings\marko\local settings\application data\Rich Media Player" not found
"c:\documents and settings\all users\application data\BrowserDefender" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender" not found

==== EOF on 08.08.2013 at 12:36:41,81 ======================

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pre nego sto nastavimo zelim da pokrenes zoek isto kao malopre ali preko ove skripte:


C:\Documents and Settings\Marko\My Documents\rmi\rmp.exe;i
C:\Documents and Settings\Marko\Local Settings\Temp\rmi\rmp.exe;i


Sacekaj da se skripta izvrsi i postavi mi ovde sveze napravljen zoek log.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Zoek.exe Version 4.0.0.4 Updated 07-August-2013
Tool run by Marko on 09.08.2013 at 1:10:23,73.
Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Marko\My Documents\Downloads\zoek.exe [Script inserted]

==== Older Logs ======================

C:\zoek-results08.08.2013-1236.log 42631 bytes

==== File Information Results ======================


--- C:\Documents and Settings\Marko\My Documents\rmi\rmp.exe ---
Company: Radiocom
File Description: Rich Media Player Installer
File Version: 1.4.0.865
Product Name: Rich Media Player
Copyright: Copyright (C) Radiocom
Original Filename: rmp.exe
File type: ----a-w-
File size: 54912160
Created time: 2013-08-07 13:59:45
Modified time: 2013-08-07 14:19:09
MD5: 5CBFC34F7799303C311D03CB00BBC917
SHA1: F1E92D16B08620326EB71757BE0F3B15686B3C67


==== EOF on 09.08.2013 at 1:11:28,50 ======================

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pokreni sada zoek sa ovom skriptom:


emptyalltemp;
C:\Documents and Settings\All Users\Application Data\BrowserDefender;fs
C:\Documents and Settings\Marko\Local Settings\Temp\1DC2ABC1-BAB0-7891-AFEE-F803E0A0880C\Latest\BabMaint.exe;f
autoclean;

Okaci mi sveze napravljen Zoek log.


========= potom ==========


Preuzmi "Xplode"-ov AdwCleaner () i sacuvaj ga na Desktop

[ preuzmi svezu verziju, staru verziju koju imas obrisi ]

Dvoklikom pokreni program.
Klikni na dugme [Delete] i pricekaj da program zavrsi.
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok

Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"
Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt


==================

Kako ti sad radi sistem?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Napisano: 09 Avg 2013 16:39

Zoek.exe Version 4.0.0.4 Updated 07-August-2013
Tool run by Marko on 09.08.2013 at 16:32:01,40.
Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Marko\My Documents\Downloads\zoek.exe [Script inserted]

==== Older Logs ======================

C:\zoek-results08.08.2013-1236.log 42631 bytes
C:\zoek-results09.08.2013-0111.log 978 bytes

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

"C:\Documents and Settings\Marko\Local Settings\Temp\1DC2ABC1-BAB0-7891-AFEE-F803E0A0880C\Latest\BabMaint.exe" not found
"C:\Documents and Settings\All Users\Application Data\BrowserDefender" not found

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Unknown Url="http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC"
{6A1806CD-94D4-4689-BA73-E35EA1EA9990} Google Url="http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}"

==== Empty IE Cache ======================

C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5 emptied successfully
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Documents and Settings\Marko\Local Settings\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Profiles found

==== Empty Chrome Cache ======================

C:\Documents and Settings\Marko\Local Settings\Application Data\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\WINDOWS\Temp successfully emptied
C:\DOCUME~1\Marko\LOCALS~1\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\RECYCLER successfully emptied

==== Deleting Files / Folders ======================

"C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Documents and Settings\Marko\Local Settings\Temporary Internet Files\Content.IE5\index.dat" not found

==== EOF on 09.08.2013 at 16:38:47,75 ======================

Dopuna: 09 Avg 2013 16:46

mycity.rs/must-login.png

mycity.rs/must-login.png

Dopuna: 09 Avg 2013 17:17

a za rad racunura pa ovako malo se brze pali ali i dalje izbacuje ovaj problem

video na yt nemogu gledati nikako na 480p stopa slika a muzika ide normalno i kad god gledam neki snimak duze od 10 min racunar se izgasi

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ok, idemo jos jednom u proveru.

- Obrisi tu verziju zoeka i preuzmi svezu verziju.

- Pokreni zoek preko ove skripte:

filesrcm;
startupall;
chrdefaults;
systemscpecs;
firefoxlook;
chromelook;

- Pricekaj da zoek dovrsi analizu a kada zavrsi, postavi mi sveze kreiran zoek log

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Zoek.exe Version 4.0.0.4 Updated 07-August-2013
Tool run by Marko on 09.08.2013 at 21:06:04,12.
Microsoft Windows XP Professional 5.1.2600 Service Pack 3 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Documents and Settings\Marko\My Documents\Downloads\zoek.exe [Script inserted]

==== Older Logs ======================

C:\zoek-results08.08.2013-1236.log 42631 bytes
C:\zoek-results09.08.2013-0111.log 978 bytes
C:\zoek-results09.08.2013-1638.log 3504 bytes

==== Files Recently Created / Modified ======================

====== C:\WINDOWS ====
2013-08-01 21:31:40 E9C8673674ECF840EE59ED805DBE9966 41664 ----a-w- C:\WINDOWS\avastSS.scr
====== C:\DOCUME~1\Marko\LOCALS~1\Temp ====
====== C:\WINDOWS\system32 =====
2013-08-07 14:12:34 60803318DA3B3DA02020DE6CA130AA2B 965120 ----a-w- C:\WINDOWS\System32\ac3filter.acm
2013-08-01 22:19:54 96C9A439DCDA7643DCB20D88F6DB66F3 17272 ------w- C:\WINDOWS\System32\spmsg.dll
2013-08-01 22:16:10 08D6390A4150577C1FA0330B98485AB5 29984 ----a-w- C:\WINDOWS\System32\uxtuneup.dll
2013-08-01 22:08:31 12AE3DDA0C4B094BE2E85AA6E7A8C79C 2288640 ----a-w- C:\WINDOWS\System32\TUKernel.exe
2013-08-01 21:32:32 CFE4114B963AB0AB22F6EBEF89564194 229648 ----a-w- C:\WINDOWS\System32\aswBoot.exe
2013-08-01 16:34:22 C30B851A482C4549125F4209788791E6 3072 ------w- C:\WINDOWS\System32\iacenc.dll
2013-08-01 16:09:12 C60BAFC69A51CC383052B4FD5DB8AC66 32032 ----a-w- C:\WINDOWS\System32\TURegOpt.exe
====== C:\WINDOWS\system32\drivers =====
2013-08-09 15:23:21 4470E3C1E0C3378E4CAB137893C12C3A 22856 ----a-w- C:\WINDOWS\System32\drivers\mbam.sys
2013-08-01 21:32:50 FAF091AA45A6A6CF3CF94FE065950956 175 ----a-w- C:\WINDOWS\System32\drivers\aswSnx.sys.sum
2013-08-01 21:32:50 3FFBEE694566CADB0A64D8A1ACD7DBCE 175 ----a-w- C:\WINDOWS\System32\drivers\aswSP.sys.sum
2013-08-01 21:32:50 22EA82FFE8CA4965C1994F24C35DC202 175 ----a-w- C:\WINDOWS\System32\drivers\aswVmm.sys.sum
2013-08-01 21:32:40 937300BC7C4CDF7576BCCE44E19BBB9D 369584 ----a-w- C:\WINDOWS\System32\drivers\aswSP.sys
2013-08-01 21:32:40 4AF5F360BA1E8794D32B366E45A64A0A 29816 ----a-w- C:\WINDOWS\System32\drivers\aswFsBlk.sys
2013-08-01 21:32:38 7B43265F92257A21CBFD88E7A651044C 49760 ----a-w- C:\WINDOWS\System32\drivers\aswRdr.sys
2013-08-01 21:32:37 1F71F170D90E42EFDE9633D81D5E12DC 56080 ----a-w- C:\WINDOWS\System32\drivers\aswTdi.sys
2013-08-01 21:32:36 CCD565A8A72AF7D45F9A242013870926 770344 ----a-w- C:\WINDOWS\System32\drivers\aswSnx.sys
2013-08-01 21:32:35 8CFAA2B965773A653F48F1207A9CB9C4 175176 ----a-w- C:\WINDOWS\System32\drivers\aswVmm.sys
2013-08-01 21:32:34 B680134BA1813B78B47FDD1DFF223CA5 49376 ----a-w- C:\WINDOWS\System32\drivers\aswRvrt.sys
2013-08-01 21:32:33 1F7094D4268D46F718C51286DC189791 66336 ----a-w- C:\WINDOWS\System32\drivers\aswMonFlt.sys
====== C:\WINDOWS\Tasks ======
2013-08-01 21:32:36 97658D605339D7CB8C92685B38D784D3 362 ---ha-w- C:\WINDOWS\Tasks\avast! Emergency Update.job
====== C:\WINDOWS\Temp ======
======= C:\Program Files =====
2013-08-07 14:12:32 -------- d-----w- C:\Program Files\AC3Filter
2013-08-07 14:09:06 -------- d-----w- C:\Program Files\GRETECH
2013-08-06 19:29:24 -------- d-----w- C:\Program Files\pazera-software
2013-08-01 23:10:59 -------- d-----w- C:\Program Files\MSXML 4.0
2013-08-01 16:15:50 -------- d-----w- C:\Program Files\KillProcess
2013-08-01 16:08:49 -------- d-----w- C:\Program Files\TuneUp Utilities 2013
2013-07-23 08:17:06 -------- d-----w- C:\Program Files\Ubisoft
2013-07-17 00:24:55 -------- d-----w- C:\Program Files\SystemRequirementsLab
======= C: =====
2013-08-09 14:43:45 FD10F764E85AF854C429766F6AEA0621 1533 ----a-w- C:\AdwCleaner[S1].txt
====== C:\Documents and Settings\Marko\Application Data ======
2013-08-08 10:24:30 -------- d-----w- C:\Documents and Settings\Marko\Application Data\KillProcess
2013-08-07 23:20:22 -------- d-----r- C:\Documents and Settings\Marko\Start Menu\Programs\Administrative Tools
2013-08-07 14:18:49 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\Rich Media Player
2013-08-07 14:12:37 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\AC3Filter
2013-08-07 14:09:24 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\GOM Player
2013-08-07 14:09:21 -------- d-----w- C:\Documents and Settings\Marko\Application Data\GRETECH
2013-08-04 16:10:18 -------- d-----w- C:\Documents and Settings\LocalService\Application Data\TuneUp Software
2013-08-01 21:32:41 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\avast! Free Antivirus
2013-08-01 16:15:50 -------- d-----w- C:\Documents and Settings\Marko\Start Menu\Programs\KillProcess
2013-08-01 16:09:08 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\TuneUp Utilities 2013\All functions
2013-08-01 16:09:08 -------- d-----w- C:\Documents and Settings\All Users\Start Menu\Programs\TuneUp Utilities 2013
2013-08-01 16:08:57 -------- d-----w- C:\Documents and Settings\Marko\Application Data\TuneUp Software
2013-08-01 16:08:39 -------- d-----w- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2013-08-01 16:08:19 -------- d-sh--w- C:\Documents and Settings\All Users\Application Data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-08-01 13:07:06 -------- d-----w- C:\Documents and Settings\Marko\Start Menu\Programs\Flvto Youtube Downloader
2013-07-23 08:27:10 -------- d-----w- C:\Documents and Settings\Marko\Local Settings\Application Data\Ubisoft Game Launcher
2013-07-21 20:06:40 -------- d-----w- C:\Documents and Settings\Marko\Application Data\SystemRequirementsLab
2013-07-21 15:47:06 -------- d-----w- C:\Documents and Settings\Marko\Local Settings\Application Data\WMTools Downloaded Files
2013-07-17 00:24:55 -------- d-----w- C:\Documents and Settings\All Users\Application Data\SystemRequirementsLab
====== C:\Documents and Settings\Marko ======

====== C: exe-files ==
2013-08-09 15:21:19 683FDD3D773C58B262DC07CD0C6CE938 10285040 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\mbam-setup-1.75.0.1300.exe
2013-08-09 14:42:54 4C47469F47FD9F8437B62A86F6E0874F 666633 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\adwcleaner (1).exe
2013-08-07 23:13:44 4C47469F47FD9F8437B62A86F6E0874F 666633 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\adwcleaner.exe
2013-08-07 14:12:34 E2410B72B8D482696BC7B300F5EFAC91 198144 ----a-w- C:\Program Files\AC3Filter\spdif_test.exe
2013-08-07 14:12:34 55641BBBBDF132A41CD327F0DE10D25D 97792 ----a-w- C:\Program Files\AC3Filter\ac3config.exe
2013-08-07 14:12:32 A384E942387E0C51516FD54F5B97DFAE 1174979 ----a-w- C:\Program Files\AC3Filter\unins000.exe
2013-08-07 14:10:39 28577A1789F98076F5A32ABC78CB379E 4563950 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\ac3filter_2_5b.exe
2013-08-07 14:09:22 FF162CB0C618DB6258053662C7806BD8 108307 ----a-w- C:\Program Files\GRETECH\GomPlayer\Uninstall.exe
2013-08-07 13:59:45 5CBFC34F7799303C311D03CB00BBC917 54912160 ----a-w- C:\Documents and Settings\Marko\My Documents\rmi\rmp.exe
2013-08-06 19:26:12 37AFC1AB18143A2EB04CCAB7B5C037EA 892040 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\cbsidlm-cbsi127-Pazera_Free_MP4_to_AVI_Converter-ORG-10784027.exe
2013-08-02 23:22:25 4171248D562805AFE0A496D6F977407C 2829544 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\hw32_420.exe
=== C: other files ==
2013-08-09 15:23:21 4470E3C1E0C3378E4CAB137893C12C3A 22856 ----a-w- C:\WINDOWS\system32\drivers\mbam.sys
2013-08-03 13:38:10 E6DDC0DF320CB7BE2D49377B0BE1C3E5 5791984 ----a-w- C:\Documents and Settings\Marko\My Documents\Downloads\Realtek_Win7-64_Win7(7048).zip

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-448539723-842925246-1801674531-1003\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe"

[HKEY_USERS\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"RunNarrator"="Narrator.exe"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RTHDCPL"="RTHDCPL.EXE"
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"
"SunJavaUpdateSched"="C:\Program Files\Common Files\Java\Java Update\jusched.exe"
"avast"="C:\Program Files\AVAST Software\Avast\avastUI.exe /nogui"
"KernelFaultCheck"="%systemroot%\system32\dumprep 0 -k"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe"

==== Startup Registry Disabled ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\DAEMON Tools Lite]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="DTLite"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe\" -autorun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\Skype]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="Skype"
"hkey"="HKCU"
"command"="\"C:\\Program Files\\Skype\\Phone\\Skype.exe\" /minimized /regrun"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg\uTorrent]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="uTorrent"
"hkey"="HKCU"
"command"="\"C:\\Documents and Settings\\Marko\\Application Data\\uTorrent\\uTorrent.exe\" /MINIMIZED"


[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run-]
"DAEMON Tools Lite"="\"C:\\Program Files\\DAEMON Tools Lite\\DTLite.exe\" -autorun"
"uTorrent"="\"C:\\Documents and Settings\\Marko\\Application Data\\uTorrent\\uTorrent.exe\" /MINIMIZED"


==== Task Scheduler Jobs ======================

C:\WINDOWS\tasks\avast\Undetermined Task.exe []
C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [16.05.2013 20:36]
C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files\Google\Update\GoogleUpdate.exe [16.05.2013 20:36]

==== Reset Google Chrome ======================

C:\Documents and Settings\Marko\Local Settings\Application Data\Google\Chrome\User Data\Default\Preferences was reset successfully
C:\Documents and Settings\Marko\Local Settings\Application Data\Google\Chrome\User Data\Default\Web Data was reset successfully

==== EOF on 09.08.2013 at 21:09:53,70 ======================

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ovako, ovde ti nikada i nisi imao aktivan malware.
Imao si razne toolbarove i tome slicno, to smo ocistili + ispraznili temp i cache i resetovali browsere na podrazumevana podesavanja...itd. Ukoliko i dalje imas problema budi uveren da problem nije prouzrokovan infekciom. Ukoliko posle zadnje zoek skripte i dalje imas problema za YouTube i Google Chrome browserom, otvori novu temu u odgovarajucem forumu i izlozi problematiku tako da ti ljudi mogu pomoci. Pre toga probaj jednostavno da re-instaliras Chrome.

Kako u Ambulanti mi radimo iskljucivo na detektovanju i uklanjanju malware-a ovde se nasa prica zavrsava. Ali je od vaznosti je da uklonimo alate koje smo koristili jer oni ubacuju i neke svoje fajlove u sistem:


Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop

Dvoklikom pokreni program.

Štikliraj sledeće opcije:
Remove disinfection tools
Purge System Restore
Reset system settings

Klikni na dugme "Run" i pričekaj da program završi rad.
Kada alat završi, otvoriće izvestaj u notepadu.
Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt


Preporučujem ti da koristiš program MCShield za zaštitu USB memorijskih uređaja.

Program možeš preuzeti sa OVOG linka. Nakon instalacije programa, priključi USB memorijske uređaje, i oni će biti skenirani. Na kraju skeniranja ćeš dobiti izveštaj da je uređaj čist ili obaveštenje o uklonjenom malware-u.


Takođe, poseti ovu temu da vidiš da li ti je pretraživač ranjiv i instaliraš ažurirane komponente
http://www.mycity.rs/Propusti-i-azuriranja/Testira.....anjiv.html