upsss

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Isto kao i na slikama koje sam gore postavio ranije

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 02-12-2016
Ran by Mx2qi7 (administrator) on KIKICOMI (03-12-2016 17:37:20)
Running from C:\Users\Mx2qi7\Desktop\New folder (2)
Loaded Profiles: Mx2qi7 (Available Profiles: Mx2qi7)
Platform: Windows 8.1 Pro (Update) (X64) Language: English (United States)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(ABBYY InfoPoisk LLC) C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Windows (R) Win 7 DDK provider) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\AdminService.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.31.5\GoogleCrashHandler64.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McTCB0B.tmp
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Qualcomm®Atheros®) C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe
(Dell Inc.) C:\Program Files\Dell\QuickSet\quickset.exe
() C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\ActivateDesktop.exe
(Zemana Ltd.) C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
(Power Software Ltd) C:\Program Files (x86)\PowerISO\PWRISOVM.EXE
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(Microsoft Corporation) C:\Windows\System32\msiexec.exe
(McAfee, Inc.) C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Whitelisted) ====================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [QuickSet] => C:\Program Files\Dell\QuickSet\QuickSet.exe [5762408 2013-03-05] (Dell Inc.)
HKLM\...\Run: [ZAM] => C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [13915888 2016-11-22] (Zemana Ltd.)
HKLM-x32\...\Run: [Bonus.SSR.FR11] => C:\Program Files (x86)\ABBYY FineReader 11\Bonus.ScreenshotReader.exe [1364496 2013-06-28] (ABBYY Production LLC)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [9080768 2016-11-17] (AVAST Software)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files (x86)\PowerISO\PWRISOVM.EXE [366904 2015-07-23] (Power Software Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [594992 2016-01-29] (Oracle Corporation)
HKLM-x32\...\Run: [EaseUS Cleanup] => "C:\Program Files (x86)\EaseUS\EaseUS Partition Master 11.9\bin\CleanUpUI.exe" 10 300
HKLM\...\Policies\Explorer\Run: [BtvStack] => C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\BtvStack.exe [132736 2013-09-04] (Qualcomm®Atheros®)
HKU\S-1-5-21-2226422450-3240431047-2392391502-1001\...\Run: [uTorrent] => C:\Users\Mx2qi7\AppData\Roaming\uTorrent\uTorrent.exe [1693024 2015-08-01] (BitTorrent Inc.)
HKU\S-1-5-21-2226422450-3240431047-2392391502-1001\...\Run: [DellSystemDetect] => C:\Users\Mx2qi7\AppData\Local\Apps\2.0\O6PXON18.5NK\7WJ3YK4K.BRR\dell..tion_e30b47f5d4a30e9e_0005.000d_4ab2a66cfade09be\DellSystemDetect.exe [276776 2015-01-30] (Dell)
HKU\S-1-5-21-2226422450-3240431047-2392391502-1001\...\MountPoints2: {40105b80-a8bf-11e4-824b-806e6f6e6963} - "E:\autorun.exe"
Lsa: [Notification Packages] scecli C:\Program Files\TrueKey\McAfeeTrueKeyPasswordFilter
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2016-08-30] (AVAST Software)
Startup: C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OneNote 2010 Screen Clipper and Launcher.lnk [2015-03-25]
ShortcutTarget: OneNote 2010 Screen Clipper and Launcher.lnk -> C:\Program Files (x86)\Microsoft Office\Office14\ONENOTEM.EXE (Microsoft Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 0.0.0.0
Tcpip\..\Interfaces\{1C92EB8A-175B-4E9D-975A-480752D00D66}: [DhcpNameServer] 192.168.1.1 0.0.0.0

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page =
HKU\S-1-5-21-2226422450-3240431047-2392391502-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/?ocid=iehp
SearchScopes: HKLM -> DefaultScope {425ED333-6083-428a-92C9-0CFC28B9D1BF} URL =
SearchScopes: HKLM-x32 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKLM-x32 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2226422450-3240431047-2392391502-1001 -> DefaultScope {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2226422450-3240431047-2392391502-1001 -> {012E1000-F331-11DB-8314-0800200C9A66} URL = hxxp://www.google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2226422450-3240431047-2392391502-1001 -> {8C31F27B-BE8A-4e4b-A478-17760AF1F5D9} URL = hxxps://search.avast.com/AV772/search/web?q={searchTerms}
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2016-10-26] (AVAST Software)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: True Key Helper -> {0F4B8786-5502-4803-8EBC-F652A1153BB6} -> C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-11-02] (Intel Security)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office14\GROOVEEX.DLL [2010-03-25] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\ssv.dll [2016-02-26] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2016-10-26] (AVAST Software)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\jp2ssv.dll [2016-02-26] (Oracle Corporation)
Toolbar: HKLM-x32 - True Key - {4BAAC1B8-0800-42C9-8FA6-08B211F356B8} - C:\Program Files\Intel Security\True Key\MSIE\truekey_ie.dll [2016-11-02] (Intel Security)

FireFox:
========
FF DefaultProfile: 3jqdq9h0.default
FF ProfilePath: C:\Users\Mx2qi7\AppData\Roaming\Mozilla\Firefox\Profiles\3jqdq9h0.default [2016-12-03]
FF DefaultSearchUrl: Mozilla\Firefox\Profiles\3jqdq9h0.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF SearchEngineOrder.1: Mozilla\Firefox\Profiles\3jqdq9h0.default -> Avast Search
FF SelectedSearchEngine: Mozilla\Firefox\Profiles\3jqdq9h0.default -> Avast Search
FF Keyword.URL: Mozilla\Firefox\Profiles\3jqdq9h0.default -> hxxps://search.avast.com/AV772/search/web?q={searchTerms}
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: (Avast Online Security) - C:\Program Files\AVAST Software\Avast\WebRep\FF [2016-08-30]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Extension: (Avast SafePrice) - C:\Program Files\AVAST Software\Avast\SafePrice\FF [2016-08-30]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - C:\Program Files\AVAST Software\Avast\SafePrice\FF
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_23_0_0_207.dll [2016-11-08] ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_23_0_0_207.dll [2016-11-08] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\dtplugin\npDeployJava1.dll [2016-02-26] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.73.2 -> C:\Program Files (x86)\Java\jre1.8.0_73\bin\plugin2\npjp2.dll [2016-02-26] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-27] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-11-27] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2016-10-01] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2226422450-3240431047-2392391502-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\Mx2qi7\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [No File]

Chrome:
=======
CHR Profile: C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default [2016-12-02]
CHR Extension: (Google Slides) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-11-27]
CHR Extension: (Google Docs) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-11-27]
CHR Extension: (Google Drive) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-11-27]
CHR Extension: (YouTube) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-11-27]
CHR Extension: (Google Sheets) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-11-27]
CHR Extension: (Google Docs Offline) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-11-27]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-11-27]
CHR Extension: (Gmail) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-27]
CHR Extension: (Chrome Media Router) - C:\Users\Mx2qi7\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-11-27]

==================== Services (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 0195941480776605mcinstcleanup; C:\Windows\TEMP\019594~1.EXE [922152 2016-03-02] (McAfee, Inc.)
R2 ABBYY.Licensing.FineReader.Professional.11.0; C:\Program Files (x86)\ABBYY FineReader 11\NetworkLicenseServer.exe [821048 2013-06-17] (ABBYY InfoPoisk LLC)
R2 AtherosSvc; C:\Program Files (x86)\Dell Wireless\Bluetooth Suite\adminservice.exe [312448 2013-09-04] (Windows (R) Win 7 DDK provider) [File not signed]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [197128 2016-08-30] (AVAST Software)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [319376 2014-10-01] (Intel Corporation)
R2 TrueKey; C:\Program Files\TrueKey\McAfee.TrueKey.Service.exe [990656 2016-10-28] (McAfee, Inc.)
R2 TrueKeyScheduler; C:\Program Files\TrueKey\McTkSchedulerService.exe [16248 2016-10-28] (McAfee, Inc.)
S3 TrueKeyServiceHelper; C:\Program Files\TrueKey\McAfee.TrueKey.ServiceHelper.exe [86864 2016-10-28] (McAfee, Inc.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)
R2 ZAMSvc; C:\Program Files (x86)\Zemana AntiMalware\ZAM.exe [13915888 2016-11-22] (Zemana Ltd.)
U4 AvastVBoxSvc; "C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe" [X]
S2 InstallerService; C:\Program Files\TrueKey\Mcafee.TrueKey.InstallerService.exe -originalversion 4.4.127.0 [X]

===================== Drivers (Whitelisted) ======================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 amdkmpfd; C:\Windows\System32\drivers\amdkmpfd.sys [36096 2013-12-15] (Advanced Micro Devices, Inc.)
S3 AndnetBus; C:\Windows\System32\drivers\lgandnetbus64.sys [19456 2014-04-14] (LG Electronics Inc.)
S3 AndNetDiag; C:\Windows\system32\DRIVERS\lgandnetdiag64.sys [29184 2014-03-28] (LG Electronics Inc.)
S3 ANDNetModem; C:\Windows\system32\DRIVERS\lgandnetmodem64.sys [36352 2014-03-28] (LG Electronics Inc.)
S3 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-08-30] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [108816 2016-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-08-30] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [969184 2016-09-14] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [513632 2016-09-22] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [163416 2016-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [293352 2016-10-14] (AVAST Software)
R3 athr; C:\Windows\system32\DRIVERS\athwbx.sys [3859968 2013-08-15] (Qualcomm Atheros Communications, Inc.)
R3 BTATH_LWFLT; C:\Windows\system32\DRIVERS\btath_lwflt.sys [77464 2013-09-04] (Qualcomm Atheros)
S3 FTDIBUS; C:\Windows\system32\drivers\ftdibus.sys [118160 2016-10-04] (Future Technology Devices International Ltd.)
S3 FTSER2K; C:\Windows\system32\drivers\ftser2k.sys [88752 2016-10-04] ()
R3 SmbDrvI; C:\Windows\system32\DRIVERS\Smb_driver_Intel.sys [31472 2013-11-22] (Synaptics Incorporated)
S1 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [132120 2016-11-21] (Oracle Corporation)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44024 2015-02-04] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [264000 2015-02-04] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
R1 ZAM; C:\Windows\System32\drivers\zam64.sys [203680 2016-11-27] (Zemana Ltd.)
R1 ZAM_Guard; C:\Windows\System32\drivers\zamguard64.sys [203680 2016-11-27] (Zemana Ltd.)
S3 andnetndis; \SystemRoot\system32\DRIVERS\lgandnetndis64.sys [X]
U4 VBoxAswDrv; \??\C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-02 19:07 - 2016-12-02 19:07 - 00000000 ___RD C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2016-12-02 19:06 - 2016-12-02 19:06 - 00023395 _____ C:\Users\Mx2qi7\Desktop\zoek-results.txt
2016-12-02 19:04 - 2016-12-02 18:42 - 00024064 _____ C:\Windows\zoek-delete.exe
2016-12-02 18:42 - 2016-12-02 19:02 - 00000000 ____D C:\zoek_backup
2016-12-02 18:42 - 2003-01-24 00:11 - 01309184 _____ C:\Users\Mx2qi7\Desktop\zoek.exe
2016-12-01 18:49 - 2016-12-01 18:56 - 00000000 ____D C:\Users\Mx2qi7\Documents\Command and Conquer Generals Data
2016-12-01 18:25 - 2016-12-01 18:33 - 00001946 _____ C:\Users\Public\Desktop\Command & Conquer Generals Zero Hour .lnk
2016-12-01 15:44 - 2016-12-02 15:56 - 00000000 ____D C:\Users\Mx2qi7\Documents\Command and Conquer Generals Zero Hour Data
2016-12-01 15:20 - 2016-12-01 15:20 - 00001886 _____ C:\Users\Public\Desktop\Command & Conquer Generals.lnk
2016-11-29 19:09 - 2016-11-29 19:09 - 03055036 _____ (Macrovision Corporation) C:\Users\Mx2qi7\Downloads\PL2303_Vista_32_64_332102.exe
2016-11-29 18:58 - 2016-11-29 18:58 - 00001169 _____ C:\Users\Mx2qi7\Desktop\HCP Fiscal.lnk
2016-11-29 18:58 - 2016-11-29 18:58 - 00000000 ____D C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HCP Fiscal SRB 2.30
2016-11-29 18:58 - 2016-11-29 18:58 - 00000000 ____D C:\Program Files (x86)\HCP
2016-11-29 10:24 - 2016-12-03 17:37 - 00000000 ____D C:\Users\Mx2qi7\Desktop\New folder (2)
2016-11-27 18:13 - 2016-11-27 18:13 - 00002291 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-27 18:13 - 2016-11-27 18:13 - 00002279 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-11-27 18:12 - 2016-12-02 22:17 - 00000916 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-27 18:12 - 2016-12-02 19:06 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-27 18:12 - 2016-11-27 18:12 - 00003888 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-11-27 18:12 - 2016-11-27 18:12 - 00003652 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-11-27 18:11 - 2016-11-27 18:11 - 01065376 _____ (Google Inc.) C:\Users\Mx2qi7\Downloads\ChromeSetup.exe
2016-11-27 17:23 - 2016-11-27 17:23 - 00004643 _____ C:\Users\Mx2qi7\Desktop\2016.11.27-17.08.05-i0-t92-d10.txt
2016-11-27 17:07 - 2016-12-03 17:37 - 00074823 _____ C:\Windows\ZAM.krnl.trace
2016-11-27 17:07 - 2016-12-03 17:37 - 00046592 _____ C:\Windows\ZAM_Guard.krnl.trace
2016-11-27 17:07 - 2016-11-27 17:07 - 05431336 _____ ( ) C:\Users\Mx2qi7\Downloads\Zemana.AntiMalware.Setup.exe
2016-11-27 17:07 - 2016-11-27 17:07 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zamguard64.sys
2016-11-27 17:07 - 2016-11-27 17:07 - 00203680 _____ (Zemana Ltd.) C:\Windows\system32\Drivers\zam64.sys
2016-11-27 17:07 - 2016-11-27 17:07 - 00001164 _____ C:\Users\Public\Desktop\Zemana AntiMalware.lnk
2016-11-27 17:07 - 2016-11-27 17:07 - 00000000 ____D C:\Users\Mx2qi7\AppData\Local\Zemana
2016-11-27 17:07 - 2016-11-27 17:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Zemana AntiMalware
2016-11-27 17:07 - 2016-11-27 17:07 - 00000000 ____D C:\Program Files (x86)\Zemana AntiMalware
2016-11-26 22:15 - 2016-11-26 22:17 - 00000000 ____D C:\Users\Mx2qi7\Downloads\FRST
2016-11-26 22:06 - 2016-11-26 22:06 - 00027997 _____ C:\Users\Mx2qi7\Desktop\bookmarks.html
2016-11-26 21:02 - 2016-11-26 21:02 - 00039962 _____ C:\Users\Mx2qi7\Desktop\Addition.txt
2016-11-26 21:00 - 2016-11-26 21:01 - 00039959 _____ C:\Users\Mx2qi7\Downloads\Addition.txt
2016-11-26 20:58 - 2016-11-26 20:58 - 02412032 _____ (Farbar) C:\Users\Mx2qi7\Downloads\FRST64(1).exe.part
2016-11-26 19:51 - 2016-11-26 19:51 - 00015305 _____ C:\Users\Mx2qi7\Desktop\AdwCleaner[C0].txt
2016-11-26 19:30 - 2016-11-26 19:39 - 00000000 ____D C:\AdwCleaner
2016-11-26 19:29 - 2016-11-26 19:29 - 03910208 _____ C:\Users\Mx2qi7\Desktop\AdwCleaner.exe
2016-11-26 18:52 - 2016-12-03 17:37 - 00000000 ____D C:\FRST
2016-11-26 18:52 - 2016-11-26 21:01 - 00026074 _____ C:\Users\Mx2qi7\Downloads\FRST.txt
2016-11-26 18:24 - 2016-11-26 18:24 - 00002039 ____N C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvаst SаfеZone Browsеr.lnk
2016-11-26 18:24 - 2016-11-26 18:24 - 00001463 ____N C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Еxрlоrer.lnk
2016-11-26 18:24 - 2016-11-26 18:24 - 00001184 ____N C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gоogle Сhrоmе.lnk
2016-11-26 18:24 - 2016-11-26 18:24 - 00001169 ____N C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gооgle Chrome.lnk
2016-11-26 18:14 - 2016-11-26 18:14 - 00000000 _____ C:\Windows\BcdLog.txt
2016-11-26 18:09 - 2016-11-26 18:09 - 00000000 ____D C:\Program Files (x86)\EaseUS
2016-11-26 18:07 - 2016-11-26 18:08 - 53242944 _____ (EaseUS ) C:\Users\Mx2qi7\Downloads\epm_trial.exe
2016-11-26 17:58 - 2016-11-26 17:58 - 08578600 _____ (Piriform Ltd) C:\Users\Mx2qi7\Downloads\ccsetup524pro.exe
2016-11-26 17:58 - 2016-11-26 17:58 - 00000000 ____D C:\Users\Mx2qi7\.oracle_jre_usage
2016-11-26 17:14 - 2016-11-26 17:14 - 00000000 ____D C:\Users\Mx2qi7\VirtualBox VMs
2016-11-26 17:09 - 2016-11-26 17:11 - 123014112 _____ (Oracle Corporation) C:\Users\Mx2qi7\Downloads\VirtualBox-5.1.10-112026-Win.exe
2016-11-22 17:51 - 2016-11-25 16:36 - 00009860 _____ C:\Users\Mx2qi7\Documents\igrica.xlsx
2016-11-21 17:44 - 2016-11-21 17:44 - 00206416 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2016-11-21 17:44 - 2016-11-21 17:44 - 00132120 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys
2016-11-04 18:01 - 2016-11-04 18:01 - 00002109 _____ C:\Users\Mx2qi7\Desktop\Popcorn-Time.lnk
2016-11-04 17:58 - 2016-11-04 17:58 - 00000000 ____D C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Popcorn-Time
2016-11-04 17:57 - 2016-11-04 18:01 - 00000000 ____D C:\Users\Mx2qi7\AppData\Local\Popcorn-Time
2016-11-04 17:55 - 2016-11-04 17:56 - 61757061 _____ (Popcorn Time) C:\Users\Mx2qi7\Downloads\Popcorn-Time-0.3.10-Setup.exe
2016-11-03 22:05 - 2016-10-30 18:50 - 209778720 _____ C:\Users\Mx2qi7\Desktop\Quantico.S01E14.720p.HDTV.x265.ShAaNiG.mkv
2016-11-03 22:04 - 2016-10-30 18:47 - 209777017 _____ C:\Users\Mx2qi7\Desktop\Quantico.S01E13.720p.HDTV.x265.ShAaNiG.mkv

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2016-12-03 15:50 - 2016-09-26 12:25 - 00001210 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\True Key.lnk
2016-12-03 15:50 - 2016-09-26 12:14 - 00000000 ____D C:\Program Files\TrueKey
2016-12-02 22:10 - 2015-01-30 21:54 - 00003598 _____ C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-2226422450-3240431047-2392391502-1001
2016-12-02 20:31 - 2015-03-01 21:04 - 00000830 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-12-02 19:05 - 2013-08-22 15:45 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-12-02 19:05 - 2013-08-22 15:44 - 00481864 _____ C:\Windows\system32\FNTCACHE.DAT
2016-12-02 18:59 - 2015-02-08 00:18 - 00000000 ____D C:\Users\Mx2qi7\AppData\Local\CrashDumps
2016-12-01 23:48 - 2015-01-30 22:35 - 00000000 ____D C:\Users\Mx2qi7\Documents\Bluetooth Folder
2016-12-01 18:32 - 2015-05-05 23:11 - 00001192 _____ C:\Windows\eReg.dat
2016-12-01 18:32 - 2015-01-30 22:06 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-12-01 18:25 - 2015-07-19 19:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA GAMES
2016-12-01 15:33 - 2015-07-19 19:44 - 00000000 ____D C:\Program Files (x86)\EA GAMES
2016-11-30 09:31 - 2015-03-28 20:58 - 00004180 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2016-11-29 19:15 - 2015-01-30 21:52 - 00863592 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-29 19:15 - 2013-08-22 14:36 - 00000000 ____D C:\Windows\Inf
2016-11-29 19:03 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\NDF
2016-11-29 18:42 - 2015-01-30 21:48 - 00000000 ____D C:\Users\Mx2qi7
2016-11-28 15:24 - 2016-05-16 10:17 - 00002309 _____ C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-11-27 19:52 - 2016-04-09 16:25 - 00001516 ____H C:\Users\Mx2qi7\Desktop\Firefox - Mozilla.lnk
2016-11-27 18:13 - 2015-01-30 21:59 - 00000000 ____D C:\Users\Mx2qi7\AppData\Local\Google
2016-11-27 18:13 - 2015-01-30 21:59 - 00000000 ____D C:\Program Files (x86)\Google
2016-11-26 22:19 - 2015-11-20 16:30 - 00000008 __RSH C:\ProgramData\ntuser.pol
2016-11-26 22:17 - 2015-03-09 15:44 - 00000000 ____D C:\Users\Mx2qi7\AppData\LocalLow\Temp
2016-11-26 22:16 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\GroupPolicy
2016-11-26 19:39 - 2015-11-18 12:56 - 00000000 ____D C:\Windows\system32\log
2016-11-26 19:39 - 2015-01-30 21:49 - 00001003 _____ C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-11-26 18:16 - 2013-08-22 14:25 - 00262144 ___SH C:\Windows\system32\config\BBI
2016-11-26 18:01 - 2015-04-01 13:34 - 00000000 ____D C:\Windows\Minidump
2016-11-26 18:01 - 2015-03-10 18:20 - 00000000 ____D C:\Program Files (x86)\ABBYY FineReader 11
2016-11-26 18:01 - 2015-03-10 17:01 - 00000000 ____D C:\Users\Mx2qi7\AppData\Roaming\uTorrent
2016-11-26 18:01 - 2015-01-31 06:32 - 00000000 ____D C:\Windows\Panther
2016-11-26 18:00 - 2015-08-08 22:58 - 00000000 ____D C:\ProgramData\MCShield
2016-11-22 20:31 - 2013-08-22 16:36 - 00000000 ___HD C:\Program Files\WindowsApps
2016-11-22 20:31 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\AppReadiness
2016-11-09 16:45 - 2015-01-30 23:50 - 00004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2016-11-08 18:31 - 2015-03-01 21:04 - 00003718 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-11-08 18:31 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-08 18:31 - 2013-08-22 16:36 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-04 10:51 - 2016-09-26 12:24 - 00000000 ____D C:\Program Files (x86)\McAfee
2016-11-03 22:07 - 2016-09-13 20:27 - 00000000 ____D C:\Users\Mx2qi7\Desktop\Subs

Some zero byte size files/folders:
==========================
C:\Windows\SysWOW64\SIntf16.dll
C:\Windows\SysWOW64\SIntf32.dll
C:\Windows\SysWOW64\SIntfNT.dll

==================== Bamital & volsnap ======================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2016-11-26 20:18

==================== End of FRST.txt ============================
https://www.mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Sacuvaj ponovo bookmarke iz svih browsera, mozda cemo posle morati da reinstaliramo browsere.

1. Skini sledeci fajl: https://www.mycity.rs/must-login.png

forum automatski menja naziv, kada preuzmes fajl, promeni mu naziv u fixlist.txt


2. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.

Onda ponovo pokreni FRST, proveri da li je stiklirana Addition.txt i Shortcut.txt opcija ako nije i lupi Scan.

Ovaj put, kada te alat obavesti da su izvestaji spremni, i prikaze ti ih u notepad-u, ovaj put idi na File > Save Us i dole u desnom uglu, pod Encoding: u padajucem meniju izaberi Unicode zapis (default je ANSI). Sacuvaj promene.

Prebaci u Unicode zapis sva tri loga, FRST.txt, Addition.txt, Shortcut.txt i u takvom formatu ih prikaci (ne kopirati) uz poruku koristeci opciju Prikači fajl.


+ Slikovit prikaz primera

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Izvinjavam se na kasnjenju...

Fix result of Farbar Recovery Scan Tool (x64) Version: 05-12-2016
Ran by Mx2qi7 (06-12-2016 18:13:09) Run:4
Running from C:\Users\Mx2qi7\Desktop
Loaded Profiles: Mx2qi7 (Available Profiles: Mx2qi7)
Boot Mode: Normal
==============================================

fixlist content:
*****************
CreateRestorePoint:
C:\Users\Mx2qi7\AppData\Roaming\Browsers
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gооgle Chrome.lnk
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Еxрlоrer.lnk
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооgle Chrоmе.lnk
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunch Intеrnеt Explorеr Вrоwser.lnk
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firеfоx - Мozillа.lnk
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\fc055bbd87c30a9d\Guntоny.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gоogle Сhrоmе.lnk
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvаst SаfеZone Browsеr.lnk
EmptyTemp:
*****************

Restore point was successfully created.
"C:\Users\Mx2qi7\AppData\Roaming\Browsers" => not found.
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Gооgle Chrome.lnk => moved successfully
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Intеrnеt Еxрlоrer.lnk => moved successfully
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Gооgle Chrоmе.lnk => moved successfully
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Lаunch Intеrnеt Explorеr Вrоwser.lnk => moved successfully
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firеfоx - Мozillа.lnk => moved successfully
C:\Users\Mx2qi7\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\fc055bbd87c30a9d\Guntоny.lnk => moved successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gоogle Сhrоmе.lnk => moved successfully
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Аvаst SаfеZone Browsеr.lnk => moved successfully

=========== EmptyTemp: ==========

BITS transfer queue => 12582912 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 10752397 B
Java, Flash, Steam htmlcache => 1129 B
Windows/system/drivers => 1243089 B
Edge => 0 B
Chrome => 526862316 B
Firefox => 376279642 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 128 B
systemprofile32 => 0 B
LocalService => 2396 B
NetworkService => 0 B
Mx2qi7 => 16669522 B

RecycleBin => 88999 B
EmptyTemp: => 900.7 MB temporary data Removed.

================================


The system needed a reboot.

==== End of Fixlog 18:14:02 ====
https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png

https://www.mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Kakvo je sad stanje sa ikonicama?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

helen1 ::Kakvo je sad stanje sa ikonicama?
U start meniju nema vise duplih ikonica
al od mozille na desktopu i dalje je bleda (providna)

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

A da je obrises rucno i stavis ponovo (precicu)? Trebalo bi da je sve u redu. Odnosno, da vodi do legitimnog Firefoxa posto smo komp propustili kroz razna mucenja, tesko da je sta moglo da se provuce.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Proverio sam, vodi do legitimnog Firefoxa, dok su one sto su se pojavile vodile do "laznog" i njih smo makli jos u prvom krugu fix-a.
Problem resen izradom nove precice.
Hvala na ulozenom vremenu i trudu da resim problem!

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Dobro je da smo to sredili.

• Sledeća procedura će implementirati završno čišćenje.



Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.

Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;
Remove disinfection tools
Create registry backup
Purge System Restore

Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.

Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Ukoliko neki alat ili izveštaj nije uklonjen, slobodno ih obriši ručno.


Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)
- Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
- DelFix briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Sredjeno, hvala jos jednom