MyCity » Ambulanta -> Arhiva Ambulante » Internet koči

Internet koči

Napisano na dan: 24.8.2012

Internet koči

Sledeća strana

Pagination

Odgovori

wendy.mrs Poslao: 24 Avg 2012 17:16 Idi na vrh
offline wendy.mrs Građanin Pridružio: 29 Avg 2007 Poruke: 50 Gde živiš: vojvodina	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Pozdrav super timu, evo po drugi put vam se obraćam za pomoć. Prvi put je bio u pitanju HI virus i drugi lap-top a sada opet nešto novo. Kada sam dobila ovaj lap-top, proletos čini mi se, danima sam sedela instalirala sve i svašta, brisala, uređivala, istraživala i napokon sam nešto zaj..... U pitanju je Asus K53 E, imam 64-bitni win7 profesional i ADSL 4096/512 kb/s. Sada mi se prilikom podizanja sistema uvek pojavi ikona ( priložila sam sliku ) koja ne znam šta znači. No to mi do sada nije smetalo, jer nije ni bilo drugih problema, ali mi ni ne znam od kada internet jako koči. Kliknem i čekam, po 5, 10, 15 sekundi da mi se neka strana otvori. Ne znam jesu li te dve stvari povezane ili ne, ali sam svašta pokušavala do sada. Instalirala sam Advanced System Care 5 ; CCleaner; defragmentovala, brisala, čistila i ništa. Ikonica se i dalje pojavljuje, internet i dalje koči. Nigde mi se nije pojavilo prisustvo nekog virusa, uvek je sve OK . OTL logfile created on: 24.8.2012 17:00:45 - Run 1 OTL by OldTimer - Version 3.2.58.1 Folder = C:\Users\Vanda\Desktop 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 0000241A \| Country: Serbia \| Language: SRM \| Date Format: d.M.yyyy 3,78 Gb Total Physical Memory \| 1,79 Gb Available Physical Memory \| 47,21% Memory free 4,03 Gb Paging File \| 1,64 Gb Available in Paging File \| 40,68% Paging File free Paging file location(s): c:\pagefile.sys 256 512 %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 156,15 Gb Total Space \| 110,33 Gb Free Space \| 70,66% Space Free \| Partition Type: NTFS Drive D: \| 309,51 Gb Total Space \| 254,12 Gb Free Space \| 82,10% Space Free \| Partition Type: NTFS Computer Name: VANDA-PC \| User Name: Vanda \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.08.24 17:00:21 \| 000,596,480 \| ---- \| M] (OldTimer Tools) -- C:\Users\Vanda\Desktop\OTL.exe PRC - [2012.08.23 21:02:59 \| 000,296,096 \| ---- \| M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe PRC - [2012.08.21 11:12:26 \| 004,282,728 \| ---- \| M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2012.08.21 11:12:25 \| 000,044,808 \| ---- \| M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012.08.02 15:55:51 \| 000,800,656 \| ---- \| M] (Opera Software) -- C:\Program Files (x86)\Opera\pluginwrapper\opera_plugin_wrapper.exe PRC - [2012.08.02 15:55:50 \| 000,874,896 \| ---- \| M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2012.07.27 22:51:26 \| 000,063,960 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012.07.20 15:17:14 \| 012,218,904 \| ---- \| M] (Google) -- C:\PROGRAM FILES (X86)\GOOGLE\DRIVE\GOOGLEDRIVESYNC.EXE PRC - [2012.07.05 18:41:46 \| 003,048,136 \| ---- \| M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2012.07.03 03:21:38 \| 026,868,192 \| ---- \| M] (Dropbox, Inc.) -- C:\Users\Vanda\AppData\Roaming\Dropbox\bin\Dropbox.exe PRC - [2012.06.06 21:33:42 \| 001,564,872 \| ---- \| M] (Ask) -- C:\PROGRAM FILES (X86)\ASK.COM\UPDATER\UPDATER.EXE PRC - [2012.05.31 15:00:22 \| 000,445,624 \| ---- \| M] (Sony) -- C:\PROGRAM FILES (X86)\SONY\SONY PC COMPANION\PCCOMPANION.EXE PRC - [2012.05.28 15:56:36 \| 000,288,128 \| ---- \| M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe PRC - [2012.05.26 12:04:52 \| 000,913,792 \| ---- \| M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe PRC - [2012.04.30 11:57:42 \| 000,067,072 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe PRC - [2012.03.28 16:03:16 \| 016,957,056 \| ---- \| M] (Winstep Software Technologies) -- D:\Instalacije\Winstep\Nexus.exe PRC - [2012.01.17 21:18:44 \| 000,232,616 \| ---- \| M] (Visicom Media Inc. (Powered by Panda Security)) -- C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe PRC - [2011.11.29 17:50:40 \| 000,182,576 \| ---- \| M] (Blabbers Communications LTD) -- C:\Program Files (x86)\BrowserCompanion\BCHelper.exe PRC - [2011.09.28 05:08:40 \| 000,745,880 \| ---- \| M] (Spigot, Inc.) -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe PRC - [2011.03.30 23:42:34 \| 001,001,808 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe PRC - [2011.03.30 23:42:32 \| 001,321,296 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe PRC - [2011.03.30 23:42:30 \| 000,923,984 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe PRC - [2011.03.30 23:42:28 \| 000,985,424 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\BTPlayerCtrl.exe PRC - [2011.02.12 04:26:22 \| 000,377,344 \| ---- \| M] (Winstep Software Technologies) -- D:\Instalacije\Winstep\WsxService.exe PRC - [2010.02.02 09:53:44 \| 007,418,368 \| ---- \| M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin PRC - [2010.02.02 09:53:42 \| 007,424,000 \| ---- \| M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe PRC - [2010.01.21 14:22:04 \| 000,909,824 \| ---- \| M] (Sonix Technology Co., Ltd.) -- C:\Windows\vsnp2uvc.exe PRC - [2007.02.04 13:02:14 \| 000,079,400 \| ---- \| M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe ========== Modules (No Company Name) ========== MOD - [2012.08.24 15:22:46 \| 000,571,392 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\pysqlite2._sqlite.pyd MOD - [2012.08.24 15:22:46 \| 000,263,168 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\win32com.shell.shell.pyd MOD - [2012.08.24 15:22:46 \| 000,096,256 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\win32api.pyd MOD - [2012.08.24 15:22:46 \| 000,086,016 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\_elementtree.pyd MOD - [2012.08.24 15:22:46 \| 000,040,448 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\_socket.pyd MOD - [2012.08.24 15:22:45 \| 001,018,368 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\windows._cacheinvalidation.pyd MOD - [2012.08.24 15:22:45 \| 000,792,576 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\wx._gdi_.pyd MOD - [2012.08.24 15:22:45 \| 000,731,136 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\wx._misc_.pyd MOD - [2012.08.24 15:22:45 \| 000,354,304 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\pythoncom26.dll MOD - [2012.08.24 15:22:45 \| 000,153,088 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\pyexpat.pyd MOD - [2012.08.24 15:22:45 \| 000,073,728 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\_ctypes.pyd MOD - [2012.08.24 15:22:45 \| 000,070,656 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\wx._html2.pyd MOD - [2012.08.24 15:22:45 \| 000,011,776 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\win32crypt.pyd MOD - [2012.08.24 15:22:44 \| 001,169,408 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\wx._core_.pyd MOD - [2012.08.24 15:22:44 \| 001,056,256 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\wx._controls_.pyd MOD - [2012.08.24 15:22:44 \| 000,807,424 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\wx._windows_.pyd MOD - [2012.08.24 15:22:44 \| 000,645,120 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\_ssl.pyd MOD - [2012.08.24 15:22:44 \| 000,311,808 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\_hashlib.pyd MOD - [2012.08.24 15:22:44 \| 000,121,856 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\wx._wizard.pyd MOD - [2012.08.24 15:22:44 \| 000,111,104 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\win32file.pyd MOD - [2012.08.24 15:22:44 \| 000,110,592 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\pywintypes26.dll MOD - [2012.08.24 15:22:44 \| 000,039,424 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\win32inet.pyd MOD - [2012.08.24 15:22:44 \| 000,036,352 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\win32process.pyd MOD - [2012.08.24 15:22:44 \| 000,022,528 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\win32pdh.pyd MOD - [2012.08.24 15:22:43 \| 000,585,728 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\unicodedata.pyd MOD - [2012.08.24 15:22:43 \| 000,017,920 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\win32event.pyd MOD - [2012.08.24 15:22:43 \| 000,011,776 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI33842\select.pyd MOD - [2012.08.23 20:59:49 \| 009,813,704 \| ---- \| M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll MOD - [2012.08.02 15:55:55 \| 000,783,360 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll MOD - [2012.08.02 15:55:55 \| 000,316,928 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll MOD - [2012.08.02 15:55:55 \| 000,276,480 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll MOD - [2012.08.02 15:55:55 \| 000,168,448 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll MOD - [2012.08.02 15:55:55 \| 000,099,840 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll MOD - [2012.08.02 15:55:55 \| 000,098,816 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll MOD - [2012.08.02 15:55:55 \| 000,098,816 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll MOD - [2012.08.02 15:55:55 \| 000,078,336 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll MOD - [2012.08.02 15:55:55 \| 000,076,800 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll MOD - [2012.08.02 15:55:55 \| 000,068,608 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll MOD - [2012.08.02 15:55:55 \| 000,064,000 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll MOD - [2012.08.02 15:55:55 \| 000,046,592 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll MOD - [2012.08.02 15:55:55 \| 000,045,568 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gsttypefindfunctions.dll MOD - [2012.07.17 10:56:14 \| 000,587,776 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll MOD - [2012.05.24 11:50:32 \| 000,203,776 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll MOD - [2012.04.30 11:57:42 \| 000,067,072 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe MOD - [2012.04.30 11:57:42 \| 000,039,936 \| ---- \| M] () -- C:\PROGRAM FILES (X86)\SONY\SONY PC COMPANION\TMonitorAPI.dll MOD - [2012.02.22 08:41:36 \| 001,085,376 \| ---- \| M] () -- D:\Instalacije\Winstep\wodTelnetDLX.dll MOD - [2011.11.01 19:32:48 \| 000,573,100 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll MOD - [2011.10.06 20:05:18 \| 000,970,752 \| ---- \| M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll MOD - [2011.08.07 13:54:44 \| 000,362,029 \| ---- \| M] () -- C:\Program Files (x86)\BrowserCompanion\sqlite3.dll MOD - [2011.07.07 14:54:36 \| 000,233,984 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll MOD - [2011.06.24 22:56:36 \| 000,087,328 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2011.06.24 22:56:14 \| 001,241,888 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2010.01.11 16:44:54 \| 000,053,248 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - File not found [Disabled \| Unknown] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall) SRV:64bit: - [2012.08.21 11:12:25 \| 000,044,808 \| ---- \| M] (AVAST Software) [Auto \| Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:64bit: - [2012.02.08 23:00:12 \| 000,343,032 \| ---- \| M] (Nitro PDF Software) [Auto \| Running] -- C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe -- (NitroReaderDriverReadSpool2) SRV:64bit: - [2011.08.12 01:38:04 \| 000,140,672 \| ---- \| M] (SUPERAntiSpyware.com) [Auto \| Running] -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE) SRV:64bit: - [2011.03.22 02:10:26 \| 001,136,128 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3) SRV:64bit: - [2011.02.23 21:20:56 \| 000,134,928 \| ---- \| M] (Intel(R) Corporation) [Auto \| Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) SRV:64bit: - [2009.07.14 03:41:27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009.07.14 03:40:01 \| 000,193,536 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2012.08.23 21:42:13 \| 000,250,568 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012.07.27 22:51:26 \| 000,063,960 \| ---- \| M] (Adobe Systems Incorporated) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.07.05 18:41:46 \| 003,048,136 \| ---- \| M] (Skype Technologies S.A.) [Auto \| Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012.07.03 13:19:28 \| 000,160,944 \| R--- \| M] (Skype Technologies) [Auto \| Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012.05.26 12:04:52 \| 000,913,792 \| ---- \| M] (IObit) [Auto \| Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe -- (AdvancedSystemCareService5) SRV - [2012.03.19 23:44:20 \| 000,276,248 \| ---- \| M] (Intel Corporation) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2012.01.18 14:38:28 \| 000,155,320 \| ---- \| M] (Avanquest Software) [On_Demand \| Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011.09.28 05:08:40 \| 000,745,880 \| ---- \| M] (Spigot, Inc.) [Auto \| Running] -- C:\Program Files (x86)\Application Updater\ApplicationUpdater.exe -- (Application Updater) SRV - [2011.03.30 23:42:34 \| 001,001,808 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV - [2011.03.30 23:42:32 \| 001,321,296 \| ---- \| M] (Intel Corporation) [On_Demand \| Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service) SRV - [2011.03.30 23:42:30 \| 000,923,984 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor) SRV - [2011.02.12 04:26:22 \| 000,377,344 \| ---- \| M] (Winstep Software Technologies) [Auto \| Running] -- D:\Instalacije\Winstep\WsxService.exe -- (Winstep Xtreme Service) SRV - [2011.01.28 13:23:18 \| 000,073,376 \| ---- \| M] (Atheros Commnucations) [Auto \| Running] -- C:\Program Files (x86)\Bluetooth Suite\adminservice.exe -- (AtherosSvc) SRV - [2010.03.18 13:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.06.10 23:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012.08.21 11:13:13 \| 000,969,200 \| ---- \| M] (AVAST Software) [File_System \| System \| Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx) DRV:64bit: - [2012.08.21 11:13:13 \| 000,359,464 \| ---- \| M] (AVAST Software) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:64bit: - [2012.08.21 11:13:13 \| 000,059,728 \| ---- \| M] (AVAST Software) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:64bit: - [2012.08.21 11:13:12 \| 000,071,600 \| ---- \| M] (AVAST Software) [File_System \| Auto \| Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:64bit: - [2012.08.21 11:13:12 \| 000,054,072 \| ---- \| M] (AVAST Software) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:64bit: - [2012.08.21 11:13:11 \| 000,025,232 \| ---- \| M] (AVAST Software) [File_System \| Auto \| Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:64bit: - [2012.07.15 19:57:21 \| 000,027,760 \| ---- \| M] (Sony Ericsson Mobile Communications) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:64bit: - [2012.07.15 19:57:21 \| 000,014,448 \| ---- \| M] (Sony Ericsson Mobile Communications) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:64bit: - [2012.03.19 23:32:04 \| 014,745,600 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2012.03.01 08:46:16 \| 000,023,408 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2011.12.21 13:52:42 \| 000,530,488 \| ---- \| M] () [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2011.10.04 18:08:04 \| 001,439,792 \| ---- \| M] (Synaptics Incorporated) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2011.09.22 21:01:54 \| 000,311,144 \| ---- \| M] (Microsoft Corporation) [File_System \| Disabled \| Stopped] -- C:\Windows\SysNative\drivers\RsFx0105.sys -- (RsFx0105) DRV:64bit: - [2011.07.22 18:26:56 \| 000,014,928 \| ---- \| M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel \| System \| Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV) DRV:64bit: - [2011.07.12 23:55:18 \| 000,012,368 \| ---- \| M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel \| System \| Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL) DRV:64bit: - [2011.06.27 02:37:00 \| 002,753,536 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2011.04.21 02:24:56 \| 000,169,584 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:64bit: - [2011.03.22 10:04:08 \| 000,261,632 \| ---- \| M] (Windows (R) Win 7 DDK provider) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) DRV:64bit: - [2011.03.22 10:04:08 \| 000,261,632 \| ---- \| M] (Windows (R) Win 7 DDK provider) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) DRV:64bit: - [2011.03.11 08:41:12 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 08:41:12 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.03.08 23:44:08 \| 000,051,712 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux) DRV:64bit: - [2011.01.28 13:24:44 \| 000,283,296 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP) DRV:64bit: - [2011.01.28 13:24:40 \| 000,166,048 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP) DRV:64bit: - [2011.01.28 13:24:40 \| 000,036,000 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort) DRV:64bit: - [2011.01.28 13:24:38 \| 000,029,344 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS) DRV:64bit: - [2011.01.28 13:24:36 \| 000,259,232 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP) DRV:64bit: - [2011.01.28 13:24:36 \| 000,109,216 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt) DRV:64bit: - [2011.01.24 14:31:10 \| 000,283,136 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter) DRV:64bit: - [2010.11.20 15:33:35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 13:07:05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.10.20 08:34:26 \| 000,056,344 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:64bit: - [2010.10.15 09:28:16 \| 000,317,440 \| ---- \| M] (Intel(R) Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:64bit: - [2010.09.07 17:19:38 \| 001,800,832 \| ---- \| M] (Sonix Technology Co., Ltd.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) DRV:64bit: - [2009.08.19 15:41:26 \| 000,132,608 \| ---- \| M] (Huawei Technologies Co., Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ewusbnet.sys -- (ewusbnet) DRV:64bit: - [2009.08.19 15:41:26 \| 000,116,992 \| ---- \| M] (Huawei Technologies Co., Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ewusbmdm.sys -- (hwdatacard) DRV:64bit: - [2009.08.19 15:41:26 \| 000,113,792 \| ---- \| M] (Huawei Technologies Co., Ltd.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ewusbdev.sys -- (hwusbdev) DRV:64bit: - [2009.07.14 03:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 22:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.18 14:17:08 \| 000,034,152 \| ---- \| M] (GEAR Software Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV - [2011.12.22 00:58:10 \| 000,018,048 \| ---- \| M] () [Kernel \| Auto \| Stopped] -- C:\Windows\SysWOW64\drivers\lirsgt.sys -- (lirsgt) DRV - [2009.07.14 03:19:10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = start.facemoods.com/?a=kno&s={searchTerms}&f=4 IE - HKLM\..\URLSearchHook: {013a635f-e3aa-4371-b682-ece95ca974b0} - C:\Program Files (x86)\MB2\prxtbMB2.dll (Conduit Ltd.) IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKLM\..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_0.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1750559 IE - HKLM\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111008230000563&tb_oid=08-10-2011&tb_mrud=08-10-2011 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = gogle.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-rs IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F9 E9 50 CF 7F 23 CC 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = google.com/ie IE - HKCU\..\URLSearchHook: {013a635f-e3aa-4371-b682-ece95ca974b0} - C:\Program Files (x86)\MB2\prxtbMB2.dll (Conduit Ltd.) IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) IE - HKCU\..\URLSearchHook: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll (Spigot, Inc.) IE - HKCU\..\URLSearchHook: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_0.dll (Conduit Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\..\SearchScopes\{0D7562AE-8EF6-416d-A838-AB665251703A}: "URL" = start.facemoods.com/?a=kno&s={searchTerms}&f=4 IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = search.babylon.com/?q={searchTerms}&affID=111434&tt=050412_30b&babsrc=SP_ss&mntrId=8ae0feac000000000000742f6804af45 IE - HKCU\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" = blekko.com/?source=c3348dd4&tbp=rbox&am.....6AC&q={searchTerms} IE - HKCU\..\SearchScopes\{4315132B-5D69-4377-B6B3-F01B9895E74C}: "URL" = searchya.com/?chnl=dcom-100&s=1&cr=.....DtC&q={searchTerms} IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_en IE - HKCU\..\SearchScopes\{E383CA20-6512-49D4-AFA6-D70FE79131EB}: "URL" = search.yahoo.com/search?fr=chr-greentree_ie.....811&p={searchTerms} IE - HKCU\..\SearchScopes\{EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C}: "URL" = slirsredirect.search.aol.com/redirector/sredir?sredir=2685&query={searchTerms}&invocationType=tb50-ie-winamp-chromesbox-en-us&tb_uuid=20111008230000563&tb_oid=08-10-2011&tb_mrud=08-10-2011 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll ( ) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\Vanda\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google) FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\Vanda\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll () FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Vanda\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Vanda\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\crossriderapp1950@crossrider.com: C:\Users\Vanda\AppData\Local\RewardsArcadeSuite\1950\Firefox [2011.12.20 12:11:11 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.08.23 21:03:22 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.08.23 21:03:22 \| 000,000,000 \| ---D \| M] ========== Chrome ========== CHR - homepage: google.com CHR - default_search_provider: SearchYa! (Enabled) CHR - default_search_provider: search_url = searchya.com/?chnl=dcom-100&s=1&cr=.....tC$&q={searchTerms} CHR - default_search_provider: suggest_url = CHR - homepage: google.com CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\Application\21.0.1180.83\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\Application\21.0.1180.83\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: (Enabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\onklpkebbeeimgojkmaccmhmoafknihh\1.0.5_0\chromeNPAPI.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - plugin: Nitro PDF Plug-In (Enabled) = C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll CHR - Extension: TooManyTabs for Chrome = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp\1.9.2_0\ CHR - Extension: \| Facebook = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffhfepmhgkgmmomjcgakcgbpajfkpooh\2012.5.27.37040_0\ CHR - Extension: WeatherByte = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnlgbglmmkibkhhbnhegkokegdodlgfe\1.0.3_0\ CHR - Extension: AppJump App Launcher and Organizer = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\hccbinpobnjcpckmcfngmdpnbnjpmcbd\0.9.2_0\ CHR - Extension: avast! WebRep = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1466_0\ CHR - Extension: RewardsArcade Suite = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ielefkgbofdpglioecfjcbikholflklb\1.19.40_0\crossrider CHR - Extension: RewardsArcade Suite = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ielefkgbofdpglioecfjcbikholflklb\1.19.40_0\ CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\ CHR - Extension: Fiery Horse chrome Theme = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\miipddolmnknmpiednnbijmeogpdgknp\1_0\ CHR - Extension: Browser Companion Helper = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\onklpkebbeeimgojkmaccmhmoafknihh\1.0.5_1\ CHR - Extension: Auto Select All Facebook Friends = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcjiigginhdhihbdlejjoekeemjaiml\2.0_0\ O1 HOSTS File: ([2009.06.10 23:00:26 \| 000,000,824 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (Chatvibes Browser Helper) - {00cbb66b-1d3b-46d3-9577-323a336acb50} - C:\Program Files (x86)\BrowserCompanion\jsloader.dll ( ) O2 - BHO: (MB2 Toolbar) - {013a635f-e3aa-4371-b682-ece95ca974b0} - C:\Program Files (x86)\MB2\prxtbMB2.dll (Conduit Ltd.) O2 - BHO: (Updater For Spam Free Search Bar) - {20a0be68-8fd9-4539-8712-ce3d1c1fdfc6} - C:\Program Files (x86)\blekkotb\auxi\blekkoAu.dll (Visicom Media) O2 - BHO: (Ironsource LTD Helper Object) - {25927741-5E5B-4D27-8D8B-9188FE64373F} - C:\Program Files (x86)\Ironsource\searchya\1.5.13.0\bh\searchya.dll (Montera Technologeis LTD) O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) O2 - BHO: (Spam Free Search Bar) - {26c9e18c-3717-4be1-a225-04e4471f5b6e} - C:\Program Files (x86)\blekkotb\blekkoDx.dll () O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\bh\BabylonToolbar.dll (Babylon BHO) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Chatvibes Browser Helper Verifier) - {963B125B-8B21-49A2-A3A8-E37092276531} - C:\Program Files (x86)\BrowserCompanion\updatebhoWin32.dll ( ) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (RewardsArcadeSuite) - {B6EF6C45-5E8D-4c3b-B580-A5073261A381} - C:\Program Files (x86)\RewardsArcadeSuite\RewardsArcadeSuite.dll (215 Apps) O2 - BHO: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (YouTube Downloader Toolbar) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll (Spigot, Inc.) O2 - BHO: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_0.dll (Conduit Ltd.) O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O3 - HKLM\..\Toolbar: (MB2 Toolbar) - {013a635f-e3aa-4371-b682-ece95ca974b0} - C:\Program Files (x86)\MB2\prxtbMB2.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (Spam Free Search Bar) - {26c9e18c-3717-4be1-a225-04e4471f5b6e} - C:\Program Files (x86)\blekkotb\blekkoDx.dll () O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files (x86)\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.) O3 - HKLM\..\Toolbar: (SearchYa Toolbar) - {33AA308B-B565-4376-AC66-59EE9B6AD13E} - C:\Program Files (x86)\Ironsource\searchya\1.5.13.0\searchyaTlbr.dll (Montera Technologeis LTD) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files (x86)\BabylonToolbar\BabylonToolbar\1.5.3.17\BabylonToolbarTlbr.dll (Babylon Ltd.) O3 - HKLM\..\Toolbar: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) O3 - HKLM\..\Toolbar: (YouTube Downloader Toolbar) - {F3FEE66E-E034-436a-86E4-9690573BEE8A} - C:\Program Files (x86)\YouTube Downloader Toolbar\IE\4.7\youtubedownloaderToolbarIE.dll (Spigot, Inc.) O3 - HKLM\..\Toolbar: (BS Player Toolbar) - {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - C:\Program Files (x86)\BS_Player\prxtbBS_0.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (MB2 Toolbar) - {013A635F-E3AA-4371-B682-ECE95CA974B0} - C:\Program Files (x86)\MB2\prxtbMB2.dll (Conduit Ltd.) O3 - HKCU\..\Toolbar\WebBrowser: (Ask Toolbar) - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files (x86)\Ask.com\GenericAskToolbar.dll (Ask) O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Program Files (x86)\Winamp Toolbar\winamptb.dll (AOL Inc.) O3 - HKCU\..\Toolbar\WebBrowser: (BS Player Toolbar) - {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - C:\Program Files (x86)\BS_Player\prxtbBS_0.dll (Conduit Ltd.) O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [snp2uvc] c:\Windows\vsnp2uvc.exe (Sonix Technology Co., Ltd.) O4:64bit: - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated) O4 - HKLM..\Run: [] File not found O4 - HKLM..\Run: [Anti-phishing Domain Advisor] C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe (Visicom Media Inc. (Powered by Panda Security)) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [Browser companion helper] c:\program files (x86)\browsercompanion\bchelper.exe (Blabbers Communications LTD) O4 - HKLM..\Run: [OpwareSE4] C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [QuickTime Task] D:\wendy-D\Downloads\QTTask.exe (Apple Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKCU..\Run: [Advanced SystemCare 5] C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe (IObit) O4 - HKCU..\Run: [Nexus] D:\Instalacije\Winstep\Nexus.exe (Winstep Software Technologies) O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com) O4 - Startup: C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Vanda\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O4 - Startup: C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKCU\..Trusted Domains: cinemanow.com ([]http in Trusted sites) O15 - HKCU\..Trusted Domains: cinemanow.com ([]https in Trusted sites) O16 - DPF: {7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D} browsercheck.qualys.com/qbc_ax.cab (Qualys BrowserCheck) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Value error.) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.6.2) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D676D063-EB22-4B21-A96E-5BF796B602BD}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F8718E86-1675-43CA-8052-0406144DBD76}: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\base64 - No CLSID value found O18:64bit: - Protocol\Handler\chrome - No CLSID value found O18:64bit: - Protocol\Handler\prox - No CLSID value found O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\base64 {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\chrome {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\prox {5ACE96C0-C70A-4A4D-AF14-2E7B869345E1} - C:\Program Files (x86)\BrowserCompanion\tdataprotocol.dll (Blabbers Communications Ltd) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 \| 000,000,024 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{05acb269-4807-11e1-9f91-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{05acb269-4807-11e1-9f91-742f6804af45}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{05acb27b-4807-11e1-9f91-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{05acb27b-4807-11e1-9f91-742f6804af45}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{98d04765-2bca-11e1-b066-f46d04323128}\Shell - "" = AutoRun O33 - MountPoints2\{98d04765-2bca-11e1-b066-f46d04323128}\Shell\AutoRun\command - "" = F:\Install.exe O33 - MountPoints2\{d80704de-ce4c-11e1-9010-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{d80704de-ce4c-11e1-9010-742f6804af45}\Shell\AutoRun\command - "" = F:\Startme.exe O33 - MountPoints2\{d807058e-ce4c-11e1-9010-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{d807058e-ce4c-11e1-9010-742f6804af45}\Shell\AutoRun\command - "" = F:\Startme.exe O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit: - HKLM\..comfile [open] -- "%1" % O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.08.24 17:00:21 \| 000,596,480 \| ---- \| C] (OldTimer Tools) -- C:\Users\Vanda\Desktop\OTL.exe [2012.08.24 15:22:49 \| 000,000,000 \| R--D \| C] -- C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices [2012.08.23 21:40:55 \| 000,000,000 \| ---D \| C] -- C:\Users\Vanda\AppData\Roaming\qualys [2012.08.23 21:08:00 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Java [2012.08.23 21:07:36 \| 000,821,736 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2012.08.23 21:07:36 \| 000,246,760 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012.08.23 21:07:27 \| 000,095,208 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012.08.23 21:03:25 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\xing shared [2012.08.23 20:57:26 \| 001,034,216 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll [2012.08.23 20:57:26 \| 000,916,456 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2012.08.23 20:57:26 \| 000,289,768 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012.08.23 20:57:16 \| 000,189,416 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012.08.23 20:57:16 \| 000,188,904 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012.08.23 20:57:16 \| 000,108,008 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2012.08.23 20:57:03 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Java [2012.08.21 20:40:22 \| 000,000,000 \| ---D \| C] -- C:\Users\Vanda\AppData\Roaming\Mozilla [2012.08.16 16:43:28 \| 000,096,768 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012.08.16 16:43:28 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012.08.16 16:43:26 \| 000,237,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012.08.16 16:43:26 \| 000,231,936 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012.08.16 16:43:24 \| 000,248,320 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012.08.16 16:43:24 \| 000,176,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012.08.16 16:43:24 \| 000,173,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012.08.16 16:43:24 \| 000,142,848 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012.08.16 16:43:23 \| 001,494,528 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012.08.16 16:43:23 \| 001,427,968 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012.08.16 16:43:22 \| 002,312,704 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012.08.16 16:43:21 \| 000,717,824 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012.08.16 16:43:20 \| 000,816,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012.08.15 10:34:01 \| 000,503,808 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2012.08.15 10:33:56 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll [2012.08.15 10:33:56 \| 000,059,392 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll [2012.08.15 10:33:56 \| 000,041,984 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll [2012.08.15 10:33:53 \| 000,751,104 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2012.08.15 10:33:53 \| 000,492,032 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2012.08.15 10:33:53 \| 000,067,072 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\splwow64.exe [2012.08.15 10:33:52 \| 000,956,928 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2012.08.11 18:48:24 \| 000,024,960 \| ---- \| C] (IObit) -- C:\Windows\SysNative\RegistryDefragBootTime.exe [2012.08.11 13:09:20 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\IObit [2012.08.11 13:09:07 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 5 [2012.08.11 13:09:00 \| 000,000,000 \| ---D \| C] -- C:\Users\Vanda\AppData\Roaming\IObit [2012.08.11 13:08:52 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\IObit [2012.08.08 14:44:53 \| 000,073,064 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll [2012.08.08 14:44:52 \| 000,109,416 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll [2012.08.08 14:44:52 \| 000,105,832 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\SQSRVRES.DLL [2012.08.08 14:43:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Microsoft.NET [2012.08.08 14:21:32 \| 000,514,560 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll [2012.08.08 14:21:32 \| 000,366,592 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll [2012.08.07 21:21:12 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2012.08.07 21:21:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\CCleaner [2012.08.07 21:20:33 \| 003,907,920 \| ---- \| C] (Piriform Ltd) -- C:\Program Files\ccleaner - ccsetup321.exe [2012.08.03 03:19:20 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\PreEmptive Solutions [2012.08.03 03:02:02 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WCF RIA Services V1.0 SP1 [2012.08.03 03:01:37 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 4 SDK [2012.08.03 03:01:02 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\VS [2012.07.26 21:40:29 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\YTD Video Downloader [2012.07.26 21:40:23 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader [2010.09.07 18:19:54 \| 001,761,024 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\snp2uvc.sys [2010.08.02 18:21:46 \| 000,307,712 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\vsnp2uvc.dll [2010.06.07 12:47:28 \| 000,212,992 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\csnp2uvc.dll [2010.05.11 11:56:12 \| 002,401,307 \| ---- \| C] (Macrovision Corporation) -- C:\Program Files\snuninst.exe [2010.01.28 12:04:52 \| 000,028,288 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\sncduvc.sys [2010.01.27 14:35:22 \| 000,131,072 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\snp2uvc.ds [2010.01.21 15:47:12 \| 000,239,616 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\rsnp2uvc.dll [2010.01.21 15:38:10 \| 000,172,032 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\snp2TUI.dll [2010.01.21 15:22:04 \| 000,909,824 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\vsnp2uvc.exe [2009.06.08 18:18:16 \| 000,305,720 \| ---- \| C] (ASUSTek COMPUTER INC.) -- C:\Program Files\PNPINST.exe [9 C:\Windows\SysNative\.tmp files -> C:\Windows\SysNative\.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.08.24 17:00:21 \| 000,596,480 \| ---- \| M] (OldTimer Tools) -- C:\Users\Vanda\Desktop\OTL.exe [2012.08.24 16:52:00 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012.08.24 16:39:00 \| 000,000,908 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000UA.job [2012.08.24 16:10:18 \| 000,000,896 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012.08.24 15:24:31 \| 000,014,400 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.08.24 15:24:31 \| 000,014,400 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.08.24 15:22:48 \| 000,000,035 \| ---- \| M] () -- C:\ProgramData\AtherosServiceConfig.ini [2012.08.24 15:16:44 \| 000,000,892 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012.08.24 15:16:14 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012.08.24 15:16:06 \| 3046,813,696 \| -HS- \| M] () -- C:\hiberfil.sys [2012.08.23 21:42:12 \| 000,696,520 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012.08.23 21:42:12 \| 000,073,416 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012.08.23 21:07:21 \| 000,095,208 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012.08.23 21:07:17 \| 000,246,760 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012.08.23 21:07:17 \| 000,174,056 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012.08.23 21:07:17 \| 000,174,056 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012.08.23 21:07:16 \| 000,821,736 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2012.08.23 21:07:16 \| 000,746,984 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2012.08.23 21:03:35 \| 000,001,046 \| ---- \| M] () -- C:\Users\Public\Desktop\RealPlayer.lnk [2012.08.23 21:03:16 \| 000,198,864 \| ---- \| M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll [2012.08.23 21:03:05 \| 000,006,656 \| ---- \| M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5016.dll [2012.08.23 21:03:05 \| 000,005,632 \| ---- \| M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5032.dll [2012.08.23 21:03:02 \| 000,272,896 \| ---- \| M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll [2012.08.23 20:57:09 \| 000,108,008 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2012.08.23 20:57:05 \| 001,034,216 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll [2012.08.23 20:57:05 \| 000,916,456 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2012.08.23 20:57:05 \| 000,289,768 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012.08.23 20:57:05 \| 000,189,416 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012.08.23 20:57:05 \| 000,188,904 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012.08.23 20:18:21 \| 000,000,856 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000Core.job [2012.08.22 13:14:34 \| 000,000,000 \| ---- \| M] () -- C:\Windows\SysWow64\config.nt [2012.08.21 11:13:13 \| 000,969,200 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys [2012.08.21 11:13:13 \| 000,359,464 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys [2012.08.21 11:13:13 \| 000,059,728 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys [2012.08.21 11:13:12 \| 000,071,600 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2012.08.21 11:13:12 \| 000,054,072 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys [2012.08.21 11:13:11 \| 000,025,232 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys [2012.08.21 11:12:33 \| 000,041,224 \| ---- \| M] (AVAST Software) -- C:\Windows\avastSS.scr [2012.08.21 11:12:23 \| 000,227,648 \| ---- \| M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2012.08.21 11:12:02 \| 000,285,328 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe [2012.08.20 14:40:39 \| 000,000,000 \| -H-- \| M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf [2012.08.20 14:39:28 \| 000,002,102 \| ---- \| M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2012.08.16 17:12:32 \| 000,295,696 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.08.14 15:53:17 \| 000,001,049 \| ---- \| M] () -- C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2012.08.13 08:45:53 \| 000,002,228 \| ---- \| M] () -- C:\Users\Vanda\Desktop\Google Earth.lnk [2012.08.12 09:43:10 \| 000,002,413 \| ---- \| M] () -- C:\Windows\SysWow64\lgAxconfig.ini [2012.08.11 13:09:08 \| 000,001,225 \| ---- \| M] () -- C:\Users\Public\Desktop\Advanced SystemCare 5.lnk [2012.08.08 14:44:53 \| 000,799,802 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.08.08 14:44:53 \| 000,726,718 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012.08.08 14:44:53 \| 000,146,704 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012.08.07 21:21:12 \| 000,000,822 \| ---- \| M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012.08.07 21:20:33 \| 003,907,920 \| ---- \| M] (Piriform Ltd) -- C:\Program Files\ccleaner - ccsetup321.exe [2012.07.26 21:40:23 \| 000,001,050 \| ---- \| M] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk [2012.07.26 20:08:27 \| 000,000,000 \| -H-- \| M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf [9 C:\Windows\SysNative\.tmp files -> C:\Windows\SysNative\.tmp -> ] ========== Files Created - No Company Name ========== [2012.08.23 21:03:35 \| 000,001,046 \| ---- \| C] () -- C:\Users\Public\Desktop\RealPlayer.lnk [2012.08.20 14:40:39 \| 000,000,000 \| -H-- \| C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf [2012.08.14 15:53:17 \| 000,001,049 \| ---- \| C] () -- C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2012.08.13 08:45:53 \| 000,002,228 \| ---- \| C] () -- C:\Users\Vanda\Desktop\Google Earth.lnk [2012.08.12 16:31:22 \| 000,001,239 \| ---- \| C] () -- C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2012.08.11 13:09:08 \| 000,001,225 \| ---- \| C] () -- C:\Users\Public\Desktop\Advanced SystemCare 5.lnk [2012.08.07 21:21:12 \| 000,000,822 \| ---- \| C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012.07.26 21:40:23 \| 000,001,050 \| ---- \| C] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk [2012.07.26 20:08:27 \| 000,000,000 \| -H-- \| C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf [2012.06.03 11:37:11 \| 000,028,659 \| ---- \| C] () -- C:\Program Files (x86)\aca.jpg [2012.05.28 12:02:55 \| 003,854,877 \| ---- \| C] () -- C:\Program Files\Camera_Azurewave_VS010_Win7_64_Z5855133208.zip [2012.05.28 11:59:06 \| 001,674,813 \| ---- \| C] () -- C:\Program Files\Camera_Chicony_CNF_9059_Win7_64_Z061005200440.zip [2012.03.19 23:31:16 \| 000,963,912 \| ---- \| C] () -- C:\Windows\SysWow64\igkrng600.bin [2012.03.19 23:31:16 \| 000,261,208 \| ---- \| C] () -- C:\Windows\SysWow64\igfcg600m.bin [2012.03.19 23:25:58 \| 000,058,880 \| ---- \| C] () -- C:\Windows\SysWow64\igdde32.dll [2012.03.19 22:21:14 \| 013,212,672 \| ---- \| C] () -- C:\Windows\SysWow64\ig4icd32.dll [2012.02.06 21:51:32 \| 000,667,648 \| ---- \| C] () -- C:\Windows\SysWow64\FreeImage.dll [2012.01.28 16:49:07 \| 000,867,094 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011.12.28 17:31:57 \| 000,010,162 \| ---- \| C] () -- C:\Users\Vanda\AppData\Roaming\Contacts_20-d6-07-4f-98-76.pbo [2011.12.25 23:52:53 \| 000,000,035 \| ---- \| C] () -- C:\ProgramData\AtherosServiceConfig.ini [2011.12.21 14:33:42 \| 000,018,048 \| ---- \| C] () -- C:\Windows\SysWow64\drivers\lirsgt.sys [2011.12.16 19:44:38 \| 000,000,424 \| ---- \| C] () -- C:\Windows\MAXLINK.INI [2011.11.28 17:48:25 \| 000,000,069 \| ---- \| C] () -- C:\Windows\popcinfo.dat [2011.10.24 11:15:58 \| 000,053,248 \| ---- \| C] () -- C:\Windows\SysWow64\CommonDL.dll [2011.10.24 11:15:58 \| 000,002,413 \| ---- \| C] () -- C:\Windows\SysWow64\lgAxconfig.ini [2011.09.01 04:51:16 \| 000,145,804 \| ---- \| C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2011.05.06 05:30:46 \| 000,066,856 \| ---- \| C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll [2010.10.27 15:39:20 \| 000,016,362 \| ---- \| C] () -- C:\Program Files\snp2uvc.cat [2010.10.06 17:47:52 \| 000,052,257 \| ---- \| C] () -- C:\Program Files\snp2uvc.inf [2010.02.02 16:13:14 \| 000,000,175 \| ---- \| C] () -- C:\Program Files\2KSETUP.INI [2009.07.21 13:08:00 \| 000,013,021 \| ---- \| C] () -- C:\Program Files\snp2uvc.src [2006.05.19 12:56:54 \| 000,001,272 \| ---- \| C] () -- C:\Program Files\snp2dsc.ini [2006.05.19 12:39:58 \| 000,015,497 \| ---- \| C] () -- C:\Program Files\snp2uvc.ini ========== Files - Unicode (All) ========== [2012.08.24 15:22:59 \| 000,000,000 \| --SD \| M](C:\Users\Vanda\Google ????) -- C:\Users\Vanda\Google диск [2012.08.24 15:22:59 \| 000,000,000 \| --SD \| M](C:\Users\Vanda\Google ????) -- C:\Users\Vanda\Google диск [2012.07.01 22:41:22 \| 000,001,773 \| ---- \| M] ()(C:\Users\Vanda\Desktop\Google ????.lnk) -- C:\Users\Vanda\Desktop\Google диск.lnk [2012.07.01 22:41:22 \| 000,001,773 \| ---- \| C] ()(C:\Users\Vanda\Desktop\Google ????.lnk) -- C:\Users\Vanda\Desktop\Google диск.lnk [2012.06.30 14:33:29 \| 000,000,000 \| ---D \| M](C:\Users\Vanda\Desktop\???? ????????) -- C:\Users\Vanda\Desktop\Нова фасцикла [2012.06.23 15:25:21 \| 000,000,000 \| ---D \| C](C:\Users\Vanda\Desktop\???? ????????) -- C:\Users\Vanda\Desktop\Нова фасцикла (C:\Users\Vanda\Google ????) -- C:\Users\Vanda\Google диск ========== Alternate Data Streams ========== @Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:363E775E @Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:07BF512B @Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:D1B5B4F1 < End of report > mycity.rs/must-login.png

Profil

ivance95 Poslao: 24 Avg 2012 19:18 Idi na vrh
offline ivance95 AMF pripravnik Pridružio: 04 Jul 2011 Poruke: 5424	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav, wendy.mrs. Idi u Start - Control Panel - Program and Features. Deinstaliraj sledeće programe: Winamp Toolbar SoftwareUpdUtility MB2 Toolbar conduitEngine BrowserCompanion blekkotb BabylonToolbar Ask Toolbar Spigot Takođe deinstaliraj i sve programe koje ne koristiš. Nakon toga restartuj računar. Preuzmi "Xplode"-ov AdwCleaner i sacuvaj ga na Desktop Dvoklikom pokreni program i klikni na dugme [Search] . Kada program zavrsi analizu otvorice notepad sa izvestajem. Zatvori taj notepad. Klikni na dugme [Delete] i pricekaj da program zavrsi. Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu. Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem. Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl" Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt Ponovo pokreni OTL i postavi mi novi log. Ivance95 (AMF Tim)

Profil

wendy.mrs Poslao: 24 Avg 2012 21:33 Idi na vrh
offline wendy.mrs Građanin Pridružio: 29 Avg 2007 Poruke: 50 Gde živiš: vojvodina	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Ne znam jel mi se čini ili ne, ali stranice se otvaraju mnogo brže nego pre. Evo probaću poslati sve što treba, mada nisam uspela da pronađem sve što je trebalo izbrisati. Još bih usput volela da znam šta je bio problem, ustvari šta sam zbrljala, svejedno. mycity.rs/must-login.png OTL logfile created on: 24.8.2012 21:21:44 - Run 2 OTL by OldTimer - Version 3.2.58.1 Folder = C:\Users\Vanda\Desktop 64bit- Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 0000241A \| Country: Serbia \| Language: SRM \| Date Format: d.M.yyyy 3,78 Gb Total Physical Memory \| 1,99 Gb Available Physical Memory \| 52,56% Memory free 4,03 Gb Paging File \| 1,95 Gb Available in Paging File \| 48,36% Paging File free Paging file location(s): c:\pagefile.sys 256 512 %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 156,15 Gb Total Space \| 110,39 Gb Free Space \| 70,70% Space Free \| Partition Type: NTFS Drive D: \| 309,51 Gb Total Space \| 254,16 Gb Free Space \| 82,12% Space Free \| Partition Type: NTFS Computer Name: VANDA-PC \| User Name: Vanda \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.08.24 17:00:21 \| 000,596,480 \| ---- \| M] (OldTimer Tools) -- C:\Users\Vanda\Desktop\OTL.exe PRC - [2012.08.23 21:02:59 \| 000,296,096 \| ---- \| M] (RealNetworks, Inc.) -- C:\Program Files (x86)\Real\RealPlayer\Update\realsched.exe PRC - [2012.08.21 11:12:26 \| 004,282,728 \| ---- \| M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastUI.exe PRC - [2012.08.21 11:12:25 \| 000,044,808 \| ---- \| M] (AVAST Software) -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe PRC - [2012.08.02 15:55:51 \| 000,800,656 \| ---- \| M] (Opera Software) -- C:\Program Files (x86)\Opera\pluginwrapper\opera_plugin_wrapper.exe PRC - [2012.08.02 15:55:50 \| 000,874,896 \| ---- \| M] (Opera Software) -- C:\Program Files (x86)\Opera\opera.exe PRC - [2012.07.27 22:51:26 \| 000,063,960 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe PRC - [2012.07.20 15:17:14 \| 012,218,904 \| ---- \| M] (Google) -- C:\Program Files (x86)\Google\Drive\googledrivesync.exe PRC - [2012.07.05 18:41:46 \| 003,048,136 \| ---- \| M] (Skype Technologies S.A.) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe PRC - [2012.07.03 03:21:38 \| 026,868,192 \| ---- \| M] (Dropbox, Inc.) -- C:\Users\Vanda\AppData\Roaming\Dropbox\bin\Dropbox.exe PRC - [2012.05.31 15:00:22 \| 000,445,624 \| ---- \| M] (Sony) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe PRC - [2012.05.28 15:56:36 \| 000,288,128 \| ---- \| M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe PRC - [2012.05.26 12:04:52 \| 000,913,792 \| ---- \| M] (IObit) -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe PRC - [2012.04.30 11:57:42 \| 000,067,072 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe PRC - [2012.03.28 16:03:16 \| 016,957,056 \| ---- \| M] (Winstep Software Technologies) -- D:\Instalacije\Winstep\Nexus.exe PRC - [2011.03.30 23:42:34 \| 001,001,808 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe PRC - [2011.03.30 23:42:32 \| 001,321,296 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe PRC - [2011.03.30 23:42:30 \| 000,923,984 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe PRC - [2011.03.30 23:42:28 \| 000,985,424 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Bluetooth\btplayerctrl.exe PRC - [2011.02.12 04:26:22 \| 000,377,344 \| ---- \| M] (Winstep Software Technologies) -- D:\Instalacije\Winstep\WsxService.exe PRC - [2010.02.02 09:53:44 \| 007,418,368 \| ---- \| M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.bin PRC - [2010.02.02 09:53:42 \| 007,424,000 \| ---- \| M] (OpenOffice.org) -- C:\Program Files (x86)\OpenOffice.org 3\program\soffice.exe PRC - [2010.01.21 14:22:04 \| 000,909,824 \| ---- \| M] (Sonix Technology Co., Ltd.) -- C:\Windows\vsnp2uvc.exe PRC - [2007.02.04 13:02:14 \| 000,079,400 \| ---- \| M] (Nuance Communications, Inc.) -- C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpWareSE4.exe ========== Modules (No Company Name) ========== MOD - [2012.08.24 21:15:30 \| 001,018,368 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\windows._cacheinvalidation.pyd MOD - [2012.08.24 21:15:30 \| 000,792,576 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\wx._gdi_.pyd MOD - [2012.08.24 21:15:30 \| 000,731,136 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\wx._misc_.pyd MOD - [2012.08.24 21:15:30 \| 000,645,120 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\_ssl.pyd MOD - [2012.08.24 21:15:30 \| 000,571,392 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\pysqlite2._sqlite.pyd MOD - [2012.08.24 21:15:30 \| 000,354,304 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\pythoncom26.dll MOD - [2012.08.24 21:15:30 \| 000,263,168 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\win32com.shell.shell.pyd MOD - [2012.08.24 21:15:30 \| 000,153,088 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\pyexpat.pyd MOD - [2012.08.24 21:15:30 \| 000,110,592 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\pywintypes26.dll MOD - [2012.08.24 21:15:30 \| 000,096,256 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\win32api.pyd MOD - [2012.08.24 21:15:30 \| 000,086,016 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\_elementtree.pyd MOD - [2012.08.24 21:15:30 \| 000,073,728 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\_ctypes.pyd MOD - [2012.08.24 21:15:30 \| 000,070,656 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\wx._html2.pyd MOD - [2012.08.24 21:15:30 \| 000,040,448 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\_socket.pyd MOD - [2012.08.24 21:15:30 \| 000,011,776 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\win32crypt.pyd MOD - [2012.08.24 21:15:29 \| 001,169,408 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\wx._core_.pyd MOD - [2012.08.24 21:15:29 \| 001,056,256 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\wx._controls_.pyd MOD - [2012.08.24 21:15:29 \| 000,807,424 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\wx._windows_.pyd MOD - [2012.08.24 21:15:29 \| 000,311,808 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\_hashlib.pyd MOD - [2012.08.24 21:15:29 \| 000,121,856 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\wx._wizard.pyd MOD - [2012.08.24 21:15:29 \| 000,111,104 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\win32file.pyd MOD - [2012.08.24 21:15:29 \| 000,039,424 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\win32inet.pyd MOD - [2012.08.24 21:15:29 \| 000,036,352 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\win32process.pyd MOD - [2012.08.24 21:15:29 \| 000,022,528 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\win32pdh.pyd MOD - [2012.08.24 21:15:29 \| 000,017,920 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\win32event.pyd MOD - [2012.08.24 21:15:28 \| 000,585,728 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\unicodedata.pyd MOD - [2012.08.24 21:15:28 \| 000,011,776 \| ---- \| M] () -- C:\Users\Vanda\AppData\Local\Temp\_MEI24762\select.pyd MOD - [2012.08.23 20:59:49 \| 009,813,704 \| ---- \| M] () -- C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll MOD - [2012.08.02 15:55:55 \| 000,783,360 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\gstreamer.dll MOD - [2012.08.02 15:55:55 \| 000,316,928 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstoggdec.dll MOD - [2012.08.02 15:55:55 \| 000,276,480 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwebmdec.dll MOD - [2012.08.02 15:55:55 \| 000,168,448 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstffmpegcolorspace.dll MOD - [2012.08.02 15:55:55 \| 000,099,840 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstcoreplugins.dll MOD - [2012.08.02 15:55:55 \| 000,098,816 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioresample.dll MOD - [2012.08.02 15:55:55 \| 000,098,816 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstaudioconvert.dll MOD - [2012.08.02 15:55:55 \| 000,078,336 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwavparse.dll MOD - [2012.08.02 15:55:55 \| 000,076,800 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdirectsound.dll MOD - [2012.08.02 15:55:55 \| 000,068,608 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstdecodebin2.dll MOD - [2012.08.02 15:55:55 \| 000,064,000 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstautodetect.dll MOD - [2012.08.02 15:55:55 \| 000,046,592 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gstwaveform.dll MOD - [2012.08.02 15:55:55 \| 000,045,568 \| ---- \| M] () -- C:\Program Files (x86)\Opera\gstreamer\plugins\gsttypefindfunctions.dll MOD - [2012.07.17 10:56:14 \| 000,587,776 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PhoneUpdate.dll MOD - [2012.05.24 11:50:32 \| 000,203,776 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\MExplorer.dll MOD - [2012.04.30 11:57:42 \| 000,067,072 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanionInfo.exe MOD - [2012.04.30 11:57:42 \| 000,039,936 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\TMonitorAPI.dll MOD - [2012.02.22 08:41:36 \| 001,085,376 \| ---- \| M] () -- D:\Instalacije\Winstep\wodTelnetDLX.dll MOD - [2011.11.01 19:32:48 \| 000,573,100 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\sqlite3.dll MOD - [2011.10.06 20:05:18 \| 000,970,752 \| ---- \| M] () -- C:\Program Files (x86)\OpenOffice.org 3\program\libxml2.dll MOD - [2011.07.07 14:54:36 \| 000,233,984 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\Report.dll MOD - [2011.06.24 22:56:36 \| 000,087,328 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2011.06.24 22:56:14 \| 001,241,888 \| ---- \| M] () -- C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll MOD - [2010.01.11 16:44:54 \| 000,053,248 \| ---- \| M] () -- C:\Program Files (x86)\Sony\Sony PC Companion\VObject.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - File not found [Disabled \| Unknown] -- C:\Program Files\AVAST Software\Avast\afwServ.exe -- (avast! Firewall) SRV:64bit: - [2012.08.21 11:12:25 \| 000,044,808 \| ---- \| M] (AVAST Software) [Auto \| Running] -- C:\Program Files\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus) SRV:64bit: - [2012.02.08 23:00:12 \| 000,343,032 \| ---- \| M] (Nitro PDF Software) [Auto \| Running] -- C:\Program Files\Common Files\Nitro PDF\Reader\2.0\NitroPDFReaderDriverService2x64.exe -- (NitroReaderDriverReadSpool2) SRV:64bit: - [2011.08.12 01:38:04 \| 000,140,672 \| ---- \| M] (SUPERAntiSpyware.com) [Auto \| Running] -- C:\Program Files\SUPERAntiSpyware\SASCore64.exe -- (!SASCORE) SRV:64bit: - [2011.03.22 02:10:26 \| 001,136,128 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files\Intel\BluetoothHS\BTHSAmpPalService.exe -- (AMPPALR3) SRV:64bit: - [2011.02.23 21:20:56 \| 000,134,928 \| ---- \| M] (Intel(R) Corporation) [Auto \| Running] -- C:\Program Files\Intel\BluetoothHS\BTHSSecurityMgr.exe -- (BTHSSecurityMgr) SRV:64bit: - [2009.07.14 03:41:27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV:64bit: - [2009.07.14 03:40:01 \| 000,193,536 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt) SRV - [2012.08.23 21:42:13 \| 000,250,568 \| ---- \| M] (Adobe Systems Incorporated) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc) SRV - [2012.07.27 22:51:26 \| 000,063,960 \| ---- \| M] (Adobe Systems Incorporated) [Auto \| Running] -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe -- (AdobeARMservice) SRV - [2012.07.05 18:41:46 \| 003,048,136 \| ---- \| M] (Skype Technologies S.A.) [Auto \| Running] -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe -- (Skype C2C Service) SRV - [2012.07.03 13:19:28 \| 000,160,944 \| R--- \| M] (Skype Technologies) [Auto \| Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate) SRV - [2012.05.26 12:04:52 \| 000,913,792 \| ---- \| M] (IObit) [Auto \| Running] -- C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCService.exe -- (AdvancedSystemCareService5) SRV - [2012.03.19 23:44:20 \| 000,276,248 \| ---- \| M] (Intel Corporation) [On_Demand \| Stopped] -- C:\Windows\SysWOW64\IntelCpHeciSvc.exe -- (cphs) SRV - [2012.01.18 14:38:28 \| 000,155,320 \| ---- \| M] (Avanquest Software) [On_Demand \| Stopped] -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe -- (Sony PC Companion) SRV - [2011.03.30 23:42:34 \| 001,001,808 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Bluetooth\obexsrv.exe -- (Bluetooth OBEX Service) SRV - [2011.03.30 23:42:32 \| 001,321,296 \| ---- \| M] (Intel Corporation) [On_Demand \| Running] -- C:\Program Files (x86)\Intel\Bluetooth\mediasrv.exe -- (Bluetooth Media Service) SRV - [2011.03.30 23:42:30 \| 000,923,984 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Bluetooth\devmonsrv.exe -- (Bluetooth Device Monitor) SRV - [2011.02.12 04:26:22 \| 000,377,344 \| ---- \| M] (Winstep Software Technologies) [Auto \| Running] -- D:\Instalacije\Winstep\WsxService.exe -- (Winstep Xtreme Service) SRV - [2011.01.28 13:23:18 \| 000,073,376 \| ---- \| M] (Atheros Commnucations) [Auto \| Running] -- C:\Program Files (x86)\Bluetooth Suite\AdminService.exe -- (AtherosSvc) SRV - [2010.03.18 13:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009.06.10 23:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) ========== Driver Services (SafeList) ========== DRV:64bit: - [2012.08.21 11:13:13 \| 000,969,200 \| ---- \| M] (AVAST Software) [File_System \| System \| Running] -- C:\Windows\SysNative\drivers\aswSnx.sys -- (aswSnx) DRV:64bit: - [2012.08.21 11:13:13 \| 000,359,464 \| ---- \| M] (AVAST Software) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\aswSP.sys -- (aswSP) DRV:64bit: - [2012.08.21 11:13:13 \| 000,059,728 \| ---- \| M] (AVAST Software) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\aswTdi.sys -- (aswTdi) DRV:64bit: - [2012.08.21 11:13:12 \| 000,071,600 \| ---- \| M] (AVAST Software) [File_System \| Auto \| Running] -- C:\Windows\SysNative\drivers\aswMonFlt.sys -- (aswMonFlt) DRV:64bit: - [2012.08.21 11:13:12 \| 000,054,072 \| ---- \| M] (AVAST Software) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\aswRdr2.sys -- (aswRdr) DRV:64bit: - [2012.08.21 11:13:11 \| 000,025,232 \| ---- \| M] (AVAST Software) [File_System \| Auto \| Running] -- C:\Windows\SysNative\drivers\aswFsBlk.sys -- (aswFsBlk) DRV:64bit: - [2012.07.15 19:57:21 \| 000,027,760 \| ---- \| M] (Sony Ericsson Mobile Communications) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ggsemc.sys -- (ggsemc) DRV:64bit: - [2012.07.15 19:57:21 \| 000,014,448 \| ---- \| M] (Sony Ericsson Mobile Communications) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ggflt.sys -- (ggflt) DRV:64bit: - [2012.03.19 23:32:04 \| 014,745,600 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\igdkmd64.sys -- (igfx) DRV:64bit: - [2012.03.01 08:46:16 \| 000,023,408 \| ---- \| M] (Microsoft Corporation) [Recognizer \| Boot \| Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec) DRV:64bit: - [2011.12.21 13:52:42 \| 000,530,488 \| ---- \| M] () [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2011.10.04 18:08:04 \| 001,439,792 \| ---- \| M] (Synaptics Incorporated) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2011.09.22 21:01:54 \| 000,311,144 \| ---- \| M] (Microsoft Corporation) [File_System \| Disabled \| Stopped] -- C:\Windows\SysNative\drivers\RsFx0105.sys -- (RsFx0105) DRV:64bit: - [2011.07.22 18:26:56 \| 000,014,928 \| ---- \| M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel \| System \| Running] -- C:\Program Files\SUPERAntiSpyware\sasdifsv64.sys -- (SASDIFSV) DRV:64bit: - [2011.07.12 23:55:18 \| 000,012,368 \| ---- \| M] (SUPERAdBlocker.com and SUPERAntiSpyware.com) [Kernel \| System \| Running] -- C:\Program Files\SUPERAntiSpyware\saskutil64.sys -- (SASKUTIL) DRV:64bit: - [2011.06.27 02:37:00 \| 002,753,536 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\athrx.sys -- (athr) DRV:64bit: - [2011.04.21 02:24:56 \| 000,169,584 \| ---- \| M] (Atheros Communications, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\L1C62x64.sys -- (L1C) DRV:64bit: - [2011.03.22 10:04:08 \| 000,261,632 \| ---- \| M] (Windows (R) Win 7 DDK provider) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPALP) DRV:64bit: - [2011.03.22 10:04:08 \| 000,261,632 \| ---- \| M] (Windows (R) Win 7 DDK provider) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\AmpPal.sys -- (AMPPAL) DRV:64bit: - [2011.03.11 08:41:12 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011.03.11 08:41:12 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011.03.08 23:44:08 \| 000,051,712 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\btmaux.sys -- (btmaux) DRV:64bit: - [2011.01.28 13:24:44 \| 000,283,296 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_rcp.sys -- (BTATH_RCP) DRV:64bit: - [2011.01.28 13:24:40 \| 000,166,048 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_hcrp.sys -- (BTATH_HCRP) DRV:64bit: - [2011.01.28 13:24:40 \| 000,036,000 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_flt.sys -- (AthBTPort) DRV:64bit: - [2011.01.28 13:24:38 \| 000,029,344 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_bus.sys -- (BTATH_BUS) DRV:64bit: - [2011.01.28 13:24:36 \| 000,259,232 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_a2dp.sys -- (BTATH_A2DP) DRV:64bit: - [2011.01.28 13:24:36 \| 000,109,216 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btath_avdt.sys -- (btath_avdt) DRV:64bit: - [2011.01.24 14:31:10 \| 000,283,136 \| ---- \| M] (Atheros) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\btfilter.sys -- (BtFilter) DRV:64bit: - [2010.11.20 15:33:35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010.11.20 13:07:05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010.10.20 08:34:26 \| 000,056,344 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (MEIx64) DRV:64bit: - [2010.10.15 09:28:16 \| 000,317,440 \| ---- \| M] (Intel(R) Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\IntcDAud.sys -- (IntcDAud) DRV:64bit: - [2010.09.07 17:19:38 \| 001,800,832 \| ---- \| M] (Sonix Technology Co., Ltd.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\snp2uvc.sys -- (SNP2UVC) DRV:64bit: - [2009.07.14 03:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009.07.14 03:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009.07.14 03:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009.06.10 22:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009.06.10 22:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009.06.10 22:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009.06.10 22:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009.05.18 14:17:08 \| 000,034,152 \| ---- \| M] (GEAR Software Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys -- (GEARAspiWDM) DRV - [2011.12.22 00:58:10 \| 000,018,048 \| ---- \| M] () [Kernel \| Auto \| Stopped] -- C:\Windows\SysWOW64\drivers\lirsgt.sys -- (lirsgt) DRV - [2009.07.14 03:19:10 \| 000,019,008 \| ---- \| M] (Microsoft Corporation) [File_System \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = google.com IE - HKLM\..\SearchScopes,DefaultScope = {EEE7E0A3-AE64-4dc8-84D1-F5D7BAF2DB0C} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Bar = google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = google.com IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = gogle.com/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-rs IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = F9 E9 50 CF 7F 23 CC 01 [binary data] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = google.com/ie IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = google.com/ie IE - HKCU\..\URLSearchHook: {013a635f-e3aa-4371-b682-ece95ca974b0} - No CLSID value found IE - HKCU\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\..\SearchScopes\{4315132B-5D69-4377-B6B3-F01B9895E74C}: "URL" = searchya.com/?chnl=dcom-100&s=1&cr=91442350.....DyCtDtC&q={searchTerms} IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7ADFA_en IE - HKCU\..\SearchScopes\{E383CA20-6512-49D4-AFA6-D70FE79131EB}: "URL" = search.yahoo.com/search?fr=chr-greentree_ie.....=937811&p={searchTerms} IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 ========== FireFox ========== FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_4_402_265.dll File not found FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_4_402_265.dll () FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google) FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll (Google, Inc.) FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.6.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.6.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@nitropdf.com/NitroPDF: C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll ( ) FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nprjplug.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=15.0.6.14: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.) FF - HKLM\Software\MozillaPlugins\@real.com/nprpplugin;version=15.0.6.14: c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll (RealPlayer) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Vanda\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Vanda\AppData\Local\Google\Update\1.3.21.115\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\crossriderapp1950@crossrider.com: C:\Users\Vanda\AppData\Local\RewardsArcadeSuite\1950\Firefox [2011.12.20 12:11:11 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{97E22097-9A2F-45b1-8DAF-36AD648C7EF4}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.08.23 21:03:22 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{0153E448-190B-4987-BDE1-F256CADA672F}: C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2012.08.23 21:03:22 \| 000,000,000 \| ---D \| M] ========== Chrome ========== CHR - homepage: google.com CHR - default_search_provider: (Enabled) CHR - default_search_provider: search_url = CHR - default_search_provider: suggest_url = CHR - homepage: google.com CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\Application\21.0.1180.83\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\Application\21.0.1180.83\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\Application\21.0.1180.83\gcswf32.dll CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\PepperFlash\11.2.31.144\pepflashplayer.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll CHR - plugin: (Enabled) = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\onklpkebbeeimgojkmaccmhmoafknihh\1.0.5_0\chromeNPAPI.dll CHR - plugin: Adobe Acrobat (Disabled) = C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.7.1 (Enabled) = D:\wendy-D\Downloads\plugins\npqtplugin7.dll CHR - plugin: Google Earth Plugin (Enabled) = C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll CHR - plugin: Picasa (Enabled) = C:\Program Files (x86)\Google\Picasa3\npPicasa3.dll CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Java(TM) Platform SE 6 U31 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\plugin2\npjp2.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll CHR - plugin: Nitro PDF Plug-In (Enabled) = C:\Program Files (x86)\Nitro PDF\Reader 2\npnitromozilla.dll CHR - plugin: RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32-bit) (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nppl3260.dll CHR - plugin: RealPlayer Version Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprpjplug.dll CHR - plugin: RealPlayer(tm) HTML5VideoShim Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll CHR - plugin: RealJukebox NS Plugin (Enabled) = C:\Program Files (x86)\Real\RealPlayer\Netscape6\nprjplug.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: RealNetworks(tm) Chrome Background Extension Plug-In (32-bit) (Enabled) = C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll CHR - Extension: TooManyTabs for Chrome = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\amigcgbheognjmfkaieeeadojiibgbdp\1.9.2_0\ CHR - Extension: \| Facebook = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ffhfepmhgkgmmomjcgakcgbpajfkpooh\2012.5.27.37040_0\ CHR - Extension: WeatherByte = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\fnlgbglmmkibkhhbnhegkokegdodlgfe\1.0.3_0\ CHR - Extension: AppJump App Launcher and Organizer = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\hccbinpobnjcpckmcfngmdpnbnjpmcbd\0.9.2_0\ CHR - Extension: avast! WebRep = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1466_0\ CHR - Extension: RewardsArcade Suite = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ielefkgbofdpglioecfjcbikholflklb\1.19.40_0\crossrider CHR - Extension: RewardsArcade Suite = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ielefkgbofdpglioecfjcbikholflklb\1.19.40_0\ CHR - Extension: RealPlayer HTML5Video Downloader Extension = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\jfmjfhklogoienhpfnppmbcbjfjnkonk\1.5_0\ CHR - Extension: Fiery Horse chrome Theme = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\miipddolmnknmpiednnbijmeogpdgknp\1_0\ CHR - Extension: Auto Select All Facebook Friends = C:\Users\Vanda\AppData\Local\Google\Chrome\User Data\Default\Extensions\ppcjiigginhdhihbdlejjoekeemjaiml\2.0_0\ O1 HOSTS File: ([2009.06.10 23:00:26 \| 000,000,824 \| ---- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation) O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation) O2 - BHO: (CIESpeechBHO Class) - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O2 - BHO: (RewardsArcadeSuite) - {B6EF6C45-5E8D-4c3b-B580-A5073261A381} - C:\Program Files (x86)\RewardsArcadeSuite\RewardsArcadeSuite.dll (215 Apps) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation) O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software) O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {013A635F-E3AA-4371-B682-ECE95CA974B0} - No CLSID value found. O4:64bit: - HKLM..\Run: [BTMTrayAgent] C:\Program Files (x86)\Intel\Bluetooth\btmshell.dll (Intel Corporation) O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation) O4:64bit: - HKLM..\Run: [snp2uvc] c:\Windows\vsnp2uvc.exe (Sonix Technology Co., Ltd.) O4:64bit: - HKLM..\Run: [SynAsusAcpi] C:\Program Files\Synaptics\SynTP\SynAsusAcpi.exe (Synaptics Incorporated) O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.) O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software) O4 - HKLM..\Run: [OpwareSE4] C:\Program Files (x86)\ScanSoft\OmniPageSE4\OpwareSE4.exe (Nuance Communications, Inc.) O4 - HKLM..\Run: [QuickTime Task] D:\wendy-D\Downloads\QTTask.exe (Apple Inc.) O4 - HKLM..\Run: [TkBellExe] C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.) O4 - HKCU..\Run: [Advanced SystemCare 5] C:\Program Files (x86)\IObit\Advanced SystemCare 5\ASCTray.exe (IObit) O4 - HKCU..\Run: [Nexus] D:\Instalacije\Winstep\Nexus.exe (Winstep Software Technologies) O4 - HKCU..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERANTISPYWARE.EXE (SUPERAntiSpyware.com) O4 - Startup: C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\Vanda\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.) O4 - Startup: C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk = C:\Program Files (x86)\OpenOffice.org 3\program\quickstart.exe () O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8:64bit: - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\Windows\system32\GPhotos.scr/200 File not found O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\SysWow64\GPhotos.scr (Google Inc.) O9 - Extra 'Tools' menuitem : Send by Bluetooth to - {7815BE26-237D-41A8-A98F-F7BD75F71086} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations) O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O1364bit: - gopher Prefix: missing O13 - gopher Prefix: missing O15 - HKCU\..Trusted Domains: cinemanow.com ([]http in Trusted sites) O15 - HKCU\..Trusted Domains: cinemanow.com ([]https in Trusted sites) O16 - DPF: {7D2FB79E-E58C-4DB5-A36F-AC1C73967F4D} browsercheck.qualys.com/qbc_ax.cab (Qualys BrowserCheck) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Reg Error: Value error.) O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 10.6.2) O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} fpdownload2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D676D063-EB22-4B21-A96E-5BF796B602BD}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F8718E86-1675-43CA-8052-0406144DBD76}: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\skype4com - No CLSID value found O18:64bit: - Protocol\Handler\skype-ie-addon-data - No CLSID value found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation) O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 \| 000,000,024 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{05acb269-4807-11e1-9f91-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{05acb269-4807-11e1-9f91-742f6804af45}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{05acb27b-4807-11e1-9f91-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{05acb27b-4807-11e1-9f91-742f6804af45}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{98d04765-2bca-11e1-b066-f46d04323128}\Shell - "" = AutoRun O33 - MountPoints2\{98d04765-2bca-11e1-b066-f46d04323128}\Shell\AutoRun\command - "" = F:\Install.exe O33 - MountPoints2\{d80704de-ce4c-11e1-9010-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{d80704de-ce4c-11e1-9010-742f6804af45}\Shell\AutoRun\command - "" = F:\Startme.exe O33 - MountPoints2\{d807058e-ce4c-11e1-9010-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{d807058e-ce4c-11e1-9010-742f6804af45}\Shell\AutoRun\command - "" = F:\Startme.exe O34 - HKLM BootExecute: (autocheck autochk ) O35:64bit: - HKLM\..comfile [open] -- "%1" % O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.08.24 21:15:37 \| 000,000,000 \| R--D \| C] -- C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices [2012.08.24 17:00:21 \| 000,596,480 \| ---- \| C] (OldTimer Tools) -- C:\Users\Vanda\Desktop\OTL.exe [2012.08.23 21:40:55 \| 000,000,000 \| ---D \| C] -- C:\Users\Vanda\AppData\Roaming\qualys [2012.08.23 21:08:00 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\Java [2012.08.23 21:07:36 \| 000,821,736 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2012.08.23 21:07:36 \| 000,246,760 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012.08.23 21:07:27 \| 000,095,208 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012.08.23 21:03:25 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Common Files\xing shared [2012.08.23 20:57:26 \| 001,034,216 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll [2012.08.23 20:57:26 \| 000,916,456 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2012.08.23 20:57:26 \| 000,289,768 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012.08.23 20:57:16 \| 000,189,416 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012.08.23 20:57:16 \| 000,188,904 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012.08.23 20:57:16 \| 000,108,008 \| ---- \| C] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2012.08.23 20:57:03 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Java [2012.08.21 20:40:22 \| 000,000,000 \| ---D \| C] -- C:\Users\Vanda\AppData\Roaming\Mozilla [2012.08.16 16:43:28 \| 000,096,768 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll [2012.08.16 16:43:28 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll [2012.08.16 16:43:26 \| 000,237,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll [2012.08.16 16:43:26 \| 000,231,936 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll [2012.08.16 16:43:24 \| 000,248,320 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll [2012.08.16 16:43:24 \| 000,176,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll [2012.08.16 16:43:24 \| 000,173,056 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ieUnatt.exe [2012.08.16 16:43:24 \| 000,142,848 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieUnatt.exe [2012.08.16 16:43:23 \| 001,494,528 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\inetcpl.cpl [2012.08.16 16:43:23 \| 001,427,968 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\inetcpl.cpl [2012.08.16 16:43:22 \| 002,312,704 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript9.dll [2012.08.16 16:43:21 \| 000,717,824 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\jscript.dll [2012.08.16 16:43:20 \| 000,816,640 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\jscript.dll [2012.08.15 10:34:01 \| 000,503,808 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\srcore.dll [2012.08.15 10:33:56 \| 000,073,216 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\netapi32.dll [2012.08.15 10:33:56 \| 000,059,392 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\browcli.dll [2012.08.15 10:33:56 \| 000,041,984 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\browcli.dll [2012.08.15 10:33:53 \| 000,751,104 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\win32spl.dll [2012.08.15 10:33:53 \| 000,492,032 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\win32spl.dll [2012.08.15 10:33:53 \| 000,067,072 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\splwow64.exe [2012.08.15 10:33:52 \| 000,956,928 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\localspl.dll [2012.08.11 18:48:24 \| 000,024,960 \| ---- \| C] (IObit) -- C:\Windows\SysNative\RegistryDefragBootTime.exe [2012.08.11 13:09:20 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\IObit [2012.08.11 13:09:07 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Advanced SystemCare 5 [2012.08.11 13:09:00 \| 000,000,000 \| ---D \| C] -- C:\Users\Vanda\AppData\Roaming\IObit [2012.08.11 13:08:52 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\IObit [2012.08.08 14:44:53 \| 000,073,064 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll [2012.08.08 14:44:52 \| 000,109,416 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\perf-MSSQL$SQLEXPRESS-sqlctr10.3.5500.0.dll [2012.08.08 14:44:52 \| 000,105,832 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\SQSRVRES.DLL [2012.08.08 14:43:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Microsoft.NET [2012.08.08 14:21:32 \| 000,514,560 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll [2012.08.08 14:21:32 \| 000,366,592 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll [2012.08.07 21:21:12 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner [2012.08.07 21:21:10 \| 000,000,000 \| ---D \| C] -- C:\Program Files\CCleaner [2012.08.07 21:20:33 \| 003,907,920 \| ---- \| C] (Piriform Ltd) -- C:\Program Files\ccleaner - ccsetup321.exe [2012.08.03 03:19:20 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\PreEmptive Solutions [2012.08.03 03:02:02 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WCF RIA Services V1.0 SP1 [2012.08.03 03:01:37 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight 4 SDK [2012.08.03 03:01:02 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\VS [2012.07.26 21:40:29 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\YTD Video Downloader [2012.07.26 21:40:23 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\YTD Video Downloader [2010.09.07 18:19:54 \| 001,761,024 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\snp2uvc.sys [2010.08.02 18:21:46 \| 000,307,712 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\vsnp2uvc.dll [2010.06.07 12:47:28 \| 000,212,992 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\csnp2uvc.dll [2010.05.11 11:56:12 \| 002,401,307 \| ---- \| C] (Macrovision Corporation) -- C:\Program Files\snuninst.exe [2010.01.28 12:04:52 \| 000,028,288 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\sncduvc.sys [2010.01.27 14:35:22 \| 000,131,072 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\snp2uvc.ds [2010.01.21 15:47:12 \| 000,239,616 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\rsnp2uvc.dll [2010.01.21 15:38:10 \| 000,172,032 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\snp2TUI.dll [2010.01.21 15:22:04 \| 000,909,824 \| ---- \| C] (Sonix Technology Co., Ltd.) -- C:\Program Files\vsnp2uvc.exe [2009.06.08 18:18:16 \| 000,305,720 \| ---- \| C] (ASUSTek COMPUTER INC.) -- C:\Program Files\PNPINST.exe [9 C:\Windows\SysNative\.tmp files -> C:\Windows\SysNative\.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.08.24 21:15:47 \| 000,014,400 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.08.24 21:15:47 \| 000,014,400 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.08.24 21:15:32 \| 000,000,035 \| ---- \| M] () -- C:\ProgramData\AtherosServiceConfig.ini [2012.08.24 21:10:01 \| 000,000,896 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2012.08.24 21:07:48 \| 000,000,892 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2012.08.24 21:07:33 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012.08.24 21:07:25 \| 3046,813,696 \| -HS- \| M] () -- C:\hiberfil.sys [2012.08.24 20:52:23 \| 000,000,830 \| ---- \| M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job [2012.08.24 20:48:48 \| 000,618,227 \| ---- \| M] () -- C:\Users\Vanda\Desktop\adwcleaner.exe [2012.08.24 20:39:04 \| 000,000,908 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000UA.job [2012.08.24 17:47:39 \| 000,000,856 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-4085335947-2511170766-3262566581-1000Core.job [2012.08.24 17:00:21 \| 000,596,480 \| ---- \| M] (OldTimer Tools) -- C:\Users\Vanda\Desktop\OTL.exe [2012.08.23 21:42:12 \| 000,696,520 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerApp.exe [2012.08.23 21:42:12 \| 000,073,416 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2012.08.23 21:07:21 \| 000,095,208 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\WindowsAccessBridge-32.dll [2012.08.23 21:07:17 \| 000,246,760 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaws.exe [2012.08.23 21:07:17 \| 000,174,056 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\javaw.exe [2012.08.23 21:07:17 \| 000,174,056 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\java.exe [2012.08.23 21:07:16 \| 000,821,736 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\npDeployJava1.dll [2012.08.23 21:07:16 \| 000,746,984 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysWow64\deployJava1.dll [2012.08.23 21:03:16 \| 000,198,864 \| ---- \| M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\rmoc3260.dll [2012.08.23 21:03:05 \| 000,006,656 \| ---- \| M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5016.dll [2012.08.23 21:03:05 \| 000,005,632 \| ---- \| M] (RealNetworks, Inc.) -- C:\Windows\SysWow64\pndx5032.dll [2012.08.23 21:03:02 \| 000,272,896 \| ---- \| M] (Progressive Networks) -- C:\Windows\SysWow64\pncrt.dll [2012.08.23 20:57:09 \| 000,108,008 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\WindowsAccessBridge-64.dll [2012.08.23 20:57:05 \| 001,034,216 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\npDeployJava1.dll [2012.08.23 20:57:05 \| 000,916,456 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\deployJava1.dll [2012.08.23 20:57:05 \| 000,289,768 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\javaws.exe [2012.08.23 20:57:05 \| 000,189,416 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\javaw.exe [2012.08.23 20:57:05 \| 000,188,904 \| ---- \| M] (Oracle Corporation) -- C:\Windows\SysNative\java.exe [2012.08.22 13:14:34 \| 000,000,000 \| ---- \| M] () -- C:\Windows\SysWow64\config.nt [2012.08.21 11:13:13 \| 000,969,200 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSnx.sys [2012.08.21 11:13:13 \| 000,359,464 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswSP.sys [2012.08.21 11:13:13 \| 000,059,728 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswTdi.sys [2012.08.21 11:13:12 \| 000,071,600 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswMonFlt.sys [2012.08.21 11:13:12 \| 000,054,072 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswRdr2.sys [2012.08.21 11:13:11 \| 000,025,232 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\drivers\aswFsBlk.sys [2012.08.21 11:12:33 \| 000,041,224 \| ---- \| M] (AVAST Software) -- C:\Windows\avastSS.scr [2012.08.21 11:12:23 \| 000,227,648 \| ---- \| M] (AVAST Software) -- C:\Windows\SysWow64\aswBoot.exe [2012.08.21 11:12:02 \| 000,285,328 \| ---- \| M] (AVAST Software) -- C:\Windows\SysNative\aswBoot.exe [2012.08.20 14:40:39 \| 000,000,000 \| -H-- \| M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf [2012.08.20 14:39:28 \| 000,002,102 \| ---- \| M] () -- C:\Users\Public\Desktop\Sony PC Companion 2.1.lnk [2012.08.16 17:12:32 \| 000,295,696 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2012.08.14 15:53:17 \| 000,001,049 \| ---- \| M] () -- C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2012.08.13 08:45:53 \| 000,002,228 \| ---- \| M] () -- C:\Users\Vanda\Desktop\Google Earth.lnk [2012.08.12 09:43:10 \| 000,002,413 \| ---- \| M] () -- C:\Windows\SysWow64\lgAxconfig.ini [2012.08.11 13:09:08 \| 000,001,225 \| ---- \| M] () -- C:\Users\Public\Desktop\Advanced SystemCare 5.lnk [2012.08.08 14:44:53 \| 000,799,802 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2012.08.08 14:44:53 \| 000,726,718 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2012.08.08 14:44:53 \| 000,146,704 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2012.08.07 21:21:12 \| 000,000,822 \| ---- \| M] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012.08.07 21:20:33 \| 003,907,920 \| ---- \| M] (Piriform Ltd) -- C:\Program Files\ccleaner - ccsetup321.exe [2012.07.26 21:40:23 \| 000,001,050 \| ---- \| M] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk [2012.07.26 20:08:27 \| 000,000,000 \| -H-- \| M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf [9 C:\Windows\SysNative\.tmp files -> C:\Windows\SysNative\.tmp -> ] ========== Files Created - No Company Name ========== [2012.08.24 20:48:48 \| 000,618,227 \| ---- \| C] () -- C:\Users\Vanda\Desktop\adwcleaner.exe [2012.08.20 14:40:39 \| 000,000,000 \| -H-- \| C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01007.Wdf [2012.08.14 15:53:17 \| 000,001,049 \| ---- \| C] () -- C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2012.08.13 08:45:53 \| 000,002,228 \| ---- \| C] () -- C:\Users\Vanda\Desktop\Google Earth.lnk [2012.08.12 16:31:22 \| 000,001,239 \| ---- \| C] () -- C:\Users\Vanda\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\OpenOffice.org 3.2.lnk [2012.08.11 13:09:08 \| 000,001,225 \| ---- \| C] () -- C:\Users\Public\Desktop\Advanced SystemCare 5.lnk [2012.08.07 21:21:12 \| 000,000,822 \| ---- \| C] () -- C:\Users\Public\Desktop\CCleaner.lnk [2012.07.26 21:40:23 \| 000,001,050 \| ---- \| C] () -- C:\Users\Public\Desktop\YTD Video Downloader.lnk [2012.07.26 20:08:27 \| 000,000,000 \| -H-- \| C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_WinUsb_01009.Wdf [2012.06.03 11:37:11 \| 000,028,659 \| ---- \| C] () -- C:\Program Files (x86)\aca.jpg [2012.05.28 12:02:55 \| 003,854,877 \| ---- \| C] () -- C:\Program Files\Camera_Azurewave_VS010_Win7_64_Z5855133208.zip [2012.05.28 11:59:06 \| 001,674,813 \| ---- \| C] () -- C:\Program Files\Camera_Chicony_CNF_9059_Win7_64_Z061005200440.zip [2012.03.19 23:31:16 \| 000,963,912 \| ---- \| C] () -- C:\Windows\SysWow64\igkrng600.bin [2012.03.19 23:31:16 \| 000,261,208 \| ---- \| C] () -- C:\Windows\SysWow64\igfcg600m.bin [2012.03.19 23:25:58 \| 000,058,880 \| ---- \| C] () -- C:\Windows\SysWow64\igdde32.dll [2012.03.19 22:21:14 \| 013,212,672 \| ---- \| C] () -- C:\Windows\SysWow64\ig4icd32.dll [2012.02.06 21:51:32 \| 000,667,648 \| ---- \| C] () -- C:\Windows\SysWow64\FreeImage.dll [2012.01.28 16:49:07 \| 000,867,094 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2011.12.28 17:31:57 \| 000,010,162 \| ---- \| C] () -- C:\Users\Vanda\AppData\Roaming\Contacts_20-d6-07-4f-98-76.pbo [2011.12.25 23:52:53 \| 000,000,035 \| ---- \| C] () -- C:\ProgramData\AtherosServiceConfig.ini [2011.12.21 14:33:42 \| 000,018,048 \| ---- \| C] () -- C:\Windows\SysWow64\drivers\lirsgt.sys [2011.12.16 19:44:38 \| 000,000,424 \| ---- \| C] () -- C:\Windows\MAXLINK.INI [2011.11.28 17:48:25 \| 000,000,069 \| ---- \| C] () -- C:\Windows\popcinfo.dat [2011.10.24 11:15:58 \| 000,053,248 \| ---- \| C] () -- C:\Windows\SysWow64\CommonDL.dll [2011.10.24 11:15:58 \| 000,002,413 \| ---- \| C] () -- C:\Windows\SysWow64\lgAxconfig.ini [2011.09.01 04:51:16 \| 000,145,804 \| ---- \| C] () -- C:\Windows\SysWow64\igcompkrng600.bin [2011.05.06 05:30:46 \| 000,066,856 \| ---- \| C] () -- C:\Windows\SysWow64\SynTPEnhPS.dll [2010.10.27 15:39:20 \| 000,016,362 \| ---- \| C] () -- C:\Program Files\snp2uvc.cat [2010.10.06 17:47:52 \| 000,052,257 \| ---- \| C] () -- C:\Program Files\snp2uvc.inf [2010.02.02 16:13:14 \| 000,000,175 \| ---- \| C] () -- C:\Program Files\2KSETUP.INI [2009.07.21 13:08:00 \| 000,013,021 \| ---- \| C] () -- C:\Program Files\snp2uvc.src [2006.05.19 12:56:54 \| 000,001,272 \| ---- \| C] () -- C:\Program Files\snp2dsc.ini [2006.05.19 12:39:58 \| 000,015,497 \| ---- \| C] () -- C:\Program Files\snp2uvc.ini ========== Files - Unicode (All) ========== [2012.08.24 21:16:12 \| 000,000,000 \| --SD \| M](C:\Users\Vanda\Google ????) -- C:\Users\Vanda\Google диск [2012.08.24 21:16:12 \| 000,000,000 \| --SD \| M](C:\Users\Vanda\Google ????) -- C:\Users\Vanda\Google диск [2012.07.01 22:41:22 \| 000,001,773 \| ---- \| M] ()(C:\Users\Vanda\Desktop\Google ????.lnk) -- C:\Users\Vanda\Desktop\Google диск.lnk [2012.07.01 22:41:22 \| 000,001,773 \| ---- \| C] ()(C:\Users\Vanda\Desktop\Google ????.lnk) -- C:\Users\Vanda\Desktop\Google диск.lnk [2012.06.30 14:33:29 \| 000,000,000 \| ---D \| M](C:\Users\Vanda\Desktop\???? ????????) -- C:\Users\Vanda\Desktop\Нова фасцикла [2012.06.23 15:25:21 \| 000,000,000 \| ---D \| C](C:\Users\Vanda\Desktop\???? ????????) -- C:\Users\Vanda\Desktop\Нова фасцикла (C:\Users\Vanda\Google ????) -- C:\Users\Vanda\Google диск ========== Alternate Data Streams ========== @Alternate Data Stream - 151 bytes -> C:\ProgramData\Temp:363E775E @Alternate Data Stream - 137 bytes -> C:\ProgramData\Temp:07BF512B @Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:D1B5B4F1 < End of report >

Profil

argus Poslao: 24 Avg 2012 22:17 Idi na vrh
rip argus Anti Malware Fighter Rank 2 Pridružio: 27 Apr 2008 Poruke: 9160 Gde živiš: Prokuplje	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav Wendi, ja cu da nastavim s tobom, Ivance je zauzet trenutno. Ponovo pokreni program OTL dvoklikom na ikonicu; U beli okvir prozora gde piše Custom Scans/Fixes iskopirati sledeći tekst: :OTL O33 - MountPoints2\{05acb269-4807-11e1-9f91-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{05acb269-4807-11e1-9f91-742f6804af45}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{05acb27b-4807-11e1-9f91-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{05acb27b-4807-11e1-9f91-742f6804af45}\Shell\AutoRun\command - "" = F:\AutoRun.exe O33 - MountPoints2\{98d04765-2bca-11e1-b066-f46d04323128}\Shell - "" = AutoRun O33 - MountPoints2\{98d04765-2bca-11e1-b066-f46d04323128}\Shell\AutoRun\command - "" = F:\Install.exe O33 - MountPoints2\{d80704de-ce4c-11e1-9010-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{d80704de-ce4c-11e1-9010-742f6804af45}\Shell\AutoRun\command - "" = F:\Startme.exe O33 - MountPoints2\{d807058e-ce4c-11e1-9010-742f6804af45}\Shell - "" = AutoRun O33 - MountPoints2\{d807058e-ce4c-11e1-9010-742f6804af45}\Shell\AutoRun\command - "" = F:\Startme.exe :commands [emptytemp] [CLEARRESTOREPOINTS] [EMPTYFLASH] [EMPTYJAVA] Klikni taster Run Fix; Log koji dobiješ iskopiraj ovde u poruci. ******* Reci mi da li je bolja situacija sa netom.

Profil

wendy.mrs Poslao: 25 Avg 2012 10:32 Idi na vrh
offline wendy.mrs Građanin Pridružio: 29 Avg 2007 Poruke: 50 Gde živiš: vojvodina	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Brži je internet. Mada mi treba više vremena, ali je na prvi pogled znatno brži a i ne pojavljuje se više ono obaveštenje na početnom ekranu. All processes killed ========== OTL ========== Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{05acb269-4807-11e1-9f91-742f6804af45}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05acb269-4807-11e1-9f91-742f6804af45}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{05acb269-4807-11e1-9f91-742f6804af45}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05acb269-4807-11e1-9f91-742f6804af45}\ not found. File F:\AutoRun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{05acb27b-4807-11e1-9f91-742f6804af45}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05acb27b-4807-11e1-9f91-742f6804af45}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{05acb27b-4807-11e1-9f91-742f6804af45}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{05acb27b-4807-11e1-9f91-742f6804af45}\ not found. File F:\AutoRun.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{98d04765-2bca-11e1-b066-f46d04323128}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98d04765-2bca-11e1-b066-f46d04323128}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{98d04765-2bca-11e1-b066-f46d04323128}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98d04765-2bca-11e1-b066-f46d04323128}\ not found. File F:\Install.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d80704de-ce4c-11e1-9010-742f6804af45}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d80704de-ce4c-11e1-9010-742f6804af45}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d80704de-ce4c-11e1-9010-742f6804af45}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d80704de-ce4c-11e1-9010-742f6804af45}\ not found. File F:\Startme.exe not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d807058e-ce4c-11e1-9010-742f6804af45}\ deleted successfully. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d807058e-ce4c-11e1-9010-742f6804af45}\ not found. Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{d807058e-ce4c-11e1-9010-742f6804af45}\ not found. Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{d807058e-ce4c-11e1-9010-742f6804af45}\ not found. File F:\Startme.exe not found. File ptytemp] not found. File EARRESTOREPOINTS] not found. File PTYFLASH] not found. File PTYJAVA] not found. OTL by OldTimer - Version 3.2.58.1 log created on 08252012_080153 Files\Folders moved on Reboot... PendingFileRenameOperations files... Registry entries deleted on Reboot...

Profil

argus Poslao: 25 Avg 2012 10:52 Idi na vrh
rip argus Anti Malware Fighter Rank 2 Pridružio: 27 Apr 2008 Poruke: 9160 Gde živiš: Prokuplje	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Ponovo pokreni OTL i klikni tab CleanUp Ponovo pokreni AdwCleaner i klikni na opciju Uninstall - Preporucujem da za zastitu USB memorijskih uredjaja koristis MCShield v2. Nema nikakve veze sa AntiVirus-om tj. nece ometati njegov rad a pokazao se kao jedan od najboljih vida zastite od malware-a koji se prenosi putem USB mem. uredjaja. Skines, instaliras, ubodes USB mem. uredjaj, izvrsi se skeniranje nakon cega dobijes obavestenje da je uredjaj cist (ukoliko je stvarno tako); ili dobijes log u kome vidis informacije o malware-u koji je nadjen i obrisan. Home Page MCShield-a ::Anti-Malware Tool:: v2: http://amf.mycity.rs/mcshield/ Vise o MCShield-u mozes saznati u ovim temama: v1: http://www.mycity.rs/MyCity-Laboratorija/MCShield.html v2: http://www.mycity.rs/MyCity-Laboratorija/MCShield-v2.html Ovim smo zavrsili posao u Ambulanti, pozdrav.

Profil

wendy.mrs Poslao: 25 Avg 2012 15:30 Idi na vrh
offline wendy.mrs Građanin Pridružio: 29 Avg 2007 Poruke: 50 Gde živiš: vojvodina	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku!

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Internet koči

Ko je trenutno na forumu

Ukupno su 786 korisnika na forumu :: 8 registrovanih, 1 sakriven i 777 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: amaterSRB, Djole, esx66, Lazarus, Parker, Tila Painen, uruk, zziko

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by