lap top virusi

1

lap top virusi

offline
  • Pridružio: 30 Avg 2014
  • Poruke: 314
  • Gde živiš: Montenegro

lap top se koristi za rad na poslu i bitno je da mi program neki za ciscenje njega ne obrise potrebne podatke,a na google stranice sve same iskacu i bas je spor lap top pa je potrebna pomoc


Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 09-05-2015
Ran by dell (administrator) on DELL-PC on 13-05-2015 11:25:33
Running from C:\Users\dell\Desktop
Loaded Profiles: dell (Available profiles: dell)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(SysTool PasSame LIMITED) C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\AthBtTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
() C:\Program Files\T-Mobile Internet Manager\UIExec.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.26.9\GoogleCrashHandler.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Atheros) C:\Program Files\Dell Wireless\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\AdminService.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
() C:\Program Files\T-Mobile Internet Manager\AssistantServices.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Search Protect) C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-08-06] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe [490656 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] => C:\Program Files\Dell Wireless\Bluetooth Suite\AthBtTray.exe [302240 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2219184 2011-01-12] (ESET)
HKLM\...\Run: [UIExec] => C:\Program Files\T-Mobile Internet Manager\UIExec.exe [136328 2010-03-02] ()
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2014-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2014-12-03] (Adobe Systems Inc.)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2015-02-24] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [18678376 2013-05-09] (Skype Technologies S.A.)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [KiesPDLR.exe] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2015-02-24] (Samsung)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: E - E:\autorun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {0107643d-664e-11e2-98e9-c01885793332} - E:\Install.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {367e919e-49ef-11e2-9516-c01885793331} - E:\AutoRun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {367e91b3-49ef-11e2-9516-c01885793331} - E:\AutoRun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {de5d1453-6de0-11e2-adfe-c01885793332} - E:\autorun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
AppInit_DLLs: C:\PROGRA~1\SearchProtect\SearchProtect\bin\VC32Loader.dll => C:\Program Files\SearchProtect\SearchProtect\bin\VC32Loader.dll [188224 2014-11-10] (Search Protect)
Startup: C:\Users\dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2013-01-30]
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://isearch.omiga-plus.com/web/?type=ds&ts=.....T7T&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://isearch.omiga-plus.com/web/?type=ds&ts=.....T7T&q={searchTerms}
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&i=48&did=11034&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&barid=1605756575266169056
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> DefaultScope {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3321.....838&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {014DB5FA-EAFB-4592-A95B-F44D3EE87FA9} URL = http://search.conduit.com/Results.aspx?ctid=CT3321.....838&q={searchTerms}&SSPV=
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://search.babylon.com/?q={searchTerms}&affID=121183&babsrc=SP_ss_din2g&mntrId=7AB2E21885793331
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {57150180-4691-4AC9-A82B-CCE91AACD844} URL = http://search.toggle.com/?lang=en&cid=adfaa7a7&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com?src=6&q={searchTerms}&barid=1605756575266169056&crg=&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&st=23&i=48&did=11034
BHO: BitSavoer -> {04025add-bc42-4e30-9674-cfb0e1a00875} -> C:\Program Files\BitSavoer\3jGCZGpAvdZqAk.dll [2015-05-12] ()
BHO: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO: NetoCioupono -> {51c10404-6489-4705-b775-ea3051f2483c} -> C:\Program Files\NetoCioupono\0RU8dA0ePtQslE.dll [2015-05-12] ()
BHO: GreaatSavee4UU -> {6db47201-0d30-4fd3-829c-a87be4b02102} -> C:\Program Files\GreaatSavee4UU\IGD2qNrRvR2XzL.dll [2015-05-13] ()
BHO: Fuun2Suave -> {6ed9d63f-43d3-4a4e-9cd9-a07f17b92c39} -> C:\Program Files\Fuun2Suave\qHp38pXY9eD1r8.dll [2015-05-04] ()
BHO: GreatSAAve44U -> {ae7e3a92-9a4e-4806-9ddd-23dcddd421c3} -> C:\Program Files\GreatSAAve44U\BNuyMalNPo6hAi.dll [2015-05-13] ()
BHO: HHappy2iSave -> {b328cfa4-cb3f-4439-b711-3d4bc9e7f0fd} -> C:\Program Files\HHappy2iSave\8Ad82He8KvUkyo.dll [2015-05-13] ()
BHO: COupExTenssion -> {c1da64d6-39bf-40ff-82e1-489450d99aa4} -> C:\Program Files\COupExTenssion\AJ0VnIKLfWCWLU.dll [2015-05-13] ()
Toolbar: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-12-03] (Adobe Systems Incorporated)
Toolbar: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> SweetPacks Toolbar for Internet Explorer - {EEE6C35B-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgToolbarIE.dll [2013-05-30] (SweetIM Technologies Ltd.)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553530000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-11-22] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://isearch.omiga-plus.com/?type=sc&ts=1422.....XXS2WE1T7T

FireFox:
========
FF ProfilePath: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default
FF NewTab: hxxp://search.conduit.com/?ctid=CT3321459&octid=EB_ORIGINAL_CTID&SearchSource=69&CUI=&SSPV=&Lay=1&UM=2&UP=SPF08E9858-8AB8-4055-9354-8AD785914838
FF DefaultSearchUrl:
FF Keyword.URL: hxxp://mysearch.sweetpacks.com/?src=2&st=12&i=48&did=11034&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&barid=1605756575266169056&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2013-04-02] (Google, Inc.)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-02-04] (Google Inc.)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF user.js: detected! => C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\user.js [2015-02-05]
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-05-10] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\BrowserProtect.xml [2013-06-07]
FF SearchPlugin: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\sweetim.xml [2014-06-13]
FF SearchPlugin: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\Sweetpacks Search.xml [2014-05-29]
FF SearchPlugin: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\toggle.xml [2013-02-13]
FF SearchPlugin: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\trovi-search.xml [2014-11-17]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-02-05]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2015-02-05]
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile Internet Manager\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files\T-Mobile Internet Manager\addon [2013-01-24]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-02-13]
FF HKLM\...\Firefox\Extensions: [speedanalysis@SpeedAnalysis.com] - C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF Extension: SpeedAnalysis.com - C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com [2013-03-31]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-08-02]
FF HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Firefox\Extensions: [speedanalysis@SpeedAnalysis.com] - C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\PDVDZDW52397720@XDDWJXW57740856.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\551f2920-3c19-11e1-b86c-0800200c9a66@jetpack [Not Found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2015-02-05] <==== ATTENTION

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR StartupUrls: Default -> "hxxp://www.google.rs/"
CHR DefaultSuggestURL: Default -> http://ssmsp.ask.com/query?sstype=prefix&li=ff&q={searchTerms}
CHR Profile: C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Ask Search) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aaaabcdhikdcpainmmjceakmkacogdko [2015-05-05]
CHR Extension: (Google Slides) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-04-27]
CHR Extension: (Google Docs) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-04-27]
CHR Extension: (Google Drive) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-04-27]
CHR Extension: (YouTube) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-27]
CHR Extension: (SpeedAnalysis.com) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfcbmgbfdbijmjgjihagbomfbjfjmgon [2015-04-27]
CHR Extension: (Google Search) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-27]
CHR Extension: (Google Sheets) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-04-27]
CHR Extension: (Bookmark Manager) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-27]
CHR Extension: (CNN News) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlbmobpknbcilinljgcbogfcofhcbkem [2015-05-13]
CHR Extension: (Snow) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\kdcgdhlccojbnonmhcioigcdodakjcmh [2015-05-12]
CHR Extension: (HDvid Codec) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbnefaikfaeadgidhpoanckoiaheli [2015-04-27]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-05]
CHR Extension: (Youtube Preview Is it worth watching) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\nacgopecogaedhhjdfondlcobjofdhap [2015-04-28]
CHR Extension: (iLivid) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\nafaimnnclfjfedmmabolbppcngeolgf [2015-05-05]
CHR Extension: (Google Wallet) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-04-27]
CHR Extension: (Free Games Zone) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\oppjbdkgpfhhllancffaoaemplhkngoc [2015-05-05]
CHR Extension: (HoofSounds) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pakhjhphleppgakhlffhlfhbekfnobbk [2015-05-13]
CHR Extension: (Gmail) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-27]
CHR HKLM\...\Chrome\Extension: [cfcbmgbfdbijmjgjihagbomfbjfjmgon] - C:\Users\dell\AppData\Roaming\SpeedanAlysis\speedanalysis.crx [2013-02-14]
CHR HKLM\...\Chrome\Extension: [kpkbnefaikfaeadgidhpoanckoiaheli] - C:\Program Files\HDvidCodec.com\HDvidCodec10.crx [2013-04-17]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-11-22]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 7eed278e; c:\Program Files\SystemContinue\SystemContinue.dll [1963008 2015-02-27] () [File not signed]
R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [294400 2011-08-06] (Advanced Micro Devices, Inc.) [File not signed]
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files\Dell Wireless\Ath_CoexAgent.exe [135168 2011-02-16] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files\Dell Wireless\Bluetooth Suite\adminservice.exe [72864 2011-03-31] (Atheros Commnucations) [File not signed]
R2 b92b1769; c:\Program Files\SystemMolder\SystemMolder.dll [1584640 2015-04-21] () [File not signed]
S3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
S2 BrowserProtect; C:\ProgramData\BrowserProtect\2.6.1519.190\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe [0 2013-08-07] () <==== ATTENTION (zero size file/folder)
R2 CltMngSvc; C:\Program Files\SearchProtect\Main\bin\CltMngSvc.exe [3056960 2014-11-10] (Search Protect)
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [33584 2011-01-12] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [810144 2011-01-12] (ESET)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2012-08-02] (Macrovision Europe Ltd.) [File not signed]
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 UI Assistant Service; C:\Program Files\T-Mobile Internet Manager\AssistantServices.exe [245384 2010-03-02] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)
R2 WindowsMangerProtect; C:\ProgramData\WindowsMangerProtect\ProtectWindowsManager.exe [464384 2015-01-30] (SysTool PasSame LIMITED) [File not signed] <==== ATTENTION
S2 IBUpdaterService; %SystemRoot%\system32\dmwu.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [34976 2011-03-31] (Atheros)
S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1570304 2011-04-20] (Atheros Communications, Inc.)
U0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [22528 2010-02-10] (Bytemobile, Inc.) [File not signed]
S3 BTATH_A2DP; C:\Windows\System32\drivers\btath_a2dp.sys [259232 2011-03-31] (Atheros)
R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [24736 2011-03-31] (Atheros)
S3 BTATH_HCRP; C:\Windows\System32\DRIVERS\btath_hcrp.sys [175776 2011-03-31] (Atheros)
S3 BTATH_RCP; C:\Windows\System32\DRIVERS\btath_rcp.sys [141088 2011-03-31] (Atheros)
S3 BtFilter; C:\Windows\System32\DRIVERS\btfilter.sys [243360 2011-03-31] (Atheros)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [137144 2010-12-21] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [115008 2010-12-21] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [95384 2010-12-21] (ESET)
R3 mcdbus; C:\Windows\System32\DRIVERS\mcdbus.sys [116736 2009-02-24] (MagicISO, Inc.) [File not signed]
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [114408 2013-12-16] (Power Software Ltd)
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]
R3 SPPD; \??\C:\Windows\system32\drivers\SPPD.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 11:25 - 2015-05-13 11:26 - 00024428 _____ () C:\Users\dell\Desktop\FRST.txt
2015-05-13 11:25 - 2015-05-13 11:25 - 00000000 ____D () C:\FRST
2015-05-13 11:24 - 2015-05-13 11:24 - 01141248 _____ (Farbar) C:\Users\dell\Desktop\FRST.exe
2015-05-13 11:04 - 2015-05-13 11:15 - 00000000 ____D () C:\Users\dell\AppData\Roaming\BitTorrent
2015-05-13 10:39 - 2015-05-13 10:40 - 01999976 _____ (BitTorrent Inc.) C:\Users\dell\Downloads\BitTorrent.exe
2015-05-13 08:23 - 2015-05-13 08:23 - 00000000 ____D () C:\Program Files\COupExTenssion
2015-05-13 08:22 - 2015-05-13 08:22 - 00000000 ____D () C:\Program Files\HoofSounds
2015-05-13 08:22 - 2015-05-13 08:22 - 00000000 ____D () C:\Program Files\HHappy2iSave
2015-05-13 08:22 - 2015-05-13 08:22 - 00000000 ____D () C:\Program Files\500CCouupons
2015-05-13 07:43 - 2015-05-13 07:44 - 00000000 ____D () C:\Program Files\GreatSAAve44U
2015-05-13 07:43 - 2015-05-13 07:43 - 00000000 ____D () C:\Program Files\CNN News
2015-05-13 07:42 - 2015-05-13 07:42 - 00000000 ____D () C:\Program Files\SaVeLLoTS
2015-05-13 07:42 - 2015-05-13 07:42 - 00000000 ____D () C:\Program Files\GreaatSavee4UU
2015-05-12 13:19 - 2015-05-12 13:19 - 00034041 _____ () C:\Users\dell\Downloads\208379-the.captive.2014.1080p.bluray.x264.yify.zip
2015-05-12 13:18 - 2015-05-12 13:18 - 00014213 _____ () C:\Users\dell\Downloads\205531-sword.of.vengeance.2015.webdl.zip
2015-05-12 09:19 - 2015-05-12 09:19 - 00000000 ____D () C:\Program Files\Snow
2015-05-12 09:19 - 2015-05-12 09:19 - 00000000 ____D () C:\Program Files\NetoCioupono
2015-05-12 09:18 - 2015-05-12 09:18 - 00000000 ____D () C:\Program Files\FindBeesetDeael
2015-05-12 09:18 - 2015-05-12 09:18 - 00000000 ____D () C:\Program Files\BitSavoer
2015-05-11 11:01 - 2015-05-11 11:01 - 00017597 _____ () C:\Users\dell\Downloads\The Captive (2014) [1080p] YIFY - YTS.torrent
2015-05-11 11:01 - 2015-05-11 11:01 - 00017597 _____ () C:\Users\dell\Downloads\The Captive (2014) [1080p] YIFY - YTS (1).torrent
2015-05-11 11:00 - 2015-05-11 11:01 - 00007780 _____ () C:\Users\dell\Downloads\Sword Of Vengeance (2015) [720p] YIFY - YTS.torrent
2015-05-11 10:56 - 2015-05-12 12:43 - 01162173 _____ () C:\Users\dell\Desktop\PP I MB30 pumpani 4 FRAKCIJE TRANSPETROL.xlsx
2015-05-11 10:29 - 2015-05-11 10:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-05-11 10:21 - 2015-05-11 10:21 - 00562272 _____ (Oracle Corporation) C:\Users\dell\Downloads\chromeinstall-8u45.exe
2015-05-07 07:19 - 2015-05-07 07:19 - 00002167 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-07 07:19 - 2015-05-07 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-06 14:06 - 2015-05-06 14:06 - 00038332 _____ () C:\Users\dell\Downloads\208154-jupiter.ascending.2015.720p.bluray.x264.yify.zip
2015-05-05 13:46 - 2015-05-05 13:46 - 00040299 _____ () C:\Users\dell\Downloads\205331-unbroken.2014.brrip.zip
2015-05-05 11:49 - 2015-05-05 11:49 - 05893354 _____ () C:\Users\dell\Desktop\mehanizacija 04 05 2015.rar
2015-05-04 11:56 - 2015-05-12 12:34 - 00000000 ____D () C:\Users\dell\Desktop\Mjesavine
2015-05-04 11:56 - 2015-05-04 11:56 - 00025829 _____ () C:\Users\dell\Downloads\Mjesavine.rar
2015-05-04 11:56 - 2015-05-04 11:56 - 00025829 _____ () C:\Users\dell\Desktop\Mjesavine.rar
2015-05-04 08:28 - 2015-05-07 11:54 - 00000000 ____D () C:\Users\dell\Desktop\mehanizacija 04 05 2015
2015-05-04 08:09 - 2015-05-04 08:09 - 00000000 ____D () C:\Program Files\Fuun2Suave
2015-04-29 07:47 - 2015-05-04 08:09 - 00000000 ____D () C:\Program Files\DigiSauver
2015-04-28 14:20 - 2015-04-28 14:20 - 19401477 _____ () C:\Users\dell\Downloads\DIY Flower Crown!.mp4
2015-04-28 14:15 - 2015-04-28 14:15 - 04825004 _____ () C:\Users\dell\Downloads\Learn to Make Paper Flowers! (1).mp4
2015-04-28 14:13 - 2015-04-28 14:15 - 36716756 _____ () C:\Users\dell\Downloads\videoplayback.mp4
2015-04-28 14:09 - 2015-04-28 14:09 - 04825004 _____ () C:\Users\dell\Downloads\Learn to Make Paper Flowers!.mp4
2015-04-28 14:07 - 2015-04-28 14:09 - 33160301 _____ () C:\Users\dell\Downloads\Fabrication d'une rose en collant - Nylon Rose.mp4
2015-04-28 14:06 - 2015-04-28 14:06 - 08292301 _____ () C:\Users\dell\Downloads\Instruction for nylon flower - lotus.mp4
2015-04-28 14:02 - 2015-04-28 14:03 - 24271788 _____ () C:\Users\dell\Downloads\DIY Instruction- How to Make Wedding Flower - Calla Lily - Nylon Stocking flower.mp4
2015-04-28 13:57 - 2015-04-28 13:59 - 33925344 _____ () C:\Users\dell\Downloads\Tissue Paper Butterfly.mp4
2015-04-28 13:54 - 2015-04-28 13:55 - 09860415 _____ () C:\Users\dell\Downloads\How to make a Tissue Paper Flower very easily.....mp4
2015-04-28 08:12 - 2015-04-28 08:12 - 00000000 ____D () C:\Program Files\Youtube Preview Is it worth watching
2015-04-28 08:11 - 2015-04-29 07:48 - 00000000 ____D () C:\Program Files\5o00CoupoNso
2015-04-28 08:11 - 2015-04-29 07:47 - 00000000 ____D () C:\Program Files\DIoscOuntExtenisi
2015-04-28 08:11 - 2015-04-28 08:11 - 00000000 ____D () C:\Program Files\FUn2Save
2015-04-27 08:02 - 2015-05-06 13:32 - 00000020 _____ () C:\Users\dell\AppData\Roaming\appdataFr3.bin
2015-04-27 08:02 - 2015-04-27 08:02 - 00000000 ____D () C:\ProgramData\Block The Ads
2015-04-24 12:20 - 2015-04-24 12:22 - 25940056 _____ () C:\Users\dell\Downloads\L. N.Tolstoj o religiji.mp4
2015-04-22 10:17 - 2014-11-25 18:32 - 00000000 ____D () C:\Users\dell\Downloads\T-MST10PDEUC
2015-04-21 08:18 - 2015-04-21 08:18 - 00000000 ____D () C:\ProgramData\{34a5fb3d-6bb9-3551-34a5-5fb3d6bbecf5}
2015-04-21 07:35 - 2015-04-21 07:35 - 00000000 ____D () C:\Program Files\SystemMolder
2015-04-21 07:34 - 2015-04-27 07:50 - 00000000 ____D () C:\Program Files\ClearNiceeBRowse
2015-04-21 07:34 - 2015-04-21 07:34 - 00000000 ____D () C:\Program Files\metalmouth voice browser
2015-04-21 07:33 - 2015-04-29 07:48 - 00000000 ____D () C:\Program Files\RighitOOffeRuAppP
2015-04-21 07:33 - 2015-04-21 07:33 - 00000000 ____D () C:\Program Files\DiscountExt
2015-04-15 07:57 - 2015-04-02 01:49 - 00342704 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-04-15 07:57 - 2015-03-23 05:06 - 00860160 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-04-15 07:57 - 2015-03-23 05:06 - 00630784 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-04-15 07:57 - 2015-03-23 05:06 - 00576000 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-04-15 07:57 - 2015-03-23 05:06 - 00331264 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-04-15 07:57 - 2015-03-23 05:06 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-04-15 07:57 - 2015-03-23 05:06 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll
2015-04-15 07:57 - 2015-03-23 05:06 - 00026112 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-04-15 07:57 - 2015-03-23 04:59 - 00896000 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-04-15 07:57 - 2015-03-17 07:01 - 03976632 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-04-15 07:57 - 2015-03-17 07:01 - 03920824 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-04-15 07:57 - 2015-03-17 07:01 - 00137656 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-04-15 07:57 - 2015-03-17 07:01 - 00067512 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-04-15 07:57 - 2015-03-17 06:59 - 01306112 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-04-15 07:57 - 2015-03-17 06:57 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-04-15 07:57 - 2015-03-17 06:56 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-04-15 07:57 - 2015-03-17 06:56 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-04-15 07:57 - 2015-03-17 06:56 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-04-15 07:57 - 2015-03-17 06:56 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-04-15 07:57 - 2015-03-17 06:56 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-04-15 07:57 - 2015-03-17 06:56 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-04-15 07:57 - 2015-03-17 06:53 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-04-15 07:57 - 2015-03-17 06:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-04-15 07:57 - 2015-03-17 06:50 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-04-15 07:57 - 2015-03-17 06:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-04-15 07:57 - 2015-03-13 05:42 - 19695616 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-04-15 07:57 - 2015-03-13 05:42 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-04-15 07:57 - 2015-03-13 05:42 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-04-15 07:57 - 2015-03-13 05:28 - 00503296 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-04-15 07:57 - 2015-03-13 05:28 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-04-15 07:57 - 2015-03-13 05:27 - 00340992 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-04-15 07:57 - 2015-03-13 05:27 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-04-15 07:57 - 2015-03-13 05:26 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-04-15 07:57 - 2015-03-13 05:22 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-04-15 07:57 - 2015-03-13 05:20 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-04-15 07:57 - 2015-03-13 05:20 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-04-15 07:57 - 2015-03-13 05:17 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-04-15 07:57 - 2015-03-13 05:16 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-04-15 07:57 - 2015-03-13 05:16 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-04-15 07:57 - 2015-03-13 05:15 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-04-15 07:57 - 2015-03-13 05:09 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-04-15 07:57 - 2015-03-13 05:06 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-04-15 07:57 - 2015-03-13 05:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-04-15 07:57 - 2015-03-13 04:57 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-04-15 07:57 - 2015-03-13 04:56 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-04-15 07:57 - 2015-03-13 04:54 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-04-15 07:57 - 2015-03-13 04:49 - 04305408 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-04-15 07:57 - 2015-03-13 04:44 - 00689152 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-04-15 07:57 - 2015-03-13 04:43 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-04-15 07:57 - 2015-03-13 04:43 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-04-15 07:57 - 2015-03-13 04:42 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-04-15 07:57 - 2015-03-13 04:34 - 12825600 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-04-15 07:57 - 2015-03-13 04:20 - 01888256 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-04-15 07:57 - 2015-03-13 04:16 - 01311232 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-04-15 07:57 - 2015-03-13 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-04-15 07:53 - 2015-03-04 06:16 - 00249784 _____ (Microsoft Corporation) C:\Windows\system32\clfs.sys
2015-04-15 07:53 - 2015-03-04 06:10 - 00058880 _____ (Microsoft Corporation) C:\Windows\system32\clfsw32.dll
2015-04-15 07:46 - 2015-03-05 06:06 - 00305152 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 03088384 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 02020864 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 00566784 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 00173056 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 00131584 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-04-15 07:41 - 2015-03-25 05:00 - 00092672 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 00035328 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 00033792 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-04-15 07:41 - 2015-03-25 05:00 - 00029696 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-04-15 07:41 - 2015-03-25 05:00 - 00011776 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-04-15 07:41 - 2015-03-10 05:08 - 01237504 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll
2015-04-15 07:41 - 2015-03-10 05:05 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll
2015-04-15 07:41 - 2015-02-25 05:03 - 00514560 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\http.sys

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-13 11:21 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2015-05-13 11:16 - 2013-07-18 23:25 - 00000000 ____D () C:\Windows\pss
2015-05-13 11:09 - 2012-08-02 15:02 - 00000000 ____D () C:\Users\dell\AppData\Roaming\Skype
2015-05-13 10:57 - 2013-02-06 12:23 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-13 10:44 - 2012-08-02 15:01 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-13 08:23 - 2015-03-06 08:55 - 00000000 ____D () C:\ProgramData\17789729017210468518
2015-05-13 07:31 - 2012-08-02 21:24 - 01918424 _____ () C:\Windows\WindowsUpdate.log
2015-05-13 07:28 - 2010-11-20 23:01 - 00782398 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-13 07:27 - 2009-07-14 06:34 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-13 07:27 - 2009-07-14 06:34 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-13 07:21 - 2013-07-19 14:56 - 00046283 _____ () C:\Windows\setupact.log
2015-05-13 07:21 - 2013-02-06 12:23 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-13 07:21 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-11 14:19 - 2014-02-13 16:32 - 00000000 ____D () C:\Users\dell\AppData\Roaming\BitComet
2015-05-11 11:04 - 2013-02-24 13:23 - 00000000 ____D () C:\Users\dell\AppData\Local\CrashDumps
2015-05-11 10:28 - 2014-05-05 13:40 - 00096352 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-05-11 10:27 - 2014-02-06 15:14 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-11 10:27 - 2013-03-31 14:58 - 00000000 ____D () C:\Program Files\Java
2015-05-08 07:29 - 2013-08-09 06:19 - 00077034 _____ () C:\Windows\PFRO.log
2015-05-07 07:18 - 2012-08-02 14:39 - 00000000 ____D () C:\Program Files\Google
2015-05-04 11:59 - 2014-07-31 10:44 - 00000000 ____D () C:\Users\dell\Desktop\boris probe radni
2015-05-04 08:44 - 2015-01-20 08:56 - 00000000 ____D () C:\Users\dell\Desktop\RADNI ZAPISI U LAB
2015-04-30 10:17 - 2014-08-04 09:40 - 00000000 ____D () C:\Users\dell\Desktop\boris probe radni -Mehanizacija
2015-04-29 07:54 - 2015-02-12 14:12 - 00000000 ____D () C:\ProgramData\{fc979542-a4fa-d926-fc97-79542a4f550a}
2015-04-27 07:26 - 2012-08-02 14:40 - 00000000 ____D () C:\Users\dell\AppData\Local\Google
2015-04-21 07:33 - 2015-04-03 07:59 - 00000000 ____D () C:\Program Files\GreaatSavea4U
2015-04-21 07:33 - 2015-03-06 08:55 - 00000000 ____D () C:\Program Files\FindBESTDueal
2015-04-17 09:15 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\AppCompat
2015-04-16 09:39 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-04-16 08:46 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-04-16 07:29 - 2014-12-11 07:56 - 00000000 ____D () C:\Windows\system32\appraiser
2015-04-16 07:29 - 2014-05-07 06:48 - 00000000 ___SD () C:\Windows\system32\CompatTel
2015-04-15 14:39 - 2013-10-28 15:30 - 00000000 ____D () C:\Windows\system32\MRT
2015-04-15 14:39 - 2013-10-28 15:29 - 125832184 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-04-15 09:45 - 2012-08-02 15:01 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-04-15 09:45 - 2012-08-02 15:01 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl

==================== Files in the root of some directories =======

2015-04-27 08:02 - 2015-05-06 13:32 - 0000020 _____ () C:\Users\dell\AppData\Roaming\appdataFr3.bin
2013-03-31 14:50 - 2013-03-31 14:49 - 0030894 _____ () C:\Users\dell\AppData\Roaming\speedanalysis.ico

Some content of TEMP:
====================
C:\Users\dell\AppData\Local\Temp\5197415732012515363.exe
C:\Users\dell\AppData\Local\Temp\92D0.exe
C:\Users\dell\AppData\Local\Temp\ebcabfcdceg.exe
C:\Users\dell\AppData\Local\Temp\F1543c79fa.exe
C:\Users\dell\AppData\Local\Temp\gtalkwmp1.dll
C:\Users\dell\AppData\Local\Temp\ICReinstall_setup.exe
C:\Users\dell\AppData\Local\Temp\install_flashplayer11x32_mssd_aaa_aih.exe
C:\Users\dell\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\dell\AppData\Local\Temp\mgsqlite3.dll
C:\Users\dell\AppData\Local\Temp\nsa32D9.tmp.exe
C:\Users\dell\AppData\Local\Temp\nsl3BDF.exe
C:\Users\dell\AppData\Local\Temp\nsl9AA4.exe
C:\Users\dell\AppData\Local\Temp\nsq417B.exe
C:\Users\dell\AppData\Local\Temp\nsv46C9.exe
C:\Users\dell\AppData\Local\Temp\nsvA0FB.exe
C:\Users\dell\AppData\Local\Temp\nsvA762.exe
C:\Users\dell\AppData\Local\Temp\playerfile.exe
C:\Users\dell\AppData\Local\Temp\safeguard.exe
C:\Users\dell\AppData\Local\Temp\SoftonicAssistant_v0-1-6.exe
C:\Users\dell\AppData\Local\Temp\Softonic_EN_1-5-11_EN-Production_10_CleanRelease.exe
C:\Users\dell\AppData\Local\Temp\sp-downloader.exe
C:\Users\dell\AppData\Local\Temp\SPIdentifier.exe
C:\Users\dell\AppData\Local\Temp\tu17p84.exe
C:\Users\dell\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-04 10:20

==================== End Of Log ============================
https://www.mycity.rs/must-login.png

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6103

Zdravo Jovane, molim procitaj pravilnik Ambulanta foruma:
http://www.mycity.rs/Ambulanta/Pravila-ovog-dela-foruma.html

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8617
  • Gde živiš: Novi Beograd

Zdravo, po drugi put. Smile

Arrow 1. Potrebno je i ovde reinstalirati Chrome.

Arrow 2.

Preuzmi "Xplode"-ov AdwCleaner () i sacuvaj ga na Desktop

Dvoklikom pokreni program.
Klikni na dugme [Scan] i pricekaj da program zavrsi.
Klikni na dugme [Clean]
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok


Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"

Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S0].txt

Arrow 3. Postavi mi novi FRST log i Addition log.

offline
  • Pridružio: 30 Avg 2014
  • Poruke: 314
  • Gde živiš: Montenegro

Napisano: 16 Maj 2015 11:27

Brzo cu i ovo ispratit samo da lap top donesem od majstora zbog dugmeta je na opravku Smile

Dopuna: 18 Maj 2015 8:52

https://www.mycity.rs/must-login.png

Dopuna: 18 Maj 2015 8:57

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-05-2015 02
Ran by dell (administrator) on DELL-PC on 18-05-2015 08:53:02
Running from C:\Users\dell\Desktop
Loaded Profiles: dell (Available profiles: dell)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Atheros) C:\Program Files\Dell Wireless\Ath_CoexAgent.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\AdminService.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
() C:\Program Files\T-Mobile Internet Manager\AssistantServices.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\AthBtTray.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(ESET) C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
() C:\Program Files\T-Mobile Internet Manager\UIExec.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(BitTorrent Inc.) C:\Users\dell\AppData\Roaming\BitTorrent\BitTorrent.exe
(www.BitComet.com) C:\Program Files\BitComet\BitComet.exe
(www.BitComet.com) C:\Program Files\BitComet\tools\BitCometService.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-08-06] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe [490656 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] => C:\Program Files\Dell Wireless\Bluetooth Suite\AthBtTray.exe [302240 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2219184 2011-01-12] (ESET)
HKLM\...\Run: [UIExec] => C:\Program Files\T-Mobile Internet Manager\UIExec.exe [136328 2010-03-02] ()
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2014-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2014-12-03] (Adobe Systems Inc.)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2015-02-24] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [18678376 2013-05-09] (Skype Technologies S.A.)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [KiesPDLR.exe] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2015-02-24] (Samsung)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [BitTorrent] => C:\Users\dell\AppData\Roaming\BitTorrent\BitTorrent.exe [1999976 2015-05-13] (BitTorrent Inc.)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [BitComet] => C:\Program Files\BitComet\BitComet.exe [14276784 2013-12-31] (www.BitComet.com)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: E - E:\autorun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {0107643d-664e-11e2-98e9-c01885793332} - E:\Install.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {367e919e-49ef-11e2-9516-c01885793331} - E:\AutoRun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {367e91b3-49ef-11e2-9516-c01885793331} - E:\AutoRun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {de5d1453-6de0-11e2-adfe-c01885793332} - E:\autorun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
Startup: C:\Users\dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2013-01-30]
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
SearchScopes: HKLM -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&i=48&did=11034&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&barid=1605756575266169056
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {57150180-4691-4AC9-A82B-CCE91AACD844} URL = http://search.toggle.com/?lang=en&cid=adfaa7a7&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com?src=6&q={searchTerms}&barid=1605756575266169056&crg=&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&st=23&i=48&did=11034
BHO: BitComet Helper -> {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} -> C:\Program Files\BitComet\tools\BitCometBHO_1.5.4.11.dll [2013-11-29] (BitComet)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-05-14] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-05-14] (Oracle Corporation)
Toolbar: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-12-03] (Adobe Systems Incorporated)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553530000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-11-22] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default
FF DefaultSearchUrl:
FF Keyword.URL: hxxp://mysearch.sweetpacks.com/?src=2&st=12&i=48&did=11034&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&barid=1605756575266169056&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2013-04-02] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-14] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-14] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-14] (Google Inc.)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-05-10] (Adobe Systems Inc.)
FF SearchPlugin: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\toggle.xml [2013-02-13]
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-02-05]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2015-02-05]
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile Internet Manager\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files\T-Mobile Internet Manager\addon [2013-01-24]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-02-13]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: ESET Smart Security Extension - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012-08-02]
FF Extension: SpeedAnalysis.com - C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com [2013-03-31]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\PDVDZDW52397720@XDDWJXW57740856.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\551f2920-3c19-11e1-b86c-0800200c9a66@jetpack [Not Found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2015-02-05] <==== ATTENTION

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR StartupUrls: Default -> "hxxp://www.google.rs/"
CHR Profile: C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (YouTube) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-04-27]
CHR Extension: (Google Search) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-04-27]
CHR Extension: (Gmail) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-04-27]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-11-22]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [294400 2011-08-06] (Advanced Micro Devices, Inc.) [File not signed]
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files\Dell Wireless\Ath_CoexAgent.exe [135168 2011-02-16] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files\Dell Wireless\Bluetooth Suite\adminservice.exe [72864 2011-03-31] (Atheros Commnucations) [File not signed]
R3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [851456 2015-04-27] (Microsoft Corporation)
S3 EhttpSrv; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [33584 2011-01-12] (ESET)
R2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [810144 2011-01-12] (ESET)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2012-08-02] (Macrovision Europe Ltd.) [File not signed]
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 UI Assistant Service; C:\Program Files\T-Mobile Internet Manager\AssistantServices.exe [245384 2010-03-02] () [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [34976 2011-03-31] (Atheros)
S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1570304 2011-04-20] (Atheros Communications, Inc.)
U0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [22528 2010-02-10] (Bytemobile, Inc.) [File not signed]
S3 BTATH_A2DP; C:\Windows\System32\drivers\btath_a2dp.sys [259232 2011-03-31] (Atheros)
R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [24736 2011-03-31] (Atheros)
S3 BTATH_HCRP; C:\Windows\System32\DRIVERS\btath_hcrp.sys [175776 2011-03-31] (Atheros)
S3 BTATH_RCP; C:\Windows\System32\DRIVERS\btath_rcp.sys [141088 2011-03-31] (Atheros)
S3 BtFilter; C:\Windows\System32\DRIVERS\btfilter.sys [243360 2011-03-31] (Atheros)
R2 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [137144 2010-12-21] (ESET)
R1 ehdrv; C:\Windows\System32\DRIVERS\ehdrv.sys [115008 2010-12-21] (ESET)
R2 epfwwfpr; C:\Windows\System32\DRIVERS\epfwwfpr.sys [95384 2010-12-21] (ESET)
R3 mcdbus; C:\Windows\System32\DRIVERS\mcdbus.sys [116736 2009-02-24] (MagicISO, Inc.) [File not signed]
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [114408 2013-12-16] (Power Software Ltd)
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 08:53 - 2015-05-18 08:53 - 00018419 _____ () C:\Users\dell\Desktop\FRST.txt
2015-05-18 08:52 - 2015-05-18 08:52 - 00000000 ____D () C:\Users\dell\Desktop\FRST-OlderVersion
2015-05-18 08:50 - 2015-05-18 08:50 - 00038024 _____ () C:\Users\dell\Desktop\AdwCleaner[S0].txt
2015-05-18 08:38 - 2015-05-18 08:41 - 00000000 ____D () C:\AdwCleaner
2015-05-18 08:36 - 2015-05-18 08:36 - 02209792 _____ () C:\Users\dell\Desktop\AdwCleaner.exe
2015-05-18 08:02 - 2015-05-18 08:02 - 00000000 ____D () C:\Program Files\Smart QrCode Generator
2015-05-15 14:31 - 2015-05-15 14:31 - 00039402 _____ () C:\Users\dell\Downloads\208647-mcfarland.usa.2015.720p.bluray.x264geckos.zip
2015-05-15 14:30 - 2015-05-15 14:30 - 00038099 _____ () C:\Users\dell\Downloads\205153-theloft.zip
2015-05-15 14:29 - 2015-05-15 14:29 - 00030144 _____ () C:\Users\dell\Downloads\208650-ex.machina.2015.720p.bluray.x264sparks.zip
2015-05-15 09:00 - 2015-05-15 09:00 - 00013509 _____ () C:\Users\dell\Desktop\BitComet_1.37_x86_setup - Shortcut.lnk
2015-05-15 09:00 - 2015-05-15 09:00 - 00000929 _____ () C:\Users\Public\Desktop\BitComet.lnk
2015-05-15 09:00 - 2015-05-15 09:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet
2015-05-15 08:52 - 2015-05-15 08:52 - 00009472 _____ () C:\Users\dell\Downloads\Mcfarland Usa (2015) [720p] YIFY - YTS.torrent
2015-05-15 08:51 - 2015-05-15 08:51 - 00008860 _____ () C:\Users\dell\Downloads\The Loft (2014) [720p] YIFY - YTS.torrent
2015-05-15 08:51 - 2015-05-15 08:51 - 00008844 _____ () C:\Users\dell\Downloads\Ex Machina (2015) [720p] YIFY - YTS.torrent
2015-05-15 07:33 - 2015-05-18 07:24 - 00000024 _____ () C:\Users\dell\AppData\Roaming\appdataFr25.bin
2015-05-14 13:46 - 2015-05-15 14:26 - 00000000 ____D () C:\Users\dell\Desktop\HE PERUCICA
2015-05-14 11:28 - 2015-05-14 11:26 - 00096352 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-05-14 11:22 - 2015-05-14 11:22 - 00562272 _____ (Oracle Corporation) C:\Users\dell\Downloads\chromeinstall-8u45 (1).exe
2015-05-13 14:55 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 11:25 - 2015-05-18 08:53 - 00000000 ____D () C:\FRST
2015-05-13 11:24 - 2015-05-18 08:52 - 01146368 _____ (Farbar) C:\Users\dell\Desktop\FRST.exe
2015-05-13 11:04 - 2015-05-18 08:53 - 00000000 ____D () C:\Users\dell\AppData\Roaming\BitTorrent
2015-05-13 10:39 - 2015-05-13 10:40 - 01999976 _____ (BitTorrent Inc.) C:\Users\dell\Downloads\BitTorrent.exe
2015-05-13 08:22 - 2015-05-13 08:22 - 00000000 ____D () C:\Program Files\HoofSounds
2015-05-13 07:55 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-05-13 07:55 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-13 07:55 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-13 07:55 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-13 07:55 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-13 07:55 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-13 07:55 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-13 07:54 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-13 07:54 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-13 07:54 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-13 07:54 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-13 07:54 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-13 07:54 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-13 07:54 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-13 07:54 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-13 07:54 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-13 07:54 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 07:54 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 07:54 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 07:53 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 07:53 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 07:53 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 07:53 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 07:53 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 07:53 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 07:53 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 07:53 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 07:53 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 07:53 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 07:53 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 07:53 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 07:53 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 07:53 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 07:53 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 07:53 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 07:53 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 07:53 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 07:53 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 07:53 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 07:53 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 07:53 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 07:53 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 07:53 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 07:53 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 07:53 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 07:53 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 07:53 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 07:53 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 07:53 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 07:53 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 07:53 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 07:53 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 07:53 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 07:53 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 07:49 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 07:49 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-13 07:49 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-13 07:49 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-13 07:49 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-13 07:49 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-13 07:48 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-13 07:43 - 2015-05-13 07:43 - 00000000 ____D () C:\Program Files\CNN News
2015-05-12 13:19 - 2015-05-12 13:19 - 00034041 _____ () C:\Users\dell\Downloads\208379-the.captive.2014.1080p.bluray.x264.yify.zip
2015-05-12 13:18 - 2015-05-12 13:18 - 00014213 _____ () C:\Users\dell\Downloads\205531-sword.of.vengeance.2015.webdl.zip
2015-05-12 09:19 - 2015-05-12 09:19 - 00000000 ____D () C:\Program Files\Snow
2015-05-11 11:01 - 2015-05-11 11:01 - 00017597 _____ () C:\Users\dell\Downloads\The Captive (2014) [1080p] YIFY - YTS.torrent
2015-05-11 11:01 - 2015-05-11 11:01 - 00017597 _____ () C:\Users\dell\Downloads\The Captive (2014) [1080p] YIFY - YTS (1).torrent
2015-05-11 11:00 - 2015-05-11 11:01 - 00007780 _____ () C:\Users\dell\Downloads\Sword Of Vengeance (2015) [720p] YIFY - YTS.torrent
2015-05-11 10:56 - 2015-05-18 07:57 - 01162610 _____ () C:\Users\dell\Desktop\PP I MB30 pumpani 4 FRAKCIJE TRANSPETROL.xlsx
2015-05-11 10:29 - 2015-05-11 10:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-05-11 10:21 - 2015-05-11 10:21 - 00562272 _____ (Oracle Corporation) C:\Users\dell\Downloads\chromeinstall-8u45.exe
2015-05-07 07:19 - 2015-05-15 08:06 - 00002091 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-07 07:19 - 2015-05-07 07:19 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-06 14:06 - 2015-05-06 14:06 - 00038332 _____ () C:\Users\dell\Downloads\208154-jupiter.ascending.2015.720p.bluray.x264.yify.zip
2015-05-05 13:46 - 2015-05-05 13:46 - 00040299 _____ () C:\Users\dell\Downloads\205331-unbroken.2014.brrip.zip
2015-05-05 11:49 - 2015-05-05 11:49 - 05893354 _____ () C:\Users\dell\Desktop\mehanizacija 04 05 2015.rar
2015-05-04 11:56 - 2015-05-12 12:34 - 00000000 ____D () C:\Users\dell\Desktop\Mjesavine
2015-05-04 11:56 - 2015-05-04 11:56 - 00025829 _____ () C:\Users\dell\Downloads\Mjesavine.rar
2015-05-04 11:56 - 2015-05-04 11:56 - 00025829 _____ () C:\Users\dell\Desktop\Mjesavine.rar
2015-05-04 08:28 - 2015-05-07 11:54 - 00000000 ____D () C:\Users\dell\Desktop\mehanizacija 04 05 2015
2015-04-28 14:15 - 2015-04-28 14:15 - 04825004 _____ () C:\Users\dell\Downloads\Learn to Make Paper Flowers! (1).mp4
2015-04-28 14:09 - 2015-04-28 14:09 - 04825004 _____ () C:\Users\dell\Downloads\Learn to Make Paper Flowers!.mp4
2015-04-28 14:06 - 2015-04-28 14:06 - 08292301 _____ () C:\Users\dell\Downloads\Instruction for nylon flower - lotus.mp4
2015-04-28 13:54 - 2015-04-28 13:55 - 09860415 _____ () C:\Users\dell\Downloads\How to make a Tissue Paper Flower very easily.....mp4
2015-04-28 08:12 - 2015-04-28 08:12 - 00000000 ____D () C:\Program Files\Youtube Preview Is it worth watching
2015-04-27 08:02 - 2015-05-06 13:32 - 00000020 _____ () C:\Users\dell\AppData\Roaming\appdataFr3.bin
2015-04-22 10:17 - 2014-11-25 18:32 - 00000000 ____D () C:\Users\dell\Downloads\T-MST10PDEUC
2015-04-21 07:34 - 2015-04-27 07:50 - 00000000 ____D () C:\Program Files\ClearNiceeBRowse
2015-04-21 07:34 - 2015-04-21 07:34 - 00000000 ____D () C:\Program Files\metalmouth voice browser
2015-04-21 07:33 - 2015-04-21 07:33 - 00000000 ____D () C:\Program Files\DiscountExt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-18 08:53 - 2014-02-13 16:32 - 00000000 ____D () C:\Users\dell\AppData\Roaming\BitComet
2015-05-18 08:52 - 2012-08-02 14:23 - 00000000 ____D () C:\Users\dell
2015-05-18 08:50 - 2009-07-14 06:34 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-18 08:50 - 2009-07-14 06:34 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-18 08:47 - 2010-11-20 23:01 - 00782398 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-18 08:44 - 2012-08-02 15:01 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-18 08:43 - 2012-08-02 15:02 - 00000000 ____D () C:\Users\dell\AppData\Roaming\Skype
2015-05-18 08:42 - 2013-07-19 14:56 - 00046563 _____ () C:\Windows\setupact.log
2015-05-18 08:42 - 2013-02-06 12:23 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-18 08:42 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-18 08:41 - 2012-08-02 21:24 - 01878258 _____ () C:\Windows\WindowsUpdate.log
2015-05-18 08:41 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-05-18 08:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2015-05-18 08:03 - 2015-03-06 08:55 - 00000000 ____D () C:\ProgramData\17789729017210468518
2015-05-18 08:03 - 2013-02-06 12:23 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-15 11:00 - 2013-02-24 13:23 - 00000000 ____D () C:\Users\dell\AppData\Local\CrashDumps
2015-05-15 09:00 - 2014-12-18 12:36 - 00000000 ____D () C:\Program Files\BitComet
2015-05-14 14:36 - 2010-11-21 02:47 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-14 11:25 - 2013-03-31 14:58 - 00000000 ____D () C:\Program Files\Java
2015-05-14 09:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-14 07:38 - 2009-07-14 06:33 - 00625960 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-14 07:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-14 07:33 - 2013-08-09 06:19 - 00077862 _____ () C:\Windows\PFRO.log
2015-05-13 14:39 - 2013-10-28 15:30 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 14:38 - 2013-10-28 15:29 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 11:16 - 2013-07-18 23:25 - 00000000 ____D () C:\Windows\pss
2015-05-11 10:27 - 2014-02-06 15:14 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-07 07:18 - 2012-08-02 14:39 - 00000000 ____D () C:\Program Files\Google
2015-05-04 11:59 - 2014-07-31 10:44 - 00000000 ____D () C:\Users\dell\Desktop\boris probe radni
2015-05-04 08:44 - 2015-01-20 08:56 - 00000000 ____D () C:\Users\dell\Desktop\RADNI ZAPISI U LAB
2015-04-30 10:17 - 2014-08-04 09:40 - 00000000 ____D () C:\Users\dell\Desktop\boris probe radni -Mehanizacija
2015-04-27 07:26 - 2012-08-02 14:40 - 00000000 ____D () C:\Users\dell\AppData\Local\Google

==================== Files in the root of some directories =======

2015-05-15 07:33 - 2015-05-18 07:24 - 0000024 _____ () C:\Users\dell\AppData\Roaming\appdataFr25.bin
2015-04-27 08:02 - 2015-05-06 13:32 - 0000020 _____ () C:\Users\dell\AppData\Roaming\appdataFr3.bin

Some content of TEMP:
====================
C:\Users\dell\AppData\Local\Temp\5197415732012515363.exe
C:\Users\dell\AppData\Local\Temp\92D0.exe
C:\Users\dell\AppData\Local\Temp\ebcabfcdceg.exe
C:\Users\dell\AppData\Local\Temp\F1543c79fa.exe
C:\Users\dell\AppData\Local\Temp\gtalkwmp1.dll
C:\Users\dell\AppData\Local\Temp\ICReinstall_setup.exe
C:\Users\dell\AppData\Local\Temp\install_flashplayer11x32_mssd_aaa_aih.exe
C:\Users\dell\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\dell\AppData\Local\Temp\mgsqlite3.dll
C:\Users\dell\AppData\Local\Temp\nsa32D9.tmp.exe
C:\Users\dell\AppData\Local\Temp\nsl3BDF.exe
C:\Users\dell\AppData\Local\Temp\nsl9AA4.exe
C:\Users\dell\AppData\Local\Temp\nsq417B.exe
C:\Users\dell\AppData\Local\Temp\nsv46C9.exe
C:\Users\dell\AppData\Local\Temp\nsvA0FB.exe
C:\Users\dell\AppData\Local\Temp\nsvA762.exe
C:\Users\dell\AppData\Local\Temp\playerfile.exe
C:\Users\dell\AppData\Local\Temp\Quarantine.exe
C:\Users\dell\AppData\Local\Temp\safeguard.exe
C:\Users\dell\AppData\Local\Temp\SoftonicAssistant_v0-1-6.exe
C:\Users\dell\AppData\Local\Temp\Softonic_EN_1-5-11_EN-Production_10_CleanRelease.exe
C:\Users\dell\AppData\Local\Temp\sp-downloader.exe
C:\Users\dell\AppData\Local\Temp\SPIdentifier.exe
C:\Users\dell\AppData\Local\Temp\sqlite3.dll
C:\Users\dell\AppData\Local\Temp\tu17p84.exe
C:\Users\dell\AppData\Local\Temp\uninst1.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-04 10:20

==================== End Of Log ============================
https://www.mycity.rs/must-login.png

Dopuna: 18 Maj 2015 8:57

kasnim zbog opravke ....to je to

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8617
  • Gde živiš: Novi Beograd

Pozdrav,

Uninstaliraj sledece programe:

SpeedAnalysis.com
Youtube Preview Is it worth watching

1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: E - E:\autorun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {0107643d-664e-11e2-98e9-c01885793332} - E:\Install.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {367e919e-49ef-11e2-9516-c01885793331} - E:\AutoRun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {367e91b3-49ef-11e2-9516-c01885793331} - E:\AutoRun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {de5d1453-6de0-11e2-adfe-c01885793332} - E:\autorun.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKLM -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&i=48&did=11034&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&barid=1605756575266169056
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {57150180-4691-4AC9-A82B-CCE91AACD844} URL = http://search.toggle.com/?lang=en&cid=adfaa7a7&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com?src=6&q={searchTerms}&barid=1605756575266169056&crg=&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&st=23&i=48&did=11034
FF DefaultSearchUrl:
FF Keyword.URL: hxxp://mysearch.sweetpacks.com/?src=2&st=12&i=48&did=11034&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&barid=1605756575266169056&q=
FF Extension: SpeedAnalysis.com - C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com [2013-03-31]
C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\PDVDZDW52397720@XDDWJXW57740856.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\551f2920-3c19-11e1-b86c-0800200c9a66@jetpack [Not Found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2015-02-05] <==== ATTENTION
FF SearchPlugin: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\toggle.xml [2013-02-13]
EmptyTemp:


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.

offline
  • Pridružio: 30 Avg 2014
  • Poruke: 314
  • Gde živiš: Montenegro

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version: 16-05-2015 02
Ran by dell at 2015-05-19 08:18:40 Run:2
Running from C:\Users\dell\Desktop
Loaded Profiles: dell (Available profiles: dell)
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: E - E:\autorun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {0107643d-664e-11e2-98e9-c01885793332} - E:\Install.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {367e919e-49ef-11e2-9516-c01885793331} - E:\AutoRun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {367e91b3-49ef-11e2-9516-c01885793331} - E:\AutoRun.exe
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\MountPoints2: {de5d1453-6de0-11e2-adfe-c01885793332} - E:\autorun.exe
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
SearchScopes: HKLM -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com/?src=6&q={searchTerms}&st=12&i=48&did=11034&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&barid=1605756575266169056
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\.DEFAULT -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {483830EE-A4CD-4b71-B0A3-3D82E62A6909} URL =
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {57150180-4691-4AC9-A82B-CCE91AACD844} URL = http://search.toggle.com/?lang=en&cid=adfaa7a7&q={searchTerms}
SearchScopes: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> {EEE6C360-6118-11DC-9C72-001320C79847} URL = http://mysearch.sweetpacks.com?src=6&q={searchTerms}&barid=1605756575266169056&crg=&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&st=23&i=48&did=11034
FF DefaultSearchUrl:
FF Keyword.URL: hxxp://mysearch.sweetpacks.com/?src=2&st=12&i=48&did=11034&ppd=1434,122991,20uQ2j3KMdRv38ly2.LUwx1wPX.K000.,,,,sweet-player,,,www.sweetplayer.com&barid=1605756575266169056&q=
FF Extension: SpeedAnalysis.com - C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com [2013-03-31]
C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\PDVDZDW52397720@XDDWJXW57740856.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\551f2920-3c19-11e1-b86c-0800200c9a66@jetpack [Not Found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]
FF ExtraCheck: C:\Program Files\mozilla firefox\firefox.cfg [2015-02-05] <==== ATTENTION
FF SearchPlugin: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\toggle.xml [2013-02-13]
EmptyTemp:
*****************

HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\E => Key not found.
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{0107643d-664e-11e2-98e9-c01885793332} => Key not found.
HKCR\CLSID\{0107643d-664e-11e2-98e9-c01885793332} => Key not found.
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{367e919e-49ef-11e2-9516-c01885793331} => Key not found.
HKCR\CLSID\{367e919e-49ef-11e2-9516-c01885793331} => Key not found.
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{367e91b3-49ef-11e2-9516-c01885793331} => Key not found.
HKCR\CLSID\{367e91b3-49ef-11e2-9516-c01885793331} => Key not found.
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{de5d1453-6de0-11e2-adfe-c01885793332} => Key not found.
HKCR\CLSID\{de5d1453-6de0-11e2-adfe-c01885793332} => Key not found.
HKLM\SOFTWARE\Policies\Google => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found.
HKCR\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key not found.
HKCR\CLSID\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key not found.
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value not found.
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key not found.
HKCR\CLSID\{483830EE-A4CD-4b71-B0A3-3D82E62A6909} => Key not found.
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{57150180-4691-4AC9-A82B-CCE91AACD844} => Key not found.
HKCR\CLSID\{57150180-4691-4AC9-A82B-CCE91AACD844} => Key not found.
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found.
HKCR\CLSID\{EEE6C360-6118-11DC-9C72-001320C79847} => Key not found.
Firefox DefaultSearchUrl deleted successfully.
Firefox Keyword.URL deleted successfully.
C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com => not found.
"C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com" => File/Directory not found.
C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com => not found.
C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.com => not found.
C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\PDVDZDW52397720@XDDWJXW57740856.com => not found.
C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\551f2920-3c19-11e1-b86c-0800200c9a66@jetpack => not found.
C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} => not found.
"C:\Program Files\mozilla firefox\firefox.cfg" => not found.
"C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\searchplugins\toggle.xml" => not found.
EmptyTemp: => Removed 24.8 MB temporary data.


The system needed a reboot.

==== End of Fixlog 08:18:52 ====

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8617
  • Gde živiš: Novi Beograd

Postavi novi FRST loga da proverimo stanje.

offline
  • Pridružio: 30 Avg 2014
  • Poruke: 314
  • Gde živiš: Montenegro

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 16-05-2015 02
Ran by dell (administrator) on DELL-PC on 19-05-2015 12:57:46
Running from C:\Users\dell
Loaded Profiles: dell (Available profiles: dell)
Platform: Microsoft Windows 7 Professional Service Pack 1 (X86) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Advanced Micro Devices, Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\AthBtTray.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Atheros) C:\Program Files\Dell Wireless\Ath_CoexAgent.exe
() C:\Program Files\T-Mobile Internet Manager\UIExec.exe
(Atheros Commnucations) C:\Program Files\Dell Wireless\Bluetooth Suite\AdminService.exe
(Adobe Systems Inc.) C:\Program Files\Adobe\Acrobat 10.0\Acrobat\acrotray.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe
(Google Inc.) C:\Program Files\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Advanced Micro Devices Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Samsung) C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
() C:\Program Files\T-Mobile Internet Manager\AssistantServices.exe
(www.BitComet.com) C:\Program Files\BitComet\BitComet.exe
(www.BitComet.com) C:\Program Files\BitComet\tools\BitCometService.exe
(ATI Technologies Inc.) C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [StartCCC] => C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-08-06] (Advanced Micro Devices, Inc.)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files\Dell Wireless\Bluetooth Suite\BtvStack.exe [490656 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] => C:\Program Files\Dell Wireless\Bluetooth Suite\AthBtTray.exe [302240 2011-03-31] (Atheros Commnucations)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [UIExec] => C:\Program Files\T-Mobile Internet Manager\UIExec.exe [136328 2010-03-02] ()
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Adobe Acrobat Speed Launcher] => C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe [41360 2014-12-03] (Adobe Systems Incorporated)
HKLM\...\Run: [Acrobat Assistant 8.0] => C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe [840592 2014-12-03] (Adobe Systems Inc.)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [311616 2015-02-24] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [334896 2015-04-30] (Oracle Corporation)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [981688 2015-04-30] (Microsoft Corporation)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [Skype] => C:\Program Files\Skype\Phone\Skype.exe [18678376 2013-05-09] (Skype Technologies S.A.)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [KiesPDLR.exe] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [845120 2015-02-24] (Samsung)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\...\Run: [BitComet] => C:\Program Files\BitComet\BitComet.exe [14276784 2013-12-31] (www.BitComet.com)
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Control Panel\Desktop\\SCRNSAVE.EXE -> C:\Windows\system32\scrnsave.scr [10240 2009-07-14] (Microsoft Corporation)
Startup: C:\Users\dell\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2007 Screen Clipper and Launcher.lnk [2013-01-30]
ShortcutTarget: OneNote 2007 Screen Clipper and Launcher.lnk -> C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\Windows\system32\AcSignIcon.dll [2009-02-09] (Autodesk, Inc.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://www.google.com
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=56626&homepage=about:blank
HKU\S-1-5-21-3569164440-1089637409-4081706395-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
Toolbar: HKU\S-1-5-21-3569164440-1089637409-4081706395-1000 -> Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll [2014-12-03] (Adobe Systems Incorporated)
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0055-ABCDEFFEDCBA} http://java.sun.com/update/1.7.0/jinstall-1_7_0_55-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_45-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553530000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2006-10-27] (Microsoft Corporation)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll [2012-11-22] (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-26] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.254

FireFox:
========
FF ProfilePath: C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-15] ()
FF Plugin: @Google.com/GoogleEarthPlugin -> C:\Program Files\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin: @google.com/npPicasa3,version=3.0.0 -> C:\Program Files\Google\Picasa3\npPicasa3.dll [2013-04-02] (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-05-14] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-05-14] (Oracle Corporation)
FF Plugin: @microsoft.com/GENUINE -> disabled No File
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-14] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-14] (Google Inc.)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll [2014-12-03] (Adobe Systems Inc.)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\NPOFF12.DLL [2006-10-26] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\nppdf32.dll [2013-05-10] (Adobe Systems Inc.)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2015-02-05]
FF Extension: Java Console - C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2015-02-05]
FF HKLM\...\Firefox\Extensions: [ff-bmboc@bytemobile.com] - C:\Program Files\T-Mobile Internet Manager\addon
FF Extension: Bytemobile Optimization Client - C:\Program Files\T-Mobile Internet Manager\addon [2013-01-24]
FF HKLM\...\Firefox\Extensions: [web2pdfextension@web2pdf.adobedotcom] - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn
FF Extension: Adobe Acrobat - Create PDF - C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013-02-13]
FF HKLM\...\Thunderbird\Extensions: [eplgTb@eset.com] - C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Extensions\speedanalysis@SpeedAnalysis.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\389579c4-efa9-4d96-a1dd-3c86f7bd1a51@gmail.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\e9d197d59f2f45f382b1aa5c14d82@8706aaed9b904554b5cb7984e9.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\PDVDZDW52397720@XDDWJXW57740856.com [Not Found]
FF Extension: No Name - C:\Users\dell\AppData\Roaming\Mozilla\Firefox\Profiles\xmqyegnp.default\extensions\551f2920-3c19-11e1-b86c-0800200c9a66@jetpack [Not Found]
FF Extension: No Name - C:\Program Files\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} [Not Found]

Chrome:
=======
CHR StartupUrls: Default -> "hxxp://www.google.rs/"
CHR Profile: C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-05-19]
CHR Extension: (Bookmark Manager) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-05-19]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-05-19]
CHR Extension: (Skype Click to Call) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-05-19]
CHR Extension: (Google Wallet) - C:\Users\dell\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-05-19]
CHR HKLM\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx [2012-11-22]

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AMD FUEL Service; C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe [294400 2011-08-06] (Advanced Micro Devices, Inc.) [File not signed]
R2 Atheros Bt&Wlan Coex Agent; C:\Program Files\Dell Wireless\Ath_CoexAgent.exe [135168 2011-02-16] (Atheros) [File not signed]
R2 AtherosSvc; C:\Program Files\Dell Wireless\Bluetooth Suite\adminservice.exe [72864 2011-03-31] (Atheros Commnucations) [File not signed]
R3 BITCOMET_HELPER_SERVICE; C:\Program Files\BitComet\tools\BitCometService.exe [1296728 2013-11-29] (www.BitComet.com)
R2 DiagTrack; C:\Windows\system32\diagtrack.dll [851456 2015-04-27] (Microsoft Corporation)
S3 FLEXnet Licensing Service; C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe [651720 2012-08-02] (Macrovision Europe Ltd.) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2015-04-30] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [284504 2015-04-30] (Microsoft Corporation)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\25_escape\conn\ss_conn_service.exe [743688 2014-10-13] (DEVGURU Co., LTD.)
R2 UI Assistant Service; C:\Program Files\T-Mobile Internet Manager\AssistantServices.exe [245384 2010-03-02] () [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2013-05-27] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

S3 AthBTPort; C:\Windows\System32\DRIVERS\btath_flt.sys [34976 2011-03-31] (Atheros)
S3 athur; C:\Windows\System32\DRIVERS\athur.sys [1570304 2011-04-20] (Atheros Communications, Inc.)
U0 BMLoad; C:\Windows\System32\drivers\BMLoad.sys [22528 2010-02-10] (Bytemobile, Inc.) [File not signed]
S3 BTATH_A2DP; C:\Windows\System32\drivers\btath_a2dp.sys [259232 2011-03-31] (Atheros)
R3 BTATH_BUS; C:\Windows\System32\DRIVERS\btath_bus.sys [24736 2011-03-31] (Atheros)
S3 BTATH_HCRP; C:\Windows\System32\DRIVERS\btath_hcrp.sys [175776 2011-03-31] (Atheros)
S3 BTATH_RCP; C:\Windows\System32\DRIVERS\btath_rcp.sys [141088 2011-03-31] (Atheros)
S3 BtFilter; C:\Windows\System32\DRIVERS\btfilter.sys [243360 2011-03-31] (Atheros)
R3 mcdbus; C:\Windows\System32\DRIVERS\mcdbus.sys [116736 2009-02-24] (MagicISO, Inc.) [File not signed]
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [245096 2015-03-04] (Microsoft Corporation)
R1 MpKslf9202d11; c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{036619E8-0B61-42ED-BAC4-F391F2EB7A13}\MpKslf9202d11.sys [39464 2015-05-19] (Microsoft Corporation)
R1 SCDEmu; C:\Windows\system32\Drivers\SCDEmu.sys [114408 2013-12-16] (Power Software Ltd)
S3 huawei_cdcacm; system32\DRIVERS\ew_jucdcacm.sys [X]
S3 huawei_enumerator; system32\DRIVERS\ew_jubusenum.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-19 12:57 - 2015-05-19 12:58 - 00015639 _____ () C:\Users\dell\FRST.txt
2015-05-19 08:35 - 2015-05-19 08:35 - 00002077 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Security Essentials.lnk
2015-05-19 08:35 - 2015-05-19 08:35 - 00001945 _____ () C:\Windows\epplauncher.mif
2015-05-19 08:34 - 2015-05-19 08:35 - 00000000 ____D () C:\Program Files\Microsoft Security Client
2015-05-19 08:34 - 2015-05-19 08:34 - 00002165 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-19 08:34 - 2015-05-19 08:34 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-05-19 08:28 - 2015-05-19 08:29 - 11588952 _____ (Microsoft Corporation) C:\Users\dell\Downloads\mseinstall.exe
2015-05-19 08:13 - 2015-05-19 08:13 - 00880208 _____ (Google Inc.) C:\Users\dell\Downloads\ChromeSetup (1).exe
2015-05-18 10:50 - 2015-05-18 10:50 - 00008864 _____ () C:\Users\dell\Downloads\Extinction (2014) [720p] YIFY - YTS.torrent
2015-05-18 10:50 - 2015-05-18 10:50 - 00008854 _____ () C:\Users\dell\Downloads\Focus (2015) [720p] YIFY - YTS.torrent
2015-05-18 08:54 - 2015-05-18 08:55 - 00030675 _____ () C:\Users\dell\Desktop\Addition.txt
2015-05-18 08:53 - 2015-05-18 08:55 - 00039119 _____ () C:\Users\dell\Desktop\FRST.txt
2015-05-18 08:52 - 2015-05-18 08:52 - 00000000 ____D () C:\Users\dell\Desktop\FRST-OlderVersion
2015-05-18 08:50 - 2015-05-18 08:50 - 00038024 _____ () C:\Users\dell\Desktop\AdwCleaner[S0].txt
2015-05-18 08:38 - 2015-05-18 08:41 - 00000000 ____D () C:\AdwCleaner
2015-05-18 08:36 - 2015-05-18 08:36 - 02209792 _____ () C:\Users\dell\Desktop\AdwCleaner.exe
2015-05-18 08:02 - 2015-05-18 08:02 - 00000000 ____D () C:\Program Files\Smart QrCode Generator
2015-05-15 14:31 - 2015-05-15 14:31 - 00039402 _____ () C:\Users\dell\Downloads\208647-mcfarland.usa.2015.720p.bluray.x264geckos.zip
2015-05-15 14:30 - 2015-05-15 14:30 - 00038099 _____ () C:\Users\dell\Downloads\205153-theloft.zip
2015-05-15 14:29 - 2015-05-15 14:29 - 00030144 _____ () C:\Users\dell\Downloads\208650-ex.machina.2015.720p.bluray.x264sparks.zip
2015-05-15 09:00 - 2015-05-15 09:00 - 00013509 _____ () C:\Users\dell\Desktop\BitComet_1.37_x86_setup - Shortcut.lnk
2015-05-15 09:00 - 2015-05-15 09:00 - 00000929 _____ () C:\Users\Public\Desktop\BitComet.lnk
2015-05-15 09:00 - 2015-05-15 09:00 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BitComet
2015-05-15 08:52 - 2015-05-15 08:52 - 00009472 _____ () C:\Users\dell\Downloads\Mcfarland Usa (2015) [720p] YIFY - YTS.torrent
2015-05-15 08:51 - 2015-05-15 08:51 - 00008860 _____ () C:\Users\dell\Downloads\The Loft (2014) [720p] YIFY - YTS.torrent
2015-05-15 08:51 - 2015-05-15 08:51 - 00008844 _____ () C:\Users\dell\Downloads\Ex Machina (2015) [720p] YIFY - YTS.torrent
2015-05-15 07:33 - 2015-05-18 07:24 - 00000024 _____ () C:\Users\dell\AppData\Roaming\appdataFr25.bin
2015-05-14 13:46 - 2015-05-15 14:26 - 00000000 ____D () C:\Users\dell\Desktop\HE PERUCICA
2015-05-14 11:28 - 2015-05-14 11:26 - 00096352 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-05-14 11:22 - 2015-05-14 11:22 - 00562272 _____ (Oracle Corporation) C:\Users\dell\Downloads\chromeinstall-8u45 (1).exe
2015-05-13 14:55 - 2015-05-01 15:16 - 00102608 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-13 11:25 - 2015-05-19 12:58 - 00000000 ____D () C:\FRST
2015-05-13 11:24 - 2015-05-18 08:52 - 01146368 _____ (Farbar) C:\Users\dell\FRST.exe
2015-05-13 11:04 - 2015-05-18 08:53 - 00000000 ____D () C:\Users\dell\AppData\Roaming\BitTorrent
2015-05-13 10:39 - 2015-05-13 10:40 - 01999976 _____ (BitTorrent Inc.) C:\Users\dell\Downloads\BitTorrent.exe
2015-05-13 08:22 - 2015-05-13 08:22 - 00000000 ____D () C:\Program Files\HoofSounds
2015-05-13 07:55 - 2015-04-27 21:11 - 03989440 _____ (Microsoft Corporation) C:\Windows\system32\ntkrnlpa.exe
2015-05-13 07:55 - 2015-04-27 21:11 - 03934144 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2015-05-13 07:55 - 2015-04-27 21:08 - 01307648 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll
2015-05-13 07:55 - 2015-04-27 21:05 - 00851456 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-13 07:55 - 2015-04-27 21:05 - 00635392 _____ (Microsoft Corporation) C:\Windows\system32\tdh.dll
2015-05-13 07:55 - 2015-04-27 20:00 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-13 07:55 - 2015-01-29 05:02 - 02311168 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-13 07:54 - 2015-04-27 21:11 - 00137664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-05-13 07:54 - 2015-04-27 21:11 - 00067520 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-05-13 07:54 - 2015-04-27 21:05 - 00400896 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00259584 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00221184 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00172032 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00100352 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\sechost.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00065536 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-05-13 07:54 - 2015-04-27 21:05 - 00015872 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 01061376 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 00641536 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 00550912 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 00364544 _____ (Microsoft Corporation) C:\Windows\system32\tracerpt.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00262656 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00082944 _____ (Microsoft Corporation) C:\Windows\system32\logman.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00069632 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00040448 _____ (Microsoft Corporation) C:\Windows\system32\typeperf.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00038912 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll
2015-05-13 07:54 - 2015-04-27 21:04 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\relog.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00022528 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-05-13 07:54 - 2015-04-27 21:04 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-05-13 07:54 - 2015-04-27 21:03 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-05-13 07:54 - 2015-04-27 21:03 - 00017408 _____ (Microsoft Corporation) C:\Windows\system32\diskperf.exe
2015-05-13 07:54 - 2015-04-27 21:01 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-05-13 07:54 - 2015-04-27 21:01 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-05-13 07:54 - 2015-04-27 20:59 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-05-13 07:54 - 2015-04-27 20:59 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll
2015-05-13 07:54 - 2015-04-20 04:56 - 01250816 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 07:54 - 2015-04-20 04:56 - 00909312 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 07:54 - 2015-04-20 04:03 - 02382336 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 07:53 - 2015-05-05 03:12 - 00248832 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 07:53 - 2015-04-22 03:48 - 00342736 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 07:53 - 2015-04-21 18:25 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-05-13 07:53 - 2015-04-21 18:25 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-05-13 07:53 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 07:53 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 07:53 - 2015-04-21 18:11 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-05-13 07:53 - 2015-04-21 18:10 - 00047616 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-05-13 07:53 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 07:53 - 2015-04-21 18:08 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-05-13 07:53 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 07:53 - 2015-04-21 18:03 - 00047104 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-05-13 07:53 - 2015-04-21 18:02 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-05-13 07:53 - 2015-04-21 18:00 - 00478208 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 07:53 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 07:53 - 2015-04-21 17:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-05-13 07:53 - 2015-04-21 17:58 - 00102912 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-05-13 07:53 - 2015-04-21 17:57 - 00620032 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-05-13 07:53 - 2015-04-21 17:51 - 00667648 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-05-13 07:53 - 2015-04-21 17:48 - 00418304 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-05-13 07:53 - 2015-04-21 17:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-05-13 07:53 - 2015-04-21 17:39 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-05-13 07:53 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 07:53 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 07:53 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 07:53 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 07:53 - 2015-04-21 17:26 - 00685568 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 07:53 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 07:53 - 2015-04-21 17:24 - 01155072 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-05-13 07:53 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 07:53 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 07:53 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 07:53 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 07:53 - 2015-04-18 04:56 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 07:53 - 2015-04-13 05:19 - 00259072 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 07:49 - 2015-04-08 05:14 - 00216064 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-05-13 07:49 - 2015-04-08 05:14 - 00019968 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-05-13 07:49 - 2015-03-04 06:11 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\shimeng.dll
2015-05-13 07:49 - 2015-03-04 06:10 - 00295936 _____ (Microsoft Corporation) C:\Windows\system32\apphelp.dll
2015-05-13 07:49 - 2015-03-04 06:10 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\aelupsvc.dll
2015-05-13 07:49 - 2015-03-04 06:10 - 00020992 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-13 07:48 - 2015-02-18 09:06 - 00123904 _____ (Microsoft Corporation) C:\Windows\system32\poqexec.exe
2015-05-13 07:43 - 2015-05-13 07:43 - 00000000 ____D () C:\Program Files\CNN News
2015-05-12 13:19 - 2015-05-12 13:19 - 00034041 _____ () C:\Users\dell\Downloads\208379-the.captive.2014.1080p.bluray.x264.yify.zip
2015-05-12 13:18 - 2015-05-12 13:18 - 00014213 _____ () C:\Users\dell\Downloads\205531-sword.of.vengeance.2015.webdl.zip
2015-05-12 09:19 - 2015-05-12 09:19 - 00000000 ____D () C:\Program Files\Snow
2015-05-11 11:01 - 2015-05-11 11:01 - 00017597 _____ () C:\Users\dell\Downloads\The Captive (2014) [1080p] YIFY - YTS.torrent
2015-05-11 11:01 - 2015-05-11 11:01 - 00017597 _____ () C:\Users\dell\Downloads\The Captive (2014) [1080p] YIFY - YTS (1).torrent
2015-05-11 11:00 - 2015-05-11 11:01 - 00007780 _____ () C:\Users\dell\Downloads\Sword Of Vengeance (2015) [720p] YIFY - YTS.torrent
2015-05-11 10:56 - 2015-05-18 07:57 - 01162610 _____ () C:\Users\dell\Desktop\PP I MB30 pumpani 4 FRAKCIJE TRANSPETROL.xlsx
2015-05-11 10:29 - 2015-05-11 10:29 - 00000000 ____D () C:\Program Files\Common Files\Java
2015-05-11 10:21 - 2015-05-11 10:21 - 00562272 _____ (Oracle Corporation) C:\Users\dell\Downloads\chromeinstall-8u45.exe
2015-05-06 14:06 - 2015-05-06 14:06 - 00038332 _____ () C:\Users\dell\Downloads\208154-jupiter.ascending.2015.720p.bluray.x264.yify.zip
2015-05-05 13:46 - 2015-05-05 13:46 - 00040299 _____ () C:\Users\dell\Downloads\205331-unbroken.2014.brrip.zip
2015-05-05 11:49 - 2015-05-05 11:49 - 05893354 _____ () C:\Users\dell\Desktop\mehanizacija 04 05 2015.rar
2015-05-04 11:56 - 2015-05-12 12:34 - 00000000 ____D () C:\Users\dell\Desktop\Mjesavine
2015-05-04 11:56 - 2015-05-04 11:56 - 00025829 _____ () C:\Users\dell\Downloads\Mjesavine.rar
2015-05-04 11:56 - 2015-05-04 11:56 - 00025829 _____ () C:\Users\dell\Desktop\Mjesavine.rar
2015-05-04 08:28 - 2015-05-07 11:54 - 00000000 ____D () C:\Users\dell\Desktop\mehanizacija 04 05 2015
2015-04-28 14:15 - 2015-04-28 14:15 - 04825004 _____ () C:\Users\dell\Downloads\Learn to Make Paper Flowers! (1).mp4
2015-04-28 14:09 - 2015-04-28 14:09 - 04825004 _____ () C:\Users\dell\Downloads\Learn to Make Paper Flowers!.mp4
2015-04-28 14:06 - 2015-04-28 14:06 - 08292301 _____ () C:\Users\dell\Downloads\Instruction for nylon flower - lotus.mp4
2015-04-28 13:54 - 2015-04-28 13:55 - 09860415 _____ () C:\Users\dell\Downloads\How to make a Tissue Paper Flower very easily.....mp4
2015-04-27 08:02 - 2015-05-06 13:32 - 00000020 _____ () C:\Users\dell\AppData\Roaming\appdataFr3.bin
2015-04-22 10:17 - 2014-11-25 18:32 - 00000000 ____D () C:\Users\dell\Downloads\T-MST10PDEUC
2015-04-21 07:34 - 2015-04-27 07:50 - 00000000 ____D () C:\Program Files\ClearNiceeBRowse
2015-04-21 07:34 - 2015-04-21 07:34 - 00000000 ____D () C:\Program Files\metalmouth voice browser
2015-04-21 07:33 - 2015-04-21 07:33 - 00000000 ____D () C:\Program Files\DiscountExt

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-05-19 12:57 - 2012-08-02 14:23 - 00000000 ____D () C:\Users\dell
2015-05-19 12:55 - 2014-02-13 16:32 - 00000000 ____D () C:\Users\dell\AppData\Roaming\BitComet
2015-05-19 12:44 - 2012-08-02 15:01 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-19 12:34 - 2012-08-02 21:24 - 01667741 _____ () C:\Windows\WindowsUpdate.log
2015-05-19 12:03 - 2013-02-06 12:23 - 00000886 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-19 12:03 - 2012-08-02 15:02 - 00000000 ____D () C:\Users\dell\AppData\Roaming\Skype
2015-05-19 08:40 - 2009-07-14 06:34 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-05-19 08:40 - 2009-07-14 06:34 - 00031504 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-05-19 08:34 - 2012-08-02 14:40 - 00000000 ____D () C:\Users\dell\AppData\Local\Google
2015-05-19 08:33 - 2012-08-02 14:39 - 00000000 ____D () C:\Program Files\Google
2015-05-19 08:30 - 2010-11-20 23:01 - 00782398 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-19 08:24 - 2013-07-19 14:56 - 00046843 _____ () C:\Windows\setupact.log
2015-05-19 08:24 - 2013-02-06 12:23 - 00000882 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-19 08:24 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-19 08:19 - 2013-08-09 06:19 - 00078418 _____ () C:\Windows\PFRO.log
2015-05-19 08:04 - 2015-02-05 10:14 - 00000000 ____D () C:\Program Files\Mozilla Firefox
2015-05-18 13:16 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2015-05-18 11:37 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\NDF
2015-05-18 08:41 - 2009-07-14 04:37 - 00000000 ____D () C:\Program Files\Common Files\System
2015-05-18 08:18 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\tracing
2015-05-18 08:03 - 2015-03-06 08:55 - 00000000 ____D () C:\ProgramData\17789729017210468518
2015-05-15 11:00 - 2013-02-24 13:23 - 00000000 ____D () C:\Users\dell\AppData\Local\CrashDumps
2015-05-15 09:00 - 2014-12-18 12:36 - 00000000 ____D () C:\Program Files\BitComet
2015-05-14 14:36 - 2010-11-21 02:47 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-14 11:25 - 2013-03-31 14:58 - 00000000 ____D () C:\Program Files\Java
2015-05-14 09:20 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\Microsoft.NET
2015-05-14 07:38 - 2009-07-14 06:33 - 00625960 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-14 07:34 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-13 14:39 - 2013-10-28 15:30 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-13 14:38 - 2013-10-28 15:29 - 137310008 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-13 11:16 - 2013-07-18 23:25 - 00000000 ____D () C:\Windows\pss
2015-05-11 10:27 - 2014-02-06 15:14 - 00000000 ____D () C:\ProgramData\Oracle
2015-05-04 11:59 - 2014-07-31 10:44 - 00000000 ____D () C:\Users\dell\Desktop\boris probe radni
2015-05-04 08:44 - 2015-01-20 08:56 - 00000000 ____D () C:\Users\dell\Desktop\RADNI ZAPISI U LAB
2015-04-30 10:17 - 2014-08-04 09:40 - 00000000 ____D () C:\Users\dell\Desktop\boris probe radni -Mehanizacija

==================== Files in the root of some directories =======

2015-05-15 07:33 - 2015-05-18 07:24 - 0000024 _____ () C:\Users\dell\AppData\Roaming\appdataFr25.bin
2015-04-27 08:02 - 2015-05-06 13:32 - 0000020 _____ () C:\Users\dell\AppData\Roaming\appdataFr3.bin

Files to move or delete:
====================
C:\Users\dell\FRST.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-18 12:26

==================== End Of Log ============================
https://www.mycity.rs/must-login.png

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8617
  • Gde živiš: Novi Beograd

Da li sada ima problema?

offline
  • Pridružio: 30 Avg 2014
  • Poruke: 314
  • Gde živiš: Montenegro

Bolji je rad lap topa hvala Smile

Ko je trenutno na forumu
 

Ukupno su 1140 korisnika na forumu :: 54 registrovanih, 6 sakrivenih i 1080 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: _Rade, Areal84, Atomski čoban, babaroga, Bobrock1, Boris90, comi_pfc, Dimitrije Paunovic, djboj, Djokislav, Dorcolac, flash12, FOX, ginjica, gomago, grenadir, havoc995, Herman Terrance Aubrey, Insan, jaeger, krkalon, Kubovac, Levi, Lošmi, M1los, madza, mercedesamg, Mi lao shu, MiG-29M2, milenko crazy north, milutin134, Mixelotti, mnn2, nenad81, pacika, Parker, randja26, Rogan33, royst33, S2M, samsung, Sančo, sasa87, slonic_tonic, Smiljke, Srky Boy, Srle993, Steeeefan, Vatreni Zmaj, VJ, vladaa012, wizzardone, YU-UKI, zodiac94