Prozori prijavljuju grešku

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Pre izvesnog vremena, pojavljivala su se tri proyora, prijavljujuči grešku.
http://www.mycity.rs/Cekaonica/Odakle-poceti-3.html
Ovde sam dala opis problema.
.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2012-11-20.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 12/27/2008 2:06:49 PM
System Uptime: 5/12/2013 3:11:24 PM (1 hours ago)
.
Motherboard: Gigabyte Technology Co., Ltd. | | EP31-DS3L
Processor: Intel Pentium III Xeon processor | Socket 775 | 2499/200mhz
.
==== Disk Partitions =========================
.
C: is FIXED (NTFS) - 78 GiB total, 12.258 GiB free.
D: is FIXED (NTFS) - 155 GiB total, 154.04 GiB free.
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
RP1096: 2/25/2013 1:47:54 PM - Revo Uninstaller's restore point - Paint.NET v3.5.10
RP1097: 2/25/2013 1:48:04 PM - Removed Paint.NET v3.5.10
RP1098: 2/25/2013 1:50:00 PM - Revo Uninstaller's restore point - Comodo Dragon
RP1099: 2/25/2013 1:50:58 PM - Revo Uninstaller's restore point - Comodo Dragon
RP1100: 2/26/2013 9:49:45 PM - System Checkpoint
RP1101: 2/28/2013 11:49:16 AM - System Checkpoint
RP1102: 3/2/2013 6:52:58 AM - System Checkpoint
RP1103: 3/3/2013 8:43:47 AM - System Checkpoint
RP1104: 3/4/2013 10:45:29 AM - System Checkpoint
RP1105: 3/5/2013 11:27:00 AM - System Checkpoint
RP1106: 3/6/2013 11:35:12 AM - System Checkpoint
RP1107: 3/7/2013 12:52:31 PM - System Checkpoint
RP1108: 3/8/2013 1:12:38 PM - System Checkpoint
RP1109: 3/8/2013 1:36:54 PM - Installed Magic Skin Filter
RP1110: 3/10/2013 6:05:13 AM - System Checkpoint
RP1111: 3/11/2013 9:09:11 AM - System Checkpoint
RP1112: 3/12/2013 10:36:08 AM - System Checkpoint
RP1113: 3/12/2013 4:06:50 PM - Revo Uninstaller's restore point - AthTek RegistryCleaner v2.0
RP1114: 3/12/2013 4:07:40 PM - Revo Uninstaller's restore point - AthTek RegistryCleaner v2.0
RP1115: 3/13/2013 7:02:24 PM - System Checkpoint
RP1116: 3/14/2013 7:38:14 PM - System Checkpoint
RP1117: 3/15/2013 11:19:12 PM - System Checkpoint
RP1118: 3/17/2013 6:46:39 AM - System Checkpoint
RP1119: 3/18/2013 7:37:33 AM - System Checkpoint
RP1120: 3/19/2013 8:54:16 AM - System Checkpoint
RP1121: 3/20/2013 9:17:10 AM - System Checkpoint
RP1122: 3/21/2013 11:05:29 PM - System Checkpoint
RP1123: 3/23/2013 6:47:02 AM - System Checkpoint
RP1124: 3/24/2013 8:13:56 AM - System Checkpoint
RP1125: 3/25/2013 10:58:21 PM - System Checkpoint
RP1126: 3/27/2013 9:04:03 AM - System Checkpoint
RP1127: 3/28/2013 10:11:44 AM - System Checkpoint
RP1128: 3/29/2013 11:15:21 AM - System Checkpoint
RP1129: 3/30/2013 11:57:22 AM - System Checkpoint
RP1130: 3/31/2013 3:17:07 PM - System Checkpoint
RP1131: 4/1/2013 11:04:16 PM - System Checkpoint
RP1132: 4/3/2013 6:53:00 AM - System Checkpoint
RP1133: 4/4/2013 7:58:51 PM - System Checkpoint
RP1134: 4/5/2013 10:26:17 PM - System Checkpoint
RP1135: 4/7/2013 10:24:41 PM - System Checkpoint
RP1136: 4/9/2013 7:54:15 PM - System Checkpoint
RP1137: 4/11/2013 3:01:03 PM - System Checkpoint
RP1138: 4/13/2013 11:14:20 PM - System Checkpoint
RP1139: 4/16/2013 8:15:37 AM - System Checkpoint
RP1140: 4/17/2013 7:31:53 PM - System Checkpoint
RP1141: 4/17/2013 9:19:14 PM - Printer Driver Foxit Reader PDF Printer Driver Installed
RP1142: 4/19/2013 8:40:31 AM - System Checkpoint
RP1143: 4/20/2013 11:50:00 AM - System Checkpoint
RP1144: 4/21/2013 12:42:45 PM - System Checkpoint
RP1145: 4/23/2013 1:02:54 AM - System Checkpoint
RP1146: 4/24/2013 8:12:32 AM - System Checkpoint
RP1147: 4/25/2013 9:08:26 PM - System Checkpoint
RP1148: 4/26/2013 9:59:46 PM - System Checkpoint
RP1149: 4/27/2013 10:34:16 PM - System Checkpoint
RP1150: 4/29/2013 9:06:00 AM - System Checkpoint
RP1151: 4/29/2013 12:59:02 PM - Revo Uninstaller's restore point - Magic Skin Filter
RP1152: 4/29/2013 12:59:17 PM - Removed Magic Skin Filter
RP1153: 4/29/2013 1:00:21 PM - Revo Uninstaller's restore point - Wise Disk Cleaner 7.81
RP1154: 4/29/2013 1:01:25 PM - Revo Uninstaller's restore point - Wise Registry Cleaner 7.68
RP1155: 4/29/2013 1:02:29 PM - Revo Uninstaller's restore point - Easter 3D Screensaver 1.0
RP1156: 4/29/2013 1:21:44 PM - Revo Uninstaller's restore point - SoftOrbits Photo Retoucher 1.3
RP1157: 4/30/2013 9:48:47 PM - System Checkpoint
RP1158: 5/1/2013 10:19:25 PM - System Checkpoint
RP1159: 5/2/2013 11:42:51 PM - System Checkpoint
RP1160: 5/4/2013 9:54:55 AM - System Checkpoint
RP1161: 5/5/2013 11:07:29 AM - System Checkpoint
RP1162: 5/6/2013 7:41:10 PM - System Checkpoint
RP1163: 5/7/2013 3:13:44 PM - Revo Uninstaller's restore point - FastStone Capture 7.4
RP1164: 5/7/2013 3:21:00 PM - Installed GeSWall 2.9.2 Freeware
RP1165: 5/10/2013 11:50:50 PM - Revo Uninstaller's restore point - GeSWall 2.9.2 Freeware
RP1166: 5/10/2013 11:51:26 PM - Removed GeSWall 2.9.2 Freeware
RP1167: 5/10/2013 11:52:23 PM - Revo Uninstaller's restore point - GeSWall 2.9.2 Freeware
RP1168: 5/11/2013 12:00:24 AM - Revo Uninstaller's restore point - OSForensics
RP1169: 5/11/2013 12:01:52 AM - Revo Uninstaller's restore point - SpyShelter Personal Free 8.3
RP1170: 5/11/2013 1:24:40 PM - Revo Uninstaller's restore point - Wise Care 365 version 2.44
RP1171: 5/11/2013 1:25:53 PM - Revo Uninstaller's restore point - Wise Care 365 version 2.44
RP1172: 5/11/2013 6:16:18 PM - Revo Uninstaller's restore point - Sticky Password 6.0.8.437
RP1173: 5/11/2013 6:17:34 PM - Revo Uninstaller's restore point - Efficient Password Manager 3.10
.
==== Installed Programs ======================
.
7-Zip 4.65
ACDSee
ACPsoft PDF Converter
Acrobat.com
Adobe AIR
Adobe Flash Player 10 ActiveX
Adobe Flash Player 11 Plugin
Adobe Shockwave Player 11.6
Akamai NetSession Interface
Arabic Made Easy
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
Auslogics Duplicate File Finder
Bonjour
BS.Player FREE
Catalyst Control Center - Branding
Catalyst Control Center Core Implementation
Catalyst Control Center Graphics Full Existing
Catalyst Control Center Graphics Full New
Catalyst Control Center Graphics Light
Catalyst Control Center Graphics Previews Common
Catalyst Control Center HydraVision Full
ccc-core-preinstall
ccc-core-static
ccc-utility
CCC Help English
CCleaner
COMODO Internet Security
doPDF 6.2 printer
Dr Kawashima
Easy MP3 Cutter 3.0
FormatFactory 2.70
Foxit Reader
Free Studio version 5.1.4
Free Video Flip and Rotate version 1.8.10.324
GIMP 2.6.10
Google Chrome
Google Earth
Google Gears
Google Update Helper
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Java 7 Update 11
Java Auto Updater
JavaFX 2.1.1
Junk Mail filter update
K-Lite Codec Pack 4.1.7 (Full)
Lexmark Printable Web
Lexmark Pro700 Series
Lexmark Toolbar
Lexmark Tools for Office
Malwarebytes Anti-Malware version 1.75.0.1300
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Office Access MUI (English) 2007
Microsoft Office Access MUI (English) 2010
Microsoft Office Access Setup Metadata MUI (English) 2007
Microsoft Office Access Setup Metadata MUI (English) 2010
Microsoft Office Excel MUI (English) 2007
Microsoft Office Excel MUI (English) 2010
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove MUI (English) 2010
Microsoft Office Groove Setup Metadata MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2007
Microsoft Office InfoPath MUI (English) 2010
Microsoft Office OneNote MUI (English) 2007
Microsoft Office OneNote MUI (English) 2010
Microsoft Office Outlook MUI (English) 2007
Microsoft Office Outlook MUI (English) 2010
Microsoft Office PowerPoint MUI (English) 2007
Microsoft Office PowerPoint MUI (English) 2010
Microsoft Office Professional Plus 2010
Microsoft Office Proof (English) 2007
Microsoft Office Proof (English) 2010
Microsoft Office Proof (French) 2007
Microsoft Office Proof (French) 2010
Microsoft Office Proof (Spanish) 2007
Microsoft Office Proof (Spanish) 2010
Microsoft Office Proofing (English) 2007
Microsoft Office Proofing (English) 2010
Microsoft Office Publisher MUI (English) 2007
Microsoft Office Publisher MUI (English) 2010
Microsoft Office Shared MUI (English) 2007
Microsoft Office Shared MUI (English) 2010
Microsoft Office Shared Setup Metadata MUI (English) 2007
Microsoft Office Shared Setup Metadata MUI (English) 2010
Microsoft Office Word MUI (English) 2007
Microsoft Office Word MUI (English) 2010
Microsoft Software Update for Web Folders (English) 12
Microsoft Software Update for Web Folders (English) 14
Microsoft SQL Server Desktop Engine (PCTOOLS)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mozilla Firefox 20.0.1 (x86 en-US)
Mozilla Maintenance Service
Mozilla Thunderbird 17.0.2 (x86 sr)
MSVCRT
MSXML 6.0 Parser (KB933579)
Nero 8 Micro 8.3.2.1
PC Connectivity Solution
PDFCreator
pdfforge Toolbar v4.9
PDFZilla V1.2.11
Puran Utilities 2.0
REALTEK GbE & FE Ethernet PCI-E NIC Driver
Realtek High Definition Audio Driver
Revo Uninstaller 1.92
SAMSUNG Mobile Composite Device Software
Samsung Mobile Modem Device Software
SAMSUNG Mobile Modem Driver Set
Samsung Mobile phone USB driver Software
SAMSUNG Mobile USB Modem 1.0 Software
SAMSUNG Mobile USB Modem Software
Samsung New PC Studio
Samsung New PC Studio USB Driver Installer
SAMSUNG USB Mobile Device Software
SamsungConnectivityCableDriver
Segoe UI
Skins
Skype™ 6.3
Spybot - Search & Destroy
Subtitle Workshop 2.51
SUPERAntiSpyware
swMSM
Total Commander (Remove or Repair)
Uninstall 1.0.0.1
USB Video Camera Driver v1.53
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
Vit Registry Fix 9.5.9 (remove only)
VS10RuntimeWin32
WebFldrs XP
Winamp
Windows Driver Package - MobileTop (sshpmdm) Modem (02/23/2007 2.5.0.0)
Windows Driver Package - MobileTop (sshpusb) USB (02/23/2007 2.5.0.0)
Windows Driver Package - Nokia pccsmcfd (10/12/2007 6.85.4.0)
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Mail
Windows Live Messenger
Windows Live Sign-in Assistant
Windows Live Upload Tool
Windows Media Format 11 runtime
Windows Media Player 11
WinRAR archiver
Wise Folder Hider 1.33
Wise PC Engineer 6.4.2
.
==== Event Viewer Messages From Past Week ========
.
5/9/2013 3:50:10 PM, error: Dhcp [1002] - The IP address lease 192.168.1.211 for the Network Card with network address 001FD05B1356 has been denied by the DHCP server 0.0.0.0 (The DHCP Server sent a DHCPNACK message).
5/8/2013 2:26:05 PM, error: Service Control Manager [7011] - Timeout (30000 milliseconds) waiting for a transaction response from the Akamai service.
5/12/2013 2:32:50 PM, error: Service Control Manager [7034] - The SQLAgent$PCTOOLS service terminated unexpectedly. It has done this 1 time(s).
5/12/2013 2:32:50 PM, error: Service Control Manager [7034] - The Office Software Protection Platform service terminated unexpectedly. It has done this 1 time(s).
5/12/2013 2:32:50 PM, error: Service Control Manager [7034] - The Indexing Service service terminated unexpectedly. It has done this 1 time(s).
5/12/2013 2:32:50 PM, error: Service Control Manager [7034] - The COMODO Internet Security Helper Service service terminated unexpectedly. It has done this 1 time(s).
5/10/2013 11:49:03 PM, error: Service Control Manager [7024] - The MSSQLServerADHelper service terminated with service-specific error 3221225572 (0xC0000064).
5/10/2013 11:49:03 PM, error: Service Control Manager [7023] - The Windows Driver Foundation - User-mode Driver Framework service terminated with the following error: A device attached to the system is not functioning.
5/10/2013 11:48:42 PM, error: NETLOGON [3095] - This computer is configured as a member of a workgroup, not as a member of a domain. The Netlogon service does not need to run in this configuration.
.
==== End Of File ===========================
https://www.mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav, Vera555


Nisi dobro ispratila uputstvo za otvaranje teme. Pored attach.txt fali i dds.txt log.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Izvinjavam se, nadam se da je sad dobro.
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 10.5.1
Run by Novi korisnik at 16:05:17 on 2013-05-12
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1022.225 [GMT 2:00]
.
AV: Bitdefender Antivirus Free Edition *Enabled/Updated* {9488E0FA-F058-4673-850E-E755F112BABC}
AV: COMODO Antivirus *Enabled/Updated* {043803A5-4F86-4ef7-AFC5-F6E02A79969B}
FW: *Enabled*
FW: COMODO Firewall *Enabled*
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\System32\SCardSvr.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\COMODO\COMODO Internet Security\cistray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\system32\cisvc.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\system32\FsUsbExService.Exe
C:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\WINDOWS\system32\lxeecoms.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Google\Update\1.3.21.145\GoogleCrashHandler.exe
C:\Program Files\Microsoft Office\Office14\GROOVE.EXE
C:\Program Files\Microsoft SQL Server\MSSQL$PCTOOLS\Binn\sqlservr.exe
C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE
C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\System32\dmadmin.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\COMODO\COMODO Internet Security\cavwp.exe
C:\Program Files\COMODO\COMODO Internet Security\cis.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\System32\svchost.exe -k eapsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\svchost.exe -k dot3svc
C:\WINDOWS\System32\svchost.exe -k HTTPFilter
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\System32\svchost.exe -k Akamai
.
============== Pseudo HJT Report ===============
.
uStart Page = about:blank
uInternet Connection Wizard,ShellNext = hxxp://conn.skype.com/
BHO: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - c:\program files\lexmark toolbar\toolband.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office14\GROOVEEX.DLL
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\oracle\javafx 2.1 runtime\bin\ssv.dll
BHO: Office Document Cache Handler: {B4F3A835-0E21-4959-BA22-42B3008E02FF} - c:\program files\microsoft office\office14\URLREDIR.DLL
BHO: Lexmark Printable Web: {D2C5E510-BE6D-42CC-9F61-E4F939078474} - c:\program files\lexmark printable web\bho.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2ssv.dll
BHO: Google Gears Helper: {E0FEFE40-FBF9-42AE-BA58-794CA7E3FB53} - c:\program files\google\google gears\internet explorer\0.5.36.0\gears.dll
TB: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - c:\program files\lexmark toolbar\toolband.dll
TB: Lexmark Toolbar: {1017A80C-6F09-4548-A84D-EDD6AC9525F0} - c:\program files\lexmark toolbar\toolband.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [OfficeSyncProcess] "c:\program files\microsoft office\office14\MSOSYNC.EXE"
mRun: [COMODO Internet Security] c:\program files\comodo\comodo internet security\cistray.exe
mRun: [BCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices
uPolicies-Explorer: NoDriveTypeAutoRun = dword:221
mPolicies-Explorer: NoDriveTypeAutoRun = dword:28
mPolicies-Windows\System: Allow-LogonScript-NetbiosDisabled = dword:1
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office14\EXCEL.EXE/3000
IE: Free YouTube Download - c:\documents and settings\novi korisnik\application data\dvdvideosoftiehelpers\freeyoutubedownload.htm
IE: Free YouTube to MP3 Converter - c:\documents and settings\novi korisnik\application data\dvdvideosoftiehelpers\freeyoutubetomp3converter.htm
IE: Se&nd to OneNote - c:\progra~1\micros~2\office14\ONBttnIE.dll/105
IE: {09C04DA7-5B76-4EBC-BBEE-B25EAC5965F5} - {0B4350D1-055F-47A3-B112-5F2F2B0D6F08} - c:\program files\google\google gears\internet explorer\0.5.36.0\gears.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll
IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
.
INFO: HKCU has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
.
INFO: HKLM has more than 50 listed domains.
If you wish to scan all of them, select the 'Force scan all domains' option.
.
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{65766D64-DA15-44B6-8306-2B1EADD0DA3B} : DHCPNameServer = 192.168.1.1
Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
Notify: !SASWinLogon - <no file>
Notify: AtiExtEvent - <no file>
Notify: crypt32chain - <no file>
Notify: cryptnet - <no file>
Notify: cscdll - <no file>
Notify: ScCertProp - <no file>
Notify: Schedule - <no file>
Notify: sclgntfy - <no file>
Notify: SensLogn - <no file>
Notify: termsrv - <no file>
Notify: wlballoon - <no file>
AppInit_DLLs= c:\docume~1\alluse~1\applic~1\browse~1\261095~1.52\{c16c1~1\browse~1.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office14\GROOVEEX.DLL
SEH: SABShellExecuteHook Class - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - c:\program files\superantispyware\SASSEH.DLL
Hosts: 127.0.0.1 www.spywareinfo.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\novi korisnik\application data\mozilla\firefox\profiles\mmzu09h3.default-1359031359843\
FF - prefs.js: browser.search.selectedEngine - Ixquick
FF - plugin: c:\documents and settings\novi korisnik\local settings\application data\google\update\1.3.21.135\npGoogleUpdate3.dll
FF - plugin: c:\progra~1\micros~2\office14\NPAUTHZ.DLL
FF - plugin: c:\progra~1\micros~2\office14\NPSPWRAP.DLL
FF - plugin: c:\program files\foxit software\foxit reader\plugins\npFoxitReaderPlugin.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.3.21.145\npGoogleUpdate3.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npFoxitReaderPlugin.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npwachk.dll
FF - plugin: c:\program files\oracle\javafx 2.1 runtime\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\adobe\director\np32dsw_1165635.dll
FF - plugin: c:\windows\system32\adobe\director\np32dsw_1168638.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_6_602_180.dll
.
============= SERVICES / DRIVERS ===============
.
R0 avc3;avc3;c:\windows\system32\drivers\avc3.sys [2013-2-12 622616]
R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-12-16 64288]
R1 cmderd;COMODO Internet Security Eradication Driver;c:\windows\system32\drivers\cmderd.sys [2013-1-16 18528]
R1 cmdGuard;COMODO Internet Security Driver;c:\windows\system32\drivers\cmdGuard.sys [2013-1-16 592384]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2013-1-16 32816]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2012-7-11 116608]
R2 Akamai;Akamai NetSession Interface;c:\windows\system32\svchost.exe -k Akamai [2004-8-4 14336]
R2 cmdAgent;COMODO Internet Security Helper Service;c:\program files\comodo\comodo internet security\cmdagent.exe [2013-1-24 4443912]
R2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2012-8-22 233472]
R2 lxee_device;lxee_device;c:\windows\system32\lxeecoms.exe -service --> c:\windows\system32\lxeecoms.exe -service [?]
R2 MSSQL$PCTOOLS;MSSQL$PCTOOLS;c:\program files\microsoft sql server\mssql$pctools\binn\sqlservr.exe [2005-5-4 9150464]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2012-8-22 36608]
S2 gupdate1c98db12e633070;Google Update Service (gupdate1c98db12e633070);c:\program files\google\update\GoogleUpdate.exe [2009-2-13 133104]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-2-28 161384]
S2 SQLAgent$PCTOOLS;SQLAgent$PCTOOLS;c:\program files\microsoft sql server\mssql$pctools\binn\sqlagent.EXE [2005-5-3 323584]
S3 avckf;avckf;c:\windows\system32\drivers\avckf.sys [2013-2-12 447208]
S3 cmdvirth;COMODO Virtual Service Manager;c:\program files\comodo\comodo internet security\cmdvirth.exe [2013-1-24 127184]
S3 lxeeCATSCustConnectService;lxeeCATSCustConnectService;c:\windows\system32\spool\drivers\w32x86\3\lxeeserv.exe [2012-4-20 98984]
S4 gzflt;gzflt;c:\windows\system32\drivers\gzflt.sys [2013-2-12 162976]
S4 PuranDefrag;PuranDefrag;c:\windows\system32\PuranDefragS.exe [2013-2-11 260992]
.
=============== File Associations ===============
.
ShellExec: Foxit Reader.exe: print="c:\program files\foxit software\foxit reader\Foxit Reader.exe"/p "%1"
ShellExec: Foxit Reader.exe: printto="c:\program files\foxit software\foxit reader\Foxit Reader.exe"/t "%1" "%2" "%3" "%4"
.
=============== Created Last 30 ================
.
2013-05-12 12:32:49 -------- d-----w- C:\Stinger_Quarantine
2013-05-12 12:32:36 -------- d-----w- c:\program files\stinger
2013-05-11 16:08:06 -------- d-----w- c:\program files\VITSOFT
2013-05-01 11:30:31 -------- d-----w- c:\documents and settings\all users\application data\PassMark
.
==================== Find3M ====================
.
2013-04-23 14:04:10 348048 ----a-w- c:\windows\system32\guard32.dll
2013-04-15 17:38:59 32816 ----a-w- c:\windows\system32\drivers\cmdhlp.sys
2013-04-15 17:38:58 592384 ----a-w- c:\windows\system32\drivers\cmdGuard.sys
2013-04-15 17:38:58 18528 ----a-w- c:\windows\system32\drivers\cmderd.sys
2013-04-15 17:38:37 35488 ----a-w- c:\windows\system32\cmdcsr.dll
2013-04-15 17:38:25 276688 ----a-w- c:\windows\system32\cmdvrt32.dll
2013-04-15 17:38:24 40656 ----a-w- c:\windows\system32\cmdkbd32.dll
2013-04-04 12:50:32 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2013-03-22 17:19:21 693976 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-03-22 17:19:20 73432 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-02-11 22:53:19 17308 ----a-w- c:\documents and settings\all users\application data\1360623193.bdinstall.bin
2013-02-11 22:51:57 17308 ----a-w- c:\documents and settings\all users\application data\1360623107.bdinstall.bin
2013-02-11 22:50:38 43522 ----a-w- c:\documents and settings\all users\application data\1360622972.bdinstall.bin
2013-02-11 22:49:31 22566 ----a-w- c:\documents and settings\all users\application data\1360622968.bdinstall.bin
2013-02-11 22:10:26 241992 ----a-w- c:\windows\system32\drivers\avchv.sys
2013-02-11 22:06:32 182930 ----a-w- c:\documents and settings\all users\application data\1360620177.bdinstall.bin
2013-02-11 21:57:51 30063 ----a-w- c:\documents and settings\all users\application data\1360619833.bdinstall.bin
2013-02-11 21:55:17 29866 ----a-w- c:\documents and settings\all users\application data\1360619706.bdinstall.bin
2013-02-11 21:50:02 29937 ----a-w- c:\documents and settings\all users\application data\1360619390.bdinstall.bin
2013-02-11 21:47:41 30260 ----a-w- c:\documents and settings\all users\application data\1360618700.bdinstall.bin
2013-02-11 20:51:20 30060 ----a-w- c:\documents and settings\all users\application data\1360615854.bdinstall.bin
2013-02-11 20:49:18 30265 ----a-w- c:\documents and settings\all users\application data\1360615694.bdinstall.bin
.
============= FINISH: 16:06:20.43 ===============

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Preuzmite program GMER sa donjeg linka na Desktop:


GMER download
Kliknite dati link;
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberite Desktop i kliknite Save.


Dvoklikom pokrenite GMER.
Sačekajte da se završi uvodno skeniranje - ukoliko se pojavi bilo kakav upit, kliknite No;

kliknite Scan i sačekajte da skeniranje bude završeno;

kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom Gmer1);

kliknite desnim tasterom u prozor programa Gmer i odaberite Options > 3rd party - kliknite Scan;

po završetku skeniranja kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom Gmer2);

kliknite taster >>> i odaberite Autostart karticu;

po završetku kratkotrajnog skeniranja, kliknite Copy;

otvorite Notepad i u njega postavite kopirani tekst - izveštaj sačuvajte na Desktop (pod nazivom Gmer3);

Slikoviti prikaz postupka

Priložite sva tri izveštaja uz poruku korišćenjem opcije Prikači fajl.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Čim pokrenem GMER, kompjuter se restartuje...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Preuzmite program RootRepeal sa jednog od sledećih linkova na Desktop:


RootRepeal mirror #1
RootRepeal mirror #2
RootRepeal mirror #3

Kliknite desnim tasterom na link i odaberite opciju Save Target As... (Save Link As..., Save Linked Content As... ili sličnu);
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberite Desktop i kliknite Save.



Raspakujte RootRepeal.zip u neki folder (uputstvo).
Dvoklikom pokrenite RootRepeal.exe;

odaberite Report karticu (klikom na Report taster, dole, desno);

kliknite Scan;

u prozoru koji se otvori (Select Scan), obeležite kućice ispred svih stavki i kliknite OK;

u narednom prozoru (Select Drives) obeležite kućicu ispred sistemskog diska (obično C:\) i kliknite OK.

po završetku, izveštaj (koji će biti automatski sačuvan na sistemskom disku kao RootRepeal report datum (vreme).txt) će se otvoriti u Notepad-u.

Slikoviti prikaz postupka

Priložite kreirani izveštaj uz poruku korišćenjem opcije Prikači fajl.

Napomena: tipična lokacija izveštaja je C:\RootRepeal report datum (vreme).txt [datum (vreme) - datum i vreme skeniranja)].

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Evo izveštaja Root RepealČ
https://www.mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Preuzmi sUBs-ov ComboFix sa sledeće adrese na Desktop:


Bleeping Computer
Klikni desnim tasterom na link i odaberi opciju Save Target As... (Save Link As..., Save Linked Content As... ili sličnu);
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberi Desktop i klikni Save.



Kada preuzimanje programa bude završeno:
deaktiviraj zaštitni softver (uputstvo);
zatvori pokrenute programe;
dvoklikom pokreni program ComboFix;
u prozoru koji se otvori klikni "I Agree".
U toku rada, ComboFix će:proveriti postoji li novija verzija programa:
klikni Yes ako bude ponuđeno preuzimanje iste.ako Recovery Console nije instalirana, ponuditi instalaciju:
obavezno prihvati klikom na Yes i isprati postupak.postaviti/dati određeni broj upita/obaveštenja:
prihvati klikom na Yes ili OK.po potrebi, restartovati Windows (više puta);
na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Iskopiraj izveštaj koji je ComboFix napravio u temu na forumu:
klikni desnim tasterom miša u prozor Notepad-a i izaberi Select All;
klikni desnim tasterom miša na obeleženi tekst i izaberi Copy;
klikni desnim tasterom miša u polje za pisanje poruke i izaberi Paste.


Napomena:Izveštaj će biti sačuvan pod nazivom ComboFix.txt na sistemskoj particiji (tipična lokacija: C:\ComboFix.txt);
Ukoliko nakon slanja poruke primetiš da izveštaj nije kompletan, iskoristi opciju Prikači fajl za prilaganje file-a C:\ComboFix.txt uz poruku;
Nemoj kliktati u okviru ComboFix prozora dok radi jer to može usporiti rad alata;
Nemoj ponovo pokretati ComboFix na svoju ruku - javi se u temi bilo kakav problem da imaš tokom prvog pokretanja alata;
Ako nakon restarta dobijaš grešku prilikom startovanja pojedinih programa da su označeni za brisanje (Illegal operation attempted on a registry key that has been marked for deletion), onda ponovo restartuj sistem i to ce rešiti problem.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

ComboFix je počeo da skenira, i pojavilo se ovo

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ukoliko si sigurno deaktivirala Real Time zastitu Bitdefender-a, pritisni Ok.