MyCity » Ambulanta -> Arhiva Ambulante » Usporen rad OS, Opera,Chrom jedva da se pokrenu.

Usporen rad OS, Opera,Chrom jedva da se pokrenu.

Napisano na dan: 26.10.2014

Usporen rad OS, Opera,Chrom jedva da se pokrenu.
Sledeća strana Pagination

Idi na vrh

Poslao: 26 Okt 2014 11:09
Idi na vrh
offline
  • Pridružio: 25 Apr 2012
  • Poruke: 143

Sistem mi je mnogo usporio,pretrazivaci mi skoro pa i ne rade jedva da mogu sta da otvorim na internetu.Instalirao sam Avast ali sa njime mi je jos gore bilo,Anti Malware je nasao masu nekih opsanosti.


[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]



Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 25-10-2014
Ran by ACER-PC (administrator) on ACER on 26-10-2014 11:05:21
Running from C:\Users\ACER-PC\Desktop
Loaded Profiles: ACER-PC & (Available profiles: ACER-PC)
Platform: Windows 8 (X64) OS Language: English (United Kingdom)
Internet Explorer Version 10
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [Link mogu videti samo ulogovani korisnici]

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Acer Incorporated) C:\Program Files\Acer\Acer Updater\UpdaterService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Microsoft Corporation) C:\Windows\slsvc.exe
() C:\Windows\PersonalizeEnabler.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu8.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\InstallServices64.exe
(IObit) C:\Program Files (x86)\IObit\Start Menu 8\StartMenu_Hook.exe
(Dropbox, Inc.) C:\Users\ACER-PC\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Microsoft Corporation) C:\Windows\System32\SppExtComObj.Exe
(Opera Software) C:\Program Files\Opera x64\opera.exe
(Opera Software) C:\Program Files\Opera x64\pluginwrapper\opera_plugin_wrapper.exe
(MyCity) C:\Program Files (x86)\MCShield\MCShieldRTM.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [500208 2010-03-06] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [StartCCC] => C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [641704 2012-11-16] (Advanced Micro Devices, Inc.)
HKLM-x32\...\Run: [AMD AVT] => C:\Program Files (x86)\AMD AVT\bin\kdbsync.exe [20992 2012-03-19] ()
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959176 2014-08-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS5ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.exe [406992 2010-02-22] (Adobe Systems Incorporated)
HKU\S-1-5-21-1228184892-4111478447-2213813170-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20917408 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1228184892-4111478447-2213813170-1001\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
HKU\S-1-5-21-1228184892-4111478447-2213813170-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [20917408 2014-02-10] (Skype Technologies S.A.)
HKU\S-1-5-21-1228184892-4111478447-2213813170-1001-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [MCShield Monitor] => C:\Program Files (x86)\MCShield\mcshieldrtm.exe [650816 2014-04-11] (MyCity)
AppInit_DLLs: C:\PROGRA~3\PERFOR~1\PERFOR~2.DLL => C:\ProgramData\Performance Optimizer\PerformanceOptimizer_x64.dll [4303360 2014-09-07] ()
Startup: C:\Users\ACER-PC\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
ShortcutTarget: Dropbox.lnk -> C:\Users\ACER-PC\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [Link mogu videti samo ulogovani korisnici]
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0x9D2176D5EB65CF01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-GB
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_15_0_0_152.dll ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_15_0_0_152.dll ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\system32\Adobe\Director\np32dsw_1213153.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.71.2 -> C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.24.15\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\user.js
FF Extension: surfkeePit - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\Extensions\bbtopckp@euaea.com [2014-09-21]
FF Extension: DuIsucountLocaoTOr - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\Extensions\ip_lcu@arxaryno.edu [2014-10-13]
FF Extension: FFineeDeAlSoft - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\Extensions\wvo2u@yooiafvxg.net [2014-09-21]
FF Extension: Does Amazon Ship to ...? - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\Extensions\DoesAmazonShipTo@usefulhelper.com.xpi [2014-08-16]
FF Extension: No Name - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\extensions\45633fba7e7d40fea9c29@9dc18447eea04021a325caf3.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome:
=======
CHR Profile: C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-05-02]
CHR Extension: (Google Drive) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-05-02]
CHR Extension: (Google Voice Search Hotword (Beta)) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\bepbmhgboaologfdajaanbcjmnhjmhfn [2014-09-05]
CHR Extension: (YouTube) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-05-02]
CHR Extension: (Google Search) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-05-02]
CHR Extension: (Moon Phase) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\jjbbfjkgenpehcokclfggnfniaiglaai [2014-10-13]
CHR Extension: (Google Wallet) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-05-02]
CHR Extension: (Disable AntiAdblock) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\oimhabmdhenmcaligiilhadkdliolpah [2014-09-07]
CHR Extension: (AVIM Vietnamese Input Method) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\opgbbffpdglhkpglnlkiclakjlpiedoh [2014-09-21]
CHR Extension: (Gmail) - C:\Users\ACER-PC\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-05-02]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S2 892cc6a3; c:\ProgramData\Performance Optimizer\PerformanceOptimizerSvc.dll [186192 2014-09-07] () [File not signed]
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [361984 2012-11-16] (Advanced Micro Devices, Inc.) [File not signed]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 KeyIso; C:\Windows\SysWOW64\keyiso.dll [43520 2012-07-26] (Microsoft Corporation)
R2 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1871160 2014-10-01] (Malwarebytes Corporation)
R2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [968504 2014-10-01] (Malwarebytes Corporation)
S3 Netlogon; C:\Windows\SysWOW64\netlogon.dll [634368 2012-07-26] (Microsoft Corporation)
R2 slsvc; C:\Windows\slsvc.exe [10240 2012-09-25] (Microsoft Corporation) [File not signed]
R2 StartMenuService; C:\Program Files (x86)\IObit\Start Menu 8\StartMenuServices.exe [72992 2014-06-06] (IObit)
S3 StorSvc; C:\Windows\SysWOW64\storsvc.dll [18432 2012-07-26] (Microsoft Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [16056 2014-03-29] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AODDriver4.1; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\amd64\AODDriver2.sys [53888 2012-03-05] (Advanced Micro Devices)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2014-10-01] (Malwarebytes Corporation)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [129752 2014-10-26] (Malwarebytes Corporation)
R3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64216 2014-10-01] (Malwarebytes Corporation)
S3 RTL8192cu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1576080 2012-09-17] (Realtek Semiconductor Corporation )
S3 RtlWlanu; C:\Windows\system32\DRIVERS\rtwlanu.sys [1576080 2012-09-17] (Realtek Semiconductor Corporation )
S3 cpuz137; \??\C:\Users\ACER-PC\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 flash; \??\C:\Users\ACER-PC\Desktop\BIOS_Acer_1.09_A_A\BIOS_Acer_1.09_Windows_AS5542\Winflash\flash.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-26 11:05 - 2014-10-26 11:05 - 00012765 _____ () C:\Users\ACER-PC\Desktop\FRST.txt
2014-10-26 11:05 - 2014-10-26 11:05 - 00000000 ____D () C:\FRST
2014-10-26 10:50 - 2014-10-26 10:50 - 02112512 _____ (Farbar) C:\Users\ACER-PC\Desktop\FRST64.exe
2014-10-26 10:29 - 2014-10-26 10:45 - 00129752 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2014-10-26 10:28 - 2014-10-26 10:28 - 00001138 _____ () C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
2014-10-26 10:28 - 2014-10-26 10:28 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2014-10-26 10:28 - 2014-10-26 10:28 - 00000000 ____D () C:\Program Files (x86)\Malwarebytes Anti-Malware
2014-10-26 10:28 - 2014-10-01 11:11 - 00093400 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2014-10-26 10:28 - 2014-10-01 11:11 - 00064216 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2014-10-26 10:28 - 2014-10-01 11:11 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2014-10-26 10:27 - 2014-10-26 10:28 - 00000000 ____D () C:\Users\ACER-PC\Downloads\Malwarebytes Anti-Malware Premium 2.0.3.1025 Final + Keys [ATOM]
2014-10-26 09:17 - 2014-10-26 09:17 - 00000687 _____ () C:\awh2828.tmp
2014-10-25 16:17 - 2014-10-25 16:17 - 00000687 _____ () C:\awh3448.tmp
2014-10-24 08:32 - 2014-10-24 08:32 - 04840936 _____ () C:\Windows\system32\FNTCACHE.DAT
2014-10-24 08:28 - 2014-09-29 23:49 - 00705480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2014-10-24 08:28 - 2014-09-29 23:49 - 00104904 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2014-10-23 17:07 - 2014-09-13 06:29 - 00079360 _____ (Microsoft Corporation) C:\Windows\system32\packager.dll
2014-10-23 17:07 - 2014-09-13 05:02 - 00068096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2014-10-23 17:07 - 2014-09-03 03:48 - 00510464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rastls.dll
2014-10-23 17:07 - 2014-09-03 03:21 - 00585728 _____ (Microsoft Corporation) C:\Windows\system32\rastls.dll
2014-10-23 17:07 - 2014-07-12 05:41 - 00008704 _____ (Microsoft Corporation) C:\Windows\system32\KBDRUM.DLL
2014-10-23 17:07 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDYAK.DLL
2014-10-23 17:07 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDTAT.DLL
2014-10-23 17:07 - 2014-07-12 05:41 - 00007168 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU1.DLL
2014-10-23 17:07 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDRU.DLL
2014-10-23 17:07 - 2014-07-12 05:41 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\KBDBASH.DLL
2014-10-23 17:07 - 2014-07-12 05:16 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRUM.DLL
2014-10-23 17:07 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDYAK.DLL
2014-10-23 17:07 - 2014-07-12 05:16 - 00007168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDTAT.DLL
2014-10-23 17:07 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU1.DLL
2014-10-23 17:07 - 2014-07-12 05:16 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDRU.DLL
2014-10-23 17:07 - 2014-07-12 05:15 - 00006144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KBDBASH.DLL
2014-10-23 17:07 - 2014-07-12 01:02 - 00478352 _____ () C:\Windows\SysWOW64\locale.nls
2014-10-23 17:07 - 2014-07-12 01:00 - 00478352 _____ () C:\Windows\system32\locale.nls
2014-10-23 17:07 - 2014-07-08 23:33 - 00181248 _____ (Microsoft Corp.) C:\Windows\system32\Defrag.exe
2014-10-23 17:07 - 2014-07-08 23:32 - 01539584 _____ (Microsoft Corporation) C:\Windows\system32\storagewmi.dll
2014-10-23 17:07 - 2014-07-08 23:32 - 00340480 _____ (Microsoft Corporation) C:\Windows\system32\defragsvc.dll
2014-10-23 17:07 - 2014-07-08 23:30 - 01220608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\storagewmi.dll
2014-10-23 17:07 - 2014-07-07 06:53 - 01125376 _____ (Microsoft Corporation) C:\Windows\system32\mstsc.exe
2014-10-23 17:07 - 2014-07-07 06:52 - 03248128 _____ (Microsoft Corporation) C:\Windows\system32\rdpcorets.dll
2014-10-23 17:07 - 2014-07-07 06:52 - 00724992 _____ (Microsoft Corporation) C:\Windows\system32\termsrv.dll
2014-10-23 17:07 - 2014-07-07 06:52 - 00300544 _____ (Microsoft Corporation) C:\Windows\system32\winsta.dll
2014-10-23 17:07 - 2014-07-07 06:52 - 00263680 _____ (Microsoft Corporation) C:\Windows\system32\wcmsvc.dll
2014-10-23 17:07 - 2014-07-07 06:52 - 00074752 _____ (Microsoft Corporation) C:\Windows\system32\wcmcsp.dll
2014-10-23 17:07 - 2014-07-07 06:51 - 05982208 _____ (Microsoft Corporation) C:\Windows\system32\mstscax.dll
2014-10-23 17:07 - 2014-07-07 05:01 - 01049600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstsc.exe
2014-10-23 17:07 - 2014-07-07 05:01 - 00233472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winsta.dll
2014-10-23 17:07 - 2014-07-07 05:00 - 05095424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mstscax.dll
2014-10-23 17:07 - 2014-07-07 04:59 - 00269312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\aaclient.dll
2014-10-23 17:07 - 2014-07-04 11:52 - 00328000 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\volsnap.sys
2014-10-23 17:07 - 2014-07-03 02:59 - 01824784 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2014-10-23 17:07 - 2014-07-03 01:30 - 01408952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2014-10-23 17:07 - 2014-06-28 08:01 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmapi.dll
2014-10-23 17:07 - 2014-06-28 07:57 - 00209920 _____ (Microsoft Corporation) C:\Windows\system32\profsvc.dll
2014-10-23 17:07 - 2014-06-28 07:56 - 00117248 _____ (Microsoft Corporation) C:\Windows\system32\dwmapi.dll
2014-10-23 17:07 - 2014-06-25 08:09 - 00733184 _____ (Microsoft Corporation) C:\Windows\system32\win32spl.dll
2014-10-23 17:07 - 2014-06-25 08:07 - 01023488 _____ (Microsoft Corporation) C:\Windows\system32\localspl.dll
2014-10-23 17:07 - 2014-06-18 00:27 - 02032640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2014-10-23 17:07 - 2014-06-18 00:23 - 02238464 _____ (Microsoft Corporation) C:\Windows\system32\d3d10warp.dll
2014-10-23 17:07 - 2014-06-11 15:47 - 02842112 _____ (Microsoft Corporation) C:\Windows\system32\WMVDECOD.DLL
2014-10-23 17:07 - 2014-06-11 05:40 - 02620928 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMVDECOD.DLL
2014-10-23 17:07 - 2014-06-10 23:44 - 01403896 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2014-10-23 17:07 - 2014-05-30 00:31 - 00323072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2014-10-23 17:07 - 2014-05-30 00:03 - 00419328 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2014-10-23 17:07 - 2014-02-04 11:57 - 01271664 _____ (Microsoft Corporation) C:\Windows\system32\winload.exe
2014-10-23 17:06 - 2014-09-28 05:18 - 04068352 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2014-10-23 17:06 - 2014-08-30 06:47 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2014-10-23 17:06 - 2014-08-30 06:46 - 02306560 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2014-10-23 17:06 - 2014-08-30 05:05 - 08858112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\twinui.dll
2014-10-23 17:06 - 2014-08-30 05:04 - 02416128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2014-10-23 17:06 - 2014-08-30 05:03 - 02037760 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2014-10-23 17:06 - 2014-08-01 23:08 - 00388729 _____ () C:\Windows\system32\ApnDatabase.xml
2014-10-23 17:06 - 2014-07-24 14:50 - 00447296 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2014-10-23 17:06 - 2014-07-17 00:28 - 00027648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sscore.dll
2014-10-23 17:06 - 2014-07-16 23:59 - 00305664 _____ (Microsoft Corporation) C:\Windows\system32\srvsvc.dll
2014-10-23 17:06 - 2014-07-16 23:59 - 00035840 _____ (Microsoft Corporation) C:\Windows\system32\sscore.dll
2014-10-23 17:06 - 2014-07-12 07:45 - 01549824 _____ (Microsoft Corporation) C:\Windows\system32\msdtctm.dll
2014-10-23 17:06 - 2014-07-12 05:36 - 00674304 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2014-10-23 17:06 - 2014-07-12 05:36 - 00211456 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2014-10-23 17:06 - 2014-07-12 05:34 - 00404480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2014-10-23 17:06 - 2014-07-12 05:34 - 00250368 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2014-10-23 17:06 - 2014-06-28 07:57 - 01341952 _____ (Microsoft Corporation) C:\Windows\system32\user32.dll
2014-10-23 17:06 - 2014-06-28 03:23 - 01126400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user32.dll
2014-10-23 17:06 - 2014-06-13 00:34 - 00754176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\actxprxy.dll
2014-10-23 17:06 - 2014-06-13 00:29 - 02146304 _____ (Microsoft Corporation) C:\Windows\system32\actxprxy.dll
2014-10-23 17:06 - 2012-10-07 01:32 - 10094592 _____ (Microsoft Corporation) C:\Windows\system32\twinui.dll
2014-10-23 17:05 - 2014-09-20 06:18 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-10-23 17:05 - 2014-09-20 06:17 - 02236928 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-10-23 17:05 - 2014-09-20 06:17 - 01407488 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-10-23 17:05 - 2014-09-20 06:17 - 00915968 _____ (Microsoft Corporation) C:\Windows\system32\uxtheme.dll
2014-10-23 17:05 - 2014-09-20 06:17 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\UXInit.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 19280896 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 15399424 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 03959296 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 02655232 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00255488 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00197120 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00097280 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00053760 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-10-23 17:05 - 2014-09-20 06:16 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-10-23 17:05 - 2014-09-20 06:15 - 01508864 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-10-23 17:05 - 2014-09-20 06:15 - 00451584 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-10-23 17:05 - 2014-09-20 06:15 - 00281600 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 14368768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 13757952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 02861568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 02055168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 01762816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 01180672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00080384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\UXInit.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00039936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2014-10-23 17:05 - 2014-09-20 04:57 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2014-10-23 17:05 - 2014-09-20 04:56 - 01440768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2014-10-23 17:05 - 2014-09-20 04:56 - 00357888 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2014-10-23 17:05 - 2014-09-20 04:56 - 00226816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2014-10-23 17:05 - 2014-09-20 04:38 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-10-23 17:05 - 2014-09-20 04:33 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2014-10-23 17:05 - 2014-09-20 02:06 - 00534528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\uxtheme.dll
2014-10-23 16:59 - 2014-10-23 16:59 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_Kernel_WinUsb_01007.Wdf
2014-10-23 16:54 - 2014-10-23 16:54 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_11_00.Wdf
2014-10-23 16:53 - 2014-10-23 17:07 - 00003628 _____ () C:\Windows\setupact.log
2014-10-23 16:53 - 2014-10-23 16:53 - 00000000 _____ () C:\Windows\setuperr.log
2014-10-20 21:41 - 2014-10-20 21:41 - 00111016 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2014-10-20 21:41 - 2014-10-20 21:41 - 00000000 ____D () C:\Program Files\Java
2014-10-20 21:32 - 2014-10-20 21:32 - 00272808 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaws.exe
2014-10-20 21:32 - 2014-10-20 21:32 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\javaw.exe
2014-10-20 21:32 - 2014-10-20 21:32 - 00175528 _____ (Oracle Corporation) C:\Windows\SysWOW64\java.exe
2014-10-20 21:32 - 2014-10-20 21:32 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2014-10-20 21:32 - 2014-10-20 21:32 - 00000000 ____D () C:\Program Files (x86)\Java
2014-10-13 20:55 - 2014-10-26 10:43 - 00000000 ____D () C:\ProgramData\DDiscountLaooCAotoor
2014-10-11 22:40 - 2014-10-11 22:40 - 00278960 _____ () C:\Windows\Minidump\101114-33696-01.dmp
2014-10-07 20:18 - 2014-10-26 10:43 - 00000000 ____D () C:\Users\ACER-PC\AppData\Local\6444
2014-10-05 12:31 - 2014-08-28 12:34 - 00059400 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2014-10-05 12:31 - 2014-08-28 07:05 - 00630272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2014-10-05 12:31 - 2014-08-28 07:05 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2014-10-05 12:31 - 2014-08-28 07:05 - 00086528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2014-10-05 12:31 - 2014-08-28 07:05 - 00035328 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2014-10-05 12:31 - 2014-08-28 07:02 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2014-10-05 12:31 - 2014-08-28 07:01 - 03285504 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2014-10-05 12:31 - 2014-08-28 07:01 - 01623552 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2014-10-05 12:31 - 2014-08-28 07:01 - 00775168 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2014-10-05 12:31 - 2014-08-28 07:01 - 00253440 _____ (Microsoft Corporation) C:\Windows\system32\WUSettingsProvider.dll
2014-10-05 12:31 - 2014-08-28 07:01 - 00176640 _____ (Microsoft Corporation) C:\Windows\system32\storewuauth.dll
2014-10-05 12:31 - 2014-08-28 07:01 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2014-10-05 12:31 - 2014-08-28 07:01 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2014-10-05 12:31 - 2014-08-28 07:01 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\wuaext.dll
2014-10-05 12:31 - 2014-08-01 00:40 - 01287680 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2014-10-05 12:30 - 2014-08-09 09:30 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2014-10-05 12:30 - 2014-08-09 09:29 - 00144896 _____ (Microsoft Corporation) C:\Windows\system32\tssdisai.dll
2014-10-05 12:30 - 2014-07-24 04:33 - 00875688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcr120_clr0400.dll
2014-10-05 12:30 - 2014-07-24 04:33 - 00869544 _____ (Microsoft Corporation) C:\Windows\system32\msvcr120_clr0400.dll
2014-10-05 12:30 - 2014-06-05 02:12 - 00678600 _____ (Microsoft Corporation) C:\Windows\system32\msvcp120_clr0400.dll
2014-10-05 12:30 - 2014-06-04 00:12 - 00536776 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msvcp120_clr0400.dll
2014-09-28 20:24 - 2014-10-26 10:43 - 00000000 ____D () C:\Users\ACER-PC\AppData\Local\24153
2014-09-28 08:46 - 2014-09-28 08:46 - 00000071 _____ () C:\Users\ACER-PC\Downloads\listen.pls

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2014-10-26 11:02 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\sru
2014-10-26 10:50 - 2014-05-02 12:06 - 00000000 ____D () C:\ProgramData\MCShield
2014-10-26 10:49 - 2012-07-26 08:28 - 00848230 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-10-26 10:46 - 2014-05-02 11:29 - 00000000 ___RD () C:\Users\ACER-PC\Dropbox
2014-10-26 10:46 - 2014-05-02 11:21 - 00000000 ____D () C:\Users\ACER-PC\AppData\Roaming\Dropbox
2014-10-26 10:44 - 2014-09-07 12:14 - 00000000 ____D () C:\ProgramData\Performance Optimizer
2014-10-26 10:44 - 2014-07-12 00:19 - 00727908 _____ () C:\Windows\PFRO.log
2014-10-26 10:44 - 2014-05-02 11:57 - 00000000 ____D () C:\Users\ACER-PC\AppData\Roaming\BitTorrent
2014-10-26 10:44 - 2014-05-02 11:09 - 00000934 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2014-10-26 10:44 - 2012-07-26 08:22 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-10-26 10:43 - 2014-09-21 07:14 - 00000000 ____D () C:\ProgramData\surrfkeepit
2014-10-26 10:43 - 2014-09-07 12:54 - 00000000 ____D () C:\ProgramData\FinEDealSoft
2014-10-26 10:43 - 2014-08-17 19:27 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
2014-10-26 10:43 - 2014-08-01 22:22 - 00000000 ____D () C:\Users\ACER-PC\AppData\Roaming\Javaxi
2014-10-26 10:35 - 2014-05-02 12:03 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-10-26 10:31 - 2014-05-02 11:09 - 00000938 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2014-10-26 10:27 - 2014-05-02 11:44 - 00000000 ____D () C:\Users\ACER-PC\AppData\Roaming\Skype
2014-10-26 09:44 - 2005-04-08 03:16 - 00580979 ____H () C:\Users\ACER-PC\AppData\Roaming\ACER-PCv1.18.0 - Trial versionlog.dat
2014-10-24 17:40 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\rescache
2014-10-24 17:07 - 2014-05-02 10:45 - 01096715 _____ () C:\Windows\WindowsUpdate.log
2014-10-24 08:31 - 2012-07-26 06:26 - 00262144 ___SH () C:\Windows\system32\config\BBI
2014-10-24 08:30 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\en-GB
2014-10-23 23:07 - 2012-07-26 09:12 - 00000000 ___RD () C:\Windows\ToastData
2014-10-23 23:07 - 2012-07-26 09:12 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2014-10-23 23:07 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\SysWOW64\en-GB
2014-10-23 18:10 - 2014-05-16 17:02 - 00518144 ___SH () C:\Users\ACER-PC\Desktop\Thumbs.db
2014-10-23 17:23 - 2012-07-26 08:59 - 00000000 ____D () C:\Windows\CbsTemp
2014-10-23 17:19 - 2014-07-14 09:04 - 00000000 ____D () C:\Windows\system32\MRT
2014-10-23 17:14 - 2014-07-14 09:04 - 103265616 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2014-10-20 21:37 - 2014-07-17 18:44 - 00000000 ____D () C:\ProgramData\Oracle
2014-10-20 21:37 - 2014-05-02 11:14 - 00320936 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-10-20 21:37 - 2014-05-02 11:14 - 00191400 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-10-20 21:37 - 2014-05-02 11:14 - 00190888 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-10-13 20:55 - 2014-09-07 12:54 - 00000000 ____D () C:\ProgramData\6485e68b2649d70e
2014-10-11 22:40 - 2014-05-05 22:12 - 314595615 _____ () C:\Windows\MEMORY.DMP
2014-10-11 22:40 - 2014-05-05 22:12 - 00000000 ____D () C:\Windows\Minidump
2014-10-05 12:32 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\AUInstallAgent
2014-10-03 19:20 - 2012-07-26 09:12 - 00000000 ____D () C:\Windows\system32\NDF
2014-10-01 22:16 - 2014-08-17 19:07 - 00000000 ____D () C:\Users\ACER-PC\AppData\Local\Adobe

Some content of TEMP:
====================
C:\Users\ACER-PC\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmppvsh7n.dll
C:\Users\ACER-PC\AppData\Local\Temp\drv22884.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2014-10-25 16:25

==================== End Of Log ============================



Poslao: 26 Okt 2014 11:44
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Pozdrav,


1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

closeprocesses:
emptytemp:
C:\Windows\PersonalizeEnabler.exe
AppInit_DLLs: C:\PROGRA~3\PERFOR~1\PERFOR~2.DLL => C:\ProgramData\Performance Optimizer\PerformanceOptimizer_x64.dll [4303360 2014-09-07] ()
C:\PROGRA~3\PERFOR~1
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
FF user.js: detected! => C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\user.js
FF Extension: surfkeePit - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\Extensions\bbtopckp@euaea.com [2014-09-21]
FF Extension: DuIsucountLocaoTOr - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\Extensions\ip_lcu@arxaryno.edu [2014-10-13]
FF Extension: FFineeDeAlSoft - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\Extensions\wvo2u@yooiafvxg.net [2014-09-21]
FF Extension: Does Amazon Ship to ...? - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\Extensions\DoesAmazonShipTo@usefulhelper.com.xpi [2014-08-16]
FF Extension: No Name - C:\Users\ACER-PC\AppData\Roaming\Mozilla\Firefox\Profiles\3ek7hamo.default\extensions\45633fba7e7d40fea9c29@9dc18447eea04021a325caf3.com [Not Found]
FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
S2 892cc6a3; c:\ProgramData\Performance Optimizer\PerformanceOptimizerSvc.dll [186192 2014-09-07] () [File not signed]
S3 cpuz137; \??\C:\Users\ACER-PC\AppData\Local\Temp\cpuz137\cpuz137_x64.sys [X]
S3 flash; \??\C:\Users\ACER-PC\Desktop\BIOS_Acer_1.09_A_A\BIOS_Acer_1.09_Windows_AS5542\Winflash\flash.sys [X]
2014-10-26 09:17 - 2014-10-26 09:17 - 00000687 _____ () C:\awh2828.tmp
2014-10-25 16:17 - 2014-10-25 16:17 - 00000687 _____ () C:\awh3448.tmp
2014-10-13 20:55 - 2014-10-26 10:43 - 00000000 ____D () C:\ProgramData\DDiscountLaooCAotoor
2014-10-26 10:43 - 2014-09-21 07:14 - 00000000 ____D () C:\ProgramData\surrfkeepit
2014-10-26 10:43 - 2014-09-07 12:54 - 00000000 ____D () C:\ProgramData\FinEDealSoft
2014-10-26 10:43 - 2014-08-17 19:27 - 00000000 ____D () C:\Program Files (x86)\globalUpdate
Task: {C68800EA-2EF6-410A-A5FD-29BB1C9736F8} - System32\Tasks\UNELEVATE_27744 => C:\Program Files (x86)\ShopperPro\JSDriver\1.37.0.486\jsdrv.exe <==== ATTENTION
C:\Program Files (x86)\ShopperPro
AlternateDataStreams: C:\ProgramData\TEMP:56E2E879


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.



Poslao: 26 Okt 2014 12:05
Idi na vrh
offline
  • Pridružio: 25 Apr 2012
  • Poruke: 143

[Link mogu videti samo ulogovani korisnici]

Poslao: 26 Okt 2014 13:00
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Odlicno, sada cemo sprovesti jos dve provere:



Skeniranje sa MalwareBytes Anti-Malware

Preuzmi instalaciju za Malwarebytes Anti-Malware.

Pokreni instalaciju i prati uputstva.
Pri završetku instalacije, možeš da ostaviš obe opcije čekirane, a i ne moraš. Prva od njih ti omogućava probni period PRO verzije, a druga automatski pokreće program, nakon što klikneš na Finish
Pri pokretanju će automatski biti izvršeno ažuriranje programa.
Nakon što je to gotovo, klikni na Settings, a zatim na Detection & Protection.Tu je potrebno da čekiraš Scan for rootkits.
Sada klikni na Scan, automatski će biti izabran Threat Scan i potrebno je da klikneš Scan Now.
Ukoliko je nešto detektovano, klikni Apply Actions. Ukoliko zatraži restart sistema, potvrdi.
Kada je to sve gotovo, potrebno je da dostaviš izveštaj. Klikni na History --> Application Logs zatim dvaput klikni na najnoviji Scan Log.
Pri dnu imaš Export, pa onda Text file. Nazovi fajl kako želiš i sačuvaj na Desktop.
Dostavi izveštaj u narednoj poruci.




Skeniranje sa AdwCleaner

Preuzmi AdwCleaner i sačuvaj ga na Desktop.

Pokreni alat i sačekaj da se izvrši ažuriranje.
Prihvati Terms of use tako što ćeš kliknuti na I Agree.
Klikni Scan i sačekaj da se skeniranje završi.
Kada je gotovo, klikni Clean.
Pojaviće se poruka da će svi programi biti zaustavljeni nakon što klikneš OK, tako da ako imaš nešto da sačuvaš, sada je vreme da to uradiš.
Pojaviše se još dve poruke gde je potrebno kliknuti OK. Računar će se restartovati.
Nakon restarta, otvoriće se izveštaj, čiji sadržaj možeš kopirati u sledeću poruku.

Napomena: Izveštaji će biti sačuvani na tvoju sistemsku particiju, obično je to folder C:\AdwCleaner

Poslao: 26 Okt 2014 13:26
Idi na vrh
offline
  • Pridružio: 25 Apr 2012
  • Poruke: 143

Napisano: 26 Okt 2014 13:21

[Link mogu videti samo ulogovani korisnici]

Dopuna: 26 Okt 2014 13:26

[Link mogu videti samo ulogovani korisnici]

Poslao: 26 Okt 2014 15:36
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Odlicno, kakvo je stanje sada?

Poslao: 26 Okt 2014 15:45
Idi na vrh
offline
  • Pridružio: 25 Apr 2012
  • Poruke: 143

Mngo bolje stanje, radi i opera i chrom,koji da instaliram antivirus(naravno free)?

Poslao: 26 Okt 2014 17:51
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Ma sve je to isto, nemoj samo Microsoft Security Essentials, on je bas busan na sve strane. Recimo biraj neki od ova 3:
- Comodo Antivirus Free [Link mogu videti samo ulogovani korisnici]
- Panda Cloud [Link mogu videti samo ulogovani korisnici]
- Avast Free [Link mogu videti samo ulogovani korisnici]



Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop

Dvoklikom pokreni program.

Štikliraj sledeće opcije:
Remove disinfection tools
Purge System Restore
Reset system settings

Klikni na dugme "Run" i pričekaj da program završi rad.
Alat ce ukloniti sve koriscene alate u ovoj temi...
Kada alat završi, otvoriće izvestaj u notepadu.
Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt

Nije potrebno dostavljati izvestaj.

Poslao: 06 Nov 2014 18:12
Idi na vrh
offline
  • Pridružio: 25 Apr 2012
  • Poruke: 143

Kao da mi je ponovo nesto napalo sistem,pretrazivaci ponovo usporeno rade?


[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

MyCity » Ambulanta -> Arhiva Ambulante » Usporen rad OS, Opera,Chrom jedva da se pokrenu.

Ko je trenutno na forumu
 

Ukupno su 854 korisnika na forumu :: 72 registrovanih, 11 sakrivenih i 771 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: AleksSE, aleph_one, Atomski čoban, bankulen, Belac91, bladesu, Boris BM, borya90, bounty hunters, comi_pfc, crnirocko, darkojbn, Darth Malak, DeerHunter, deLacy, Dimitrije Paunovic, DM1994, Dolinc, DonRumataEstorski, DragoslavS, Dukelander, Dusko_Dugousko, Electron, EVIDENTICAR, Glavonja049, Goksi95, Haris, HrcAk47, Iskander, ivanb, jalos, Jecmendo, Jeremiah, Jomini, Kalu128338, kaput21, Kukuvaja, larix, Lazarus, Litostroton, LostInSpaceandTime, M74AB3, mercedesamg, Mickey91, moldway, Mzee, N.e.m.a.nj.a., nemkea71, Pavel Medved, peti, pfc74, Piicoki, saputnik plavetnila, Sharpshooter, Skakac7, Smor, Stevan Visoki, Stoilkovic, Topaz9, uros, uruk, vaso1, vathra, VBoss, vladao75, Vlado82, VNVK, Vrač, vrgudinac, vuksa72, Zmajac, Zoca