offline
- Alpinab10
- Novi MyCity građanin
- Pridružio: 14 Feb 2015
- Poruke: 6
|
1.)na koji način se ispoljava problem oko koga tražite pomoć;
-Komp se sam od sebe restartuje,jedan lik (serviser)mi je rekao da je mozda do ploce,do kondezatora ili nesto slicno.
-Na internetu je spor,spor,spor,spor. Fb otvara i za 5 min,na yt ne moze lepo da se gleda,str. Polovni Automobili (tamo volim cesto da blejim) otvara jako sporo,i kad otvori jako sporo ucitava itd...
-Bucan je ,i mnogo glasan. Pasta na proc i na graf je menjana
-Monitor nekad sam od sebe zatreperi na pola minuta.
-desni klik na desktopu jako sporo radi
- u donjem desnom uglu ima crno-siva ikonica i pise (Unable to complete genuine Windows validation.)
2.)kada se taj problem počeo ispoljavati;
Ima mozda 3 meseca,ako ne i vise
3.)ukoliko zaštitni softver koji koristite nešto detektuje, a ne može da ukloni, napišite/iskopirajte nazive detektovanih datoteka u poruku;
Jeste detektovao je,ali nemam sacuvan log 
4.na koji način ste pokušali rešiti problem;
Razni softweri...
-Antivirus kao da mi je zamrznut ili blokiran,nmg da udjem u njega niti bilo sta,samo mi ikonica bleji na desktopu dole
5. kakvom internet konekcijom raspolažete (tip i brzina konekcije);
SBB,preko rutera.20mb/s ,ali na kompu kao da je 0,001 mb/s kako radi
6.bilo kakve dodatne informacije koje bi mogle pobliže opisati stanje na vašem računaru.
Ja msm da sam sve rekao... 
Greje se uzasno....
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:13-08-2015
Ran by Administrator (administrator) on LastXP21 (13-08-2015 23:35:27)
Running from C:\Users\Administrator\My Documents\Downloads
Loaded Profiles: Administrator (Available Profiles: Administrator)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2015\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgcsrvx.exe
(QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgidsagent.exe
() C:\Program Files\Drive Space Indicator\DrvSpace.exe
(Microsoft Corporation) C:\WINDOWS\system32\wscntfy.exe
(Qihu Software Co. Limited) C:\Program Files\360\Total Security\safemon\QHWatchdog.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files\AVG Web TuneUp\vprot.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2015\avgui.exe
(Safer-Networking Ltd.) C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe
(Alexander Avdonin) C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe
() C:\ppApps\RocketDock\RocketDock.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
() C:\WINDOWS\VdCap03C\StillMnt.exe
(Microsoft Corporation) C:\WINDOWS\system32\wgatray.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(AVG Secure Search) C:\Program Files\AVG Web TuneUp\avgcefrend.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [DriveSpace] => C:\Program Files\Drive Space Indicator\DrvSpace.exe [395828 2008-07-12] ()
HKLM\...\Run: [SystemTray] => C:\WINDOWS\system32\SysTray.Exe [3072 2001-08-23] (Microsoft Corporation)
HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [61440 2008-01-21] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [vProt] => C:\Program Files\AVG Web TuneUp\vprot.exe [3175312 2015-07-22] ()
HKLM\...\Run: [PinnacleDriverCheck] => C:\WINDOWS\system32\\PSDrvCheck.exe [406016 2004-03-11] ()
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2015\avgui.exe [3710416 2015-02-19] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [SDTray] => C:\Program Files\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.)
HKLM\...\Run: [StillMnt] => WCamRmv.exe /StartStillMnt
HKLM\...\Run: [QHSafeTray] => C:\Program Files\360\Total Security\safemon\QHSafeTray.exe [1286776 2015-08-10] (QIHU 360 SOFTWARE CO. LIMITED)
HKLM\...\Run: [EaseUS EPM tray] => C:\Program Files\EaseUS\EaseUS Partition Master 10.5\bin\EpmNews.exe [2089056 2015-04-14] (CHENGDU YIWO Tech Development Co., Ltd)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll [2008-02-26] (ATI Technologies Inc.)
Winlogon\Notify\SDWinLogon: SDWinLogon.dll [X]
HKLM\...\Policies\Explorer: [NoRemoteRecursiveEvents] 1
HKLM\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKLM\...\Policies\Explorer: [NoToolbarCustomize] 0
HKLM\...\Policies\Explorer: [NoBandCustomize] 0
HKLM\...\Policies\Explorer: [NoToolbarsOnTaskbar] 0
HKLM\...\Policies\Explorer: [NoSaveSettings] 0
HKLM\...\Policies\Explorer: [ClassicShell] 0
HKU\S-1-5-20\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-20\...\RunOnce: [nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-21-1708537768-823518204-1547161642-500\...\Run: [TaskSwitchXP] => C:\Program Files\TaskSwitchXP\TaskSwitchXP.exe [62976 2006-08-04] (Alexander Avdonin)
HKU\S-1-5-21-1708537768-823518204-1547161642-500\...\Run: [RocketDock] => C:\ppApps\RocketDock\RocketDock.exe [495616 2007-09-02] ()
HKU\S-1-5-21-1708537768-823518204-1547161642-500\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-18\...\RunOnce: [nltide_2] => regsvr32 /s /n /i:U shell32
HKU\S-1-5-18\...\RunOnce: [nltide_3] => rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
HKU\S-1-5-18\...\RunOnce: [NewUser] => C:\WINDOWS\LastXP\NewUser.cmd [2094 2008-05-05] ()
Lsa: [Authentication Packages] msv1_0 nwprovau
Startup: C:\Users\Administrator\Start Menu\Programs\Startup\RocketDock.lnk [2014-07-05]
ShortcutTarget: RocketDock.lnk -> C:\ppApps\RocketDock\RocketDock.exe ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
BootExecute: autocheck autochk * sdnclean.exeC:\PROGRA~1\AVG\AVG2015\avgrsx.exe /sync /restart
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\.DEFAULT\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-20\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-1708537768-823518204-1547161642-500\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.istartsurf.com/web/?type=dspp&ts=1429183323&from=smt&uid=MaxtorX6Y120L0_Y34GMGGE&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.istartsurf.com/web/?type=dspp&ts=1429183323&from=smt&uid=MaxtorX6Y120L0_Y34GMGGE&q={searchTerms}
HKU\S-1-5-21-1708537768-823518204-1547161642-500\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://search.delta-homes.com/web/?type=ds&ts=1433362259&z=d3ffb0b88c4d17fade9ab4cg8z9c4cac2qeo3o3q5e&from=wpm06033&uid=MaxtorX6Y120L0_Y34GMGGE&q={searchTerms}
HKU\S-1-5-21-1708537768-823518204-1547161642-500\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://search.delta-homes.com/web/?type=ds&ts=1433362259&z=d3ffb0b88c4d17fade9ab4cg8z9c4cac2qeo3o3q5e&from=wpm06033&uid=MaxtorX6Y120L0_Y34GMGGE&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1708537768-823518204-1547161642-500 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1708537768-823518204-1547161642-500 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1708537768-823518204-1547161642-500 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1708537768-823518204-1547161642-500 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
BHO: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO: LuckyTab Class -> {51D26BB4-4D2C-4AE4-9873-5FF41B6DED1F} -> C:\Program Files\MiuiTab\SupTab.dll No File
BHO: SSVHelper Class -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-08-03] (Oracle Corporation)
BHO: Windows Live Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2006-08-31] (Microsoft Corporation)
BHO: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files\AVG Web TuneUp\4.1.5.143\AVG Web TuneUp.dll [2015-07-22] (AVG)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-08-03] (Oracle Corporation)
BHO: BS Player Toolbar -> {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} -> C:\Program Files\BS_Player\tbBS_0.dll No File
Toolbar: HKLM - No Name - {10921475-03CE-4E04-90CE-E2E7EF20C814} - No File
Toolbar: HKLM - BS Player Toolbar - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files\BS_Player\tbBS_0.dll No File
Toolbar: HKU\S-1-5-21-1708537768-823518204-1547161642-500 -> BS Player Toolbar - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - C:\Program Files\BS_Player\tbBS_0.dll No File
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_51-windows-i586.cab
DPF: {CAFEEFAC-0018-0000-0051-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_51-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.8.0/jinstall-1_8_0_51-windows-i586.cab
Handler: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll [2007-10-18] (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - C:\Program Files\Common Files\Microsoft Shared\Information Retrieval\MSITSS.DLL [2000-04-19] (Microsoft Corporation)
Handler: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files\Windows Live\Messenger\msgrapp.8.5.1302.1018.dll [2007-10-18] (Microsoft Corporation)
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\18.2.0\ViProtocol.dll [2014-12-10] (AVG Secure Search)
Tcpip\Parameters: [DhcpNameServer] 89.216.1.30 89.216.1.50
Tcpip\..\Interfaces\{1674A17A-AC1B-4E2A-8B98-905E2475F881}: [DhcpNameServer] 89.216.1.30 89.216.1.50
Tcpip\..\Interfaces\{EFD1B97C-D93B-45C2-8A52-B458E3D5EBA9}: [DhcpNameServer] 89.216.1.30 89.216.1.50
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe istartsurf.com/?type=sc&ts=14291832.....0_Y34GMGGE
FireFox:
========
FF ProfilePath: C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default
FF Keyword.URL:
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-16] ()
FF Plugin: @adobe.com/ShockwavePlayer -> C:\WINDOWS\system32\Adobe\Director\np32dsw.dll [2008-06-17] (Adobe Systems, Inc.)
FF Plugin: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files\Common Files\AVG Secure Search\SiteSafetyInstaller\18.8.0\\npsitesafety.dll [No File]
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-08-03] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-08-03] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2007-11-07] (Microsoft Corporation)
FF Plugin: @pandonetworks.com/PandoWebPlugin -> C:\Program Files\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-15] (Google Inc.)
FF user.js: detected! => C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\user.js [2015-07-30]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\np32dsw.dll [2007-04-30] (Adobe Systems, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npLegitCheckPlugin.dll [2009-06-25] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin.dll [2015-02-16] (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin2.dll [2015-02-16] (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin3.dll [2015-02-16] (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin4.dll [2015-02-16] (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin5.dll [2015-02-16] (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin6.dll [2015-02-16] (Apple Computer, Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npqtplugin7.dll [2015-02-16] (Apple Computer, Inc.)
FF SearchPlugin: C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\searchplugins\avg-secure-search.xml [2015-07-17]
FF SearchPlugin: C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\searchplugins\delta-homes.xml [2015-07-21]
FF SearchPlugin: C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\searchplugins\istartsurf.xml [2015-07-02]
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-07-22]
FF Extension: AVG Web TuneUp - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\Extensions\avg@toolbar [2014-12-10]
FF Extension: Default SearchProtected - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\Extensions\defsearchp@gmail.com [2015-07-15]
FF Extension: QuickSearch - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\Extensions\quick_searchff@gmail.com [2015-06-03]
FF Extension: Search Enginer - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\Extensions\searchengine@gmail.com [2015-06-04]
FF Extension: Search Enginer - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\Extensions\sweetsearch@gmail.com [2015-04-16]
FF Extension: BS Player Toolbar - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\Extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} [2014-12-04]
FF Extension: neurowise - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\Extensions\{8d952e73-e32f-45f1-97c1-085cacb7c7a3}.xpi [2014-08-08]
FF Extension: neurowise - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\Extensions\{fe651286-52a1-461b-a17a-f258b4b81968}.xpi [2014-08-09]
FF HKLM\...\Firefox\Extensions: [quick_searchff@gmail.com] - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\extensions\quick_searchff@gmail.com
FF HKLM\...\Firefox\Extensions: [sweetsearch@gmail.com] - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\extensions\sweetsearch@gmail.com
FF HKLM\...\Firefox\Extensions: [searchengine@gmail.com] - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\extensions\searchengine@gmail.com
FF HKLM\...\Firefox\Extensions: [defsearchp@gmail.com] - C:\Users\Administrator\Application Data\Mozilla\Firefox\Profiles\kxle1zp7.default\extensions\defsearchp@gmail.com
FF HKLM\...\Firefox\Extensions: [WebProtection@360safe.com] - C:\Program Files\360\Total Security\safemon\webprotection_firefox
FF Extension: 360 Internet Protection - C:\Program Files\360\Total Security\safemon\webprotection_firefox [2015-08-13]
FF HKU\S-1-5-21-1708537768-823518204-1547161642-500\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\Users\All Users\Application Data\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\Users\All Users\Application Data\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]
Chrome:
=======
CHR Profile: C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default
CHR Extension: (Unfriend Notify for Facebook) - C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\ahigpjeolkfgjdaeodlmaceggigbpeoh [2015-07-19]
CHR Extension: (Google Docs) - C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-08-08]
CHR Extension: (BMW M Power) - C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gfhaolblehplannlbgaldknldolnniep [2015-08-01]
CHR Extension: (360 Internet Protection) - C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\glcimepnljoholdmjchkloafkggfoijh [2015-08-13]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-11]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Administrator\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-08-08]
CHR HKLM\...\Chrome\Extension: [bopakagnckmlgajfccecajhnimjiiedh] - clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 Adobe LM Service; C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe [72704 2014-06-21] (Adobe Systems) [File not signed]
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2015\avgidsagent.exe [3411408 2015-02-19] (AVG Technologies CZ, s.r.o.)
S2 avgwd; C:\Program Files\AVG\AVG2015\avgwdsvc.exe [308720 2015-02-19] (AVG Technologies CZ, s.r.o.)
S4 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
S3 idsvc; c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe [864256 2007-10-11] (Microsoft Corporation) [File not signed]
S4 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [235696 2014-04-09] (McAfee, Inc.)
R2 NWCWorkstation; C:\WINDOWS\System32\nwwks.dll [65536 2008-04-14] (Microsoft Corporation)
R2 QHActiveDefense; C:\Program Files\360\Total Security\safemon\QHActiveDefense.exe [858744 2015-08-10] (QIHU 360 SOFTWARE CO. LIMITED)
S4 SDScannerService; C:\Program Files\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.)
S4 SDUpdateService; C:\Program Files\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.)
S4 SDWSCService; C:\Program Files\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.)
S3 TuneUp.Defrag; C:\WINDOWS\System32\TuneUpDefragService.exe [307968 2014-05-13] (TuneUp Software GmbH)
S3 vToolbarUpdater18.8.0; C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\18.8.0\ToolbarUpdater.exe [1874320 2015-07-22] (AVG Secure Search)
S4 WtuSystemSupport; C:\Program Files\AVG Web TuneUp\WtuSystemSupport.exe [1195920 2015-07-22] ()
S4 WindowsMangerProtect; C:\Users\All Users\Application Data\WindowsMangerProtect\ProtectWindowsManager.exe -service [X] <==== ATTENTION
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 360AntiHacker; C:\WINDOWS\System32\Drivers\360AntiHacker.sys [121936 2015-08-10] (360.cn)
R3 360AvFlt; C:\WINDOWS\System32\DRIVERS\360AvFlt.sys [66128 2015-08-10] (360.cn)
R1 360Box; C:\WINDOWS\System32\DRIVERS\360Box.sys [203856 2015-08-10] (360.cn)
R1 360Camera; C:\WINDOWS\System32\Drivers\360Camera.sys [34888 2015-08-10] (360.cn)
R1 360SelfProtection; C:\WINDOWS\System32\drivers\360SelfProtection.sys [178384 2015-08-10] (360安全中心)
R3 ASAPIW2K; C:\WINDOWS\System32\Drivers\ASAPIW2K.sys [11264 2005-01-10] (VOB Computersysteme GmbH) [File not signed]
S3 aswTap; C:\WINDOWS\System32\DRIVERS\aswTap.sys [35144 2014-08-08] (The OpenVPN Project)
R1 Avgdiskx; C:\WINDOWS\System32\DRIVERS\avgdiskx.sys [121624 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriverl; C:\WINDOWS\System32\DRIVERS\avgidsdriverlx.sys [202208 2015-02-19] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [154904 2014-11-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [21272 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [192792 2014-08-28] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [265184 2015-02-03] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [107488 2015-01-23] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [27416 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [210400 2015-01-16] (AVG Technologies CZ, s.r.o.)
R1 BAPIDRV; C:\WINDOWS\System32\DRIVERS\BAPIDRV.sys [174672 2015-08-10] (360.cn)
R3 Cam5603C; C:\WINDOWS\System32\Drivers\VdCap03C.sys [350299 2004-07-14] ()
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [16384 2004-07-09] (Microsoft Corporation)
R3 cmuda; C:\WINDOWS\System32\drivers\cmuda.sys [1372992 2006-06-26] (C-Media Inc) [File not signed]
R1 dtsoftbus01; C:\WINDOWS\System32\DRIVERS\dtsoftbus01.sys [243128 2014-07-22] (Disc Soft Ltd)
R1 EfiMon; C:\WINDOWS\System32\Drivers\Efimon.sys [24296 2015-08-10] (360.cn)
S3 epmntdrv; C:\WINDOWS\system32\epmntdrv.sys [14944 2014-11-18] ()
S3 EuGdiDrv; C:\WINDOWS\system32\EuGdiDrv.sys [10208 2014-11-18] ()
R0 HookPort; C:\WINDOWS\System32\Drivers\Hookport.sys [65872 2015-08-10] (360安全中心)
R3 ip100xp; C:\WINDOWS\System32\DRIVERS\ipfnd51.sys [26752 2005-02-02] (IC Plus Corp. )
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10112 2004-07-09] (Microsoft Corporation)
R2 NwlnkIpx; C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys [88320 2008-04-14] (Microsoft Corporation)
R2 NwlnkNb; C:\WINDOWS\System32\DRIVERS\nwlnknb.sys [63232 2001-08-23] (Microsoft Corporation)
R2 NwlnkSpx; C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys [55936 2001-08-23] (Microsoft Corporation)
R3 NWRDR; C:\WINDOWS\System32\DRIVERS\nwrdr.sys [163584 2008-04-14] (Microsoft Corporation)
R1 qutmdserv; C:\WINDOWS\System32\DRIVERS\qutmdrv.sys [292560 2015-08-10] (360.cn)
R1 qutmipc; C:\WINDOWS\system32\drivers\qutmipc.sys [53960 2015-08-10] (360.cn)
R0 sfdrv01; C:\WINDOWS\System32\drivers\sfdrv01.sys [50688 2005-08-10] (Protection Technology) [File not signed]
R0 sfhlp02; C:\WINDOWS\System32\drivers\sfhlp02.sys [6656 2005-05-16] (Protection Technology) [File not signed]
R0 sfsync02; C:\WINDOWS\System32\drivers\sfsync02.sys [19968 2005-08-10] (Protection Technology) [File not signed]
R0 sfvfs02; C:\WINDOWS\System32\drivers\sfvfs02.sys [66560 2005-08-24] (Protection Technology) [File not signed]
S3 cpuz138; \??\C:\Windows\Temp\cpuz138\cpuz138_x32.sys [X]
S4 IntelIde; no ImagePath
S3 usbbus; system32\DRIVERS\lgusbbus.sys [X]
S3 UsbDiag; system32\DRIVERS\lgusbdiag.sys [X]
S3 USBModem; system32\DRIVERS\lgusbmodem.sys [X]
S0 usbohci; system32\DRIVERS\usbohci.sys [X]
U1 WS2IFSL; no ImagePath
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2099-11-01 21:48 - 2008-04-13 15:15 - 00026368 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBSTOR.SYS
2099-10-18 03:41 - 6093-10-18 03:41 - 00000000 ____D C:\Users\Administrator\Application Data\MPC-HC
2099-03-01 00:28 - 2099-03-01 00:28 - 00000000 __SHD C:\Users\NetworkService\IETldCache
2015-08-13 23:34 - 2015-08-13 23:35 - 00000000 ____D C:\FRST
2015-08-13 19:36 - 2015-08-13 19:36 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB2660649$
2015-08-13 19:35 - 2015-08-13 19:36 - 00006389 _____ C:\WINDOWS\KB2660649.log
2015-08-13 19:35 - 2012-02-03 11:54 - 01023488 ____N () C:\WINDOWS\system32\dllcache\nbdoc.dll
2015-08-13 19:35 - 2012-02-03 11:54 - 00804864 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jntfiltr.dll
2015-08-13 19:35 - 2012-02-03 11:54 - 00773632 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\jnwdrv.dll
2015-08-13 11:13 - 2015-08-13 11:14 - 00006230 _____ C:\WINDOWS\KB943232-v2.log
2015-08-13 11:13 - 2015-08-13 11:13 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB943232-v2$
2015-08-13 11:12 - 2015-08-13 11:12 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB982316$
2015-08-13 11:11 - 2015-08-13 11:13 - 00007041 _____ C:\WINDOWS\KB982316.log
2015-08-13 11:10 - 2015-08-13 11:11 - 00008145 _____ C:\WINDOWS\KB953155.log
2015-08-13 11:10 - 2015-08-13 11:10 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB953155$
2015-08-13 11:09 - 2015-08-13 11:14 - 00000761 _____ C:\WINDOWS\updspapi.log
2015-08-13 11:09 - 2008-08-28 09:46 - 00104960 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\win32spl.dll
2015-08-13 11:09 - 2008-08-28 09:46 - 00074752 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\msw3prt.dll
2015-08-13 11:08 - 2015-08-13 11:08 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB951830$
2015-08-13 11:08 - 2008-04-21 20:44 - 00330752 ____N (Microsoft Corporation) C:\WINDOWS\system32\dllcache\ipnathlp.dll
2015-08-13 11:07 - 2015-08-13 19:15 - 00001084 _____ C:\WINDOWS\spupdsvc.log
2015-08-13 11:07 - 2015-08-13 11:07 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB929399$
2015-08-13 11:04 - 2015-08-13 19:36 - 00046705 _____ C:\WINDOWS\iis6.log
2015-08-13 11:04 - 2015-08-13 19:36 - 00043279 _____ C:\WINDOWS\FaxSetup.log
2015-08-13 11:04 - 2015-08-13 19:36 - 00019749 _____ C:\WINDOWS\tsoc.log
2015-08-13 11:04 - 2015-08-13 19:36 - 00014472 _____ C:\WINDOWS\comsetup.log
2015-08-13 11:04 - 2015-08-13 19:36 - 00013216 _____ C:\WINDOWS\msmqinst.log
2015-08-13 11:04 - 2015-08-13 19:36 - 00008772 _____ C:\WINDOWS\ntdtcsetup.log
2015-08-13 11:04 - 2015-08-13 19:36 - 00002163 _____ C:\WINDOWS\msgsocm.log
2015-08-13 11:04 - 2015-08-13 19:36 - 00001374 _____ C:\WINDOWS\imsins.log
2015-08-13 11:04 - 2015-08-13 11:14 - 00001374 _____ C:\WINDOWS\imsins.BAK
2015-08-13 11:04 - 2015-08-13 11:07 - 00008552 _____ C:\WINDOWS\KB929399.log
2015-08-13 11:03 - 2015-08-13 19:36 - 00032228 _____ C:\WINDOWS\ocgen.log
2015-08-13 11:03 - 2015-08-13 11:03 - 00000000 __HDC C:\WINDOWS\$NtUninstallKB939683$
2015-08-13 11:00 - 2015-08-13 11:04 - 00008038 _____ C:\WINDOWS\KB939683.log
2015-08-13 10:56 - 2015-08-13 10:56 - 00000000 ____D C:\Users\NetworkService\Application Data\360safe
2015-08-13 04:45 - 2015-08-13 23:32 - 00000000 __SHD C:\$360Section
2015-08-13 04:17 - 2015-08-13 04:24 - 00000000 ____D C:\Users\LocalService\Application Data\360safe
2015-08-13 03:55 - 2015-08-13 23:32 - 00000000 ____D C:\Users\All Users\Application Data\360Quarant
2015-08-13 03:52 - 2015-08-13 23:32 - 00000000 ____D C:\Users\Administrator\Application Data\360safe
2015-08-13 03:52 - 2015-08-13 19:26 - 00000000 ____D C:\WINDOWS\Tasks\360Disabled
2015-08-13 03:51 - 2015-08-13 22:30 - 00000000 ____D C:\Users\Administrator\Application Data\360WD
2015-08-13 03:51 - 2015-08-13 03:51 - 00000000 ____D C:\Users\All Users\Application Data\360TotalSecurity
2015-08-13 03:51 - 2015-08-13 03:51 - 00000000 ____D C:\Users\Administrator\Application Data\360TotalSecurity
2015-08-13 03:50 - 2015-08-13 03:52 - 00000000 ____D C:\Users\All Users\Application Data\360safe
2015-08-13 03:50 - 2015-08-10 15:56 - 00178384 _____ (360安全中心) C:\WINDOWS\system32\Drivers\360SelfProtection.sys
2015-08-13 03:50 - 2015-08-10 15:56 - 00053960 _____ (360.cn) C:\WINDOWS\system32\Drivers\qutmipc.sys
2015-08-13 03:49 - 2015-08-13 03:49 - 00000802 _____ C:\Users\All Users\Desktop\360 Total Security.lnk
2015-08-13 03:49 - 2015-08-13 03:49 - 00000000 _RSHD C:\360SANDBOX
2015-08-13 03:49 - 2015-08-13 03:49 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\360 Security Center
2015-08-13 03:49 - 2015-08-10 15:56 - 00292560 _____ (360.cn) C:\WINDOWS\system32\Drivers\qutmdrv.sys
2015-08-13 03:49 - 2015-08-10 15:56 - 00203856 _____ (360.cn) C:\WINDOWS\system32\Drivers\360Box.sys
2015-08-13 03:49 - 2015-08-10 15:56 - 00174672 _____ (360.cn) C:\WINDOWS\system32\Drivers\BAPIDRV.SYS
2015-08-13 03:49 - 2015-08-10 15:56 - 00121936 _____ (360.cn) C:\WINDOWS\system32\Drivers\360AntiHacker.sys
2015-08-13 03:49 - 2015-08-10 15:56 - 00066128 _____ (360.cn) C:\WINDOWS\system32\Drivers\360AvFlt.sys
2015-08-13 03:49 - 2015-08-10 15:56 - 00065872 _____ (360安全中心) C:\WINDOWS\system32\Drivers\hookport.sys
2015-08-13 03:49 - 2015-08-10 15:56 - 00034888 _____ (360.cn) C:\WINDOWS\system32\Drivers\360Camera.sys
2015-08-13 03:49 - 2015-08-10 15:56 - 00024296 _____ (360.cn) C:\WINDOWS\system32\Drivers\efimon.sys
2015-08-13 03:46 - 2015-08-13 03:46 - 00000000 ____D C:\Program Files\360
2015-08-12 02:12 - 2015-08-12 02:13 - 00000120 _____ C:\WINDOWS\setupact.log
2015-08-12 02:12 - 2015-08-12 02:12 - 00000000 _____ C:\WINDOWS\setuperr.log
2015-08-10 17:25 - 2015-08-10 17:25 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\Adobe Photoshop CS6
2015-08-05 03:32 - 2015-08-12 03:13 - 00054156 ____H C:\WINDOWS\QTFont.qfn
2015-08-05 03:32 - 2015-08-05 03:32 - 00001409 _____ C:\WINDOWS\QTFont.for
2015-08-04 18:12 - 2015-08-04 18:12 - 00000000 ____D C:\WINDOWS\VdCap03C
2015-08-04 18:12 - 2008-04-13 19:42 - 00057344 _____ (Microsoft Corporation) C:\WINDOWS\vfwwdm32.dll
2015-08-04 18:09 - 2015-08-05 00:49 - 00000000 ____D C:\WINDOWS\Album
2015-08-04 18:09 - 2015-08-04 18:09 - 00000619 _____ C:\Users\All Users\Desktop\VideoCAM Slim USB2.lnk
2015-08-04 18:09 - 2015-08-04 18:09 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\VideoCAM Slim USB2
2015-08-04 18:09 - 2015-08-04 18:09 - 00000000 ____D C:\Program Files\KYE
2015-08-04 18:09 - 2004-07-14 16:29 - 00350299 _____ () C:\WINDOWS\system32\Drivers\VdCap03C.sys
2015-08-04 18:09 - 2004-05-24 14:22 - 00003021 _____ C:\WINDOWS\system32\Drivers\CamH3111.bin
2015-08-04 18:09 - 2004-05-24 14:22 - 00003021 _____ C:\WINDOWS\system32\Drivers\CamH2111.bin
2015-08-04 18:09 - 2004-05-24 14:22 - 00003021 _____ C:\WINDOWS\system32\Drivers\CamH0121.bin
2015-08-04 18:09 - 2004-05-24 14:22 - 00003021 _____ C:\WINDOWS\system32\Drivers\CamH0111.bin
2015-08-04 18:09 - 2004-05-24 14:22 - 00003021 _____ C:\WINDOWS\system32\Drivers\CamF3111.bin
2015-08-04 18:09 - 2004-05-24 14:22 - 00003021 _____ C:\WINDOWS\system32\Drivers\CamF2111.bin
2015-08-04 18:09 - 2004-05-24 14:22 - 00003021 _____ C:\WINDOWS\system32\Drivers\CamF0121.bin
2015-08-04 18:09 - 2004-05-24 14:22 - 00003021 _____ C:\WINDOWS\system32\Drivers\CamF0111.bin
2015-08-04 18:09 - 2004-05-17 13:20 - 00027492 _____ C:\WINDOWS\system\SenF0111.csr
2015-08-04 18:09 - 2004-05-17 13:20 - 00027491 _____ C:\WINDOWS\system\SenF0121.csr
2015-08-04 18:09 - 2004-05-17 13:20 - 00025615 _____ C:\WINDOWS\system\SenH0111.csr
2015-08-04 18:09 - 2004-05-17 13:20 - 00024904 _____ C:\WINDOWS\system\SenH3111.csr
2015-08-04 18:09 - 2004-05-17 13:20 - 00024904 _____ C:\WINDOWS\system\SenF3111.csr
2015-08-04 18:09 - 2004-05-17 13:20 - 00021923 _____ C:\WINDOWS\system\SenH0121.csr
2015-08-04 18:09 - 2004-05-17 13:20 - 00016307 _____ C:\WINDOWS\system\SenF2111.csr
2015-08-04 18:09 - 2004-05-17 13:20 - 00015861 _____ C:\WINDOWS\system\SenH2111.csr
2015-08-04 18:09 - 2004-04-12 19:37 - 00045056 _____ C:\WINDOWS\system\WCamRmv.EXE
2015-08-04 18:09 - 2004-02-18 14:00 - 00081920 _____ () C:\WINDOWS\system32\VfwExtC.dll
2015-08-04 18:09 - 2004-02-18 13:58 - 00077824 _____ () C:\WINDOWS\system\FiltProp.dll
2015-08-04 18:09 - 2003-09-22 14:36 - 00013448 _____ C:\WINDOWS\VdTwn03C.src
2015-08-04 18:09 - 2003-09-22 13:49 - 00015190 _____ C:\WINDOWS\VdTwn03C.ini
2015-08-04 18:09 - 2003-08-05 20:41 - 00040960 _____ C:\WINDOWS\system32\VfwECamC.dll
2015-08-04 17:25 - 2015-08-04 17:25 - 00000663 _____ C:\Users\All Users\Start Menu\Programs\Opera.lnk
2015-08-04 17:25 - 2015-08-04 17:25 - 00000000 ____D C:\Users\Administrator\Application Data\Opera Software
2015-08-04 13:03 - 2015-08-12 11:16 - 00000000 ____D C:\Users\Administrator\Application Data\AIMP3
2015-08-04 13:03 - 2015-08-04 13:03 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\AIMP3
2015-08-04 13:02 - 2015-08-04 13:03 - 00000000 ____D C:\Program Files\AIMP3
2015-08-03 03:22 - 2015-08-03 03:22 - 00000000 ____D C:\Users\All Users\Application Data\Sun
2015-08-03 03:22 - 2015-08-03 03:20 - 00096352 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge.dll
2015-08-03 03:21 - 2015-08-03 03:21 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\Java
2015-08-03 03:20 - 2015-08-03 03:20 - 00000000 ____D C:\Users\All Users\Application Data\Oracle
2015-07-30 14:55 - 2015-07-30 14:55 - 00000648 _____ C:\Users\All Users\Start Menu\Programs\Audacity.lnk
2015-07-29 19:51 - 2015-08-13 19:37 - 00157535 _____ C:\WINDOWS\setupapi.log
2015-07-24 15:23 - 2015-07-24 15:23 - 00000104 _____ C:\Users\Administrator\My Documents\LAN.lnk
2015-07-24 14:08 - 2015-07-24 14:08 - 00000000 ____D C:\Program Files\Common Files\reFX
2015-07-24 13:54 - 2015-07-24 13:54 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\reFX
2015-07-24 13:54 - 2015-07-24 13:54 - 00000000 ____D C:\Program Files\Common Files\Digidesign
2015-07-24 13:54 - 2009-10-24 21:15 - 01332224 _____ (AD © 2009) C:\WINDOWS\system32\SYNSOEMU.DLL
2015-07-23 10:29 - 2015-08-13 23:26 - 00000644 _____ C:\WINDOWS\Tasks\Check for updates (Spybot - Search & Destroy).job
2015-07-23 10:29 - 2015-08-12 00:36 - 00000616 _____ C:\WINDOWS\Tasks\Refresh immunization (Spybot - Search & Destroy).job
2015-07-23 10:29 - 2015-08-01 00:30 - 00000446 _____ C:\WINDOWS\Tasks\Scan the system (Spybot - Search & Destroy).job
2015-07-23 10:28 - 2015-07-23 10:28 - 00001842 _____ C:\Users\All Users\Start Menu\Programs\Spybot-S&D Start Center.lnk
2015-07-23 10:28 - 2015-07-23 10:28 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\Spybot - Search & Destroy 2
2015-07-23 10:27 - 2013-09-20 10:49 - 00018968 _____ (Safer Networking Limited) C:\WINDOWS\system32\sdnclean.exe
2015-07-22 17:33 - 2015-07-22 17:33 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\AVG
2015-07-22 15:30 - 2015-08-13 23:07 - 00000000 _____ C:\WINDOWS\MEMORY.DMP
2015-07-22 15:20 - 2015-07-22 15:21 - 00000956 ____H C:\WINDOWS\EPMBatch.ept
2015-07-22 15:10 - 2015-07-22 15:10 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\EaseUS Partition Master 10.5
2015-07-22 15:09 - 2015-04-16 11:15 - 02536072 _____ C:\WINDOWS\system32\BootMan.exe
2015-07-22 15:09 - 2014-11-18 14:46 - 00021088 _____ C:\WINDOWS\system32\EuEpmGdi.dll
2015-07-22 15:09 - 2014-11-18 14:39 - 00014944 _____ C:\WINDOWS\system32\epmntdrv.sys
2015-07-22 15:09 - 2014-11-18 14:39 - 00010208 _____ C:\WINDOWS\system32\EuGdiDrv.sys
2015-07-22 15:09 - 2014-11-18 14:38 - 00088160 _____ C:\WINDOWS\system32\setupempdrv03.exe
2015-07-22 15:07 - 2015-07-22 15:07 - 00000000 ____D C:\Program Files\EaseUS
2015-07-20 17:35 - 2015-07-20 17:35 - 00000000 ____D C:\Program Files\Common Files\Propellerhead Software
2015-07-20 17:34 - 2015-07-20 17:34 - 00000000 ____D C:\Users\Administrator\My Documents\Image-Line
2015-07-20 17:34 - 2015-07-20 17:34 - 00000000 ____D C:\Users\Administrator\Application Data\Image-Line
2015-07-20 17:33 - 2015-07-20 17:34 - 00000000 ____D C:\Users\Administrator\Start Menu\Programs\Image-Line
2015-07-20 17:33 - 2015-07-20 17:33 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\Image-Line
2015-07-20 17:07 - 2015-07-20 17:07 - 00000000 ____D C:\Program Files\Image-Line
2015-07-18 13:14 - 2015-07-18 13:18 - 00000000 ____D C:\Users\Administrator\My Documents\VirtualDJ
2015-07-18 13:14 - 2015-07-18 13:14 - 00000000 ____D C:\Users\Administrator\Start Menu\Programs\VirtualDJ
2015-07-17 07:12 - 2015-07-18 04:00 - 00065536 _____ C:\WINDOWS\system32\config\TuneUp.evt
2015-07-17 07:11 - 2015-07-17 07:11 - 00000000 ____D C:\Users\Administrator\Application Data\AVG
2015-07-17 07:06 - 2015-07-17 07:12 - 00000000 ____D C:\Users\All Users\Application Data\AVG
2015-07-17 06:52 - 2015-07-17 06:52 - 00002968 _____ C:\bootex.log
2015-07-17 06:24 - 2015-07-17 06:24 - 00000000 ____D C:\Users\All Users\Start Menu\Programs\CPUID
2015-07-15 20:32 - 2015-07-15 20:32 - 00000000 ____D C:\Users\Administrator\Application Data\WinZipper
2015-07-15 20:32 - 2015-07-15 20:32 - 00000000 ____D C:\Program Files\WinZipper
2015-07-15 20:30 - 2015-07-30 19:33 - 00000000 ____D C:\Users\Administrator\Application Data\MailUpdate
2015-07-15 20:30 - 2015-07-17 00:29 - 00000000 ____D C:\Users\All Users\Application Data\MailUpdate
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-08-13 23:27 - 2014-12-30 22:06 - 00447975 _____ C:\Users\Administrator\debug.log
2015-08-13 23:27 - 2014-08-01 20:05 - 01378592 _____ C:\WINDOWS\WindowsUpdate.log
2015-08-13 23:24 - 2014-08-08 21:24 - 00000882 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-13 23:24 - 2014-06-20 20:01 - 00000159 _____ C:\WINDOWS\wiadebug.log
2015-08-13 23:24 - 2014-06-20 20:01 - 00000050 _____ C:\WINDOWS\wiaservc.log
2015-08-13 23:24 - 2014-05-13 12:39 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-08-13 23:21 - 2014-08-08 20:49 - 00000830 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-08-13 23:19 - 2014-05-13 13:01 - 00393216 _____ C:\WINDOWS\system32\config\ACEEvent.evt
2015-08-13 23:14 - 2014-08-08 21:24 - 00000886 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-13 22:56 - 2014-05-13 12:39 - 00032530 _____ C:\WINDOWS\SchedLgU.Txt
2015-08-13 19:35 - 2014-05-13 12:21 - 00000000 ___HD C:\WINDOWS\$hf_mig$
2015-08-13 11:13 - 2014-05-13 13:49 - 00000000 ____D C:\WINDOWS\security
2015-08-13 10:55 - 2014-05-13 12:39 - 00000000 __SHD C:\Users\NetworkService
2015-08-13 04:45 - 2015-06-03 22:12 - 00000000 ____D C:\Program Files\MiuiTab
2015-08-13 04:45 - 2015-04-16 13:22 - 00000000 ____D C:\Users\All Users\Application Data\WindowsMangerProtect
2015-08-13 04:45 - 2014-05-13 12:48 - 00000000 ____D C:\Program Files\SetupSetupS
2015-08-13 03:39 - 2014-05-13 12:43 - 00012976 _____ C:\WINDOWS\system32\Notepad2.ini
2015-08-12 20:20 - 2014-05-13 12:50 - 00000000 ____D C:\Users\Administrator\Application Data\uTorrent
2015-08-12 18:06 - 2014-06-23 01:26 - 00000069 _____ C:\WINDOWS\NeroDigital.ini
2015-08-12 11:45 - 2014-05-13 12:40 - 00000278 ___SH C:\Users\Administrator\ntuser.ini
2015-08-12 03:12 - 2014-06-23 13:09 - 00000000 ____D C:\Users\Administrator\My Documents\My PSP Files
2015-08-12 01:37 - 2014-05-13 13:54 - 00000231 __RSH C:\boot.ini
2015-08-12 01:37 - 2014-05-13 12:40 - 00000000 ____D C:\Users\Administrator
2015-08-12 01:37 - 2001-08-23 14:00 - 00000624 _____ C:\WINDOWS\win.ini
2015-08-12 01:37 - 2001-08-23 14:00 - 00000246 _____ C:\WINDOWS\system.ini
2015-08-04 18:12 - 2014-05-13 13:49 - 00000000 ____D C:\WINDOWS\twain_32
2015-08-04 18:12 - 2014-05-13 13:49 - 00000000 ____D C:\WINDOWS\system
2015-08-04 18:09 - 2014-05-13 12:56 - 00000000 ___HD C:\Program Files\InstallShield Installation Information
2015-08-03 15:24 - 2001-08-23 14:00 - 00002206 _____ C:\WINDOWS\system32\wpa.dbl
2015-08-03 03:24 - 2015-04-06 01:05 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-08-03 03:24 - 2014-05-13 12:35 - 00000000 ____D C:\Program Files\Java
2015-08-03 03:24 - 2014-05-13 12:35 - 00000000 ____D C:\Program Files\Common Files\Java
2015-08-03 03:20 - 2014-05-13 12:35 - 00146432 _____ (Oracle Corporation) C:\WINDOWS\system32\javacpl.cpl
2015-07-31 16:06 - 2014-08-01 19:41 - 00000000 ____D C:\Users\All Users\Application Data\MFAData
2015-07-31 15:56 - 2014-08-08 20:01 - 00000273 _____ C:\WINDOWS\wininit.ini
2015-07-31 15:55 - 2014-08-01 20:08 - 00000000 ____D C:\Users\All Users\Application Data\Spybot - Search & Destroy
2015-07-30 23:54 - 2014-05-13 12:43 - 00001486 _____ C:\WINDOWS\system32\Universal Silent Switch Finder.lnk
2015-07-30 22:43 - 2014-05-13 12:20 - 00001607 _____ C:\Users\All Users\Start Menu\Set Program Access and Defaults.lnk
2015-07-30 22:43 - 2014-05-13 12:20 - 00001599 _____ C:\Users\Default User\Start Menu\Programs\Remote Assistance.lnk
2015-07-30 22:42 - 2014-05-13 12:15 - 00001574 _____ C:\Users\All Users\Start Menu\Microsoft Update.lnk
2015-07-30 22:35 - 2014-05-13 12:42 - 00001635 ____S C:\Users\Administrator\Start Menu\Programs\Clean Start Menu.lnk
2015-07-30 19:31 - 2014-08-09 00:25 - 00000803 _____ C:\Users\Administrator\Start Menu\Programs\Internet Explorer.lnk
2015-07-30 19:31 - 2014-08-01 20:18 - 00000730 _____ C:\Users\All Users\Start Menu\Programs\Mozilla Firefox.lnk
2015-07-30 15:02 - 2014-10-11 18:28 - 00000000 ____D C:\Users\Administrator\Application Data\Audacity
2015-07-25 20:21 - 2014-07-22 22:27 - 00000000 ____D C:\Users\Administrator\Application Data\DAEMON Tools Lite
2015-07-25 20:10 - 2015-02-15 17:14 - 00000000 ____D C:\Users\Administrator\My Documents\GTA San Andreas User Files
2015-07-25 19:55 - 1999-03-01 00:13 - 00000000 ____D C:\Games
2015-07-23 12:04 - 1999-03-01 00:13 - 00000405 _____ C:\Users\Administrator\Desktop\Igre.lnk
2015-07-23 12:03 - 1999-03-01 00:13 - 00000421 _____ C:\Users\Administrator\Desktop\Programi.lnk
2015-07-23 12:02 - 1999-03-01 00:16 - 00000421 _____ C:\Users\Administrator\Desktop\Internet.lnk
2015-07-23 11:45 - 2014-05-13 13:09 - 00001401 ____S C:\Users\Administrator\Desktop\Explorer.lnk
2015-07-23 10:41 - 2014-08-01 20:08 - 00000000 ____D C:\Program Files\Spybot - Search & Destroy 2
2015-07-23 00:33 - 2014-12-10 17:20 - 00002485 _____ C:\WINDOWS\system32\debug.log
2015-07-22 19:04 - 2014-12-10 17:15 - 00000000 ____D C:\Program Files\AVG Web TuneUp
2015-07-22 17:34 - 2014-10-21 11:28 - 00000000 ____D C:\Users\All Users\Application Data\AVG2015
2015-07-22 17:34 - 2014-09-01 23:56 - 00000000 ___HD C:\$AVG
2015-07-22 15:36 - 2014-05-13 13:49 - 00000000 ____D C:\WINDOWS\system32\ias
2015-07-22 04:07 - 2014-06-20 19:32 - 00000000 ____D C:\WINDOWS\pss
2015-07-20 16:08 - 2014-09-28 21:03 - 00004096 _____ C:\WINDOWS\system32\crash
2015-07-20 14:51 - 2014-05-13 12:34 - 00000000 ____D C:\Program Files\Common Files\InstallShield
2015-07-18 10:26 - 2014-05-13 14:05 - 00079690 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-07-18 03:59 - 2014-08-31 19:03 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-07-17 08:04 - 2014-08-01 21:22 - 00000000 ____D C:\Users\Administrator\Application Data\Skype
2015-07-17 07:26 - 2014-08-01 19:54 - 00000000 ___RD C:\Users\Administrator\Desktop\Antivirus
2015-07-17 07:08 - 2014-09-01 23:55 - 00000000 ____D C:\Program Files\AVG
2015-07-16 10:22 - 2014-08-08 20:49 - 00778416 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2015-07-16 10:22 - 2014-08-08 20:49 - 00142512 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
==================== Files in the root of some directories =======
2014-11-02 01:05 - 2014-11-02 01:05 - 0022328 _____ () C:\Users\Administrator\Application Data\PnkBstrK.sys
2014-11-12 18:26 - 2015-08-12 18:07 - 0007168 _____ () C:\Users\Administrator\Local Settings\Application Data\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe
[2008-07-15 22:33] - [2008-07-15 22:33] - 0588800 ____A (Microsoft Corporation) 87576541BA029261CA7C6136367E6D42
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\dnsapi.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed
==================== End of log ============================
mycity.rs/must-login.png
|
