Outpost Security Suite Free prijavljuje malware

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Outpost javlja poruku sa slike samo kada otvorim Google Chrome, ne bi me to toliko ni grizlo da se sa tog, tj. ovog kompjutera ne loguje na paypal.com. Osim sto Outpost javlja ovu poruku, kompjuter nije nista sporiji, niti sa primjetio bilo kakve druge promjene. Imam kablovski internet 3Mb/s (ako je to opste bitno)

.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 9.0.8080.16413
Run by Nedim at 14:04:13 on 2011-08-20
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.387.1033.18.1536.840 [GMT 2:00]
.
AV: Outpost Security Suite *Enabled/Updated* {ECEA6BCD-A007-0BC7-D5A5-0254DCBD816E}
SP: Outpost Security Suite *Enabled/Updated* {578B8A29-863D-0449-EF15-3926A73ACBD3}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: Outpost Security Suite *Enabled* {D4D1EAE8-EA68-0A9F-FEFA-AB61226EC615}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Users\Nedim\AppData\Local\Google\Update\1.3.21.65\GoogleCrashHandler.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k secsvcs
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Users\Nedim\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nedim\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nedim\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\Nedim\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Nedim\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: GamePlayLabsBHO: {984a9162-8891-4d19-8cfe-17648bb4e1ec} - GamePlayLabsBHO Class
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [Google Update] "c:\users\nedim\appdata\local\google\update\GoogleUpdate.exe" /c
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [itype] "c:\program files\microsoft intellitype pro\itype.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [OutpostMonitor] "c:\progra~1\agnitum\outpos~1\op_mon.exe" /tray /noservice
mRun: [OutpostFeedBack] "c:\program files\agnitum\outpost security suite free\feedback.exe" /dump:os_startup
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office12\EXCEL.EXE/3000
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
TCP: DhcpNameServer = 91.191.38.7 91.191.38.8
TCP: Interfaces\{7169BF11-E0AB-4F68-A3FD-D839CBC9933D} : DhcpNameServer = 91.191.38.7 91.191.38.8
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
AppInit_DLLs: c:\progra~1\agnitum\outpos~1\wl_hook.dll
mASetup: {10880D85-AAD9-4558-ABDC-2AB1552D831F} - "c:\program files\common files\lightscribe\LSRunOnce.exe"
.
============= SERVICES / DRIVERS ===============
.
R1 afw;Agnitum Firewall Driver;c:\windows\system32\drivers\afw.sys [2011-6-29 34920]
R1 SandBox;SandBox;c:\windows\system32\drivers\SandBox.sys [2011-6-29 708760]
R2 acssrv;Agnitum Client Security Service;c:\progra~1\agnitum\outpos~1\acs.exe [2011-6-29 2072592]
R2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\common files\adobe\arm\1.0\armsvc.exe [2011-6-6 64952]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2010-2-2 1043784]
R3 afwcore;afwcore;c:\windows\system32\drivers\afwcore.sys [2011-6-29 328296]
R3 ASWFilt;ASWFilt;c:\windows\system32\filt\ASWFilt.dll [2011-6-29 70160]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064]
R3 VBEngNT;VBEngNT;c:\windows\system32\drivers\VBEngNT.sys [2011-6-29 242040]
R3 VBFilt;VBFilt;c:\windows\system32\filt\VBFilt.dll [2011-6-29 34096]
S2 TeamViewer6;TeamViewer 6;c:\program files\teamviewer\version6\teamviewer_service.exe --> c:\program files\teamviewer\version6\TeamViewer_Service.exe [?]
.
=============== Created Last 30 ================
.
2011-08-20 10:39:31 -------- d-----w- c:\users\nedim\appdata\local\{F1F3E49E-E9B9-4E95-BBFD-4575F56B76FA}
2011-08-19 21:52:07 -------- d-----w- c:\users\nedim\appdata\local\{5F024B81-37FF-4D88-AFCE-045EC4779036}
2011-08-19 21:51:39 -------- d-----w- c:\users\nedim\appdata\local\{1804FC31-E5D2-484D-9756-59AE50DBAD0B}
2011-08-18 22:14:20 -------- d-----w- c:\users\nedim\appdata\local\{5F820D38-1446-46BE-90AB-9CB7E16D9C58}
2011-08-18 22:13:51 -------- d-----w- c:\users\nedim\appdata\local\{D8CC6619-825E-491F-9FE9-964CF8E3013F}
2011-08-18 10:11:22 -------- d-----w- c:\users\nedim\appdata\local\{5D1903A7-B9D2-40A9-A755-9616B1302DC3}
2011-08-18 10:11:01 -------- d-----w- c:\users\nedim\appdata\local\{24C5DED8-4B04-48B8-8454-522C4AD83D89}
2011-08-16 11:56:06 -------- d-----w- c:\users\nedim\appdata\local\{6D65D63F-DF60-4A58-8F97-55073E927F9B}
2011-08-16 11:55:52 -------- d-----w- c:\users\nedim\appdata\local\{E3E29DDD-3185-4154-9EB6-78DE7CD8DC48}
2011-08-14 22:33:43 -------- d-----w- c:\users\nedim\appdata\local\{BE34CE62-F47B-4B5C-AB79-F6F20164BA46}
2011-08-14 22:33:09 -------- d-----w- c:\users\nedim\appdata\local\{718012B6-8FA0-4AE9-9F3D-06C67C721DFC}
2011-08-13 23:40:01 -------- d-----w- c:\users\nedim\appdata\local\{1BB3A8AA-1DE7-48A5-B7DF-6942069455AC}
2011-08-13 23:39:34 -------- d-----w- c:\users\nedim\appdata\local\{7B003DFB-FFCB-4800-BA7D-0C6F5282E23C}
2011-08-13 11:39:00 -------- d-----w- c:\users\nedim\appdata\local\{DF470820-56A1-4530-A67E-4A1B13BCEBF8}
2011-08-13 11:38:35 -------- d-----w- c:\users\nedim\appdata\local\{F2D0207C-9EE4-4336-AE27-9EA8176816AF}
2011-08-12 23:37:58 -------- d-----w- c:\users\nedim\appdata\local\{FFCCFE12-1AFB-411D-97D3-98A9A1989603}
2011-08-12 23:37:28 -------- d-----w- c:\users\nedim\appdata\local\{CCA16E7E-0AE0-4362-9620-7083ABA4FAF0}
2011-08-11 13:11:09 -------- d-----w- c:\users\nedim\appdata\local\{E9138487-56B8-4288-8E1C-95BF9FF4A429}
2011-08-11 13:10:35 -------- d-----w- c:\users\nedim\appdata\local\{EDB04E75-07A6-4F4E-8088-7F8D63A12C18}
2011-08-10 22:00:42 -------- d-----w- c:\users\nedim\appdata\local\{7D343895-AEC5-46D4-81A5-477DC2FD8471}
2011-08-10 22:00:10 -------- d-----w- c:\users\nedim\appdata\local\{4CCB0197-EAD7-4582-A647-7264FA13459A}
2011-08-09 20:17:50 -------- d-----w- c:\users\nedim\appdata\roaming\AnvSoft
2011-08-09 20:16:44 -------- d-----w- c:\program files\AnvSoft
2011-08-09 20:06:44 -------- d-----w- c:\program files\Total Video Converter
2011-08-09 18:11:03 -------- d-----w- c:\users\nedim\appdata\local\{2E8A816D-38ED-4968-9878-BFA912BEA677}
2011-08-09 18:10:29 -------- d-----w- c:\users\nedim\appdata\local\{22ACEC22-FABE-4E51-BA4E-9B40CC002A3D}
2011-08-08 15:34:11 -------- d-----w- c:\users\nedim\appdata\local\{EF76A090-FEE6-4C4D-8FCA-BDDF7E7B42E5}
2011-08-08 15:33:47 -------- d-----w- c:\users\nedim\appdata\local\{882130AF-F4B8-422A-8911-B3EC36F4F78F}
2011-08-07 23:35:46 -------- d-----w- c:\users\nedim\appdata\local\{F07167B6-1136-4101-A51C-617C55D29010}
2011-08-07 23:34:47 -------- d-----w- c:\users\nedim\appdata\local\{E5A7DE6D-689B-4FD6-AD1C-134FDA07B88E}
2011-08-07 09:33:44 -------- d-----w- c:\users\nedim\appdata\local\{FDD0121D-162D-49A4-A491-85A74FD10D78}
2011-08-07 09:33:04 -------- d-----w- c:\users\nedim\appdata\local\{7DF111BF-84FD-4B57-8CF3-4184494EFE82}
2011-08-06 13:53:27 -------- d-----w- c:\users\nedim\appdata\local\{1DC64BD4-2BBA-4835-A56B-CE4986A8BB03}
2011-08-06 13:53:06 -------- d-----w- c:\users\nedim\appdata\local\{2C60546E-6B28-4CE0-9B80-D2A4CB97EC2C}
2011-08-05 21:44:41 -------- d-----w- c:\users\nedim\appdata\local\{401321C0-0203-425A-9916-9009149C8E4A}
2011-08-05 21:44:12 -------- d-----w- c:\users\nedim\appdata\local\{81C41A2E-04A2-42A6-BA1D-621EB3E253F6}
2011-08-05 09:42:25 -------- d-----w- c:\users\nedim\appdata\local\{8E410739-44B6-4065-BAA4-D6540D912F1A}
2011-08-05 09:42:05 -------- d-----w- c:\users\nedim\appdata\local\{BA83D8BE-DAF6-4423-8D73-20A3B5B965F7}
2011-08-04 21:32:17 -------- d-----w- c:\users\nedim\appdata\local\{C45281CD-08BE-401D-8C76-C51C5DAFE46B}
2011-08-04 21:31:53 -------- d-----w- c:\users\nedim\appdata\local\{4EB72D88-F2C5-4327-85D2-7582E439B96C}
2011-08-04 21:11:34 -------- d-----w- c:\windows\en
2011-08-04 21:07:31 18328 ----a-w- c:\programdata\microsoft\identitycrl\production\ppcrlconfig600.dll
2011-08-04 21:02:27 -------- d-----w- c:\users\nedim\appdata\local\{507A8DDA-46AA-4210-81C9-F6811AD0E3A4}
2011-08-04 21:01:49 -------- d-----w- c:\users\nedim\appdata\local\{1801BD38-AC0F-451B-9707-14F049D8328C}
2011-08-04 09:58:41 -------- d-----w- c:\users\nedim\appdata\local\{1A4714BA-DFCD-4601-974E-13912780119D}
2011-08-03 21:31:38 -------- d-----w- c:\users\nedim\appdata\local\{38CB0EC5-3698-4AD3-BC55-A2790716B9D4}
2011-08-03 21:30:56 -------- d-----w- c:\users\nedim\appdata\local\{F91FE07F-C118-454B-AB5C-4C26DD03BFDA}
2011-08-03 09:40:09 -------- d-----w- c:\users\nedim\appdata\local\{F47D4F86-5CDD-4593-8DB2-7F74F5447491}
2011-08-02 20:50:01 -------- d-----w- c:\users\nedim\appdata\local\{20D9935E-35C1-49C1-8BEB-AF9DF3664D54}
2011-08-02 08:49:31 -------- d-----w- c:\users\nedim\appdata\local\{7E2DDC71-AAC9-4F2C-A4E2-3E985B3DE175}
2011-08-01 14:48:56 -------- d-----w- c:\users\nedim\appdata\local\{A83710C7-6E0D-4E3C-BEE0-7C1673C69338}
2011-07-31 18:46:37 -------- d-----w- c:\users\nedim\appdata\local\{29E5434D-59E6-4802-8E58-91B16B161514}
2011-07-31 09:08:56 -------- d-----w- c:\users\nedim\appdata\local\{669CD0FB-1CC7-4562-8413-B157EB0D74E8}
2011-07-30 16:41:56 -------- d-----w- c:\users\nedim\appdata\local\{6FE5D51F-B59F-46B9-8BA6-FEF8DBA46C21}
2011-07-29 14:15:58 -------- d-----w- c:\users\nedim\appdata\local\{095B2A5A-B24B-49BD-85D3-0ADC2D43EAF0}
2011-07-28 21:05:19 -------- d-----w- c:\users\nedim\appdata\local\{5654A588-7F1B-4460-97C2-5F05857A7A41}
2011-07-28 09:04:48 -------- d-----w- c:\users\nedim\appdata\local\{0CBBF0EB-9484-4153-9F1A-12A871F77384}
2011-07-27 14:39:34 -------- d-----w- c:\users\nedim\appdata\local\{48F9166C-8432-4E7A-AD15-9C9385935E69}
2011-07-26 22:24:55 -------- d-----w- c:\users\nedim\appdata\local\{4E1DDDE1-B531-4C29-9A01-3FF0759E8EC2}
2011-07-26 10:23:49 -------- d-----w- c:\users\nedim\appdata\local\{20ACAB5C-DD5A-4C88-BF6A-8A324C495631}
2011-07-25 08:48:59 -------- d-----w- c:\users\nedim\appdata\local\{750912FB-EC39-4677-811E-161642672953}
2011-07-24 10:02:49 -------- d-----w- c:\users\nedim\appdata\local\{5D31DE70-2E41-41B9-ACD2-0C5FD8846752}
2011-07-23 09:39:12 -------- d-----w- c:\users\nedim\appdata\local\{489D0440-4354-4DE2-B380-A4C2FA3B1384}
2011-07-22 09:26:59 -------- d-----w- c:\users\nedim\appdata\local\{B90FC543-6CCF-4164-A07C-29A889467F1D}
2011-07-21 17:19:57 -------- d-----w- c:\users\nedim\appdata\local\PopCap Games
.
==================== Find3M ====================
.
2011-06-28 22:05:38 1700352 ----a-w- c:\windows\system32\gdiplus.dll
2011-06-28 22:05:38 1060864 ----a-w- c:\windows\system32\mfc71.dll
2011-06-17 10:36:22 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-05-30 05:16:20 1025824 ----a-w- c:\windows\system32\drivers\vbcorent.sys
.
============= FINISH: 14:08:32,23 ===============



mycity.rs/must-login.png
mycity.rs/must-login.png
mycity.rs/must-login.png
mycity.rs/must-login.png

• 2Ovo se svidja korisnicima: ThePhilosopher, EkatarinaVelika
  
  Registruj se da bi pohvalio/la poruku!

Zdravo,

Idi u Control Panel i deinstaliraj GamePlayLabs Plugin.

Kad to uradis, onda:

Preuzmi instalaciju za program Malwarebytes Anti-Malware sa sledećeg linka:
http://www.besttechie.net/tools/mbam-setup.exe

Dvoklikom pokreni instalaciju - na samom kraju procesa, proveri da su obeležene opcije:
Update Malwarebytes' Anti-Malware;
Launch Malwarebytes Anti-Malware;
a zatim klikni Finish.

Nakon završenog ažuriranja program će se pokrenuti.

Izaberi opciju Perform Quick Scan i klikni Scan.

Po završetku procesa klikni OK, Show Results: u listi detektovanog malware-a, obeleži sve stavke i klikni Remove Selected.

Po završetku procesa, logfile će se otvoriti u Notepad-u; iskopiraj ga u temu na forumu.
Ukoliko program zatraži restart kako bi se završio proces čišćenja, obavezno ga dozvoliti.

Napomena: ako dođe do restarta na kraju procesa čišćenja, logfile će biti dostupan na Logs kartici (obeleži ga i klikni Open).

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ako je to folder koji se nalazio na sljedecoj lokaciji (C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\Logs), onog dugackog loga koji mi je izbacio prije nego je trazi restart nema. Inace Malwarebytes je nasao nekih sest malwarea i sve ih obirsao, a cim sam deinstalirao one "GamePlayLabs" plugine, ona poruka pri otvaranju Google Chroma se vise nije pojavljivala.

• 1Ovo se svidja korisniku: EkatarinaVelika
  
  Registruj se da bi pohvalio/la poruku!

Jesi uradio kako pise u napomeni?

Napomena: ako dođe do restarta na kraju procesa čišćenja, logfile će biti dostupan na Logs kartici (obeleži ga i klikni Open).

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ahaaaa... Ima vise ovih logova, valjda je to taj koji tebi treba.


Malwarebytes' Anti-Malware 1.51.1.1800
malwarebytes.org

Database version: 7521

Windows 6.1.7600
Internet Explorer 9.0.8080.16413

20.8.2011 22:58:01
mbam-log-2011-08-20 (22-58-01).txt

Scan type: Quick scan
Objects scanned: 157322
Time elapsed: 21 minute(s), 30 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 4
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{984A9162-8891-4D19-8CFE-17648BB4E1EC} (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO.1 (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\BHO.GamePlayLabsBHO (Spyware.GamePlayLabs) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Win\lsass.exe (Worm.AutoIT) -> Quarantined and deleted successfully.
c:\Win\names.txt (Worm.AutoIT) -> Quarantined and deleted successfully.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

- Preuzmi USBNoRisk na Desktop i pokreni ga duplim klikom na ikonicu programa.
- Sacekaj koji sekund dok program izvrsi inicijalno skeniranje.
- Ubacuj sve USB memorijske uredjaje redom u USB slot i svaki zadrzi u slotu po 10 sekundi.
- Ukoliko imas vise uredjaja za proveru, onda na parcetu papira zapisi kojim redom su ubacivani jer ce nam kasnije trebati taj podatak
- Kada zavrsis sa svim uredjajima, klikni desno dugme misa na sred prozora programa i odaberi opciju Save scrambled log. To ce automatski otvoriti log u Notepadu. Iskopiraj nam taj log iz Notepada na forum.

Objasnjenje: U USB memorijske uredjaje spadaju svi oni uredjaji koji po prikljucivanju na kompjuter dobijaju svoju oznaku particije. Tu spadaju USB flash drajvovi, eksterni hard-diskovi, memorijske kartice, MP3 i MP4 plejeri, neki mobilni telefoni, neki GPS (navigacioni) uredjaji itd.