|
Poslao: 22 Nov 2015 07:47
|
offline
- milica.kostic

- Novi MyCity građanin
- Pridružio: 22 Nov 2015
- Poruke: 11
|
Napisano: 22 Nov 2015 3:33
dobro vece. pomagaj te bile su me napale reklame i pretrizivac(kao npr google,amayon,bing...) neki i skinula sam adw cleaner odradio je svoje ali sada kad kliknem na mozilu izadje mi
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:20-11-2015
Ran by Ana i Milica (administrator) on ANAIMILICA-PC (22-11-2015 03:24:00)
Running from C:\Users\Ana i Milica\Downloads
Loaded Profiles: Ana i Milica (Available Profiles: Ana i Milica)
Platform: Microsoft Windows 7 Ultimate (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser not detected!)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [Link mogu videti samo ulogovani korisnici]
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
() C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(BitTorrent Inc.) C:\Users\Ana i Milica\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Ana i Milica\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
(BitTorrent Inc.) C:\Users\Ana i Milica\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3524536 2012-08-31] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7004376 2015-11-22] (AVAST Software)
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [964024 2012-08-31] (Samsung)
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-08-31] ()
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\...\Run: [uTorrent] => C:\Users\Ana i Milica\AppData\Roaming\uTorrent\uTorrent.exe [1822048 2015-10-16] (BitTorrent Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-11-22] (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{1F91FDE4-0130-4103-8E2D-31C954B70CEE}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-21] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-22] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-21] (Oracle Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Ana i Milica\AppData\Roaming\Mozilla\Firefox\Profiles\x1w212dl.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-11-21] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-21] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-22] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-22] (Google Inc.)
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-22]
FF ExtraCheck: C:\Program Files\mozilla firefox\browser\defaults\preferences\prefs.js [2015-11-21] <==== ATTENTION (Points to *.cfg file)
Chrome:
=======
CHR HomePage: Default -> [Link mogu videti samo ulogovani korisnici]
CHR StartupUrls: Default -> "hxxps://www.google.rs/","hxxp://www.oursurfing.com/?type=hp&ts=1447714140&z=15a7bb579ad5ae041aafbedg0z2zcm1meg7z3g9z1e&from=amt&uid=126614527_135154_b4dd35db"
CHR Profile: C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google диск) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-11-22]
CHR Extension: (YouTube) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-11-22]
CHR Extension: (Google Search) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-11-22]
CHR Extension: (Google табеле) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-11-22]
CHR Extension: (Google документи офлајн) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-22]
CHR Extension: (Avast Online Security) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-22]
CHR Extension: (My IP address) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\monhkdcehmbdgkhgpccaccbbcgcfpjkd [2015-11-22]
CHR Extension: (Плаћања у Chrome веб-продавници) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-22]
CHR Extension: (Gmail) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-11-22]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-22]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [174416 2015-11-22] (AVAST Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-11-22] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [81168 2015-11-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-11-22] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-11-22] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [794952 2015-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [435464 2015-11-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [117200 2015-11-22] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209432 2015-11-22] (AVAST Software)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-11-22 03:24 - 2015-11-22 03:25 - 00243904 _____ C:\Users\Ana i Milica\Downloads\Firefox Setup Stub 42.0 (5).exe
2015-11-22 03:24 - 2015-11-22 03:25 - 00009134 _____ C:\Users\Ana i Milica\Downloads\FRST.txt
2015-11-22 03:23 - 2015-11-22 03:24 - 00000000 ____D C:\FRST
2015-11-22 03:23 - 2015-11-22 03:23 - 01716736 _____ (Farbar) C:\Users\Ana i Milica\Downloads\FRST.exe
2015-11-22 03:05 - 2015-11-22 03:05 - 00243904 _____ C:\Users\Ana i Milica\Downloads\Firefox Setup Stub 42.0 (4).exe
2015-11-22 02:57 - 2015-11-22 02:57 - 00243656 _____ C:\Users\Ana i Milica\Downloads\Firefox Setup Stub 42.0 (3).exe
2015-11-22 02:43 - 2015-11-22 02:44 - 00243904 _____ C:\Users\Ana i Milica\Downloads\Firefox Setup Stub 42.0 (2).exe
2015-11-22 02:32 - 2015-11-22 02:32 - 00243904 _____ C:\Users\Ana i Milica\Downloads\Firefox Setup Stub 42.0 (1).exe
2015-11-22 02:17 - 2015-11-22 02:18 - 00243904 _____ C:\Users\Ana i Milica\Downloads\Firefox Setup Stub 42.0.exe
2015-11-22 02:08 - 2015-11-22 02:09 - 01732096 _____ C:\Users\Ana i Milica\Downloads\AdwCleaner(1).exe
2015-11-22 01:56 - 2015-11-22 01:56 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-22 01:56 - 2015-11-22 01:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-22 01:55 - 2015-11-22 03:00 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-22 01:55 - 2015-11-22 02:31 - 00000928 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-22 01:54 - 2015-11-22 01:54 - 00000000 ____D C:\Users\Ana i Milica\AppData\Local\Deployment
2015-11-22 01:53 - 2015-11-22 01:53 - 00000000 ___SD C:\Users\Ana i Milica\AppData\LocalLow\Temp
2015-11-22 01:52 - 2015-11-22 01:52 - 00001413 _____ C:\Users\Ana i Milica\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2015-11-22 00:30 - 2015-11-22 00:27 - 00322760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-11-22 00:28 - 2015-11-22 00:28 - 00002075 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-11-22 00:28 - 2015-11-22 00:28 - 00000000 ____D C:\Users\Ana i Milica\AppData\Roaming\AVAST Software
2015-11-22 00:28 - 2015-11-22 00:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-11-22 00:28 - 2015-11-22 00:27 - 00435464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00209432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00117200 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00081168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-11-22 00:27 - 2015-11-22 00:27 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-11-22 00:27 - 2015-11-22 00:27 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-11-22 00:27 - 2015-11-22 00:27 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-11-22 00:26 - 2015-11-22 00:26 - 00000000 ____D C:\Program Files\AVAST Software
2015-11-22 00:24 - 2015-11-22 00:25 - 05084256 _____ (AVAST Software) C:\Users\Ana i Milica\Downloads\avast_free_antivirus_setup_online.exe
2015-11-21 23:05 - 2015-11-21 23:05 - 00001923 _____ C:\Users\Ana i Milica\Downloads\tdiradio.pls
2015-11-21 22:56 - 2015-11-21 22:56 - 00001931 _____ C:\Users\Ana i Milica\Downloads\chillout.pls
2015-11-21 20:16 - 2015-11-22 02:36 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-11-21 20:12 - 2015-11-21 20:12 - 00000000 ____D C:\Program Files\Common Files\Java
2015-11-16 23:57 - 2015-11-16 23:57 - 01732096 _____ C:\Users\Ana i Milica\Downloads\AdwCleaner.exe
2015-11-16 23:50 - 2015-11-16 23:50 - 00000004 _____ C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
2015-11-16 23:46 - 2015-11-16 23:47 - 01083648 _____ C:\Users\Ana i Milica\Downloads\File__4837_i1745461071_il85.exe
2015-11-12 20:55 - 2015-11-12 20:56 - 00148176 _____ C:\Windows\Minidump\111215-20046-01.dmp
2015-11-12 20:55 - 2015-11-12 20:55 - 00000000 ____D C:\Windows\Minidump
2015-11-09 02:16 - 2015-11-09 02:16 - 00016770 _____ C:\Users\Ana i Milica\Downloads\217374-5x03superpowers(1).zip
2015-11-07 21:08 - 2015-11-07 21:08 - 00014376 _____ C:\Users\Ana i Milica\Downloads\218124-5x05bettercallsaul.zip
2015-11-07 21:06 - 2015-11-07 21:07 - 00014358 _____ C:\Users\Ana i Milica\Downloads\217732-5x04whyisthisnightdifferent.zip
2015-11-07 21:05 - 2015-11-07 21:05 - 00016770 _____ C:\Users\Ana i Milica\Downloads\217374-5x03superpowers.zip
2015-11-07 00:53 - 2015-11-07 00:53 - 00015204 _____ C:\Users\Ana i Milica\Downloads\216811-homeland.s05e02.hdtv.x264fleet.zip
2015-11-07 00:52 - 2015-11-07 00:52 - 00015354 _____ C:\Users\Ana i Milica\Downloads\216449-5x01separationanxiety.zip
2015-10-29 19:39 - 2015-10-29 19:39 - 00032602 _____ C:\Users\Ana i Milica\Downloads\217478-everest.2015.hc.hdrip.xvid.ac3evo.zip
2015-10-29 19:23 - 2015-10-29 19:23 - 00039614 _____ C:\Users\Ana i Milica\Downloads\217855-blackmass2015readnfo480phdripxvidac3jedi.zip
2015-10-23 17:25 - 2015-10-23 17:25 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-11-22 03:21 - 2015-10-16 21:22 - 00000000 ____D C:\Users\Ana i Milica\AppData\Roaming\uTorrent
2015-11-22 03:09 - 2015-10-16 12:39 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-11-22 03:07 - 2015-09-26 02:47 - 00251666 _____ C:\Windows\WindowsUpdate.log
2015-11-22 02:36 - 2009-07-14 05:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-22 02:36 - 2009-07-14 05:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-22 02:31 - 2015-10-16 23:25 - 00000000 ____D C:\Users\Ana i Milica\AppData\LocalLow\uTorrent
2015-11-22 02:31 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-22 02:31 - 2009-07-14 05:39 - 00024606 _____ C:\Windows\setupact.log
2015-11-22 02:30 - 2015-09-25 18:20 - 00362156 _____ C:\Windows\PFRO.log
2015-11-22 02:11 - 2015-09-18 13:29 - 00000000 ____D C:\AdwCleaner
2015-11-22 01:57 - 2015-09-25 18:02 - 00000000 ____D C:\Users\Ana i Milica\AppData\Local\Google
2015-11-22 01:56 - 2015-09-25 18:02 - 00000000 ____D C:\Program Files\Google
2015-11-22 01:54 - 2015-09-27 19:41 - 00000000 ____D C:\Users\Ana i Milica\AppData\Local\Apps\2.0
2015-11-22 01:37 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Registration
2015-11-22 00:25 - 2015-09-25 17:59 - 00000000 ____D C:\ProgramData\AVAST Software
2015-11-21 20:16 - 2015-10-17 23:44 - 00780488 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-11-21 20:16 - 2015-10-17 23:44 - 00142536 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-11-21 20:13 - 2015-10-10 03:15 - 00000000 ____D C:\ProgramData\Oracle
2015-11-21 20:13 - 2015-10-10 03:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-21 20:13 - 2015-10-10 03:15 - 00000000 ____D C:\Program Files\Java
2015-11-21 20:12 - 2015-10-10 03:16 - 00000000 ____D C:\Users\Ana i Milica\.oracle_jre_usage
2015-11-21 20:11 - 2015-10-10 03:15 - 00095840 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-11-20 05:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-11-18 10:13 - 2015-09-25 17:59 - 00713888 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-24 07:00 - 2015-09-26 15:31 - 00000000 ____D C:\Users\Ana i Milica\Desktop\svastara
Some files in TEMP:
====================
C:\Users\Ana i Milica\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2015-11-21 07:27
==================== End of FRST.txt ============================
Dopuna: 22 Nov 2015 4:56
ovo je obrisano
[Link mogu videti samo ulogovani korisnici]
Dopuna: 22 Nov 2015 6:07
uspesno sredjeno
Dopuna: 22 Nov 2015 7:47
al me ya svaki slucaj ako moye neko da mi kaze kako da se resim ponovo reklama a da ne mrckam mozilu
|
|
|
|
|
|
|
Poslao: 22 Nov 2015 13:46
|
offline
- TwinHeadedEagle

- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
Pozdrav,
1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:
createrestorepoint:
closeprocesses:
emptytemp:
AlternateDataStreams: C:\Users\Ana i Milica\Downloads\File__4837_i1745461071_il85.exe:typelib
FF ExtraCheck: C:\Program Files\mozilla firefox\browser\defaults\preferences\prefs.js [2015-11-21] <==== ATTENTION (Points to *.cfg file)
CHR StartupUrls: Default -> "hxxps://www.google.rs/","hxxp://www.oursurfing.com/?type=hp&ts=1447714140&z=15a7bb579ad5ae041aafbedg0z2zcm1meg7z3g9z1e&from=amt&uid=126614527_135154_b4dd35db"
File: C:\Users\Ana i Milica\Downloads\File__4837_i1745461071_il85.exe
Folder: C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
Folder: C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
Folder: C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.
3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.
Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.
|
|
|
|
|
|
|
Poslao: 23 Nov 2015 04:33
|
offline
- milica.kostic

- Novi MyCity građanin
- Pridružio: 22 Nov 2015
- Poruke: 11
|
Napisano: 23 Nov 2015 4:20
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:22-11-2015
Ran by Ana i Milica (administrator) on ANAIMILICA-PC (23-11-2015 04:14:52)
Running from C:\Users\Ana i Milica\Desktop
Loaded Profiles: Ana i Milica (Available Profiles: Ana i Milica)
Platform: Microsoft Windows 7 Ultimate (X86) Language: English (United States)
Internet Explorer Version 8 (Default browser: Opera)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: [Link mogu videti samo ulogovani korisnici]
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Samsung Electronics Co., Ltd.) C:\Program Files\Samsung\Kies\KiesTrayAgent.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Samsung) C:\Program Files\Samsung\Kies\Kies.exe
() C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe
(BitTorrent Inc.) C:\Users\Ana i Milica\AppData\Roaming\uTorrent\uTorrent.exe
(BitTorrent Inc.) C:\Users\Ana i Milica\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
(BitTorrent Inc.) C:\Users\Ana i Milica\AppData\Roaming\uTorrent\updates\3.4.5_41202\utorrentie.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Mozilla Corporation) C:\Windows.old\Program Files\Mozilla Firefox\firefox.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [KiesTrayAgent] => C:\Program Files\Samsung\Kies\KiesTrayAgent.exe [3524536 2012-08-31] (Samsung Electronics Co., Ltd.)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [596528 2015-11-09] (Oracle Corporation)
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [7004376 2015-11-22] (AVAST Software)
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\...\Run: [KiesPreload] => C:\Program Files\Samsung\Kies\Kies.exe [964024 2012-08-31] (Samsung)
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\...\Run: [KiesAirMessage] => C:\Program Files\Samsung\Kies\KiesAirMessage.exe -startup
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\...\Run: [KiesPDLR] => C:\Program Files\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe [21432 2012-08-31] ()
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\...\Run: [uTorrent] => C:\Users\Ana i Milica\AppData\Roaming\uTorrent\uTorrent.exe [1822048 2015-10-16] (BitTorrent Inc.)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-11-22] (AVAST Software)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 192.168.1.1
Tcpip\..\Interfaces\{1F91FDE4-0130-4103-8E2D-31C954B70CEE}: [DhcpNameServer] 192.168.1.1 192.168.1.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
HKU\S-1-5-21-603640830-2954723428-3924596439-1001\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_66\bin\ssv.dll [2015-11-21] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-11-22] (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_66\bin\jp2ssv.dll [2015-11-21] (Oracle Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Ana i Milica\AppData\Roaming\Mozilla\Firefox\Profiles\mlb8i3w5.default-1448174294850
FF Homepage: about:home
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_14_0_0_179.dll [2015-11-22] ()
FF Plugin: @java.com/DTPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\dtplugin\npDeployJava1.dll [2015-11-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.66.2 -> C:\Program Files\Java\jre1.8.0_66\bin\plugin2\npjp2.dll [2015-11-21] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-22] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-11-22] (Google Inc.)
FF Extension: Adblock Plus - C:\Users\Ana i Milica\AppData\Roaming\Mozilla\Firefox\Profiles\mlb8i3w5.default-1448174294850\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-11-22]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-11-22]
Chrome:
=======
CHR Profile: C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google документи) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-11-22]
CHR Extension: (Avast Online Security) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-22]
CHR Extension: (Плаћања у Chrome веб-продавници) - C:\Users\Ana i Milica\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-11-22]
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-11-22]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [174416 2015-11-22] (AVAST Software)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24016 2015-11-22] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [81168 2015-11-22] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-11-22] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49776 2015-11-22] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [794952 2015-11-22] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [435464 2015-11-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [117200 2015-11-22] (AVAST Software)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [209432 2015-11-22] (AVAST Software)
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) valjda je tako
Dopuna: 23 Nov 2015 4:33
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-11-23 04:14 - 2015-11-23 04:17 - 00007954 _____ C:\Users\Ana i Milica\Desktop\FRST.txt
2015-11-23 04:13 - 2015-11-23 04:14 - 00000000 ____D C:\Users\Ana i Milica\Desktop\FRST-OlderVersion
2015-11-23 04:13 - 2015-11-23 04:13 - 00000820 _____ C:\Users\Ana i Milica\Desktop\fixlist.txt
2015-11-23 02:28 - 2015-11-23 02:29 - 01010872 _____ (Internet ) C:\Users\Ana i Milica\Downloads\everest-hrv-6388415.exe
2015-11-23 02:14 - 2015-11-23 02:14 - 00032602 _____ C:\Users\Ana i Milica\Downloads\217478-everest.2015.hc.hdrip.xvid.ac3evo(1).zip
2015-11-22 21:04 - 2015-11-22 21:04 - 00699568 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2015-11-22 21:04 - 2015-11-22 21:04 - 00071344 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2015-11-22 21:01 - 2015-11-22 21:01 - 00000000 ____D C:\Users\Ana i Milica\Downloads\fp_14.0.0.179_archive
2015-11-22 20:59 - 2015-11-22 21:00 - 57261272 _____ C:\Users\Ana i Milica\Downloads\fp_14.0.0.179_archive.zip
2015-11-22 19:52 - 2015-11-22 19:52 - 00000000 ____D C:\Users\Ana i Milica\Downloads\fp_10.3.183.50_archive
2015-11-22 19:48 - 2015-11-22 19:49 - 63778358 _____ C:\Users\Ana i Milica\Downloads\fp_10.3.183.50_archive.zip
2015-11-22 18:58 - 2015-11-22 18:59 - 22945579 _____ C:\Users\Ana i Milica\Downloads\fp9r280_plus_archive.zip
2015-11-22 18:36 - 2015-11-22 18:36 - 00386531 _____ C:\Users\Ana i Milica\Downloads\playerglobal14_0.swc
2015-11-22 18:36 - 2015-11-22 18:36 - 00380225 _____ C:\Users\Ana i Milica\Downloads\playerglobal12_0.swc
2015-11-22 18:36 - 2015-11-22 18:36 - 00378590 _____ C:\Users\Ana i Milica\Downloads\playerglobal11_9.swc
2015-11-22 17:26 - 2015-11-22 17:26 - 00001415 _____ C:\Users\Ana i Milica\Desktop\firefox - Shortcut.lnk
2015-11-22 14:25 - 2015-11-22 14:25 - 00001093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
2015-11-22 12:15 - 2015-11-22 12:15 - 00000000 ____D C:\Users\Ana i Milica\AppData\LocalLow\Adobe
2015-11-22 11:54 - 2015-11-22 11:54 - 00000000 ____D C:\ProgramData\McAfee
2015-11-22 09:02 - 2015-11-22 09:05 - 05597246 _____ C:\Users\Ana i Milica\Downloads\Adobe.Flash.Player.10.2.159.1.rar
2015-11-22 07:01 - 2015-11-22 07:35 - 00000000 ____D C:\ProgramData\48ed1695-d484-472b-bd42-582714ef1368
2015-11-22 05:55 - 2015-11-22 14:01 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-11-22 05:13 - 2015-11-22 00:27 - 00322760 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2015-11-22 04:47 - 2015-11-22 04:47 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-11-22 04:44 - 2015-11-22 04:46 - 22908888 _____ (Malwarebytes ) C:\Users\Ana i Milica\Downloads\mbam-setup-2.2.0.1024.exe
2015-11-22 03:36 - 2015-11-22 03:36 - 00018248 _____ C:\Users\Ana i Milica\Downloads\562044_2112176700_FRST.txt
2015-11-22 03:26 - 2015-11-22 03:29 - 00018527 _____ C:\Users\Ana i Milica\Downloads\Addition.txt
2015-11-22 03:24 - 2015-11-22 03:29 - 00018248 _____ C:\Users\Ana i Milica\Downloads\FRST.txt
2015-11-22 03:23 - 2015-11-23 04:14 - 00000000 ____D C:\FRST
2015-11-22 03:23 - 2015-11-23 04:13 - 01717248 _____ (Farbar) C:\Users\Ana i Milica\Desktop\FRST.exe
2015-11-22 02:08 - 2015-11-22 02:09 - 01732096 _____ C:\Users\Ana i Milica\Downloads\AdwCleaner(1).exe
2015-11-22 01:56 - 2015-11-22 01:56 - 00002203 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-11-22 01:56 - 2015-11-22 01:56 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-11-22 01:55 - 2015-11-23 04:00 - 00000932 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-11-22 01:55 - 2015-11-23 02:01 - 00000928 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-11-22 01:54 - 2015-11-22 01:54 - 00000000 ____D C:\Users\Ana i Milica\AppData\Local\Deployment
2015-11-22 01:53 - 2015-11-22 05:47 - 00000000 ___SD C:\Users\Ana i Milica\AppData\LocalLow\Temp
2015-11-22 00:28 - 2015-11-22 05:13 - 00002075 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-11-22 00:28 - 2015-11-22 00:28 - 00000000 ____D C:\Users\Ana i Milica\AppData\Roaming\AVAST Software
2015-11-22 00:28 - 2015-11-22 00:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-11-22 00:28 - 2015-11-22 00:27 - 00435464 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00209432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00117200 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00081168 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00049776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys
2015-11-22 00:28 - 2015-11-22 00:27 - 00024016 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys
2015-11-22 00:27 - 2015-11-22 00:27 - 00794952 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2015-11-22 00:27 - 2015-11-22 00:27 - 00081728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2015-11-22 00:27 - 2015-11-22 00:27 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr
2015-11-22 00:26 - 2015-11-22 00:26 - 00000000 ____D C:\Program Files\AVAST Software
2015-11-22 00:24 - 2015-11-22 00:25 - 05084256 _____ (AVAST Software) C:\Users\Ana i Milica\Downloads\avast_free_antivirus_setup_online.exe
2015-11-21 23:05 - 2015-11-21 23:05 - 00001923 _____ C:\Users\Ana i Milica\Downloads\tdiradio.pls
2015-11-21 22:56 - 2015-11-21 22:56 - 00001931 _____ C:\Users\Ana i Milica\Downloads\chillout.pls
2015-11-21 20:12 - 2015-11-21 20:12 - 00000000 ____D C:\Program Files\Common Files\Java
2015-11-16 23:57 - 2015-11-16 23:57 - 01732096 _____ C:\Users\Ana i Milica\Downloads\AdwCleaner.exe
2015-11-16 23:50 - 2015-11-16 23:50 - 00000004 _____ C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
2015-11-12 20:55 - 2015-11-12 20:56 - 00148176 _____ C:\Windows\Minidump\111215-20046-01.dmp
2015-11-12 20:55 - 2015-11-12 20:55 - 00000000 ____D C:\Windows\Minidump
2015-11-09 02:16 - 2015-11-09 02:16 - 00016770 _____ C:\Users\Ana i Milica\Downloads\217374-5x03superpowers(1).zip
2015-11-07 21:08 - 2015-11-07 21:08 - 00014376 _____ C:\Users\Ana i Milica\Downloads\218124-5x05bettercallsaul.zip
2015-11-07 21:06 - 2015-11-07 21:07 - 00014358 _____ C:\Users\Ana i Milica\Downloads\217732-5x04whyisthisnightdifferent.zip
2015-11-07 21:05 - 2015-11-07 21:05 - 00016770 _____ C:\Users\Ana i Milica\Downloads\217374-5x03superpowers.zip
2015-11-07 00:53 - 2015-11-07 00:53 - 00015204 _____ C:\Users\Ana i Milica\Downloads\216811-homeland.s05e02.hdtv.x264fleet.zip
2015-11-07 00:52 - 2015-11-07 00:52 - 00015354 _____ C:\Users\Ana i Milica\Downloads\216449-5x01separationanxiety.zip
2015-10-30 16:49 - 2015-10-30 16:49 - 00668784 _____ (McAfee, Inc.) C:\SecurityScanner.dll
2015-10-29 19:39 - 2015-10-29 19:39 - 00032602 _____ C:\Users\Ana i Milica\Downloads\217478-everest.2015.hc.hdrip.xvid.ac3evo.zip
2015-10-29 19:23 - 2015-10-29 19:23 - 00039614 _____ C:\Users\Ana i Milica\Downloads\217855-blackmass2015readnfo480phdripxvidac3jedi.zip
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-11-23 04:26 - 2015-10-16 21:22 - 00000000 ____D C:\Users\Ana i Milica\AppData\Roaming\uTorrent
2015-11-23 03:07 - 2015-09-26 02:47 - 00305312 _____ C:\Windows\WindowsUpdate.log
2015-11-23 02:31 - 2015-10-18 22:25 - 00000000 ____D C:\Users\Ana i Milica\AppData\Roaming\BSplayer
2015-11-22 21:23 - 2009-07-14 05:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-11-22 21:23 - 2009-07-14 05:34 - 00014016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-11-22 21:18 - 2015-10-16 23:25 - 00000000 ____D C:\Users\Ana i Milica\AppData\LocalLow\uTorrent
2015-11-22 21:18 - 2015-09-25 18:20 - 00410900 _____ C:\Windows\PFRO.log
2015-11-22 21:18 - 2009-07-14 05:53 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-11-22 21:18 - 2009-07-14 05:39 - 00025502 _____ C:\Windows\setupact.log
2015-11-22 19:02 - 2015-09-25 18:58 - 00000000 ____D C:\Users\Ana i Milica\AppData\Local\Adobe
2015-11-22 14:26 - 2015-10-01 02:34 - 00000000 ____D C:\Program Files\Opera
2015-11-22 12:17 - 2015-10-01 02:36 - 00000000 ____D C:\Users\Ana i Milica\AppData\Roaming\Opera Software
2015-11-22 12:17 - 2015-10-01 02:36 - 00000000 ____D C:\Users\Ana i Milica\AppData\Local\Opera Software
2015-11-22 12:15 - 2015-09-25 19:06 - 00000000 ____D C:\Users\Ana i Milica\AppData\Roaming\Adobe
2015-11-22 11:54 - 2015-08-27 12:31 - 00000030 _____ C:\AVScanner.ini
2015-11-22 05:58 - 2015-09-25 18:26 - 00000000 ____D C:\Users\Ana i Milica\AppData\Roaming\Mozilla
2015-11-22 05:08 - 2009-07-14 08:49 - 00000000 __SHD C:\Windows\BitLockerDiscoveryVolumeContents
2015-11-22 02:11 - 2015-09-18 13:29 - 00000000 ____D C:\AdwCleaner
2015-11-22 01:57 - 2015-09-25 18:02 - 00000000 ____D C:\Users\Ana i Milica\AppData\Local\Google
2015-11-22 01:56 - 2015-09-25 18:02 - 00000000 ____D C:\Program Files\Google
2015-11-22 01:54 - 2015-09-27 19:41 - 00000000 ____D C:\Users\Ana i Milica\AppData\Local\Apps\2.0
2015-11-22 01:37 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\Registration
2015-11-22 00:25 - 2015-09-25 17:59 - 00000000 ____D C:\ProgramData\AVAST Software
2015-11-21 20:13 - 2015-10-10 03:15 - 00000000 ____D C:\ProgramData\Oracle
2015-11-21 20:13 - 2015-10-10 03:15 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-11-21 20:13 - 2015-10-10 03:15 - 00000000 ____D C:\Program Files\Java
2015-11-21 20:12 - 2015-10-10 03:16 - 00000000 ____D C:\Users\Ana i Milica\.oracle_jre_usage
2015-11-21 20:11 - 2015-10-10 03:15 - 00095840 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2015-11-20 05:59 - 2009-07-14 03:37 - 00000000 ____D C:\Windows\system32\LogFiles
2015-11-18 10:13 - 2015-09-25 17:59 - 00713888 _____ C:\Windows\system32\PerfStringBackup.INI
2015-10-24 07:00 - 2015-09-26 15:31 - 00000000 ____D C:\Users\Ana i Milica\Desktop\svastara
Some files in TEMP:
====================
C:\Users\Ana i Milica\AppData\Local\Temp\sqlite3.dll
C:\Users\Ana i Milica\AppData\Local\Temp\{98D75699-55DB-45B7-B647-69FCBCFECDD4}.dll
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
|
|
|
|
|
|
|
Poslao: 23 Nov 2015 08:24
|
offline
- TwinHeadedEagle

- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
Ne, to nije ono što sam tražio. Pogledaj ponovo moju poruku i isprati sve korak po korak.
|
|
|
|
|
|
|
Poslao: 23 Nov 2015 09:44
|
offline
- milica.kostic

- Novi MyCity građanin
- Pridružio: 22 Nov 2015
- Poruke: 11
|
Fix result of Farbar Recovery Scan Tool (x86) Version:22-11-2015
Ran by Ana i Milica (2015-11-23 09:31:31) Run:2
Running from C:\Users\Ana i Milica\Desktop
Loaded Profiles: Ana i Milica (Available Profiles: Ana i Milica)
Boot Mode: Normal
==============================================
fixlist content:
*****************
createrestorepoint:
closeprocesses:
emptytemp:
AlternateDataStreams: C:\Users\Ana i Milica\Downloads\File__4837_i1745461071_il85.exe:typelib
FF ExtraCheck: C:\Program Files\mozilla firefox\browser\defaults\preferences\prefs.js [2015-11-21] <==== ATTENTION (Points to *.cfg file)
CHR StartupUrls: Default -> "hxxps://www.google.rs/","hxxp://www.oursurfing.com/?type=hp&ts=1447714140&z=15a7bb579ad5ae041aafbedg0z2zcm1meg7z3g9z1e&from=amt&uid=126614527_135154_b4dd35db"
File: C:\Users\Ana i Milica\Downloads\File__4837_i1745461071_il85.exe
Folder: C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7
Folder: C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
Folder: C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
*****************
Restore point was successfully created.
Processes closed successfully.
"C:\Users\Ana i Milica\Downloads\File__4837_i1745461071_il85.exe" => ":typelib" ADS not found.
"C:\Program Files\mozilla firefox\browser\defaults\preferences\prefs.js" => not found.
Chrome StartupUrls => not found.
========================= File: C:\Users\Ana i Milica\Downloads\File__4837_i1745461071_il85.exe ========================
"C:\Users\Ana i Milica\Downloads\File__4837_i1745461071_il85.exe" => not found.
====== End of File: ======
========================= Folder: C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7 ========================
C:\Windows\system32\029B560A371F4E00AB32838EBC01B9E7 => File
====== End of Folder: ======
========================= Folder: C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 ========================
C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 => File
====== End of Folder: ======
========================= Folder: C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 ========================
C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 => File
====== End of Folder: ======
EmptyTemp: => 715.8 MB temporary data Removed.
The system needed a reboot.
==== End of Fixlog 09:37:27 ====
|
|
|
|
|
|
|
|
|
Poslao: 23 Nov 2015 10:12
|
offline
- milica.kostic

- Novi MyCity građanin
- Pridružio: 22 Nov 2015
- Poruke: 11
|
nema vise reklamee jess... HVALA punooooo .... samo jos jedno pitanje koji je adobe najbolji za mozilu posto mng koci a vise ne smem da preuzimam svasta da ne pokupim opet
|
|
|
|
|
|
|
|
|
|
|
Poslao: 23 Nov 2015 11:35
|
offline
- TwinHeadedEagle

- Anti Malware Fighter
Rank 2
- Pridružio: 09 Avg 2011
- Poruke: 15879
- Gde živiš: Beograd
|
Ne znam kako da ti pomognem. Otvori temu u Windows potforumu i tamo ce ti neko dati misljenje. Ovde resavamo samo probleme uzrokovane malverom.
|
|
|
|
|
|