Problem sa Surfvox-om

Problem sa Surfvox-om

offline
  • AS2  Male
  • Građanin
  • Pridružio: 30 Avg 2014
  • Poruke: 45

Napisano: 26 Okt 2014 17:02

Pre otprilike 5 dana, prilikom pokušaja pokretanja Google Chrom-a desilo se da je računar sam od sebe pokrenuo mozilu. To se nastavilo i pri svakom narednom pokušaju, a kao početna strana pojavljuje se Surfvox.com stranica i njihov pretraživač. Posle više uzaludnih pokušaja da pokrenem Chrom, pokušao sam da deistaliram Mozilu pomoću CCleaner-a , ali iako je prikazano da je deinstalirana, ona se i dalje "vraća" u istom obliku kao i pre .
Kasnije sam pokušao da deinstaliram Chroma i to je obavljeno bez problema, ali naknadan pokušaj njegove instalacije u bilo kojoj verziji je nemoguć, naime instalacija počne i odmah se prekida, isto se dešava i sa operom. Samo je moguće pokretanje Explorera, mozile u bilo kojoj verziji i safarija koji sam iz čiste radoznalosti instalirao .



mycity.rs/must-login.png

Dopuna: 26 Okt 2014 17:04

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 26-10-2014
Ran by User (administrator) on USER-PC on 26-10-2014 15:25:54
Running from C:\Users\User\Downloads
Loaded Profile: User (Available profiles: User)
Platform: Windows 7 Ultimate Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SUPERAntiSpyware.com) D:\Program Files\SUPERAntiSpyware\SASCore64.exe
() C:\ProgramData\nvxasync\cvxasync.exe
(Anvisoft) C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2.exe
(Anvisoft) C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Srv.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.25.5\GoogleCrashHandler64.exe
() C:\Users\User\AppData\Roaming\nvxasync\nvxasync.exe
() C:\Users\User\AppData\Roaming\nvxasync\nvxasync.exe
(SUPERAntiSpyware) D:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Apple Inc.) D:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe
(Ghisler Software GmbH) C:\totalcmd\TOTALCMD64.EXE
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59720 2013-09-13] (Apple Inc.)
HKLM-x32\...\Run: [QuickTime Task] => D:\Program Files (x86)\QuickTime\QTTask.exe [421888 2014-01-17] (Apple Inc.)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3593744 2014-09-05] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3678424 2014-02-24] (Disc Soft Ltd)
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Run: [] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3678424 2014-02-24] (Disc Soft Ltd)
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Run: [nvxasync] => C:\Users\User\AppData\Roaming\nvxasync\nvxasync.exe [76678656 2014-10-20] ()
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Run: [SUPERAntiSpyware] => D:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [7767832 2014-10-01] (SUPERAntiSpyware)
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Policies\Explorer: [NoFavorites] 0
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {0acd1aef-a9e7-11e3-becf-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {24dcf160-a861-11e3-8b3f-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {29ad312b-02a6-11e4-8fab-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {2eb11547-a76f-11e3-a578-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {3ace6e97-0388-11e4-8a85-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {4a63edbc-a766-11e3-b92c-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {7ee8d5e9-2845-11e4-be54-6c626d5a6b55} - F:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {83f8d0f9-033c-11e4-ae25-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {8b0f1268-b0b0-11e3-ad8c-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {976365e8-af1e-11e3-b6a5-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {9b3567ef-ab6d-11e3-99f0-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {a2f9286f-00dc-11e4-9171-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {a85d4b12-2986-11e4-ac80-6c626d5a6b55} - F:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {da00336f-ada2-11e3-b12f-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {e63d49ef-a8e5-11e3-add2-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {ed8d152a-256f-11e4-bbc5-6c626d5a6b55} - E:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Winlogon: [Shell] C:\ProgramData\nvxasync\cvxasync.exe [76678656 2014-10-20] () <==== ATTENTION
HKU\S-1-5-18\...\Run: [] => (the data entry has 824 more characters).

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-Latn-RS
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = surfvox.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKCU - DefaultScope {828B376B-F2F6-4778-928C-E29EC877535E} URL = google.com/cse?cx=partner-pub-0900663996874144:6813731868&ie=UTF-8&q={searchTerms}&sa=Search&ref=#gsc.tab=0&gsc.q={searchTerms}&gsc.page=1
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {828B376B-F2F6-4778-928C-E29EC877535E} URL = google.com/cse?cx=partner-pub-0900663996874144:6813731868&ie=UTF-8&q={searchTerms}&sa=Search&ref=#gsc.tab=0&gsc.q={searchTerms}&gsc.page=1
SearchScopes: HKCU - {B25876BB-699E-4102-94D3-A9158A51929A} URL = google.com/search?q={searchTerms}
Hosts: 127.0.0.1 validation.sls.microsoft.com
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\6b8wsp5z.default-1414252691355
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_189.dll ()
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_189.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.5\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: anvisoft.com/AdblockPlugin -> C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\npAdblockPlugin.dll (Anvisoft)
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pogodakyu.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\vokabular.xml
FF Extension: Google Translator for Firefox - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\6b8wsp5z.default-1414252691355\Extensions\translator@zoli.bod.xpi [2014-10-25]

Chrome:
=======
CHR HomePage: Profile 1 -> hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-104&v=r11465-300&t=4
CHR DefaultSuggestURL: Profile 1 -> ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Ask Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aaaaafeopjhkcolncjbedbhofpocmdbn [2014-08-15]
CHR Extension: (Google документи) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2014-03-13]
CHR Extension: (Google диск) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-03-13]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-03-13]
CHR Extension: (Google претрага) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-03-13]
CHR Extension: (My-Cool-SMS) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\dclimghbefcfomoafldeipkhbfhdinpg [2014-04-11]
CHR Extension: (Earth) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jieopfhnlbjmbpckpdhfdedccdmngdac [2014-04-11]
CHR Extension: (Google новчаник) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-03-13]
CHR Extension: (ImTranslator: Google Translate) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\noaijdpnepcgjemiklgfkcfbkokogabh [2014-06-09]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-03-13]
CHR HKLM-x32\...\Chrome\Extension: [lhmiofmipcpmhgihiecmpiekcacigpgb] - C:\ProgramData\Anvisoft\Anvi Smart Defender 2\extensions\chrome.crx [2014-04-30]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 !SASCORE; d:\Program Files\SUPERAntiSpyware\SASCORE64.EXE [172344 2014-07-23] (SUPERAntiSpyware.com)
R2 ASD2Svc; C:\Program Files (x86)\Anvisoft\Anvi Smart Defender\ASD2Srv.exe [1206504 2014-08-20] (Anvisoft)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3364368 2014-09-05] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [293448 2014-09-05] (AVG Technologies CZ, s.r.o.)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2014-03-28] ()
S2 MDM; "C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe" [X]
S3 MozillaMaintenance; "C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe" [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 asd2fsm; C:\Windows\System32\DRIVERS\asd2fsm.sys [48656 2014-08-20] (Anvisoft)
R1 Asdids; C:\Windows\System32\DRIVERS\asdids.sys [47632 2014-08-20] (Anvisoft)
R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [153368 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [247576 2014-07-24] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [190744 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [243480 2014-08-20] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [313624 2014-07-18] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [123672 2014-08-06] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [31512 2014-06-18] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [270616 2014-07-02] (AVG Technologies CZ, s.r.o.)
R3 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2014-10-26] (Disc Soft Ltd)
R1 SASDIFSV; d:\Program Files\SUPERAntiSpyware\SASDIFSV64.SYS [14928 2011-07-22] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R1 SASKUTIL; d:\Program Files\SUPERAntiSpyware\SASKUTIL64.SYS [12368 2011-07-12] (SUPERAdBlocker.com and SUPERAntiSpyware.com)
R0 sptd; C:\Windows\System32\Drivers\sptd.sys [381440 2014-03-10] (Duplex Secure Ltd.)
U3 ae5ikd2x; C:\Windows\System32\Drivers\ae5ikd2x.sys [0 ] (Advanced Micro Devices)
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 GPU-Z; \??\C:\Users\User\AppData\Local\Temp\GPU-Z.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-26 15:15 - 2014-10-26 15:15 - 00023662 _____ () C:\Users\User\Downloads\Addition.txt
2014-10-26 15:14 - 2014-10-26 15:25 - 00014546 _____ () C:\Users\User\Downloads\FRST.txt
2014-10-26 15:11 - 2014-10-26 15:11 - 02113024 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2014-10-26 07:58 - 2014-10-26 15:23 - 00283064 _____ (Disc Soft Ltd) C:\Windows\system32\Drivers\dtsoftbus01.sys
2014-10-26 07:57 - 2014-10-26 07:57 - 00023500 _____ () C:\Windows\PFRO.log
2014-10-26 07:57 - 2014-10-26 07:57 - 00000056 _____ () C:\Windows\setupact.log
2014-10-26 07:57 - 2014-10-26 07:57 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-25 20:15 - 2014-10-25 20:15 - 06000640 _____ () C:\Program Files (x86)\GUT40BD.tmp
2014-10-25 20:15 - 2014-10-25 20:15 - 00000000 ____D () C:\Program Files (x86)\GUM40BC.tmp
2014-10-25 18:44 - 2014-10-26 07:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2014-10-25 18:44 - 2014-10-26 07:57 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2014-10-25 18:44 - 2014-10-25 20:17 - 00001163 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2014-10-25 18:44 - 2014-10-25 20:17 - 00001151 _____ () C:\Users\Public\Desktop\Mozilla Firefox.lnk
2014-10-25 18:42 - 2014-10-25 18:42 - 00244280 _____ () C:\Users\User\Downloads\Firefox Setup Stub 33.0.exe
2014-10-25 18:25 - 2014-10-25 18:25 - 00154412 ____H () C:\Windows\SysWOW64\mlfcache.dat
2014-10-25 18:23 - 2014-10-25 18:23 - 00002503 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Safari.lnk
2014-10-25 18:23 - 2014-10-25 18:23 - 00002491 _____ () C:\Users\Public\Desktop\Safari.lnk
2014-10-25 18:22 - 2014-10-25 18:22 - 00000000 ____D () C:\Program Files\Bonjour
2014-10-25 18:22 - 2014-10-25 18:22 - 00000000 ____D () C:\Program Files (x86)\Bonjour
2014-10-25 18:15 - 2014-10-25 18:22 - 38494576 _____ (Apple Inc.) C:\Users\User\Downloads\SafariSetup.exe
2014-10-25 18:14 - 2014-10-25 18:16 - 31897256 _____ (Opera Software) C:\Users\User\Downloads\Opera_25.0.1614.50_Setup.exe
2014-10-25 18:09 - 2014-10-25 18:09 - 00868256 _____ (Opera Software) C:\Users\User\Downloads\Opera_NI_stable.exe
2014-10-25 17:31 - 2014-10-25 17:31 - 00000889 _____ () C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
2014-10-25 17:31 - 2014-10-25 17:31 - 00000000 ____D () C:\Users\User\AppData\Local\VS Revo Group
2014-10-25 17:31 - 2014-10-25 17:31 - 00000000 ____D () C:\ProgramData\VS Revo Group
2014-10-25 17:31 - 2014-10-25 17:31 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
2014-10-25 17:31 - 2009-12-30 10:21 - 00031800 _____ (VS Revo Group) C:\Windows\system32\Drivers\revoflt.sys
2014-10-25 17:30 - 2014-10-25 17:31 - 10691640 _____ (VS Revo Group ) C:\Users\User\Downloads\RevoUninProSetup.exe
2014-10-25 17:17 - 2014-10-25 17:17 - 06000640 _____ () C:\Program Files (x86)\GUTDEC0.tmp
2014-10-25 17:17 - 2014-10-25 17:17 - 00000000 ____D () C:\Program Files (x86)\GUMDEBF.tmp
2014-10-25 16:58 - 2014-10-25 16:58 - 00000000 ____D () C:\Users\User\Desktop\Стари подаци програма Firefox
2014-10-25 16:52 - 2014-10-25 17:41 - 00003918 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{D73E6162-1336-4A20-9C22-9208410B2627}
2014-10-24 19:31 - 2014-10-24 19:31 - 06000640 _____ () C:\Program Files (x86)\GUTDD19.tmp
2014-10-24 19:31 - 2014-10-24 19:31 - 00880272 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup(1).exe
2014-10-24 19:31 - 2014-10-24 19:31 - 00000000 ____D () C:\Program Files (x86)\GUMDD18.tmp
2014-10-24 19:29 - 2014-10-24 19:29 - 06000640 _____ () C:\Program Files (x86)\GUT2CD9.tmp
2014-10-24 19:29 - 2014-10-24 19:29 - 00000000 ____D () C:\Program Files (x86)\GUMB4E9.tmp
2014-10-24 19:29 - 2014-10-24 19:29 - 00000000 ____D () C:\Program Files (x86)\GUM2CD8.tmp
2014-10-24 19:29 - 2014-10-24 19:29 - 00000000 _____ () C:\Program Files (x86)\GUTB4EA.tmp
2014-10-24 19:28 - 2014-10-24 19:28 - 06000640 _____ () C:\Program Files (x86)\GUTE804.tmp
2014-10-24 19:28 - 2014-10-24 19:28 - 06000640 _____ () C:\Program Files (x86)\GUT3E91.tmp
2014-10-24 19:28 - 2014-10-24 19:28 - 00000000 ____D () C:\Program Files (x86)\GUME803.tmp
2014-10-24 19:28 - 2014-10-24 19:28 - 00000000 ____D () C:\Program Files (x86)\GUM3E90.tmp
2014-10-24 19:27 - 2014-10-24 19:27 - 00880272 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup.exe
2014-10-24 19:02 - 2014-10-24 19:02 - 06000640 _____ () C:\Program Files (x86)\GUTD210.tmp
2014-10-24 19:02 - 2014-10-24 19:02 - 00000000 ____D () C:\Program Files (x86)\GUMD20F.tmp
2014-10-24 16:12 - 2014-10-24 16:28 - 00000000 ____D () C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2014-10-24 16:12 - 2014-10-24 16:12 - 00128728 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-24 16:12 - 2014-10-24 16:12 - 00000000 ____D () C:\ProgramData\Malwarebytes
2014-10-24 16:11 - 2014-10-25 16:44 - 00000000 ____D () C:\Users\User\Desktop\mbar
2014-10-24 16:11 - 2014-10-24 16:11 - 00092888 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-24 16:08 - 2014-10-24 16:08 - 00001562 _____ () C:\Users\User\Desktop\JRT.txt
2014-10-24 16:00 - 2014-10-24 16:00 - 00000000 ____D () C:\Windows\ERUNT
2014-10-23 19:52 - 2014-10-26 15:02 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-23 19:52 - 2014-10-23 19:52 - 00701104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-23 19:52 - 2014-10-23 19:52 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-23 19:52 - 2014-10-23 19:52 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2014-10-23 15:49 - 2014-10-23 15:49 - 06000640 _____ () C:\Program Files (x86)\GUT675C.tmp
2014-10-23 15:49 - 2014-10-23 15:49 - 00000000 ____D () C:\Program Files (x86)\GUM673C.tmp
2014-10-23 15:40 - 2014-10-24 19:37 - 00000000 ____D () C:\AdwCleaner
2014-10-23 15:40 - 2014-10-23 15:40 - 01962496 _____ () C:\Users\User\Downloads\adwcleaner_4.001.exe
2014-10-23 15:31 - 2014-10-23 15:31 - 06000640 _____ () C:\Program Files (x86)\GUT79BF.tmp
2014-10-23 15:31 - 2014-10-23 15:31 - 00000000 ____D () C:\Program Files (x86)\GUM79BE.tmp
2014-10-23 15:26 - 2014-10-23 15:26 - 06000640 _____ () C:\Program Files (x86)\GUTBE62.tmp
2014-10-23 15:26 - 2014-10-23 15:26 - 00000000 ____D () C:\Program Files (x86)\GUMBE61.tmp
2014-10-23 15:23 - 2014-10-23 15:23 - 00000000 ____D () C:\Program Files (x86)\GUM8E71.tmp
2014-10-23 15:23 - 2014-10-23 15:23 - 00000000 _____ () C:\Program Files (x86)\GUT8E72.tmp
2014-10-23 15:21 - 2014-10-23 15:21 - 06000640 _____ () C:\Program Files (x86)\GUTB964.tmp
2014-10-23 15:21 - 2014-10-23 15:21 - 00000000 ____D () C:\Program Files (x86)\GUMB963.tmp
2014-10-23 15:18 - 2014-10-23 15:18 - 00000000 ____D () C:\Program Files (x86)\GUM7FC3.tmp
2014-10-23 15:18 - 2014-10-23 15:18 - 00000000 _____ () C:\Program Files (x86)\GUT7FC4.tmp
2014-10-23 15:09 - 2014-10-23 15:09 - 00880272 _____ (Google Inc.) C:\Users\User\Downloads\ChromeSetup (1).exe
2014-10-23 15:09 - 2014-10-23 15:09 - 00000000 ____D () C:\Program Files (x86)\GUMC60A.tmp
2014-10-23 15:09 - 2014-10-23 15:09 - 00000000 _____ () C:\Program Files (x86)\GUTC60B.tmp
2014-10-23 14:04 - 2014-10-23 14:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\SUPERAntiSpyware.com
2014-10-23 14:02 - 2014-10-25 17:14 - 00000000 ____D () C:\Windows\system32\appmgmt
2014-10-23 13:55 - 2014-10-23 13:55 - 00000858 _____ () C:\Users\Public\Desktop\SUPERAntiSpyware Free Edition.lnk
2014-10-23 13:55 - 2014-10-23 13:55 - 00000000 ____D () C:\ProgramData\SUPERAntiSpyware.com
2014-10-23 13:55 - 2014-10-23 13:55 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SUPERAntiSpyware
2014-10-23 13:51 - 2014-10-23 13:53 - 19686112 _____ (SUPERAntiSpyware) C:\Users\User\Downloads\SUPERAntiSpyware.exe
2014-10-22 21:02 - 2014-10-22 21:02 - 00000000 ____D () C:\Users\User\AppData\Roaming\AVG2015
2014-10-22 21:00 - 2014-10-22 21:00 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2014-10-22 21:00 - 2014-10-22 21:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2014-10-22 20:56 - 2014-10-22 21:00 - 00000000 ____D () C:\ProgramData\AVG2015
2014-10-22 16:51 - 2014-10-22 16:51 - 00388608 _____ (Trend Micro Inc.) C:\Users\User\Downloads\HijackThis.exe
2014-10-22 16:46 - 2014-10-22 16:44 - 05338896 _____ (PC Cleaners) C:\ProgramData\pclunst.exe
2014-10-22 16:44 - 2014-10-22 16:44 - 05338896 _____ (PC Cleaners) C:\Users\User\Downloads\app3_Install_eng.exe
2014-10-21 21:54 - 2014-10-21 22:17 - 00000049 _____ () C:\Users\User\Desktop\AnviSoft.url
2014-10-21 17:26 - 2014-10-26 07:58 - 00000000 ____D () C:\ProgramData\boost_interprocess
2014-10-21 17:26 - 2014-10-21 17:26 - 00003274 _____ () C:\Windows\System32\Tasks\ASD_Main
2014-10-21 17:26 - 2014-10-21 17:26 - 00001195 _____ () C:\Users\Public\Desktop\Anvi Smart Defender.lnk
2014-10-21 17:26 - 2014-10-21 17:26 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Anvisoft
2014-10-21 17:25 - 2014-10-21 17:25 - 00000000 ____D () C:\ProgramData\Anvisoft
2014-10-21 17:25 - 2014-08-20 07:52 - 00048656 _____ (Anvisoft) C:\Windows\system32\Drivers\asd2fsm.sys
2014-10-21 17:24 - 2014-10-21 17:24 - 00000000 ____D () C:\Program Files (x86)\Anvisoft
2014-10-21 17:23 - 2014-10-21 17:24 - 00000000 ____D () C:\Windows\ACF5FE1B377240688B872D2A6EFD0A05.TMP
2014-10-21 17:19 - 2014-10-21 17:24 - 36024808 _____ (Anvisoft) C:\Users\User\Downloads\asdsetup.exe
2014-10-21 13:59 - 2014-10-21 13:59 - 00000000 _____ () C:\autoexec.bat
2014-10-21 13:51 - 2014-10-21 13:52 - 00728960 _____ (Enigma Software Group USA, LLC.) C:\Users\User\Downloads\SpyHunter-Installer.exe
2014-10-21 00:16 - 2014-10-21 00:18 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.3.1025(1).exe
2014-10-20 23:32 - 2014-10-20 23:33 - 19828376 _____ (Malwarebytes Corporation ) C:\Users\User\Downloads\mbam-setup-2.0.3.1025.exe
2014-10-20 22:49 - 2014-10-23 13:48 - 00000000 ____D () C:\Users\User\AppData\Local\Avg2015
2014-10-20 22:46 - 2014-10-26 15:25 - 00000000 ____D () C:\FRST
2014-10-20 21:57 - 2014-10-25 20:11 - 00000000 ____D () C:\Users\User\AppData\Roaming\fportable
2014-10-20 21:57 - 2014-10-20 21:57 - 00000000 _RSHD () C:\ProgramData\nvxasync
2014-10-20 21:57 - 2014-10-20 21:56 - 00073728 _____ () C:\Users\User\AppData\Local\Web Data
2014-10-20 21:56 - 2014-10-24 11:00 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\nvxasync
2014-10-20 21:56 - 2014-10-20 21:56 - 40068694 _____ () C:\Users\User\AppData\Roaming\fpacked.exe
2014-10-18 08:00 - 2014-06-27 03:08 - 02777088 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2014-10-18 08:00 - 2014-06-27 02:45 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2014-10-18 07:52 - 2014-10-07 03:54 - 00378552 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-18 07:52 - 2014-10-07 03:04 - 00331448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-18 07:52 - 2014-09-25 23:50 - 13619200 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-18 07:52 - 2014-09-25 23:46 - 00365056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-18 07:52 - 2014-09-25 23:46 - 00243200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-18 07:52 - 2014-09-25 23:46 - 00069632 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-18 07:52 - 2014-09-25 23:43 - 11807232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-18 07:52 - 2014-09-25 23:32 - 02017280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-18 07:52 - 2014-09-25 23:31 - 02108416 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-18 07:52 - 2014-09-19 03:25 - 23631360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-18 07:52 - 2014-09-19 02:56 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-18 07:52 - 2014-09-19 02:55 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-10-18 07:52 - 2014-09-19 02:44 - 17484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-18 07:52 - 2014-09-19 02:41 - 02796032 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-18 07:52 - 2014-09-19 02:40 - 00547328 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-10-18 07:52 - 2014-09-19 02:40 - 00066048 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-18 07:52 - 2014-09-19 02:39 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-10-18 07:52 - 2014-09-19 02:38 - 00083968 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2014-10-18 07:52 - 2014-09-19 02:36 - 05829632 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-18 07:52 - 2014-09-19 02:31 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-18 07:52 - 2014-09-19 02:30 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-18 07:52 - 2014-09-19 02:27 - 00595968 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-10-18 07:52 - 2014-09-19 02:26 - 00139264 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-10-18 07:52 - 2014-09-19 02:25 - 04201472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-18 07:52 - 2014-09-19 02:25 - 00758272 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-10-18 07:52 - 2014-09-19 02:25 - 00111616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-10-18 07:52 - 2014-09-19 02:18 - 00940032 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-10-18 07:52 - 2014-09-19 02:14 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-18 07:52 - 2014-09-19 02:14 - 00446464 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-18 07:52 - 2014-09-19 02:06 - 00072704 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-10-18 07:52 - 2014-09-19 02:02 - 00454656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2014-10-18 07:52 - 2014-09-19 02:01 - 00195584 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-18 07:52 - 2014-09-19 02:01 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-18 07:52 - 2014-09-19 02:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2014-10-18 07:52 - 2014-09-19 02:00 - 00085504 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-18 07:52 - 2014-09-19 01:59 - 00061952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2014-10-18 07:52 - 2014-09-19 01:58 - 00289280 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-18 07:52 - 2014-09-19 01:55 - 02187264 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-18 07:52 - 2014-09-19 01:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-18 07:52 - 2014-09-19 01:53 - 00032768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-18 07:52 - 2014-09-19 01:51 - 00440320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2014-10-18 07:52 - 2014-09-19 01:50 - 00112128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2014-10-18 07:52 - 2014-09-19 01:49 - 00597504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2014-10-18 07:52 - 2014-09-19 01:42 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-18 07:52 - 2014-09-19 01:42 - 00710656 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-18 07:52 - 2014-09-19 01:40 - 01249280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2014-10-18 07:52 - 2014-09-19 01:36 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2014-10-18 07:52 - 2014-09-19 01:33 - 02309632 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-18 07:52 - 2014-09-19 01:32 - 00164864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-18 07:52 - 2014-09-19 01:20 - 00607744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-18 07:52 - 2014-09-19 01:18 - 01068032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2014-10-18 07:52 - 2014-09-19 01:14 - 01447936 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-18 07:52 - 2014-09-19 00:59 - 01810944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-18 07:52 - 2014-09-19 00:59 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-10-18 07:52 - 2014-09-19 00:53 - 01190400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-18 07:52 - 2014-09-19 00:52 - 00678400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2014-10-18 07:52 - 2014-08-29 03:07 - 03179520 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-18 07:51 - 2014-10-10 03:05 - 00507392 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2014-10-18 07:51 - 2014-10-10 03:05 - 00276480 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2014-10-18 07:51 - 2014-10-10 03:00 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2014-10-18 07:51 - 2014-09-18 03:00 - 03241472 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-18 07:51 - 2014-09-18 02:32 - 02363904 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-18 07:51 - 2014-08-01 12:53 - 01031168 _____ (Microsoft Corporation) C:\Windows\system32\TSWorkspace.dll
2014-10-18 07:51 - 2014-08-01 12:35 - 00793600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSWorkspace.dll
2014-10-18 07:51 - 2014-07-17 03:07 - 00681984 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-18 07:51 - 2014-07-17 03:07 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\winlogon.exe
2014-10-18 07:51 - 2014-07-17 03:07 - 00235520 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-18 07:51 - 2014-07-17 03:07 - 00150528 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorekmts.dll
2014-10-18 07:51 - 2014-07-17 03:07 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2014-10-18 07:51 - 2014-07-17 03:07 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2014-10-18 07:51 - 2014-07-17 02:40 - 00157696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-18 07:51 - 2014-07-17 02:39 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2014-10-18 07:51 - 2014-07-17 02:39 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2014-10-18 07:51 - 2014-07-17 02:21 - 00212480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\rdpwd.sys
2014-10-18 07:51 - 2014-07-17 02:21 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tssecsrv.sys
2014-10-18 07:51 - 2014-07-07 03:06 - 01460736 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2014-10-18 07:51 - 2014-07-07 03:06 - 00728064 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2014-10-18 07:51 - 2014-07-07 02:40 - 00550912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2014-10-18 07:51 - 2014-07-07 02:40 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2014-10-18 07:51 - 2014-07-07 02:39 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2014-10-18 07:50 - 2014-09-09 23:11 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2014-10-18 07:50 - 2014-09-09 22:47 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2014-10-18 07:50 - 2014-06-24 04:29 - 02565120 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-10-18 07:50 - 2014-06-24 03:59 - 01987584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-10-18 07:49 - 2014-09-29 01:58 - 03198976 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-18 07:49 - 2014-09-25 03:08 - 00371712 _____ (Microsoft Corporation) C:\Windows\system32\qdvd.dll
2014-10-18 07:49 - 2014-09-25 02:40 - 00519680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2014-10-18 07:49 - 2014-09-04 06:23 - 00424448 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-18 07:49 - 2014-09-04 06:04 - 00372736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-18 07:49 - 2014-06-18 23:23 - 01943696 _____ (Microsoft Corporation) C:\Windows\system32\dfshim.dll
2014-10-18 07:49 - 2014-06-18 23:23 - 01131664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dfshim.dll
2014-10-18 07:49 - 2014-06-18 23:23 - 00156824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscorier.dll
2014-10-18 07:49 - 2014-06-18 23:23 - 00156312 _____ (Microsoft Corporation) C:\Windows\system32\mscorier.dll
2014-10-18 07:49 - 2014-06-18 23:23 - 00081560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mscories.dll
2014-10-18 07:49 - 2014-06-18 23:23 - 00073880 _____ (Microsoft Corporation) C:\Windows\system32\mscories.dll
2014-10-18 07:45 - 2014-09-05 03:11 - 06584320 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-18 07:45 - 2014-09-05 02:52 - 05703168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-18 07:43 - 2014-10-23 14:05 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-18 07:41 - 2014-08-23 03:07 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2014-10-18 07:41 - 2014-08-23 02:45 - 00311808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2014-10-18 07:40 - 2014-09-13 02:58 - 00077312 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-18 07:40 - 2014-09-13 02:40 - 00067072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-15 14:02 - 2014-10-15 14:02 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieUserList
2014-10-15 14:02 - 2014-10-15 14:02 - 00000000 __SHD () C:\Users\User\AppData\Local\EmieSiteList
2014-10-15 13:43 - 2014-10-15 13:43 - 00000000 ____D () C:\ProgramData\McAfee

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-26 15:25 - 2009-07-14 06:13 - 00781298 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-26 15:05 - 2014-03-08 15:05 - 00002382 _____ () C:\Windows\Tasks\plushd8.1-validator.job
2014-10-26 15:04 - 2014-03-31 16:34 - 00000898 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-26 12:58 - 2014-03-26 20:50 - 02091914 _____ () C:\Windows\WindowsUpdate.log
2014-10-26 08:55 - 2014-02-27 17:22 - 00000000 ____D () C:\ProgramData\MFAData
2014-10-26 08:06 - 2009-07-14 05:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-10-26 08:06 - 2009-07-14 05:45 - 00026352 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-10-26 08:04 - 2014-03-31 16:34 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-26 07:58 - 2014-03-08 15:10 - 00000000 ____D () C:\Program Files (x86)\DAEMON Tools Lite
2014-10-26 07:58 - 2009-07-14 06:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-25 18:24 - 2014-03-23 06:46 - 00000000 ____D () C:\Users\User\AppData\Roaming\Apple Computer
2014-10-25 18:24 - 2014-03-22 09:27 - 00000000 ____D () C:\Users\User\AppData\Local\Apple Computer
2014-10-25 17:34 - 2014-03-08 14:59 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2014-10-25 17:16 - 2014-04-21 09:07 - 00000000 ____D () C:\Program Files (x86)\Microsoft Games for Windows - LIVE
2014-10-24 19:03 - 2014-06-09 14:28 - 00000000 ____D () C:\Users\User\AppData\Roaming\Winamp
2014-10-24 19:03 - 2014-03-08 15:10 - 00000000 ____D () C:\Users\User\AppData\Roaming\DAEMON Tools Lite
2014-10-23 19:53 - 2014-03-07 15:01 - 00000000 ____D () C:\Users\User\AppData\Local\Adobe
2014-10-23 14:43 - 2014-03-08 15:05 - 00000000 ____D () C:\Program Files (x86)\plushd8.1
2014-10-23 14:41 - 2014-03-08 13:53 - 00000000 ____D () C:\Users\User\AppData\Local\Google
2014-10-22 21:04 - 2014-02-27 17:24 - 00000000 ____D () C:\ProgramData\AVG2014
2014-10-22 21:02 - 2014-02-27 17:23 - 00000000 ____D () C:\Program Files (x86)\AVG
2014-10-22 21:01 - 2014-02-27 17:24 - 00000000 ___HD () C:\$AVG
2014-10-20 06:59 - 2014-03-31 16:34 - 00003894 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2014-10-20 06:59 - 2014-03-31 16:34 - 00003642 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2014-10-18 08:48 - 2009-07-14 05:45 - 00350288 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-18 08:46 - 2014-05-27 18:48 - 00000000 ___SD () C:\Windows\system32\CompatTel
2014-10-18 08:04 - 2014-02-27 15:26 - 00765280 _____ () C:\Windows\SysWOW64\PerfStringBackup.INI
2014-10-18 08:00 - 2014-02-27 15:29 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-18 07:46 - 2014-05-25 19:43 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-17 16:58 - 2014-04-13 15:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2014-10-17 16:34 - 2014-03-09 09:55 - 00000000 ____D () C:\Windows\SysWOW64\directx
2014-10-17 13:53 - 2009-07-14 06:08 - 00032648 _____ () C:\Windows\Tasks\SCHEDLGU.TXT
2014-10-03 09:02 - 2010-04-19 01:19 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Files to move or delete:
====================
C:\ProgramData\pclunst.exe


Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\My PC Backup.exe
C:\Users\User\AppData\Local\Temp\SHSetup.exe
C:\Users\User\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-26 08:52

==================== End Of Log ============================

Dopuna: 26 Okt 2014 17:11

Inače jedan od problema je što ne koristim samo ja računar, pa nisam siguran ,šta je sve pokušavano i na koji način da se "popravi" stanje, .

offline
  • Research Engineer @MalwareBytes
  • Pridružio: 09 Avg 2011
  • Poruke: 15877
  • Gde živiš: Beograd

Pozdrav,



1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

closeprocesses:
emptytemp:
C:\ProgramData\nvxasync
C:\Users\User\AppData\Roaming\nvxasync
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Run: [nvxasync] => C:\Users\User\AppData\Roaming\nvxasync\nvxasync.exe [76678656 2014-10-20] ()
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Policies\Explorer: [NoFavorites] 0
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {0acd1aef-a9e7-11e3-becf-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {24dcf160-a861-11e3-8b3f-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {29ad312b-02a6-11e4-8fab-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {2eb11547-a76f-11e3-a578-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {3ace6e97-0388-11e4-8a85-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {4a63edbc-a766-11e3-b92c-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {7ee8d5e9-2845-11e4-be54-6c626d5a6b55} - F:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {83f8d0f9-033c-11e4-ae25-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {8b0f1268-b0b0-11e3-ad8c-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {976365e8-af1e-11e3-b6a5-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {9b3567ef-ab6d-11e3-99f0-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {a2f9286f-00dc-11e4-9171-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {a85d4b12-2986-11e4-ac80-6c626d5a6b55} - F:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {da00336f-ada2-11e3-b12f-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {e63d49ef-a8e5-11e3-add2-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {ed8d152a-256f-11e4-bbc5-6c626d5a6b55} - E:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Winlogon: [Shell] C:\ProgramData\nvxasync\cvxasync.exe [76678656 2014-10-20] () <==== ATTENTION
HKU\S-1-5-18\...\Run: [] => (the data entry has 824 more characters).
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-Latn-RS
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.surfvox.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKCU - DefaultScope {828B376B-F2F6-4778-928C-E29EC877535E} URL = http://www.google.com/cse?cx=partner-pub-0900663996874144:6813731868&ie=UTF-8&q={searchTerms}&sa=Search&ref=#gsc.tab=0&gsc.q={searchTerms}&gsc.page=1
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {828B376B-F2F6-4778-928C-E29EC877535E} URL = http://www.google.com/cse?cx=partner-pub-0900663996874144:6813731868&ie=UTF-8&q={searchTerms}&sa=Search&ref=#gsc.tab=0&gsc.q={searchTerms}&gsc.page=1
SearchScopes: HKCU - {B25876BB-699E-4102-94D3-A9158A51929A} URL = https://www.google.com/search?q={searchTerms}
Hosts: 127.0.0.1 validation.sls.microsoft.com
hosts:
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pogodakyu.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\vokabular.xml
CHR HomePage: Profile 1 -> hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-104&v=r11465-300&t=4
CHR DefaultSuggestURL: Profile 1 -> http://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 GPU-Z; \??\C:\Users\User\AppData\Local\Temp\GPU-Z.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2014-10-20 21:57 - 2014-10-25 20:11 - 00000000 ____D () C:\Users\User\AppData\Roaming\fportable
2014-10-20 21:57 - 2014-10-20 21:57 - 00000000 _RSHD () C:\ProgramData\nvxasync
2014-10-20 21:57 - 2014-10-20 21:56 - 00073728 _____ () C:\Users\User\AppData\Local\Web Data
2014-10-20 21:56 - 2014-10-24 11:00 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\nvxasync
2014-10-20 21:56 - 2014-10-20 21:56 - 40068694 _____ () C:\Users\User\AppData\Roaming\fpacked.exe
C:\ProgramData\pclunst.exe


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.




Skeniranje sa AdwCleaner

Preuzmi AdwCleaner i sačuvaj ga na Desktop.

Pokreni alat i sačekaj da se izvrši ažuriranje.
Prihvati Terms of use tako što ćeš kliknuti na I Agree.
Klikni Scan i sačekaj da se skeniranje završi.
Kada je gotovo, klikni Clean.
Pojaviće se poruka da će svi programi biti zaustavljeni nakon što klikneš OK, tako da ako imaš nešto da sačuvaš, sada je vreme da to uradiš.
Pojaviše se još dve poruke gde je potrebno kliknuti OK. Računar će se restartovati.
Nakon restarta, otvoriće se izveštaj, čiji sadržaj možeš kopirati u sledeću poruku.

Napomena: Izveštaji će biti sačuvani na tvoju sistemsku particiju, obično je to folder C:\AdwCleaner

offline
  • AS2  Male
  • Građanin
  • Pridružio: 30 Avg 2014
  • Poruke: 45

Loaded Profile: User (Available profiles: User)
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
closeprocesses:
emptytemp:
C:\ProgramData\nvxasync
C:\Users\User\AppData\Roaming\nvxasync
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Run: [nvxasync] => C:\Users\User\AppData\Roaming\nvxasync\nvxasync.exe [76678656 2014-10-20] ()
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Policies\Explorer: [NoFolderOptions] 0
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Policies\Explorer: [NoFavorites] 0
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {0acd1aef-a9e7-11e3-becf-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {24dcf160-a861-11e3-8b3f-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {29ad312b-02a6-11e4-8fab-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {2eb11547-a76f-11e3-a578-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {3ace6e97-0388-11e4-8a85-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {4a63edbc-a766-11e3-b92c-6c626d5a6b55} - F:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {7ee8d5e9-2845-11e4-be54-6c626d5a6b55} - F:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {83f8d0f9-033c-11e4-ae25-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {8b0f1268-b0b0-11e3-ad8c-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {976365e8-af1e-11e3-b6a5-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {9b3567ef-ab6d-11e3-99f0-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {a2f9286f-00dc-11e4-9171-6c626d5a6b55} - F:\AUTORUN.EXE
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {a85d4b12-2986-11e4-ac80-6c626d5a6b55} - F:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {da00336f-ada2-11e3-b12f-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {e63d49ef-a8e5-11e3-add2-6c626d5a6b55} - G:\setup.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\MountPoints2: {ed8d152a-256f-11e4-bbc5-6c626d5a6b55} - E:\Setup.now.exe
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\...\Winlogon: [Shell] C:\ProgramData\nvxasync\cvxasync.exe [76678656 2014-10-20] () <==== ATTENTION
HKU\S-1-5-18\...\Run: [] => (the data entry has 824 more characters).
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-Latn-RS
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = surfvox.com/
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
SearchScopes: HKCU - DefaultScope {828B376B-F2F6-4778-928C-E29EC877535E} URL = google.com/cse?cx=partner-pub-0900663996874144:6813731868&ie=UTF-8&q={searchTerms}&sa=Search&ref=#gsc.tab=0&gsc.q={searchTerms}&gsc.page=1
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKCU - {828B376B-F2F6-4778-928C-E29EC877535E} URL = google.com/cse?cx=partner-pub-0900663996874144:6813731868&ie=UTF-8&q={searchTerms}&sa=Search&ref=#gsc.tab=0&gsc.q={searchTerms}&gsc.page=1
SearchScopes: HKCU - {B25876BB-699E-4102-94D3-A9158A51929A} URL = google.com/search?q={searchTerms}
Hosts: 127.0.0.1 validation.sls.microsoft.com
hosts:
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-en-GB.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pogodakyu.xml
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\vokabular.xml
CHR HomePage: Profile 1 -> hxxp://www.search.ask.com/?o=APN10640A&gct=hp&d=473-104&v=r11465-300&t=4
CHR DefaultSuggestURL: Profile 1 -> ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
S3 esgiguard; \??\C:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 GPU-Z; \??\C:\Users\User\AppData\Local\Temp\GPU-Z.sys [X]
S4 NVHDA; system32\drivers\nvhda64v.sys [X]
S4 nvlddmkm; system32\DRIVERS\nvlddmkm.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
2014-10-20 21:57 - 2014-10-25 20:11 - 00000000 ____D () C:\Users\User\AppData\Roaming\fportable
2014-10-20 21:57 - 2014-10-20 21:57 - 00000000 _RSHD () C:\ProgramData\nvxasync
2014-10-20 21:57 - 2014-10-20 21:56 - 00073728 _____ () C:\Users\User\AppData\Local\Web Data
2014-10-20 21:56 - 2014-10-24 11:00 - 00000000 _RSHD () C:\Users\User\AppData\Roaming\nvxasync
2014-10-20 21:56 - 2014-10-20 21:56 - 40068694 _____ () C:\Users\User\AppData\Roaming\fpacked.exe
C:\ProgramData\pclunst.exe
*****************

Processes closed successfully.
C:\ProgramData\nvxasync => Moved successfully.
C:\Users\User\AppData\Roaming\nvxasync => Moved successfully.
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\Software\Microsoft\Windows\CurrentVersion\Run\\nvxasync => value deleted successfully.
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFolderOptions => value deleted successfully.
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\\NoFavorites => value deleted successfully.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0acd1aef-a9e7-11e3-becf-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{0acd1aef-a9e7-11e3-becf-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{24dcf160-a861-11e3-8b3f-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{24dcf160-a861-11e3-8b3f-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{29ad312b-02a6-11e4-8fab-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{29ad312b-02a6-11e4-8fab-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{2eb11547-a76f-11e3-a578-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{2eb11547-a76f-11e3-a578-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3ace6e97-0388-11e4-8a85-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{3ace6e97-0388-11e4-8a85-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4a63edbc-a766-11e3-b92c-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{4a63edbc-a766-11e3-b92c-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{7ee8d5e9-2845-11e4-be54-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{7ee8d5e9-2845-11e4-be54-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{83f8d0f9-033c-11e4-ae25-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{83f8d0f9-033c-11e4-ae25-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{8b0f1268-b0b0-11e3-ad8c-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{8b0f1268-b0b0-11e3-ad8c-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{976365e8-af1e-11e3-b6a5-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{976365e8-af1e-11e3-b6a5-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{9b3567ef-ab6d-11e3-99f0-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{9b3567ef-ab6d-11e3-99f0-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a2f9286f-00dc-11e4-9171-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{a2f9286f-00dc-11e4-9171-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{a85d4b12-2986-11e4-ac80-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{a85d4b12-2986-11e4-ac80-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{da00336f-ada2-11e3-b12f-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{da00336f-ada2-11e3-b12f-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e63d49ef-a8e5-11e3-add2-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{e63d49ef-a8e5-11e3-add2-6c626d5a6b55}" => Key not found.
"HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{ed8d152a-256f-11e4-bbc5-6c626d5a6b55}" => Key deleted successfully.
"HKCR\CLSID\{ed8d152a-256f-11e4-bbc5-6c626d5a6b55}" => Key not found.
HKU\S-1-5-21-2612472555-3397990675-4081938946-1000\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\\Shell => value deleted successfully.
HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\ => value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page Redirect Cache AcceptLangs => value deleted successfully.
HKCU\Software\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Local Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Search_URL => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Search Page => Value was restored successfully.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value deleted successfully.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key deleted successfully.
"HKCR\CLSID\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{828B376B-F2F6-4778-928C-E29EC877535E}" => Key deleted successfully.
"HKCR\CLSID\{828B376B-F2F6-4778-928C-E29EC877535E}" => Key not found.
"HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{B25876BB-699E-4102-94D3-A9158A51929A}" => Key deleted successfully.
"HKCR\CLSID\{B25876BB-699E-4102-94D3-A9158A51929A}" => Key not found.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
C:\Windows\System32\Drivers\etc\hosts => Moved successfully.
Hosts was reset successfully.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\amazon-en-GB.xml => Moved successfully.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\eBay-en-GB.xml => Moved successfully.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\pogodakyu.xml => Moved successfully.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\vokabular.xml => Moved successfully.
Chrome HomePage deleted successfully.
Chrome DefaultSuggestURL not detected.
esgiguard => Service deleted successfully.
GPU-Z => Service deleted successfully.
NVHDA => Service deleted successfully.
nvlddmkm => Service deleted successfully.
VGPU => Service deleted successfully.
C:\Users\User\AppData\Roaming\fportable => Moved successfully.
"C:\ProgramData\nvxasync" => File/Directory not found.
C:\Users\User\AppData\Local\Web Data => Moved successfully.
"C:\Users\User\AppData\Roaming\nvxasync" => File/Directory not found.
C:\Users\User\AppData\Roaming\fpacked.exe => Moved successfully.
C:\ProgramData\pclunst.exe => Moved successfully.
EmptyTemp: => Removed 814.9 MB temporary data.


The system needed a reboot.

==== End of Fixlog ====
# AdwCleaner v4.001 - Report created 26/10/2014 at 18:37:50
# Updated 20/10/2014 by Xplode
# Database : 2014-10-26.2
# Operating System : Windows 7 Ultimate Service Pack 1 (64 bits)
# Username : User - USER-PC
# Running from : C:\Users\User\Downloads\adwcleaner_4.001.exe
# Option : Scan

***** [ Services ] *****


***** [ Files / Folders ] *****

Folder Found : C:\Users\User\AppData\Local\CrashRpt
Folder Found : C:\Users\User\AppData\LocalLow\Toolbar4

***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****

Key Found : HKLM\SOFTWARE\14919ea49a8f3b4aa3cf1058d9a64cec

***** [ Browsers ] *****

-\\ Internet Explorer v11.0.9600.17344


-\\ Mozilla Firefox v33.0 (x86 sr)


-\\ Google Chrome v


*************************

AdwCleaner[R0].txt - [9002 octets] - [23/10/2014 15:41:18]
AdwCleaner[R1].txt - [513 octets] - [24/10/2014 19:37:37]
AdwCleaner[R2].txt - [916 octets] - [26/10/2014 18:37:50]
AdwCleaner[S0].txt - [8798 octets] - [23/10/2014 15:44:21]

########## EOF - C:\AdwCleaner\AdwCleaner[R2].txt - [1035 octets] ##########

offline
  • Research Engineer @MalwareBytes
  • Pridružio: 09 Avg 2011
  • Poruke: 15877
  • Gde živiš: Beograd

Odlicno, kakvo je sada stanje?

offline
  • AS2  Male
  • Građanin
  • Pridružio: 30 Avg 2014
  • Poruke: 45

Sada je sve u redu, chrom instaliran radi bez problema. Puno hvala Ziveli

offline
  • Research Engineer @MalwareBytes
  • Pridružio: 09 Avg 2011
  • Poruke: 15877
  • Gde živiš: Beograd

To bi onda bilo to.


Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop

Dvoklikom pokreni program.

Štikliraj sledeće opcije:
Remove disinfection tools
Purge System Restore
Reset system settings


Klikni na dugme "Run" i pričekaj da program završi rad.
Alat ce ukloniti sve koriscene alate u ovoj temi...
Kada alat završi, otvoriće izvestaj u notepadu.
Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt

Nije potrebno dostavljati izvestaj.

Ko je trenutno na forumu
 

Ukupno su 495 korisnika na forumu :: 8 registrovanih, 1 sakriven i 486 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., cikadeda, havoc995, mercedesamg, MrNo, Panonsky, Snorks, vukovi