MyCity » Ambulanta -> Arhiva Ambulante » Vec par dana pronalazim tolbar pup delta search,kako da ga uklonim

Vec par dana pronalazim tolbar pup delta search,kako da ga uklonim

Napisano na dan: 3.6.2013
1

Vec par dana pronalazim tolbar pup delta search,kako da ga uklonim
Sledeća strana Pagination

Idi na vrh

Poslao: 03 Jun 2013 13:17
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

Pozdrav AMF timu!

Vec par dana sa SUPERAntiSpyware mi pronalazim tolbar pup delta search ali nikako neznam kako da ga uklonim efikasno.U kontrol panelu ga nemam tako da ga tu deinstaliram otpada


DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.21.2
Run by Dalibor at 13:09:36 on 2013-06-03
Microsoft Windows XP Professional 5.1.2600.3.1250.381.1033.18.1023.378 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\MCShield\mcshieldrtm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Java\jre7\bin\jqs.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
dURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - <orphaned>
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [MCShield Monitor] c:\program files\mcshield\mcshieldrtm.exe
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [Google Update] "c:\documents and settings\dalibor\local settings\application data\google\update\GoogleUpdate.exe" /c
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [VMSnap3] c:\windows\VMSnap3.EXE
mRun: [Domino] c:\windows\Domino.EXE
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\dalibor\startm~1\programs\startup\yahoo!~1.lnk - c:\program files\yahoo!\widgets\YahooWidgets.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - [Link mogu videti samo ulogovani korisnici]
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{9F4E3ED5-5E40-425C-BD51-990C50442851} : DHCPNameServer = 192.168.1.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: AtiExtEvent - Ati2evxx.dll
SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\dalibor\application data\mozilla\firefox\profiles\6e0jhsd5.default\
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: keyword.URL - [Link mogu videti samo ulogovani korisnici]
FF - plugin: c:\documents and settings\dalibor\local settings\application data\google\update\1.3.21.145\npGoogleUpdate3.dll
FF - plugin: c:\documents and settings\dalibor\local settings\application data\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_202.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
FF - ExtSQL: 2013-05-27 12:45; {65030561-c150-4370-836c-7c9d04f7a1b4}; c:\documents and settings\dalibor\application data\mozilla\firefox\profiles\6e0jhsd5.default\extensions\{65030561-c150-4370-836c-7c9d04f7a1b4}
FF - ExtSQL: 2013-06-01 10:13; [Link mogu videti samo ulogovani korisnici]; c:\program files\avast software\avast\webrep\FF
FF - ExtSQL: 2013-06-02 06:26; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys [2013-6-1 49376]
R0 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys [2013-6-1 174664]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-6-1 765736]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-6-1 368944]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2011-8-12 116608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-6-1 29816]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-6-1 66336]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2013-6-1 46808]
R3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [2013-4-24 428160]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-2-28 161384]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2013-4-28 1691480]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\i:\ntglm7x.sys --> i:\NTGLM7X.sys [?]
.
=============== Created Last 30 ================
.
2013-06-02 04:25:14 -------- d-----w- c:\windows\system32\XPSViewer
2013-06-02 04:24:44 89088 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2013-06-02 04:24:28 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2013-06-02 04:24:28 117760 ------w- c:\windows\system32\prntvpt.dll
2013-06-02 04:24:27 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2013-06-02 04:24:27 597504 ------w- c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2013-06-02 04:24:27 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2013-06-02 04:24:27 575488 ------w- c:\windows\system32\xpsshhdr.dll
2013-06-02 04:24:27 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2013-06-02 04:24:27 1676288 ------w- c:\windows\system32\xpssvcs.dll
2013-06-01 20:01:32 -------- d-----w- c:\documents and settings\dalibor\local settings\application data\VS Revo Group
2013-06-01 08:13:18 765736 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-06-01 08:13:17 49376 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-06-01 08:13:17 174664 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-06-01 08:13:16 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-06-01 08:12:49 41664 ----a-w- c:\windows\avastSS.scr
2013-06-01 08:12:46 35088 ----a-w- c:\windows\system32\drivers\tap0901.sys
2013-05-27 10:06:14 -------- d-----w- c:\program files\Hitman Pro 3.5
2013-05-23 07:27:55 -------- d-----w- c:\documents and settings\dalibor\application data\BlueSprig
2013-05-23 07:27:48 -------- d-----w- c:\program files\BlueSprig
2013-05-19 06:01:07 -------- d-----w- c:\documents and settings\dalibor\application data\Unity
2013-05-19 05:59:43 -------- d-----w- c:\documents and settings\dalibor\local settings\application data\Unity
2013-05-11 10:37:28 209472 ----a-w- c:\program files\internet explorer\plugins\nppdf32.dll
2013-05-10 13:06:59 -------- d-----w- c:\documents and settings\dalibor\application data\SUPERAntiSpyware.com
2013-05-10 13:06:22 -------- d-----w- c:\program files\SUPERAntiSpyware
2013-05-10 13:06:22 -------- d-----w- c:\documents and settings\all users\application data\SUPERAntiSpyware.com
.
==================== Find3M ====================
.
2013-06-03 09:10:27 23624 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2013-05-17 12:08:15 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-05-17 12:08:15 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-05-10 07:57:53 12872 ----a-w- c:\windows\system32\bootdelete.exe
2013-05-03 15:19:06 94112 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-05-03 15:19:04 144896 ----a-w- c:\windows\system32\javacpl.cpl
2013-05-03 15:19:03 866720 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-05-03 15:19:03 788896 ----a-w- c:\windows\system32\deployJava1.dll
2013-04-16 22:17:15 920064 ----a-w- c:\windows\system32\wininet.dll
2013-04-16 22:17:14 43520 ----a-w- c:\windows\system32\licmgr10.dll
2013-04-16 22:17:14 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2013-04-12 23:28:55 385024 ----a-w- c:\windows\system32\html.iec
2013-04-10 01:31:19 1876352 ----a-w- c:\windows\system32\win32k.sys
2013-04-02 14:09:52 4550656 ----a-w- c:\windows\system32\GPhotos.scr
2013-03-08 08:36:22 293376 ----a-w- c:\windows\system32\winsrv.dll
2013-03-07 01:32:25 2149888 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-03-07 00:50:30 2028544 ----a-w- c:\windows\system32\ntkrnlpa.exe
.
============= FINISH: 13:10:06,57 ===============

[Link mogu videti samo ulogovani korisnici]



Poslao: 03 Jun 2013 13:32
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Pozdrav,

Preuzmi program GMER sa donjeg linka na Desktop:


GMER download
Klikni dati link;
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberi Desktop i klikni Save.


Dvoklikom pokrenite GMER.
Sačekaj da se završi uvodno skeniranje - ukoliko se pojavi bilo kakav upit, klikni No;

klikni Scan i sačekaj da skeniranje bude završeno;

klikni Save ... - izveštaj sačuvaj na Desktop (pod nazivom Gmer1);

klikni desnim tasterom u prozor programa Gmer i odaberi Options > 3rd party - klikni Scan;

po završetku skeniranja klikni Save ... - izveštaj sačuvaj na Desktop (pod nazivom Gmer2);

klikni taster >>> i odaberi Autostart karticu;

po završetku kratkotrajnog skeniranja, klikni Copy;

otvori Notepad i u njega postavi kopirani tekst - izveštaj sačuvaj na Desktop (pod nazivom Gmer3);

Slikoviti prikaz postupka

Priloži sva tri izveštaja uz poruku korišćenjem opcije Prikači fajl.



Poslao: 03 Jun 2013 17:10
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

Poslao: 03 Jun 2013 19:28
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Korak 1.


Preuzmi Junkware Removal Tool ( JRT ) i sacuvaj ga na desktop.

zatvori browser i ostale pokrenute programe;
Jel potrebno navesti napomenu za duzinu scana? Da postavim ovaj PG ili nema potrebe za tim?

Privremeno deaktiviraj zastitni softver (Uputstvo);

dvoklikom na ikonicu ( )pokreni program JRT;

Kod obavestenja "press any key" pritisnuti bilo koji taster i alat ce zapoceti skeniranje.
Napomena: u ovisnosti od sistemske specifikacije vreme skeniranja u nekim slucajevima moze da potraje.

Kada zavrsi otvorice se log sa izvestajem koji ce biti sacuvan na desktopu pod nazivom JRT.txt

Arrow Kopiraj sadrzaj tog loga u temu.






Korak 2.


Preuzmi "Xplode"-ov AdwCleaner i sacuvaj ga na Desktop
Pokreni ga, a zatim klikni na dugme [Delete] i pricekaj da program zavrsi.
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok
Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"
Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt

Poslao: 04 Jun 2013 08:40
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Thisisu
Version: 4.9.4 (05.06.2013:1)
OS: Microsoft Windows XP x86
Ran by Dalibor on uto 04.06.2013 at 8:27:38,89
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Registry Values

Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\DisplayName
Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}\\URL



~~~ Registry Keys

Successfully deleted: [Registry Key] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\SearchScopes\{9C3E6040-4394-4340-AD3A-7C294C7C54CC}



~~~ Files



~~~ Folders

Successfully deleted: [Folder] "C:\Documents and Settings\Dalibor\Application Data\goforfiles"



~~~ FireFox

Successfully deleted: [File] C:\Documents and Settings\Dalibor\Application Data\mozilla\firefox\profiles\6e0jhsd5.default\invalidprefs.js
Successfully deleted the following from C:\Documents and Settings\Dalibor\Application Data\mozilla\firefox\profiles\6e0jhsd5.default\prefs.js

user_pref("extensions.tuvaro.admin", false);
user_pref("extensions.tuvaro.aflt", "orgnl");
user_pref("extensions.tuvaro.appId", "{2768469C-717B-401F-8532-C6D88BAE0339}");
user_pref("extensions.tuvaro.autoRvrt", "false");
user_pref("extensions.tuvaro.cam", "");
user_pref("extensions.tuvaro.dfltLng", "");
user_pref("extensions.tuvaro.dfltSrch", true);
user_pref("extensions.tuvaro.dnsErr", true);
user_pref("extensions.tuvaro.excTlbr", false);
user_pref("extensions.tuvaro.ffxUnstlRst", false);
user_pref("extensions.tuvaro.hmpg", true);
user_pref("extensions.tuvaro.hmpgUrl", "hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=homepage&toolbarid=base&u=a84fa357000000000000001d92472bc2");
user_pref("extensions.tuvaro.hpOld0", "");
user_pref("extensions.tuvaro.id", "a84fa357000000000000001d92472bc2");
user_pref("extensions.tuvaro.instlDay", "15813");
user_pref("extensions.tuvaro.instlRef", "9e9471a2");
user_pref("extensions.tuvaro.kw_url", "hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=url&toolbarid=base&u=a84fa357000000000000001d92472bc2&q=");
user_pref("extensions.tuvaro.newTab", true);
user_pref("extensions.tuvaro.newTabUrl", "chrome://tuvaro/content/new browser tab.html?source=9e9471a2&tbp=tab&u=a84fa357000000000000001d92472bc2");
user_pref("extensions.tuvaro.prdct", "tuvaro");
user_pref("extensions.tuvaro.prtnrId", "tuvaro");
user_pref("extensions.tuvaro.rvrt", "false");
user_pref("extensions.tuvaro.smplGrp", "none");
user_pref("extensions.tuvaro.srchPrvdr", "Tuvaro");
user_pref("extensions.tuvaro.tlbrId", "base");
user_pref("extensions.tuvaro.tlbrSrchUrl", "hxxp://tuvaro.com/ws/?source=9e9471a2&tbp=main&toolbarid=base&u=a84fa357000000000000001d92472bc2&q=");
user_pref("extensions.tuvaro.vrsn", "1.8.17.1");
user_pref("extensions.tuvaro.vrsnTs", "1.8.17.122:10:11");
user_pref("extensions.tuvaro.vrsni", "1.8.17.1");





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on uto 04.06.2013 at 8:31:42,48
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

[Link mogu videti samo ulogovani korisnici]

Poslao: 04 Jun 2013 09:40
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Arrow Ima li poboljsanja?

Poslao: 04 Jun 2013 16:50
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

Napisano: 04 Jun 2013 15:42

Mnogo bolje radi koliko primecujem.Ako mi zaskripi javljam se .
Hvala i Veliki pozdrav !

Dopuna: 04 Jun 2013 16:50

Sistem je cist od gorepomenutoga tolbara

Poslao: 04 Jun 2013 21:35
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Arrow To bi onda bilo to Smile




Arrow Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop

Dvoklikom pokreni program.

Štikliraj sledeće opcije:
Remove disinfection tools
Purge System Restore
Reset system settings

Klikni na dugme "Run" i pričekaj da program završi rad.
Kada alat završi, otvoriće izvestaj u notepadu.
Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt

Poslao: 22 Jun 2013 07:42
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

Napisano: 05 Jun 2013 16:12

[Link mogu videti samo ulogovani korisnici]

Dopuna: 22 Jun 2013 7:42

Posto imam opet isti problem i nemogu da ga se resim nikako pa da neotvaram novu temu samo da nastavim ovde.
Jedno par dana posle kada smo ovde resili racunar je radio normalno da bih opet ista stvar se ponovila tolbar sam pronasao sa SUPERAntiSpyware.
Racunar otezano radi tesko otvara stranice pa da vidimo da to uklonim uz vasu pomoc,u prilogu cu vam dostaviti log od SUPERAntiSpyware

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.25.2
Run by Dalibor at 7:33:20 on 2013-06-22
Microsoft Windows XP Professional 5.1.2600.3.1250.381.1033.18.1023.293 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\VMSnap3.EXE
C:\WINDOWS\Domino.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\MCShield\mcshieldrtm.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
dURLSearchHooks: {EF99BD32-C1FB-11D2-892F-0090271D4F88} - <orphaned>
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Advanced SystemCare Browser Protection: {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - c:\program files\iobit\advanced systemcare ultimate\browerprotect\ASCPlugin_Protection.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - c:\program files\avast software\avast\aswWebRepIE.dll
uRun: [MCShield Monitor] c:\program files\mcshield\mcshieldrtm.exe
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [Google Update] "c:\documents and settings\dalibor\local settings\application data\google\update\GoogleUpdate.exe" /c
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [VMSnap3] c:\windows\VMSnap3.EXE
mRun: [Domino] c:\windows\Domino.EXE
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [KernelFaultCheck] c:\windows\system32\dumprep 0 -k
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\dalibor\startm~1\programs\startup\yahoo!~1.lnk - c:\program files\yahoo!\widgets\YahooWidgets.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - [Link mogu videti samo ulogovani korisnici]
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{9F4E3ED5-5E40-425C-BD51-990C50442851} : DHCPNameServer = 192.168.1.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: AtiExtEvent - Ati2evxx.dll
AppInit_DLLs= c:\docume~1\alluse~1\applic~1\browse~1\261339~1.144\{c16c1~1\browse~1.dll
SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\dalibor\application data\mozilla\firefox\profiles\6e0jhsd5.default\
FF - prefs.js: keyword.URL - [Link mogu videti samo ulogovani korisnici]
FF - plugin: c:\documents and settings\dalibor\local settings\application data\google\update\1.3.21.145\npGoogleUpdate3.dll
FF - plugin: c:\documents and settings\dalibor\local settings\application data\unity\webplayer\loader\npUnity3D32.dll
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\picasa3\npPicasa3.dll
FF - plugin: c:\program files\iobit\advanced systemcare ultimate\browerprotect\np_Asc_plugin.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_224.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
FF - ExtSQL: 2013-05-27 12:45; {65030561-c150-4370-836c-7c9d04f7a1b4}; c:\documents and settings\dalibor\application data\mozilla\firefox\profiles\6e0jhsd5.default\extensions\{65030561-c150-4370-836c-7c9d04f7a1b4}
FF - ExtSQL: 2013-06-01 10:13; [Link mogu videti samo ulogovani korisnici]; c:\program files\avast software\avast\webrep\FF
FF - ExtSQL: 2013-06-02 06:26; {20a82645-c095-46ed-80e3-08825760534b}; c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\DotNetAssistantExtension
FF - ExtSQL: 2013-06-09 11:09; [Link mogu videti samo ulogovani korisnici]; c:\documents and settings\dalibor\application data\mozilla\firefox\profiles\6e0jhsd5.default\extensions\ascsurfingprotection@iobit.com
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;aswRvrt;c:\windows\system32\drivers\aswRvrt.sys [2013-6-1 49376]
R0 aswVmm;aswVmm;c:\windows\system32\drivers\aswVmm.sys [2013-6-1 174664]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2013-6-1 765736]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2013-6-1 368944]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCORE.EXE [2011-8-12 116608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2013-6-1 29816]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2013-6-1 66336]
R2 avast! Antivirus;avast! Antivirus;c:\program files\avast software\avast\AvastSvc.exe [2013-6-1 46808]
R3 vmfilter303;vmfilter303;c:\windows\system32\drivers\vmfilter303.sys [2013-4-24 428160]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-6-3 162408]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2013-4-28 1691480]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\i:\ntglm7x.sys --> i:\NTGLM7X.sys [?]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2004-8-4 14336]
.
=============== Created Last 30 ================
.
2013-06-20 07:27:12 144896 ----a-w- c:\windows\system32\javacpl.cpl
2013-06-20 07:27:08 94632 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2013-06-14 07:17:09 -------- d-----w- c:\program files\Unlocker
2013-06-12 07:10:17 -------- d-----w- c:\documents and settings\dalibor\application data\TuneUp Software
2013-06-12 07:09:57 -------- d-----w- c:\documents and settings\all users\application data\TuneUp Software
2013-06-12 07:09:38 -------- d-sh--w- c:\documents and settings\all users\application data\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
2013-06-12 07:09:38 -------- d--h--w- c:\documents and settings\all users\application data\Common Files
2013-06-12 06:45:43 74752 -c----w- c:\windows\system32\dllcache\cryptdlg.dll
2013-06-12 06:45:08 -------- d-----w- c:\windows\system32\winrm
2013-06-12 06:45:08 -------- d-----w- c:\windows\system32\GroupPolicy
2013-06-12 06:44:57 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$
2013-06-09 07:09:26 -------- d-----w- c:\documents and settings\all users\application data\{D76294E6-03B8-4971-AF2E-3F846161A690}
2013-06-09 07:09:22 -------- d-----w- c:\documents and settings\dalibor\AppData
2013-06-09 07:09:15 -------- d-----w- c:\documents and settings\all users\application data\{5A85B23A-4B58-47D1-9B9C-DFBD7866099F}
2013-06-09 07:06:05 -------- d-----w- c:\documents and settings\dalibor\SyncFolder
2013-06-09 07:01:58 -------- d-----w- c:\program files\MyPC Backup
2013-06-07 11:04:24 -------- d-----w- c:\program files\FastStone Capture
2013-06-02 04:25:14 -------- d-----w- c:\windows\system32\XPSViewer
2013-06-02 04:24:44 89088 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2013-06-02 04:24:28 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2013-06-02 04:24:28 117760 ------w- c:\windows\system32\prntvpt.dll
2013-06-02 04:24:27 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2013-06-02 04:24:27 597504 ------w- c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2013-06-02 04:24:27 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2013-06-02 04:24:27 575488 ------w- c:\windows\system32\xpsshhdr.dll
2013-06-02 04:24:27 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2013-06-02 04:24:27 1676288 ------w- c:\windows\system32\xpssvcs.dll
2013-06-01 20:01:32 -------- d-----w- c:\documents and settings\dalibor\local settings\application data\VS Revo Group
2013-06-01 08:13:18 765736 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2013-06-01 08:13:17 49376 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2013-06-01 08:13:17 174664 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2013-06-01 08:13:16 66336 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2013-06-01 08:12:49 41664 ----a-w- c:\windows\avastSS.scr
2013-06-01 08:12:46 35088 ----a-w- c:\windows\system32\drivers\tap0901.sys
2013-05-27 10:06:14 -------- d-----w- c:\program files\Hitman Pro 3.5
2013-05-23 07:27:55 -------- d-----w- c:\documents and settings\dalibor\application data\BlueSprig
2013-05-23 07:27:48 -------- d-----w- c:\program files\BlueSprig
.
==================== Find3M ====================
.
2013-06-22 04:30:56 23624 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2013-06-20 07:26:55 867240 ----a-w- c:\windows\system32\npDeployJava1.dll
2013-06-20 07:26:55 789416 ----a-w- c:\windows\system32\deployJava1.dll
2013-06-12 03:18:55 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-06-12 03:18:54 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-05-10 07:57:53 12872 ----a-w- c:\windows\system32\bootdelete.exe
2013-05-07 22:30:06 920064 ----a-w- c:\windows\system32\wininet.dll
2013-05-07 22:30:05 43520 ----a-w- c:\windows\system32\licmgr10.dll
2013-05-07 22:30:05 1469440 ----a-w- c:\windows\system32\inetcpl.cpl
2013-05-07 21:53:29 385024 ----a-w- c:\windows\system32\html.iec
2013-05-03 01:30:20 2149888 ----a-w- c:\windows\system32\ntoskrnl.exe
2013-05-03 00:38:17 2028544 ----a-w- c:\windows\system32\ntkrnlpa.exe
2013-04-10 01:31:19 1876352 ----a-w- c:\windows\system32\win32k.sys
2013-04-02 14:09:52 4550656 ----a-w- c:\windows\system32\GPhotos.scr
2013-03-26 22:53:57 74752 ----a-w- c:\windows\system32\cryptdlg.dll
.
============= FINISH: 7:33:50,98 ===============

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

Poslao: 22 Jun 2013 09:17
Idi na vrh
offline
  • Pridružio: 09 Avg 2011
  • Poruke: 15879
  • Gde živiš: Beograd

Korak 1.


Preuzmi "Xplode"-ov AdwCleaner i sacuvaj ga na Desktop
Pokreni ga, a zatim klikni na dugme [Delete] i pricekaj da program zavrsi.
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok
Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"
Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt



Korak 2.


Preuzmi Junkware Removal Tool ( JRT ) i sacuvaj ga na desktop.

zatvori browser i ostale pokrenute programe;
Jel potrebno navesti napomenu za duzinu scana? Da postavim ovaj PG ili nema potrebe za tim?

Privremeno deaktiviraj zastitni softver (Uputstvo);

dvoklikom na ikonicu ( )pokreni program JRT;

Kod obavestenja "press any key" pritisnuti bilo koji taster i alat ce zapoceti skeniranje.
Napomena: u ovisnosti od sistemske specifikacije vreme skeniranja u nekim slucajevima moze da potraje.

Kada zavrsi otvorice se log sa izvestajem koji ce biti sacuvan na desktopu pod nazivom JRT.txt

Arrow Kopiraj sadrzaj tog loga u temu.



Korak 3.


Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop

Dvoklikom pokreni program.

Štikliraj sledeće opcije:
Purge System Restore

Klikni na dugme "Run" i pričekaj da program završi rad.
Kada alat završi, otvoriće izvestaj u notepadu.
Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt

MyCity » Ambulanta -> Arhiva Ambulante » Vec par dana pronalazim tolbar pup delta search,kako da ga uklonim

Ko je trenutno na forumu
 

Ukupno su 2837 korisnika na forumu :: 103 registrovanih, 8 sakrivenih i 2726 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 5253 - dana 09 Dec 2025 16:26

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, aleksandar89, Asparagus, Avalon015, babaroga, bankulen, bavar357, BB, Belac91, bojcistv, bolimejoli, boskelazo, BrcakRS, brufen, Cicumile, darkojbn, dejankm, dekan.m, Deki Duga Devetka, del boy, Derica_kasapin, Dimitrije Paunovic, dok80, Dorcolac, dragan_mig31, Draganeli, draganl, DrFlyFisherman, Dungorth, dushan, Electron, Fliper, geo.dule, Gheljda, gobrad, helen1, iceburn, IQ116, istokzapad, Ivan Gajic, Jeremija98, Jonbonjovi, Kalem, kingkong1947, Krusarac, Kubovac, kybonacci, lord sir giga, Lucije Kvint, M74AB3, Makeitdrip, MarijaC84, markolopin, menges, MiGac, Milanče222, Milos ZA, Mise, Mrav Obrad, nextyamb, Nobunaga, Nole, nuke92, Orlova, Paklenica, peradetlić, Petarvu, ping15, PITT, raketaš, RD84, rovac, sabros, ShtagodShtagod, Sirius, Sky diver 29, Slingshot, sluga, sonico, Srle993, ssekir75, starlights, Tandrkalo, tomo2, travisrise, Tribal, tritonus, uljmanac, V-98, Vasilije Budović, Vaske8990, veljko82, vensla, VJ, vladao75, vojnik švejk, vuk77, Zanimljivo, zdrebac, zgoljo, ZlatniRez, Zvrk, 1324