MyCity » Ambulanta -> Arhiva Ambulante » Problem - prozori se otvaraju zasebno

Problem - prozori se otvaraju zasebno

Napisano na dan: 12.2.2012

Problem - prozori se otvaraju zasebno

Sledeća strana

Pagination

Odgovori

djolew Poslao: 12 Feb 2012 23:01 Idi na vrh
offline djolew Elitni građanin Pridružio: 24 Dec 2011 Poruke: 1628 Gde živiš: Novi Banovci	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Svaki prozor mi se otvara zasebno, a u folder options mi je namesteno open each folder in the same window. Pomislio sam da je virus, al sam skenirao i sa Kaspersky, Malwarebytes Anti-Malware i sa SUPERAntiSpyware Professional. Nisu nista nasli Sta bi moglo da bude? -Os je Windows 7 32bita -Internet konekcija je ADSL Telekom 4 Mbps. https://www.mycity.rs/must-login.png https://www.mycity.rs/must-login.png https://www.mycity.rs/must-login.png https://www.mycity.rs/must-login.png

Profil

Sass Drake Poslao: 12 Feb 2012 23:07 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	1Ovo se svidja korisniku: djolew Registruj se da bi pohvalio/la poruku! Nedostaje ti glavni DDS izvještaj. Ponovo pokreni DDS i postavi DDS.txt.

Profil

djolew Poslao: 12 Feb 2012 23:41 Idi na vrh
offline djolew Elitni građanin Pridružio: 24 Dec 2011 Poruke: 1628 Gde živiš: Novi Banovci	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Evo DDS file https://www.mycity.rs/must-login.png . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 8.0.7601.17514 Run by admin at 23:38:28 on 2012-02-12 Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.3327.1490 [GMT 1:00] . AV: Kaspersky Internet Security Enabled/Updated {2EAA32A5-1EE1-1B22-95DA-337730C6E984} SP: Kaspersky Internet Security Enabled/Updated {95CBD341-38DB-14AC-AF6A-08054B41A339} SP: Windows Defender Enabled/Updated {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: Kaspersky Internet Security Enabled {1691B380-548E-1A7A-BE85-9A42CE15AEFF} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\nvvsvc.exe C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\SUPERAntiSpyware\SASCORE.EXE C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe C:\Windows\system32\nvvsvc.exe C:\Program Files\Application Updater\ApplicationUpdater.exe C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Windows\system32\svchost.exe -k imgsvc C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\SearchIndexer.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe C:\Program Files\uTorrent\uTorrent.exe C:\Program Files\Windows Sidebar\sidebar.exe C:\Windows\System32\svchost.exe -k LocalServicePeerNet C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Program Files\Nero\Update\NASvc.exe C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe C:\Windows\System32\svchost.exe -k secsvcs C:\Windows\system32\DeviceDisplayObjectProvider.exe C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\rundll32.exe C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\admin\AppData\Local\Google\Chrome\Application\chrome.exe C:\Program Files\Freemake\Freemake Video Converter\FreemakeVC.exe C:\Windows\system32\AUDIODG.EXE C:\Windows\system32\taskeng.exe C:\Program Files\Windows Media Player\wmplayer.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\DllHost.exe C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uSearch Page = uStart Page = hxxp://www.bigseekpro.com/tempcleaner/{DCD1EC2F-B06A-4BC4-9B4D-14CABF2E9FC0} uSearch Bar = mStart Page = hxxp://www.bigseekpro.com/tempcleaner/{DCD1EC2F-B06A-4BC4-9B4D-14CABF2E9FC0} uInternet Settings,ProxyOverride = *.local uURLSearchHooks: YouTube Downloader Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - c:\program files\youtube downloader toolbar\ie\4.9\youtubedownloaderToolbarIE.dll uURLSearchHooks: H - No File BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll BHO: Updater For Spam Free Search Bar: {20a0be68-8fd9-4539-8712-ce3d1c1fdfc6} - c:\program files\blekkotb\auxi\blekkoAu.dll BHO: Spam Free Search Bar: {26c9e18c-3717-4be1-a225-04e4471f5b6e} - c:\program files\blekkotb\blekkoDx.dll BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky internet security 2012\ievkbd.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office14\GROOVEEX.DLL BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll BHO: Windows Live Messenger Companion Helper: {9fdde16b-836f-4806-ab1f-1455cbeff289} - c:\program files\windows live\companion\companioncore.dll BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~2\office14\URLREDIR.DLL BHO: RewardsArcadeSuite: {b6ef6c45-5e8d-4c3b-b580-a5073261a381} - c:\program files\rewardsarcadesuite\RewardsArcadeSuite.dll BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky internet security 2012\klwtbbho.dll BHO: YouTube Downloader Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - c:\program files\youtube downloader toolbar\ie\4.9\youtubedownloaderToolbarIE.dll TB: Spam Free Search Bar: {26c9e18c-3717-4be1-a225-04e4471f5b6e} - c:\program files\blekkotb\blekkoDx.dll TB: YouTube Downloader Toolbar: {f3fee66e-e034-436a-86e4-9690573bee8a} - c:\program files\youtube downloader toolbar\ie\4.9\youtubedownloaderToolbarIE.dll TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File TB: {472734EA-242A-422B-ADF8-83D1E48CC825} - No File uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" /MINIMIZED uRun: [Google Update] "c:\users\admin\appdata\local\google\update\GoogleUpdate.exe" /c uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun mRun: [AVP] "c:\program files\kaspersky lab\kaspersky internet security 2012\avp.exe" mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0) mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: PromptOnSecureDesktop = 0 (0x0) IE: Add to Anti-Banner - c:\program files\kaspersky lab\kaspersky internet security 2012\ie_banner_deny.htm IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105 IE: {0000036B-C524-4050-81A0-243669A86B9F} - {B63DBA5F-523F-4B9C-A43D-65DF1977EAD3} - c:\program files\windows live\companion\companioncore.dll IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky internet security 2012\ievkbd.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky internet security 2012\klwtbbho.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{A336B012-CB35-48FA-A52C-C0A5F96D7BB1} : DhcpNameServer = 192.168.1.1 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll Notify: klogon - c:\windows\system32\klogon.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office14\GROOVEEX.DLL . ============= SERVICES / DRIVERS =============== . R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2011-12-30 239168] R1 kl2;kl2;c:\windows\system32\drivers\kl2.sys [2011-3-4 11352] R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2011-3-10 23856] R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880] R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664] R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-12 116608] R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952] R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2011-12-14 748440] R2 AVP;Kaspersky Anti-Virus Service;c:\program files\kaspersky lab\kaspersky internet security 2012\avp.exe [2011-4-24 202296] R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-1-13 652872] R2 NAUpdate;Nero Update;c:\program files\nero\update\NASvc.exe [2010-5-4 503080] R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\nvidia corporation\nvidia updatus\daemonu.exe [2011-8-24 2253120] R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2011-10-15 381248] R3 bbcap;bbcap;c:\windows\system32\drivers\bbcap.sys [2011-12-15 4096] R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-11-2 19984] R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-8-21 20464] R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2011-8-21 167936] R3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys [2011-8-21 1056256] S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384] S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888] S3 dmvsc;dmvsc;c:\windows\system32\drivers\dmvsc.sys [2011-4-12 62464] S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2011-10-7 39272] S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2011-5-13 1492840] S3 Microsoft SharePoint Workspace Audit Service;Microsoft SharePoint Workspace Audit Service;c:\program files\microsoft office\office14\GROOVE.EXE [2011-6-12 31125880] S3 osppsvc;Office Software Protection Platform;c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\OSPPSVC.EXE [2010-1-9 4640000] S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872] S3 SwitchBoard;SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096] S3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\Synth3dVsc.sys [2011-4-12 77184] S3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys [2011-4-12 25600] S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2010-11-20 52224] S3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys [2010-11-20 27264] S3 tsusbhub;tsusbhub;c:\windows\system32\drivers\tsusbhub.sys [2011-4-12 112640] S4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\windows live\mesh\wlcrasvc.exe [2010-9-22 51040] . =============== Created Last 30 ================ . 2012-02-12 21:36:13 -------- d-----w- c:\users\admin\appdata\local\Microsoft Games 2012-02-11 01:06:25 -------- d-----w- c:\program files\Guitar Pro 6 2012-02-11 00:33:53 56200 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{bc544cad-0150-4e6a-9aef-882b9fb8a794}\offreg.dll 2012-02-11 00:25:42 -------- d-----w- c:\users\admin\appdata\roaming\Guitar Pro 6 2012-02-11 00:25:42 -------- d-----w- c:\programdata\Guitar Pro 6 2012-02-10 15:06:44 6557240 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{bc544cad-0150-4e6a-9aef-882b9fb8a794}\mpengine.dll 2012-02-09 18:40:45 -------- d-----w- c:\programdata\EA Logs 2012-02-08 21:21:55 -------- d-----w- c:\users\admin\appdata\local\FalloutNV 2012-02-08 20:26:15 -------- d-sh--w- C:\$RECYCLE.BIN 2012-02-08 20:25:07 -------- d-----w- c:\windows\system32\wbem\Logs 2012-02-08 20:18:49 -------- d-----w- c:\program files\ps3emu 2012-02-05 12:37:58 -------- d-----w- c:\users\admin\appdata\roaming\GlarySoft 2012-02-05 12:22:37 -------- d-----w- c:\program files\Glary Utilities 2012-02-03 15:39:39 97961 ----a-w- c:\windows\system32\drivers\klick.dat 2012-02-03 15:39:39 115369 ----a-w- c:\windows\system32\drivers\klin.dat 2012-02-03 15:38:36 -------- d-----w- c:\programdata\Kaspersky Lab 2012-02-03 15:38:36 -------- d-----w- c:\program files\Kaspersky Lab 2012-02-03 15:35:11 175865 ----a-w- c:\programdata\1328283219.bdinstall.bin 2012-02-03 13:16:04 63056 ----a-w- c:\windows\system32\drivers\bdsandbox.sys 2012-02-01 18:36:48 -------- d-----w- c:\program files\Chameleon Shutdown 2012-02-01 18:18:55 -------- d-----w- c:\program files\Audiograbber 2012-01-28 21:48:04 -------- d-----w- c:\users\admin\appdata\local\panda2_0dn 2012-01-28 21:18:41 -------- d-----w- c:\users\admin\appdata\local\APN 2012-01-28 21:17:48 -------- d-----w- c:\program files\PANDORA.TV 2012-01-28 21:17:14 -------- d-----w- c:\program files\The KMPlayer 2012-01-27 21:08:45 329014 ----a-w- c:\programdata\1327697780.bdinstall.bin 2012-01-27 20:57:14 -------- d-----w- c:\users\admin\appdata\roaming\QuickScan 2012-01-27 20:56:50 -------- d-----w- c:\program files\Bitdefender 2012-01-27 20:55:25 -------- d-----w- c:\program files\common files\Bitdefender 2012-01-27 20:00:49 -------- d-----w- c:\program files\Panda Security 2012-01-26 22:46:12 -------- d-----w- c:\program files\YouTube Downloader Toolbar 2012-01-26 22:46:12 -------- d-----w- c:\program files\Application Updater 2012-01-21 23:53:08 -------- d-----w- c:\users\admin\appdata\roaming\SUPERAntiSpyware.com 2012-01-21 23:52:57 -------- d-----w- c:\program files\SUPERAntiSpyware 2012-01-21 23:52:56 -------- d-----w- c:\programdata\SUPERAntiSpyware.com 2012-01-20 22:07:59 -------- d-----w- c:\program files\SAMSUNG 2012-01-20 20:48:59 -------- d-----w- c:\users\admin\appdata\roaming\GetRightToGo 2012-01-16 15:05:05 -------- d-----w- c:\users\admin\appdata\local\TempDIR 2012-01-16 15:05:01 -------- d-----w- c:\program files\Temp File Cleaner 2012-01-16 15:01:08 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2012-01-16 15:01:08 369352 ----a-w- c:\windows\system32\drivers\cng.sys 2012-01-16 15:01:08 314880 ----a-w- c:\windows\system32\webio.dll 2012-01-16 15:01:08 22528 ----a-w- c:\windows\system32\lsass.exe 2012-01-16 15:01:08 224768 ----a-w- c:\windows\system32\schannel.dll 2012-01-16 15:01:08 22016 ----a-w- c:\windows\system32\secur32.dll 2012-01-16 15:01:08 15872 ----a-w- c:\windows\system32\sspisrv.dll 2012-01-16 15:01:08 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2012-01-16 15:01:08 1038848 ----a-w- c:\windows\system32\lsasrv.dll 2012-01-16 15:01:08 100352 ----a-w- c:\windows\system32\sspicli.dll . ==================== Find3M ==================== . 2012-02-03 13:15:56 446696 ----a-w- c:\windows\system32\drivers\avckf.sys 2012-01-26 23:21:24 237072 ------w- c:\windows\system32\MpSigStub.exe 2012-01-05 18:30:03 385792 ----a-w- c:\windows\system32\nxcooking.dll 2011-12-30 16:25:19 239168 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys 2011-12-22 21:11:46 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl 2011-12-14 23:36:49 4608 ----a-w- c:\windows\system32\bbchlp.dll 2011-12-14 23:36:49 4096 ----a-w- c:\windows\system32\drivers\bbcap.sys 2011-12-14 23:36:49 30720 ----a-w- c:\windows\system32\bbcap.dll 2011-12-14 11:47:06 31552 ----a-w- c:\windows\system32\TURegOpt.exe 2011-12-14 11:46:50 28992 ----a-w- c:\windows\system32\uxtuneup.dll 2011-12-14 11:46:50 21312 ----a-w- c:\windows\system32\authuitu.dll 2011-12-10 14:24:06 20464 ----a-w- c:\windows\system32\drivers\mbam.sys 2011-12-05 12:25:06 3628712 ----a-w- c:\windows\ApnToolbarInstaller.exe 2011-12-05 12:25:01 143240 ----a-w- c:\windows\ApnStub.exe 2011-11-25 13:45:42 189248 ----a-w- c:\windows\system32\PnkBstrB.exe 2011-11-25 13:45:40 75136 ----a-w- c:\windows\system32\PnkBstrA.exe 2011-11-25 12:59:40 240184 ----a-w- c:\windows\system32\drivers\avchv.sys 2011-11-24 04:25:27 2342912 ----a-w- c:\windows\system32\win32k.sys 2011-11-19 14:01:00 67072 ----a-w- c:\windows\system32\packager.dll 2011-11-17 05:38:39 1288472 ----a-w- c:\windows\system32\ntdll.dll . ============= FINISH: 23:39:50.14 ===============

Profil

Sass Drake Poslao: 13 Feb 2012 23:40 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Izvini što kasnimo. Korak 1 Idi u Start -> Control Panel -> Add or Remove Programs i deinstaliraj sljedeće programe: RewardsArcadeSuite Spam Free Search Bar YouTube Downloader Toolbar v4.9 Korak 2 Preuzmite program OTL sa donjeg linka na Desktop: OTL download Kliknite dati link - u prozoru koji se otvori, kliknite Save; kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberite Desktop i kliknite Save. Dvoklikom pokrenite OTL; U beli okvir prozora gde piše Custom Scans/Fixes iskopirati sledeći tekst: `HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer /S HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /S` kliknite Run Scan; po završetku skeniranja, izveštaj (koji će biti automatski sačuvan na Desktop-u kao OTL.Txt) će se otvoriti u Notepad-u. Kopirajte sadržaj OTL.txt u poruku.

Profil

djolew Poslao: 14 Feb 2012 17:12 Idi na vrh
offline djolew Elitni građanin Pridružio: 24 Dec 2011 Poruke: 1628 Gde živiš: Novi Banovci	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! OTL logfile created on: 14-Feb-12 17:04:19 - Run 1 OTL by OldTimer - Version 3.2.31.0 Folder = C:\Users\admin\Desktop Ultimate Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 8.0.7601.17514) Locale: 00000409 \| Country: United States \| Language: ENU \| Date Format: dd-MMM-yy 3.25 Gb Total Physical Memory \| 1.90 Gb Available Physical Memory \| 58.39% Memory free 6.50 Gb Paging File \| 4.92 Gb Available in Paging File \| 75.78% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files Drive C: \| 225.29 Gb Total Space \| 176.56 Gb Free Space \| 78.37% Space Free \| Partition Type: NTFS Drive D: \| 683.59 Gb Total Space \| 405.39 Gb Free Space \| 59.30% Space Free \| Partition Type: NTFS Drive E: \| 488.28 Gb Total Space \| 255.33 Gb Free Space \| 52.29% Space Free \| Partition Type: NTFS Drive F: \| 122.81 Mb Total Space \| 0.00 Mb Free Space \| 0.00% Space Free \| Partition Type: CDFS Computer Name: ADMIN-PC \| User Name: admin \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012-02-14 16:57:15 \| 000,584,192 \| ---- \| M] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe PRC - [2012-02-11 13:05:24 \| 000,738,680 \| ---- \| M] (BitTorrent, Inc.) -- C:\Program Files\uTorrent\uTorrent.exe PRC - [2011-12-24 17:50:18 \| 000,652,872 \| ---- \| M] (Malwarebytes Corporation) -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe PRC - [2011-10-15 09:53:00 \| 002,253,120 \| ---- \| M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe PRC - [2011-10-15 09:53:00 \| 001,820,480 \| ---- \| M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvtray.exe PRC - [2011-10-15 09:53:00 \| 001,328,960 \| ---- \| M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe PRC - [2011-10-15 00:54:40 \| 000,381,248 \| ---- \| M] (NVIDIA Corporation) -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe PRC - [2011-08-12 00:38:07 \| 000,116,608 \| ---- \| M] (SUPERAntiSpyware.com) -- C:\Program Files\SUPERAntiSpyware\SASCore.exe PRC - [2011-07-11 22:48:10 \| 001,595,520 \| ---- \| M] (Nullsoft, Inc.) -- C:\Program Files\Winamp\winamp.exe PRC - [2011-06-06 11:55:28 \| 000,064,952 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2011-04-24 23:15:02 \| 000,202,296 \| ---- \| M] (Kaspersky Lab ZAO) -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe PRC - [2011-02-25 06:30:54 \| 002,616,320 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010-11-20 22:29:19 \| 000,049,152 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2010-11-20 22:29:07 \| 000,100,864 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\System32\audiodg.exe PRC - [2010-05-04 11:07:22 \| 000,503,080 \| ---- \| M] (Nero AG) -- C:\Program Files\Nero\Update\NASvc.exe PRC - [2009-07-14 02:14:16 \| 000,086,528 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\System32\DeviceDisplayObjectProvider.exe ========== Modules (No Company Name) ========== MOD - [2012-01-27 09:49:31 \| 000,429,040 \| ---- \| M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\ppgooglenaclpluginchrome.dll MOD - [2012-01-27 09:49:29 \| 003,772,912 \| ---- \| M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\pdf.dll MOD - [2012-01-27 09:48:17 \| 000,527,344 \| ---- \| M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\libglesv2.dll MOD - [2012-01-27 09:48:15 \| 000,114,672 \| ---- \| M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\libegl.dll MOD - [2012-01-27 09:48:06 \| 000,122,880 \| ---- \| M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\avutil-51.dll MOD - [2012-01-27 09:48:05 \| 000,222,208 \| ---- \| M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\avformat-53.dll MOD - [2012-01-27 09:48:03 \| 001,746,944 \| ---- \| M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\avcodec-53.dll MOD - [2012-01-27 06:41:13 \| 008,593,056 \| ---- \| M] () -- C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\gcswf32.dll MOD - [2012-01-09 19:44:20 \| 000,166,912 \| ---- \| M] () -- C:\Program Files\WinRAR\RarExt.dll MOD - [2011-10-14 09:30:32 \| 011,490,304 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll MOD - [2011-08-21 15:35:59 \| 000,623,616 \| ---- \| M] () -- C:\Program Files\Winamp\System\jnetlib.w5s MOD - [2011-08-21 15:35:59 \| 000,174,080 \| ---- \| M] () -- C:\Program Files\Winamp\System\auth.w5s MOD - [2011-08-21 15:35:59 \| 000,170,496 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\pmp_ipod.dll MOD - [2011-08-21 15:35:59 \| 000,154,624 \| ---- \| M] () -- C:\Program Files\Winamp\System\jpeg.w5s MOD - [2011-08-21 15:35:59 \| 000,118,272 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\pmp_p4s.dll MOD - [2011-08-21 15:35:59 \| 000,113,152 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\pmp_wifi.dll MOD - [2011-08-21 15:35:59 \| 000,103,936 \| ---- \| M] () -- C:\Program Files\Winamp\System\png.w5s MOD - [2011-08-21 15:35:59 \| 000,090,112 \| ---- \| M] () -- C:\Program Files\Winamp\System\xml.w5s MOD - [2011-08-21 15:35:59 \| 000,084,480 \| ---- \| M] () -- C:\Program Files\Winamp\System\playlist.w5s MOD - [2011-08-21 15:35:59 \| 000,083,968 \| ---- \| M] () -- C:\Program Files\Winamp\tataki.dll MOD - [2011-08-21 15:35:59 \| 000,060,928 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\pmp_android.dll MOD - [2011-08-21 15:35:59 \| 000,053,760 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\pmp_usb.dll MOD - [2011-08-21 15:35:59 \| 000,047,616 \| ---- \| M] () -- C:\Program Files\Winamp\zlib.dll MOD - [2011-08-21 15:35:59 \| 000,044,544 \| ---- \| M] () -- C:\Program Files\Winamp\System\devices.w5s MOD - [2011-08-21 15:35:59 \| 000,035,328 \| ---- \| M] () -- C:\Program Files\Winamp\System\timer.w5s MOD - [2011-08-21 15:35:59 \| 000,023,040 \| ---- \| M] () -- C:\Program Files\Winamp\System\albumart.w5s MOD - [2011-08-21 15:35:59 \| 000,021,504 \| ---- \| M] () -- C:\Program Files\Winamp\System\tagz.w5s MOD - [2011-08-21 15:35:59 \| 000,020,480 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\pmp_njb.dll MOD - [2011-08-21 15:35:59 \| 000,019,456 \| ---- \| M] () -- C:\Program Files\Winamp\System\gif.w5s MOD - [2011-08-21 15:35:59 \| 000,019,456 \| ---- \| M] () -- C:\Program Files\Winamp\System\bmp.w5s MOD - [2011-08-21 15:35:59 \| 000,016,896 \| ---- \| M] () -- C:\Program Files\Winamp\System\dlmgr.w5s MOD - [2011-08-21 15:35:59 \| 000,016,384 \| ---- \| M] () -- C:\Program Files\Winamp\System\gracenote.w5s MOD - [2011-08-21 15:35:59 \| 000,014,336 \| ---- \| M] () -- C:\Program Files\Winamp\System\filereader.w5s MOD - [2011-08-21 15:35:59 \| 000,013,824 \| ---- \| M] () -- C:\Program Files\Winamp\System\primo.w5s MOD - [2011-08-21 15:35:58 \| 000,052,224 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\out_ds.dll MOD - [2011-08-21 15:35:58 \| 000,022,528 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\out_disk.dll MOD - [2011-08-21 15:35:58 \| 000,018,432 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\out_wave.dll MOD - [2011-08-21 15:35:57 \| 000,313,344 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_wm.dll MOD - [2011-08-21 15:35:57 \| 000,312,832 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\gen_ml.dll MOD - [2011-08-21 15:35:57 \| 000,293,376 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_local.dll MOD - [2011-08-21 15:35:57 \| 000,285,696 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_mp3.dll MOD - [2011-08-21 15:35:57 \| 000,252,416 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_vorbis.dll MOD - [2011-08-21 15:35:57 \| 000,249,856 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_devices.dll MOD - [2011-08-21 15:35:57 \| 000,240,640 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_pmp.dll MOD - [2011-08-21 15:35:57 \| 000,200,192 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_disc.dll MOD - [2011-08-21 15:35:57 \| 000,183,808 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\gen_jumpex.dll MOD - [2011-08-21 15:35:57 \| 000,165,376 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_mod.dll MOD - [2011-08-21 15:35:57 \| 000,124,928 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_online.dll MOD - [2011-08-21 15:35:57 \| 000,109,568 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_midi.dll MOD - [2011-08-21 15:35:57 \| 000,102,400 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_cdda.dll MOD - [2011-08-21 15:35:57 \| 000,083,456 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_plg.dll MOD - [2011-08-21 15:35:57 \| 000,082,944 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_playlists.dll MOD - [2011-08-21 15:35:57 \| 000,074,752 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_nsv.dll MOD - [2011-08-21 15:35:57 \| 000,072,192 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_dshow.dll MOD - [2011-08-21 15:35:57 \| 000,068,608 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_avi.dll MOD - [2011-08-21 15:35:57 \| 000,060,928 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_flac.dll MOD - [2011-08-21 15:35:57 \| 000,057,344 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_impex.dll MOD - [2011-08-21 15:35:57 \| 000,057,344 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\gen_orgler.dll MOD - [2011-08-21 15:35:57 \| 000,052,224 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_history.dll MOD - [2011-08-21 15:35:57 \| 000,050,688 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_mp4.dll MOD - [2011-08-21 15:35:57 \| 000,049,152 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_mkv.dll MOD - [2011-08-21 15:35:57 \| 000,043,008 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_flv.dll MOD - [2011-08-21 15:35:57 \| 000,033,792 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_rg.dll MOD - [2011-08-21 15:35:57 \| 000,031,744 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_transcode.dll MOD - [2011-08-21 15:35:57 \| 000,028,672 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_autotag.dll MOD - [2011-08-21 15:35:57 \| 000,027,648 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\ml_bookmarks.dll MOD - [2011-08-21 15:35:57 \| 000,027,648 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\gen_hotkeys.dll MOD - [2011-08-21 15:35:57 \| 000,025,600 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\gen_tray.dll MOD - [2011-08-21 15:35:57 \| 000,023,552 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_swf.dll MOD - [2011-08-21 15:35:57 \| 000,016,896 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_wave.dll MOD - [2011-08-21 15:35:57 \| 000,007,168 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\in_linein.dll MOD - [2011-08-21 15:35:56 \| 001,737,728 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\gen_ff.dll MOD - [2011-08-21 15:35:56 \| 000,410,624 \| ---- \| M] () -- C:\Program Files\Winamp\nsutil.dll MOD - [2011-08-21 15:35:56 \| 000,340,992 \| ---- \| M] () -- C:\Program Files\Winamp\Plugins\freeform\wacs\freetype\freetype.wac MOD - [2011-08-21 15:35:56 \| 000,253,440 \| ---- \| M] () -- C:\Program Files\Winamp\libsndfile.dll MOD - [2011-08-21 15:35:56 \| 000,078,848 \| ---- \| M] () -- C:\Program Files\Winamp\nde.dll MOD - [2011-04-24 23:13:30 \| 007,008,656 \| ---- \| M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\qtgui4.dll MOD - [2011-04-24 23:13:28 \| 000,192,912 \| ---- \| M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\qtsql4.dll MOD - [2011-04-24 23:13:26 \| 001,270,160 \| ---- \| M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\qtscript4.dll MOD - [2011-04-24 23:13:26 \| 000,758,160 \| ---- \| M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\qtnetwork4.dll MOD - [2011-04-24 23:13:24 \| 002,118,032 \| ---- \| M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\qtcore4.dll MOD - [2011-04-24 23:13:24 \| 002,089,360 \| ---- \| M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\qtdeclarative4.dll MOD - [2011-04-20 19:56:28 \| 000,025,088 \| ---- \| M] () -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\imageformats\qgif4.dll MOD - [2011-03-17 00:11:16 \| 004,297,568 \| ---- \| M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF MOD - [2010-10-20 15:45:26 \| 008,801,120 \| ---- \| M] () -- C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll ========== Win32 Services (SafeList) ========== SRV - [2011-12-24 17:50:18 \| 000,652,872 \| ---- \| M] (Malwarebytes Corporation) [Auto \| Running] -- C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService) SRV - [2011-12-14 12:46:50 \| 000,028,992 \| ---- \| M] (TuneUp Software) [Auto \| Running] -- C:\Windows\System32\uxtuneup.dll -- (UxTuneUp) SRV - [2011-10-15 09:53:00 \| 002,253,120 \| ---- \| M] (NVIDIA Corporation) [Auto \| Running] -- C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe -- (nvUpdatusService) SRV - [2011-10-15 00:54:40 \| 000,381,248 \| ---- \| M] (NVIDIA Corporation) [Auto \| Running] -- C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe -- (Stereo Service) SRV - [2011-08-12 00:38:07 \| 000,116,608 \| ---- \| M] (SUPERAntiSpyware.com) [Auto \| Running] -- C:\Program Files\SUPERAntiSpyware\SASCORE.EXE -- (!SASCORE) SRV - [2011-06-12 11:15:00 \| 031,125,880 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2011-06-06 11:55:28 \| 000,064,952 \| ---- \| M] (Adobe Systems Incorporated) [Auto \| Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2011-04-24 23:15:02 \| 000,202,296 \| ---- \| M] (Kaspersky Lab ZAO) [Auto \| Running] -- C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe -- (AVP) SRV - [2010-05-04 11:07:22 \| 000,503,080 \| ---- \| M] (Nero AG) [Auto \| Running] -- C:\Program Files\Nero\Update\NASvc.exe -- (NAUpdate) SRV - [2010-02-19 13:37:14 \| 000,517,096 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe -- (SwitchBoard) SRV - [2009-07-14 02:16:13 \| 000,025,088 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009-07-14 02:16:12 \| 001,004,544 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009-07-14 02:15:41 \| 000,680,960 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) ========== Driver Services (SafeList) ========== DRV - [2012-02-03 16:38:24 \| 000,570,160 \| ---- \| M] (Kaspersky Lab) [File_System \| System \| Running] -- C:\Windows\System32\drivers\klif.sys -- (KLIF) DRV - [2011-12-30 17:25:19 \| 000,239,168 \| ---- \| M] (DT Soft Ltd) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\dtsoftbus01.sys -- (dtsoftbus01) DRV - [2011-12-15 00:36:49 \| 000,004,096 \| ---- \| M] (Windows (R) Codename Longhorn DDK provider) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\bbcap.sys -- (bbcap) DRV - [2011-12-10 15:24:06 \| 000,020,464 \| ---- \| M] (Malwarebytes Corporation) [File_System \| On_Demand \| Running] -- C:\Windows\System32\drivers\mbam.sys -- (MBAMProtector) DRV - [2011-10-15 09:53:00 \| 010,327,360 \| ---- \| M] (NVIDIA Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\nvlddmkm.sys -- (nvlddmkm) DRV - [2011-07-22 17:27:02 \| 000,012,880 \| ---- \| M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel \| System \| Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv.sys -- (SASDIFSV) DRV - [2011-07-12 22:55:22 \| 000,067,664 \| ---- \| M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel \| System \| Running] -- C:\Program Files\SUPERAntiSpyware\SASKUTIL.SYS -- (SASKUTIL) DRV - [2011-03-10 18:36:18 \| 000,023,856 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\klim6.sys -- (KLIM6) DRV - [2011-03-04 13:23:20 \| 000,011,352 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\kl2.sys -- (kl2) DRV - [2011-03-04 13:23:14 \| 000,133,208 \| ---- \| M] (Kaspersky Lab ZAO) [Kernel \| Boot \| Running] -- C:\Windows\system32\DRIVERS\kl1.sys -- (KL1) DRV - [2010-11-20 22:29:34 \| 000,015,872 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\rdpvideominiport.sys -- (RdpVideoMiniport) DRV - [2010-11-20 22:29:24 \| 000,052,224 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV - [2010-11-20 22:29:03 \| 000,175,360 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\vmbus.sys -- (vmbus) DRV - [2010-11-20 22:29:03 \| 000,112,640 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\tsusbhub.sys -- (tsusbhub) DRV - [2010-11-20 22:29:03 \| 000,077,184 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\Synth3dVsc.sys -- (Synth3dVsc) DRV - [2010-11-20 22:29:03 \| 000,062,464 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\dmvsc.sys -- (dmvsc) DRV - [2010-11-20 22:29:03 \| 000,040,704 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\system32\drivers\vmstorfl.sys -- (storflt) DRV - [2010-11-20 22:29:03 \| 000,028,032 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\storvsc.sys -- (storvsc) DRV - [2010-11-20 22:29:03 \| 000,027,264 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\TsUsbGD.sys -- (TsUsbGD) DRV - [2010-11-20 22:29:03 \| 000,025,600 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\terminpt.sys -- (terminpt) DRV - [2010-11-20 22:29:03 \| 000,017,920 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2010-11-20 22:29:03 \| 000,005,632 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\system32\drivers\vms3cap.sys -- (s3cap) DRV - [2009-11-02 20:27:16 \| 000,019,984 \| ---- \| M] (Kaspersky Lab) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\klmouflt.sys -- (klmouflt) DRV - [2009-06-02 09:54:04 \| 001,056,256 \| ---- \| M] (VIA Technologies, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\viahduaa.sys -- (VIAHdAudAddService) DRV - [2009-05-13 12:11:32 \| 000,006,504 \| ---- \| M] () [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\ASACPI.sys -- (MTsensor) DRV - [2007-04-03 12:57:42 \| 000,083,336 \| ---- \| M] (MCCI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\s116bus.sys -- (s116bus) Sony Ericsson Device 116 driver (WDM) DRV - [2005-08-10 15:06:28 \| 000,019,968 \| ---- \| M] (Protection Technology) [Kernel \| Boot \| Stopped] -- C:\Windows\System32\drivers\sfsync02.sys -- (sfsync02) StarForce Protection Synchronization Driver (version 2.x) DRV - [2005-08-10 13:44:04 \| 000,050,688 \| ---- \| M] (Protection Technology) [Kernel \| Boot \| Stopped] -- C:\Windows\System32\drivers\sfdrv01.sys -- (sfdrv01) StarForce Protection Environment Driver (version 1.x) DRV - [2005-05-16 14:20:39 \| 000,006,656 \| ---- \| M] (Protection Technology) [Kernel \| Boot \| Running] -- C:\Windows\System32\drivers\sfhlp02.sys -- (sfhlp02) StarForce Protection Helper Driver (version 2.x) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/tempcleaner/{DCD1EC2F-B06A-4BC4-9B4D-14CABF2E9FC0} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.bigseekpro.com/tempcleaner/{DCD1EC2F-B06A-4BC4-9B4D-14CABF2E9FC0} IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 7C 8A 8E E2 0D 60 CC 01 [binary data] IE - HKCU\..\URLSearchHook: {91da5e8a-3318-4f8c-b67e-5964de3ab546} - No CLSID value found IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = .local FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@checkpoint.com/FFApi: File not found FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited) FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\admin\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\admin\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\linkfilter@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\linkfilter@kaspersky.ru [2012-02-03 17:05:17 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\virtualKeyboard@kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\virtualKeyboard@kaspersky.ru [2012-02-03 17:05:19 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\KavAntiBanner@Kaspersky.ru: C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\FFExt\KavAntiBanner@Kaspersky.ru [2012-02-03 17:05:16 \| 000,000,000 \| ---D \| M] ========== Chrome ========== CHR - default_search_provider: Yahoo! (Enabled) CHR - default_search_provider: search_url = http://search.yahoo.com/search?fr=chr-greentree_gc.....811&p={searchTerms} CHR - default_search_provider: suggest_url = http://ff.search.yahoo.com/gossip?output=fxjson&command={searchTerms} CHR - plugin: Shockwave Flash (Disabled) = C:\Users\admin\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\Application\17.0.963.46\pdf.dll CHR - plugin: Kaspersky Anti-Virus (Enabled) = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\plugin/npABPlugin.dll CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U26 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\admin\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~2\Office14\NPSPWRAP.DLL CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.60831.0\npctrl.dll CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dv.dll CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll CHR - plugin: Windows Live\u0099 Photo Gallery (Enabled) = C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\admin\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll CHR - plugin: Google Update (Enabled) = C:\Users\admin\AppData\Local\Google\Update\1.3.21.99\npGoogleUpdate3.dll CHR - plugin: Default Plug-in (Enabled) = default_plugin CHR - Extension: YouTube = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.3_0\ CHR - Extension: Google Search = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.17_0\ CHR - Extension: YouTube to MP3 = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dajdnhmdgikmjbcggoihnbmnnkbmljlg\0.0.3_1\ CHR - Extension: Lamborghini Sesto Elemento Theme = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\dappigdjllcnkkoacaoolciaolaaiemb\1.0_0\ CHR - Extension: Ghostery = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\mlomiejdfkolichcflejclcbmpeaniij\2.4.0_0\ CHR - Extension: Gmail = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\ CHR - Extension: Anti-Banner = C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.0.374_0\ O1 HOSTS File: ([2010-05-13 17:53:40 \| 000,001,204 \| ---- \| M]) - C:\Windows\System32\drivers\etc\hosts O1 - Hosts: 127.0.0.1 localhost O1 - Hosts: 127.0.0.1 activate.adobe.com O1 - Hosts: 127.0.0.1 3dns-3.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns-3.adobe.com O1 - Hosts: 127.0.0.1 ereg.wip3.adobe.com O1 - Hosts: 127.0.0.1 activate-sea.adobe.com O1 - Hosts: 127.0.0.1 wip3.adobe.com O1 - Hosts: 127.0.0.1 wwis-dubc1-vip60.adobe.com O1 - Hosts: 127.0.0.1 activate-sjc0.adobe.com O1 - Hosts: 127.0.0.1 practivate.adobe.com O1 - Hosts: 127.0.0.1 ereg.adobe.com O1 - Hosts: 127.0.0.1 activate.wip3.adobe.com O1 - Hosts: 127.0.0.1 3dns-2.adobe.com O1 - Hosts: 127.0.0.1 adobe-dns.adobe.com O1 - Hosts: ::1 localhost O2 - BHO: (IEVkbdBHO Class) - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (FilterBHO Class) - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) O3 - HKLM\..\Toolbar: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found. O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {472734EA-242A-422B-ADF8-83D1E48CC825} - No CLSID value found. O4 - HKLM..\Run: [AVP] C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe (Kaspersky Lab ZAO) O4 - HKCU..\Run: [uTorrent] C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm () O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll (Kaspersky Lab ZAO) O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra Button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll (Kaspersky Lab ZAO) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab (Java Plug-in 1.6.0_26) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A336B012-CB35-48FA-A52C-C0A5F96D7BB1}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (explorer.exe) -C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) -C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) -C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - Winlogon\Notify\klogon: DllName - (C:\Windows\system32\klogon.dll) - C:\Windows\System32\klogon.dll (Kaspersky Lab ZAO) O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009-06-10 22:42:20 \| 000,000,024 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O32 - AutoRun File - [2003-08-25 07:07:10 \| 000,000,053 \| R--- \| M] () - F:\autorun.inf -- [ CDFS ] O33 - MountPoints2\{224fa841-cc48-11e0-afd3-806e6f6e6963}\Shell - "" = AutoRun O33 - MountPoints2\{224fa841-cc48-11e0-afd3-806e6f6e6963}\Shell\AutoRun\command - "" = F:\launcher.exe -- [2003-08-28 05:46:30 \| 000,062,976 \| R--- \| M] (SCS Software) O33 - MountPoints2\{78009bb3-cc04-11e0-9353-90e6bac8619f}\Shell - "" = AutoRun O33 - MountPoints2\{78009bb3-cc04-11e0-9353-90e6bac8619f}\Shell\AutoRun\command - "" = G:\autorun.exe O33 - MountPoints2\{b48aab9b-3301-11e1-a1e5-90e6bac8619f}\Shell - "" = AutoRun O33 - MountPoints2\{b48aab9b-3301-11e1-a1e5-90e6bac8619f}\Shell\AutoRun\command - "" = G:\OriginInstaller.exe O34 - HKLM BootExecute: (autocheck autochk ) O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2012-02-14 17:06:21 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Games By GG releases [2012-02-14 16:57:39 \| 000,584,192 \| ---- \| C] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe [2012-02-12 22:36:13 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Local\Microsoft Games [2012-02-11 02:07:33 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 6 [2012-02-11 02:06:25 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Guitar Pro 6 [2012-02-11 01:25:42 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\Guitar Pro 6 [2012-02-11 01:25:42 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Guitar Pro 6 [2012-02-10 00:59:39 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\Desktop\Note [2012-02-09 19:40:45 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\EA Logs [2012-02-08 22:21:55 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Local\FalloutNV [2012-02-08 21:26:15 \| 000,000,000 \| -HSD \| C] -- C:\$RECYCLE.BIN [2012-02-08 21:18:49 \| 000,000,000 \| ---D \| C] -- C:\Program Files\ps3emu [2012-02-05 13:37:58 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\GlarySoft [2012-02-05 13:22:39 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Glary Utilities [2012-02-05 13:22:37 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Glary Utilities [2012-02-03 22:31:56 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\Desktop\Knjige [2012-02-03 21:47:37 \| 000,000,000 \| ---D \| C] -- C:\Windows\Temp [2012-02-03 16:39:34 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky Internet Security 2012 [2012-02-03 16:38:36 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Kaspersky Lab [2012-02-03 16:38:36 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Kaspersky Lab [2012-02-03 16:38:24 \| 000,570,160 \| ---- \| C] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2012-02-03 14:16:04 \| 000,063,056 \| ---- \| C] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2012-02-01 19:36:53 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\Documents\Chameleon files [2012-02-01 19:36:48 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chameleon Shutdown [2012-02-01 19:36:48 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Chameleon Shutdown [2012-02-01 19:18:56 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiograbber [2012-02-01 19:18:55 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Audiograbber [2012-01-28 22:48:04 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Local\panda2_0dn [2012-01-28 22:18:41 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Local\APN [2012-01-28 22:17:48 \| 000,000,000 \| ---D \| C] -- C:\Program Files\PANDORA.TV [2012-01-28 22:17:29 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\The KMPlayer [2012-01-28 22:17:14 \| 000,000,000 \| ---D \| C] -- C:\Program Files\The KMPlayer [2012-01-27 21:57:14 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\QuickScan [2012-01-27 21:56:50 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Bitdefender [2012-01-27 21:55:25 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\Bitdefender [2012-01-27 21:00:49 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Panda Security [2012-01-22 00:53:08 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\SUPERAntiSpyware.com [2012-01-22 00:52:58 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware [2012-01-22 00:52:57 \| 000,000,000 \| ---D \| C] -- C:\Program Files\SUPERAntiSpyware [2012-01-22 00:52:56 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\SUPERAntiSpyware.com [2012-01-20 23:07:59 \| 000,000,000 \| ---D \| C] -- C:\Program Files\SAMSUNG [2012-01-20 21:48:59 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\GetRightToGo [2012-01-20 21:48:59 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\Documents\Downloads [2012-01-20 17:43:29 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\Desktop\HTML i CSS Programiranje [2012-01-20 17:41:10 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR [2012-01-20 17:41:10 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR [2012-01-17 15:31:34 \| 000,000,000 \| R--D \| C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup [2012-01-17 15:31:34 \| 000,000,000 \| R--D \| C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools [2012-01-16 16:10:37 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\Mozilla [2012-01-16 16:05:05 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Local\TempDIR [2012-01-16 16:05:01 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Temp File Cleaner [2012-01-16 16:05:01 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Temp File Cleaner [2012-01-16 16:02:45 \| 000,000,000 \| ---D \| C] -- C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller [2012-01-16 16:01:08 \| 000,314,880 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\webio.dll [2012-01-16 16:01:08 \| 000,015,872 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\System32\sspisrv.dll [2011-10-07 01:21:14 \| 000,046,156 \| ---- \| C] (Unasoft) -- C:\Users\admin\AppData\Roaming\UpdateDrv.exe [4 C:\Windows\System32\.tmp files -> C:\Windows\System32\.tmp -> ] [2 C:\Windows\.tmp files -> C:\Windows\.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012-02-14 17:06:40 \| 000,001,913 \| ---- \| M] () -- C:\Users\admin\Desktop\Euro Truck Simulator.lnk [2012-02-14 16:57:15 \| 000,584,192 \| ---- \| M] (OldTimer Tools) -- C:\Users\admin\Desktop\OTL.exe [2012-02-14 16:28:00 \| 000,000,908 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4232926109-2270386077-2592286719-1000UA.job [2012-02-14 14:13:01 \| 000,000,928 \| ---- \| M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4232926109-2270386077-2592286719-1000UA.job [2012-02-14 12:28:00 \| 000,000,856 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4232926109-2270386077-2592286719-1000Core.job [2012-02-14 12:16:04 \| 000,021,072 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012-02-14 12:16:04 \| 000,021,072 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012-02-14 12:09:19 \| 000,000,312 \| ---- \| M] () -- C:\Windows\tasks\GlaryInitialize.job [2012-02-14 12:07:50 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012-02-14 12:07:50 \| 000,000,031 \| ---- \| M] () -- C:\Windows\System32\bbcap.err [2012-02-14 12:07:47 \| 2616,549,376 \| -HS- \| M] () -- C:\hiberfil.sys [2012-02-13 23:13:00 \| 000,000,906 \| ---- \| M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-4232926109-2270386077-2592286719-1000Core.job [2012-02-13 19:58:46 \| 2455,924,336 \| ---- \| M] () -- C:\Users\admin\Desktop\Horrible Bosses 2011 HD 720p.avi [2012-02-12 23:53:32 \| 000,623,940 \| ---- \| M] () -- C:\Windows\System32\perfh009.dat [2012-02-12 23:53:32 \| 000,106,316 \| ---- \| M] () -- C:\Windows\System32\perfc009.dat [2012-02-11 17:30:27 \| 000,403,265 \| ---- \| M] () -- C:\Users\admin\Desktop\The-Planet-Earth-planet-earth-blue-space-1920x1080.jpg [2012-02-11 13:00:23 \| 004,009,768 \| ---- \| M] () -- C:\Windows\System32\FNTCACHE.DAT [2012-02-11 02:07:33 \| 000,000,966 \| ---- \| M] () -- C:\Users\admin\Application Data\Microsoft\Internet Explorer\Quick Launch\Guitar Pro 6.lnk [2012-02-11 02:07:33 \| 000,000,942 \| ---- \| M] () -- C:\Users\Public\Desktop\Guitar Pro 6.lnk [2012-02-08 19:12:35 \| 000,170,140 \| ---- \| M] () -- C:\Users\admin\Desktop\kad_lj10.jpg [2012-02-05 13:22:39 \| 000,001,028 \| ---- \| M] () -- C:\Users\admin\Desktop\Glary Utilities.lnk [2012-02-03 17:05:07 \| 000,115,369 \| ---- \| M] () -- C:\Windows\System32\drivers\klin.dat [2012-02-03 17:05:07 \| 000,097,961 \| ---- \| M] () -- C:\Windows\System32\drivers\klick.dat [2012-02-03 16:46:23 \| 000,017,408 \| ---- \| M] () -- C:\Users\admin\AppData\Local\WebpageIcons.db [2012-02-03 16:38:24 \| 000,570,160 \| ---- \| M] (Kaspersky Lab) -- C:\Windows\System32\drivers\klif.sys [2012-02-03 16:35:11 \| 000,175,865 \| ---- \| M] () -- C:\ProgramData\1328283219.bdinstall.bin [2012-02-03 14:16:04 \| 000,063,056 \| ---- \| M] (BitDefender SRL) -- C:\Windows\System32\drivers\bdsandbox.sys [2012-02-03 14:15:56 \| 000,446,696 \| ---- \| M] (BitDefender) -- C:\Windows\System32\drivers\avckf.sys [2012-02-01 19:36:49 \| 000,001,057 \| ---- \| M] () -- C:\Users\admin\Desktop\Chameleon Shutdown.lnk [2012-02-01 19:34:04 \| 000,000,969 \| ---- \| M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012-02-01 19:18:56 \| 000,001,085 \| ---- \| M] () -- C:\Users\Public\Desktop\Audiograbber.lnk [2012-01-30 00:06:46 \| 000,079,516 \| ---- \| M] () -- C:\Users\admin\Desktop\vrste-sklekova1.jpg [2012-01-29 21:04:22 \| 000,000,385 \| ---- \| M] () -- C:\Windows\System32\user_gensett.xml [2012-01-28 22:17:29 \| 000,000,997 \| ---- \| M] () -- C:\Users\admin\Desktop\KMPlayer.lnk [2012-01-27 22:08:45 \| 000,329,014 \| ---- \| M] () -- C:\ProgramData\1327697780.bdinstall.bin [2012-01-27 22:07:32 \| 000,000,000 \| -H-- \| M] () -- C:\Windows\System32\drivers\Msft_Kernel_avchv_01009.Wdf [2012-01-27 00:21:24 \| 000,237,072 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\System32\MpSigStub.exe [2012-01-22 00:52:59 \| 000,001,965 \| ---- \| M] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk [2012-01-19 12:18:15 \| 000,000,001 \| ---- \| M] () -- C:\ProgramData\flagposition.out [2012-01-16 16:05:04 \| 000,001,047 \| ---- \| M] () -- C:\Users\admin\Desktop\Temp File Cleaner.lnk [2012-01-16 16:02:45 \| 000,001,262 \| ---- \| M] () -- C:\Users\admin\Desktop\Revo Uninstaller.lnk [4 C:\Windows\System32\.tmp files -> C:\Windows\System32\.tmp -> ] [2 C:\Windows\.tmp files -> C:\Windows\.tmp -> ] ========== Files Created - No Company Name ========== [2012-02-14 17:06:40 \| 000,001,913 \| ---- \| C] () -- C:\Users\admin\Desktop\Euro Truck Simulator.lnk [2012-02-13 19:20:51 \| 2455,924,336 \| ---- \| C] () -- C:\Users\admin\Desktop\Horrible Bosses 2011 HD 720p.avi [2012-02-11 17:30:31 \| 000,403,265 \| ---- \| C] () -- C:\Users\admin\Desktop\The-Planet-Earth-planet-earth-blue-space-1920x1080.jpg [2012-02-11 02:07:33 \| 000,000,966 \| ---- \| C] () -- C:\Users\admin\Application Data\Microsoft\Internet Explorer\Quick Launch\Guitar Pro 6.lnk [2012-02-11 02:07:33 \| 000,000,942 \| ---- \| C] () -- C:\Users\Public\Desktop\Guitar Pro 6.lnk [2012-02-08 19:12:39 \| 000,170,140 \| ---- \| C] () -- C:\Users\admin\Desktop\kad_lj10.jpg [2012-02-05 13:22:42 \| 000,000,312 \| ---- \| C] () -- C:\Windows\tasks\GlaryInitialize.job [2012-02-05 13:22:39 \| 000,001,028 \| ---- \| C] () -- C:\Users\admin\Desktop\Glary Utilities.lnk [2012-02-03 16:46:21 \| 000,017,408 \| ---- \| C] () -- C:\Users\admin\AppData\Local\WebpageIcons.db [2012-02-03 16:39:39 \| 000,115,369 \| ---- \| C] () -- C:\Windows\System32\drivers\klin.dat [2012-02-03 16:39:39 \| 000,097,961 \| ---- \| C] () -- C:\Windows\System32\drivers\klick.dat [2012-02-03 16:35:11 \| 000,175,865 \| ---- \| C] () -- C:\ProgramData\1328283219.bdinstall.bin [2012-02-01 19:36:49 \| 000,001,057 \| ---- \| C] () -- C:\Users\admin\Desktop\Chameleon Shutdown.lnk [2012-02-01 19:18:56 \| 000,001,085 \| ---- \| C] () -- C:\Users\Public\Desktop\Audiograbber.lnk [2012-01-30 00:06:50 \| 000,079,516 \| ---- \| C] () -- C:\Users\admin\Desktop\vrste-sklekova1.jpg [2012-01-29 21:04:22 \| 000,000,385 \| ---- \| C] () -- C:\Windows\System32\user_gensett.xml [2012-01-28 22:17:29 \| 000,000,997 \| ---- \| C] () -- C:\Users\admin\Desktop\KMPlayer.lnk [2012-01-27 22:08:45 \| 000,329,014 \| ---- \| C] () -- C:\ProgramData\1327697780.bdinstall.bin [2012-01-27 22:07:32 \| 000,000,000 \| -H-- \| C] () -- C:\Windows\System32\drivers\Msft_Kernel_avchv_01009.Wdf [2012-01-22 00:52:59 \| 000,001,965 \| ---- \| C] () -- C:\Users\Public\Desktop\SUPERAntiSpyware Professional.lnk [2012-01-16 16:05:04 \| 000,001,047 \| ---- \| C] () -- C:\Users\admin\Desktop\Temp File Cleaner.lnk [2012-01-16 16:02:45 \| 000,001,262 \| ---- \| C] () -- C:\Users\admin\Desktop\Revo Uninstaller.lnk [2012-01-05 19:29:59 \| 000,385,792 \| ---- \| C] () -- C:\Windows\System32\nxcooking.dll [2012-01-05 17:34:40 \| 003,821,568 \| ---- \| C] () -- C:\Windows\System32\wxmsw262u.dll [2011-12-28 13:10:49 \| 000,000,193 \| ---- \| C] () -- C:\Windows\WORDPAD.INI [2011-12-23 17:20:50 \| 014,974,976 \| ---- \| C] () -- C:\ProgramData\sandra.mda [2011-11-28 14:05:47 \| 000,005,632 \| ---- \| C] () -- C:\Users\admin\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2011-11-19 11:57:18 \| 000,000,000 \| ---- \| C] () -- C:\Users\admin\AppData\Roaming\ELDI7 [2011-11-01 13:37:36 \| 000,138,056 \| ---- \| C] () -- C:\Windows\System32\drivers\PnkBstrK.sys [2011-11-01 13:37:36 \| 000,138,056 \| ---- \| C] () -- C:\Users\admin\AppData\Roaming\PnkBstrK.sys [2011-11-01 13:37:13 \| 000,189,248 \| ---- \| C] () -- C:\Windows\System32\PnkBstrB.exe [2011-11-01 13:37:06 \| 000,075,136 \| ---- \| C] () -- C:\Windows\System32\PnkBstrA.exe [2011-11-01 13:01:48 \| 002,580,552 \| R--- \| C] () -- C:\Windows\System32\pbsvc.exe [2011-10-15 00:54:52 \| 000,321,856 \| ---- \| C] () -- C:\Windows\System32\nvStreaming.exe [2011-09-03 16:55:59 \| 000,000,001 \| ---- \| C] () -- C:\ProgramData\flagposition.out [2011-08-21 16:31:14 \| 000,000,376 \| ---- \| C] () -- C:\Windows\ODBC.INI [2011-08-21 15:43:53 \| 000,073,728 \| ---- \| C] () -- C:\Windows\System32\RtNicProp32.dll [2011-08-21 15:41:52 \| 000,019,188 \| ---- \| C] () -- C:\Windows\Ascd_log.ini [2011-08-21 15:41:39 \| 000,001,769 \| ---- \| C] () -- C:\Windows\Language_trs.ini [2011-08-21 15:41:38 \| 000,015,613 \| ---- \| C] () -- C:\Windows\Ascd_tmp.ini [2011-04-09 17:55:28 \| 000,179,261 \| ---- \| C] () -- C:\Windows\System32\xlive.dll.cat [2011-03-11 12:43:54 \| 000,029,763 \| ---- \| C] () -- C:\Windows\System32\drivers\klopp.dat [2010-11-20 22:29:34 \| 000,080,896 \| ---- \| C] () -- C:\Windows\System32\RDVGHelper.exe [2010-11-20 22:29:26 \| 000,066,048 \| ---- \| C] () -- C:\Windows\System32\PrintBrmUi.exe [2009-07-14 05:57:37 \| 000,067,584 \| --S- \| C] () -- C:\Windows\bootstat.dat [2009-07-14 05:33:53 \| 004,009,768 \| ---- \| C] () -- C:\Windows\System32\FNTCACHE.DAT [2009-07-14 03:05:48 \| 000,623,940 \| ---- \| C] () -- C:\Windows\System32\perfh009.dat [2009-07-14 03:05:48 \| 000,291,294 \| ---- \| C] () -- C:\Windows\System32\perfi009.dat [2009-07-14 03:05:48 \| 000,106,316 \| ---- \| C] () -- C:\Windows\System32\perfc009.dat [2009-07-14 03:05:48 \| 000,031,548 \| ---- \| C] () -- C:\Windows\System32\perfd009.dat [2009-07-14 03:05:05 \| 000,000,741 \| ---- \| C] () -- C:\Windows\System32\NOISE.DAT [2009-07-14 03:04:11 \| 000,215,943 \| ---- \| C] () -- C:\Windows\System32\dssec.dat [2009-07-14 00:55:01 \| 000,043,131 \| ---- \| C] () -- C:\Windows\mib.bin [2009-07-14 00:51:43 \| 000,073,728 \| ---- \| C] () -- C:\Windows\System32\BthpanContextHandler.dll [2009-07-14 00:42:10 \| 000,064,000 \| ---- \| C] () -- C:\Windows\System32\BWContextHandler.dll [2009-06-10 22:26:10 \| 000,673,088 \| ---- \| C] () -- C:\Windows\System32\mlang.dat [2009-05-13 12:11:32 \| 000,006,504 \| ---- \| C] () -- C:\Windows\System32\drivers\ASACPI.sys [2009-04-02 13:30:14 \| 000,010,296 \| ---- \| C] () -- C:\Windows\System32\drivers\ASUSHWIO.SYS [2007-06-19 08:59:36 \| 000,070,400 \| ---- \| C] () -- C:\Windows\System32\PhysXLoader.dll [2007-04-20 07:57:30 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelTraditionalChinese.dll [2007-04-20 07:57:28 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSwedish.dll [2007-04-20 07:57:28 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSpanish.dll [2007-04-20 07:57:28 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelSimplifiedChinese.dll [2007-04-20 07:57:28 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelPortugese.dll [2007-04-20 07:57:28 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelKorean.dll [2007-04-20 07:57:28 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelJapanese.dll [2007-04-20 07:57:28 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelGerman.dll [2007-04-20 07:57:28 \| 000,053,248 \| ---- \| C] () -- C:\Windows\System32\AgCPanelFrench.dll [2004-04-29 14:24:04 \| 000,028,672 \| ---- \| C] () -- C:\Windows\System32\vorbisfile.dll [2004-04-29 14:24:02 \| 000,974,848 \| ---- \| C] () -- C:\Windows\System32\vorbis.dll [2004-04-29 14:24:00 \| 000,049,152 \| ---- \| C] () -- C:\Windows\System32\ogg.dll [1996-04-03 20:33:26 \| 000,005,248 \| ---- \| C] () -- C:\Windows\System32\giveio.sys ========== Custom Scans ========== < HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer /S > < HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /S > "NoDriveTypeAutoRun" = 255 "NoLowDiskSpaceChecks" = 1 ========== Alternate Data Streams ========== @Alternate Data Stream - 12 bytes -> C:\Windows\System32:{4B9A1497-0817-47C4-9612-D6A1C53ACF57} < End of report >

Profil

Sass Drake Poslao: 15 Feb 2012 14:46 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! U logovima nemaš tragove aktivne infekcije i problem koji imaš nije uzrokovan istim. Potrebno je još obaviš sljedeće korake: Ponovo pokreni OTL i klikni na dugme CleanUp. Obavezno posjeti temu Testirajte da li vam je pretraživač ranjiv, pročitaj i isprati link koji stoji u njoj. - Preporučujem da za zaštitu USB memorijskih uređaja koristiš MCShield. Nema nikakve veze sa antivirus-om tj. neće ometati njegov rad, a pokazao se kao jedan od najboljih vida zaštite od malware-a koji se prenosi putem USB mem. uređaja. Home Page MCShield-a: http://amf.mycity.rs/mcshield/ Više o MCShield-u možeš saznati u ovoj temi:http://www.mycity.rs/MyCity-Laboratorija/MCShield-v2.html Što se tiče problema koji imaš, skini ove fajlove na Desktop, otvori ih i klikni na Yes: http://www.sevenforums.com/attachments/tutorials/1.....folder.reg http://www.sevenforums.com/attachments/tutorials/1.....ectory.reg http://www.sevenforums.com/attachments/tutorials/1....._drive.reg http://www.sevenforums.com/attachments/tutorials/1....._drive.reg Ukoliko nakon toga problem i dalje bude prisutan, restartuj sistem i javi da li je uspjelo. Ukoliko ni onda problem ne bude riješen, riješavanje problema će biti nastavljeno u temi koju si otvorio u Windows forumu.

Profil

djolew Poslao: 15 Feb 2012 16:21 Idi na vrh
offline djolew Elitni građanin Pridružio: 24 Dec 2011 Poruke: 1628 Gde živiš: Novi Banovci	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Sve sam uradio kako si rekao, i dalje je problem ostao ne promenjen.

Profil

Sass Drake Poslao: 15 Feb 2012 17:48 Idi na vrh
offline Sass Drake Anti Malware Fighter Rank 2 Pridružio: 26 Avg 2010 Poruke: 10622 Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! OK. Riješavanje problema kojeg imaš će biti nastavljeno u Windows forumu uz pomoć ostalih forumaša.

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Problem - prozori se otvaraju zasebno

Ko je trenutno na forumu

Ukupno su 549 korisnika na forumu :: 9 registrovanih, 1 sakriven i 539 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: boris.zic, ikan, Istman, kihot, MB120mm, samsung, SR-3m, suton, yrraf

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by