|
Kompjuter je jako usporen i cudno se ponasa :
Cak i dok kucam ovu poruku sam mi brise tekst preskace slova na tastaturi, jedan deo slova iskuca drugi ne , pa sve to obrise.
Kada otvaram fajl folder ili aplikaciju na levi klik kao da koristim desni klik i bira mi kopiranje ili katovanje.
Takodje kada kucam neki tekst bilo gde da li je to u google ili obican tekst u word-u pocinje da pisti jednolican piskav zvuk i sprecava me da kucam dalje tekst.
Takodje otvara proizvoljno prozore drugih fajlova.
Kada premestam ikonice po desktopu samo mi ih umnozava i dodaje da su fajlovi .EXE ekstenzijom
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 12.05.2018
Ran by admin (administrator) on VELESSTROJRU009 (15-05-2018 13:40:57)
Running from C:\Users\admin\Desktop
Loaded Profiles: admin & novo (Available Profiles: admin & novo)
Platform: Windows 7 Professional Service Pack 1 (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [Link mogu videti samo ulogovani korisnici]
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(IDT, Inc.) C:\Program Files\IDT\WDM\stacsv64.exe
(Hewlett-Packard Company) C:\Windows\System32\hpservice.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRYSVC.EXE
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\BCMWLTRY.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Autodesk, Inc.) C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe
(CyberLink) C:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe
(Intel(R) Corporation) C:\Program Files\Intel\WiFi\bin\EvtEng.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(KYOCERA Document Solutions Inc.) C:\Program Files\KDService\bin\KDService.exe
() C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
(PDF Complete Inc) C:\Program Files (x86)\PDF Complete\pdfsvc.exe
(Intel(R) Corporation) C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe
(Popcorn Time) C:\Program Files (x86)\Popcorn Time\Updater.exe
(Intel® Corporation) C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe
(IDT, Inc.) C:\Program Files\IDT\WDM\sttray64.exe
(Broadcom Corporation) C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.EXE
(Realtek Semiconductor Corp.) C:\Windows\RtsCM64.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
() C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\Framework\Common\avguix.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
(Hewlett-Packard Company) C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesApp64.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Hewlett-Packard Company) C:\Users\admin\AppData\Roaming\Hewlett-Packard\hpqwmiex.exe
(Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
(Broadcom Corporation.) C:\Program Files\WIDCOMM\Bluetooth Software\Bluetooth Headset Helper.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe
(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AcroRd32.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Farbar) C:\Users\admin\Desktop\FRST64 (1).exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [SysTrayApp] => C:\Program Files\IDT\WDM\sttray64.exe [1703424 2013-08-16] (IDT, Inc.)
HKLM\...\Run: [Broadcom Wireless Manager UI] => C:\Program Files\Broadcom\Broadcom 802.11\WLTRAY.exe [8641536 2017-03-31] (Broadcom Corporation)
HKLM\...\Run: [RtsCM] => C:\Windows\RTSCM64.EXE [147160 2013-08-02] (Realtek Semiconductor Corp.)
HKLM\...\Run: [AvgUi] => C:\Program Files (x86)\AVG\Framework\Common\avguirna.exe [239192 2018-04-17] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvLaunch.exe [242904 2018-05-14] (AVAST Software)
HKLM-x32\...\Run: [QLBController] => C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\QLBController.exe [337184 2013-08-01] (Hewlett-Packard Company)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2013-08-16] (Intel Corporation)
HKLM-x32\...\Run: [PDF Complete] => C:\Program Files (x86)\PDF Complete\pdfsty.exe [1194048 2018-02-01] (PDF Complete Inc)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1160408 2017-03-28] (Adobe Systems Incorporated)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKU\S-1-5-19\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-20\Control Panel\Desktop\\SCRNSAVE.EXE ->
HKU\S-1-5-21-1186553991-1588963794-3084758233-1002\...\Run: [Bloody2] => C:\Program Files (x86)\Bloody6\Bloody6\Bloody6.exe [19276288 2016-09-22] ()
HKU\S-1-5-21-1186553991-1588963794-3084758233-1002\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [18334528 2018-04-12] (Piriform Ltd)
HKU\S-1-5-21-1186553991-1588963794-3084758233-1002\...\Run: [Skype for Desktop] => C:\Program Files (x86)\Microsoft\Skype for Desktop\Skype.exe [49654728 2018-05-09] (Skype Technologies S.A.)
HKU\S-1-5-21-1186553991-1588963794-3084758233-1002\...\Policies\Explorer: []
HKU\S-1-5-21-1186553991-1588963794-3084758233-1002\...\MountPoints2: {4d0d3bbc-7bb4-11e4-b82c-288023034d53} - E:\Startme.exe
HKU\S-1-5-18\Control Panel\Desktop\\SCRNSAVE.EXE ->
Lsa: [Notification Packages] scecli c:\Program Files\WIDCOMM\Bluetooth Software\BtwProximityCP.dll
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk [2014-05-05]
ShortcutTarget: Bluetooth.lnk -> C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe (Broadcom Corporation.)
GroupPolicy: Restriction <==== ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 127.0.0.1 activate.adobe.com
Tcpip\Parameters: [DhcpNameServer] 89.216.1.30 89.216.1.50
Tcpip\..\Interfaces\{C3083EDC-54CB-4CB3-8AB9-63753944D20B}: [DhcpNameServer] 89.216.1.30 89.216.1.50
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
HKU\S-1-5-21-1186553991-1588963794-3084758233-1005\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
HKU\S-1-5-21-1186553991-1588963794-3084758233-1005\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2018-02-13] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2018-05-14] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2018-02-27] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2018-02-13] (Microsoft Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2018-05-14] (AVAST Software)
BHO-x32: Adobe PDF Conversion Toolbar Helper -> {AE7CD045-E861-484f-8273-0445EE161910} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2018-02-27] (Microsoft Corporation)
BHO-x32: SmartSelect Class -> {F4971EE7-DAA0-4053-9964-665D8EE6A077} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Toolbar: HKLM-x32 - Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2012-01-03] (Adobe Systems Incorporated)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2017-07-18] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e313kj05.default-1490819928788 [2018-05-15]
FF Homepage: Mozilla\Firefox\Profiles\e313kj05.default-1490819928788 -> google.rs/
FF Extension: (Avast SafePrice) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e313kj05.default-1490819928788\Extensions\sp@avast.com.xpi [2018-05-14]
FF Extension: (Avast Online Security) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e313kj05.default-1490819928788\Extensions\wrc@avast.com.xpi [2018-05-14]
FF Extension: (Google Code Correction) - C:\Users\admin\AppData\Roaming\Mozilla\Firefox\Profiles\e313kj05.default-1490819928788\features\{e69e307f-9ee7-4c95-8051-78bf4229080b}\google-code-correction@mozilla.org.xpi [2018-05-08] [Legacy]
FF Extension: (Skype Click to Call) - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2014-07-14] [Legacy] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2014-12-02] [Legacy] [not signed]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_29_0_0_171.dll [2018-05-09] ()
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_29_0_0_171.dll [2018-05-09] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2013-09-17] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2013-09-17] (Intel Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50905.0\npctrl.dll [2017-02-10] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-06-09] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.7\npGoogleUpdate3.dll [2017-11-15] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.3 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=3.0.2 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2018-04-19] (VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2012-01-03] (Adobe Systems Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2017-03-28] (Adobe Systems Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR StartupUrls: Default -> "hxxp://www.google.com/"
CHR Profile: C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default [2018-05-15]
CHR Extension: (Fair AdBlocker) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\lgblnfidahcdcjddiepkckcfdhpknnjh [2017-12-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-07]
CHR Extension: (Chrome Media Router) - C:\Users\admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2018-05-03]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - [Link mogu videti samo ulogovani korisnici]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - [Link mogu videti samo ulogovani korisnici]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - [Link mogu videti samo ulogovani korisnici]
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 aswbIDSAgent; C:\Program Files\AVAST Software\Avast\x64\aswidsagenta.exe [7620096 2018-05-14] (AVAST Software)
R2 Autodesk Content Service; C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe [12288 2012-12-13] (Autodesk, Inc.) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [317280 2018-05-14] (AVAST Software)
R2 avgsvc; C:\Program Files (x86)\AVG\Framework\Common\avgsvca.exe [1428264 2018-04-17] (AVG Technologies CZ, s.r.o.)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [3058392 2017-12-12] (Microsoft Corporation)
R2 CyberLink PowerDVD 12 Media Server Monitor Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSMonitorServicePDVD12.exe [77576 2013-09-18] (CyberLink)
R2 CyberLink PowerDVD 12 Media Server Service; c:\Program Files (x86)\CyberLink\PowerDVD12\Kernel\DMS\CLMSServerPDVD12.exe [298760 2013-09-18] (CyberLink)
R2 hpHotkeyMonitor; C:\Program Files (x86)\Hewlett-Packard\HP Hotkey Support\HPHotkeyMonitor.exe [681760 2013-08-01] (Hewlett-Packard Company)
R3 hpqwmiex; C:\Users\admin\AppData\Roaming\Hewlett-Packard\hpqwmiex.exe [1224192 2017-03-29] (Hewlett-Packard Company) [File not signed]
R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [15720 2013-08-07] (Intel Corporation)
R2 Intel(R) Capability Licensing Service Interface; c:\Program Files\Intel\iCLS Client\HeciServer.exe [747520 2013-08-27] (Intel(R) Corporation) [File not signed]
S3 Intel(R) Capability Licensing Service TCP IP Interface; c:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [828376 2013-08-27] (Intel(R) Corporation)
R2 Intel(R) ME Service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe [131544 2013-09-17] (Intel Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [169432 2013-09-17] (Intel Corporation)
R2 KDService; C:\Program Files\KDService\bin\KDService.exe [440832 2013-10-02] (KYOCERA Document Solutions Inc.) [File not signed]
S3 MyWiFiDHCPDNS; C:\Program Files\Intel\WiFi\bin\PanDhcpDns.exe [268192 2015-10-28] ()
R2 PassThru Service; C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe [167424 2012-12-07] () [File not signed]
R2 pdfcDispatcher; C:\Program Files (x86)\PDF Complete\pdfsvc.exe [1795136 2018-02-01] (PDF Complete Inc)
R2 STacSV; C:\Program Files\IDT\WDM\STacSV64.exe [339456 2013-08-16] (IDT, Inc.) [File not signed]
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [7757552 2018-02-26] (TeamViewer GmbH)
R2 TuneUp.UtilitiesSvc; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesService64.exe [5614592 2018-01-22] (AVG Technologies CZ, s.r.o.)
R2 Update service; C:\Program Files (x86)\Popcorn Time\Updater.exe [339968 2015-10-19] (Popcorn Time) [File not signed]
R2 UxTuneUp; C:\Windows\System32\uxtuneup.dll [48640 2018-01-22] (AVG Technologies CZ, s.r.o.)
R2 UxTuneUp; C:\Windows\SysWOW64\uxtuneup.dll [41472 2018-01-22] (AVG Technologies CZ, s.r.o.)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-10-29] (Microsoft Corporation)
R2 wltrysvc; C:\Program Files\Broadcom\Broadcom 802.11\bcmwltry.exe [5894144 2017-03-31] (Broadcom Corporation) [File not signed]
R2 ZeroConfigService; C:\Program Files\Intel\WiFi\bin\ZeroConfigService.exe [3831712 2015-10-28] (Intel® Corporation)
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 aswArPot; C:\Windows\System32\drivers\aswArPot.sys [196640 2018-05-14] (AVAST Software)
R1 aswbidsdriver; C:\Windows\System32\drivers\aswbidsdrivera.sys [227504 2018-05-14] (AVAST Software)
R0 aswbidsh; C:\Windows\System32\drivers\aswbidsha.sys [199440 2018-05-14] (AVAST Software)
R0 aswblog; C:\Windows\System32\drivers\aswbloga.sys [343752 2018-05-14] (AVAST Software)
R0 aswbuniv; C:\Windows\System32\drivers\aswbuniva.sys [57680 2018-05-14] (AVAST Software)
R1 aswHdsKe; C:\Windows\System32\drivers\aswHdsKe.sys [234560 2018-05-14] (AVAST Software)
S3 aswHwid; C:\Windows\System32\drivers\aswHwid.sys [46968 2018-05-14] (AVAST Software)
R2 aswMonFlt; C:\Windows\System32\drivers\aswMonFlt.sys [159120 2018-05-14] (AVAST Software)
R1 aswRdr; C:\Windows\System32\drivers\aswRdr2.sys [111360 2018-05-14] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\drivers\aswRvrt.sys [85968 2018-05-14] (AVAST Software)
R1 aswSnx; C:\Windows\System32\drivers\aswSnx.sys [1027720 2018-05-14] (AVAST Software)
R1 aswSP; C:\Windows\System32\drivers\aswSP.sys [460520 2018-05-14] (AVAST Software)
R2 aswStm; C:\Windows\System32\drivers\aswStm.sys [205976 2018-05-14] (AVAST Software)
R0 aswVmm; C:\Windows\System32\drivers\aswVmm.sys [381552 2018-05-14] (AVAST Software)
R1 CLVirtualDrive; C:\Windows\System32\DRIVERS\CLVirtualDrive.sys [90608 2011-12-27] (CyberLink)
R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [502256 2016-01-22] (Intel Corporation)
R0 iaStorF; C:\Windows\System32\drivers\iaStorF.sys [28008 2013-08-08] (Intel Corporation)
R3 MEIx64; C:\Windows\system32\drivers\TeeDriverx64.sys [99288 2013-09-17] (Intel Corporation)
S3 RTSPER; C:\Windows\System32\DRIVERS\RtsPer.sys [429272 2013-08-21] (Realsil Semiconductor Corporation)
R3 rtsuvc; C:\Windows\System32\DRIVERS\rtsuvc.sys [8873688 2013-08-02] (Realtek Semiconductor Corp.)
S3 SmbDrv; C:\Windows\system32\drivers\Smb_driver_AMDASF.sys [30448 2013-09-04] (Synaptics Incorporated)
R3 SmbDrvI; C:\Windows\system32\drivers\Smb_driver_Intel.sys [34544 2013-09-04] (Synaptics Incorporated)
R3 TuneUpUtilitiesDrv; C:\Program Files (x86)\AVG\AVG PC TuneUp\TuneUpUtilitiesDriver64.sys [32304 2017-02-21] (AVG Netherlands B.V.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-06-10] (Apple, Inc.) [File not signed]
U1 aswbdisk; no ImagePath
S1 ZAM; \??\C:\Windows\System32\drivers\zam64.sys [X]
S1 ZAM_Guard; \??\C:\Windows\System32\drivers\zamguard64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-05-15 13:40 - 2018-05-15 13:41 - 000022952 _____ C:\Users\admin\Desktop\FRST.txt
2018-05-15 13:39 - 2018-05-15 13:35 - 002404864 _____ (Farbar) C:\Users\admin\Desktop\FRST64 (1).exe
2018-05-15 13:38 - 2018-05-15 13:38 - 000052591 _____ C:\Users\admin\Downloads\Addition.txt
2018-05-15 13:36 - 2018-05-15 13:38 - 000034787 _____ C:\Users\admin\Downloads\FRST.txt
2018-05-15 13:35 - 2018-05-15 13:35 - 002404864 _____ (Farbar) C:\Users\admin\Downloads\FRST64 (1).exe
2018-05-14 20:05 - 2018-05-14 20:05 - 000001317 _____ C:\Users\Public\Desktop\Skype.lnk
2018-05-14 20:05 - 2018-05-14 20:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2018-05-14 20:04 - 2018-05-14 20:04 - 000001077 _____ C:\Users\Public\Desktop\VLC media player.lnk
2018-05-14 19:41 - 2018-05-14 19:41 - 000000000 ____D C:\Users\admin\Desktop\Tor Browser - Copy
2018-05-14 19:40 - 2018-05-14 19:40 - 000000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bluetooth Devices
2018-05-14 19:09 - 2018-05-14 19:09 - 000003870 _____ C:\Windows\System32\Tasks\CCleaner Update
2018-05-14 19:08 - 2018-05-14 19:08 - 000000829 _____ C:\Users\Public\Desktop\CCleaner.lnk
2018-05-14 19:08 - 2018-05-14 19:08 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
2018-05-14 19:08 - 2018-05-14 19:08 - 000000000 ____D C:\Program Files\7-Zip
2018-05-14 18:19 - 2018-05-14 18:19 - 000000000 ____D C:\Users\admin\AppData\Roaming\AVAST Software
2018-05-14 18:18 - 2018-05-14 18:18 - 000001929 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2018-05-14 18:18 - 2018-05-14 18:18 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2018-05-14 18:16 - 2018-05-14 18:16 - 000003910 _____ C:\Windows\System32\Tasks\Avast Emergency Update
2018-05-14 18:15 - 2018-05-14 18:10 - 000460520 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2018-05-14 18:15 - 2018-05-14 18:10 - 000381552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2018-05-14 18:15 - 2018-05-14 18:10 - 000376536 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2018-05-14 18:15 - 2018-05-14 18:10 - 000205976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2018-05-14 18:15 - 2018-05-14 18:10 - 000196640 _____ (AVAST Software) C:\Windows\system32\Drivers\aswArPot.sys
2018-05-14 18:15 - 2018-05-14 18:10 - 000159120 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2018-05-14 18:15 - 2018-05-14 18:10 - 000111360 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2018-05-14 18:15 - 2018-05-14 18:10 - 000085968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2018-05-14 18:15 - 2018-05-14 18:10 - 000046968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2018-05-14 18:15 - 2018-05-14 18:07 - 001027720 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2018-05-14 18:15 - 2018-05-14 18:06 - 000343752 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbloga.sys
2018-05-14 18:15 - 2018-05-14 18:06 - 000234560 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHdsKe.sys
2018-05-14 18:15 - 2018-05-14 18:06 - 000227504 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsdrivera.sys
2018-05-14 18:15 - 2018-05-14 18:06 - 000199440 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbidsha.sys
2018-05-14 18:15 - 2018-05-14 18:06 - 000057680 _____ (AVAST Software) C:\Windows\system32\Drivers\aswbuniva.sys
2018-05-14 18:12 - 2018-05-14 18:12 - 003919446 _____ C:\Users\admin\Desktop\Glamour UK - July 2016X.bmp
2018-05-14 18:11 - 2018-05-14 18:11 - 000000000 ____D C:\Program Files\Common Files\AVAST Software
2018-05-14 18:05 - 2018-05-14 18:05 - 000000000 ____D C:\Program Files\AVAST Software
2018-05-14 18:04 - 2018-05-14 18:05 - 000178320 _____ (AVAST Software) C:\Users\admin\Downloads\avast_free_antivirus_setup_online_cnet_2.exe
2018-05-14 17:42 - 2018-05-14 17:42 - 001129816 _____ (Google Inc.) C:\Users\admin\Downloads\ChromeSetup (1).exe
2018-05-14 17:36 - 2018-05-14 17:36 - 003919446 _____ C:\Users\admin\Desktop\Glamour UK - July 2016K.bmp
2018-05-14 17:33 - 2018-05-14 17:33 - 003919446 _____ C:\Users\admin\Desktop\Glamour UK - July 2016B.bmp
2018-05-14 14:50 - 2018-05-14 14:50 - 003919446 _____ C:\Users\admin\Desktop\Glamour UK - July 2016.bmp
2018-05-12 00:38 - 2018-05-12 00:38 - 000000000 _____ C:\Users\admin\AppData\Local\{A54D3D49-C126-4ABE-B30A-837F407B35D9}
2018-05-06 02:04 - 2018-05-06 02:05 - 033038805 _____ C:\Users\admin\Desktop\RedUK-June2018.pdf
2018-04-25 13:02 - 2018-04-25 13:02 - 001914390 _____ C:\Users\admin\Desktop\OKMagazineAustralia-April232018.bmp
2018-04-25 12:34 - 2018-04-25 12:34 - 014855478 _____ C:\Users\admin\Desktop\VOGUE_JAPAN_NoKJGKJGK.bmp
2018-04-25 12:33 - 2018-04-25 12:33 - 014855478 _____ C:\Users\admin\Desktop\VOGUE_JAPAN_NoIGIKGUKGI.bmp
2018-04-25 12:30 - 2018-04-25 12:30 - 014855478 _____ C:\Users\admin\Desktop\VOGUE_JAPAN_NoMHFJHFJKFH.bmp
2018-04-25 12:30 - 2018-04-25 12:30 - 014855478 _____ C:\Users\admin\Desktop\VOGUE_JAPAN_NoJGJJGDHF.bmp
2018-04-25 12:29 - 2018-04-25 12:29 - 014855478 _____ C:\Users\admin\Desktop\VOGUE_JAPAN_NoKJZHFJHJF.bmp
2018-04-25 12:29 - 2018-04-25 12:29 - 014855478 _____ C:\Users\admin\Desktop\VOGUE_JAPAN_No.bmp
2018-04-17 19:12 - 2018-04-17 19:16 - 092043571 _____ C:\Users\admin\Desktop\UlsterTatler-April2018.pdf
2018-04-17 19:08 - 2018-04-17 19:09 - 025328322 _____ C:\Users\admin\Desktop\MarthaStewartLiving-May2018.pdf
2018-04-16 10:43 - 2018-04-16 11:20 - 067875718 _____ C:\Users\admin\Desktop\Parents_2018-05.pdf
2018-04-15 18:06 - 2018-04-15 18:09 - 036566517 _____ C:\Users\admin\Desktop\TopSanteUK-June2018.pdf
2018-04-15 17:08 - 2018-04-15 17:09 - 022014970 _____ C:\Users\admin\Desktop\Redbook-May2018.pdf
2018-04-15 13:06 - 2018-04-15 13:08 - 050138110 _____ C:\Users\admin\Desktop\ElleAustralia-April2018.pdf
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2018-05-15 13:40 - 2017-03-29 22:45 - 000000000 ____D C:\FRST
2018-05-15 06:05 - 2009-07-14 06:45 - 000026608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2018-05-15 06:05 - 2009-07-14 06:45 - 000026608 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2018-05-14 23:51 - 2016-11-23 14:18 - 000000000 ____D C:\Users\admin\AppData\LocalLow\Mozilla
2018-05-14 23:08 - 2016-02-15 02:02 - 000003954 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{47A1A053-774D-4AB6-9B14-28841CA7B347}
2018-05-14 22:38 - 2017-03-28 22:31 - 000003600 _____ C:\Windows\System32\Tasks\AVG EUpdate Task
2018-05-14 20:05 - 2017-03-15 20:32 - 000000000 ___RD C:\Program Files (x86)\Skype
2018-05-14 20:05 - 2014-05-05 07:47 - 000000000 ____D C:\ProgramData\Skype
2018-05-14 20:03 - 2014-11-28 14:39 - 000000000 ____D C:\Users\admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-05-14 20:03 - 2014-07-12 16:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2018-05-14 20:03 - 2014-07-12 16:10 - 000000000 ____D C:\Program Files\WinRAR
2018-05-14 20:02 - 2016-11-22 19:31 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2018-05-14 19:46 - 2009-07-14 07:13 - 000783606 _____ C:\Windows\system32\PerfStringBackup.INI
2018-05-14 19:46 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2018-05-14 19:44 - 2014-11-28 14:22 - 000000000 ____D C:\Users\admin\AppData\Roaming\Skype
2018-05-14 19:40 - 2013-10-29 05:31 - 000000000 ____D C:\ProgramData\PDFC
2018-05-14 19:38 - 2017-03-30 17:04 - 000000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2018-05-14 19:38 - 2017-03-28 22:31 - 000000000 ____D C:\Program Files (x86)\AVG
2018-05-14 19:38 - 2017-03-28 22:30 - 000000000 ____D C:\Users\admin\AppData\Local\Avg
2018-05-14 19:38 - 2017-03-28 22:30 - 000000000 ____D C:\ProgramData\Avg
2018-05-14 19:38 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2018-05-14 19:14 - 2017-03-30 17:04 - 000217962 _____ C:\Windows\ZAM_Guard.krnl.trace
2018-05-14 19:09 - 2016-02-10 02:55 - 000000000 ____D C:\Program Files\CCleaner
2018-05-14 19:09 - 2014-06-09 12:51 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader XI.lnk
2018-05-14 19:08 - 2014-11-28 13:01 - 000000000 ____D C:\Users\admin\AppData\Roaming\Adobe
2018-05-14 19:07 - 2014-11-28 14:18 - 000000000 ____D C:\Users\admin\AppData\Local\Adobe
2018-05-14 18:29 - 2016-02-10 01:48 - 000000000 ____D C:\Program Files (x86)\TeamViewer
2018-05-14 18:28 - 2016-02-10 01:48 - 000000978 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 11.lnk
2018-05-14 18:28 - 2016-02-10 01:48 - 000000966 _____ C:\Users\Public\Desktop\TeamViewer 11.lnk
2018-05-14 18:16 - 2016-02-10 02:40 - 000000000 ____D C:\Windows\System32\Tasks\AVAST Software
2018-05-14 18:11 - 2016-02-10 02:18 - 000000000 ____D C:\ProgramData\AVAST Software
2018-05-14 18:04 - 2017-03-30 17:04 - 000208606 _____ C:\Windows\ZAM.krnl.trace
2018-05-14 17:44 - 2017-07-15 21:19 - 000002307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2018-05-14 17:44 - 2017-07-15 21:19 - 000002266 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2018-05-09 11:42 - 2018-03-14 05:42 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2018-05-09 11:42 - 2014-11-28 14:39 - 000000000 ____D C:\Windows\system32\Macromed
2018-05-09 11:42 - 2013-10-29 05:31 - 000804864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2018-05-09 11:42 - 2013-10-29 05:31 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2018-05-09 11:42 - 2013-10-29 05:31 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2018-05-09 11:42 - 2013-10-29 05:31 - 000000000 ____D C:\Windows\SysWOW64\Macromed
==================== Files in the root of some directories =======
2018-05-12 00:38 - 2018-05-12 00:38 - 000000000 _____ () C:\Users\admin\AppData\Local\{A54D3D49-C126-4ABE-B30A-837F407B35D9}
Some files in TEMP:
====================
2018-02-19 11:13 - 2018-02-19 11:13 - 000164424 _____ (Microsoft Corporation) C:\Users\admin\AppData\Local\Temp\atl110.dll
2018-02-19 11:13 - 2018-02-19 11:13 - 000069632 _____ () C:\Users\admin\AppData\Local\Temp\HwInfo.dll
2018-02-19 11:13 - 2018-02-19 11:13 - 001193472 _____ () C:\Users\admin\AppData\Local\Temp\NSISPromotionEx.dll
2018-02-19 11:13 - 2018-02-19 11:13 - 000099328 _____ () C:\Users\admin\AppData\Local\Temp\NSISTrigger.dll
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2018-05-12 01:10
==================== End of FRST.txt ============================
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]
|
