not encrypted page google chrome

not encrypted page google chrome

offline
  • Pridružio: 11 Avg 2008
  • Poruke: 65
  • Gde živiš: Vancouver

Unapred veoma zahvalan.

Pre dan dva moja zena je slucajno instalirala tkz. mojbuk toolbar ili mb2toolbar.toolbar.fm/

Onda je pokusala da ga izbrise tako sto ga je pokrenula uninstaler u control panel-u. Nakon toga svaka stranica na google chrome je bila (po google objasnjenju) not encrypted, not been verified.

Posle toga sam resetovao kompjuter nekoliko puta da bi konacno pokrenuo system recovery i vratio kompjuter na starije stanje od pre 3-4 dana kada je napravljen zadnji restor point u sistemu. Nakon toga sam instalirao novi google chrome medjutim opet mi svaka web stranica izgleda bez (poznatog kljuca-secure link izgleda- zeleni kljuc).

Zabrinut sam zbog ovoga jer imam dosta privatnih lozinki i podataka koje koristim svakodnevno kada idem na svoje sajtove i email adrese. Neznam dali je ovaj program jos uvek prisuta i dali on moze da ugrozi bezbednost mog racunara.

Molim vas pomozite, udelite bilo koji savet.


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.7600.16385 BrowserJavaVersion: 10.5.1
Run by Mack-Ivana at 20:42:47 on 2012-08-28
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.3579.2662 [GMT -7:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\Dwm.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Windows\system32\WUDFHost.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\taskeng.exe
C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.ca/
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: H - No File
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GR469A~1.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\oracle\javafx 2.1 runtime\bin\ssv.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2ssv.dll
mRun: [APSDaemon] "c:\program files\common files\apple\apple application support\APSDaemon.exe"
mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe"
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
TCP: DhcpNameServer = 192.168.1.254 75.153.176.9
TCP: Interfaces\{A2136A38-A6D7-493F-B36A-48256BDEEAEB} : DhcpNameServer = 192.168.1.254 75.153.176.9
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GRA32A~1.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GR469A~1.DLL
.
============= SERVICES / DRIVERS ===============
.
R1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\drivers\vwififlt.sys [2009-7-13 48128]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2012-4-3 63928]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-6-30 176128]
R2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files\hewlett-packard\shared\HPDrvMntSvc.exe [2011-3-28 94264]
R2 RtVOsdService;RtVOsdService Installer;c:\program files\realtek\rtvosd\RtVOsdService.exe [2010-6-17 315392]
R3 amdkmdag;amdkmdag;c:\windows\system32\drivers\atikmdag.sys [2010-6-30 5552640]
R3 amdkmdap;amdkmdap;c:\windows\system32\drivers\atikmpag.sys [2010-6-30 176640]
R3 netr28;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\drivers\netr28.sys [2012-6-24 1174080]
R3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;c:\windows\system32\drivers\RtsUStor.sys [2012-6-24 174592]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-6-10 139776]
R3 usbfilter;AMD USB Filter Driver;c:\windows\system32\drivers\usbfilter.sys [2012-6-24 30392]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-6-7 160944]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
.
=============== Created Last 30 ================
.
2012-08-28 04:14:09 -------- d-----w- c:\users\mack-ivana\appdata\local\ElevatedDiagnostics
2012-08-22 14:34:57 26600 ----a-w- c:\windows\system32\drivers\GEARAspiWDM.sys
2012-08-22 14:34:57 107368 ----a-w- c:\windows\system32\GEARAspi.dll
2012-08-22 14:34:05 -------- d-----w- c:\program files\iTunes
2012-08-22 14:34:05 -------- d-----w- c:\program files\iPod
2012-08-22 14:33:10 -------- d-----w- c:\program files\Bonjour
2012-08-19 05:13:05 -------- d-----w- c:\users\mack-ivana\appdata\roaming\InfraRecorder
2012-08-18 07:10:54 94208 ----a-w- c:\windows\system32\QuickTimeVR.qtx
2012-08-18 07:10:54 69632 ----a-w- c:\windows\system32\QuickTime.qts
2012-08-18 07:10:54 180224 ----a-w- c:\windows\system32\QTCF.dll
2012-08-18 07:10:51 -------- d-----w- c:\program files\QuickTime Alternative
.
==================== Find3M ====================
.
2012-06-24 09:07:37 0 ----a-w- c:\windows\ativpsrm.bin
2012-06-18 18:00:00 79872 ----a-w- c:\windows\system32\ff_vfw.dll
2012-06-09 17:21:56 178688 ----a-w- c:\windows\system32\unrar.dll
2012-06-02 22:19:42 171904 ----a-w- c:\windows\system32\wuwebv.dll
2012-06-02 22:12:32 2422272 ----a-w- c:\windows\system32\wucltux.dll
2012-06-02 22:12:20 33792 ----a-w- c:\windows\system32\wuapp.exe
2012-06-02 22:12:13 88576 ----a-w- c:\windows\system32\wudriver.dll
.
============= FINISH: 20:43:16.86 ===============


mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

offline
  • Fil  Male
  • Legendarni građanin
  • Pridružio: 11 Jun 2009
  • Poruke: 16586

Pozdrav, maki170582



Arrow Na računaru nemaš instaliran antivirus. Instaliraj antivirusni program. Imaš dosta kvalitetnih besplatnih rešenja, kao što su Avira, Avast, Microsoft Security Essentials, i drugi.


Arrow Nisi dobro ispratio uputstvo za otvaranje teme; naime, potrebno je da ponovo postaviš GMER 1 izveštaj.


Arrow Preuzmi program OTL sa donjeg linka na Desktop:

OTL download
Klikni na dati link i u prozoru koji se otvori, klikni na dugme Save;
kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati datoteku, odaberi Desktop i klikni na dugme Save.

Dvoklikom pokreni OTL;

klikni na dugme Run Scan;

po završetku skeniranja, izveštaj će se otvoriti u programu Notepad (napomena: izveštaj će automatski biti sačuvan na Desktopu kao OTL.Txt) .


Priloži izveštaj OTL.Txt uz poruku korišćenjem opcije Prikači fajl.


Arrow Takođe, postavi screenshot tvog browsera, tako da se vidi problem koji opisuješ.
Uputstvo za pravljenje screenshot-a: LINK

offline
  • Pridružio: 11 Avg 2008
  • Poruke: 65
  • Gde živiš: Vancouver

Hvala ThePhilosopher


OTL logfile created on: 8/29/2012 10:24:37 PM - Run 1
OTL by OldTimer - Version 3.2.59.1 Folder = C:\Users\Mack-Ivana\Desktop
Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000409 | Country: United States | Language: ENU | Date Format: M/d/yyyy

3.50 Gb Total Physical Memory | 2.42 Gb Available Physical Memory | 69.26% Memory free
6.99 Gb Paging File | 5.84 Gb Available in Paging File | 83.52% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 146.48 Gb Total Space | 28.37 Gb Free Space | 19.36% Space Free | Partition Type: NTFS
Drive D: | 148.72 Gb Total Space | 6.72 Gb Free Space | 4.52% Space Free | Partition Type: NTFS
Drive F: | 999.61 Mb Total Space | 861.22 Mb Free Space | 86.16% Space Free | Partition Type: FAT

Computer Name: MACK-IVANA-PC | User Name: Mack-Ivana | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/08/29 21:44:51 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Mack-Ivana\Desktop\OTL.exe
PRC - [2012/04/03 22:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
PRC - [2011/03/28 17:07:50 | 000,094,264 | ---- | M] (Hewlett-Packard Company) -- C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe
PRC - [2010/06/30 21:19:28 | 000,372,736 | ---- | M] (AMD) -- C:\Windows\System32\atieclxx.exe
PRC - [2010/06/30 21:19:04 | 000,176,128 | ---- | M] (AMD) -- C:\Windows\System32\atiesrxx.exe
PRC - [2010/06/17 16:31:56 | 000,884,736 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Program Files\Realtek\RtVOsd\RtVOsd.exe
PRC - [2010/06/17 15:54:20 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) -- C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe
PRC - [2009/07/13 18:14:42 | 000,049,152 | ---- | M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe
PRC - [2009/07/13 18:14:20 | 002,613,248 | ---- | M] (Microsoft Corporation) -- C:\Windows\explorer.exe
PRC - [2009/03/19 11:44:50 | 000,731,840 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009/03/19 11:44:28 | 002,029,640 | ---- | M] (ESET) -- C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe


========== Modules (No Company Name) ==========

MOD - [2012/08/17 15:28:55 | 000,442,392 | ---- | M] () -- C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\ppgooglenaclpluginchrome.dll
MOD - [2012/08/17 15:28:54 | 012,236,824 | ---- | M] () -- C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\PepperFlash\pepflashplayer.dll
MOD - [2012/08/17 15:28:52 | 003,997,720 | ---- | M] () -- C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\pdf.dll
MOD - [2012/08/17 15:27:36 | 000,526,872 | ---- | M] () -- C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\libglesv2.dll
MOD - [2012/08/17 15:27:35 | 000,104,984 | ---- | M] () -- C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\libegl.dll
MOD - [2012/08/17 15:27:23 | 000,144,424 | ---- | M] () -- C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\avutil-51.dll
MOD - [2012/08/17 15:27:22 | 000,266,792 | ---- | M] () -- C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\avformat-54.dll
MOD - [2012/08/17 15:27:21 | 002,480,680 | ---- | M] () -- C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\avcodec-54.dll
MOD - [2012/05/30 20:06:48 | 000,087,912 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
MOD - [2012/05/30 20:06:30 | 001,242,512 | ---- | M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
MOD - [2010/03/15 11:28:22 | 000,141,824 | ---- | M] () -- C:\Program Files\WinRAR\RarExt.dll


========== Services (SafeList) ==========

SRV - [2012/06/07 19:12:14 | 000,160,944 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/04/03 22:53:50 | 000,063,928 | ---- | M] (Adobe Systems Incorporated) [Auto | Running] -- C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice)
SRV - [2011/03/28 17:07:50 | 000,094,264 | ---- | M] (Hewlett-Packard Company) [Auto | Running] -- C:\Program Files\Hewlett-Packard\Shared\HPDrvMntSvc.exe -- (HPDrvMntSvc.exe)
SRV - [2010/06/30 21:19:04 | 000,176,128 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\System32\atiesrxx.exe -- (AMD External Events Utility)
SRV - [2010/06/17 15:54:20 | 000,315,392 | ---- | M] (Realtek Semiconductor Corp.) [Auto | Running] -- C:\Program Files\Realtek\RtVOsd\RtVOsdService.exe -- (RtVOsdService)
SRV - [2009/07/13 18:16:13 | 000,025,088 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc)
SRV - [2009/07/13 18:16:12 | 001,004,544 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc)
SRV - [2009/07/13 18:15:41 | 000,680,960 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend)
SRV - [2009/03/19 11:48:08 | 000,020,680 | ---- | M] (ESET) [On_Demand | Stopped] -- C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe -- (EhttpSrv)
SRV - [2009/03/19 11:44:50 | 000,731,840 | ---- | M] (ESET) [Auto | Running] -- C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe -- (ekrn)


========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- system32\drivers\RTKVHDA.sys -- (IntcAzAudAddService)
DRV - File not found [Kernel | On_Demand | Unknown] -- C:\Users\MACK-I~1\AppData\Local\Temp\awtyakob.sys -- (awtyakob)
DRV - [2010/06/30 21:50:34 | 005,552,640 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (amdkmdag)
DRV - [2010/06/30 20:46:00 | 000,176,640 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\atikmpag.sys -- (amdkmdap)
DRV - [2010/05/06 21:21:42 | 000,108,560 | ---- | M] (ATI Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\AtiHdmi.sys -- (AtiHdmiService)
DRV - [2010/03/10 14:03:50 | 000,014,392 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\AtiPcie.sys -- (AtiPcie)
DRV - [2009/12/22 07:56:36 | 000,030,392 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\usbfilter.sys -- (usbfilter)
DRV - [2009/09/23 09:40:48 | 000,174,592 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\Windows\System32\drivers\RtsUStor.sys -- (RSUSBSTOR)
DRV - [2009/09/10 20:00:12 | 000,035,840 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb)
DRV - [2009/07/13 18:19:10 | 000,175,824 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus)
DRV - [2009/07/13 18:19:10 | 000,040,896 | ---- | M] (Microsoft Corporation) [Kernel | Boot | Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt)
DRV - [2009/07/13 18:19:10 | 000,028,224 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc)
DRV - [2009/07/13 16:28:47 | 000,005,632 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap)
DRV - [2009/07/13 16:28:45 | 000,017,920 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID)
DRV - [2009/03/19 11:45:40 | 000,093,312 | ---- | M] (ESET) [Kernel | Auto | Running] -- C:\Windows\System32\drivers\epfwwfpr.sys -- (epfwwfpr)
DRV - [2009/03/19 11:44:34 | 000,107,256 | ---- | M] (ESET) [Kernel | System | Running] -- C:\Windows\System32\drivers\ehdrv.sys -- (ehdrv)
DRV - [2009/03/19 11:41:38 | 000,113,960 | ---- | M] (ESET) [File_System | On_Demand | Running] -- C:\Windows\System32\drivers\eamon.sys -- (eamon)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = google.ca/
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = ca.msn.com/?rd=1&ucc=CA&dcc=CA&opt=0&ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-us
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = C0 B4 7A 5D D4 84 CD 01 [binary data]
IE - HKCU\..\URLSearchHook: {687578b9-7132-4a7a-80e4-30ee31099e03} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3072253
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Mack-Ivana\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Mack-Ivana\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\eplgTb@eset.com: C:\Program Files\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2012/08/29 21:48:22 | 000,000,000 | ---D | M]

[2012/06/30 21:30:39 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Mack-Ivana\AppData\Roaming\Mozilla\Firefox\extensions
[2012/06/30 21:30:40 | 000,000,000 | ---D | M] (uTorrentControl2 Community Toolbar) -- C:\Users\Mack-Ivana\AppData\Roaming\Mozilla\Firefox\extensions\{687578b9-7132-4a7a-80e4-30ee31099e03}

========== Chrome ==========

CHR - homepage: google.com/
CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms},
CHR - homepage: google.com/
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\PepperFlash\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\gcswf32.dll
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\21.0.1180.83\pdf.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\plugins\npqtplugin.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\plugins\npqtplugin2.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\plugins\npqtplugin3.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\plugins\npqtplugin4.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\plugins\npqtplugin5.dll
CHR - plugin: QuickTime Plug-in 7.6.6 (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Chrome\Application\plugins\npqtplugin6.dll
CHR - plugin: Java(TM) Platform SE 7 U5 (Enabled) = C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll
CHR - plugin: Java Deployment Toolkit 7.0.50.255 (Enabled) = C:\Windows\system32\npDeployJava1.dll
CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Mack-Ivana\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files\Microsoft Silverlight\5.1.10411.0\npctrl.dll

O1 HOSTS File: ([2009/06/10 14:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [APSDaemon] C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.254 75.153.176.9
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A2136A38-A6D7-493F-B36A-48256BDEEAEB}: DhcpNameServer = 192.168.1.254 75.153.176.9
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 14:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/08/29 21:48:21 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ESET
[2012/08/29 21:48:21 | 000,000,000 | ---D | C] -- C:\ProgramData\ESET
[2012/08/29 21:48:21 | 000,000,000 | ---D | C] -- C:\Program Files\ESET
[2012/08/29 21:44:53 | 000,598,528 | ---- | C] (OldTimer Tools) -- C:\Users\Mack-Ivana\Desktop\OTL.exe
[2012/08/28 20:39:50 | 000,607,260 | R--- | C] (Swearware) -- C:\Users\Mack-Ivana\Desktop\dds.scr
[2012/08/27 21:14:09 | 000,000,000 | ---D | C] -- C:\Users\Mack-Ivana\AppData\Local\ElevatedDiagnostics
[2012/08/23 21:30:28 | 000,000,000 | ---D | C] -- C:\Users\Mack-Ivana\Desktop\Sener project
[2012/08/22 07:35:01 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
[2012/08/22 07:34:57 | 000,107,368 | ---- | C] (GEAR Software Inc.) -- C:\Windows\System32\GEARAspi.dll
[2012/08/22 07:34:05 | 000,000,000 | ---D | C] -- C:\Program Files\iTunes
[2012/08/22 07:34:05 | 000,000,000 | ---D | C] -- C:\Program Files\iPod
[2012/08/22 07:33:10 | 000,000,000 | ---D | C] -- C:\Program Files\Bonjour
[2012/08/20 22:08:33 | 000,000,000 | ---D | C] -- C:\Users\Mack-Ivana\Desktop\za face-slike Avgust 2012
[2012/08/18 22:13:05 | 000,000,000 | ---D | C] -- C:\Users\Mack-Ivana\AppData\Roaming\InfraRecorder
[2012/08/18 00:10:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime Alternative
[2012/08/18 00:10:54 | 000,180,224 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QTCF.dll
[2012/08/18 00:10:54 | 000,094,208 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTimeVR.qtx
[2012/08/18 00:10:54 | 000,069,632 | ---- | C] (Apple Inc.) -- C:\Windows\System32\QuickTime.qts
[2012/08/18 00:10:51 | 000,000,000 | ---D | C] -- C:\Program Files\QuickTime Alternative
[2012/08/12 22:04:48 | 000,000,000 | ---D | C] -- C:\Users\Mack-Ivana\Desktop\slike za mamu i tatu
[2012/08/12 09:05:25 | 000,000,000 | ---D | C] -- C:\Users\Mack-Ivana\Desktop\MAKI-DATA

========== Files - Modified Within 30 Days ==========

[2012/08/29 22:03:42 | 000,016,944 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/08/29 22:03:42 | 000,016,944 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/08/29 21:54:52 | 000,615,360 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/08/29 21:54:52 | 000,103,702 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/08/29 21:52:44 | 000,211,197 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\screenshot of desktop.jpg
[2012/08/29 21:49:58 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/08/29 21:49:54 | 2814,562,304 | -HS- | M] () -- C:\hiberfil.sys
[2012/08/29 21:44:51 | 000,598,528 | ---- | M] (OldTimer Tools) -- C:\Users\Mack-Ivana\Desktop\OTL.exe
[2012/08/29 18:45:50 | 000,000,928 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1941926627-3547626360-3198687000-1000UA.job
[2012/08/29 18:19:16 | 004,789,729 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\London Park (Without Guitars) (1).mp3
[2012/08/28 21:41:00 | 000,000,876 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1941926627-3547626360-3198687000-1000Core.job
[2012/08/28 20:40:27 | 000,302,592 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\10t1g1dy.exe
[2012/08/28 20:39:49 | 000,607,260 | R--- | M] (Swearware) -- C:\Users\Mack-Ivana\Desktop\dds.scr
[2012/08/28 14:30:42 | 000,149,790 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\zone6_family.pdf
[2012/08/27 00:03:41 | 000,000,009 | ---- | M] () -- C:\END
[2012/08/26 12:34:05 | 004,789,729 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\London Park (Without Guitars).mp3
[2012/08/26 12:34:04 | 004,789,729 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\London Park (With Guitars).mp3
[2012/08/22 07:35:01 | 000,001,767 | ---- | M] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/08/19 10:29:59 | 000,187,965 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\P8040001.JPG
[2012/08/19 10:29:56 | 000,196,542 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\P8040003.JPG
[2012/08/19 10:29:51 | 000,177,992 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\P8040002.JPG
[2012/08/07 01:38:55 | 212,857,814 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\ASIA America Live in the USA.flv
[2012/08/02 23:04:39 | 021,451,767 | ---- | M] () -- C:\Users\Mack-Ivana\Desktop\Steve Lukather guitar lesson.flv

========== Files Created - No Company Name ==========

[2012/08/29 21:51:56 | 000,211,197 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\screenshot of desktop.jpg
[2012/08/29 18:19:12 | 004,789,729 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\London Park (Without Guitars) (1).mp3
[2012/08/29 00:29:08 | 471,885,824 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\Ljubav u zaledju 060.avi
[2012/08/28 20:40:26 | 000,302,592 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\10t1g1dy.exe
[2012/08/28 14:30:41 | 000,149,790 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\zone6_family.pdf
[2012/08/26 12:34:00 | 004,789,729 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\London Park (Without Guitars).mp3
[2012/08/26 12:33:59 | 004,789,729 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\London Park (With Guitars).mp3
[2012/08/22 07:35:01 | 000,001,767 | ---- | C] () -- C:\Users\Public\Desktop\iTunes.lnk
[2012/08/19 10:29:09 | 000,196,542 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\P8040003.JPG
[2012/08/19 10:29:09 | 000,187,965 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\P8040001.JPG
[2012/08/19 10:29:09 | 000,177,992 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\P8040002.JPG
[2012/08/07 00:34:32 | 212,857,814 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\ASIA America Live in the USA.flv
[2012/08/02 22:58:28 | 021,451,767 | ---- | C] () -- C:\Users\Mack-Ivana\Desktop\Steve Lukather guitar lesson.flv
[2012/06/24 04:36:22 | 000,650,752 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
[2012/06/24 04:36:22 | 000,243,200 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
[2012/06/24 04:36:18 | 000,079,872 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll
[2012/06/24 04:10:16 | 000,178,688 | ---- | C] () -- C:\Windows\System32\unrar.dll
[2012/06/24 02:26:30 | 000,014,051 | ---- | C] () -- C:\Windows\System32\RaCoInst.dat
[2012/06/24 02:07:37 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2012/06/24 01:52:20 | 000,000,712 | ---- | C] () -- C:\Windows\System32\drivers\RTEQEX0.dat
[2012/06/24 01:52:20 | 000,000,176 | ---- | C] () -- C:\Windows\System32\drivers\RTHDAEQ0.dat

< End of report >


mycity.rs/must-login.png

mycity.rs/must-login.png


mycity.rs/must-login.png

offline
  • Fil  Male
  • Legendarni građanin
  • Pridružio: 11 Jun 2009
  • Poruke: 16586

Pozdrav, pregledao sam logove i konstatovao da na računaru nema aktivne infekcije.


Arrow Pokreni opet OTL i klikni na Cleanup.



Preporučujem da uvažiš sledeće preporuke:


Arrow Imaš sistem koji nije ažuriran. Preporučujem da instaliraš Service Pack 1, koji će doprineti boljoj sigurnosti i stabilnosti operativnog sistema. Potrebno je da klikneš na sledeći link:
http://download.microsoft.com/download/0/A/F/0AFB5.....32-X86.exe
... i preuzmeš Service Pack 1 za tvoj računar. Nakon što preuzmeš ovu datoteku, pokreni je dvostrukim klikom i prati dalja uputstva na ekranu.


Arrow Da li je instaliran legalan NOD32? Ukoliko to nije slučaj, preporučujem instaliranje besplatne alternative (kao što sam preporučio u prethodnoj poruci).
Ne preporučujem upotrebu piratskih programa.


Idea Preporučujem ti da koristiš program MCShield za zaštitu USB memorijskih uređaja.

Program možeš preuzeti sa OVOG linka. Nakon instalacije programa, priključi USB memorijske uređaje, i oni će biti skenirani. Na kraju skeniranja ćeš dobiti izveštaj da je uređaj čist ili obaveštenje o uklonjenom malware-u.


Idea Takođe, poseti ovu temu da vidiš da li ti je pretraživač ranjiv i instaliraš ažurirane komponente:
http://www.mycity.rs/Propusti-i-azuriranja/Testira.....anjiv.html



Idea Malo informacija o tvom problemu:

- ne podržava svaki Web sajt SSL (Secure Socket Layer), tako da je normalno da Chrome kod nekih sajtova (kao što je MyCity) ne prikazuje "zeleni katanac". Više informacija o tome možeš naći ovde: LINK

- Ukoliko se problem dešava sa svim sajtovima, preporučujem instaliranje sledećeg dodatka za Chrome:
https://chrome.google.com/webstore/detail/kbkgnojednemejclpggpnhlhlhkmfidi

Ovaj dodatak će da forsira upotrebu SSL konekcije na nekom sajtu, koji se nalazi u njegovoj listi. Facebook i Twitter su podrazumevano ubačeni u listu.

- Za sva dalja pitanja oko Chrome-a, otvori temu u sledećem poforumu:
http://www.mycity.rs/Web-browseri/

offline
  • Pridružio: 11 Avg 2008
  • Poruke: 65
  • Gde živiš: Vancouver

Jos jednom hvala ThePhilosopher

Ko je trenutno na forumu
 

Ukupno su 844 korisnika na forumu :: 32 registrovanih, 3 sakrivenih i 809 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., Amigdala, bigfoot, bojank, Boris90, DonRumataEstorski, DPera, esx66, jackreacher011011, Jahorina, Još malo pa deda, Krvava Devetka, Kubovac, Lucije Kvint, MB120mm, mercedesamg, mikrimaus, milutin134, mrav pesadinac, nuke92, ozzy, pein, rajkoplje, sap, stegonosa, Tvrtko I, vathra, Vlad000, vladulns, voja64, wizzardone, zbazin