MyCity » Ambulanta -> Arhiva Ambulante » Provera na zarazenost racunara

Provera na zarazenost racunara

Napisano na dan: 18.6.2014
1

Provera na zarazenost racunara
Sledeća strana Pagination

Idi na vrh

Poslao: 18 Jun 2014 12:43
Idi na vrh
offline
  • Pridružio: 27 Sep 2013
  • Poruke: 94

Vec duze vreme kompjuter mi radi usporeno tj treba mu po 20-ak sekundi da otvori najobicniju stvar recimo neki pretrazivac(google,mozilla),dok je gledanje filmova i spotova gotovo nemoguce a takodje i podizanje samog windowsa




Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:16-06-2014
Ran by digital (administrator) on DIGITAL-1765423 on 18-06-2014 12:20:42
Running from C:\Documents and Settings\digital\My Documents\You tube
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: [Link mogu videti samo ulogovani korisnici]
Download link for 64-Bit Version: [Link mogu videti samo ulogovani korisnici]
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: [Link mogu videti samo ulogovani korisnici]

==================== Processes (Whitelisted) =================

(AVG Technologies CZ, s.r.o.) C:\PROGRA~1\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(Atheros) C:\WINDOWS\system32\acs.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(Oracle Corporation) C:\Program Files\Java\jre7\bin\jqs.exe
() C:\WINDOWS\runservice.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(ATI Technologies Inc.) C:\WINDOWS\system32\ati2evxx.exe
(TP-LINK TECHNOLOGIES CO., LTD.) C:\Program Files\TP-LINK\TP-LINK 54M Wireless Client Utility\TWCU.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(CyberLink Corp.) C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
(cyberlink) C:\Program Files\CyberLink\Shared Files\brs.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(H.D.S. Hungary) D:\Hard Disk Sentinel\HDSentinel.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [Cmaudio] => RunDll32 cmicnfg.cpl,CMICtrlWnd
HKLM\...\Run: [TWCU] => C:\Program Files\TP-LINK\TP-LINK 54M Wireless Client Utility\TWCU.exe [479412 2008-03-26] (TP-LINK TECHNOLOGIES CO., LTD.)
HKLM\...\Run: [AVG_UI] => C:\Program Files\AVG\AVG2014\avgui.exe [5180432 2014-04-06] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [RemoteControl9] => C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe [87336 2009-04-27] (CyberLink Corp.)
HKLM\...\Run: [PDVD9LanguageShortcut] => C:\Program Files\CyberLink\PowerDVD9\Language\Language.exe [50472 2009-04-27] (CyberLink Corp.)
HKLM\...\Run: [BDRegion] => C:\Program Files\Cyberlink\Shared Files\brs.exe [75048 2009-05-07] (cyberlink)
HKLM\...\Run: [Apoint] => C:\Program Files\Apoint2K\Apoint.exe [176128 2006-06-02] (Alps Electric Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKLM\...\Run: [Hard Disk Sentinel] => D:\Hard Disk Sentinel\HDSentinel.exe [4334224 2014-01-30] (H.D.S. Hungary)
Winlogon\Notify\AtiExtEvent: C:\WINDOWS\system32\Ati2evxx.dll (ATI Technologies Inc.)
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\Run: [MSMSGS] => C:\Program Files\Messenger\msmsgs.exe [1695232 2008-04-14] (Microsoft Corporation)
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {4aa55184-8635-11e1-ac5b-0013d390875e} - ReCyClER\sEtUp.exe
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {e239b2c8-ca14-11e2-af1a-54e6fcdab77c} - E:\PcOptions.exe
Lsa: [Authentication Packages] msv1_0 nwprovau
BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2014\avgrsx.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
URLSearchHook: HKLM - Default Value = {CCC7B151-1D8C-11E3-B2AD-F3EF3D58318D}
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = [Link mogu videti samo ulogovani korisnici]{searchTerms}&babsrc=SP_ss&mntrId=081254E6FCDAB77C&affID=128492&tt=240414_16&tsp=5228
SearchScopes: HKCU - {6A1806CD-94D4-4689-BA73-E35EA1EA9990} URL = [Link mogu videti samo ulogovani korisnici]{searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = [Link mogu videti samo ulogovani korisnici]{3A75308C-45E4-4259-9D21-C3379A242BFE}&mid=afbacbe67d6547df8efe85afba3e5e8f-06ce4fc639803a2e3563922518183d8e94088cb9&lang=sr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-26 14:09:44&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
BHO: FastestTube - {3E532CE8-C6D9-4A10-8ACE-4348C96E8B6A} - C:\Program Files\FastestTube\2.1.9\WombatBHO.dll (Kwizzu)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\SHELL32.dll (Microsoft Corporation)
DPF: {6A060448-60F9-11D5-A6CD-0002B31F7455}
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 10.0.0.1 87.250.98.250 87.250.97.250
Tcpip\..\Interfaces\{FB35BF60-8BCE-4F6A-B41A-862A4CAF1A5D}: [NameServer]91.191.59.118 87.250.98.250

FireFox:
========
FF ProfilePath: C:\Documents and Settings\digital\Application Data\Mozilla\Firefox\Profiles\cunpnz2b.default-1402059622359
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_13_0_0_214.dll ()
FF Plugin: @adobe.com/ShockwavePlayer - C:\WINDOWS\system32\Adobe\Director\np32dsw_1212152.dll (Adobe Systems, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF Plugin: @popularscreensavers.com/Plugin - C:\Program Files\PopularScreensavers\NPp5Stub.dll No File
FF Plugin: @PopularScreensavers_7i.com/Plugin - C:\Program Files\PopularScreensavers_7i\bar\2.bin\NP7iStub.dll No File
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.24.7\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Documents and Settings\digital\Local Settings\Application Data\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npffividiplg.dll (iVIDI.org)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npijjiautoinstallpluginff.dll (NHN USA Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll (popularscreensavers.com)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\amazon-en-GB.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eBay-en-GB.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eudict.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\ []

Chrome:
=======
CHR Extension: (Google Novčanik) - C:\Documents and Settings\digital\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-24]

========================== Services (Whitelisted) =================

R2 ACS; C:\WINDOWS\system32\acs.exe [364629 2007-02-12] (Atheros) [File not signed]
S2 ATI Smart; C:\WINDOWS\system32\ati2sgag.exe [516096 2005-03-22] () [File not signed]
R2 AVGIDSAgent; C:\Program Files\AVG\AVG2014\avgidsagent.exe [3645456 2014-04-18] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files\AVG\AVG2014\avgwdsvc.exe [291912 2014-03-27] (AVG Technologies CZ, s.r.o.)
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [File not signed]
R2 JavaQuickStarterService; C:\Program Files\Java\jre7\bin\jqs.exe [182696 2014-03-08] (Oracle Corporation)
R2 LicCtrlService; C:\WINDOWS\runservice.exe [16384 2013-12-21] () [File not signed]
R2 NWCWorkstation; C:\WINDOWS\System32\nwwks.dll [65536 2008-04-14] (Microsoft Corporation)
R2 NwSapAgent; C:\WINDOWS\System32\ipxsap.dll [66560 2008-04-14] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

R3 AR5211; C:\WINDOWS\System32\DRIVERS\ar5211.sys [543712 2007-03-27] (Atheros Communications, Inc.) [File not signed]
R3 atinevxx; C:\WINDOWS\System32\DRIVERS\atinevxx.sys [166400 2006-10-29] (ATI Technologies Inc.)
R2 atksgt; C:\WINDOWS\System32\DRIVERS\atksgt.sys [271360 2012-02-10] () [File not signed]
R1 Avgdiskx; C:\WINDOWS\System32\DRIVERS\avgdiskx.sys [123160 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\WINDOWS\System32\DRIVERS\avgidsdriverx.sys [199960 2014-04-18] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHX; C:\WINDOWS\System32\DRIVERS\avgidshx.sys [150296 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSShim; C:\WINDOWS\System32\DRIVERS\avgidsshimx.sys [22296 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgldx86; C:\WINDOWS\System32\DRIVERS\avgldx86.sys [193304 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avglogx; C:\WINDOWS\System32\DRIVERS\avglogx.sys [238872 2014-03-27] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx86; C:\WINDOWS\System32\DRIVERS\avgmfx86.sys [108312 2014-03-31] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx86; C:\WINDOWS\System32\DRIVERS\avgrkx86.sys [28440 2014-03-27] (AVG Technologies CZ, s.r.o.)
R1 Avgtdix; C:\WINDOWS\System32\DRIVERS\avgtdix.sys [211224 2014-03-31] (AVG Technologies CZ, s.r.o.)
S3 CCDECODE; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [17024 2008-04-14] (Microsoft Corporation)
R3 cmudax; C:\WINDOWS\System32\drivers\cmudax.sys [1287296 2006-08-15] (C-Media Inc.)
R2 lirsgt; C:\WINDOWS\System32\DRIVERS\lirsgt.sys [18048 2012-02-10] () [File not signed]
R3 MVDCODEC; C:\WINDOWS\System32\DRIVERS\atinmdxx.sys [15360 2006-10-29] (ATI Technologies Inc.)
S3 NdisIP; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [10880 2008-04-14] (Microsoft Corporation)
S3 nm; C:\WINDOWS\System32\DRIVERS\NMnt.sys [40320 2008-04-14] (Microsoft Corporation)
R2 NwlnkIpx; C:\WINDOWS\System32\DRIVERS\nwlnkipx.sys [88320 2008-04-14] (Microsoft Corporation)
R2 NwlnkNb; C:\WINDOWS\System32\DRIVERS\nwlnknb.sys [63232 2008-04-14] (Microsoft Corporation)
R2 NwlnkSpx; C:\WINDOWS\System32\DRIVERS\nwlnkspx.sys [55936 2008-04-14] (Microsoft Corporation)
R3 NWRDR; C:\WINDOWS\System32\DRIVERS\nwrdr.sys [163584 2008-04-14] (Microsoft Corporation)
R3 WSIMD; C:\WINDOWS\System32\DRIVERS\wsimd.sys [55840 2006-11-15] (Atheros Communications, Inc.) [File not signed]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD}; C:\Program Files\CyberLink\PowerDVD9\000.fcl [87536 2009-05-07] (CyberLink Corp.)
U1 WS2IFSL;

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-06-18 12:20 - 2014-06-18 12:21 - 00000000 ____D () C:\FRST
2014-06-09 12:12 - 2014-06-09 12:12 - 00000000 ____D () C:\Documents and Settings\digital\My Documents\Old Firefox Data
2014-06-04 09:28 - 2014-06-17 20:02 - 00015667 _____ () C:\WINDOWS\setupapi.log
2014-06-03 21:45 - 2014-06-03 21:45 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\Media Player Classic
2014-06-03 21:43 - 2014-06-03 21:43 - 00000000 ____D () C:\Documents and Settings\digital\Local Settings\Application Data\WMTools Downloaded Files
2014-05-29 16:28 - 2014-05-29 16:44 - 00000000 ____D () C:\Program Files\Speed Test 127
2014-05-29 16:28 - 2014-05-29 16:28 - 00000000 ____D () C:\Program Files\Rock Turner
2014-05-29 16:28 - 2014-05-29 16:28 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\speedtest127
2014-05-25 15:45 - 2014-05-25 15:49 - 00000000 ____D () C:\Documents and Settings\digital\Start Menu\Programs\GameHitZone.com
2014-05-25 15:45 - 2014-05-25 15:49 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\GameHitZone.com
2014-05-25 15:44 - 2014-05-25 15:44 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\OpenCandy

==================== One Month Modified Files and Folders =======

2099-08-02 21:44 - 2003-01-07 22:26 - 00000000 ____D () C:\WINDOWS\pchealth
2099-01-01 00:03 - 2003-01-01 01:04 - 00000220 _____ () C:\WINDOWS\Tasks\Microsoft Windows XP End of Service Notification Monthly.job
2014-06-18 12:23 - 2014-03-19 22:24 - 00000000 ____D () C:\Documents and Settings\digital\Local Settings\Temp
2014-06-18 12:21 - 2014-06-18 12:20 - 00000000 ____D () C:\FRST
2014-06-18 12:20 - 2014-05-12 12:32 - 00000000 ___RD () C:\Documents and Settings\digital\My Documents\You tube
2014-06-18 11:58 - 2013-09-02 12:00 - 00000000 ____D () C:\Documents and Settings\All Users\Application Data\MFAData
2014-06-18 11:56 - 2012-02-09 23:55 - 01581816 _____ () C:\WINDOWS\WindowsUpdate.log
2014-06-18 11:53 - 2013-04-10 15:14 - 00000830 _____ () C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2014-06-18 01:01 - 2012-02-10 00:00 - 00032382 _____ () C:\WINDOWS\SchedLgU.Txt
2014-06-18 01:00 - 2012-02-10 00:01 - 00000178 __SHC () C:\Documents and Settings\digital\ntuser.ini
2014-06-18 00:30 - 2013-06-24 14:06 - 00000922 _____ () C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2014-06-17 22:16 - 2013-02-18 23:11 - 00000000 ____D () C:\Documents and Settings\digital\Desktop\Daca
2014-06-17 22:13 - 2013-08-26 17:03 - 00000754 _____ () C:\WINDOWS\WORDPAD.INI
2014-06-17 20:34 - 2012-02-09 23:17 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\AIMP
2014-06-17 20:12 - 2012-02-17 13:54 - 00000000 ___RD () C:\Documents and Settings\digital\Desktop\JOVANA
2014-06-17 20:02 - 2014-06-04 09:28 - 00015667 _____ () C:\WINDOWS\setupapi.log
2014-06-13 20:13 - 2012-10-28 18:49 - 00000000 ____D () C:\BMW M3 Challenge
2014-06-13 12:05 - 2014-02-05 19:50 - 00001809 _____ () C:\Documents and Settings\All Users\Desktop\Google Chrome.lnk
2014-06-12 20:01 - 2013-08-14 14:17 - 00000000 ____D () C:\WINDOWS\system32\MRT
2014-06-12 19:53 - 2013-04-22 16:24 - 92708840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2014-06-10 16:09 - 2014-03-07 18:35 - 00000000 ____D () C:\Documents and Settings\digital\My Documents\Preuzimanja
2014-06-09 12:12 - 2014-06-09 12:12 - 00000000 ____D () C:\Documents and Settings\digital\My Documents\Old Firefox Data
2014-06-07 22:34 - 2012-02-09 13:27 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\Skype
2014-06-04 10:34 - 2012-02-09 20:14 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\ImgBurn
2014-06-03 21:45 - 2014-06-03 21:45 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\Media Player Classic
2014-06-03 21:43 - 2014-06-03 21:43 - 00000000 ____D () C:\Documents and Settings\digital\Local Settings\Application Data\WMTools Downloaded Files
2014-06-03 21:29 - 2012-02-10 12:24 - 00000000 ___RD () C:\Documents and Settings\digital\Desktop\muzika
2014-06-03 20:48 - 2012-02-09 13:20 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\BSplayer
2014-05-31 17:57 - 2013-04-10 15:14 - 00692400 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerApp.exe
2014-05-31 17:57 - 2013-04-10 15:14 - 00070832 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\FlashPlayerCPLApp.cpl
2014-05-30 21:10 - 2012-06-07 21:43 - 00000000 ___RD () C:\Documents and Settings\digital\Desktop\slike
2014-05-30 13:22 - 2012-02-10 00:01 - 00000000 ____D () C:\Documents and Settings\digital
2014-05-29 16:44 - 2014-05-29 16:28 - 00000000 ____D () C:\Program Files\Speed Test 127
2014-05-29 16:28 - 2014-05-29 16:28 - 00000000 ____D () C:\Program Files\Rock Turner
2014-05-29 16:28 - 2014-05-29 16:28 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\speedtest127
2014-05-25 16:42 - 2013-12-14 15:14 - 00000000 __SHD () C:\Documents and Settings\All Users\Application Data\{01BD4FC9-2F86-4706-A62E-774BB7E9D308}
2014-05-25 15:49 - 2014-05-25 15:45 - 00000000 ____D () C:\Documents and Settings\digital\Start Menu\Programs\GameHitZone.com
2014-05-25 15:49 - 2014-05-25 15:45 - 00000000 ____D () C:\Documents and Settings\All Users\Start Menu\Programs\GameHitZone.com
2014-05-25 15:44 - 2014-05-25 15:44 - 00000000 ____D () C:\Documents and Settings\digital\Application Data\OpenCandy
2014-05-25 15:44 - 2014-01-01 19:17 - 00000000 ____D () C:\Program Files\GameHitZone.com
2014-05-25 15:41 - 2014-02-12 00:08 - 00000000 ____D () C:\Documents and Settings\digital\My Documents\GTA Vice City User Files
2014-05-24 23:33 - 2013-05-28 13:34 - 00309248 ___SH () C:\Documents and Settings\digital\Desktop\Thumbs.db
2014-05-23 21:28 - 2012-02-09 21:44 - 00000000 ____D () C:\Program Files\Rockstar Games
2014-05-23 21:28 - 2012-02-09 12:45 - 00000000 ___HD () C:\Program Files\InstallShield Installation Information

==================== Bamital & volsnap Check =================

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================
[Link mogu videti samo ulogovani korisnici]



Poslao: 18 Jun 2014 14:55
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Pozdrav,

Arrow Prvo iz Add or Remove Programs (pristupas mu tako sto iz Start menija izaberes Control Panel) deinstaliraj sledece:


iVIDI Plugin 1.3
Torntv

Ukoliko navedene programe ne mozes pronaci ili neki odbija deinstalaciju u redu je. Preskoci i kreni na sledeci.



... ... ... ...




Arrow

1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

Start
REG: reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iVIDI Plugin" /f
REG: reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V9.0" /f
CMD: ipconfig /flushdns
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {4aa55184-8635-11e1-ac5b-0013d390875e} - ReCyClER\sEtUp.exe
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {e239b2c8-ca14-11e2-af1a-54e6fcdab77c} - E:\PcOptions.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=081254E6FCDAB77C&affID=128492&tt=240414_16&tsp=5228
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = http://mysearch.avg.com/search?cid={3A75308C-45E4-4259-9D21-C3379A242BFE}&mid=afbacbe67d6547df8efe85afba3e5e8f-06ce4fc639803a2e3563922518183d8e94088cb9&lang=sr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-26 14:09:44&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
FF Plugin: @popularscreensavers.com/Plugin - C:\Program Files\PopularScreensavers\NPp5Stub.dll No File
FF Plugin: @PopularScreensavers_7i.com/Plugin - C:\Program Files\PopularScreensavers_7i\bar\2.bin\NP7iStub.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll (popularscreensavers.com)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-1.job => C:\Program Files\Torntv V9.0\Torntv V9.0-codedownloader.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.exe <==== ATTENTION
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:AD022376
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:D1B5B4F1
Reboot:
C:\Program Files\PopularScreensavers
C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll
C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
C:\Documents and Settings\digital\Application Data\speedtest127
C:\Program Files\Torntv V9.0
End

2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.



... ... ... ...




Arrow Preuzmi TFC (Temp File Cleaner) i sacuvaj ga na Desktop.
Dvoklikom pokreni program i klikni na dugme Start da bi dozvolio programu da otpocne skeniranje.
Kada program zavrsi skeniranje,mozda ce zatraziti da restartujes racunar. Ako se to ne desi, restartuj ga rucno.
Napomena: Kada zavrsis sa ciscenjem temp fajlova,program mozes obrisati ili ga sacuvati za kasniju upotrebu.


Arrow Reci mi ima li poboljsanja nakon izvrsenja FixList i TFC-a.



Poslao: 18 Jun 2014 16:08
Idi na vrh
offline
  • Pridružio: 27 Sep 2013
  • Poruke: 94

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:16-06-2014
Ran by digital at 2014-06-18 15:24:48 Run:1
Running from C:\Documents and Settings\digital\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
REG: reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iVIDI Plugin" /f
REG: reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V9.0" /f
CMD: ipconfig /flushdns
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {4aa55184-8635-11e1-ac5b-0013d390875e} - ReCyClER\sEtUp.exe
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {e239b2c8-ca14-11e2-af1a-54e6fcdab77c} - E:\PcOptions.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = [Link mogu videti samo ulogovani korisnici]{searchTerms}&babsrc=SP_ss&mntrId=081254E6FCDAB77C&affID=128492&tt=240414_16&tsp=5228
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = [Link mogu videti samo ulogovani korisnici]{3A75308C-45E4-4259-9D21-C3379A242BFE}&mid=afbacbe67d6547df8efe85afba3e5e8f-06ce4fc639803a2e3563922518183d8e94088cb9&lang=sr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-26 14:09:44&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
FF Plugin: @popularscreensavers.com/Plugin - C:\Program Files\PopularScreensavers\NPp5Stub.dll No File
FF Plugin: @PopularScreensavers_7i.com/Plugin - C:\Program Files\PopularScreensavers_7i\bar\2.bin\NP7iStub.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll (popularscreensavers.com)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-1.job => C:\Program Files\Torntv V9.0\Torntv V9.0-codedownloader.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.exe <==== ATTENTION
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:AD022376
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:D1B5B4F1
Reboot:
C:\Program Files\PopularScreensavers
C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll
C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
C:\Documents and Settings\digital\Application Data\speedtest127
C:\Program Files\Torntv V9.0
End
*****************


========= reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iVIDI Plugin" /f =========


Error: The system was unable to find the specified registry key or value


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V9.0" /f =========


Error: The system was unable to find the specified registry key or value


========= End of Reg: =========


========= ipconfig /flushdns =========



Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========= End of CMD: =========

'HKU\S-1-5-21-1757981266-562591055-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4aa55184-8635-11e1-ac5b-0013d390875e}' => Key deleted successfully.
Da ti kazem pravo poboljsanja ima,malo je brzi ali jos uvek je spor.Hvala!

Poslao: 18 Jun 2014 18:41
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Nisi iskopirao ceo FixLog.txt. Iskopiraj ga ponovo. Kopiju tog loga mozes pronaci na C:\FRST\Logs\Fixlog_<datum>_<vreme>.txt

Poslao: 19 Jun 2014 13:23
Idi na vrh
offline
  • Pridružio: 27 Sep 2013
  • Poruke: 94

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:16-06-2014
Ran by digital at 2014-06-18 15:24:48 Run:1
Running from C:\Documents and Settings\digital\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
REG: reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iVIDI Plugin" /f
REG: reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V9.0" /f
CMD: ipconfig /flushdns
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {4aa55184-8635-11e1-ac5b-0013d390875e} - ReCyClER\sEtUp.exe
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {e239b2c8-ca14-11e2-af1a-54e6fcdab77c} - E:\PcOptions.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = [Link mogu videti samo ulogovani korisnici]{searchTerms}&babsrc=SP_ss&mntrId=081254E6FCDAB77C&affID=128492&tt=240414_16&tsp=5228
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = [Link mogu videti samo ulogovani korisnici]{3A75308C-45E4-4259-9D21-C3379A242BFE}&mid=afbacbe67d6547df8efe85afba3e5e8f-06ce4fc639803a2e3563922518183d8e94088cb9&lang=sr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-26 14:09:44&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
FF Plugin: @popularscreensavers.com/Plugin - C:\Program Files\PopularScreensavers\NPp5Stub.dll No File
FF Plugin: @PopularScreensavers_7i.com/Plugin - C:\Program Files\PopularScreensavers_7i\bar\2.bin\NP7iStub.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll (popularscreensavers.com)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-1.job => C:\Program Files\Torntv V9.0\Torntv V9.0-codedownloader.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.exe <==== ATTENTION
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:AD022376
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:D1B5B4F1
Reboot:
C:\Program Files\PopularScreensavers
C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll
C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
C:\Documents and Settings\digital\Application Data\speedtest127
C:\Program Files\Torntv V9.0
End
*****************


========= reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iVIDI Plugin" /f =========


Error: The system was unable to find the specified registry key or value


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V9.0" /f =========


Error: The system was unable to find the specified registry key or value


========= End of Reg: =========


========= ipconfig /flushdns =========



Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========= End of CMD: =========

'HKU\S-1-5-21-1757981266-562591055-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4aa55184-8635-11e1-ac5b-0013d390875e}' => Key deleted successfully.
to je iskopiran ceo fix.log txt e jedino mozda je prekinuto skeniranje pre kraja pa nije sve skenirano,kako bi bilo da ponovo pokrenem FRST

Poslao: 19 Jun 2014 13:57
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Ucini tako. Ponovo formiraj FixList i pokreni ga preko FRST-a. Iskopiraj sveze dobijeni log.

Poslao: 19 Jun 2014 14:26
Idi na vrh
offline
  • Pridružio: 27 Sep 2013
  • Poruke: 94

izbrisao sam stari fixlog i pokrenuo frst i dobio sledeci fixlog Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:18-06-2014
Ran by digital at 2014-06-19 14:09:57 Run:2
Running from C:\Documents and Settings\digital\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
REG: reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iVIDI Plugin" /f
REG: reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V9.0" /f
CMD: ipconfig /flushdns
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {4aa55184-8635-11e1-ac5b-0013d390875e} - ReCyClER\sEtUp.exe
HKU\S-1-5-21-1757981266-562591055-1177238915-1003\...\MountPoints2: {e239b2c8-ca14-11e2-af1a-54e6fcdab77c} - E:\PcOptions.exe
SearchScopes: HKLM - DefaultScope value is missing.
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = [Link mogu videti samo ulogovani korisnici]{searchTerms}&babsrc=SP_ss&mntrId=081254E6FCDAB77C&affID=128492&tt=240414_16&tsp=5228
SearchScopes: HKCU - {95B7759C-8C7F-4BF1-B163-73684A933233} URL = [Link mogu videti samo ulogovani korisnici]{3A75308C-45E4-4259-9D21-C3379A242BFE}&mid=afbacbe67d6547df8efe85afba3e5e8f-06ce4fc639803a2e3563922518183d8e94088cb9&lang=sr&ds=AVG&coid=avgtbavg&cmpid=&pr=fr&d=2014-04-26 14:09:44&v=18.0.5.292&pid=safeguard&sg=&sap=dsp&q={searchTerms}
FF Plugin: @popularscreensavers.com/Plugin - C:\Program Files\PopularScreensavers\NPp5Stub.dll No File
FF Plugin: @PopularScreensavers_7i.com/Plugin - C:\Program Files\PopularScreensavers_7i\bar\2.bin\NP7iStub.dll No File
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll (popularscreensavers.com)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-1.job => C:\Program Files\Torntv V9.0\Torntv V9.0-codedownloader.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.exe <==== ATTENTION
Task: C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.job => C:\Program Files\Torntv V9.0\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.exe <==== ATTENTION
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:AD022376
AlternateDataStreams: C:\Documents and Settings\All Users\Application Data\Temp:D1B5B4F1
Reboot:
C:\Program Files\PopularScreensavers
C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll
C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml
C:\Documents and Settings\digital\Application Data\speedtest127
C:\Program Files\Torntv V9.0
End
*****************


========= reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\iVIDI Plugin" /f =========


Error: The system was unable to find the specified registry key or value


========= End of Reg: =========


========= reg delete "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\Torntv V9.0" /f =========


Error: The system was unable to find the specified registry key or value


========= End of Reg: =========


========= ipconfig /flushdns =========



Windows IP Configuration



Successfully flushed the DNS Resolver Cache.


========= End of CMD: =========

'HKU\S-1-5-21-1757981266-562591055-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{4aa55184-8635-11e1-ac5b-0013d390875e}'=> Key not found.
'HKCR\CLSID\{4aa55184-8635-11e1-ac5b-0013d390875e}'=> Key not found.
'HKU\S-1-5-21-1757981266-562591055-1177238915-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{e239b2c8-ca14-11e2-af1a-54e6fcdab77c}' => Key deleted successfully.
'HKCR\CLSID\{e239b2c8-ca14-11e2-af1a-54e6fcdab77c}'=> Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}'=> Key not found.
'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}' => Key deleted successfully.
'HKCR\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233}'=> Key not found.
'HKLM\Software\MozillaPlugins\@popularscreensavers.com/Plugin' => Key deleted successfully.
C:\Program Files\PopularScreensavers\NPp5Stub.dll not found.
'HKLM\Software\MozillaPlugins\@PopularScreensavers_7i.com/Plugin' => Key deleted successfully.
C:\Program Files\PopularScreensavers_7i\bar\2.bin\NP7iStub.dll not found.
C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml => Moved successfully.
C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-1.job => Moved successfully.
C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-3.job => Moved successfully.
C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-4.job => Moved successfully.
C:\WINDOWS\Tasks\00e1002c-7029-4aa8-96af-5a4f99b861b7-5.job not found.
C:\Documents and Settings\All Users\Application Data\Temp => ":AD022376" ADS removed successfully.
C:\Documents and Settings\All Users\Application Data\Temp => ":D1B5B4F1" ADS removed successfully.
"C:\Program Files\PopularScreensavers" => File/Directory not found.
C:\Program Files\mozilla firefox\plugins\NPp5Stub.dll => Moved successfully.
"C:\Program Files\mozilla firefox\browser\searchplugins\safeguard-secure-search.xml" => File/Directory not found.
C:\Documents and Settings\digital\Application Data\speedtest127 => Moved successfully.
"C:\Program Files\Torntv V9.0" => File/Directory not found.


The system needed a reboot.

==== End of Fixlog ====

Poslao: 19 Jun 2014 14:40
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Reci mi sad kakvo je stanje sistema?

Poslao: 19 Jun 2014 14:44
Idi na vrh
offline
  • Pridružio: 27 Sep 2013
  • Poruke: 94

rekao bih da je i dalje isto,ne primecujem neku razliku,moguce da je do sistema i da bi se trebao reinstalirati a ako ima jos nesto tu sam.

Poslao: 19 Jun 2014 14:46
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Idemo na jos jednu proveru ali rekao bih ovo nema veze sa malware-om ...


Preuzmi program GMER, RootKit Detektor i sačuvati ga na Desktop:
Napomena: alat nosi nasumice generisan naziv. Na samoj ikonici će jasno pisati GMER.


Dvoklikom pokreni GMER.
Sačekaj da se završi uvodno skeniranje - ukoliko se pojavi bilo kakav upit, klikni No;
klikni dugme [Scan] i sačekaj da skeniranje bude završeno;
klikni dugme [Save ...] - izveštaj sačuvaj na Desktop pod nazivom ARK;

kliknite taster >>> i odaberite Autostart karticu;
klikni dugme [Scan];
po završetku kratkotrajnog skeniranja, klikni [Copy];
otvori Notepad i u njega postavi kopirani tekst - izveštaj sačuvaj na Desktop pod nazivom autostart;


Priloži oba GMER izveštaja uz poruku korišćenjem opcije Prikači fajl.

MyCity » Ambulanta -> Arhiva Ambulante » Provera na zarazenost racunara

Ko je trenutno na forumu
 

Ukupno su 1966 korisnika na forumu :: 157 registrovanih, 10 sakrivenih i 1799 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 6018 - dana 19 Dec 2025 13:41

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, 9191vs, A.R.Chafee.Jr., Abebe Bikila, Aleksandar1991, amaterSRB, AMCXXL, ast13, babaroga, Baždaranac, Bgorando, boj.an, bokisha253, boracbl1389, BORUTUS, boxbole, BrcakRS, brufen, Bubimir, BZ, Chainsaw, CHARLIE JA., cifra, cincarin, Cirkon, Coabelgrade, darkojbn, Deki Duga Devetka, Demi87, Denaya, DENIRO, Dežurni pod palubom, Dimitrise93, djonsule, djordje92sm, Djota1, Djuza, dmarx1, dok80, dragan_mig31, draganl, Duk011, dulleo, dusanobr, DuškoMraz, ElGenius, Ercomero, Ezbuck, gaga23, goran.vvv, Hans Gajger, havoc995, Hitri, HogarStrashni, HrcAk47, iceburn, igorkozar83, Istman, Jager715510, jalos, Jan, janezek67, jarovitt, Jerry Drake, JK, K2, kaput21, karjatid, kibihrchak, knutveliki, Kole1975, Kruger, Krusarac, Kubovac, larix, Lelemood, Lester Freamon, lukisa, M74AB3, Maschinekalibar, mercedesamg, Mickey91, Mihajlo, miki kv, Milanče222, milenko crazy north, milimoj, Milos ZA, mixkax, Mldo, Moldovan, Motocar, Mrav Obrad, mrvica78, Naj-Turs, Nemanja.M, nenad81, Neutral-M, NklJov123, nnnnnnnnnn, NorthWind, novator, nuke92, Pale2025, Panter, PantR, Parker, PedjaDikovic, pein, Petar888, ping15, pisac12, Povratak1912, Prečanin30, rambod, Redred, Remain, Resad76, RiV, RS28, samoulogovankorisnik, SANDRO1973, sap, Semberija, Semprini, Shinobi, sickmouse, Sir Budimir, Sirius, skok, Solunac na steroidima, Srle993, stegonosa, suton, t.mile, tamno.nebo, tanakadzo, tooljan, trajkoni018, TRZH92, tubular, vaci, velisa andjelic, Velički, veljko82, Vica1958, Viceroy, virked, Vlada1389, vojnik švejk, Vrač, vuksa72, VX1, YU-UKI, Zastava, zoxknez, Žrnov