MyCity :: Ambulanta

Re: Avira ili neki malwer

nobody@mycity.rs (mrmr) — Fri, 13 Feb 2026 08:54:53 +0100

Zahvaljujem se na trudu i pomoci , idem na novu instalaciju .

Re: Nepoznata stranica

nobody@mycity.rs (tacija) — Tue, 27 Jan 2026 18:40:55 +0100

Kad sam juce upalio komp pojavio mi se plavi ekran pa sam morao da reinstaliram sistem . U svakom slucaju zahvaljujem se na trudu da pomognes Poz.

Trojanaci mi upali, pokradene sifre

nobody@mycity.rs (Rocky I) — Wed, 27 Aug 2025 17:09:35 +0100

----------- Napisano: 23 Avg 2025 21:04 ---------

Pre 2 dana mi je upao trojanac preko torrenta. Iskljucio je Win defender (Win 11 pro imam), takodje i windows update, ubrzo sam video da su krenuli uspesni i neuspesni pokusaju upada na razne moje naloge,...
Instalirao sam Malwerbytes, nasao je svasta, ali nije odradio posao do kraja, zatim sam koristio ESET rescue offline, takodje i Kaspersky offline, video sam sumljive besmilsene nazive koji se pokrecu uz sistem koje sam obrisao iz starta. Defender je u ovom trenutku vidljiv ali ne mogu da pokrenem nikakav scan.
Nadam se da moze da se sredi.

Na slici mozete videti winloghelper.exe koji iskace na 2 min.

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 21-08-2025


Ran by dejan (administrator) on BATTLESHIP5 (Micro-Star International Co., Ltd MS-7C02) (23-08-2025 20:49:27)


Running from C:\Users\dejan\OneDrive\Desktop\FRST64.exe


Loaded Profiles: dejan


Platform: Microsoft Windows 11 Pro Version 24H2 26100.4946 (X64) Language: English (United States)


Default browser: "C:\Users\dejan\AppData\Local\Programs\Opera\opera.exe" -noautoupdate -- "%1"


Boot Mode: Normal





==================== Processes (Whitelisted) =================





(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)





(A225F3B5-240D-4EE9-BCF4-697A07F5E93E -> Micro-Star INT'L CO., LTD.) C:\Program Files\WindowsApps\9426MICRO-STARINTERNATION.MSICenter_2.0.57.0_x64__kzh8wxbdkxb8p\DCv2\DCv2.exe


(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe


(C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\MSI Center\Engine\CC_Engine_x64.exe


(C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.CentralServer.exe


(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe


(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe


(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe


(C:\Program Files\Google\Drive File Stream\112.0.3.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\112.0.3.0\crashpad_handler.exe


(C:\Program Files\Google\Drive File Stream\112.0.3.0\GoogleDriveFS.exe ->) (Opera Norway AS -> Opera Software) C:\Users\dejan\AppData\Local\Programs\Opera\opera.exe <26>


(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe


(C:\Users\dejan\AppData\Local\Programs\Opera\opera.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>


(C:\Users\dejan\AppData\Local\Programs\Opera\opera.exe ->) (Opera Norway AS -> Opera Software) C:\Users\dejan\AppData\Local\Programs\Opera\120.0.5543.161\opera_crashreporter.exe


(cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe


(cmd.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MbamBgNativeMsg.exe


(CrystalMark Inc. -> Crystal Dew World) C:\Program Files\CrystalDiskInfo\DiskInfo64.exe


(DriverStore\FileRepository\u0417878.inf_amd64_cf56f0cbce08e931\B417693\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0417878.inf_amd64_cf56f0cbce08e931\B417693\atieclxx.exe


(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE


(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\112.0.3.0\GoogleDriveFS.exe <6>


(Gen Digital Inc. -> Gen Digital Inc.) C:\Program Files\CCleaner\CCleaner64.exe


(Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe


(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0417878.inf_amd64_cf56f0cbce08e931\B417693\atiesrxx.exe


(services.exe ->) (Ascensio System SIA -> Ascensio System SIA) C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe


(services.exe ->) (CLEVERFILES INC. -> CleverFiles) C:\Program Files\CleverFiles\Disk Drill\cfbackd.w32.exe


(services.exe ->) (HP Inc.) [File not signed] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe


(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe


(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WSL\wslservice.exe


(services.exe ->) (Microsoft Corporation -> MSPCManagerService) C:\Program Files\WindowsApps\Microsoft.MicrosoftPCManager_3.17.12.0_x64__8wekyb3d8bbwe\PCManager\MSPCManagerService.exe


(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrsr.exe


(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe


(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe


(services.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI) C:\Program Files (x86)\MSI\MSI Center\Super Charger\MSI_Super_Charger_Service.exe


(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_32b266092fc6592d\RtkAudUService64.exe <2>


(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\CrossDeviceResume.exe


(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_11.2503.4.0_x64__8wekyb3d8bbwe\ClockWidgets\ClockWidgets.exe


(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7090.0_x64__8wekyb3d8bbwe\GameBar.exe


(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_7.325.7090.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe


(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Users\dejan\AppData\Local\Microsoft\OneDrive\25.140.0720.0001\FileCoAuth.exe


(svchost.exe ->) (Microsoft Corporation -> MSPCManagerWidget) C:\Program Files\WindowsApps\Microsoft.MicrosoftPCManager_3.17.12.0_x64__8wekyb3d8bbwe\PCMWidgetProvider\MSPCManagerWidget.exe


(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>


(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe


(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\SecurityHealthHost.exe


(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe


(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe


(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\AI Engine\PowerModeWatcher.exe


(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\MSI.TerminalServer.exe


(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.) C:\Program Files (x86)\MSI\MSI Center\Speed Up\StorageMonitor.exe


(svchost.exe ->) (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Center\True Color\New\MSI.True Color.exe





==================== Registry (Whitelisted) ===================





(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)





HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\DriverStore\FileRepository\realtekservice.inf_amd64_32b266092fc6592d\RtkAudUService64.exe [2177368 2024-08-06] (Realtek Semiconductor Corp. -> Realtek Semiconductor)


HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )


HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)


HKLM-x32\...\Run: [StatusAlerts] => C:\Program Files (x86)\HP\StatusAlerts\bin\HPStatusAlerts.exe [329992 2015-06-17] (Hewlett-Packard Company -> HP Development Company, L.P.)


HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION


HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\112.0.3.0\GoogleDriveFS.exe [67033240 2025-08-05] (Google LLC -> Google LLC.)


HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\112.0.3.0\GoogleDriveFS.exe [67033240 2025-08-05] (Google LLC -> Google LLC.)


HKU\S-1-5-21-609623560-524961366-3877464449-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\112.0.3.0\GoogleDriveFS.exe [67033240 2025-08-05] (Google LLC -> Google LLC.)


HKU\S-1-5-21-609623560-524961366-3877464449-1001\...\Run: [Opera Browser Assistant] => C:\Users\dejan\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [4536216 2025-04-14] (Opera Norway AS -> Opera Software)


HKU\S-1-5-21-609623560-524961366-3877464449-1001\...\Run: [MicrosoftEdgeAutoLaunch_A9AE4A14A8BD639F4AB91FC16A3CB162] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4117544 2025-08-15] (Microsoft Corporation -> Microsoft Corporation)


HKU\S-1-5-21-609623560-524961366-3877464449-1001\...\Run: [CCleaner Smart Cleaning] => C:\Program Files\CCleaner\CCleaner64.exe [45988576 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)


HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\112.0.3.0\GoogleDriveFS.exe [67033240 2025-08-05] (Google LLC -> Google LLC.)


HKU\S-1-5-18\...\Run: [AMDNoiseSuppression] => "C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe" (No File)


HKU\S-1-5-18\...\RunOnce: [StartRSX] => C:\Program Files\AMD\CNext\CNext\LauncherRSXRuntime.exe [73480 2025-07-24] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\Windows\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [File not signed]


HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\139.0.7258.128\Installer\chrmstp.exe [2025-08-14] (Google LLC -> Google LLC)


GroupPolicy: Restriction ? <==== ATTENTION


Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION





==================== Scheduled Tasks (Whitelisted) =================





(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)





Task: {0AF6A994-1B3A-4B10-B485-9753CE6DF6A4} - \Microsoft\Windows\UpdateOrchestrator\Start Oobe Expedite Work -> No File <==== ATTENTION


Task: {0F95DB85-8F35-4B2A-93DE-E4A31A713F54} - \Microsoft\Windows\UpdateOrchestrator\Schedule Scan Static Task -> No File <==== ATTENTION


Task: {1F597908-C76E-463E-A71A-5BCD2F86E75C} - \Microsoft\Windows\Windows Defender\Windows Defender Verification -> No File <==== ATTENTION


Task: {225B9244-DF0E-422C-9AE7-C08092255C04} - \Microsoft\Windows\Windows Defender\Windows Defender Cleanup -> No File <==== ATTENTION


Task: {4CDD753C-D44A-4CF2-A649-61A9D49B45F7} - \Microsoft\Windows\UpdateOrchestrator\Schedule Work -> No File <==== ATTENTION


Task: {5AB39D4B-13FB-4052-9136-2450F6598200} - \Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan -> No File <==== ATTENTION


Task: {5D60B1DE-D0F8-469E-BFC4-9770FFFCC697} - \Microsoft\Windows\UpdateOrchestrator\Schedule Wake To Work -> No File <==== ATTENTION


Task: {84806EDD-97AA-4DF9-B22D-86F2EE3FEF62} - \Microsoft\Windows\UpdateOrchestrator\Schedule Scan -> No File <==== ATTENTION


Task: {95425085-1A14-4B85-9028-E50D0FC160B4} - \Microsoft\Windows\WindowsUpdate\Refresh Group Policy Cache -> No File <==== ATTENTION


Task: {A0FB6F87-FEC5-46F8-843B-B58DD5E06AD6} - \Microsoft\Windows\WindowsUpdate\Scheduled Start -> No File <==== ATTENTION


Task: {AE889AF2-B6E2-4941-8C89-FCD4EB658F9B} - \Microsoft\Windows\UpdateOrchestrator\UUS Failover Task -> No File <==== ATTENTION


Task: {B1B281DE-0AC7-4CF8-8865-D0F80CB10162} - \Microsoft\Windows\UpdateOrchestrator\UIEOrchestrator -> No File <==== ATTENTION


Task: {C488BB9C-AC81-4CC1-9BFD-188744791A7B} - \Microsoft\Windows\UpdateOrchestrator\Schedule Maintenance Work -> No File <==== ATTENTION


Task: {DD6E2608-767B-4449-BB55-45CAD83FADA4} - \Microsoft\Windows\UpdateOrchestrator\StartOobeAppsScanAfterUpdate -> No File <==== ATTENTION


Task: {E410C093-D2A8-45E1-B810-12FFE228F567} - \Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance -> No File <==== ATTENTION


Task: {EC2A03E8-2F81-4030-A3A7-53DAC1DB0E2D} - \Microsoft\Windows\UpdateOrchestrator\Report policies -> No File <==== ATTENTION


Task: {EDC62534-48CF-4D30-A263-32780ED68B57} - \Microsoft\Windows\UpdateOrchestrator\StartOobeAppsScan_LicenseAccepted -> No File <==== ATTENTION


Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - \Microsoft\Windows\UpdateOrchestrator\USO_UxBroker -> No File <==== ATTENTION


Task: {86A4C592-9AF5-432D-A47E-41884150BC1B} - System32\Tasks\AMD Install Manager - Check For Updates => C:\Program Files\AMD\AMDInstallManager\AMDInstallManager.exe [55427848 2025-07-24] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) -> C:\Program Files\AMD\AMDInstallManager\\-CheckForUpdates


Task: {4F128845-1540-4DE0-8DF2-4DF44298B773} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [191248 2025-07-24] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


Task: {FAB0FA26-DA31-4F6F-AE42-E1F4BFFFEB2F} - System32\Tasks\CCleaner Update => C:\Program Files\CCleaner\CCUpdate.exe [3480504 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)


Task: {812A917A-48DC-4704-91A8-BE7446676C92} - System32\Tasks\CCleanerCrashReporting => C:\Program Files\CCleaner\CCleanerBugReport.exe [6140640 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.) -> --product 90 --send dumps|report --path "C:\Program Files\CCleaner\LOG" --programpath "C:\Program Files\CCleaner" --guid "6f5f271d-0b68-47d9-9fbb-f3d728414f69" --version "6.39.0.11548" --silent


Task: {5C083799-5C62-4B3E-ACDB-C5DAB92C0AC4} - System32\Tasks\CCleanerSkipUAC - dejan => C:\Program Files\CCleaner\CCleaner.exe [39822560 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)


Task: {70F321B8-316F-46DB-93C3-2AC00584D43C} - System32\Tasks\CrystalDiskInfo => C:\Program Files\CrystalDiskInfo\DiskInfo64.exe [2886392 2025-07-27] (CrystalMark Inc. -> Crystal Dew World)


Task: {7163FD97-23AE-4B8C-AAA0-FDE4D378F9F6} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem141.0.7340.0{6A4969A9-FCE7-4708-9E38-FDFF969713BE} => C:\Program Files (x86)\Google\GoogleUpdater\141.0.7340.0\updater.exe [6813336 2025-08-06] (Google LLC -> Google LLC)


Task: {0117D86E-8D82-4C18-98ED-2D5A49BAA7AB} - System32\Tasks\HPLJCustParticipation => C:\Program Files (x86)\HP\HPLJUT\HPLJUTSCH.exe [89840 2014-10-19] (Hewlett-Packard Company -> Hewlett Packard)


Task: {879246E8-B301-4695-AD5A-5A37E6DD6A15} - System32\Tasks\MEGA\MEGAsync Update Task S-1-5-21-609623560-524961366-3877464449-1001 => C:\Users\dejan\AppData\Local\MEGAsync\MEGAupdater.exe [1949960 2025-02-19] (Mega Limited -> )


Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe  (No File)


Task: {38F9DA7B-72E7-4F8E-806E-E7E7BC252A0E} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1038608 2025-07-25] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


Task: {2DBED597-2EE4-4F79-996C-C67AFCE27296} - System32\Tasks\OneDrive Startup Task-S-1-5-21-609623560-524961366-3877464449-1001 => C:\Users\dejan\AppData\Local\Microsoft\OneDrive\25.140.0720.0001\OneDriveLauncher.exe [723816 2025-08-13] (Microsoft Corporation -> Microsoft Corporation)


Task: {66E52879-ECBA-4CEE-B7A0-8881B29ACDBF} - System32\Tasks\Opera Air scheduled Autoupdate 1740586860 => C:\Users\dejan\AppData\Local\Programs\Opera Air\autoupdate\opera_autoupdate.exe [6246360 2025-07-24] (Opera Norway AS -> Opera Software)


Task: {76C34D0C-DB53-414B-8CC7-E77CEAD27E92} - System32\Tasks\Opera scheduled assistant Autoupdate 1724607561 => C:\Users\dejan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [6239704 2025-08-06] (Opera Norway AS -> Opera Software) -> --scheduledtask --productiscomponent --bypasslauncher --installdir="C:\Users\dejan\AppData\Local\Programs\Opera\assistant" --producttype=assistant $(Arg0)


Task: {C68F0620-B283-463B-A036-EB5568437435} - System32\Tasks\Opera scheduled Autoupdate 1724607559 => C:\Users\dejan\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [6239704 2025-08-06] (Opera Norway AS -> Opera Software)


Task: {88DD1FDC-C029-4BA1-8020-42B9A1A2F198} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [143632 2025-07-24] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


Task: {9F8FDE62-1401-4CBD-9AAE-4FA7BE26DFFB} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [310032 2025-07-24] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


Task: {DC419B65-C2A4-48EB-8ED1-62586530E5B7} - System32\Tasks\update-S-1-5-21-609623560-524961366-3877464449-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)


Task: {9D538D12-ED17-485A-85F5-195CEE2DB446} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)


Task: {D065BCAE-7D95-4B87-8D1B-092F6BF1B2DA} - System32\Tasks\WindowsLogsHelper => C:\Windows\system32\cmd.exe [376832 2025-08-09] (Microsoft Windows -> Microsoft Corporation) -> /c start " " "C:\WINDOWS\winloghelper.exe"





(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)





Task: C:\WINDOWS\Tasks\CCleanerCrashReporting.job => C:\Program Files\CCleaner\CCleanerBugReport.exe


Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe


Task: C:\WINDOWS\Tasks\update-S-1-5-21-609623560-524961366-3877464449-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe


Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe





==================== Internet (Whitelisted) ====================





(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)





Tcpip\Parameters: [DhcpNameServer] 192.168.1.1


Tcpip\..\Interfaces\{a9094224-a3ae-4b29-bfaf-a43261093d5f}: [DhcpNameServer] 192.168.1.1





Edge: 


=======


Edge DefaultProfile: Default


Edge Profile: C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Default [2025-08-23]


Edge Session Restore: Default -> is enabled.


Edge Extension: (Malwarebytes Browser Guard) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2025-08-21]


Edge Extension: (Google Docs Offline) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-28]


Edge Extension: (Edge relevant text changes) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-08-25]


Edge Profile: C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Profile 1 [2025-08-23]


Edge Session Restore: Profile 1 -> is enabled.


Edge Extension: (Immersive Translate - Translate Web & PDF) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\amkbmndfnliijdhojkpoglbnaaahippg [2025-02-26]


Edge Extension: (Grammarly: AI Writing and Grammar Checker App) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\cnlefmmeadmemmdciolhbnfeacpdfbkd [2025-02-26]


Edge Extension: (Google Docs Offline) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-26]


Edge Extension: (Bitwarden Password Manager) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jbkfoedolllekgbhcbcoahefnbanhhlh [2025-02-26]


Edge Extension: (Edge relevant text changes) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-09-27]


Edge Extension: (Octotree - GitHub code tree) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\joagmknfcgpikbadjkaikmnhpjadihjg [2025-02-26]


Edge Extension: (AdBlock � block ads across the web) - C:\Users\dejan\AppData\Local\Microsoft\Edge\User Data\Profile 1\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-02-26]


Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]


Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]





Chrome: 


=======


CHR Profile: C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default [2025-08-23]


CHR HomePage: Default -> hxxps://www.google.com/


CHR Session Restore: Default -> is enabled.


CHR Extension: (Google Translate) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-07]


CHR Extension: (ColorZilla) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2024-08-25]


CHR Extension: (WOT: Website Security & Safety Checker) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2025-07-15]


CHR Extension: (uBlock Origin Lite) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddkjiahejlhfcafbddmgiahcphecmpfh [2025-08-21]


CHR Extension: (Malwarebytes Browser Guard) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2025-08-21] [UpdateUrl:0] <==== ATTENTION


CHR Extension: (WhatFont) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2024-08-25]


CHR Extension: (Grammarly: AI Writing and Grammar Checker App) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2025-08-21]


CHR Extension: (StayFocusd � Website Blocker & Focus Timer & Shorts Blocker) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\laankejkbhbdhmipfmgcngdelahlfoji [2025-08-11]


CHR Extension: (Chrome Web Store Payments) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-08-25]


CHR Extension: (Bitwarden Password Manager) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nngceckbapebfimnlniiiahkandclblb [2025-07-31]


CHR Profile: C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1 [2025-08-23]


CHR NewTab: Profile 1 -> "active": false,


            "entry": "chrome-extension://laookkfknpbbblfpciffpaejjkokdgca/index.html"


          


CHR Session Restore: Profile 1 -> is enabled.


CHR Extension: (Google Translate) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2024-09-20]


CHR Extension: (JSON Formatter) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bcjindcccaagfpapjjmafapmmgkkhgoa [2024-08-25]


CHR Extension: (Web Developer) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bfbameneiokkgbdmiekhjnmfkcnldhhm [2024-08-25]


CHR Extension: (ColorZilla) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bhlhnicpbhignbdhedgjhgdocnmhomnp [2024-08-25]


CHR Extension: (WOT: Website Security & Safety Checker) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2025-08-07]


CHR Extension: (Weava Highlighter - PDF & Web) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\cbnaodkpfinfiipjblikofhlhlcickei [2024-08-25]


CHR Extension: (JSONVue) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chklaanhfefbnpoihckbnefhakgolnmc [2024-08-25]


CHR Extension: (OneTab) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\chphlpgkkbolifaimnlloiipkdnihall [2024-08-25]


CHR Extension: (Fonts Ninja) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eljapbgkmlngdpckoiiibecpemleclhh [2025-07-31]


CHR Extension: (Google Font Previewer for Chrome) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\engndlnldodigdjamndkplafgmkkencc [2024-08-25]


CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fdpohaocaechififmbbbbbknoalclacl [2025-03-27]


CHR Extension: (React Developer Tools) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\fmkadmapgofadopljbjfkapdkoienihi [2025-07-07]


CHR Extension: (JSON Viewer) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gbmdgpbipfallnflgajpaliibnhdgobh [2024-08-25]


CHR Extension: (Toby Mini) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gfdcgfhkelkdmglklfbndgopaihmoeci [2025-08-07]


CHR Extension: (WhatFont) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\jabopobgcpjmedljpbcaablpmlmfcogm [2024-08-25]


CHR Extension: (Grammarly: AI Writing and Grammar Checker App) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kbfnbcaeplbcioakkpcpgfkobkghlhen [2025-08-20]


CHR Extension: (Momentum) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\laookkfknpbbblfpciffpaejjkokdgca [2025-08-10]


CHR Extension: (Huntr - Job Search Tracker & Autofill) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\mihdfbecejheednfigjpdacgeilhlmnf [2025-01-16]


CHR Extension: (SelectorsHub) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ndgimibanhlabgdgjcpbbndiehljcpfh [2025-07-31]


CHR Extension: (Chrome Web Store Payments) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-08-25]


CHR Extension: (Bitwarden Password Manager) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nngceckbapebfimnlniiiahkandclblb [2025-08-07]


CHR Extension: (AdBlocker Ultimate) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ohahllgiabjaoigichmmfljhkcfikeof [2025-08-20]


CHR Extension: (Teal - Job Search Companion) - C:\Users\dejan\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\opafjjlpbiaicbbgifbejoochmmeikep [2025-07-31]


CHR Profile: C:\Users\dejan\AppData\Local\Google\Chrome\User Data\System Profile [2025-08-18]


CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]


CHR HKU\S-1-5-21-609623560-524961366-3877464449-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]


CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]





Opera: 


=======


OPR DefaultProfile: Default


StartMenuInternet: (HKU\S-1-5-21-609623560-524961366-3877464449-1001) Opera AirStable - "C:\Users\dejan\AppData\Local\Programs\Opera Air\opera.exe"





==================== Services (Whitelisted) ===================





(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)





S3 AntiCheatExpert Protection; C:\Program Files\AntiCheatExpert\ACE-Service64.exe [3261264 2025-07-31] (ACEVILLE PTE LTD -> ANTICHEATEXPERT.COM)


S3 AntiCheatExpert Service; C:\Program Files\AntiCheatExpert\SGuard\x64\SGuardSvc64.exe [2098584 2025-07-31] (ACEVILLE PTE LTD -> ANTICHEATEXPERT.COM)


S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [20352680 2025-06-11] (BattlEye Innovations e.K. -> )


S3 CCleanerPerformanceOptimizerService; C:\Program Files\CCleaner\CCleanerPerformanceOptimizerService.exe [1080544 2025-08-14] (Gen Digital Inc. -> Gen Digital Inc.)


R2 cfbackd; C:\Program Files\CleverFiles\Disk Drill\cfbackd.w32.exe [309128 2023-03-23] (CLEVERFILES INC. -> CleverFiles)


S3 EAAntiCheatService; C:\Program Files\EA\AC\eaanticheat.gameservice.exe [118805240 2025-07-28] (Electronic Arts, Inc. -> Electronic Arts)


S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [781440 2024-09-01] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)


S3 EasyAntiCheat_EOS; C:\Program Files (x86)\EasyAntiCheat_EOS\EasyAntiCheat_EOS.exe [964336 2025-07-30] (EasyAntiCheat Oy -> Epic Games, Inc.)


S3 EpicGamesUpdater; C:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesUpdater.exe [3071904 2025-08-12] (Epic Games Inc. -> Epic Games, Inc.)


S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [1604512 2025-07-30] (Epic Games Inc. -> Epic Games, Inc.)


R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176640 2020-02-11] (HP Inc.) [File not signed]


R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9608720 2025-08-21] (Malwarebytes Inc -> Malwarebytes)


S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-08-21] (Malwarebytes Inc. -> Malwarebytes)


R2 MSI_Case_Service; C:\Program Files (x86)\MSI\MSI Center\Case\MSI_Case_Service.exe [134160 2025-05-05] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star INT'L CO., LTD.)


R2 MSI_Center_Service; C:\Program Files (x86)\MSI\MSI Center\MSI_Central_Service.exe [181776 2025-04-17] (MICRO-STAR INTERNATIONAL CO., LTD. -> Micro-Star Int'l Co., Ltd.)


R2 MSI_Super_Charger_Service; C:\Program Files (x86)\MSI\MSI Center\Super Charger\MSI_Super_Charger_Service.exe [37104 2022-05-13] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)


R2 ONLYOFFICE Update Service; C:\Program Files\ONLYOFFICE\DesktopEditors\updatesvc.exe [643792 2025-07-07] (Ascensio System SIA -> Ascensio System SIA)


R2 PCManager Service Store; C:\Program Files\WindowsApps\Microsoft.MicrosoftPCManager_3.17.12.0_x64__8wekyb3d8bbwe\PCManager\MSPCManagerService.exe [154168 2025-08-20] (Microsoft Corporation -> MSPCManagerService)


S3 Rockstar Service; C:\Program Files\Rockstar Games\Launcher\RockstarService.exe [8264680 2025-05-15] (Rockstar Games, Inc. -> Rockstar Games)


S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [918456 2025-08-09] (Microsoft Windows Publisher -> Microsoft Corporation)


R2 TavernComn_2_1; C:\Program Files\IRONMACE\Tavern\EpicGames\TavernApp_2_1\TavernComn.dll [10847656 2024-12-27] (IRONMACE Co., Ltd. -> IRONMACE Co., Ltd.)


S3 TavernWorker_2_1; C:\Program Files\IRONMACE\Tavern\EpicGames\TavernApp_2_1\TavernWorker.exe [23219624 2024-12-27] (IRONMACE Co., Ltd. -> IRONMACE Co., Ltd.)





===================== Drivers (Whitelisted) ===================





(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)





S3 ACE-BASE; C:\WINDOWS\system32\drivers\ACE-BASE.sys [4289104 2025-07-31] (Microsoft Windows Hardware Compatibility Publisher -> ANTICHEATEXPERT.COM)


S3 ace-game; C:\WINDOWS\System32\drivers\ace-game.sys [1426712 2025-07-31] (Tencent Technology (Shenzhen) Company Limited -> ANTICHEATEXPERT.COM)


S3 ACE-SSC-DRV64; C:\Program Files\AntiCheatExpert\SGuard\x64\plugins\ACE-SSC-DRV64.sys [307792 2025-07-31] (Microsoft Windows Hardware Compatibility Publisher -> ANTICHEATEXPERT.COM)


R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrmgr.sys [37208 2025-02-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [33592 2024-09-12] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)


R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_d4de13a10f2586d0\amdsafd.sys [112952 2024-06-15] (AMD Test Build -> Advanced Micro Devices)


R3 amduw23g-417878-33000e3f; C:\WINDOWS\System32\DriverStore\FileRepository\u0417878.inf_amd64_cf56f0cbce08e931\B417693\amdkmdag.sys [101637624 2025-08-01] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [63008 2024-05-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)


S3 dg_ssudbus; C:\WINDOWS\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)


R2 Dokan2; C:\WINDOWS\system32\drivers\dokan2.sys [395936 2025-01-19] (Microsoft Windows Hardware Compatibility Publisher -> Dokan Project)


R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae.sys [159296 2025-08-21] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)


R0 fse; C:\WINDOWS\System32\drivers\fse.sys [222528 2024-12-10] (Microsoft Windows -> Microsoft Corporation)


S3 GemCCID; C:\WINDOWS\System32\drivers\GemCCID.sys [130944 2014-11-10] (Microsoft Windows Hardware Compatibility Publisher -> Gemalto)


R2 googledrivefs31931; C:\Program Files\Google\Drive File Stream\Drivers\31931\googledrivefs31931.sys [386256 2025-05-15] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)


S4 IObitUnlocker; C:\Program Files (x86)\IObit\IObit Unlocker\IObitUnlocker.sys [41536 2022-08-17] (Microsoft Windows Hardware Compatibility Publisher -> IObit Information Technology)


S2 l1vhlwf; C:\WINDOWS\System32\drivers\l1vhlwf.sys [140704 2025-08-09] (Microsoft Windows -> Microsoft Corporation)


R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234072 2025-08-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)


S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-08-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)


R3 MBAMFarflt; C:\WINDOWS\System32\Drivers\farflt11.sys [212072 2025-08-21] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)


R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [80984 2025-08-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)


R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [242752 2025-08-23] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)


R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [190096 2025-08-23] (Malwarebytes Inc -> Malwarebytes)


R3 NTIOLib_CC_COMM; C:\Program Files (x86)\MSI\MSI Center\Lib\SYS\NTIOLib_X64.sys [32592 2024-09-10] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)


R3 NTIOLib_CC_CPU; C:\Program Files (x86)\MSI\MSI Center\Super Charger\NTIOLib_X64.sys [32472 2023-11-19] (MICRO-STAR INTERNATIONAL CO., LTD. -> MSI)


S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)


S3 vmbusproxy; C:\WINDOWS\system32\drivers\vmbusproxy.sys [98304 2025-06-13] (Microsoft Windows -> Microsoft Corporation)


S3 ACE-CORE302915; \??\C:\Program Files\AntiCheatExpert\ACE-CORE302915.sys [X]


S3 ace-game-0; \SystemRoot\System32\drivers\ace-game-0.sys [X]


S3 EAAntiCheat; system32\drivers\eaanticheat.sys [X]


S3 KslD; system32\drivers\wd\KslD.sys [X]


S0 WdBoot; system32\drivers\wd\WdBoot.sys [X]


S0 WdFilter; system32\drivers\wd\WdFilter.sys [X]


S3 WdNisDrv; system32\drivers\wd\WdNisDrv.sys [X]





==================== NetSvcs (Whitelisted) ===================





(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)








==================== One month (created) (Whitelisted) =========





(If an entry is included in the fixlist, the file/folder will be moved.)





2025-08-23 20:49 - 2025-08-23 20:49 - 000035778 _____ C:\Users\dejan\OneDrive\Desktop\FRST.txt


2025-08-23 20:46 - 2025-08-23 20:46 - 000190096 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys


2025-08-23 20:46 - 2025-08-23 20:46 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\IGDump


2025-08-23 20:42 - 2025-08-23 20:42 - 000791508 _____ C:\Users\dejan\OneDrive\Documents\cc_20250823_204227.reg


2025-08-23 20:38 - 2025-08-23 20:47 - 000000000 ____D C:\Program Files\CCleaner


2025-08-23 20:38 - 2025-08-23 20:38 - 000003936 _____ C:\WINDOWS\system32\Tasks\CCleaner Update


2025-08-23 20:38 - 2025-08-23 20:38 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner


2025-08-23 20:33 - 2025-08-23 20:36 - 000000000 ____D C:\AdwCleaner


2025-08-23 20:32 - 2025-08-23 20:49 - 000000000 ____D C:\FRST


2025-08-23 20:31 - 2025-08-23 20:32 - 002409472 _____ (Farbar) C:\Users\dejan\OneDrive\Desktop\FRST64.exe


2025-08-23 20:21 - 2025-08-23 20:21 - 000000400 __RSH C:\ProgramData\ntuser.pol


2025-08-23 20:09 - 2025-08-23 20:09 - 000000214 _____ C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job


2025-08-21 22:16 - 2025-08-21 22:16 - 040632320 _____ C:\WINDOWS\system32\config\SYSTEM_rs.bak


2025-08-21 22:15 - 2025-08-21 22:15 - 099614720 _____ C:\WINDOWS\system32\config\SOFTWARE_rs.bak


2025-08-21 20:25 - 2025-08-21 20:25 - 002828424 _____ (Malwarebytes) C:\Users\dejan\Downloads\MBSetup.exe


2025-08-21 20:25 - 2025-08-21 20:25 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk


2025-08-21 18:27 - 2025-08-21 19:25 - 000000000 ____D C:\KRD2024_Data


2025-08-21 16:22 - 2025-08-21 18:09 - 000000000 ____D C:\Users\dejan\AppData\Local\Rufus


2025-08-21 16:10 - 2025-08-21 22:11 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient


2025-08-21 16:10 - 2025-08-21 22:11 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection


2025-08-21 16:10 - 2025-08-21 16:10 - 000000000 ___RD C:\Program Files\Windows Defender


2025-08-21 16:10 - 2025-08-21 16:10 - 000000000 ___RD C:\Program Files (x86)\Windows Defender


2025-08-21 16:10 - 2025-08-21 16:10 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth


2025-08-21 15:10 - 2025-08-21 15:10 - 000001278 _____ C:\Users\dejan\OneDrive\Desktop\ESET Online Scanner.lnk


2025-08-21 15:10 - 2025-08-21 15:10 - 000000000 ____D C:\Users\dejan\AppData\Local\ESET


2025-08-21 13:32 - 2025-08-23 20:33 - 000000000 ____D C:\Users\dejan\AppData\Local\Malwarebytes


2025-08-21 13:32 - 2025-08-21 20:25 - 000000000 ____D C:\ProgramData\Malwarebytes


2025-08-21 13:32 - 2025-08-21 20:25 - 000000000 ____D C:\Program Files\Malwarebytes


2025-08-21 13:27 - 2025-08-21 02:24 - 000360448 _____ C:\ProgramData\VB54slpyaXrZ


2025-08-21 13:26 - 2025-08-21 22:14 - 000000000 ____D C:\Users\dejan\AppData\Roaming\fM7FYfA


2025-08-21 13:26 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\vtQiSL


2025-08-21 13:26 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\NqDPhRTEZI


2025-08-21 13:26 - 2025-08-21 20:26 - 000000004 ____H C:\ProgramData\or2184rc57.dat


2025-08-21 13:26 - 2025-08-21 13:26 - 000000000 ____D C:\Users\dejan\AppData\Roaming\ulEXZ8TQ


2025-08-21 13:26 - 2025-08-21 13:26 - 000000000 ____D C:\Users\dejan\AppData\Roaming\lapLyEXHvrl


2025-08-21 13:26 - 2025-08-21 13:26 - 000000000 ____D C:\Users\dejan\AppData\Roaming\K2q2gXehK


2025-08-21 13:26 - 2025-08-21 13:26 - 000000000 ____D C:\ProgramData\0zcb1


2025-08-21 13:25 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\04ed4f9f7fe100


2025-08-21 13:25 - 2025-08-21 19:22 - 000000000 ____D C:\Users\dejan\AppData\Local\DataVista Technologies Co


2025-08-21 13:25 - 2025-08-21 19:08 - 000000000 ____D C:\Users\dejan\AppData\Local\TypeId


2025-08-21 13:25 - 2025-08-21 13:25 - 000000128 ____H C:\ProgramData\or2184resa.dat


2025-08-21 13:25 - 2025-08-21 13:25 - 000000008 ____H C:\ProgramData\or2184it57.dat


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 ____D C:\Users\dejan\AppData\Roaming\LoWLm


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 ____D C:\Users\dejan\AppData\Roaming\a5S82XMPT


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 ____D C:\Users\dejan\AppData\Roaming\6U1l02hc


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 _____ C:\WINDOWS\TotalQt


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 _____ C:\WINDOWS\NetscapeStreaming


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 _____ C:\WINDOWS\LaceStatus


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 _____ C:\WINDOWS\FossilFundraising


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 _____ C:\WINDOWS\DfTires


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 _____ C:\WINDOWS\BlindBiology


2025-08-21 13:25 - 2025-08-21 13:25 - 000000000 _____ C:\WINDOWS\ArrangementConfigure


2025-08-21 13:24 - 2025-08-21 22:14 - 000000000 ____D C:\Users\dejan\AppData\Roaming\6MPLIbnCSF


2025-08-21 13:24 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\U2Cn0R2Ljt


2025-08-21 13:24 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\A480wit


2025-08-21 13:24 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\4O1tjr


2025-08-21 13:24 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Local\Phone Backup Extractor 7.3.6.4533


2025-08-21 13:24 - 2025-08-21 20:23 - 000000000 ____D C:\ProgramData\PhoneBackupExtractor


2025-08-21 13:24 - 2025-08-21 13:24 - 000000000 ____D C:\Users\dejan\AppData\Roaming\PjdKMICQz9


2025-08-21 13:24 - 2025-08-21 13:24 - 000000000 ____D C:\Users\dejan\AppData\Roaming\JviOLw2VQ


2025-08-21 13:24 - 2025-08-21 13:24 - 000000000 ____D C:\Users\dejan\AppData\Roaming\EUpvjNUk


2025-08-21 13:23 - 2025-08-21 22:14 - 000000000 ____D C:\Users\dejan\AppData\Roaming\HEgLLuY2ue


2025-08-21 13:23 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\wKTqtVfd9


2025-08-21 13:23 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\LuONw


2025-08-21 13:23 - 2025-08-21 21:04 - 000000000 ____D C:\Users\dejan\AppData\Roaming\8O0pu


2025-08-21 13:23 - 2025-08-21 13:23 - 000003342 _____ C:\WINDOWS\system32\Tasks\WindowsLogsHelper


2025-08-21 13:23 - 2025-08-21 13:23 - 000000000 ____D C:\Users\dejan\AppData\Roaming\xsTsHtvkr6v


2025-08-21 13:23 - 2025-08-21 13:23 - 000000000 ____D C:\Users\dejan\AppData\Roaming\WcHSv


2025-08-21 13:23 - 2025-08-21 13:23 - 000000000 ____D C:\Users\dejan\AppData\Roaming\RZ4nTSoA


2025-08-21 13:23 - 2025-08-21 13:23 - 000000000 ____D C:\Users\dejan\AppData\Roaming\p31rQzKrt0


2025-08-21 13:23 - 2025-08-21 13:23 - 000000000 ____D C:\Users\dejan\AppData\Roaming\owzpc


2025-08-21 13:23 - 2025-08-21 13:23 - 000000000 ____D C:\Users\dejan\AppData\Roaming\mMF8DdwM


2025-08-21 13:23 - 2025-08-21 13:23 - 000000000 ____D C:\Users\dejan\AppData\Roaming\7QiNcP


2025-08-21 13:23 - 2025-08-21 13:23 - 000000000 ____D C:\Users\dejan\AppData\Roaming\6NRIIl5JA98


2025-08-21 13:10 - 2025-08-21 13:29 - 000000000 ____D C:\WINDOWS\system32\appmgmt


2025-08-21 00:54 - 2025-08-21 22:14 - 000000618 _____ C:\Users\dejan\OneDrive\Desktop\New Text Document (2).txt


2025-08-21 00:31 - 2025-08-21 00:31 - 000000218 _____ C:\Users\dejan\AppData\Local\recently-used.xbel


2025-08-20 23:57 - 2025-08-20 23:57 - 000000000 ____D C:\Users\dejan\AppData\Local\gtk-3.0


2025-08-20 20:08 - 2025-08-21 01:24 - 000000000 ____D C:\Users\dejan\AppData\Local\DiskDrill


2025-08-20 20:08 - 2025-08-20 20:08 - 000000000 ____D C:\Users\dejan\AppData\Local\CrashRpt


2025-08-20 20:08 - 2025-08-20 20:08 - 000000000 ____D C:\ProgramData\CleverFiles


2025-08-20 20:05 - 2025-08-20 20:05 - 000000018 _____ C:\Users\dejan\AppData\Roaming\.cache9050425797200915815.dat


2025-08-20 20:05 - 2025-08-20 20:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CleverFiles Disk Drill (x64)


2025-08-20 20:05 - 2025-08-20 20:05 - 000000000 ____D C:\Program Files\dotnet


2025-08-20 20:05 - 2025-08-20 20:05 - 000000000 ____D C:\Program Files\Dokan


2025-08-20 20:05 - 2025-08-20 20:05 - 000000000 ____D C:\Program Files\CleverFiles


2025-08-20 19:25 - 2025-08-23 20:38 - 000000000 ____D C:\ProgramData\Piriform


2025-08-20 19:12 - 2025-08-21 19:22 - 000000000 ____D C:\Users\dejan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bitwar


2025-08-20 19:12 - 2025-08-20 19:14 - 000000000 ____D C:\Users\dejan\AppData\Roaming\BitwarDataRecovery


2025-08-20 19:12 - 2025-08-20 19:12 - 000000000 ____D C:\Program Files (x86)\Bitwar


2025-08-20 19:10 - 2025-08-20 19:10 - 000000000 ____D C:\Users\dejan\AppData\Roaming\Wondershare


2025-08-20 19:10 - 2025-08-20 19:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare


2025-08-20 19:09 - 2025-08-20 19:10 - 000000000 ____D C:\ProgramData\Wondershare


2025-08-20 19:09 - 2025-08-20 19:09 - 000000000 ____D C:\Program Files\Wondershare


2025-08-20 18:49 - 2025-08-20 18:49 - 000001095 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tenorshare 4DDiG.lnk


2025-08-20 18:49 - 2025-08-20 18:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tenorshare 4DDiG


2025-08-20 18:49 - 2025-08-20 18:49 - 000000000 ____D C:\Program Files\Tenorshare


2025-08-20 17:53 - 2025-05-07 21:25 - 006723544 _____ (Realtek Semiconductor Corp.) C:\WINDOWS\system32\Drivers\RTKVHD64.sys


2025-08-20 17:40 - 2025-08-20 17:40 - 000000000 ____D C:\Users\dejan\AppData\Roaming\KSM_Gen15


2025-08-19 00:41 - 2025-08-19 00:41 - 000000000 ____D C:\Users\dejan\AppData\Roaming\Terrible Toybox


2025-08-16 13:02 - 2025-08-16 13:02 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Adriaan de Jongh


2025-08-16 12:56 - 2025-08-16 12:56 - 000000000 ____D C:\Users\dejan\AppData\Local\Prologue


2025-08-16 11:43 - 2025-08-21 22:18 - 000000000 ____D C:\WINDOWS\CbsTemp


2025-08-15 15:37 - 2025-08-15 15:37 - 000000000 ___RD C:\Users\dejan\OneDrive\Documents\Power BI Desktop


2025-08-15 15:35 - 2025-08-15 15:35 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Power BI Desktop


2025-08-15 15:34 - 2025-08-15 15:35 - 000000000 ____D C:\Program Files\Microsoft Power BI Desktop


2025-08-10 22:48 - 2025-08-11 04:38 - 000000000 ___RD C:\Users\dejan\OneDrive\Documents\Battlefield 1


2025-08-10 22:33 - 2025-08-10 22:33 - 000000000 ____D C:\Users\dejan\AppData\Roaming\EAAntiCheat.Installer.Tool


2025-08-09 22:38 - 2025-08-09 22:38 - 000000000 ____D C:\Users\dejan\AppData\Roaming\SEGA


2025-08-09 22:38 - 2025-08-09 22:38 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\SEGA


2025-08-09 20:26 - 2025-08-09 20:26 - 000034314 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json


2025-08-09 20:26 - 2025-08-09 20:26 - 000034314 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json


2025-08-08 21:16 - 2025-08-08 21:16 - 000000000 ____D C:\Users\dejan\AppData\Roaming\Aspyr Media


2025-08-08 21:16 - 2025-08-08 21:16 - 000000000 ____D C:\Users\dejan\AppData\Local\TheObserver


2025-08-08 21:16 - 2025-08-08 21:16 - 000000000 ____D C:\Users\dejan\AppData\Local\Aspyr Media


2025-08-08 17:59 - 2025-08-08 17:59 - 000000000 ___RD C:\Users\dejan\OneDrive\Documents\Road Redemption


2025-08-08 17:59 - 2025-08-08 17:59 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Pixel Dash Studios _ EQ Games


2025-08-08 17:05 - 2025-08-08 17:05 - 000003484 _____ C:\WINDOWS\system32\Tasks\ModifyLinkUpdate


2025-08-08 17:05 - 2025-08-08 17:05 - 000003152 _____ C:\WINDOWS\system32\Tasks\StartCN


2025-08-08 17:05 - 2025-08-08 17:05 - 000003072 _____ C:\WINDOWS\system32\Tasks\StartDVR


2025-08-08 17:05 - 2025-08-08 17:05 - 000002546 _____ C:\WINDOWS\system32\Tasks\AMDRyzenMasterSDKTask


2025-08-08 17:05 - 2025-08-08 17:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMDInstallManager


2025-08-08 17:05 - 2025-08-08 17:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Software꞉ Adrenalin Edition


2025-08-08 17:05 - 2025-08-08 17:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Bug Report Tool


2025-08-08 17:03 - 2025-08-01 17:59 - 002413560 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe


2025-08-08 17:03 - 2025-08-01 17:59 - 002413560 _____ C:\WINDOWS\system32\vulkaninfo.exe


2025-08-08 17:03 - 2025-08-01 17:59 - 002193912 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atiadlxx.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 001918944 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe


2025-08-08 17:03 - 2025-08-01 17:59 - 001918944 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe


2025-08-08 17:03 - 2025-08-01 17:59 - 001831928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxy.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 001831928 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\atiadlxx.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 001615864 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 001615864 _____ C:\WINDOWS\system32\vulkan-1.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 001427816 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 001427816 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 001068536 _____ (AMD) C:\WINDOWS\system32\atieclxx.exe


2025-08-08 17:03 - 2025-08-01 17:59 - 000631288 _____ C:\WINDOWS\system32\GameManager64.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 000559608 _____ C:\WINDOWS\system32\atieah64.exe


2025-08-08 17:03 - 2025-08-01 17:59 - 000526328 _____ C:\WINDOWS\system32\EEURestart.exe


2025-08-08 17:03 - 2025-08-01 17:59 - 000479248 _____ C:\WINDOWS\SysWOW64\GameManager32.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 000473568 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\atidemgy.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 000422392 _____ C:\WINDOWS\SysWOW64\atieah32.exe


2025-08-08 17:03 - 2025-08-01 17:59 - 000200696 _____ (AMD) C:\WINDOWS\system32\atimuixx.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 000190968 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atisamu64.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 000150544 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atisamu32.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 000147448 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amfrt64.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 000132880 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atidxx32.dll


2025-08-08 17:03 - 2025-08-01 17:59 - 000122336 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amfrt32.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 121146888 _____ C:\WINDOWS\system32\amd_comgr_2.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 103184888 _____ C:\WINDOWS\SysWOW64\amd_comgr32.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 005221904 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdadlx64.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 005008400 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdadlx32.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 001329144 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsasrv64.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 001184240 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdlvr64.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000998392 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdlvr32.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000801776 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\Rapidfire64.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000787984 _____ C:\WINDOWS\system32\hiprt0200064.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000678904 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\Rapidfire.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000610176 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdsacli64.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000592368 _____ C:\WINDOWS\system32\amdgfxinfo64.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000556976 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\amdsacli32.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000549392 _____ C:\WINDOWS\system32\dgtrayicon.exe


2025-08-08 17:03 - 2025-08-01 17:58 - 000471568 _____ C:\WINDOWS\system32\amdlogum.exe


2025-08-08 17:03 - 2025-08-01 17:58 - 000450040 _____ C:\WINDOWS\SysWOW64\amdgfxinfo32.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000405216 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdfendr.stz


2025-08-08 17:03 - 2025-08-01 17:58 - 000344592 _____ C:\WINDOWS\system32\clinfo.exe


2025-08-08 17:03 - 2025-08-01 17:58 - 000227856 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000197648 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000140248 _____ C:\WINDOWS\system32\amdxc64.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000116704 _____ C:\WINDOWS\SysWOW64\amdxc32.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000067320 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\amdfendrmgr.stz


2025-08-08 17:03 - 2025-08-01 17:58 - 000051728 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\system32\RapidFireServer64.dll


2025-08-08 17:03 - 2025-08-01 17:58 - 000048632 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\RapidFireServer.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 001748488 _____ (AMD) C:\WINDOWS\system32\amf-mft-mjpeg-decoder64.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 001423136 _____ (AMD) C:\WINDOWS\SysWOW64\amf-mft-mjpeg-decoder32.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000554848 _____ C:\WINDOWS\system32\amdmiracast.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000179776 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdave64.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000177168 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl6.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000169320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atimpc64.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000169312 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdpcom64.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000162448 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\atidxx64.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000154848 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdave32.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000145936 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\system32\amdmmcl.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000141320 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\atimpc32.dll


2025-08-08 17:03 - 2025-08-01 17:57 - 000141312 _____ (Advanced Micro Devices, Inc. ) C:\WINDOWS\SysWOW64\amdpcom32.dll


2025-08-08 17:03 - 2025-08-01 17:17 - 125680512 _____ C:\WINDOWS\system32\amdxc64.so


2025-08-08 17:03 - 2025-08-01 17:17 - 009979672 _____ C:\WINDOWS\system32\hiprt02000_amd.hipfb


2025-08-08 17:03 - 2025-08-01 17:17 - 002459536 _____ C:\WINDOWS\system32\oro_compiled_kernels.hipfb


2025-08-07 21:00 - 2025-08-07 21:00 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\JutsuGames


2025-08-07 20:27 - 2025-08-07 20:27 - 000000000 ____D C:\Users\dejan\AppData\Local\BattlefieldGameData.CH1-qol.Win32


2025-08-07 20:26 - 2025-08-07 21:23 - 000000000 ___RD C:\Users\dejan\OneDrive\Documents\Battlefield 6 Open Beta


2025-08-07 17:31 - 2025-08-07 17:31 - 000002599 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WSL.lnk


2025-08-07 17:31 - 2025-08-07 17:31 - 000002546 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WSL Settings.lnk


2025-08-07 17:31 - 2025-08-07 17:31 - 000000000 ____D C:\Program Files\WSL


2025-08-05 19:03 - 2025-08-05 19:21 - 000000000 ___HD C:\Users\dejan\AppData\Roaming\Cache


2025-08-05 19:03 - 2025-08-05 19:03 - 000000000 ____D C:\Users\dejan\AppData\Local\Dakar2Game


2025-08-01 00:41 - 2025-08-01 00:54 - 000000000 ____D C:\ProgramData\AntiCheatExpert


2025-08-01 00:41 - 2025-08-01 00:53 - 000000000 ____D C:\Program Files\AntiCheatExpert


2025-08-01 00:41 - 2025-08-01 00:41 - 001426712 _____ (ANTICHEATEXPERT.COM) C:\WINDOWS\system32\Drivers\ace-game.sys


2025-08-01 00:40 - 2025-08-01 00:53 - 000000000 ____D C:\Users\dejan\AppData\Roaming\df_launcher_global_Steam_30029601


2025-08-01 00:04 - 2025-08-01 00:04 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Sysiac Games


2025-07-31 23:45 - 2025-07-31 23:45 - 000000000 ____D C:\Users\dejan\AppData\Local\Conarium


2025-07-31 21:24 - 2025-07-31 21:24 - 000000000 ____D C:\Users\dejan\AppData\Local\Riot Games


2025-07-31 21:24 - 2025-07-31 21:24 - 000000000 ____D C:\ProgramData\Riot Games


2025-07-31 21:13 - 2025-07-31 21:13 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Alt Shift


2025-07-31 20:35 - 2025-07-31 20:35 - 000000000 ____D C:\Users\dejan\AppData\Local\COTS


2025-07-31 20:20 - 2025-07-31 20:20 - 000000000 ____D C:\Users\dejan\AppData\Local\Indiana


2025-07-31 09:07 - 2025-07-31 09:07 - 000000000 ____D C:\Users\dejan\hitman


2025-07-31 09:04 - 2025-07-31 09:04 - 000000000 ____D C:\Users\dejan\AppData\Local\IO Interactive


2025-07-30 23:43 - 2025-07-30 23:44 - 000000000 ___RD C:\Users\dejan\OneDrive\Documents\Paradox Interactive


2025-07-30 23:15 - 2025-07-30 23:15 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Unfold Games


2025-07-30 23:02 - 2025-07-30 23:02 - 000000000 ____D C:\Users\dejan\AppData\Local\Maneater


2025-07-30 20:45 - 2025-07-30 20:45 - 000000000 ____D C:\Users\dejan\AppData\Local\ToastNotificationManagerCompat


2025-07-29 21:24 - 2025-07-29 21:24 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Zachtronics


2025-07-29 21:15 - 2025-07-29 21:15 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Bedtime Digital Games


2025-07-29 21:12 - 2025-07-29 21:13 - 000000000 ____D C:\Users\dejan\AppData\Roaming\MudRunner


2025-07-29 20:42 - 2025-07-29 20:42 - 000000000 ____D C:\Users\dejan\AppData\Local\AVGame


2025-07-28 20:53 - 2025-07-28 20:53 - 000000000 ____D C:\Users\dejan\AppData\Roaming\playway-launcher


2025-07-28 20:53 - 2025-07-28 20:53 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Red Dot Games


2025-07-28 19:13 - 2025-07-28 19:13 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\AutoAttack Games, Inc_


2025-07-28 18:39 - 2025-07-28 18:39 - 000000000 ____D C:\Users\dejan\AppData\Local\MidnightGhostHunt


2025-07-24 22:48 - 2025-07-24 22:48 - 000936712 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Device.dll


2025-07-24 22:48 - 2025-07-24 22:48 - 000063752 _____ (Advanced Micro Devices) C:\WINDOWS\system32\Platform.dll





==================== One month (modified) ==================





(If an entry is included in the fixlist, the file/folder will be moved.)





2025-08-23 20:48 - 2024-12-29 22:07 - 000003326 _____ C:\WINDOWS\system32\Tasks\CCleanerCrashReporting


2025-08-23 20:48 - 2024-12-29 22:07 - 000000670 _____ C:\WINDOWS\Tasks\CCleanerCrashReporting.job


2025-08-23 20:47 - 2024-08-25 19:53 - 000000000 ____D C:\Program Files\CrystalDiskInfo


2025-08-23 20:47 - 2024-08-25 18:56 - 000000000 ___RD C:\Users\dejan\OneDrive


2025-08-23 20:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp


2025-08-23 20:47 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness


2025-08-23 20:46 - 2024-12-10 00:40 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT


2025-08-23 20:46 - 2024-12-10 00:38 - 000030514 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2


2025-08-23 20:46 - 2024-12-10 00:36 - 000306088 _____ C:\WINDOWS\system32\FNTCACHE.DAT


2025-08-23 20:46 - 2024-12-10 00:36 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK


2025-08-23 20:46 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft


2025-08-23 20:45 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI


2025-08-23 20:44 - 2024-12-09 20:03 - 000000000 ___DC C:\WINDOWS\Panther


2025-08-23 20:44 - 2024-08-31 23:25 - 000000000 ____D C:\Users\dejan\AppData\Local\CrashDumps


2025-08-23 20:44 - 2024-08-25 19:39 - 000000000 ____D C:\Program Files (x86)\Steam


2025-08-23 20:38 - 2024-12-29 22:07 - 000002896 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC - dejan


2025-08-23 20:00 - 2024-08-25 18:54 - 000000000 ____D C:\Users\dejan\AppData\Local\D3DSCache


2025-08-21 22:23 - 2024-09-21 11:59 - 000000000 ____D C:\Users\dejan\AppData\Roaming\vlc


2025-08-21 20:56 - 2025-03-07 20:34 - 000000000 ____D C:\Users\dejan\AppData\Local\Paradox Interactive


2025-08-21 20:25 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP


2025-08-21 20:25 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps


2025-08-21 20:21 - 2024-12-12 19:04 - 000836658 _____ C:\WINDOWS\system32\PerfStringBackup.INI


2025-08-21 20:21 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF


2025-08-21 19:23 - 2024-12-10 00:37 - 000000000 ____D C:\Users\dejan


2025-08-21 19:22 - 2024-09-28 00:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Topaz Photo AI


2025-08-21 19:22 - 2024-09-02 18:32 - 000000000 ____D C:\ProgramData\IObit


2025-08-21 19:22 - 2024-08-25 19:50 - 000000000 ____D C:\Users\dejan\AppData\Roaming\GHISLER


2025-08-21 19:22 - 2024-08-25 19:28 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AIMP


2025-08-21 19:22 - 2024-08-25 19:28 - 000000000 ____D C:\Program Files\AIMP


2025-08-21 19:22 - 2024-04-01 09:29 - 000000000 ____D C:\WINDOWS\Setup


2025-08-21 19:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism


2025-08-21 19:22 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\appcompat


2025-08-21 19:22 - 2022-05-07 07:24 - 000000000 ___HD C:\WINDOWS\system32\GroupPolicy


2025-08-21 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Vss


2025-08-21 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps


2025-08-21 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\registration


2025-08-21 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PLA


2025-08-21 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\IdentityCRL


2025-08-21 19:09 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Help


2025-08-21 19:09 - 2024-04-01 09:21 - 000000000 ____D C:\WINDOWS\servicing


2025-08-21 18:09 - 2024-08-25 18:32 - 000000000 ___SD C:\Users\dejan\AppData\Roaming\Microsoft\Credentials


2025-08-21 15:10 - 2024-08-25 19:05 - 000000000 ____D C:\WINDOWS\system32\MRT


2025-08-21 13:32 - 2024-08-25 18:54 - 000000000 ____D C:\Users\dejan\AppData\Local\Packages


2025-08-21 13:32 - 2024-08-25 18:26 - 000000000 ____D C:\ProgramData\Packages


2025-08-21 13:32 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps.tmp


2025-08-21 13:27 - 2024-08-25 19:49 - 000000000 ____D C:\Users\dejan\AppData\Roaming\qBittorrent


2025-08-21 02:28 - 2024-08-26 03:24 - 000012288 ___SH C:\DumpStack.log.tmp


2025-08-21 02:28 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources


2025-08-21 02:26 - 2024-08-25 20:24 - 000000000 ____D C:\Users\dejan\AppData\Roaming\Microsoft\MMC


2025-08-20 20:23 - 2024-09-27 18:12 - 000000000 ____D C:\Users\dejan\OneDrive\Documents\ViberDownloads


2025-08-20 20:05 - 2024-08-25 18:58 - 000000000 ____D C:\ProgramData\Package Cache


2025-08-20 18:50 - 2024-08-25 19:27 - 000000000 ____D C:\Program Files\7-Zip


2025-08-20 18:45 - 2024-09-27 18:10 - 000000000 ____D C:\Users\dejan\AppData\Roaming\ViberPC


2025-08-20 17:33 - 2024-08-25 19:53 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo


2025-08-20 15:27 - 2024-08-25 19:50 - 000000000 ____D C:\Users\dejan\AppData\Local\GHISLER


2025-08-20 14:23 - 2024-12-10 00:36 - 000000000 ____D C:\WINDOWS\system32\SleepStudy


2025-08-19 17:56 - 2024-08-25 19:12 - 000000000 ____D C:\Users\dejan\AppData\Local\AMD_Common


2025-08-19 00:40 - 2024-08-25 21:05 - 000000000 ____D C:\Program Files\Epic Games


2025-08-18 23:14 - 2024-08-26 18:57 - 000000000 ___RD C:\Users\dejan\OneDrive\Desktop\SyncNShare Hub


2025-08-18 17:51 - 2025-05-09 17:26 - 000000000 ____D C:\Users\dejan\AppData\Roaming\obsidian


2025-08-17 12:09 - 2024-08-26 03:24 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk


2025-08-15 00:26 - 2024-08-25 19:35 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk


2025-08-14 01:12 - 2025-02-06 19:33 - 000003564 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-609623560-524961366-3877464449-1001


2025-08-14 01:12 - 2024-12-10 00:40 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-609623560-524961366-3877464449-1001


2025-08-14 01:12 - 2024-12-10 00:40 - 000003368 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-609623560-524961366-3877464449-1001


2025-08-14 01:12 - 2024-08-25 18:56 - 000002379 _____ C:\Users\dejan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk


2025-08-13 02:13 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView


2025-08-13 02:13 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism


2025-08-13 02:13 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe


2025-08-13 02:13 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr


2025-08-13 01:52 - 2024-08-25 19:05 - 223939376 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe


2025-08-12 23:47 - 2024-12-10 00:38 - 003389952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll


2025-08-12 14:59 - 2024-08-26 18:57 - 000003532 _____ C:\Users\dejan\OneDrive\Desktop\New Text Document.txt


2025-08-12 11:53 - 2024-12-10 00:40 - 000004242 _____ C:\WINDOWS\system32\Tasks\Opera scheduled Autoupdate 1724607559


2025-08-12 11:53 - 2024-08-25 19:39 - 000001386 _____ C:\Users\dejan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk


2025-08-11 21:43 - 2024-09-27 18:10 - 000000000 ____D C:\Users\dejan\AppData\Local\Viber


2025-08-11 15:22 - 2024-08-25 19:28 - 000000000 ____D C:\Users\dejan\AppData\Roaming\AIMP


2025-08-11 00:17 - 2024-08-29 20:38 - 000000000 ____D C:\Users\dejan\AppData\Local\Origin


2025-08-10 22:34 - 2025-01-17 19:53 - 000000000 ____D C:\ProgramData\Packer


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ___SD C:\WINDOWS\system32\F12


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\migwiz


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellComponents


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions


2025-08-09 22:43 - 2024-04-01 09:26 - 000000000 ____D C:\Program Files\Common Files\System


2025-08-08 21:16 - 2024-08-29 20:38 - 000000000 ____D C:\Users\dejan\AppData\Local\cache


2025-08-08 21:07 - 2024-12-10 00:37 - 000000000 ____D C:\Users\dejan\AppData\Roaming\Microsoft\Spelling


2025-08-08 17:05 - 2025-03-17 21:53 - 000004054 _____ C:\WINDOWS\system32\Tasks\AMD Install Manager - Check For Updates


2025-08-08 17:05 - 2024-08-25 18:59 - 000000000 ____D C:\AMD


2025-08-08 17:05 - 2024-08-25 18:30 - 000000000 ____D C:\Program Files\AMD


2025-08-07 20:27 - 2025-01-17 19:55 - 000000000 ____D C:\Users\dejan\AppData\Roaming\Electronic Arts


2025-08-07 20:27 - 2025-01-17 19:55 - 000000000 ____D C:\ProgramData\Frostbite


2025-08-05 18:00 - 2024-08-25 19:37 - 000002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk


2025-08-01 09:51 - 2024-08-31 18:24 - 000000000 ____D C:\ProgramData\GOG.com


2025-08-01 09:51 - 2024-08-31 18:23 - 000000000 ____D C:\Program Files (x86)\GOG Galaxy


2025-08-01 08:54 - 2024-12-10 00:40 - 000003536 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA


2025-08-01 08:54 - 2024-12-10 00:40 - 000003410 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore


2025-08-01 00:12 - 2025-04-21 18:32 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Unity


2025-07-31 23:46 - 2024-08-25 19:40 - 000000000 ____D C:\Users\dejan\AppData\Local\UnrealEngine


2025-07-31 21:09 - 2024-08-26 18:57 - 000000000 ____D C:\Users\dejan\OneDrive\Documents\My Games


2025-07-31 18:04 - 2025-05-15 21:29 - 000000000 ____D C:\Users\dejan\AppData\LocalLow\Amanita Design


2025-07-30 23:54 - 2025-01-09 20:19 - 000000000 ____D C:\Users\dejan\AppData\Roaming\EasyAntiCheat


2025-07-30 23:54 - 2024-08-25 21:01 - 000000000 ____D C:\Program Files (x86)\EasyAntiCheat_EOS


2025-07-30 23:46 - 2025-03-07 20:35 - 000000000 ____D C:\Users\dejan\AppData\Roaming\paradox-launcher-v2


2025-07-30 23:02 - 2024-08-25 19:40 - 000000000 ____D C:\Users\dejan\AppData\Local\EpicGamesLauncher


2025-07-30 20:49 - 2024-08-25 19:05 - 000000000 ____D C:\MSI


2025-07-29 17:55 - 2025-02-26 18:21 - 000004258 _____ C:\WINDOWS\system32\Tasks\Opera Air scheduled Autoupdate 1740586860


2025-07-29 17:55 - 2025-02-26 18:21 - 000001422 _____ C:\Users\dejan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Air Browser.lnk


2025-07-25 05:06 - 2024-08-25 19:23 - 003074200 _____ (Advanced Micro Devices, Inc.) C:\WINDOWS\SysWOW64\AMDBugReportTool.exe





==================== Files in the root of some directories ========





2025-08-21 13:25 - 2025-08-21 13:25 - 000000008 ____H () C:\ProgramData\or2184it57.dat


2025-08-21 13:26 - 2025-08-21 20:26 - 000000004 ____H () C:\ProgramData\or2184rc57.dat


2025-08-21 13:25 - 2025-08-21 13:25 - 000000128 ____H () C:\ProgramData\or2184resa.dat


2025-08-20 20:05 - 2025-08-20 20:05 - 000000018 _____ () C:\Users\dejan\AppData\Roaming\.cache9050425797200915815.dat


2024-09-29 19:59 - 2024-09-29 19:59 - 000006046 _____ () C:\Users\dejan\AppData\Roaming\plugin_scan_state_VST2_x32.scan


2024-09-29 19:59 - 2024-09-29 19:59 - 000006046 _____ () C:\Users\dejan\AppData\Roaming\plugin_scan_state_VST2_x64.scan


2024-09-29 19:59 - 2024-09-29 19:59 - 000000059 _____ () C:\Users\dejan\AppData\Roaming\plugin_scan_state_VST3_x32.scan


2024-09-29 19:59 - 2024-09-29 19:59 - 000000059 _____ () C:\Users\dejan\AppData\Roaming\plugin_scan_state_VST3_x64.scan


2025-01-13 20:23 - 2025-01-13 20:23 - 000000048 ____R () C:\Users\dejan\AppData\Local\038C77B05E7DC0DC4D28F7078D01DCA1


2025-08-21 00:31 - 2025-08-21 00:31 - 000000218 _____ () C:\Users\dejan\AppData\Local\recently-used.xbel


2024-08-25 19:37 - 2024-08-25 19:37 - 000000003 _____ () C:\Users\dejan\AppData\Local\updater.log


2024-08-25 19:37 - 2024-08-25 19:37 - 000000424 _____ () C:\Users\dejan\AppData\Local\UserProducts.xml





==================== SigCheck ============================





(There is no automatic fix for files that do not pass verification.)





==================== End of FRST.txt ========================

[Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 27 Avg 2025 17:09 ---------

Moze da se obrise ili zakljuca jer cu reinstalirati. Nije mi vise pouzdan ovakav sistem

Moguc malware u telefonu

nobody@mycity.rs (Brksi) — Wed, 06 Aug 2025 09:27:43 +0100

----------- Napisano: 05 Avg 2025 11:05 ---------

...... koji se mozda preneo i u komp. Ueo sam nov mobilini u nekoj beogradskoj online prodavnici. Imam razloga da verujem da je telefon zarazen malwareom. Od kako sam ga aktivirao pocelu su da mu se desavaju cudne stvari. Naime 10 dana nakon upotrebe gde sam rucno preno podatke preko kompa (sto znaci da je mob bio prikacen usb-om za komp) najpre je prestao da mi radi google smart zvucnik i home assistent. Izlogovan sam iz zvucnika na mom accountu i vise ne mogu da ga vratim nazad u google home app, on ga prepozna ali kada dodje do dela befor you use google assistent iznenada mi trazi da azuriram osnovnu google aplikaciju koja je vec azurirana i kad je deinstaliram i azuriram on (google home app) opet trazi azuriranje osnovne google aplikacije.Za ovo sam trazio pomoc od googla - bez odgovora.

https://support.google.com/accounts/thread/362442686

Medjutim ono sto se jos desava je da je na moju gmail adresu poceli da stizu mailovi sa sajta cars .com gde se prodaju automobili. Ja se na tom sajtu nikad nisam registrovao, a kamoli raspitivao za neka auta. Kliknuo sam nanjihov lin i unsubscribeovao sam se odatle. Jutros sam sa kaspreskym proverio da li nalozi koji su povezani sa mojim telefonom imaju dataleak nista nije detektovao.

A sad ono naj vaznije kada razgovaram sa nekim na taj novi mobilni preko speakerfona mis krene da mi luduje i sam da ludacki pomera strelicu po ekranu inada blokira i vise ne moze da se pomera, a klikovi rade i tastaura radi i mogu samo da ga resetujem da bih povartio misaa. E sad ili mis riknjava ili mobilni salje interference kada ukljucen speakerfon (mada u pitanju je zicni mis) ili je virus.... Da bih iskljucio ovu poslednju mogucnost dostavljam vam logove. Cak i da je mob zarazen neki malware om ili spywareom i da mi je haknuo nalog neverujem da takav virus moze da zarazi i windows, ali moram od nekud poceti po svemu sudeci moguce je da jeneko hjackovao moju gmail adresu. Mada nema sumljivih logovanja nema drugi ip adresa na gmailu adresiali ko zna sa kakvim sistem je dosao ovaj telefon......... Samo da nisuneki prevaranti koji podmecu malware u telefone u nadi da ce oci do neke platne kartice......... Kod mene to ne mogu, jer preko telefona nista ne koristim, ali komp je vec druga prica.

Izve�taj skeniranja od Farbar Recovery Scan Tool (FRST) (x64) Verzija: 31-07-2025


Pokrenuo Brksi (administrator) na DESKTOP-L4G4E26 (ASUS System Product Name) (05-08-2025 12:02:58)


Pokrenuto sa C:\Users\Brksi\Desktop\FRST64.exe


U�itani Profili: Brksi


Platform: Microsoft Windows 10 Pro Verzija 22H2 19045.6093 (X64) Jezik: engleski (Ujedinjeno Kraljevstvo) -> srpski (latinica, Srbija)


Podrazumevani pregleda�: Chrome


Re�im pokretanja sistema: Normal





==================== Procesi (Na Beloj Listi) =================





(Ukoliko je stavka une�ena u fixlist, proces ce biti zatvoren. Datoteka nece biti preme�ten.)





(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe


(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe


(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe <8>


(ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe


(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler.exe


(Brave Software, Inc. -> BraveSoftware Inc.) C:\Program Files (x86)\BraveSoftware\Update\1.3.361.151\BraveCrashHandler64.exe


(C:\Program Files (x86)\ASUS\ArmouryDevice\asus_framework.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\SwAgent\ArmourySwAgent.exe


(C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmourySocketServer.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\ArmouryHtmlDebugServer.exe


(C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.21\avp.exe ->) (AO Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.21\avpui.exe


(C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.22\ksde.exe ->) (AO Kaspersky Lab -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.22\ksdeui.exe


(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe


(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe


(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe


(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe


(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe


(C:\Program Files\ASUS\Armoury Crate Service\ArmouryCrate.Service.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\Armoury Crate Service\ArmouryCrate.UserSessionHelper.exe


(cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe


(DriverStore\FileRepository\u0416003.inf_amd64_706cc64a85ddf686\B415817\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0416003.inf_amd64_706cc64a85ddf686\B415817\atieclxx.exe


(explorer.exe ->) (Brave Software, Inc. -> Brave Software, Inc.) C:\Program Files\BraveSoftware\Brave-Browser\Application\brave.exe <14>


(explorer.exe ->) (NetSeT Global Solutions d.o.o.) [Datoteka nije potpisana] C:\Program Files\TrustEdgeID\TokenUtil.exe


(explorer.exe ->) (Open Source Developer, Phillip Gibbons -> Highresolution Enterprises) C:\Users\Brksi\Pictures\XMouseButtonControl 2.20.5 Portable\64bit (x64)\XMouseButtonControl.exe


(explorer.exe ->) (Skutta, Kristjan -> ) F:\Program files\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe


(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe


(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe


(services.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc) C:\Windows\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompatSvc.exe


(services.exe ->) (Advanced Micro Devices -> AMD) C:\Program Files\AMD\Performance Profile Client\AUEPDU.exe


(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0416003.inf_amd64_706cc64a85ddf686\B415817\atiesrxx.exe


(services.exe ->) (ASUSTeK Computer Inc. -> ) [Datoteka nije potpisana] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.25\AsSysCtrlService.exe


(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUS Inc.) C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe


(services.exe ->) (ASUSTeK COMPUTER INC. -> Asustek Computer Inc.) C:\Program Files (x86)\ASUS\AsusCertService\1.2.36\AsusCertService.exe


(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.50\AsusFanControlService.exe


(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AXSP\4.06.01\atkexComSvc.exe


(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files (x86)\LightingService\LightingService.exe


(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.) C:\Program Files\ASUS\Armoury Crate Service\ArmouryCrate.Service.exe


(services.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.) C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe


(services.exe ->) (DTS, Inc. -> DTS Inc.) C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe


(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe


(services.exe ->) (Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrB.exe


(services.exe ->) (FOXIT SOFTWARE INC. -> Foxit Software Inc.) C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe


(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe


(services.exe ->) (HP) [Datoteka nije potpisana] C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe


(services.exe ->) (Kaspersky Lab JSC -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.22\ksde.exe


(services.exe ->) (Kaspersky Labs GmbH -> AO Kaspersky Lab) C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.21\avp.exe <2>


(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe


(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrsr.exe


(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_be03f2dca68bf962\RtkAudUService64.exe <2>


(services.exe ->) (Wondershare Technology Co.,Ltd -> Wondershare) C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe


(sihost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_11.2502.2.0_x64__8wekyb3d8bbwe\CalculatorApp.exe


(svchost.exe ->) (38BC0208-0916-4E44-909B-E6832F47CDE7 -> ) C:\Program Files\WindowsApps\B9ECED6F.ArmouryCrate_6.2.11.0_x64__qmba6cd70vzyy\ArmouryCrate.exe


(svchost.exe ->) (Advanced Micro Devices -> AMD) C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe


(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe


(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x64.exe


(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ) C:\Program Files\ASUS\KINGSTON_Aac_DRAM\AacKingstonDramHal_x86.exe


(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe


(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUS) C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe


(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTek Compputer Inc.) C:\Program Files\ASUS\AacMB\Aac3572MbHal_x86.exe <2>


(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\AacExtCard\extensionCardHal_x86.exe


(svchost.exe ->) (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.) C:\Program Files\ASUS\ASUS_Aac_DRAM\Aac3572DramHal_x86.exe


(svchost.exe ->) (ASUSTeK Computer Inc. -> TODO: <Company name>) C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe


(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft Office\root\Office16\SDXHelper.exe


(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe


(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe


(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe





==================== Registar (Na Beloj Listi) ===================





(Ukoliko je stavka une�ena u fixlist, registru stavka ce biti vra�ena na podrazumevanu vrednost ili uklonjena. Datoteka ne�e biti preme�tena.)





HKLM\...\Run: [RtkAudUService] => C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_be03f2dca68bf962\RtkAudUService64.exe [3498464 2022-05-25] (Realtek Semiconductor Corp. -> Realtek Semiconductor)


HKLM\...\Run: [Virtual Pet] => C:\Program Files\ASUS\Virtual Pet\Virtual Pet.exe [32672816 2025-04-23] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)


HKLM-x32\...\Run: [] => [X]


HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)


HKLM-x32\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)


HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [129288 2025-06-13] (Adobe Inc. -> )


HKLM\...\Policies\Explorer: [NoRecentDocsHistory] 1


HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restrikcije <==== Pa�nja


HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restrikcije <==== Pa�nja


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\Run: [Steam] => F:\Program files\Steam\steam.exe [4407656 2024-07-17] (Valve Corp. -> Valve Corporation)


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\Run: [WallpaperEngine] => F:\Program files\Steam\steamapps\common\wallpaper_engine\wallpaper32.exe [3223136 2023-12-22] (Skutta, Kristjan -> )


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\Run: [mouse] => C:\Users\Brksi\Pictures\XMouseButtonControl 2.20.5 Portable\64bit (x64)\XMouseButtonControl.exe [1737064 2023-06-24] (Open Source Developer, Phillip Gibbons -> Highresolution Enterprises)


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [2582632 2023-04-17] (Electronic Arts, Inc. -> Electronic Arts)


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\Run: [WSHelperSetup.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\Run: [AMDNoiseSuppression] => C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe [164840 2024-06-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\Run: [MicrosoftEdgeAutoLaunch_A26098D035B94E3A08239552BEEA6CEC] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start [4113464 2025-07-31] (Microsoft Corporation -> Microsoft Corporation)


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\MountPoints2: {db0c8d5e-3144-11ef-8db8-a036bcaddd79} - "H:\HiSuiteDownLoader.exe" 


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\MountPoints2: {e86ba5aa-b47b-11ef-8e53-a036bcaddd79} - "H:\HiSuiteDownLoader.exe" 


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\MountPoints2: {e86ba5bf-b47b-11ef-8e53-a036bcaddd79} - "I:\HonorSuiteOnlineInstaller.exe" 


HKU\S-1-5-21-1492042133-1117733000-1889304462-1001\...\Command Processor: prompt $D$B$T$BDje si Brksi $P  <==== Pa�nja


HKU\S-1-5-18\...\Run: [AMDNoiseSuppression] => C:\Windows\system32\AMD\ANR\AMDNoiseSuppression.exe [164840 2024-06-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)


HKU\S-1-5-18\...\RunOnce: [StartRSX] => C:\Program Files\AMD\CNext\CNext\LauncherRSXRuntime.exe [73424 2025-05-26] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


HKLM\...\Windows x64\Print Processors\hpcpp101: C:\Windows\System32\spool\prtprocs\x64\hpcpp101.dll [323584 2010-09-23] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)


HKLM\...\Print\Monitors\HP Fax Port: C:\Windows\system32\hppfaxprintermon5.dll [27704 2014-04-28] (Hewlett-Packard Company -> Hewlett-Packard Company)


HKLM\...\Print\Monitors\HP Standard TCP/IP Port: C:\Windows\system32\HpTcpMon.dll [331264 2009-09-16] (Hewlett Packard) [Datoteka nije potpisana]


HKLM\Software\...\AppCompatFlags\Custom\DXMD.exe: [{950d026e-be12-4dc6-988a-b15dcbc1e536}.sdb] -> AMD Application Compatibility Database File


HKLM\Software\...\AppCompatFlags\InstalledSDB\{950d026e-be12-4dc6-988a-b15dcbc1e536}: [DatabasePath] -> C:\Windows\AppPatch\CustomSDB\{950d026e-be12-4dc6-988a-b15dcbc1e536}.sdb [2025-01-02]


HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\138.0.7204.184\Installer\chrmstp.exe [2025-08-02] (Google LLC -> Google LLC)


HKLM\Software\Microsoft\Active Setup\Installed Components: [{AFE6A462-C574-4B8A-AF43-4CC60DF4563B}] -> C:\Program Files\BraveSoftware\Brave-Browser\Application\138.1.80.125\Installer\chrmstp.exe [2025-07-30] (Brave Software, Inc. -> Brave Software, Inc.)


IFEO\osppsvc.exe: [VerifierDlls] SppExtComObjHook.dll


IFEO\SppExtComObj.exe: [VerifierDlls] SppExtComObjHook.dll


Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Menad�er tokena.lnk [2025-06-19]


ShortcutTarget: Menad�er tokena.lnk -> C:\Program Files\TrustEdgeID\TokenUtil.exe (NetSeT Global Solutions d.o.o.) [Datoteka nije potpisana]


GroupPolicy: Restrikcije ? <==== Pa�nja


Policies: C:\ProgramData\NTUSER.pol: Restrikcije <==== Pa�nja





==================== Planirani Zadaci (Na Beloj Listi) =================





(Ukoliko je stavka une�ena u fixlist, bi�e uklonjena iz registra. Datoteka ne�e biti preme�tena ukoliko nije izlistana zasebno..)





Task: {0D303F0E-C074-4253-8170-82E3E9F66229} - System32\Tasks\AMD Install Manager - Check For Updates => C:\Program Files\AMD\AMDInstallManager\AMDInstallManager.exe [55426256 2025-05-26] (Advanced Micro Devices -> Advanced Micro Devices, Inc.) -> C:\Program Files\AMD\AMDInstallManager\\-CheckForUpdates


Task: {268636AF-4399-4DFE-953D-2737F4002921} - System32\Tasks\AMDInstallUEP => C:\Program Files\AMD\InstallUEP\AMDInstallUEP.exe  (Nema Datoteke)


Task: {8BCA12A6-BF4E-42C3-B7D6-DCD43E6434D7} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [191184 2025-05-26] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


Task: {B0FC78E3-2DC8-459F-B336-FB22CCB1A7AB} - System32\Tasks\ASUS\AcPowerNotification => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\AcPowerNotification\AcPowerNotification.exe [398688 2025-05-27] (ASUSTeK COMPUTER INC. -> ASUS)


Task: {67ACF46E-363C-4D46-B220-E30F7CB6CC6A} - System32\Tasks\ASUS\ArmourySocketServer => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ArmourySocketServer\TaskSchedulerTool_ArmourySocketServer.exe [120672 2025-05-27] (ASUSTeK COMPUTER INC. -> TODO: <公司名稱>)


Task: {044B8478-99C9-4069-9371-325E1C84E06E} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2180456 2022-10-21] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


Task: {B0833994-5818-41DB-A378-98E9DBB66EE7} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [1466728 2022-11-02] (ASUSTeK COMPUTER INC. -> )


Task: {79C9A585-D883-4B3A-AAE8-A9B6221EC09C} - System32\Tasks\ASUS\ASUSUpdateTaskMachineCore => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [252760 2025-04-24] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


Task: {6C27E7AE-07B3-4F79-AEE3-7B03D6A3178E} - System32\Tasks\ASUS\ASUSUpdateTaskMachineUA => C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [252760 2025-04-24] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


Task: {A1A87756-9658-4F89-8AFD-69BE6403BCA3} - System32\Tasks\ASUS\Framework Service => C:\Program Files (x86)\ASUS\ArmouryDevice\TaskSchedulerTool_asus_framework.exe [120664 2025-06-27] (ASUSTeK COMPUTER INC. -> TODO: <公司名稱>)


Task: {EDF33FD4-68DF-4746-B2D9-4695114C2DE6} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [4329008 2022-10-26] (ASUSTeK Computer Inc. -> TODO: <Company name>)


Task: {9C188A7B-B7DA-4E58-B046-6E54DB7B8942} - System32\Tasks\ASUS\NoiseCancelingEngine => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\MBLedSDK\NoiseCancelingEngine.exe [1261928 2024-04-09] (ASUSTeK COMPUTER INC. -> ASUS)


Task: {892E20FE-8E23-404E-9A19-F5E57B04C87F} - System32\Tasks\ASUS\P508PowerAgent_sdk => C:\Program Files (x86)\ASUS\ArmouryDevice\dll\ShareFromArmouryIII\Mouse\ROG STRIX CARRY\P508PowerAgent.exe  (Nema Datoteke)


Task: {7BAA7E0E-CB8A-4A0E-B611-D2886134CAB0} - System32\Tasks\BraveSoftwareUpdateTaskMachineCore{9771452B-A1D3-4905-8580-F3F0F47B0A25} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2025-03-14] (Brave Software, Inc. -> BraveSoftware Inc.)


Task: {B3A16B34-32F6-4DC2-8669-42F78AED0648} - System32\Tasks\BraveSoftwareUpdateTaskMachineUA{45B956E0-4797-4862-914A-62321F076A39} => C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2025-03-14] (Brave Software, Inc. -> BraveSoftware Inc.)


Task: {C0C79F09-C664-4456-AE50-21476E5334B3} - System32\Tasks\Gasi => C:\Users\Brksi\Desktop\s.bat [34 2023-04-27] () [Datoteka nije potpisana] <==== Pa�nja


Task: {269EA224-2B26-4C16-ACC0-84E049ACA305} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem140.0.7273.0{CA6B0E66-5F76-469B-B267-6A1EEA7CDC71} => C:\Program Files (x86)\Google\GoogleUpdater\140.0.7273.0\updater.exe [6836832 2025-07-02] (Google LLC -> Google LLC)


Task: {47F98997-075F-44CF-AF03-21D4B313EC20} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [81928 2025-07-09] (HP Inc. -> HP Inc.)


Task: {B08F3400-E49E-43E6-A826-A30ECA7CDDA7} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [81928 2025-07-09] (HP Inc. -> HP Inc.)


Task: {DFE2607A-18A4-4ADC-8AF3-74F65EF1B57F} - System32\Tasks\Kaspersky_Upgrade_Launcher_{278ADC42-419D-4547-A6CA-5B74BE0AD901} => C:\Program Files\Common Files\AV\Kaspersky\upgrade.exe [783776 2025-05-13] (AO Kaspersky Lab -> AO Kaspersky Lab)


Task: {5D1DEEC9-50CC-4035-8B88-BA19CC18FA43} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27033280 2023-11-15] (Microsoft Corporation -> Microsoft Corporation)


Task: {6C21959F-8A43-406F-BD5A-10C162AEB1B1} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [27033280 2023-11-15] (Microsoft Corporation -> Microsoft Corporation)


Task: {4E900789-39D0-4EEE-9C3E-42C71437A864} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139128 2023-11-16] (Microsoft Corporation -> Microsoft Corporation)


Task: {48B5178E-FA9A-4F13-A8A7-E1FD0890608F} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [139128 2023-11-16] (Microsoft Corporation -> Microsoft Corporation)


Task: {823DDC62-9FB2-4409-9896-56264E595E0E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [7053744 2023-11-16] (Microsoft Corporation -> Microsoft Corporation)


Task: {4E937A13-40E0-4437-9980-D70412A33E50} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [7053744 2023-11-16] (Microsoft Corporation -> Microsoft Corporation)


Task: {2FE71860-0253-4196-9A45-8BFF3931FB17} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1038544 2025-05-26] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


Task: {9C365380-E3A3-4CF3-A072-7734FF6F906B} - System32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1492042133-1117733000-1889304462-500 => %localappdata%\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe  (Nema Datoteke) <==== Pa�nja


Task: {057AD244-7457-4277-9C10-174CFC9267F8} - System32\Tasks\StartAUEP => C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe [834256 2025-05-26] (Advanced Micro Devices -> AMD)


Task: {5AF09F34-C75E-43E3-BE5E-2C1C17C51F8D} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [143568 2025-05-26] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


Task: {EAB20C10-57C3-4810-BE9A-EBE91A09364A} - System32\Tasks\StartCNBM => C:\Program Files\AMD\CNext\CNext\cncmd.exe [143568 2025-05-26] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


Task: {F2F7E89F-5C12-498B-87CA-F3D26C989AD6} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [309968 2025-05-26] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)





(Ukoliko je stavka une�ena u fixlist, planirani zadaci (.job) datoteke �e biti preme�tene. Datoteka koju zadatak izvr�ava ne�e biti uklonjena.)





Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe





==================== Internet (Na Beloj Listi) ====================





(Ukoliko je stavka une�ena u fixlist, ako je to registru stavka, bi�e uklonjena ili vra�ena na podrazumevanu vrednost.)





Hosts: Postoji vi�e od jednog unosa u Hosts. Pogledati Hosts sekciju iz Addition.txt


Tcpip\Parameters: [DhcpNameServer] 89.216.1.30 89.216.1.40 89.216.1.50


Tcpip\..\Interfaces\{6bf033b4-07b2-4453-b1ad-90277802eb75}: [DhcpNameServer] 192.168.18.1


Tcpip\..\Interfaces\{825f3125-a1fc-448b-943a-c809e2204b29}: [DhcpNameServer] 89.216.1.30 89.216.1.40 89.216.1.50





Edge: 


=======


Edge Profile: C:\Users\Brksi\AppData\Local\Microsoft\Edge\User Data\Default [2025-08-04]


Edge Extension: (Google документи офлајн) - C:\Users\Brksi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-07-31]


Edge Extension: (Edge relevant text changes) - C:\Users\Brksi\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-01-31]





FireFox:


========


FF DefaultProfile: aa3qu9un.default


FF ProfilePath: C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\aa3qu9un.default [2025-03-14]


FF ProfilePath: C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release [2025-07-16]


FF Extension: (AdBlocker Ultimate) - C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release\Extensions\adblockultimate@adblockultimate.net.xpi [2025-07-16]


FF Extension: (Language: English (US)) - C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release\Extensions\langpack-en-US@firefox.mozilla.org.xpi [2025-07-16]


FF Extension: (Kaspersky Protection) - C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release\Extensions\light_plugin_7571494CE0B94E11BB762B659A4AD71F@kaspersky.com.xpi [2025-05-04]


FF Extension: (Wappalyzer - Technology profiler) - C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release\Extensions\wappalyzer@crunchlabz.com.xpi [2025-06-03]


FF Extension: (Take Webpage Screenshots Entirely - FireShot) - C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release\Extensions\{0b457cAA-602d-484a-8fe7-c1d894a011ba}.xpi [2023-06-22]


FF Extension: (N-13) - C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release\Extensions\{8d56daa3-6581-41e2-a338-214c0d141c35}.xpi [2024-07-03]


FF Extension: (ANIMATED Blue Plexus by candelora) - C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release\Extensions\{abca071b-3177-4a86-84b9-c9a712c2268b}.xpi [2024-07-03]


FF Extension: (Stained Glass Fractal) - C:\Users\Brksi\AppData\Roaming\Mozilla\Firefox\Profiles\pji6yjk4.default-release\Extensions\{eff2d458-e2b0-445a-95c1-3b76ad5f1de7}.xpi [2024-07-03]


FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2023-11-16] (Microsoft Corporation -> Microsoft Corporation)


FF Plugin-x32: @DVR/npplugin,version=3.1.0.4_l -> C:\Program Files (x86)\webrec\WEB30\WebView_L\npPlugin.dll [2017-09-13] (Zhejiang Dahua Technology CO.,LTD. -> )


FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2023-11-16] (Microsoft Corporation -> Microsoft Corporation)


FF ExtraCheck: C:\Program Files\mozilla firefox\defaults\pref\kl_prefs_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.js [2023-04-18] <==== Pa�nja (Ukazuje na .cfg datoteku)


FF ExtraCheck: C:\Program Files\mozilla firefox\kl_config_62fbb8f7_c917_4cf7_957a_aad2b8fa768c.cfg [2023-04-18] <==== Pa�nja





Chrome: 


=======


CHR Profile: C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default [2025-08-02]


CHR Extension: (Kaspersky Protection) - C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ahkjpbeeocnddjkakilopmfdlnjdpcdm [2025-06-10]


CHR Extension: (video downloader - CocoCut) - C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gddbgllpilhpnjpkdbopahnpealaklle [2024-03-03]


CHR Extension: (Google документи офлајн) - C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-08-02]


CHR Extension: (Wappalyzer - Technology profiler) - C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2025-08-02]


CHR Extension: (Black red shards) - C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default\Extensions\jpjlkkaalgfbbegfnjoclhfidancjpch [2023-04-18]


CHR Extension: (Take Webpage Screenshots Entirely - FireShot) - C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2025-08-02]


CHR Extension: (Плаћања у Chrome веб-продавници) - C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-04-13]


CHR Extension: (AdBlocker Ultimate) - C:\Users\Brksi\AppData\Local\Google\Chrome\User Data\Default\Extensions\ohahllgiabjaoigichmmfljhkcfikeof [2025-08-02]





Brave: 


=======


BRA Profile: C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default [2025-08-05]


BRA DefaultSearchURL: Default -> hxxps://duckduckgo.com/?q={searchTerms}&t=brave


BRA DefaultSearchKeyword: Default -> :d


BRA DefaultSuggestURL: Default -> hxxps://ac.duckduckgo.com/ac/?q={searchTerms}&type=list


BRA Extension: (Always active Window - Always Visible) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ehllkhjndgnlokhomdlhgbineffifcbj [2025-07-03]


BRA Extension: (Wappalyzer - Technology profiler) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\gppongmhjkpfnbhagpmjfkannfbllamg [2025-07-19]


BRA Extension: (Lone Space) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\lombcmmbbmbmlimfcoohahfbfadigbgm [2025-03-14]


BRA Extension: (Take Webpage Screenshots Entirely - FireShot) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\mcbpblocgmgfnpjjppndjkmgjaogfceg [2025-07-08]


BRA Extension: (AdBlocker Ultimate) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\Default\Extensions\ohahllgiabjaoigichmmfljhkcfikeof [2025-08-04]


BRA Extension: (Brave Ad Block Updater (Brave Ad Block First Party Filters (plaintext))) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\adcocjohghhfpidemphmcmlmhnfgikei [2025-08-05]


BRA Extension: (Brave Local Data Files Updater) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\afalakplffnnnlkncjhbmahjfjhmlkal [2025-08-05]


BRA Extension: (Brave NTP background images) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\aoojcmojmmcbpfgoecoadbdpnagfchel [2025-04-21]


BRA Extension: (Brave Ad Block Updater (Fanboy's Mobile Notifications (plaintext))) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\bfpgedeaaibpoidldhjcknekahbikncb [2025-08-05]


BRA Extension: (Brave Ad Block Updater (EasyList Cookie (plaintext))) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\cdbbhgbmjhfnhnmgeddbliobbofkgdhe [2025-08-05]


BRA Extension: (Brave Tor Client Updater (Windows)) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\cpoalefficncklhjfpglfiplenlpccdb [2025-03-17]


BRA Extension: (Brave Ad Block Updater (Regional Catalog)) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\gkboaolpopklhgplhaaiboijnklogmbc [2025-07-27]


BRA Extension: (Brave NTP Super Referrer mapping table) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\heplpbhjcbmiibdlchlanmdenffpiibo [2025-03-14]


BRA Extension: (Brave Ad Block Updater (Brave Ad Block Updater (plaintext))) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\iodkpdagapdfkphljnddpjlldadblomo [2025-08-05]


BRA Extension: (Brave Ad Block Updater (Brave default privacy lists (plaintext))) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\kihnoaefogbkmblfimmibknnmkllbhlf [2025-08-05]


BRA Extension: (Brave Ad Block Updater (Resources)) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\mfddibmblmbccpadfndgakiopmmhebop [2025-07-23]


BRA Extension: (Brave NTP sponsored images) - C:\Users\Brksi\AppData\Local\BraveSoftware\Brave-Browser\User Data\nkegnmcaaingjdpfadapphceooopdkpj [2025-08-05]





==================== Servisi (Na Beloj Listi) ===================





(Ukoliko je stavka une�ena u fixlist, bi�e uklonjena iz registra. Datoteka ne�e biti preme�tena ukoliko nije izlistana zasebno..)





R2 AmdAppCompatSvc; C:\Windows\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompatSvc.exe [300872 2025-01-02] (Advanced Micro Devices -> Advanced Micro Devices, Inc)


R2 ArmouryCrateService; C:\Program Files\ASUS\Armoury Crate Service\ArmouryCrate.Service.exe [431144 2025-07-02] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)


R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\4.06.01\atkexComSvc.exe [967000 2025-02-27] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.25\AsSysCtrlService.exe [1360016 2022-10-26] (ASUSTeK Computer Inc. -> ) [Datoteka nije potpisana]


S2 asus; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [252760 2025-04-24] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


R2 AsusCertService; C:\Program Files (x86)\ASUS\AsusCertService\1.2.36\AsusCertService.exe [485720 2025-04-17] (ASUSTeK COMPUTER INC. -> Asustek Computer Inc.)


R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\2.03.50\AsusFanControlService.exe [1870168 2025-03-28] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


S3 asusm; C:\Program Files (x86)\ASUS\Update\AsusUpdate.exe [252760 2025-04-24] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


S2 AsusROGLSLService; C:\Program Files (x86)\ASUS\AsusROGLSLService\AsusROGLSLService.exe [682840 2025-04-24] (ASUSTeK COMPUTER INC. -> ASUS)


S2 AsusUpdateCheck; C:\Windows\System32\AsusUpdateCheck.exe [845256 2025-08-05] (ASUSTeK Computer Inc. -> )


R2 AUEPLauncher; C:\Program Files\AMD\CIM\..\Performance Profile Client\AUEPDU.exe [553680 0] (Advanced Micro Devices -> AMD)


R2 AVP21.21; C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.21\avp.exe [32648 2025-04-16] (Kaspersky Labs GmbH -> AO Kaspersky Lab)


S2 brave; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2025-03-14] (Brave Software, Inc. -> BraveSoftware Inc.)


S3 BraveElevationService; C:\Program Files\BraveSoftware\Brave-Browser\Application\138.1.80.125\elevation_service.exe [3205712 2025-07-30] (Brave Software, Inc. -> Brave Software, Inc.)


S3 bravem; C:\Program Files (x86)\BraveSoftware\Update\BraveUpdate.exe [167440 2025-03-14] (Brave Software, Inc. -> BraveSoftware Inc.)


R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [12882616 2023-11-15] (Microsoft Corporation -> Microsoft Corporation)


R2 DtsApo4Service; C:\Windows\System32\DTS\PC\APO4x\DtsApo4Service.exe [235744 2021-12-21] (DTS, Inc. -> DTS Inc.)


S3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [11066984 2023-04-17] (Electronic Arts, Inc. -> Electronic Arts)


S3 EpicOnlineServices; C:\Program Files (x86)\Epic Games\Epic Online Services\service\EpicOnlineServicesHost.exe [934352 2023-02-10] (Epic Games Inc. -> Epic Games, Inc.)


R2 FoxitReaderUpdateService; C:\Program Files (x86)\Common Files\Foxit\Foxit PDF Reader\FoxitPDFReaderUpdateService.exe [2500072 2025-03-26] (FOXIT SOFTWARE INC. -> Foxit Software Inc.)


R2 GameSDK Service; C:\Program Files (x86)\ASUS\GameSDK Service\GameSDK.exe [397544 2022-05-31] (ASUSTeK COMPUTER INC. -> ASUS Inc.)


R2 HP LaserJet Service; C:\Program Files (x86)\HP\HPLaserJetService\HPLaserJetService.exe [176128 2014-06-24] (HP) [Datoteka nije potpisana]


R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243720 2025-07-09] (HP Inc. -> HP Inc.)


S3 klvssbridge64_21.21; C:\Program Files (x86)\Kaspersky Lab\Kaspersky 21.21\x64\vssbridge64.exe [301472 2025-04-16] (AO Kaspersky Lab -> AO Kaspersky Lab)


R2 KSDE5.22; C:\Program Files (x86)\Kaspersky Lab\Kaspersky VPN 5.22\ksde.exe [32008 2025-07-15] (Kaspersky Lab JSC -> AO Kaspersky Lab)


R2 LightingService; C:\Program Files (x86)\LightingService\LightingService.exe [5094240 2025-05-26] (ASUSTeK COMPUTER INC. -> ASUSTeK COMPUTER INC.)


S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MpDefenderCoreService.exe [1505416 2024-06-27] (Microsoft Windows Publisher -> Microsoft Corporation)


R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-01-18] (Hewlett-Packard) [Datoteka nije potpisana]


R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-01-18] (Hewlett-Packard) [Datoteka nije potpisana]


R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [66872 2023-04-18] (Even Balance, Inc. -> )


R2 PnkBstrB; C:\Windows\SysWOW64\PnkBstrB.exe [107832 2023-04-18] (Even Balance, Inc. -> )


S3 Rockstar Service; F:\Program files\Rockstar Games\Launcher\RockstarService.exe [1846768 2023-04-21] (Rockstar Games, Inc. -> Rockstar Games)


R2 ROG Live Service; C:\Program Files\ASUS\ROG Live Service\ROGLiveService.exe [2347048 2025-06-24] (ASUSTeK COMPUTER INC. -> ASUSTek COMPUTER INC.)


S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)


S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [917440 2025-06-13] (Microsoft Windows Publisher -> Microsoft Corporation)


S3 VBoxSDS; C:\Program Files\Oracle\VirtualBox\VBoxSDS.exe [763024 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)


S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\NisSrv.exe [3236728 2024-06-27] (Microsoft Windows Publisher -> Microsoft Corporation)


S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24050.7-0\MsMpEng.exe [133704 2024-06-27] (Microsoft Windows Publisher -> Microsoft Corporation)


R2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.4.3.237\WsAppService.exe [495720 2018-07-04] (Wondershare Technology Co.,Ltd -> Wondershare)


S3 WsDrvInst; C:\Program Files (x86)\Wondershare\MobileTrans\DriverInstall.exe [107160 2018-10-17] (Wondershare Technology Co.,Ltd -> Wondershare)





===================== Drajveri (Na Beloj Listi) ===================





(Ukoliko je stavka une�ena u fixlist, bi�e uklonjena iz registra. Datoteka ne�e biti preme�tena ukoliko nije izlistana zasebno..)





R3 AmdAppCompat; C:\Windows\System32\DriverStore\FileRepository\amdappcompat.inf_amd64_0cfc8ba812cdbaa8\AmdAppCompat.sys [35144 2025-01-02] (Advanced Micro Devices -> Advanced Micro Devices)


R3 amdfendrmgr; C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_1aafc0a9b0693712\amdfendrmgr.sys [37208 2025-02-06] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


R3 amdgpio3; C:\Windows\System32\drivers\amdgpio3.sys [33592 2024-09-12] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)


R2 AMDRyzenMasterDriverV28; C:\Windows\system32\AMDRyzenMasterDriver.sys [61264 2025-05-22] (Advanced Micro Devices -> Advanced Micro Devices)


R3 AMDSAFD; C:\Windows\System32\DriverStore\FileRepository\amdsafd.inf_amd64_66bdd11a4e97edd1\amdsafd.sys [112840 2024-05-02] (AMD Test Build -> Advanced Micro Devices)


R3 amduw23g-416003-55c70b53; C:\Windows\System32\DriverStore\FileRepository\u0416003.inf_amd64_706cc64a85ddf686\B415817\amdkmdag.sys [100540816 2025-06-02] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)


R3 AMDXE; C:\Windows\System32\drivers\amdxe.sys [63008 2024-05-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)


S3 ampa; C:\Windows\system32\ampa.sys [38320 2017-02-28] (CHENGDU AOMEI Tech Co., Ltd. -> )


R1 Asusgio2; C:\Windows\system32\drivers\AsIO2.sys [34384 2022-02-10] (ASUSTeK Computer Inc. -> )


R1 Asusgio3; C:\Windows\system32\drivers\AsIO3.sys [59936 2025-04-16] (ASUSTeK COMPUTER INC. -> Asustek Computer Inc.)


S3 BthHFEnum; C:\Windows\System32\drivers\bthhfenum.sys [148992 2024-05-09] (Microsoft Corporation) [Datoteka nije potpisana]


S3 BTHMODEM; C:\Windows\System32\drivers\bthmodem.sys [76800 2019-12-07] (Microsoft Corporation) [Datoteka nije potpisana]


R0 cm_km; C:\Windows\System32\DRIVERS\cm_km.sys [226744 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R3 cpuz159; C:\Windows\temp\cpuz159\cpuz159_x64.sys [44680 2025-08-05] (Microsoft Windows Hardware Compatibility Publisher -> CPUID) <==== Pa�nja


R1 CTIAIO; C:\Windows\system32\drivers\CtiAIo64.sys [34920 2025-04-24] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Innovation Co., LTd.)


S3 ddmdrv; C:\Windows\system32\ddmdrv.sys [35760 2016-12-27] (CHENGDU AOMEI Tech Co., Ltd. -> )


S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)


R3 GemCCID; C:\Windows\System32\DriverStore\FileRepository\gemccid.inf_amd64_526ec61d10ad09ec\GemCCID.sys [162992 2025-05-15] (Thales DIS CPL USA, Inc. -> Gemalto)


R3 IGO_VSD; C:\Windows\system32\drivers\igovsd.sys [43392 2022-09-22] (British Cayman Islands Intelligo Technology Inc. Taiwan Branch -> ASUSTek Computer Inc.)


R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [55416 2025-03-29] (ASUSTeK COMPUTER INC. -> ASUSTeK Computer Inc.)


R1 ISODrive; C:\Program Files (x86)\UltraISO\drivers\ISODrv64.sys [115600 2010-01-29] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)


R1 klbackupdisk.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\klbackupdisk.sys [93208 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 klbackupflt.K4W-21-21; C:\Windows\System32\DRIVERS\K4W-21-21\klbackupflt.sys [255000 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 kldisk.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\kldisk.sys [109080 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


S0 klelam; C:\Windows\System32\DRIVERS\klelam.sys [48776 2025-04-16] (Microsoft Windows Early Launch Anti-malware Publisher -> AO Kaspersky Lab)


R1 klflt.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\klflt.sys [722984 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 klgse.K4W-21-21; C:\Windows\System32\DRIVERS\K4W-21-21\klgse.sys [854360 2025-07-08] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 KLHK.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\klhk.sys [2760192 2025-07-08] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R3 klids.K4W-21-21; C:\ProgramData\Kaspersky Lab\AVP21.21\Bases\klids.sys [244768 2025-06-25] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 klif.K4W-21-21; C:\Windows\System32\DRIVERS\K4W-21-21\klif.sys [1448488 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 klim6; C:\Windows\system32\DRIVERS\klim6.sys [90176 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 klkbdflt.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\klkbdflt.sys [99880 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R3 klmouflt.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\klmouflt.sys [94256 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 klpd.K4W-21-21; C:\Windows\System32\DRIVERS\K4W-21-21\klpd.sys [60480 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 klpnpflt.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\klpnpflt.sys [87104 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R3 kltun; C:\Windows\system32\DRIVERS\kltun.sys [109120 2025-07-15] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R0 klupd_K4W-21-21_arkmon; C:\Windows\System32\Drivers\klupd_K4W-21-21_arkmon.sys [412080 2025-06-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R3 klupd_K4W-21-21_klark; C:\Windows\System32\Drivers\klupd_K4W-21-21_klark.sys [364584 2025-06-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R0 klupd_K4W-21-21_klbg; C:\Windows\System32\Drivers\klupd_K4W-21-21_klbg.sys [204480 2025-06-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R3 klupd_K4W-21-21_mark; C:\Windows\System32\Drivers\klupd_K4W-21-21_mark.sys [266488 2025-06-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 klwtp.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\klwtp.sys [556608 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 kneps.K4W-21-21; C:\Windows\system32\DRIVERS\K4W-21-21\kneps.sys [389656 2025-04-16] (Microsoft Windows Hardware Compatibility Publisher -> AO Kaspersky Lab)


R1 MSIO; C:\Windows\system32\drivers\MsIo64.sys [19672 2023-12-10] (Microsoft Windows Hardware Compatibility Publisher -> MICSYS Technology Co., LTd)


R3 MTKBTFilterx64; C:\Windows\System32\DriverStore\FileRepository\mtkbtfilter.inf_amd64_cde37df5add40ae6\mtkbtfilterx.sys [539608 2024-07-28] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)


R3 mtkwlex; C:\Windows\System32\DriverStore\FileRepository\mtkwl6ex.inf_amd64_c798f76dec6a5e79\mtkwl6ex.sys [1724584 2024-07-28] (Microsoft Windows Hardware Compatibility Publisher -> MediaTek Inc.)


R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)


S3 RevoProcessDetector; C:\Windows\System32\DRIVERS\RevoProcessDetector.sys [19504 2024-03-28] (Microsoft Windows Hardware Compatibility Publisher -> VS Revo Group)


S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)


S3 ss_conn_usb_driver2; C:\Windows\System32\Drivers\ss_conn_usb_driver2.sys [50720 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)


R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [246224 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)


R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [256536 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)


R1 VBoxSup; C:\Windows\System32\drivers\VBoxSup.sys [1052984 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)


S3 VBoxUSB; C:\Windows\System32\Drivers\VBoxUSB.sys [189152 2023-01-11] (Oracle Corporation -> Oracle and/or its affiliates)


R1 VBoxUSBMon; C:\Windows\System32\drivers\VBoxUSBMon.sys [195576 2025-01-21] (Oracle America, Inc. -> Oracle and/or its affiliates)


S1 VD_FileDisk; C:\Windows\SysWow64\Drivers\VD_FileDisk.sys [24680 2011-01-26] (Ghisler Software GmbH -> CaptainFlint Software)


S3 WdBoot; C:\Windows\system32\drivers\wd\WdBoot.sys [22080 2024-06-27] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)


S3 WdFilter; C:\Windows\system32\drivers\wd\WdFilter.sys [602520 2024-06-27] (Microsoft Windows -> Microsoft Corporation)


S3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [105880 2024-06-27] (Microsoft Windows -> Microsoft Corporation)


S3 WIMMount; C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\Deployment Tools\AMD64\DISM\wimmount.sys [75056 2024-04-01] (Microsoft Windows -> Microsoft Corporation)


S3 amdwddmg; \SystemRoot\System32\DriverStore\FileRepository\u0392568.inf_amd64_4d803585226e44c6\B390452\amdkmdag.sys [X]


S3 cpuz154; \??\C:\Windows\temp\cpuz154\cpuz154_x64.sys [X] <==== Pa�nja


S3 cpuz158; \??\C:\Windows\temp\cpuz158\cpuz158_x64.sys [X] <==== Pa�nja


S3 GPUZ-v2; \??\C:\Users\Brksi\AppData\Local\Temp\GPUZ-v2.sys [X] <==== Pa�nja


S3 klids; \??\C:\ProgramData\Kaspersky Lab\AVP21.3\Bases\klids.sys [X]





==================== NetSvcs (Na Beloj Listi) ===================





(Ukoliko je stavka une�ena u fixlist, bi�e uklonjena iz registra. Datoteka ne�e biti preme�tena ukoliko nije izlistana zasebno..)








==================== Mesec dana (kreirane) (Na Beloj Listi) =========





(Ukoliko je stavka une�ena u fixlist, Datoteka/Fascikla �e biti preme�tena.)





2025-08-05 12:02 - 2025-08-05 12:03 - 000047313 _____ C:\Users\Brksi\Desktop\FRST.txt


2025-08-05 12:02 - 2025-08-05 12:03 - 000000000 ____D C:\FRST


2025-08-05 12:02 - 2025-08-05 12:02 - 000000000 ____D C:\Users\Brksi\Desktop\FRST-OlderVersion


2025-08-05 10:40 - 2025-08-05 12:02 - 002409472 _____ (Farbar) C:\Users\Brksi\Desktop\FRST64.exe


2025-07-31 17:58 - 2025-07-31 17:58 - 000000643 _____ C:\Users\Public\Desktop\Launch Hitman Blood Money.lnk


2025-07-31 17:58 - 2025-07-31 17:58 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos


2025-07-31 14:28 - 2025-07-31 14:28 - 000002232 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky VPN.lnk


2025-07-17 11:03 - 2025-07-17 11:03 - 000000000 ____D C:\Program Files\PowerShell


2025-07-09 11:25 - 2025-07-09 11:25 - 000023172 _____ C:\Windows\SysWOW64\IntegratedServicesRegionPolicySet.json


2025-07-09 11:25 - 2025-07-09 11:25 - 000023172 _____ C:\Windows\system32\IntegratedServicesRegionPolicySet.json


2025-07-06 12:34 - 2025-07-07 11:03 - 000000000 ____D C:\Program Files\Mozilla Thunderbird





==================== Mesec dana (modifikovane) ==================





(Ukoliko je stavka une�ena u fixlist, Datoteka/Fascikla �e biti preme�tena.)





2025-08-05 11:54 - 2023-04-13 15:23 - 000000000 ____D C:\Windows\SystemTemp


2025-08-05 11:08 - 2020-09-27 08:33 - 000000000 ____D C:\Windows\system32\SleepStudy


2025-08-05 10:57 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft


2025-08-05 10:13 - 2025-03-10 12:36 - 004120032 _____ C:\Windows\SysWOW64\AppRulesStorage-wal


2025-08-05 10:13 - 2025-03-10 12:36 - 000032768 _____ C:\Windows\SysWOW64\DnsStorage-shm


2025-08-05 10:13 - 2025-03-10 12:36 - 000032768 _____ C:\Windows\SysWOW64\AppRulesStorage-shm


2025-08-05 10:13 - 2023-09-02 11:14 - 000000000 ____D C:\Users\Brksi\AppData\Roaming\asus_framework


2025-08-05 10:13 - 2023-04-13 13:08 - 000901328 _____ () C:\Windows\system32\wpbbin.exe


2025-08-05 10:13 - 2023-04-13 13:08 - 000845256 _____ C:\Windows\system32\AsusUpdateCheck.exe


2025-08-05 10:13 - 2020-09-27 09:33 - 000000006 ____H C:\Windows\Tasks\SA.DAT


2025-08-05 10:12 - 2019-12-07 11:03 - 000524288 _____ C:\Windows\system32\config\BBI


2025-08-04 20:37 - 2023-11-02 17:43 - 000000000 ____D C:\Users\Brksi\AppData\Roaming\vlc


2025-08-04 16:07 - 2023-04-14 16:55 - 000000000 ____D C:\Users\Brksi\AppData\Roaming\tixati


2025-08-04 11:33 - 2023-04-13 16:02 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38


2025-08-03 11:18 - 2023-04-15 13:18 - 000000000 ____D C:\Users\Public\SmartPSS


2025-08-03 10:16 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\AppReadiness


2025-08-02 20:55 - 2023-04-13 15:12 - 000002249 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk


2025-08-02 11:00 - 2020-09-27 09:36 - 000002440 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk


2025-08-02 11:00 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps


2025-08-02 10:59 - 2023-04-13 15:09 - 000000000 ____D C:\Users\Brksi\AppData\Local\AMD_Common


2025-08-01 13:54 - 2020-09-27 09:36 - 000003560 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA


2025-08-01 13:54 - 2020-09-27 09:36 - 000003434 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore


2025-08-01 13:51 - 2025-04-10 20:26 - 000000000 ____D C:\ProgramData\Kaspersky Lab


2025-07-31 17:58 - 2023-04-13 14:39 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information


2025-07-31 14:40 - 2023-04-13 18:09 - 000005867 _____ C:\Users\Brksi\AppData\Roaming\plugin_scan_state_VST2_x64.scan


2025-07-31 14:40 - 2023-04-13 18:09 - 000004712 _____ C:\Users\Brksi\AppData\Roaming\plugin_scan_state_VST3_x64.scan


2025-07-31 14:40 - 2023-04-13 18:09 - 000003712 _____ C:\Users\Brksi\AppData\Roaming\plugin_scan_state_VST2_x32.scan


2025-07-31 14:40 - 2023-04-13 18:09 - 000001571 _____ C:\Users\Brksi\AppData\Roaming\plugin_scan_state_VST3_x32.scan


2025-07-31 14:28 - 2025-04-10 20:26 - 000000000 ____D C:\Program Files (x86)\Kaspersky Lab


2025-07-31 14:28 - 2019-12-07 11:13 - 000000000 ____D C:\Windows\INF


2025-07-30 19:20 - 2025-03-14 15:49 - 000002366 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Brave.lnk


2025-07-30 19:20 - 2025-03-14 15:49 - 000002325 _____ C:\Users\Public\Desktop\Brave.lnk


2025-07-30 18:37 - 2023-09-03 15:20 - 000000000 ____D C:\ProgramData\Wondershare Filmora


2025-07-30 14:16 - 2023-04-23 18:47 - 000000000 ____D C:\Users\Brksi\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FileZilla FTP Client


2025-07-30 14:16 - 2023-04-23 18:47 - 000000000 ____D C:\Program Files\FileZilla FTP Client


2025-07-28 18:43 - 2023-04-13 20:34 - 000000000 ____D C:\Users\Brksi\AppData\Roaming\Microsoft\Word


2025-07-28 17:00 - 2023-04-23 18:47 - 000000000 ____D C:\Users\Brksi\AppData\Roaming\FileZilla


2025-07-26 10:58 - 2025-03-30 16:28 - 000000000 ____D C:\AMD


2025-07-23 18:39 - 2025-05-06 18:48 - 000004054 _____ C:\Windows\system32\Tasks\AMD Install Manager - Check For Updates


2025-07-22 15:48 - 2023-04-13 14:14 - 000000000 ____D C:\Users\Brksi\AppData\Local\Packages


2025-07-21 21:03 - 2023-04-13 14:13 - 000000000 ____D C:\Users\Brksi


2025-07-17 11:04 - 2024-08-29 17:17 - 000000000 ____D C:\Windows\system32\PowerShell


2025-07-17 11:04 - 2024-08-29 17:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PowerShell


2025-07-17 11:04 - 2023-04-13 14:25 - 000000000 ____D C:\ProgramData\Package Cache


2025-07-16 16:46 - 2025-07-01 20:30 - 000000000 ____D C:\Program Files\Mozilla Firefox


2025-07-16 16:46 - 2023-04-13 16:02 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service


2025-07-16 12:07 - 2023-04-18 20:09 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk


2025-07-14 18:33 - 2023-04-15 16:24 - 000000000 ____D C:\Users\Brksi\.VirtualBox


2025-07-10 10:43 - 2023-04-20 15:57 - 000000000 ____D C:\Users\Brksi\AppData\Local\CrashDumps


2025-07-10 10:43 - 2020-09-27 09:38 - 000000000 ____D C:\ProgramData\Packages


2025-07-10 10:43 - 2020-09-27 08:33 - 000492864 _____ C:\Windows\system32\FNTCACHE.DAT


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\PrintDialog


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ___RD C:\Windows\ImmersiveControlPanel


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\setup


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SysWOW64\Dism


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\SystemResources


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\ShellExperiences


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\setup


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\SecureBootUpdates


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\PerceptionSimulation


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\oobe


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\migwiz


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\system32\Dism


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellExperiences


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\ShellComponents


2025-07-09 20:46 - 2019-12-07 11:14 - 000000000 ____D C:\Windows\bcastdvr


2025-07-09 20:46 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\servicing


2025-07-09 14:13 - 2023-04-13 18:21 - 000000000 ____D C:\Program Files\dotnet


2025-07-09 11:27 - 2019-12-07 11:03 - 000000000 ____D C:\Windows\CbsTemp


2025-07-09 11:25 - 2020-09-27 09:36 - 003016192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PrintConfig.dll


2025-07-09 11:22 - 2023-09-03 16:16 - 000000000 ____D C:\Windows\system32\Tasks\HP


2025-07-09 11:22 - 2023-09-03 16:16 - 000000000 ____D C:\Program Files\HPPrintScanDoctor


2025-07-08 19:24 - 2025-05-13 11:48 - 000000000 ____D C:\Windows\system32\Drivers\K4W-21-21


2025-07-07 14:18 - 2023-04-14 12:57 - 000000000 ____D C:\Users\Brksi\AppData\Roaming\Microsoft\Excel


2025-07-06 12:34 - 2023-04-13 16:02 - 000001055 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Thunderbird.lnk





==================== Datoteke u korenu nekih direktorijuma ========





2023-05-08 18:32 - 2023-05-08 18:32 - 000000016 _____ () C:\Users\Brksi\AppData\Roaming\obs-virtualcam.txt


2023-04-13 18:09 - 2025-07-31 14:40 - 000003712 _____ () C:\Users\Brksi\AppData\Roaming\plugin_scan_state_VST2_x32.scan


2023-04-13 18:09 - 2025-07-31 14:40 - 000005867 _____ () C:\Users\Brksi\AppData\Roaming\plugin_scan_state_VST2_x64.scan


2023-04-13 18:09 - 2025-07-31 14:40 - 000001571 _____ () C:\Users\Brksi\AppData\Roaming\plugin_scan_state_VST3_x32.scan


2023-04-13 18:09 - 2025-07-31 14:40 - 000004712 _____ () C:\Users\Brksi\AppData\Roaming\plugin_scan_state_VST3_x64.scan


2023-04-16 16:56 - 2023-04-16 16:56 - 000007602 _____ () C:\Users\Brksi\AppData\Local\Resmon.ResmonCfg





==================== SigCheck ============================





(Ne postoji automatizovan popravak za datoteke koji nisu pro�le verifikaciju.)





==================== Kraj od FRST.txt ========================

----------- Dopuna: 05 Avg 2025 11:14 ---------

http://fotkica.com/uploads2N/302_1720739044_Addition.txt

----------- Dopuna: 06 Avg 2025 9:27 ---------

Odradio sam proveru malware na malware bytes forumu nista nisu uocili.

usporen rad svega.

nobody@mycity.rs (Slaven980) — Thu, 01 May 2025 08:42:18 +0100

----------- Napisano: 30 Apr 2025 19:35 ---------

prvenstveno se zalim na rad Chroma i programa za rad. Skinuo Malwarebytes, ocistio sta mi je rekao da ima da se ocisti, ali i dalje je sve usporeno.

Hvala unapred

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 27-04-2025
Ran by slave (administrator) on SLAVEN (30-04-2025 14:08:01)
Running from C:\Users\slave\Downloads\FRST64.exe
Loaded Profiles: slave
Platform: Microsoft Windows 11 Pro Version 24H2 26100.3915 (X64) Language: English (United States)
Default browser: Chrome
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

() [File not signed] C:\Program Files (x86)\Trust GXT 155 Gaming Mouse\GXT155mon.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe InDesign 2025\Adobe Crash Processor.exe
(Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe
(Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastUI.exe <6>
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> ) C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe
(C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud Helper.exe
(C:\Program Files (x86)\Steam\steam.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe <8>
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe ->) (OpenJS Foundation -> Node.js) C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe
(C:\Program Files\Adobe\Adobe Creative Cloud Experience\libs\node.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\IPCBox\AdobeIPCBroker.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ADS\Adobe Desktop Service.exe
(C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\Common Files\Adobe\Adobe Desktop Common\HEX\Creative Cloud UI Helper.exe <4>
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\amdow.exe
(C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe
(C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\cncmd.exe
(C:\Program Files\Avast Software\Avast\AvastSvc.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswEngSrv.exe
(C:\Program Files\Google\Chrome\Application\chrome.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\cmd.exe <2>
(C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe ->) (Google LLC -> ) C:\Program Files\Google\Drive File Stream\107.0.3.0\crashpad_handler.exe
(C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\Malwarebytes.exe
(cmd.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe
(cmd.exe ->) (Lenovo (Beijing) Limited -> Lenovo Group Limited) C:\Users\slave\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSB.exe
(Discord Inc. -> Discord Inc.) C:\Users\slave\AppData\Local\Discord\app-1.0.9189\Discord.exe <6>
(DriverStore\FileRepository\u0410212.inf_amd64_daae2c8b5eb35aaa\B409877\atiesrxx.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0410212.inf_amd64_daae2c8b5eb35aaa\B409877\atieclxx.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Program Files (x86)\Dropbox\Client\Dropbox.exe <8>
(explorer.exe ->) (Adobe Inc. -> Adobe Systems Incorporated) C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe <2>
(explorer.exe ->) (Ghisler Software GmbH -> Ghisler Software GmbH) C:\Program Files\totalcmd\TOTALCMD64.EXE
(explorer.exe ->) (Google LLC -> Google LLC) C:\Program Files\Google\Chrome\Application\chrome.exe <48>
(explorer.exe ->) (Google LLC -> Google LLC.) C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe <7>
(explorer.exe ->) (Telegram FZ-LLC -> Telegram FZ-LLC) C:\Users\slave\AppData\Roaming\Telegram Desktop\Telegram.exe
(explorer.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Steam\steam.exe
(explorer.exe ->) (Viber Media S.a r.l. -> Viber Media S.Ã� r.l.) C:\Users\slave\AppData\Local\Viber\Viber.exe
(Kilonova LLC -> Skillbrains) C:\Program Files (x86)\Skillbrains\lightshot\5.5.0.7\Lightshot.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Microsoft OneDrive\OneDrive.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0410212.inf_amd64_daae2c8b5eb35aaa\B409877\atiesrxx.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\aswidsagent.exe
(services.exe ->) (Avast Software s.r.o. -> AVAST Software) C:\Program Files\Avast Software\Avast\wsc_proxy.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\aswToolsSvc.exe
(services.exe ->) (Avast Software s.r.o. -> Gen Digital Inc.) C:\Program Files\Avast Software\Avast\AvastSvc.exe
(services.exe ->) (Broadcom Corporation -> Broadcom Corporation.) C:\Windows\System32\BtwRSupportService.exe
(services.exe ->) (Dropbox, Inc -> Dropbox, Inc.) C:\Windows\System32\DbxSvc.exe
(services.exe ->) (Eastern Times Technology Co.,Ltd -> ) C:\Program Files (x86)\Trust GXT 155 Gaming Mouse\ETGMSrv.exe
(services.exe ->) (Electronic Arts, Inc. -> Electronic Arts) C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe
(services.exe ->) (Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe
(services.exe ->) (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.) C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_05bfde18331c4d58\amdfendrsr.exe
(services.exe ->) (Valve Corp. -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\steamservice.exe
(sihost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Program Files\WindowsApps\MicrosoftWindows.CrossDevice_1.25032.52.0_x64__cw5n1h2txyewy\CrossDeviceService.exe
(Slack Technologies, LLC -> Slack Technologies Inc.) C:\Users\slave\AppData\Local\slack\app-4.43.52\slack.exe <7>
(svchost.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files\WindowsApps\AdobeNotificationClient_6.0.0.1_x86__enpm4xejd91yc\AdobeNotificationClient.exe
(svchost.exe ->) (Adobe Systems Incorporated -> ) C:\Program Files\WindowsApps\AcrobatNotificationClient_1.0.4.0_x86__e1rzdqpraam7r\AcrobatNotificationClient.exe
(svchost.exe ->) (Advanced Micro Devices -> Advanced Micro Devices, Inc.) C:\Program Files\AMD\CNext\CNext\CPUMetricsServer.exe
(svchost.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.GamingApp_2504.1001.26.0_x64__8wekyb3d8bbwe\XboxPcAppFT.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\NgcIso.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.AppRep.ChxApp_cw5n1h2txyewy\CHXSmartScreen.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\Avast Software\Avast\AvLaunch.exe [455976 2025-04-09] (Avast Software s.r.o. -> Gen Digital Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [10752424 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM-x32\...\Run: [Dropbox] => C:\Program Files (x86)\Dropbox\Client\Dropbox.exe [9238408 2025-04-29] (Dropbox, Inc -> Dropbox, Inc.)
HKLM-x32\...\Run: [Lightshot] => C:\Program Files (x86)\Skillbrains\lightshot\Lightshot.exe [226728 2019-07-21] (Kilonova LLC -> )
HKLM-x32\...\Run: [Adobe CCXProcess] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud Experience\CCXProcess.exe [133128 2024-09-09] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [1145256 2025-04-12] (Adobe Inc. -> Adobe Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [752208 2025-04-05] (Oracle America, Inc. -> Oracle Corporation)
HKLM-x32\...\Run: [GXT155gmmouseRun] => C:\Program Files (x86)\Trust GXT 155 Gaming Mouse\GXT155mon.exe [3435520 2018-06-10] () [File not signed]
HKLM\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\Update\OneDriveSetup.exe" [89199416 2025-04-29] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Program Files\Microsoft OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiSpyware] Restriction <==== ATTENTION
HKLM\SOFTWARE\Microsoft\Windows Defender: [DisableAntiVirus] Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-19\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-23] (Google LLC -> Google LLC.)
HKU\S-1-5-20\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-23] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [OneDrive] => C:\Program Files\Microsoft OneDrive\OneDrive.exe [5014344 2025-04-29] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [4693600 2025-04-21] (Valve Corp. -> Valve Corporation)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [Discord] => C:\Users\slave\AppData\Local\Discord\Update.exe [1526504 2024-09-04] (Discord Inc. -> GitHub)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [Adobe Acrobat Synchronizer] => C:\Program Files\Adobe\Acrobat DC\Acrobat\AdobeCollabSync.exe [41351584 2025-04-09] (Adobe Inc. -> Adobe Systems Incorporated)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-23] (Google LLC -> Google LLC.)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [AMDNoiseSuppression] => C:\WINDOWS\system32\AMD\ANR\AMDNoiseSuppression.exe [164840 2024-06-24] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [EADM] => C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EALauncher.exe [3814496 2025-04-16] (Electronic Arts, Inc. -> Electronic Arts)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [Viber] => C:\Users\slave\AppData\Local\Viber\Viber.exe [101727064 2025-04-15] (Viber Media S.a r.l. -> Viber Media S.Ã� r.l.)
HKU\S-1-5-21-2574191415-932531762-3141445119-1001\...\Run: [com.squirrel.slack.slack] => C:\Users\slave\AppData\Local\slack\slack.exe [307504 2025-04-21] (Slack Technologies, LLC -> Slack Technologies Inc.)
HKU\S-1-5-18\...\Run: [GoogleDriveFS] => C:\Program Files\Google\Drive File Stream\107.0.3.0\GoogleDriveFS.exe [65821280 2025-04-23] (Google LLC -> Google LLC.)
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\WINDOWS\system32\AdobePDF.dll [203936 2024-08-08] (Adobe Inc. -> Adobe Systems Inc)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\135.0.7049.115\Installer\chrmstp.exe [2025-04-24] (Google LLC -> Google LLC)
HKLM\Software\...\Authentication\Credential Providers: [{C885AA15-1764-4293-B82A-0586ADD46B35}] ->
Startup: C:\Users\slave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Telegram.lnk [2025-03-22]
ShortcutTarget: Telegram.lnk -> C:\Users\slave\AppData\Roaming\Telegram Desktop\Telegram.exe (Telegram FZ-LLC -> Telegram FZ-LLC)
HKLM\SOFTWARE\Policies\Mozilla\Firefox: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {9E30966E-B457-429B-A3C3-6C989BC5D905} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1580992 2025-03-21] (Adobe Inc. -> Adobe Inc.)
Task: {63FAA669-6604-4AE3-A5DC-F8DC93B4CF00} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [10752424 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {1D052E57-6DB5-40E8-9C6F-D477C1BC7B86} - System32\Tasks\Adobe-Genuine-Software-Integrity-Scheduler-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [11065256 2025-01-14] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {B320F0DE-1106-47DC-AF6F-A848DDCBBD29} - System32\Tasks\AMDRyzenMasterSDKTask => C:\Program Files\AMD\CNext\CNext\cpumetricsserver.exe [191184 2024-11-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {3279D5E6-697C-401C-8C76-83E8E0CFF2F1} - System32\Tasks\Avast Software\Avast Antivirus Patcher => C:\Program Files\Common Files\Avast Software\Icarus\avast-av\icarus.exe [8594216 2025-03-27] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {7F12FB08-3C7E-43F5-B79A-D64F474085B4} - System32\Tasks\Avast Software\Avast Emergency Update => C:\Program Files\Avast Software\Avast\AvEmUpdate.exe [5293864 2025-04-09] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {1A746C7A-25AD-47FE-987B-3B84218F8324} - System32\Tasks\Avast Software\Overseer => C:\Program Files\Common Files\Avast Software\Overseer\overseer.exe [2564904 2024-11-20] (Avast Software s.r.o. -> Gen Digital Inc.)
Task: {9ACDDAA7-33A6-49FB-A322-C631F43D45C9} - System32\Tasks\com.amazon.kpr.ncd => C:\Users\slave\AppData\Local\Amazon\Kindle Previewer 3\KPR_NCD.exe [2110976 2025-02-22] () [File not signed] <==== ATTENTION
Task: {CB63873D-8CC5-424E-A890-482DE5DBAA19} - System32\Tasks\DropboxSystem\DropboxUpdater\DropboxUpdaterTaskSystem123.0.6299.109{7D11D58F-B00A-4DE1-B0E0-7115DF5C926E} => C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.109\updater.exe [5895032 2025-03-21] (Dropbox, Inc -> Dropbox, Inc.)
Task: {764BB0DE-B8D3-4FE2-88DF-9B586BF18394} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem137.0.7129.0{EBE383F0-3F59-4EBC-AC26-0534E493D647} => C:\Program Files (x86)\Google\GoogleUpdater\137.0.7129.0\updater.exe [7375968 2025-04-17] (Google LLC -> Google LLC)
Task: {3B4DAD8D-A83E-41DC-8C7F-199D26826751} - System32\Tasks\Lenovo\Lenovo Service Bridge\S-1-5-21-2574191415-932531762-3141445119-1001 => C:\Users\slave\AppData\Local\Programs\Lenovo\Lenovo Service Bridge\LSBUpdater.exe [88584 2024-05-17] (Lenovo (Beijing) Limited -> Lenovo Group Limited)
Task: {18DD42D1-7E6B-4C1F-A65E-159E1F0403DC} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28609776 2025-03-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {0508B5A8-8226-4CFC-8354-F04DBAD3DA0A} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [28609776 2025-03-30] (Microsoft Corporation -> Microsoft Corporation)
Task: {E35FD19C-596E-48D3-A5FC-5B1629A559AA} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312496 2025-04-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {3FDA71EE-94BC-4060-BA98-9EC0E04C00E3} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [312496 2025-04-16] (Microsoft Corporation -> Microsoft Corporation)
Task: {A3BF75D2-B16C-46CC-B081-5E44597D11A0} - System32\Tasks\Microsoft\Office\Office Performance Monitor => C:\Program Files\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\Office16\operfmon.exe [187024 2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
Task: {077BA067-7C15-40F0-B22E-C9DC2A54B4A2} - System32\Tasks\Microsoft\Windows\Location\Notifications => %windir%\System32\LocationNotificationWindows.exe (No File)
Task: {CCDFC0B8-01A3-4E74-A820-4F13F51D269E} - System32\Tasks\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser => %SystemRoot%\System32\MbaeParserTask.exe (No File)
Task: {A4BC5BB3-44A2-49F0-9451-922CBF3FE14B} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_AC => %systemroot%\system32\MusNotification.exe /RunOnAC RebootDialog (No File)
Task: {31110D7F-072A-4E09-BC1A-CED57AC3FD91} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\Reboot_Battery => %systemroot%\system32\MusNotification.exe /RunOnBattery RebootDialog (No File)
Task: {F3E6E7ED-A196-4E44-8803-55FAB3AD4E29} - System32\Tasks\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker => %systemroot%\system32\MusNotification.exe (No File)
Task: {E9C827BA-D336-4C20-AA62-9DA77B48E4F8} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\InitialConfiguration => {709FD5EF-7296-4154-BD3A-E9830FCFA60A} C:\WINDOWS\system32\ShellConfigTask.dll [274432 2025-04-26] (Microsoft Windows -> Microsoft Corporation)
Task: {3DB47973-12DF-40A1-886A-1FF7A2602520} - System32\Tasks\Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration => {0BE6820D-B667-4CB6-931B-C153A77DA895} C:\WINDOWS\system32\ShellConfigTask.dll [274432 2025-04-26] (Microsoft Windows -> Microsoft Corporation)
Task: {49035FB4-38CC-41EB-9485-4EF706EEA4D8} - System32\Tasks\ModifyLinkUpdate => C:\Program Files\AMD\CIM\Bin64\InstallManagerApp.exe [1035472 2024-11-28] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {CF51999A-6D62-410E-9D62-B6E7CFB19D4E} - System32\Tasks\OneDrive Per-Machine Standalone Update Task => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {A44FB663-60DF-4DD1-A4DD-0D04A5EC8DDB} - System32\Tasks\OneDrive Reporting Task-S-1-5-21-2574191415-932531762-3141445119-1001 => C:\Program Files\Microsoft OneDrive\OneDriveStandaloneUpdater.exe [4223832 2025-04-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {73811D01-6460-4142-B62A-C39B25212B4E} - System32\Tasks\OneDrive Startup Task-S-1-5-21-2574191415-932531762-3141445119-1001 => C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveLauncher.exe [679232 2025-04-29] (Microsoft Corporation -> Microsoft Corporation)
Task: {1CD58D9D-BCAA-4E6E-99A7-5604DF0CA572} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [139472 2024-11-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {93444334-A9DB-467E-8096-722A5529C4F1} - System32\Tasks\StartDVR => C:\Program Files\AMD\CNext\CNext\RSServCmd.exe [309968 2024-11-27] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
Task: {38461FA3-8FA8-4702-B242-FBB2C706D015} - System32\Tasks\update-S-1-5-21-2574191415-932531762-3141445119-1001 => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)
Task: {B13E6279-CEB8-44AD-8108-5D1B924E7B0F} - System32\Tasks\update-sys => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe [414872 2017-04-12] (OOO Lightshot -> TODO: <Company name>)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\update-S-1-5-21-2574191415-932531762-3141445119-1001.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe
Task: C:\WINDOWS\Tasks\update-sys.job => C:\Program Files (x86)\Skillbrains\Updater\Updater.exe

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.8.1
Tcpip\..\Interfaces\{bd7b7a99-eaf3-494d-8be1-924251d80c94}: [DhcpNameServer] 192.168.8.1

Edge:
=======
Edge Profile: C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default [2025-04-27]
Edge Extension: (Table Capture) - C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\cjlemjohnmihejeecaoaglgejaokmclj [2025-02-14]
Edge Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2024-10-28]
Edge Extension: (Google Docs Offline) - C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-04]
Edge Extension: (Adblock Plus - free ad blocker) - C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\gmgoamodcdcjnbaobigkjelfplakmdhh [2025-02-26]
Edge Extension: (Auto Refresh Plus | Page Monitor) - C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\hgeljhfekpckiiplhkigfehkdpldcggm [2024-10-28]
Edge Extension: (Feeder - RSS Feed Reader) - C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jlkhefogiiibhgblliimeleiiiijbkjj [2024-10-28]
Edge Extension: (Edge relevant text changes) - C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\jmjflgjpcpepeafmmgdpfkogkghcpiha [2024-09-09]
Edge Extension: (AdBlock � block ads across the web) - C:\Users\slave\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ndcileolkflehcjpmjnfbnaibdcgglog [2025-02-19]

FireFox:
========
FF HKLM\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Extension: (Adobe Acrobat) - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi [2021-02-01]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.17@acrobat.adobe.com] - C:\Program Files\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn\WebExtn\signed_extn\adobe_acrobat-1.0-windows.xpi
FF Plugin: @java.com/DTPlugin,version=11.451.0 -> C:\Program Files\Java\jre1.8.0_451\bin\dtplugin\npDeployJava1.dll [2025-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.451.0 -> C:\Program Files\Java\jre1.8.0_451\bin\plugin2\npjp2.dll [2025-04-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.21 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2024-06-08] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2025-04-09] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2025-04-12] (Adobe Inc. -> Adobe Systems)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2025-02-14] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2025-04-12] (Adobe Inc. -> Adobe Systems)

Chrome:
=======
CHR Profile: C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default [2025-04-30]
CHR Notifications: Default -> [Link mogu videti samo ulogovani korisnici]
CHR HomePage: Default -> [Link mogu videti samo ulogovani korisnici]
CHR StartupUrls: Default -> "hxxps://www.fiverr.com/users/slaven980/seller_dashboard","hxxps://www.upwork.com/nx/find-work/","hxxps://www.facebook.com/","hxxps://mail.google.com/mail/u/0/#inbox","hxxps://mail.yahoo.com/d/folders/1","hxxps://medierogledelse.roxen.com/","hxxps://trello.com/b/tCs8vhW5/prelom-knjiga"
CHR Extension: (Strata) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\bihlahcemjcnhakkkclcohelfdleejmc [2024-09-09]
CHR Extension: (Adblock Plus - free ad blocker) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2025-04-26]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2025-04-30]
CHR Extension: (Free Rider HD) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\emikpifndnjfkgofoglceekhkbaicbde [2024-09-09]
CHR Extension: (GoFullPage - Full Page Screen Capture) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\fdpohaocaechififmbbbbbknoalclacl [2025-03-23]
CHR Extension: (Causality Games) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\femoooemgmjaebeodbbikbkmhlafenpl [2024-09-09]
CHR Extension: (Readium) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\fepbnnnkkadjhjahcafoaglimekefifl [2024-09-09]
CHR Extension: (Google Docs Offline) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-04-24]
CHR Extension: (AdBlock � block ads across the web) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom [2025-04-21]
CHR Extension: (Auto Refresh Plus | Page Monitor) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\hgeljhfekpckiiplhkigfehkdpldcggm [2024-09-09]
CHR Extension: (Table Capture) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\iebpjdmgckacbodjpijphcplhebcmeop [2025-03-21]
CHR Extension: (Hootsuite) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\kneloppijbcidgidihgdjnooihjcdbij [2024-09-09]
CHR Extension: (Little Alchemy) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\knkapnclbofjjgicpkfoagdjohlfjhpd [2024-09-09]
CHR Extension: (Application Launcher For Drive (by Google)) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\lmjegmlicamnimmfhcmpkclmigmmcbeh [2024-10-01]
CHR Extension: (Google Play Books) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\mmimngoggfoobjdlefbcabngfnmieonb [2024-09-09]
CHR Extension: (Chrome Web Store Payments) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2024-09-09]
CHR Extension: (Volume booster - Increase Volume) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\ogadflejmplcdhcldlloonbiekhnlopp [2025-04-30]
CHR Extension: (RSS Feed Reader) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\pnjaodmkngahhkoihejjehlcdlnohgmp [2025-03-25]
CHR Extension: (Canvas Rider) - C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Extensions\poknhlcknimnnbfcombaooklofipaibk [2024-09-09]
CHR HKU\S-1-5-21-2574191415-932531762-3141445119-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
CHR HKU\S-1-5-21-2574191415-932531762-3141445119-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [174520 2025-03-21] (Adobe Inc. -> Adobe Inc.)
R2 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [944040 2025-04-12] (Adobe Inc. -> Adobe Inc.)
R3 aswbIDSAgent; C:\Program Files\Avast Software\Avast\aswidsagent.exe [7500072 2025-04-09] (Avast Software s.r.o. -> AVAST Software)
R2 avast! Antivirus; C:\Program Files\Avast Software\Avast\AvastSvc.exe [807208 2025-04-09] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 avast! Tools; C:\Program Files\Avast Software\Avast\aswToolsSvc.exe [859432 2025-04-09] (Avast Software s.r.o. -> Gen Digital Inc.)
R2 AvastWscReporter; C:\Program Files\Avast Software\Avast\wsc_proxy.exe [56912 2024-09-09] (Avast Software s.r.o. -> AVAST Software)
R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [14044936 2025-03-30] (Microsoft Corporation -> Microsoft Corporation)
R2 DbxSvc; C:\WINDOWS\System32\DbxSvc.exe [58984 2025-04-29] (Dropbox, Inc -> Dropbox, Inc.)
S3 DropboxElevationService; C:\Program Files (x86)\Dropbox\Client\223.4.4909\DropboxElevationService.exe [1659280 2025-04-29] (Dropbox, Inc -> Dropbox, Inc.)
S2 DropboxUpdaterInternalService123.0.6299.109; C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.109\updater.exe [5895032 2025-03-21] (Dropbox, Inc -> Dropbox, Inc.)
S2 DropboxUpdaterService123.0.6299.109; C:\Program Files\Dropbox\DropboxUpdater\123.0.6299.109\updater.exe [5895032 2025-03-21] (Dropbox, Inc -> Dropbox, Inc.)
R3 EABackgroundService; C:\Program Files\Electronic Arts\EA Desktop\EA Desktop\EABackgroundService.exe [18709600 2025-04-16] (Electronic Arts, Inc. -> Electronic Arts)
R2 ETGMGlcsSrv; C:\Program Files (x86)\Trust GXT 155 Gaming Mouse\ETGMSrv.exe [1181544 2012-04-24] (Eastern Times Technology Co.,Ltd -> )
S3 FileSyncHelper; C:\Program Files\Microsoft OneDrive\25.065.0406.0002\FileSyncHelper.exe [3587904 2025-04-29] (Microsoft Corporation -> Microsoft Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [9406208 2025-04-30] (Malwarebytes Inc -> Malwarebytes)
S3 MBVpnTunnelService; C:\Program Files\Malwarebytes\Anti-Malware\MBVpnTunnelService.exe [2788304 2025-04-30] (Malwarebytes Inc. -> Malwarebytes)
S3 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MpDefenderCoreService.exe [1427024 2024-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 OneDrive Updater Service; C:\Program Files\Microsoft OneDrive\25.065.0406.0002\OneDriveUpdaterService.exe [3841360 2025-04-29] (Microsoft Corporation -> Microsoft Corporation)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [559320 2025-04-08] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\NisSrv.exe [3199648 2024-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24070.5-0\MsMpEng.exe [133704 2024-09-09] (Microsoft Windows Publisher -> Microsoft Corporation)
S3 ZTHELPER; C:\WINDOWS\System32\zthelper.dll [146096 2025-04-26] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R3 amdfendrmgr; C:\WINDOWS\System32\DriverStore\FileRepository\amdfendr.inf_amd64_05bfde18331c4d58\amdfendrmgr.sys [36016 2024-07-30] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Micro Devices, Inc.)
R3 amdgpio3; C:\WINDOWS\System32\drivers\amdgpio3.sys [33592 2024-09-12] (ASMedia Technology Inc. -> Advanced Micro Devices, Inc)
S2 AMDRyzenMasterDriverV26; C:\Windows\system32\AMDRyzenMasterDriver.sys [61264 2024-11-27] (Advanced Micro Devices -> Advanced Micro Devices)
R2 AMDRyzenMasterDriverV27; C:\WINDOWS\system32\AMDRyzenMasterDriver.sys [61264 2024-11-27] (Advanced Micro Devices -> Advanced Micro Devices)
R3 AMDSAFD; C:\WINDOWS\System32\DriverStore\FileRepository\amdsafd.inf_amd64_d4de13a10f2586d0\amdsafd.sys [112952 2024-06-15] (AMD Test Build -> Advanced Micro Devices)
R3 amduw23g; C:\WINDOWS\System32\DriverStore\FileRepository\u0410212.inf_amd64_daae2c8b5eb35aaa\B409877\amdkmdag.sys [110965144 2024-12-04] (Advanced Micro Devices -> Advanced Micro Devices, Inc.)
R3 AMDXE; C:\WINDOWS\System32\drivers\amdxe.sys [63008 2024-05-16] (Advanced Micro Devices Inc. -> Advanced Micro Devices, Inc.)
R0 aswArDisk; C:\WINDOWS\System32\drivers\aswArDisk.sys [20536 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswArPot; C:\WINDOWS\System32\drivers\aswArPot.sys [248376 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswbidsdriver; C:\WINDOWS\System32\drivers\aswbidsdriver.sys [393272 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbidsh; C:\WINDOWS\System32\drivers\aswbidsh.sys [296528 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswbuniv; C:\WINDOWS\System32\drivers\aswbuniv.sys [84560 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswElam; C:\WINDOWS\System32\drivers\aswElam.sys [28280 2024-11-21] (Microsoft Windows Early Launch Anti-malware Publisher -> Gen Digital Inc.)
R1 aswKbd; C:\WINDOWS\System32\drivers\aswKbd.sys [37944 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswMonFlt; C:\WINDOWS\System32\drivers\aswMonFlt.sys [282680 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswNetHub; C:\WINDOWS\System32\drivers\aswNetHub.sys [553528 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswRdr; C:\WINDOWS\System32\drivers\aswRdr2.sys [98872 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswRvrt; C:\WINDOWS\System32\drivers\aswRvrt.sys [69688 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSnx; C:\WINDOWS\System32\drivers\aswSnx.sys [942672 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 aswSP; C:\WINDOWS\System32\drivers\aswSP.sys [1427512 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R3 aswStm; C:\WINDOWS\System32\drivers\aswStm.sys [207440 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R0 aswVmm; C:\WINDOWS\System32\drivers\aswVmm.sys [391760 2025-04-09] (Microsoft Windows Hardware Compatibility Publisher -> Gen Digital Inc.)
R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [158640 2025-04-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R2 googledrivefs31626; C:\Program Files\Google\Drive File Stream\Drivers\31626\googledrivefs31626.sys [384096 2024-10-01] (Microsoft Windows Hardware Compatibility Publisher -> Google, Inc.)
R2 mbamchameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [234072 2025-04-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [22120 2025-04-30] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\DRIVERS\farflt11.sys [241112 2025-04-30] (Malwarebytes Inc. -> Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\System32\Drivers\mbam.sys [80448 2025-04-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [239568 2025-04-30] (Microsoft Windows Hardware Compatibility Publisher -> Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [189776 2025-04-30] (Malwarebytes Inc. -> Malwarebytes)
R3 rtcx21; C:\WINDOWS\System32\DriverStore\FileRepository\rtcx21x64.inf_amd64_feec7a9662e785f0\rtcx21x64.sys [539648 2024-03-28] (Microsoft Windows -> Realtek)
S3 ThermalFilter; C:\WINDOWS\System32\DriverStore\FileRepository\c_thermal.inf_amd64_732a53ed1662b707\ThermalFilter.sys [75376 2025-03-27] (Microsoft Windows Hardware Abstraction Layer Publisher -> Microsoft Corporation)
R3 usbglcs1100302; C:\WINDOWS\system32\drivers\usbglcs1100302.sys [25600 2014-06-11] (Microsoft Windows Hardware Compatibility Publisher -> Windows (R) Win 7 DDK provider)
S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [22080 2024-09-09] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [602504 2024-09-09] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [105864 2024-09-09] (Microsoft Windows -> Microsoft Corporation)
S3 wini3ctarget; C:\WINDOWS\System32\DriverStore\FileRepository\wini3ctarget.inf_amd64_8d863c975b4367df\wini3ctarget.sys [79288 2025-04-26] (Microsoft Windows -> Microsoft Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-04-30 14:08 - 2025-04-30 14:08 - 000039140 _____ C:\Users\slave\Downloads\FRST.txt
2025-04-30 14:07 - 2025-04-30 14:08 - 000000000 ____D C:\FRST
2025-04-30 14:07 - 2025-04-30 14:07 - 002405376 _____ (Farbar) C:\Users\slave\Downloads\FRST64.exe
2025-04-30 13:59 - 2025-04-30 13:59 - 000241112 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt11.sys
2025-04-30 13:59 - 2025-04-30 13:59 - 000189776 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2025-04-30 13:59 - 2025-04-30 13:59 - 000000000 ____D C:\Users\slave\AppData\LocalLow\IGDump
2025-04-30 13:58 - 2025-04-30 13:58 - 002834160 _____ (Malwarebytes) C:\Users\slave\Downloads\MBSetup (1).exe
2025-04-30 13:54 - 2025-04-30 14:04 - 000000000 ____D C:\Users\slave\AppData\Local\Malwarebytes
2025-04-30 13:54 - 2025-04-30 13:54 - 000002093 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk
2025-04-30 13:54 - 2025-04-30 13:54 - 000000000 ____D C:\ProgramData\Malwarebytes
2025-04-30 13:54 - 2025-04-30 13:54 - 000000000 ____D C:\Program Files\Malwarebytes
2025-04-30 13:53 - 2025-04-30 13:53 - 002834160 _____ (Malwarebytes) C:\Users\slave\Downloads\MBSetup.exe
2025-04-30 13:38 - 2025-04-30 13:38 - 000001026 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InCopy 2025.lnk
2025-04-30 12:02 - 2025-04-30 12:02 - 000083548 _____ C:\Users\slave\Downloads\FontsFree-Net-Bodoni-SvtyTwo-ITC-TT-Book.ttf
2025-04-30 11:59 - 2025-04-30 11:59 - 002417551 _____ C:\Users\slave\Downloads\A4.psd
2025-04-30 11:48 - 2025-04-30 11:48 - 000345129 _____ C:\Users\slave\Downloads\CASE_LAMINATE_8.250x11.000_120_PREMIUM_WHITE_en_US.zip
2025-04-29 21:09 - 2025-04-29 21:09 - 000000000 ____D C:\Users\slave\OneDrive\Documents\InDesign PDF Assets
2025-04-29 18:57 - 2025-04-29 18:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Dropbox
2025-04-29 13:10 - 2025-04-29 13:10 - 000058984 _____ (Dropbox, Inc.) C:\WINDOWS\system32\DbxSvc.exe
2025-04-29 10:15 - 2025-04-29 10:15 - 000002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2024.lnk
2025-04-28 10:15 - 2025-04-28 10:15 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2024.lnk
2025-04-28 10:06 - 2025-04-28 10:06 - 000001130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro 2025.lnk
2025-04-28 09:59 - 2025-04-28 09:59 - 000002493 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Illustrator 2025.lnk
2025-04-27 13:37 - 2025-04-27 13:37 - 000000000 ____D C:\Users\slave\AppData\LocalLow\BulwarkStudios
2025-04-27 12:21 - 2025-04-27 12:22 - 000000000 ____D C:\Users\slave\OneDrive\Documents\Trust GXT 155
2025-04-27 12:20 - 2025-04-27 12:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Trust GXT 155 Gaming Mouse
2025-04-27 12:20 - 2025-04-27 12:20 - 000000000 ____D C:\Program Files (x86)\Trust GXT 155 Gaming Mouse
2025-04-27 12:19 - 2025-04-27 12:19 - 009397608 _____ (TRUST ) C:\Users\slave\Downloads\20411_05.exe
2025-04-27 10:35 - 2025-04-27 10:35 - 022303818 _____ C:\Users\slave\Downloads\Tekst knjige + instrukcije za pripremu.zip
2025-04-27 10:25 - 2025-04-27 10:25 - 000402464 _____ C:\WINDOWS\system32\prfh0804.dat
2025-04-27 10:25 - 2025-04-27 10:25 - 000130680 _____ C:\WINDOWS\system32\prfc0804.dat
2025-04-27 08:40 - 2025-03-26 00:09 - 011386880 _____ C:\Users\slave\Downloads\Real Estate Investing for Engineers - L2m.indd
2025-04-27 08:40 - 2025-03-26 00:08 - 011902976 _____ C:\Users\slave\Downloads\Real Estate Investing for Engineers - L1m.indd
2025-04-27 08:40 - 2025-03-25 13:41 - 009175040 _____ C:\Users\slave\Downloads\Real Estate Investing for Engineers - L3.indd
2025-04-26 03:33 - 2025-04-30 13:02 - 000000000 ____D C:\WINDOWS\CbsTemp
2025-04-26 03:31 - 2025-04-26 03:31 - 000030998 _____ C:\WINDOWS\SysWOW64\IntegratedServicesRegionPolicySet.json
2025-04-26 03:31 - 2025-04-26 03:31 - 000030998 _____ C:\WINDOWS\system32\IntegratedServicesRegionPolicySet.json
2025-04-24 22:03 - 2025-04-24 22:03 - 000001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop 2025.lnk
2025-04-24 21:47 - 2025-04-24 21:47 - 000001052 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe InDesign 2025.lnk
2025-04-24 12:31 - 2025-04-24 12:31 - 000083504 _____ C:\Users\slave\Downloads\Invoice 04-2025.pdf
2025-04-24 11:37 - 2025-04-24 11:37 - 055566629 _____ C:\Users\slave\Downloads\P135606_Renholdsnytt 2 2025_Proof.pdf
2025-04-23 20:53 - 2025-04-23 20:53 - 008260984 _____ C:\Users\slave\Downloads\Corrections RH02-2025 v1 lowres.pdf
2025-04-23 16:52 - 2025-04-23 16:53 - 264759481 _____ C:\Users\slave\Downloads\Sample Folder.zip
2025-04-23 13:30 - 2025-04-23 13:30 - 001415215 _____ C:\Users\slave\Downloads\Products_Cleanroom.tif
2025-04-23 09:50 - 2025-04-23 09:50 - 034996980 _____ C:\Users\slave\Downloads\wetransfer_final-parts-for-ren-2_2025-04-23_0731.zip
2025-04-23 09:49 - 2025-04-23 09:49 - 011177715 _____ C:\Users\slave\Downloads\P46-49 Corrections to Market.pdf
2025-04-22 19:55 - 2025-04-22 19:56 - 001420980 _____ C:\Users\slave\Downloads\Real Estate Investing for Engineers - L5 spread_DJL.pdf
2025-04-22 12:09 - 2025-04-22 12:09 - 000362058 _____ C:\Users\slave\Downloads\2 page Sample.pdf
2025-04-20 12:28 - 2025-04-20 12:29 - 122650217 _____ C:\Users\slave\Downloads\wetransfer_3rd-shipment-for-renholdsnytt_2025-04-18_1929.zip
2025-04-20 12:27 - 2025-04-20 12:27 - 000000000 ____D C:\Users\slave\AppData\Roaming\Sun
2025-04-20 12:27 - 2025-04-20 12:27 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2025-04-20 12:27 - 2025-04-20 12:27 - 000000000 ____D C:\Program Files\Java
2025-04-20 12:27 - 2025-04-05 03:39 - 000213120 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2025-04-20 12:26 - 2025-04-20 12:26 - 000000000 ____D C:\Users\slave\AppData\LocalLow\Oracle
2025-04-17 15:07 - 2025-04-17 15:08 - 119167869 _____ C:\Users\slave\Downloads\wetransfer_2nd-shipment-for-ren-2_2025-04-17_1227.zip
2025-04-17 14:47 - 2025-04-17 14:48 - 054759229 _____ C:\Users\slave\Downloads\Templates and Instructions.zip
2025-04-17 14:17 - 2025-04-17 14:17 - 000259973 _____ C:\Users\slave\Downloads\clarejmartin-attachments.zip
2025-04-17 12:41 - 2025-04-17 12:41 - 000003441 _____ C:\Users\slave\Downloads\Balkan_Gambit_Chapter1_Handouts.pdf
2025-04-15 10:42 - 2025-04-15 10:45 - 330568998 _____ C:\Users\slave\Downloads\wetransfer_first-shipment-for-renholdsnytt-no-2_2025-04-14_1606.zip
2025-04-14 10:23 - 2025-04-14 10:24 - 031882050 _____ C:\Users\slave\Downloads\Original size-20250414T082339Z-001.zip
2025-04-12 17:29 - 2025-04-12 17:29 - 000001382 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2025-04-11 12:51 - 2025-04-11 12:51 - 001587626 _____ C:\Users\slave\Downloads\Real Estate Investing for Engineers - L4 spread.pdf
2025-04-10 12:59 - 2025-04-10 12:59 - 000000000 ____D C:\Users\slave\AppData\LocalLow\DoubleCross
2025-04-09 19:18 - 2025-04-09 19:18 - 002714457 _____ C:\Users\slave\Downloads\Hey, Can You Read This_ - Ask.epub
2025-04-09 18:55 - 2025-04-09 18:55 - 000000000 ____D C:\WINDOWS\system32\Tasks\DropboxSystem
2025-04-09 18:55 - 2025-04-09 18:55 - 000000000 ____D C:\Program Files\Dropbox
2025-04-09 03:36 - 2025-04-09 03:35 - 000316200 _____ (Gen Digital Inc.) C:\WINDOWS\system32\aswBoot.exe
2025-04-09 03:29 - 2025-04-09 03:29 - 000000000 ____D C:\inetpub
2025-04-08 11:47 - 2025-04-08 11:47 - 068236106 _____ C:\Users\slave\Downloads\P135797_Havnemagasinet 2 2025_Proof.pdf
2025-04-07 19:39 - 2025-04-07 19:40 - 080889756 _____ C:\Users\slave\Downloads\Chapter 6 - Sickness & Health-20250407T173943Z-001.zip
2025-04-07 16:55 - 2025-04-07 16:56 - 214040576 _____ C:\Users\slave\Downloads\calibre-64bit-8.2.1.msi
2025-04-07 13:03 - 2025-04-07 13:03 - 000000000 ____D C:\Users\slave\AppData\Roaming\Microsoft\Bibliography
2025-04-07 12:26 - 2025-04-07 12:26 - 000000000 ____D C:\WINDOWS\Minidump
2025-04-07 12:00 - 2025-04-07 12:00 - 000014457 _____ C:\Users\slave\Downloads\Invoice 03-2025.pdf
2025-04-07 11:04 - 2025-04-30 13:15 - 000000000 ____D C:\Users\slave\AppData\Roaming\Slack
2025-04-07 11:04 - 2025-04-21 20:24 - 000002207 _____ C:\Users\slave\OneDrive\Desktop\Slack.lnk
2025-04-07 11:04 - 2025-04-21 20:24 - 000000000 ____D C:\Users\slave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Slack Technologies Inc
2025-04-07 11:04 - 2025-04-21 20:24 - 000000000 ____D C:\Users\slave\AppData\Local\slack
2025-04-07 11:03 - 2025-04-07 11:04 - 128985904 _____ (Slack Technologies Inc.) C:\Users\slave\Downloads\SlackSetup.exe
2025-04-05 11:44 - 2025-04-05 11:44 - 000001142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder 2025.lnk
2025-04-04 16:26 - 2025-04-04 16:26 - 000000000 ____D C:\Users\slave\AppData\Local\TheInvincible
2025-04-04 16:04 - 2025-04-04 16:04 - 002936541 _____ C:\Users\slave\Downloads\Annonse Norkyst Havnemagasinet.pdf
2025-04-04 12:39 - 2025-04-04 13:01 - 000000000 ____D C:\Users\slave\Downloads\The Invincible [FitGirl Repack]
2025-04-04 12:12 - 2025-04-04 12:13 - 045413412 _____ C:\Users\slave\Downloads\P135478_Treindustrien 2 2025_Proof.pdf
2025-04-04 09:00 - 2025-04-04 09:00 - 011355127 _____ C:\Users\slave\Downloads\Treindustrien 02-2025 v2 lowres read.pdf
2025-04-03 11:25 - 2025-04-03 11:25 - 000106050 _____ C:\Users\slave\Downloads\Вождовац Месне Заједнице.pdf
2025-04-02 23:38 - 2025-04-02 23:38 - 010428916 _____ C:\Users\slave\Downloads\Treindustrien 02-2025 v1 lowres read.pdf
2025-04-02 13:23 - 2025-04-02 13:23 - 001040435 _____ C:\Users\slave\Downloads\Mirror 02-25.pdf
2025-04-02 12:28 - 2025-04-02 12:28 - 000066820 _____ C:\Users\slave\Downloads\bell-gothic-std (1).zip
2025-04-02 12:18 - 2025-04-02 12:18 - 002010042 _____ C:\Users\slave\Downloads\SF_Pontona (1).eps
2025-04-02 12:18 - 2025-04-02 12:18 - 001278704 _____ C:\Users\slave\Downloads\SF_Ad_Connecting_216x303_2024_print (1).pdf
2025-04-02 12:17 - 2025-04-02 12:18 - 009355080 _____ C:\Users\slave\Downloads\Kajen1c.jpg (1).jpeg
2025-03-31 14:09 - 2025-03-31 14:10 - 000000000 ____D C:\Users\slave\Downloads\Squid Game - Season 2
2025-03-31 13:31 - 2025-03-31 13:31 - 016518211 _____ C:\Users\slave\Downloads\3d-mockup-1_DJL.pdf
2025-03-31 13:26 - 2025-03-31 13:26 - 001438821 _____ C:\Users\slave\Downloads\Real Estate Investing for Engineers - L3m_DJL.pdf
2025-03-31 13:26 - 2025-03-31 13:26 - 001312019 _____ C:\Users\slave\Downloads\Real Estate Investing for Engineers - L1m_DJL.pdf
2025-03-31 13:26 - 2025-03-31 13:26 - 000899370 _____ C:\Users\slave\Downloads\Real Estate Investing for Engineers - L2m_DJL.pdf
2025-03-31 11:36 - 2025-03-31 11:36 - 000396160 _____ C:\Users\slave\Downloads\Neyemi Leve 6 - Creole - Gregory Toussaint.epub
2025-03-31 10:13 - 2025-03-31 10:15 - 213995520 _____ C:\Users\slave\Downloads\calibre-64bit-8.1.1.msi

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-04-30 14:08 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemTemp
2025-04-30 14:03 - 2024-09-09 12:22 - 000000000 ____D C:\Program Files (x86)\Steam
2025-04-30 13:57 - 2024-09-16 23:13 - 000000000 ____D C:\Users\slave\AppData\Roaming\utorrent
2025-04-30 13:54 - 2024-09-09 12:28 - 000000000 ____D C:\Users\slave\AppData\Local\Discord
2025-04-30 13:54 - 2024-04-01 09:26 - 000000000 ___HD C:\WINDOWS\ELAMBKUP
2025-04-30 13:54 - 2024-04-01 09:24 - 000000000 ____D C:\WINDOWS\INF
2025-04-30 13:38 - 2024-09-09 14:32 - 000000000 ___HD C:\adobeTemp
2025-04-30 13:38 - 2024-09-09 12:24 - 000000000 ____D C:\Program Files\Adobe
2025-04-30 13:09 - 2021-01-05 08:03 - 000000000 ___SD C:\Users\slave\AppData\Roaming\Microsoft\Credentials
2025-04-30 13:02 - 2024-10-18 03:43 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2025-04-30 13:02 - 2024-04-01 09:26 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-04-30 12:54 - 2024-09-09 16:21 - 000000000 ____D C:\Users\slave\AppData\Local\CrashDumps
2025-04-30 12:39 - 2025-02-14 11:32 - 000000000 ____D C:\Users\slave\AppData\Roaming\Microsoft\Word
2025-04-30 10:08 - 2025-02-14 11:32 - 000000000 ____D C:\Users\slave\AppData\Roaming\Microsoft\Office
2025-04-30 09:19 - 2021-01-05 08:04 - 000000000 ____D C:\Users\slave\AppData\Local\Packages
2025-04-30 02:23 - 2024-04-01 09:26 - 000000000 ___HD C:\Program Files\WindowsApps
2025-04-30 02:23 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\AppReadiness
2025-04-30 01:55 - 2024-09-09 12:28 - 000000000 ____D C:\Users\slave\AppData\Roaming\discord
2025-04-30 00:26 - 2025-02-14 11:33 - 000000000 ____D C:\Users\slave\AppData\Roaming\Microsoft\UProof
2025-04-29 22:55 - 2025-02-14 11:41 - 000000000 ____D C:\Users\slave\AppData\Roaming\Microsoft\Excel
2025-04-29 18:58 - 2024-09-09 12:24 - 000000000 ____D C:\Users\slave\AppData\Local\Dropbox
2025-04-29 18:58 - 2024-09-09 12:23 - 000000000 ____D C:\Users\slave\AppData\Roaming\Dropbox
2025-04-29 18:57 - 2024-09-09 12:22 - 000000000 ____D C:\Program Files (x86)\Dropbox
2025-04-29 14:30 - 2025-02-15 13:51 - 000000000 ____D C:\Program Files\Microsoft OneDrive
2025-04-29 14:30 - 2025-02-14 11:18 - 000003194 _____ C:\WINDOWS\system32\Tasks\OneDrive Per-Machine Standalone Update Task
2025-04-29 14:30 - 2025-02-14 11:18 - 000002132 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-04-29 14:30 - 2025-01-27 22:02 - 000003546 _____ C:\WINDOWS\system32\Tasks\OneDrive Startup Task-S-1-5-21-2574191415-932531762-3141445119-1001
2025-04-29 14:30 - 2024-10-18 03:47 - 000003592 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-2574191415-932531762-3141445119-1001
2025-04-29 10:15 - 2021-01-05 08:04 - 000000000 ____D C:\Users\slave\AppData\Roaming\Adobe
2025-04-29 09:59 - 2024-09-09 14:18 - 000000000 ____D C:\Users\slave\OneDrive\Documents\ViberDownloads
2025-04-28 09:54 - 2024-10-01 12:30 - 000000000 ____D C:\Users\slave\AppData\Roaming\Telegram Desktop
2025-04-28 09:54 - 2024-09-09 14:17 - 000000000 ____D C:\Users\slave\AppData\Roaming\ViberPC
2025-04-28 01:37 - 2024-10-18 03:44 - 000000000 ____D C:\Users\slave
2025-04-27 13:26 - 2024-09-09 17:46 - 000000000 ____D C:\Users\slave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2025-04-27 10:25 - 2024-10-18 03:52 - 001360668 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2025-04-27 10:18 - 2024-10-18 03:47 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2025-04-27 10:18 - 2024-10-18 03:45 - 000004526 _____ C:\WINDOWS\system32\5E37410B-D6F1-471D-AE27-563CEAC0D6B2
2025-04-27 10:18 - 2021-01-05 07:58 - 000012288 ___SH C:\DumpStack.log.tmp
2025-04-27 09:19 - 2024-09-09 12:14 - 000000000 ____D C:\Users\slave\AppData\Local\D3DSCache
2025-04-26 16:02 - 2021-01-05 07:58 - 000002438 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2025-04-26 12:23 - 2024-09-09 12:17 - 000000000 ____D C:\Users\slave\AppData\Local\AMD_Common
2025-04-26 12:17 - 2024-09-09 12:12 - 000002249 _____ C:\Users\slave\OneDrive\Desktop\Discord.lnk
2025-04-26 12:16 - 2021-01-05 08:04 - 000000000 ____D C:\ProgramData\Packages
2025-04-26 06:08 - 2024-10-18 03:43 - 000001607 _____ C:\WINDOWS\system32\config\VSMIDK
2025-04-26 06:08 - 2024-09-09 12:17 - 000000000 ____D C:\ProgramData\Avast Software
2025-04-26 06:08 - 2024-04-01 09:21 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2025-04-26 06:07 - 2024-10-18 03:43 - 001339680 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2025-04-26 06:06 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\InboxApps
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\UUS
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemResources
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\SystemApps
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\WinMetadata
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecureBootUpdates
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\oobe
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\HealthAttestationClient
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\Dism
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\DDFs
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\appraiser
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\ShellExperiences
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\Provisioning
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\PolicyDefinitions
2025-04-26 06:06 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\bcastdvr
2025-04-26 03:31 - 2024-10-18 03:47 - 003369984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2025-04-25 10:33 - 2024-09-09 19:43 - 000000000 ____D C:\Users\slave\AppData\Roaming\vlc
2025-04-24 23:00 - 2024-09-09 12:13 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-04-24 22:03 - 2024-09-09 12:24 - 000000000 ____D C:\ProgramData\Adobe
2025-04-24 22:03 - 2024-09-09 12:24 - 000000000 ____D C:\Program Files\Common Files\Adobe
2025-04-24 10:56 - 2024-09-09 14:15 - 000000000 ____D C:\Users\slave\AppData\Roaming\calibre
2025-04-24 10:56 - 2024-09-09 14:15 - 000000000 ____D C:\Users\slave\AppData\Local\calibre-cache
2025-04-23 14:03 - 2024-10-01 17:44 - 000002173 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive.lnk
2025-04-22 23:04 - 2024-10-18 03:47 - 000002212 _____ C:\WINDOWS\system32\Tasks\com.amazon.kpr.ncd
2025-04-22 10:19 - 2024-09-19 14:05 - 000000000 ____D C:\ProgramData\boost_interprocess
2025-04-21 20:32 - 2024-04-01 09:26 - 000000000 ____D C:\WINDOWS\system32\SecurityHealth
2025-04-21 20:30 - 2025-03-18 08:41 - 000378432 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingservicesproxy_8.dll
2025-04-21 20:30 - 2025-01-17 14:33 - 002901544 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgameruntime.dll
2025-04-21 20:30 - 2025-01-17 14:33 - 000796224 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameplatformservices.dll
2025-04-21 20:30 - 2025-01-17 14:33 - 000267840 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamelaunchhelper.dll
2025-04-21 20:30 - 2025-01-17 14:33 - 000243240 _____ (Microsoft Corporation) C:\WINDOWS\system32\gameconfighelper.dll
2025-04-21 20:30 - 2025-01-17 14:33 - 000153152 _____ (Microsoft Corporation) C:\WINDOWS\system32\gamingtcuihelpers.dll
2025-04-21 20:30 - 2025-01-17 14:33 - 000124480 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamehelper.exe
2025-04-21 20:30 - 2025-01-17 14:33 - 000075304 _____ (Microsoft Corporation) C:\WINDOWS\system32\xgamecontrol.exe
2025-04-21 20:24 - 2024-09-09 14:17 - 000000000 ____D C:\Users\slave\AppData\Local\Viber
2025-04-21 20:22 - 2025-01-12 21:23 - 000000000 ____D C:\ProgramData\EA Desktop
2025-04-18 14:21 - 2024-10-18 03:47 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2025-04-18 14:21 - 2024-09-09 15:58 - 000002084 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller.lnk
2025-04-18 14:21 - 2024-09-09 15:58 - 000002073 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat.lnk
2025-04-17 16:44 - 2025-02-14 11:07 - 000000000 ____D C:\Program Files\Microsoft Office
2025-04-16 15:00 - 2024-09-09 12:20 - 000000000 ____D C:\Users\slave\AppData\Local\Adobe
2025-04-13 15:13 - 2024-10-01 12:37 - 000000000 ____D C:\Users\slave\Downloads\Telegram Desktop
2025-04-12 17:29 - 2024-09-09 12:24 - 000000000 ____D C:\Users\slave\AppData\LocalLow\Adobe
2025-04-12 17:29 - 2024-09-09 12:24 - 000000000 ____D C:\Program Files (x86)\Adobe
2025-04-09 13:46 - 2024-09-09 12:22 - 000393272 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsdriver.sys
2025-04-09 03:36 - 2024-10-18 03:47 - 000000000 ____D C:\WINDOWS\system32\Tasks\Avast Software
2025-04-09 03:35 - 2024-09-09 12:22 - 001427512 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSP.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000942672 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswSnx.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000553528 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswNetHub.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000391760 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswVmm.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000296528 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbidsh.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000282680 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000248376 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArPot.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000098872 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRdr2.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000084560 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswbuniv.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000069688 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000037944 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswKbd.sys
2025-04-09 03:35 - 2024-09-09 12:22 - 000020536 _____ (Gen Digital Inc.) C:\WINDOWS\system32\Drivers\aswArDisk.sys
2025-04-09 03:29 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\system32\OpenSSH
2025-04-09 03:29 - 2024-04-01 10:03 - 000000000 ____D C:\WINDOWS\system32\Microsoft-Edge-WebView
2025-04-09 03:29 - 2024-04-01 10:03 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection
2025-04-07 19:40 - 2024-09-09 14:15 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\calibre 64bit - E-book Management
2025-04-07 19:40 - 2024-09-09 14:15 - 000000000 ____D C:\Program Files\Calibre2
2025-04-07 19:30 - 2024-09-09 12:16 - 000000000 ____D C:\Users\slave\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps
2025-04-07 12:36 - 2024-10-23 20:55 - 000000000 ____D C:\Users\slave\OneDrive\Documents\InDesign GenAI Assets
2025-04-07 12:26 - 2021-01-05 07:58 - 002793175 ____N C:\WINDOWS\Minidump\040725-8500-01.dmp
2025-04-07 11:04 - 2024-09-09 12:28 - 000000000 ____D C:\Users\slave\AppData\Local\SquirrelTemp
2025-04-06 00:57 - 2024-10-18 03:47 - 000003536 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2025-04-06 00:57 - 2024-10-18 03:47 - 000003412 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2025-04-05 11:47 - 2024-10-04 17:42 - 000001130 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Premiere Pro 2024.lnk
2025-04-05 11:45 - 2024-10-04 17:50 - 000001142 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Media Encoder 2024.lnk
2025-04-04 14:15 - 2024-09-16 23:13 - 000000000 ____D C:\Users\slave\AppData\Local\BitTorrentHelper
2025-03-31 11:45 - 2024-09-10 13:02 - 000000000 ____D C:\Users\slave\AppData\Roaming\Amazon

==================== Files in the root of some directories ========

2024-09-09 15:46 - 2024-09-09 15:46 - 000000000 _____ () C:\Users\slave\AppData\Local\oobelibMkey.log
2024-09-09 12:24 - 2024-09-09 12:24 - 000000003 _____ () C:\Users\slave\AppData\Local\updater.log
2024-09-09 12:24 - 2024-09-10 18:12 - 000000424 _____ () C:\Users\slave\AppData\Local\UserProducts.xml

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

----------- Dopuna: 30 Apr 2025 20:34 ---------

khm, addition.txt

[Link mogu videti samo ulogovani korisnici]

----------- Dopuna: 01 Maj 2025 8:42 ---------

uradio jos jedan scan sa malwarebytes, evo izvod

Malwarebytes
[Link mogu videti samo ulogovani korisnici]

-Log Details-
Scan Date: 01-May-25
Scan Time: 09:08
Log File: 07326017-265b-11f0-b04b-9c6b0024c5db.json

-Software Information-
Version: 5.2.11.183
Components Version: 131.0.5227
Update Package Version: 1.0.98553
License: Trial

-System Information-
OS: Windows 11 (Build 26100.3915)
CPU: x64
File System: NTFS
User: System

-Scan Summary-
Scan Type: Threat Scan
Scan Initiated By: Scheduler
Result: Completed
Objects Scanned: 232625
Threats Detected: 22
Threats Quarantined: 0
Time Elapsed: 1 min, 22 sec

-Scan Options-
Memory: Enabled
Startup: Enabled
File system: Enabled
Archives: Enabled
Rootkits: Disabled
Heuristics: Enabled
PUP: Detect
PUM: Detect

-Scan Details-
Process: 0
(No malicious items detected)

Module: 0
(No malicious items detected)

Registry Key: 0
(No malicious items detected)

Registry Value: 1
Adware.Redirector, HKU\S-1-5-21-2574191415-932531762-3141445119-1001\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|ogadflejmplcdhcldlloonbiekhnlopp, No Action By User, 9387, 1267259, 1.0.98553, , ame, , ,

Registry Data: 0
(No malicious items detected)

Data Stream: 0
(No malicious items detected)

Folder: 3
Adware.Redirector, C:\USERS\SLAVE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\DEFAULT\EXTENSIONS\OGADFLEJMPLCDHCLDLLOONBIEKHNLOPP, No Action By User, 9387, 1267259, 1.0.98553, , ame, , ,
Adware.Redirector, C:\USERS\SLAVE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Local Extension Settings\ogadflejmplcdhcldlloonbiekhnlopp, No Action By User, 9387, 1267259, 1.0.98553, , ame, , ,
Adware.Redirector, C:\USERS\SLAVE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Sync Data\LevelDB, No Action By User, 9387, 1267259, 1.0.98553, , ame, , ,

File: 18
Adware.Redirector, C:\USERS\SLAVE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 665115DAAFD5A81206077B542305258C, 30F1C8EC0D4E8F519C79165337938D54B181C583E07BFBC5B39892F15D64399E
Adware.Redirector, C:\USERS\SLAVE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 4040D6244534C6F8311E1C796FF35D1A, 4FA02D98C63351E53FD6F8C9E58D7FE367052D42263969D164320F88490E7C70
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ogadflejmplcdhcldlloonbiekhnlopp\000003.log, No Action By User, 9387, 1267259, 1.0.98553, , ame, , ,
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ogadflejmplcdhcldlloonbiekhnlopp\CURRENT, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ogadflejmplcdhcldlloonbiekhnlopp\LOCK, No Action By User, 9387, 1267259, 1.0.98553, , ame, , ,
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ogadflejmplcdhcldlloonbiekhnlopp\LOG, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 5466F308390B1F5F2C4AF2E85702111C, 27B53A9D79736CD77094EE39779F8D5AA9FEFD3BF444E3701AF35E0C892BBE82
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ogadflejmplcdhcldlloonbiekhnlopp\LOG.old, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 37A7A0F92380686510878115EEBAFE51, 7AC46B2B0B67FDD1AA6443C337E95F134B70BB50A472687410AF987BC8CF6FC8
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\ogadflejmplcdhcldlloonbiekhnlopp\MANIFEST-000001, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 5AF87DFD673BA2115E2FCF5CFDB727AB, F9D31B278E215EB0D0E9CD709EDFA037E828F36214AB7906F612160FEAD4B2B4
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000005.ldb, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 4222A438DA6BCC1D56DE66B1348A211F, F7C0CB3FF882698B8341DD9232CDF2F36A7BD671FB9769386296858CCE608AA2
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.ldb, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 3FDA5478924259833BDF3B5FF3D148E7, AB8EA76EBE2D45329BD3784440DA22B2339187C4340927E5C5DAF88CC1795A3A
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000008.log, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 225CDADB4C4DCCF52512C92047FD580C, 5B6B30E6890BD553AE9CC8DCB72E4418B12F3EFBCC684600BC4E22BBEF91E67B
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000009.ldb, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 6C94061BDB71C26EA0BDA58DC84DA852, AD11BF2DFE3513D31734FC65DAAD7E0A38C5A44559575B043A6524661E611F0A
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\CURRENT, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 46295CAC801E5D4857D09837238A6394, 0F1BAD70C7BD1E0A69562853EC529355462FCD0423263A3D39D6D0D70B780443
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOCK, No Action By User, 9387, 1267259, 1.0.98553, , ame, , ,
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 0E6BC58BC303141EA829A3B64A045F5D, 8803243A48E65EE01CDB7D1EE7C9ABAFD68464B3FB921F326B043EE7628AB4A1
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG.old, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 39D64F959E5904BE69387974BB76F72A, C8F97363AF2536B550096C409C2FF80F51B22C061D0C3BCD2CFCAFD2F3B29C2D
Adware.Redirector, C:\Users\slave\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\MANIFEST-000001, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 9B11E0F418C060647A15E606AEBD31D1, C3F7D50AFA3B4E8D218DB99F57661CA6EADD4DBFEF7D09D4374ECB4D6778C49C
Adware.Redirector, C:\USERS\SLAVE\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Preferences, No Action By User, 9387, 1267259, 1.0.98553, , ame, , 4040D6244534C6F8311E1C796FF35D1A, 4FA02D98C63351E53FD6F8C9E58D7FE367052D42263969D164320F88490E7C70

Physical Sector: 0
(No malicious items detected)

WMI: 0
(No malicious items detected)

(end)

Re: Kasperski mi je pronasao 4 trojanca molim za pregled loga

nobody@mycity.rs (krokodokodil) — Sun, 27 Apr 2025 13:00:49 +0100

Hvala puno na trudu, pozdrav.

Re: Hakovan nalog na gmailu + virusi

nobody@mycity.rs (Gospodar Monstruma) — Wed, 26 Mar 2025 23:40:50 +0100

Da, tako sma i milio. UJutro ide reinstalcija a posle vracanje obadva naloga. Hvala mnogo.

Win 10 se �udno pona�a i trza

nobody@mycity.rs (Corleone) — Mon, 24 Mar 2025 20:50:59 +0100

Win 10. 64-bit. Laptop HP. Nema antivirusa i sli�nih programa. Sve radilo super.
Od ju�e kompjuter trza, ko�i, �uje se ventilator kako radu poja�anom modu. Imam mi�a Logi MX Master 3S i software Logi Option +. Mi� ko�i, ne�e da se pokrene ili se pokre�e sa zaka�njenjem. Iskop�ao sam taj mi� i stavio normalan mi� na kabl. Ista situacija. Te�ko se pokre�e Firefox i ima slab odziv na komande. Deinstalirao sam taj Logi Option i ponovo instalirao. Malo bolja situacija ali svako malo se na ekranu pojavi meni koji je sa desnog tastera mi�a iako mi� ne diram. Ventilator se �e��e uklju�uje nego ina�e.
Hvala unapred na pomo�i.

Evo iskopiranog FIRST izve�taja:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-03-2025
Ran by eldar (administrator) on DESKTOP-KR86JCD (HP HP 250 G5 Notebook PC) (24-03-2025 20:40:41)
Running from C:\Users\eldar\Desktop\FRST64.exe
Loaded Profiles: eldar
Platform: Microsoft Windows 10 Pro Version 1809 17763.1577 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxEM.exe
(DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atieclxx.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <16>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe
(services.exe ->) (Alcohol Soft -> Alcohol Soft Development Team) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe
(services.exe ->) (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20112.10111.0_x64__8wekyb3d8bbwe\Music.UI.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" [0 2023-05-26] () <==== ATTENTION [zero byte File/Folder]
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-1797985647-760240199-3322030732-1002\...\Run: [Microsoft Edge Update] => C:\Users\eldar\AppData\Local\Microsoft\EdgeUpdate\1.3.195.45\MicrosoftEdgeUpdateCore.exe [268384 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1797985647-760240199-3322030732-1002\...\Run: [Opera Browser Assistant] => C:\Users\eldar\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3996064 2024-03-04] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1797985647-760240199-3322030732-1002\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft -> Alcohol Soft Development Team)
HKU\S-1-5-21-1797985647-760240199-3322030732-1002\...\MountPoints2: {7bc6c510-f55a-11ed-9071-58fb84eec847} - "F:\SISetup.exe"
HKU\S-1-5-21-1797985647-760240199-3322030732-1003\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\kanita\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" [42164600 2022-08-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1797985647-760240199-3322030732-1003\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\kanita\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2012-08-31] () [File not signed]
HKLM\...\Print\Monitors\HP1100LM: HP1100LM.DLL (No File)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\134.0.6998.118\Installer\chrmstp.exe [2025-03-21] (Google LLC -> Google LLC)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {F59AB4CB-9CD3-4015-B453-2D41AA189782} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (No File)
Task: {7E9DBCDD-BB73-443D-B00E-09F675AE8A4A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{609BD481-B64A-4695-8C55-5669AF1507C1} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {1134A0AC-F810-4C3C-9AF6-D203E4093C9C} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [78288 2025-03-06] (HP Inc. -> HP Inc.)
Task: {04D78578-B3D9-41ED-BFD5-BCFF32667D15} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [78288 2025-03-06] (HP Inc. -> HP Inc.)
Task: {672E4950-03FF-4437-9B0A-22B467E62925} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {8D25F83C-A199-43C9-B54F-0DD316A49A36} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4B003150-437E-4166-B0D0-919CD51EFA38} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {11B8D8B3-F016-447B-90F9-583D6B0B01AC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3EFAF8BC-AB76-4790-ACCC-925E6D49F6CD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8AC5753A-55A7-4AC0-8A89-E2B9305AB608} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1797985647-760240199-3322030732-1002Core{8227E1D1-5591-40BC-AA28-C5B733C8EA4F} => C:\Users\eldar\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206264 2022-12-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2992E08-8D02-411C-B862-D91C931CCB74} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1797985647-760240199-3322030732-1002UA{9A2D435D-7392-418C-A6A6-9B0B4AD79B82} => C:\Users\eldar\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206264 2022-12-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {7EA5C562-9B5D-479E-AAD1-87F9415C1465} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [682560 2025-03-19] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {E90C808B-4C5F-4CDD-B77C-16F38136571F} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1797985647-760240199-3322030732-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [682560 2025-03-19] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {0533870C-AFD0-439E-904D-6116F775A20B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-03-19] (Mozilla Corporation -> Mozilla Foundation)
Task: {2149A99C-C46C-4247-9953-09A51196ACDA} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1797985647-760240199-3322030732-1002 => C:\Users\eldar\AppData\Local\Microsoft\OneDrive\25.035.0223.0003\OneDriveLauncher.exe [670528 2025-03-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {4CCB71C3-C2B4-4761-AEEB-B9F3E30DC45C} - System32\Tasks\Opera scheduled assistant Autoupdate 1660220888 => C:\Users\eldar\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\eldar\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {D93E4D48-36D6-40AC-A4E7-37825FAEB2A4} - System32\Tasks\Opera scheduled Autoupdate 1660220883 => C:\Users\eldar\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5645720 2025-02-28] (Opera Norway AS -> Opera Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 84.22.33.3 84.22.33.4
Tcpip\..\Interfaces\{01f3e407-5be7-4ff1-a1ec-9b21af6f76ad}: [DhcpNameServer] 84.22.33.3 84.22.33.4
Tcpip\..\Interfaces\{01f3e407-5be7-4ff1-a1ec-9b21af6f76ad}: [DhcpDomain] localdomain
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}: [DhcpNameServer] 84.22.33.3 84.22.33.4
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}: [DhcpDomain] localdomain
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\1402230313: [DhcpNameServer] 192.168.201.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\1402230333: [DhcpNameServer] 192.168.203.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\1402230353: [DhcpNameServer] 192.168.205.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\14458494E414: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\4505D2C494E4B4: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\4505D2C494E4B4D223F55374: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\4505D2C494E4B4D223F55374: [DhcpDomain] dlinkrouter
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\53E20254C656D656E647: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\B4553414: [DhcpNameServer] 192.168.50.1

FireFox:
========
FF DefaultProfile: lxb5645i.default
FF ProfilePath: C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\lxb5645i.default [2025-02-23]
FF user.js: detected! => C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\lxb5645i.default\user.js [2015-01-25]
FF DownloadDir: C:\Users\Eldar\Desktop
FF Extension: (Tab Reloader (page auto refresh)) - C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\lxb5645i.default\Extensions\jid0-bnmfwWw2w2w4e4edvcdDbnMhdVg@jetpack.xpi [2022-03-12]
FF Extension: (Tab Mix - Links) - C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\lxb5645i.default\Extensions\webext@tabmixplus.org.xpi [2021-12-21]
FF ProfilePath: C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\ndox47fu.default-release [2025-03-24]
FF Extension: (Tab Reloader (page auto refresh)) - C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\ndox47fu.default-release\Extensions\jid0-bnmfwWw2w2w4e4edvcdDbnMhdVg@jetpack.xpi [2025-01-09]
FF Extension: (Tab Mix - Links) - C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\ndox47fu.default-release\Extensions\webext@tabmixplus.org.xpi [2024-04-26]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: (SmartPrintButton) - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [Legacy] [not signed]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-10-09] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\eldar\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-04-25]
CHR Profile: C:\Users\eldar\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-03-24]
CHR DownloadDir: C:\Users\eldar\Downloads
CHR Extension: (Google Docs Offline) - C:\Users\eldar\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-25]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Chrome Web Store Payments) - C:\Users\eldar\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-07-28]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\eldar\AppData\Local\Google\Chrome\User Data\System Profile [2023-06-04]

Opera:
=======
OPR DefaultProfile: Default

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft -> Alcohol Soft Development Team)
R2 AxVirtualAHCISrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe [105888 2019-06-12] (Alcohol Soft -> Alcohol Soft Development Team)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [873560 2019-12-20] (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2025-03-06] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [22217608 2025-03-24] (Logitech Inc -> Logitech, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6117960 2022-08-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2016-12-22] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-22] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2017-09-02] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [278944 2025-02-14] (Microsoft Windows -> Microsoft Corporation)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)
R0 sptd2; C:\Windows\System32\Drivers\sptd2.sys [207344 2024-11-20] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20016 2025-03-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [601520 2025-03-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-04] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-24 20:40 - 2025-03-24 20:41 - 000021691 _____ C:\Users\eldar\Desktop\FRST.txt
2025-03-24 20:40 - 2025-03-24 20:41 - 000000000 ____D C:\FRST
2025-03-24 20:39 - 2025-03-24 20:39 - 002404352 _____ (Farbar) C:\Users\eldar\Desktop\FRST64.exe
2025-03-24 20:12 - 2025-03-24 20:12 - 000000000 ____D C:\Program Files\Logi
2025-03-24 20:11 - 2025-03-24 20:36 - 000000000 ____D C:\Users\eldar\AppData\Local\LogiOptionsPlus
2025-03-24 20:11 - 2025-03-24 20:12 - 000000000 ____D C:\Users\eldar\AppData\Roaming\logioptionsplus
2025-03-24 20:10 - 2025-03-24 20:11 - 000000000 ____D C:\ProgramData\LogiOptionsPlus
2025-03-24 20:10 - 2025-03-24 20:11 - 000000000 ____D C:\Program Files\LogiOptionsPlus
2025-03-24 20:10 - 2025-03-24 20:10 - 000000931 _____ C:\Users\Public\Desktop\Logi Options+.lnk
2025-03-24 20:10 - 2025-03-24 20:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2025-03-24 12:13 - 2025-03-24 16:31 - 000000000 ____D C:\Users\eldar\Desktop\Old Henry (2021) [1080p] [BluRay] [5.1] [YTS.MX]
2025-03-21 12:21 - 2025-03-22 22:14 - 000000000 ____D C:\Users\eldar\Desktop\Godless (2017) Season 1 S01 (1080p NF WEBRip x265 HEVC 10bit AAC 5.1 ImE)
2025-03-21 06:10 - 2025-03-21 06:10 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_6248_31822024
2025-03-19 16:18 - 2025-03-19 16:27 - 000000000 ____D C:\Users\eldar\Desktop\Last Breath (2025) [1080p] [WEBRip] [5.1] [YTS.MX]
2025-03-14 17:22 - 2025-03-14 17:22 - 000000000 ____D C:\Users\eldar\AppData\Roaming\Microsoft\PowerPoint
2025-03-12 21:51 - 2025-03-12 21:51 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_10560_1909738217
2025-03-10 21:51 - 2025-03-10 21:51 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_11948_4159075
2025-03-07 20:14 - 2025-03-07 20:14 - 004000256 _____ C:\Users\eldar\Downloads\KOPIJA-1.xls
2025-03-07 17:24 - 2025-03-07 17:25 - 004000256 _____ C:\Users\eldar\Desktop\KOPIJA-1.xls
2025-03-07 17:20 - 2025-03-07 17:20 - 001660643 _____ C:\Users\eldar\Desktop\KOPIJA.xlsx
2025-03-06 09:02 - 2025-03-08 15:43 - 000003758 _____ C:\Users\eldar\Desktop\temu - indira.txt
2025-03-05 05:28 - 2025-03-05 05:28 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_6804_66967742
2025-03-02 13:27 - 2025-03-08 15:19 - 000004274 _____ C:\Users\eldar\Desktop\temu.txt
2025-02-28 07:08 - 2025-02-28 07:08 - 000000000 ____D C:\Users\eldar\AppData\Roaming\Microsoft\Publisher
2025-02-27 21:51 - 2025-02-27 21:51 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_5092_1200296246
2025-02-27 19:21 - 2025-02-27 19:22 - 000000074 _____ C:\Users\eldar\Desktop\laser.txt
2025-02-27 14:27 - 2025-02-27 14:25 - 029138978 _____ C:\Users\eldar\Desktop\0-04-05-61c356876c3948bf8f0d64cb1fd2d44ea59c360f830cba4bb0b697e686485d60_d792574ab79fbadd.mp4
2025-02-25 06:46 - 2025-02-25 06:46 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_6552_2131012689
2025-02-24 11:36 - 2025-02-24 11:36 - 009113132 _____ C:\Users\eldar\Desktop\PROGRAM VJE�BI ZA BOL U DONJIM LEDJIMA.mp4
2025-02-23 15:03 - 2025-03-23 11:23 - 000000000 ____D C:\Users\eldar\Desktop\Faton-aga

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-24 20:39 - 2023-08-05 15:17 - 000000000 ____D C:\Users\eldar\AppData\Roaming\ViberPC
2025-03-24 20:35 - 2023-08-05 15:17 - 000000000 ____D C:\Users\eldar\Documents\ViberDownloads
2025-03-24 20:17 - 2023-07-28 13:46 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-03-24 20:14 - 2023-08-22 19:06 - 000000000 ____D C:\Users\eldar\AppData\Local\ClassicShell
2025-03-24 20:13 - 2018-11-14 18:16 - 000841376 _____ C:\Windows\system32\PerfStringBackup.INI
2025-03-24 20:13 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2025-03-24 20:10 - 2023-07-28 12:54 - 000000000 ____D C:\ProgramData\Logishrd
2025-03-24 20:08 - 2022-08-10 21:56 - 000000208 _____ C:\Windows\SysWOW64\AbBakConfig.dat
2025-03-24 20:08 - 2022-08-10 21:56 - 000000150 _____ C:\Windows\SysWOW64\winsevr.dat
2025-03-24 20:08 - 2022-08-10 21:55 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper
2025-03-24 20:08 - 2022-08-10 19:22 - 000000000 __SHD C:\Users\eldar\IntelGraphicsProfiles
2025-03-24 20:08 - 2018-11-14 18:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2025-03-24 20:08 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-24 20:07 - 2018-09-15 07:09 - 000786432 _____ C:\Windows\system32\config\BBI
2025-03-24 20:04 - 2023-07-28 12:54 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-24 19:27 - 2018-11-14 18:06 - 000000000 ____D C:\Windows\system32\SleepStudy
2025-03-24 11:24 - 2023-07-28 13:03 - 000000000 ____D C:\Users\eldar\AppData\Local\Deployment
2025-03-24 06:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2025-03-21 06:10 - 2022-08-10 19:08 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-03-21 06:10 - 2022-08-10 19:08 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-03-20 19:27 - 2024-10-23 04:49 - 000000000 ____D C:\Users\eldar\Desktop\Machine
2025-03-20 15:16 - 2022-08-11 10:59 - 000000000 ____D C:\Users\eldar\AppData\Roaming\Microsoft\Word
2025-03-19 19:39 - 2022-08-10 19:09 - 000000000 ____D C:\Users\eldar\AppData\Local\D3DSCache
2025-03-19 15:35 - 2023-08-19 05:29 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-03-19 15:35 - 2023-07-28 13:46 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-03-19 05:36 - 2025-01-29 07:33 - 000003570 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-1797985647-760240199-3322030732-1002
2025-03-19 05:36 - 2023-07-28 13:46 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-03-19 05:36 - 2023-07-28 13:46 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2025-03-19 05:36 - 2022-08-11 01:54 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1797985647-760240199-3322030732-1002
2025-03-19 05:36 - 2022-08-11 01:51 - 000002379 _____ C:\Users\eldar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-19 05:36 - 2022-08-10 19:21 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1797985647-760240199-3322030732-1002
2025-03-18 13:11 - 2024-09-29 19:38 - 000000000 ____D C:\Users\eldar\Desktop\AUTO FINAL
2025-03-18 13:11 - 2023-08-05 14:59 - 000000000 ____D C:\Users\eldar\Desktop\auto
2025-03-15 12:20 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-14 17:15 - 2024-05-11 17:55 - 000003584 _____ C:\Users\eldar\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2025-03-11 12:59 - 2023-08-05 15:17 - 000000000 ____D C:\Users\eldar\AppData\Local\Viber
2025-03-08 18:16 - 2025-01-31 21:13 - 000000000 ____D C:\Users\eldar\Desktop\Mad Max Fury Road (2015)
2025-03-08 18:16 - 2025-01-31 08:54 - 000000000 ____D C:\Users\eldar\Desktop\Furiosa A Mad Max Saga (2024)
2025-03-07 17:14 - 2022-08-11 01:52 - 000000000 ____D C:\Users\eldar\AppData\Local\Packages
2025-03-07 16:27 - 2023-11-11 20:45 - 000216196 _____ C:\Users\eldar\Desktop\664-------- Director Fehmi Krasniqi.srt
2025-03-07 15:24 - 2022-08-11 13:28 - 000004266 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1660220883
2025-03-07 15:24 - 2022-08-11 13:28 - 000001386 _____ C:\Users\eldar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2025-03-07 07:04 - 2022-12-21 22:30 - 000003872 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1797985647-760240199-3322030732-1002UA{9A2D435D-7392-418C-A6A6-9B0B4AD79B82}
2025-03-07 07:04 - 2022-12-21 22:30 - 000003808 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1797985647-760240199-3322030732-1002Core{8227E1D1-5591-40BC-AA28-C5B733C8EA4F}
2025-03-06 06:39 - 2023-08-10 10:28 - 000000000 ____D C:\Windows\system32\Tasks\HP
2025-03-06 06:39 - 2023-07-28 12:59 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-03-05 17:02 - 2024-01-08 21:00 - 000000000 ____D C:\Users\eldar\Desktop\New folder
2025-03-04 05:34 - 2018-11-14 18:07 - 000000000 ____D C:\Windows\system32\Drivers\wd
2025-03-03 12:46 - 2024-07-01 09:35 - 000000000 ____D C:\Users\eldar\Desktop\Plata
2025-02-28 21:05 - 2024-11-26 13:11 - 000000000 ____D C:\Users\eldar\Desktop\WhatsApp sent video
2025-02-28 07:08 - 2022-08-11 10:59 - 000000000 ____D C:\Users\eldar\AppData\Roaming\Microsoft\Office
2025-02-28 06:39 - 2023-08-05 15:17 - 000001027 _____ C:\Users\eldar\Desktop\Viber.lnk
2025-02-23 14:09 - 2024-11-26 12:46 - 000000000 ____D C:\Users\eldar\Desktop\WhatsApp Images
2025-02-23 13:25 - 2024-11-19 21:30 - 000000000 ____D C:\Users\eldar\Desktop\slike za ssd
2025-02-23 13:23 - 2024-11-26 20:02 - 000000000 ____D C:\Users\eldar\Desktop\Sa mobilnog
2025-02-23 11:27 - 2022-08-10 22:12 - 000001024 ____H C:\SYSTAG.BIN
2025-02-22 20:02 - 2022-08-10 21:55 - 000000000 ____D C:\ProgramData\AomeiBR

==================== Files in the root of some directories ========

2024-10-29 08:59 - 2025-03-21 06:10 - 000530609 _____ () C:\Program Files\chrome_installer.log
2024-11-17 11:10 - 2024-11-17 11:10 - 000533208 _____ () C:\Program Files (x86)\updater.log
2024-12-17 09:45 - 2024-12-17 09:45 - 000000018 _____ () C:\Users\eldar\AppData\Roaming\.cache9050425797200915815.dat
2024-03-25 11:05 - 2025-02-17 14:38 - 000015175 _____ () C:\Users\eldar\AppData\Roaming\plugin_scan_state_VST2_x32.scan
2024-03-25 11:05 - 2025-02-17 14:38 - 000019623 _____ () C:\Users\eldar\AppData\Roaming\plugin_scan_state_VST2_x64.scan
2024-03-25 11:05 - 2025-02-17 14:38 - 000001686 _____ () C:\Users\eldar\AppData\Roaming\plugin_scan_state_VST3_x32.scan
2024-03-25 11:05 - 2025-02-17 14:38 - 000006101 _____ () C:\Users\eldar\AppData\Roaming\plugin_scan_state_VST3_x64.scan
2024-05-11 17:55 - 2025-03-14 17:15 - 000003584 _____ () C:\Users\eldar\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2023-08-20 10:12 - 2023-08-20 10:12 - 000007605 _____ () C:\Users\eldar\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================

[Link mogu videti samo ulogovani korisnici]

Re: �i��enje do 32 procenta

nobody@mycity.rs (Sirius) — Tue, 23 Jul 2024 12:44:04 +0100

Поздрав, Друже! Надам се да ћеш решити проблем. Независно од тога, има нас који те памтимо. Да си нам жив и здрав и свраћај чешће.

Re: Virus ransomware

nobody@mycity.rs (helen1) — Thu, 18 Jul 2024 09:54:30 +0100

Zdravo,

najverovatnije ne mozes da povratis podatke. I najbolje bi bilo da reinstaliras sistem.

Mozes da probas sa nekim antivirusnim programom, ali pretpostavljam da to nece mnogo pomoci.

Re: Problem iskacuceg prozora emptystandbylist

nobody@mycity.rs (cilitis) — Sun, 25 Feb 2024 10:49:32 +0100

Hvala puno..

Prevera sistema

nobody@mycity.rs (comi79) — Sat, 24 Feb 2024 11:48:10 +0100

Postovani,
iskreno nemam neke posebne probleme osim sto mi se komp mnogo usporio. Star je ali mi je bitan zbog podataka i nije mi pogodna reinstalacija pa zelim da proverim da li je sve ok. Hvala na izdvojenom vremenu

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23.02.2024
Ran by Mica (administrator) on MICA-PC (ASUS All Series) (24-02-2024 11:41:28)
Running from C:\Users\Mica\Desktop\FRST64.exe
Loaded Profiles: Mica
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe
(Beijing Qihu Technology Co., Ltd. -> Qihoo 360 Technology Co. Ltd.) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
(C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe ->) (QIHU 360 SOFTWARE CO. LIMITED -> QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
(C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Service.exe ->) (Electronics for Imaging, Inc.) [File not signed] C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Server.exe
(C:\Program Files (x86)\GlassWire\GWCtlSrv.exe ->) (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GWIdlMon.exe
(C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe ->) (Byte Technologies LLC -> Byte Technologies LLC.) C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe
(C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(explorer.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(explorer.exe ->) (EIZO Corporation -> EIZO Corporation) C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD (DDCCI)\LcdctrlDdcci.exe
(explorer.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 7720 series\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (London Jamocha Community CIC -> AdoptOpenJDK) C:\Program Files (x86)\XDM\java-runtime\bin\javaw.exe
(explorer.exe ->) (NetSeT Global Solutions d.o.o.) [File not signed] C:\Program Files\NetSeT\TrustEdgeID\TokenUtil.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 7720 series\Bin\HPNetworkCommunicatorCom.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Common Files\Global Graphics Software\Harlequin License Server\bin\hqn_lsd.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(services.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe <3>
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(services.exe ->) (Beijing Qihu Technology Co., Ltd. -> Qihoo 360 Technology Co. Ltd.) C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
(services.exe ->) (Byte Technologies LLC -> Byte Technologies LLC.) C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe
(services.exe ->) (Electronics for Imaging, Inc.) [File not signed] C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Service.exe
(services.exe ->) (Flexera Software LLC -> Flexera Software LLC) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
(WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-09-11] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [754416 2018-11-23] (Acronis International GmbH -> )
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [1767712 2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1811456 2019-01-29] (Beijing Qihu Technology Co., Ltd. -> Qihoo 360 Technology Co. Ltd.)
HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21384 2016-04-15] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4785640 2018-11-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446256 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Run: [XDM] => "C:\Program Files (x86)\XDM\java-runtime\bin\javaw.exe" -Xmx1024m -jar "C:\Program Files (x86)\XDM\xdman.jar" -m [1821653 2020-03-18] () [File not signed] [File is in use]
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Run: [HP OfficeJet Pro 7720 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 7720 series\Bin\ScanToPCActivationApp.exe [4066464 2021-11-21] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (No File)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run (No File)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_238_Plugin.exe [1457208 2019-08-26] (Adobe Inc. -> Adobe)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-18\...\Run: [] => [X]
HKLM\...\Windows x64\Print Processors\KOAYQJ_P: C:\Windows\System32\spool\prtprocs\x64\KOAYQJ_P.DLL [83968 2012-08-09] (Monotype Imaging Inc.) [File not signed]
HKLM\...\Windows x64\Print Processors\KOAYTJ_P: C:\Windows\System32\spool\prtprocs\x64\KOAYTJ_P.dll [92680 2016-08-24] (Microsoft Windows Hardware Compatibility Publisher -> Monotype Imaging Inc.)
HKLM\...\Windows x64\Print Processors\TSKPPR: C:\Windows\System32\spool\prtprocs\x64\TSKppr.dll [92160 2015-09-11] (Monotype Imaging Inc.) [File not signed]
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [54944 2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\C360iSeriesPCL Language Monitor: C:\Windows\system32\KOAXGJ_L.dll [25704 2022-10-28] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Print\Monitors\C364SeriesPCL Language Monitor: C:\Windows\system32\KOAYTJ_L.DLL [25600 2016-08-24] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Print\Monitors\Gprinter Language Monitor: C:\Windows\system32\GprinterLM.dll [865560 2018-07-09] (Euro Plus d.o.o. -> NiceLabel)
HKLM\...\Print\Monitors\HP 1754 Status Monitor: C:\Windows\system32\hpinksts1754LM.dll [476296 2017-02-17] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\HP 6012 Status Monitor: C:\Windows\system32\hpinksts6012LM.dll [331664 2012-08-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP 612a Status Monitor: C:\Windows\system32\hpinksts612aLM.dll [468576 2018-08-01] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet 7110 series): C:\Windows\system32\HPDiscoPM6012.dll [751720 2012-10-21] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP OfficeJet Pro 7720 series): C:\Windows\system32\HPDiscoPM1754.dll [987808 2021-11-21] (HP Inc. -> HP Inc.)
HKLM\...\Print\Monitors\Language monitor: C:\Windows\system32\TSKMON.DLL [60928 2015-09-11] (Monotype Imaging Inc.) [File not signed]
HKLM\...\Print\Monitors\Xerox Phaser 6020 Language Monitor: xcthp1mlm.dll (No File)
HKLM\Software\...\AppCompatFlags\Custom\SBNT.EXE: [{af6131fc-32da-45ea-a1e7-fe634f8f2722}.sdb] -> SignBlazer5.5 XP buttons
HKLM\Software\...\AppCompatFlags\Custom\SBNTDEMO.EXE: [{af6131fc-32da-45ea-a1e7-fe634f8f2722}.sdb] -> SignBlazer5.5 XP buttons
HKLM\Software\...\AppCompatFlags\Custom\SBPRNT32.EXE: [{af6131fc-32da-45ea-a1e7-fe634f8f2722}.sdb] -> SignBlazer5.5 XP buttons
HKLM\Software\...\AppCompatFlags\InstalledSDB\{af6131fc-32da-45ea-a1e7-fe634f8f2722}: [DatabasePath] -> C:\Windows\AppPatch\Custom\{af6131fc-32da-45ea-a1e7-fe634f8f2722}.sdb [2003-02-27]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\109.0.5414.120\Installer\chrmstp.exe [2023-01-27] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\EFI ES-1000.lnk [2016-05-06]
ShortcutTarget: EFI ES-1000.lnk -> C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Notifier.exe (Electronics for Imaging, Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ScreenManager Pro for LCD (DDCCI) Ver.2.4.0.lnk [2016-06-17]
ShortcutTarget: ScreenManager Pro for LCD (DDCCI) Ver.2.4.0.lnk -> C:\Windows\Installer\{DAB265AD-27B2-4651-B8D8-F4F3A8ECC705}\LcdctrlDdcci.exe1_A2457035AC9A449AAFF91D310EF3707A.exe (Macrovision Corporation) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Token Manager.lnk [2017-05-16]
ShortcutTarget: Token Manager.lnk -> C:\Program Files\NetSeT\TrustEdgeID\TokenUtil.exe (NetSeT Global Solutions d.o.o.) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {60921CB9-0473-4843-99BE-D8949AF1C4FF} - System32\Tasks\{0C240FFE-C0CA-48EB-99FF-5C0EBB24F0E1} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Users\Mica\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3V1C4A62\jre-8u171-windows-i586.exe" -d C:\Users\Mica\Desktop
Task: {B0CE69C6-145F-43E6-BEA2-19761F69BB4D} - System32\Tasks\{2CD10DFC-5478-4499-97DD-5E0F52BDF564} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Windows\IsUn0804.exe -c -fc:\artcut6\Uninst.isu
Task: {38244428-4E95-4943-BBC6-C4D5289760E6} - System32\Tasks\{850AE461-75A6-4DF6-A282-734BAE5DEE62} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a D:\SETUP.EXE -d D:\
Task: {5C482B66-7BE6-44E6-9C3C-12E2D089E585} - System32\Tasks\{953B3F22-F752-4325-9A99-6212AFF1A8AD} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files (x86)\FormatFactory\FFInst.exe" -d "C:\Program Files (x86)\FormatFactory"
Task: {468D0E97-9CFC-474D-BF15-444AB9A5FE99} - System32\Tasks\{BFAC24D1-978D-4781-BEC4-85748A9CF9FC} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Users\Mica\Downloads\jre-8u171-windows-i586 (1).exe" -d C:\Users\Mica\Desktop
Task: {F829DFB0-AF36-4C01-899B-404E72840DE8} - System32\Tasks\{C6A5A6B2-12F3-4D25-9204-83A727667756} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "E:\Install\DC12_phaser 6120\32_64bitw2kps.exe" -d "E:\Install\DC12_phaser 6120"
Task: {75C051A0-937D-42BF-A5EF-D6AEAFD853C4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-14] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {B9FDD1A9-0E87-4DB4-BF0D-D81FD4F2BB79} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_238_Plugin.exe [1457208 2019-08-26] (Adobe Inc. -> Adobe)
Task: {15398DC3-F355-411D-B519-BCEE3E8EDE3F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-08-26] (Adobe Inc. -> Adobe)
Task: {3181D890-84A3-4B5C-846E-09948FA58BD8} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {C844D85F-FE6D-427C-A796-50605B0152DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-28] (Google LLC -> Google LLC)
Task: {3E09E84F-9EFE-4292-8758-89A7393DA3BF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-28] (Google LLC -> Google LLC)
Task: {020DEFF5-B416-48F7-A849-066DF4343159} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe scan upload mininterval:2880 (No File)
Task: {BFF45F5C-A3EA-4509-9062-C8CFC16D9007} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe scan upload (No File)
Task: {8DD2B2A0-4464-46DE-979F-2BA4897DDE83} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [686496 2024-02-21] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [152864 2010-05-18] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [193824 2010-05-18] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{B2D25A6E-D396-47B4-A925-63C09AEF5C55}: [NameServer] 1.1.1.1,1.0.0.1
HKLM\System\...\Parameters\PersistentRoutes: [0.0.0.0,0.0.0.0,192.168.1.1,-1]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION

FireFox:
========
FF DefaultProfile: uvuyfm1z.default-1604042653134
FF ProfilePath: C:\Users\Mica\AppData\Roaming\Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134 [2024-02-24]
FF DownloadDir: L:\Downloads Firefox
FF Homepage: Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134 -> [Link mogu videti samo ulogovani korisnici]|hxxps://mail.google.com/mail/u/0/#inbox
FF NewTab: Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134 -> [Link mogu videti samo ulogovani korisnici]
FF Notifications: Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134 -> [Link mogu videti samo ulogovani korisnici]
FF Extension: (Show/Hide passwords) - C:\Users\Mica\AppData\Roaming\Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134\Extensions\shpassword@shpassword.fr.xpi [2020-11-30]
FF Extension: (Y2mate.com - YouTube Converter & Downloader) - C:\Users\Mica\AppData\Roaming\Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134\Extensions\{8f4bbf79-5514-4d04-a901-d5fabfe91d73}.xpi [2022-10-28]
FF Extension: (EasyLoad) - C:\Users\Mica\AppData\Roaming\Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134\Extensions\{c6485c3a-2ca8-4751-9fc3-c9a852173c83}.xpi [2020-10-30]
FF HKLM-x32\...\Firefox\Extensions: [WebProtection@360safe.com] - C:\Program Files (x86)\360\Total Security\safemon\webprotection_firefox
FF Extension: (360 Internet Protection) - C:\Program Files (x86)\360\Total Security\safemon\webprotection_firefox [2016-07-15] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2016-03-26] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_238.dll [2019-08-26] (Adobe Inc. -> )
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_238.dll [2019-08-26] (Adobe Inc. -> )
FF Plugin-x32: @DVR/npmedia,version=33.2.0.4 -> C:\Program Files (x86)\webrec\WEB30\DVR32\33.2.0.4\npmedia.dll [2016-09-27] (Zhejiang Dahua Technology CO.,LTD. -> ) [File not signed]
FF Plugin-x32: @DVR/npTimeGrid,version=33.2.0.4 -> C:\Program Files (x86)\webrec\WEB30\DVR32\33.2.0.4\npTimeGrid.dll [2016-09-27] (Zhejiang Dahua Technology CO.,LTD. -> Unauthorized copy) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2021-07-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2021-07-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [No File]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @NVR/npmedia4.1.63.0,version=4.1.63.0 -> C:\Program Files (x86)\webrec\Torch\4.1.63.0\npmedia.dll [2019-01-17] (Zhejiang Dahua Technology CO.,LTD. -> )
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2016-02-26] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: JFGuide -> C:\Program Files (x86)\NetSurveillance\CMS\npGuide.dll [2018-12-26] () [File not signed]
FF Plugin-x32: JFWeb -> C:\Program Files (x86)\NetSurveillance\CMS\npWebPlugin.dll [2018-12-26] () [File not signed]

Chrome:
=======
CHR Profile: C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default [2024-02-24]
CHR Extension: (MEGA) - C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2024-02-24]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-02-24]
CHR Extension: (Google Docs Offline) - C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-28]
CHR HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd]
CHR HKLM-x32\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [4380176 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1157592 2018-11-23] (Acronis International GmbH -> )
S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128 2015-12-14] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-08-26] (Adobe Inc. -> Adobe)
S3 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6299944 2019-02-07] (Acronis International GmbH -> )
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3910472 2024-02-14] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-09-07] (Apple Inc. -> Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-06-18] (ASUSTeK Computer Inc. -> )
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-06-18] (ASUSTeK Computer Inc. -> ) [File not signed]
R2 EFI ES1000; C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Service.exe [11776 2009-10-19] (Electronics for Imaging, Inc.) [File not signed]
R2 GlassWire; C:\Program Files (x86)\GlassWire\GWCtlSrv.exe [8924672 2016-02-05] (GlassWire -> SecureMix LLC)
R2 HarlequinLicenceServer; C:\Program Files (x86)\Common Files\Global Graphics Software\Harlequin License Server\bin\hqn_lsd.exe [494656 2011-07-19] () [File not signed]
S2 hasplms; C:\Windows\system32\hasplms.exe [1757696 2007-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Aladdin Knowledge Systems Ltd.)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1765160 2018-11-23] (Acronis International GmbH -> )
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [937472 2019-01-29] (Beijing Qihu Technology Co., Ltd. -> Qihoo 360 Technology Co. Ltd.)
R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [297288 2018-04-11] (Byte Technologies LLC -> Byte Technologies LLC.) <==== ATTENTION
S3 ss_conn_launcher_service; C:\Windows\system32\Samsung\EasySetup\ss_conn_launcher.exe [182328 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-05-13] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-05-13] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7128176 2018-11-23] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [6926040 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
S3 uSHAREitSvc; C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.Service.exe [33224 2016-04-22] (SHAREit Technologies Co.Ltd -> SHAREit Technologies Co.Ltd)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [183416 2017-12-01] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [86248 2019-01-29] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R3 360AvFlt; C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys [86248 2019-01-29] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [332384 2019-01-29] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [49088 2017-04-21] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [454208 2019-01-29] (Beijing Qihu Technology Co., Ltd. -> 360.cn)
R1 360netmon; C:\Windows\System32\DRIVERS\360netmon.sys [87672 2018-01-25] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
S3 A38CCID; C:\Windows\System32\DRIVERS\a38ccid.sys [81264 2018-06-22] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Card Systems Ltd.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-06-18] (ASUSTeK Computer Inc. -> )
S1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [202304 2019-01-29] (Beijing Qihu Technology Co., Ltd. -> 360.cn)
R2 file_protector; C:\Windows\System32\DRIVERS\file_protector.sys [667144 2019-02-07] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [390592 2019-02-07] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\Windows\System32\DRIVERS\fltsrv.sys [182832 2019-02-07] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 GemCCID; C:\Windows\System32\DRIVERS\GemCCID.sys [137712 2016-10-17] (Microsoft Windows Hardware Compatibility Publisher -> Gemalto)
R1 gwdrv; C:\Windows\System32\DRIVERS\gwdrv.sys [33248 2015-05-29] (GlassWire -> SecureMix LLC)
R3 iKeyEnum; C:\Windows\System32\DRIVERS\ikeyenum.sys [16160 2011-07-06] (SafeNet, Inc. -> SafeNet, Inc.)
R3 iKeyIFD; C:\Windows\System32\DRIVERS\ikeyifd.sys [22304 2011-07-06] (SafeNet, Inc. -> SafeNet, Inc.)
R2 multikey; C:\Windows\System32\DRIVERS\multikey.sys [67584 2015-07-21] (Chingachguk & Denger2k (Elite & SP edition)) [File not signed]
U5 RnbToken; C:\Windows\System32\Drivers\RnbToken.sys [24352 2011-07-06] (SafeNet, Inc. -> SafeNet, Inc.)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [29392 2018-11-06] () [File not signed]
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc. -> SafeNet, Inc.)
R3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [63528 2011-05-27] (SafeNet, Inc. -> SafeNet, Inc.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\Windows\System32\Drivers\ss_conn_usb_driver2.sys [43368 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 tib; C:\Windows\System32\DRIVERS\tib.sys [885880 2019-02-07] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [173536 2019-02-07] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [693768 2019-02-07] (Acronis International GmbH -> Acronis International GmbH)
S3 TodosAgmII; C:\Windows\System32\Drivers\AgmIIusb.sys [25088 2007-01-22] (Microsoft Windows Hardware Compatibility Publisher -> Todos Data System AB)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2017-09-07] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331976 2019-02-07] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\Windows\System32\DRIVERS\volume_tracker.sys [243472 2019-02-07] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-02-24 11:41 - 2024-02-24 11:43 - 000034833 _____ C:\Users\Mica\Desktop\FRST.txt
2024-02-24 11:41 - 2024-02-24 11:42 - 000000000 ____D C:\FRST
2024-02-24 11:33 - 2024-02-24 11:33 - 000000542 __RSH C:\ProgramData\ntuser.pol
2024-02-24 11:24 - 2024-02-24 11:24 - 002386944 _____ (Farbar) C:\Users\Mica\Desktop\FRST64.exe
2024-02-21 06:59 - 2024-02-23 06:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2024-02-13 07:58 - 2024-02-13 07:58 - 000249856 _____ C:\Users\Mica\Downloads\RC1TP-02UA.xls

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2024-02-24 11:29 - 2020-04-20 11:26 - 000000000 ____D C:\Users\Mica\AppData\Local\CrashDumps
2024-02-24 11:29 - 2015-09-11 10:44 - 000000000 ____D C:\Users\Mica\AppData\Local\ElevatedDiagnostics
2024-02-24 11:29 - 2009-07-14 05:45 - 000030112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2024-02-24 11:29 - 2009-07-14 05:45 - 000030112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2024-02-24 11:07 - 2021-10-28 08:22 - 000000000 ____D C:\Program Files (x86)\Google
2024-02-24 11:03 - 2015-09-09 07:57 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2024-02-24 10:52 - 2015-09-05 13:32 - 000000000 ____D C:\Users\Mica\AppData\Roaming\360Safe
2024-02-24 10:51 - 2015-09-05 13:32 - 000000000 ____D C:\Users\Mica\AppData\LocalLow\360WD
2024-02-24 10:33 - 2019-10-03 13:07 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2024-02-24 10:13 - 2020-04-10 14:49 - 000000000 ____D C:\ProgramData\NVIDIA
2024-02-24 10:13 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-02-23 15:31 - 2022-03-09 13:47 - 000043272 _____ C:\Users\Mica\Desktop\STAMPA KOD DARKA.xlsx
2024-02-23 15:31 - 2015-09-09 11:17 - 000000000 ____D C:\Users\Mica\AppData\Roaming\Microsoft\Excel
2024-02-23 06:41 - 2015-09-11 07:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-02-19 13:40 - 2019-07-23 11:33 - 000000000 ____D C:\Users\Mica\Documents\ViberDownloads
2024-02-19 07:47 - 2015-09-05 13:32 - 000000000 ____D C:\ProgramData\360safe
2024-02-14 15:54 - 2015-09-09 14:57 - 000000000 ____D C:\Windows\system32\MRT
2024-02-14 15:48 - 2015-07-18 23:46 - 191155960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-02-14 15:40 - 2020-07-15 13:46 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2024-02-13 12:11 - 2020-12-12 14:40 - 000000000 ____D C:\Users\Public\SmartPSS
2024-02-05 12:05 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2024-01-31 07:02 - 2021-10-28 08:22 - 000003628 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2024-01-31 07:02 - 2021-10-28 08:22 - 000003500 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2024-01-30 07:04 - 2019-07-23 11:32 - 000000000 ____D C:\Users\Mica\AppData\Roaming\ViberPC

==================== Files in the root of some directories ========

2017-02-25 12:42 - 2017-02-25 12:42 - 000087552 _____ (IAIK) C:\Users\Mica\pkcs11wrapper_32.dll
2021-01-25 17:52 - 2021-01-25 17:52 - 018731062 _____ () C:\Users\Mica\SPOPR Scan_Monday, January 25, 2021 17_52_58.DAT
2015-09-05 14:00 - 2015-09-05 14:01 - 063831744 _____ () C:\Users\Mica\WDMyCloud_win.exe
2019-03-15 15:58 - 2019-03-15 15:58 - 000000132 _____ () C:\Users\Mica\AppData\Roaming\Adobe IllExport Filter CS6 Prefs
2015-12-26 13:49 - 2015-12-26 14:49 - 000022046 _____ () C:\Users\Mica\AppData\Roaming\Comma Separated Values (Windows).ADR
2015-11-17 15:00 - 2017-02-13 09:52 - 000006569 _____ () C:\Users\Mica\AppData\Roaming\Comma Separated Values (Windows).EML
2015-12-26 11:43 - 2017-02-13 09:52 - 000006210 _____ () C:\Users\Mica\AppData\Roaming\Microsoft Excel 97-2003.EML
2017-02-23 21:42 - 2017-02-23 21:42 - 000001456 _____ () C:\Users\Mica\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-09-21 11:25 - 2017-07-26 11:17 - 000004096 ____H () C:\Users\Mica\AppData\Local\keyfile3.drm
2018-09-28 07:01 - 2018-09-28 07:01 - 000000000 _____ () C:\Users\Mica\AppData\Local\oobelibMkey.log
2017-08-12 09:01 - 2017-09-09 10:42 - 000007596 _____ () C:\Users\Mica\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

LastRegBack: 2024-02-19 07:51
==================== End of FRST.txt ========================
[Link mogu videti samo ulogovani korisnici]

Dupli nalog na facebooku

nobody@mycity.rs (marko peji�) — Sat, 24 Feb 2024 09:50:49 +0100

Pojavio mi se sino� dupli nalog sa istim imenom i prezimenom , email adresama (2) na igri ultimate preferans , i sada ne mogu u�i na prvi nalog na koji i igram ve� mi se stalno pojavljuje drugi sa nulom ... Kad ho�u da ga obri�em bri�u se oba ... FB ne bi dozvolio da otvorim drugi nalog sa istim emailn adresama . �ta uraditi , pomozite ako mo�ete ? Zahvaljujem unapred .

Re: Service Host visoko zauzece

nobody@mycity.rs (helen1) — Tue, 20 Feb 2024 07:04:14 +0100

Zdravo,

Sve deluje u redu.

Re: Facebook problem

nobody@mycity.rs (Mikulino) — Mon, 05 Feb 2024 19:01:51 +0100

Otvori temu u op�tem delu foruma da ovde ne bi spamovali
za po�etak probaj preko Facebook
da vrati� nalog ako ve� nisi