Virus sa Facebook-aa

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 26 Avg 2011 11:03

Imam problem pre pet dana sam dobila poruku na facebook-u bila je poslana kao video...Kada sam je otvorila islo je da skinem above flash player i skinula i posle toga mi se pc restartovao sam...Kada se ukljucio pc otisla sam na fb..prvo mije jako sporo islo logovanje kada sam uspela da udjem onda od jednom svi koji su bili online su poceli da mi se javljaju a sa mog profila svima salje prvo oni meni tipa hi...cao...i onda automatski salje want to laugh )...nisam znala sta da radim ( Posle toga 2 dana nisam mogla da se ulogujem uopste mi nije otvaralo i pojavljivalo mi se Sorry, we are experiencing temporary technical problem, please check back later...Juce mije uspelo da otvori fb alji prvo da nekim koracima da prepznam osobe koje imam na fb na slikama,bilo je 5 koraka ne znam kako je islo po redu znam da je 3 bio da instaliram ovaj progam McA Fee Scan And Repair kako bi mi obrisao te viruse koje imam na fb-u i pronasao je 26 i obrisao ih je pa mije posle tog koraka trazilo da menjam password i onda zadnji korak da idem da pocetnu stranu da se ulogujem medjutim nece izlazi mi ovo

Oops! Google Chrome could not connect to [Link mogu videti samo ulogovani korisnici]
Try reloading: [Link mogu videti samo ulogovani korisnici]­facebook.­com
Additional suggestions:
Access a cached copy of [Link mogu videti samo ulogovani korisnici]­facebook.­com

Ne snalazim se bas najbolje na pc-u ali potrudicu se da sve korake odradim,uz vasu pomoc )

Windows koji koristim je 32-bitni. Ner koji koristim je Telekom At,jacina net-a je 54.0 Mbit/s

Imala sam zastitu Avira,i juce sam je obrisala i instalirala sam Malwarebytes`Anti Malware i skenirala pc obrisali su se svi virusi sa pc-a ali ne znam da li se obrisao i taj sa fb-a jer i dalje nemogu da udjem na fb.

Hmmm drugi korak preuzimanje dds...Preuzimam ga preko google chrome...i onda mi ide link u download folder i onda ga ja prebacim na desktop i otvorim ga i pojavi mi se prozor sa tekstom medjutim ne znam sta da radim jer ne znam kako da ga kopiram i snimim jer mije pc na nemackom jeziku (

Dopuna: 26 Avg 2011 11:15

Vec tri puta sad za redom iskljucujem pc jer kad otvorim taj dds sve mi blokira i nemogu nista da pokrenem...

Bas me nece !!

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav.

Hajde da probamo ovako.

Preuzmi program OTL sa sledece adrese:
OTL download

Dvoklikom pokreni OTL;

klikni Run Scan;

po završetku skeniranja, izveštaj (koji će biti automatski sačuvan na Desktop-u kao OTL.Txt) će se otvoriti u Notepad-u.

Snimi izvestaj na desktop (vidi sliku):





Priloži izveštaj OTL.Txt uz poruku korišćenjem opcije Prikači fajl.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uff...meni je winodws xp i nemogu da se snadjem kao na slici...jojjjjjjjjjjjjjjjjj dali postoji mogucnost da promenim jezik na pc-u ??

• 1Ovo se svidja korisniku: mpman
  
  Registruj se da bi pohvalio/la poruku!

Isto je sve, samo isprati redosled kao na slici. Kod XP-a je ovo opcija za desktop

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 26 Avg 2011 12:39

OTL logfile created on: 25.08.2011 12:23:04 - Run 1
OTL by OldTimer - Version 3.2.26.5 Folder = C:\Dokumente und Einstellungen\pc\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

502,48 Mb Total Physical Memory | 96,32 Mb Available Physical Memory | 19,17% Memory free
1,20 Gb Paging File | 0,64 Gb Available in Paging File | 53,27% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 55,89 Gb Total Space | 48,98 Gb Free Space | 87,64% Space Free | Partition Type: NTFS

Computer Name: PC | User Name: pc | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011.08.25 11:44:19 | 000,580,096 | ---- | M] (OldTimer Tools) -- C:\Dokumente und Einstellungen\pc\Eigene Dateien\Downloads\OTL.exe
PRC - [2011.08.07 19:17:32 | 000,273,544 | ---- | M] (RealNetworks, Inc.) -- C:\Programme\Real\RealPlayer\Update\realsched.exe
PRC - [2011.07.06 19:52:38 | 000,449,584 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2011.07.06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2011.06.15 17:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) -- C:\Programme\Microsoft\BingBar\SeaPort.EXE
PRC - [2010.08.11 18:32:52 | 000,151,832 | ---- | M] (Fujitsu Technology Solutions) -- C:\Programme\Fujitsu\DeskView\Common\FscHMCfg.exe
PRC - [2010.07.12 18:32:48 | 000,074,752 | ---- | M] (Nullsoft, Inc.) -- C:\Programme\Winamp\winampa.exe
PRC - [2010.05.11 17:43:48 | 006,061,400 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\Vid\Vid.exe
PRC - [2010.05.07 19:35:22 | 000,165,208 | ---- | M] (Logitech Inc.) -- C:\Programme\Logitech\LWS\Webcam Software\LWS.exe
PRC - [2010.05.07 19:34:58 | 000,168,792 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\CameraHelperShell.exe
PRC - [2009.06.26 18:21:00 | 000,757,248 | ---- | M] (Microsoft Corporation) -- C:\WINXP\vVX1000.exe
PRC - [2009.02.27 08:54:22 | 000,870,672 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Intel\WiFi\bin\EvtEng.exe
PRC - [2009.02.27 08:22:10 | 001,368,064 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Intel\WiFi\bin\ZCfgSvc.exe
PRC - [2009.02.27 07:55:20 | 000,909,312 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Intel\WiFi\bin\S24EvMon.exe
PRC - [2009.02.27 07:40:52 | 001,202,448 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\iFrmewrk.exe
PRC - [2009.02.27 07:38:38 | 000,473,360 | ---- | M] (Intel(R) Corporation) -- C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\RegSrvc.exe
PRC - [2008.04.14 14:00:00 | 001,036,800 | ---- | M] (Microsoft Corporation) -- C:\WINXP\explorer.exe
PRC - [2007.02.13 00:43:44 | 000,065,536 | ---- | M] (O2Micro International) -- C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe
PRC - [2006.01.20 13:34:26 | 000,544,768 | ---- | M] (Motorola Inc.) -- C:\WINXP\sm56hlpr.exe


========== Modules (No Company Name) ==========

MOD - [2010.05.11 17:45:18 | 000,138,072 | ---- | M] () -- C:\Programme\Logitech\Vid\plugins\imageformats\qjpeg4.dll
MOD - [2010.05.11 17:44:48 | 000,035,160 | ---- | M] () -- C:\Programme\Logitech\Vid\plugins\imageformats\qico4.dll
MOD - [2010.05.11 17:44:22 | 000,029,016 | ---- | M] () -- C:\Programme\Logitech\Vid\plugins\imageformats\qgif4.dll
MOD - [2010.05.11 17:42:22 | 000,027,480 | ---- | M] () -- C:\Programme\Logitech\Vid\SDL.dll
MOD - [2010.05.11 17:42:10 | 000,363,864 | ---- | M] () -- C:\Programme\Logitech\Vid\qtxml4.dll
MOD - [2010.05.11 17:42:00 | 011,311,960 | ---- | M] () -- C:\Programme\Logitech\Vid\QtWebKit4.dll
MOD - [2010.05.11 17:41:48 | 000,200,024 | ---- | M] () -- C:\Programme\Logitech\Vid\qtsql4.dll
MOD - [2010.05.11 17:41:36 | 000,475,480 | ---- | M] () -- C:\Programme\Logitech\Vid\QtOpenGL4.dll
MOD - [2010.05.11 17:41:24 | 000,969,048 | ---- | M] () -- C:\Programme\Logitech\Vid\QtNetwork4.dll
MOD - [2010.05.11 17:41:14 | 007,704,408 | ---- | M] () -- C:\Programme\Logitech\Vid\QtGui4.dll
MOD - [2010.05.11 17:41:02 | 002,141,016 | ---- | M] () -- C:\Programme\Logitech\Vid\QtCore4.dll
MOD - [2010.05.11 17:40:50 | 000,291,672 | ---- | M] () -- C:\Programme\Logitech\Vid\phonon4.dll
MOD - [2010.05.07 19:37:50 | 000,290,648 | ---- | M] () -- C:\Programme\Gemeinsame Dateien\LogiShrd\LWSPlugins\LWS\Applets\CameraHelper\DevManagerCore.dll
MOD - [2010.05.07 19:37:40 | 000,126,808 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\ImageFormats\QJpeg4.dll
MOD - [2010.05.07 19:37:40 | 000,027,480 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\ImageFormats\QGif4.dll
MOD - [2010.05.07 19:36:54 | 000,340,824 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTXml4.dll
MOD - [2010.05.07 19:36:20 | 000,921,944 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QtNetwork4.dll
MOD - [2010.05.07 19:35:56 | 007,954,776 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTGui4.dll
MOD - [2010.05.07 19:35:44 | 002,143,576 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\QTCore4.dll
MOD - [2010.05.07 19:34:58 | 000,168,792 | ---- | M] () -- C:\Programme\Logitech\LWS\Webcam Software\CameraHelperShell.exe
MOD - [2009.02.27 07:51:14 | 000,200,704 | ---- | M] () -- C:\Programme\Intel\WiFi\bin\iWMSProv.dll
MOD - [2008.04.14 14:00:00 | 000,014,336 | ---- | M] () -- C:\WINXP\system32\msdmo.dll
MOD - [2006.01.20 13:34:30 | 000,049,152 | ---- | M] () -- C:\WINXP\sm56cht.dll
MOD - [2006.01.20 13:34:28 | 000,061,440 | ---- | M] () -- C:\WINXP\sm56fra.dll
MOD - [2006.01.20 13:34:28 | 000,053,248 | ---- | M] () -- C:\WINXP\sm56jpn.dll
MOD - [2006.01.20 13:34:28 | 000,049,152 | ---- | M] () -- C:\WINXP\sm56chs.dll
MOD - [2006.01.20 13:34:26 | 000,069,632 | ---- | M] () -- C:\WINXP\sm56spn.dll
MOD - [2006.01.20 13:34:26 | 000,069,632 | ---- | M] () -- C:\WINXP\sm56itl.dll
MOD - [2006.01.20 13:34:26 | 000,069,632 | ---- | M] () -- C:\WINXP\sm56eng.dll
MOD - [2006.01.20 13:34:26 | 000,069,632 | ---- | M] () -- C:\WINXP\sm56brz.dll
MOD - [2006.01.20 13:34:26 | 000,061,440 | ---- | M] () -- C:\WINXP\sm56ger.dll
MOD - [2005.10.19 12:56:28 | 000,125,952 | ---- | M] () -- C:\Programme\WinRAR\RarExt.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [On_Demand | Stopped] -- -- (McAfee ScanAndRepair Svc)
SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - File not found [Auto | Stopped] -- -- (AntiVirService)
SRV - File not found [Auto | Stopped] -- -- (AntiVirSchedulerService)
SRV - [2011.07.07 19:31:08 | 000,195,336 | ---- | M] (Microsoft Corporation.) [On_Demand | Stopped] -- C:\Programme\Microsoft\BingBar\BBSvc.EXE -- (BBSvc)
SRV - [2011.07.06 19:52:38 | 000,366,640 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Programme\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2011.06.15 17:33:20 | 000,249,648 | ---- | M] (Microsoft Corporation) [Auto | Running] -- C:\Programme\Microsoft\BingBar\SeaPort.EXE -- (BBUpdate)
SRV - [2010.08.11 18:32:52 | 000,151,832 | ---- | M] (Fujitsu Technology Solutions) [Auto | Running] -- C:\Programme\Fujitsu\DeskView\Common\FscHMCfg.exe -- (FscHmCfg)
SRV - [2009.02.27 08:54:22 | 000,870,672 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Intel\WiFi\bin\EvtEng.exe -- (EvtEng) Intel(R)
SRV - [2009.02.27 07:55:20 | 000,909,312 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Intel\WiFi\bin\S24EvMon.exe -- (S24EventMonitor) Intel(R)
SRV - [2009.02.27 07:38:38 | 000,473,360 | ---- | M] (Intel(R) Corporation) [Auto | Running] -- C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\RegSrvc.exe -- (RegSrvc) Intel(R)
SRV - [2007.02.13 00:43:44 | 000,065,536 | ---- | M] (O2Micro International) [Auto | Running] -- C:\Programme\O2Micro Flash Memory Card Driver\o2flash.exe -- (o2flash)


========== Driver Services (SafeList) ==========

DRV - [2011.07.06 19:52:42 | 000,022,712 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINXP\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2011.06.30 14:45:27 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINXP\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011.06.30 14:45:27 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINXP\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2010.08.11 17:24:28 | 000,012,800 | ---- | M] (Fujitsu Technology Solutions) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\FscTime.sys -- (FscTime)
DRV - [2010.08.11 17:24:18 | 000,011,008 | ---- | M] (Fujitsu Technology Solutions) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\FscEfDmi.sys -- (FscEfDmi)
DRV - [2010.08.11 17:24:14 | 000,010,752 | ---- | M] (Fujitsu Technology Solutions) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\FscCpuid.sys -- (FscCpuid)
DRV - [2010.08.11 17:24:10 | 000,009,728 | ---- | M] (Fujitsu Technology Solutions) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\FscCmos.sys -- (FscCmos)
DRV - [2010.08.11 17:23:56 | 000,014,848 | ---- | M] (Fujitsu Technology Solutions) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\FlashDrv.sys -- (FlashDrv)
DRV - [2010.06.17 15:27:02 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINXP\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010.04.28 07:44:02 | 000,054,760 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINXP\system32\drivers\fssfltr_tdi.sys -- (fssfltr)
DRV - [2009.09.19 16:50:34 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ZTEusbser6k.sys -- (ZTEusbser6k)
DRV - [2009.09.19 16:50:34 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ZTEusbnmea.sys -- (ZTEusbnmea)
DRV - [2009.09.19 16:50:34 | 000,105,088 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\ZTEusbmdm6k.sys -- (ZTEusbmdm6k)
DRV - [2009.09.04 11:41:08 | 000,009,216 | ---- | M] (ZTE Incorporated) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\massfilter.sys -- (massfilter)
DRV - [2009.06.26 18:21:02 | 001,956,096 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\VX1000.sys -- (VX1000)
DRV - [2009.03.25 15:29:52 | 000,130,432 | ---- | M] (Realtek Semiconductor Corporation ) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\Rtnicxp.sys -- (RTL8023xp)
DRV - [2008.08.13 18:23:56 | 000,011,904 | ---- | M] (Intel Corporation) [Kernel | Auto | Running] -- C:\WINXP\system32\drivers\s24trans.sys -- (s24trans)
DRV - [2008.04.13 21:05:40 | 000,020,992 | ---- | M] (Realtek Semiconductor Corporation) [Kernel | On_Demand | Stopped] -- C:\WINXP\system32\drivers\RTL8139.sys -- (rtl8139) NT-Treiber für Realtek RTL8139(A/B/C)
DRV - [2008.01.07 15:36:16 | 002,216,064 | R--- | M] (Intel® Corporation) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\w29n51.sys -- (w29n51) Intel(R)
DRV - [2006.01.20 13:38:02 | 000,930,308 | ---- | M] (Motorola Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\smserial.sys -- (smserial)
DRV - [2004.01.06 11:10:22 | 000,256,688 | ---- | M] (SigmaTel, Inc.) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\stac97.sys -- (STAC97) Audio Driver (WDM)
DRV - [2001.08.18 03:35:52 | 000,035,913 | ---- | M] (SMC) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\smcirda.sys -- (SMCIRDA)
DRV - [2001.08.01 22:00:22 | 000,005,248 | R--- | M] (FUJITSU LIMITED) [Kernel | On_Demand | Running] -- C:\WINXP\system32\drivers\fuj02b1.sys -- (FUJ02B1)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKLM\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Programme\Winamp Toolbar\winamptb.dll (AOL Inc.)

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\WINXP\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [Link mogu videti samo ulogovani korisnici]
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 10 D8 ED 25 FA 54 CC 01 [binary data]
IE - HKCU\..\URLSearchHook: {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Programme\Winamp Toolbar\winamptb.dll (AOL Inc.)
IE - HKCU\..\URLSearchHook: {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
IE - HKCU\..\URLSearchHook: {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Programme\Microsoft Silverlight\4.0.60531.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Programme\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: c:\WINXP\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=12.0.1.647: C:\Programme\Real\RealPlayer\Netscape6\nppl3260.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprjplug;version=12.0.1.647: C:\Programme\Real\RealPlayer\Netscape6\nprjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpchromebrowserrecordext;version=12.0.1.660: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprpchromebrowserrecordext.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprphtml5videoshim;version=12.0.1.660: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\MozillaPlugins\nprphtml5videoshim.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=12.0.1.660: C:\Programme\Real\RealPlayer\Netscape6\nprpjplug.dll (RealNetworks, Inc.)
FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=8: C:\Dokumente und Einstellungen\pc\Lokale Einstellungen\Anwendungsdaten\Google\Update\1.2.183.39\npGoogleOneClick8.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}: C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\Firefox\Ext [2011.08.07 19:18:08 | 000,000,000 | ---D | M]


O1 HOSTS File: ([2011.08.23 09:56:07 | 000,202,984 | -H-- | M]) - C:\WINXP\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 facebook.com
O1 - Hosts: 127.0.0.1 [Link mogu videti samo ulogovani korisnici]
O1 - Hosts: 127.0.0.1 af-za.facebook.com
O1 - Hosts: 127.0.0.1 az-az.facebook.com
O1 - Hosts: 127.0.0.1 id-id.facebook.com
O1 - Hosts: 127.0.0.1 ms-my.facebook.com
O1 - Hosts: 127.0.0.1 bs-ba.facebook.com
O1 - Hosts: 127.0.0.1 ca-es.facebook.com
O1 - Hosts: 127.0.0.1 cs-cz.facebook.com
O1 - Hosts: 127.0.0.1 cy-gb.facebook.com
O1 - Hosts: 127.0.0.1 da-dk.facebook.com
O1 - Hosts: 127.0.0.1 de-de.facebook.com
O1 - Hosts: 127.0.0.1 et-ee.facebook.com
O1 - Hosts: 127.0.0.1 en-gb.facebook.com
O1 - Hosts: 127.0.0.1 es-la.facebook.com
O1 - Hosts: 127.0.0.1 eo-eo.facebook.com
O1 - Hosts: 127.0.0.1 eu-es.facebook.com
O1 - Hosts: 127.0.0.1 tl-ph.facebook.com
O1 - Hosts: 127.0.0.1 fo-fo.facebook.com
O1 - Hosts: 127.0.0.1 fr-fr.facebook.com
O1 - Hosts: 127.0.0.1 fy-nl.facebook.com
O1 - Hosts: 127.0.0.1 ga-ie.facebook.com
O1 - Hosts: 127.0.0.1 gl-es.facebook.com
O1 - Hosts: 127.0.0.1 ko-kr.facebook.com
O1 - Hosts: 50053 more lines...
O2 - BHO: (Winamp Toolbar Loader) - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Programme\Winamp Toolbar\winamptb.dll (AOL Inc.)
O2 - BHO: (Babylon toolbar helper) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Programme\BabylonToolbar\BabylonToolbar\1.4.31.2\bh\BabylonToolbar.dll (Babylon BHO)
O2 - BHO: (RealPlayer Download and Record Plugin for Internet Explorer) - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll (RealPlayer)
O2 - BHO: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O2 - BHO: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O2 - BHO: (Windows Live pomagač za prijavljivanje) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (DealPly) - {A6174F27-1FFF-E1D6-A93F-BA48AD5DD448} - C:\Programme\DealPly\DealPlyIE.dll (DealPly)
O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Programme\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Conduit Engine ) - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Programme\ConduitEngine\prxConduitEngine.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (DVDVideoSoftTB Toolbar) - {872b5b88-9db5-4310-bdd0-ac189557e5f5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Programme\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Programme\BabylonToolbar\BabylonToolbar\1.4.31.2\BabylonToolbarTlbr.dll (Babylon Ltd.)
O3 - HKLM\..\Toolbar: (softonic-de3 Toolbar) - {cc05a3e3-64c3-4af2-bfc1-af0d66b69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Winamp Toolbar) - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Programme\Winamp Toolbar\winamptb.dll (AOL Inc.)
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (DVDVideoSoftTB Toolbar) - {872B5B88-9DB5-4310-BDD0-AC189557E5F5} - C:\Programme\DVDVideoSoftTB\prxtbDVDV.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (softonic-de3 Toolbar) - {CC05A3E3-64C3-4AF2-BFC1-AF0D66B69065} - C:\Programme\softonic-de3\prxtbsof0.dll (Conduit Ltd.)
O3 - HKCU\..\Toolbar\WebBrowser: (Winamp Toolbar) - {EBF2BA02-9094-4C5A-858B-BB198F3D8DE2} - C:\Programme\Winamp Toolbar\winamptb.dll (AOL Inc.)
O4 - HKLM..\Run: [avgnt] File not found
O4 - HKLM..\Run: [IntelWireless] C:\Programme\Gemeinsame Dateien\Intel\WirelessCommon\iFrmewrk.exe (Intel(R) Corporation)
O4 - HKLM..\Run: [IntelZeroConfig] C:\Programme\Intel\WiFi\bin\ZCfgSvc.exe (Intel(R) Corporation)
O4 - HKLM..\Run: [LWS] C:\Programme\Logitech\LWS\Webcam Software\LWS.exe (Logitech Inc.)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Programme\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [SMSERIAL] C:\WINXP\sm56hlpr.exe (Motorola Inc.)
O4 - HKLM..\Run: [TkBellExe] C:\Programme\Real\RealPlayer\update\realsched.exe (RealNetworks, Inc.)
O4 - HKLM..\Run: [tray_ico] File not found
O4 - HKLM..\Run: [tray_ico1] File not found
O4 - HKLM..\Run: [tray_ico2] File not found
O4 - HKLM..\Run: [tray_ico3] File not found
O4 - HKLM..\Run: [tray_ico4] File not found
O4 - HKLM..\Run: [VX1000] C:\WINXP\vVX1000.exe (Microsoft Corporation)
O4 - HKLM..\Run: [WinampAgent] C:\Programme\Winamp\winampa.exe (Nullsoft, Inc.)
O4 - HKCU..\Run: [Logitech Vid] C:\Programme\Logitech\Vid\Vid.exe (Logitech Inc.)
O4 - HKCU..\Run: [Logitech Vid HD] C:\Programme\Logitech\Vid\vid.exe (Logitech Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 0
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: Free YouTube Download - C:\Dokumente und Einstellungen\pc\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubedownload.htm ()
O8 - Extra context menu item: Free YouTube to MP3 Converter - C:\Dokumente und Einstellungen\pc\Anwendungsdaten\DVDVideoSoftIEHelpers\freeyoutubetomp3converter.htm ()
O9 - Extra Button: Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Click to call with Skype - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O13 - gopher Prefix: missing
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} [Link mogu videti samo ulogovani korisnici] (Windows Genuine Advantage Validation Tool)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.138
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Programme\Gemeinsame Dateien\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Programme\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINXP\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINXP\system32\userinit.exe) - C:\WINXP\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Die derzeitige Homepage) - About:Home
O24 - Desktop WallPaper: C:\Dokumente und Einstellungen\pc\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O24 - Desktop BackupWallPaper: C:\Dokumente und Einstellungen\pc\Lokale Einstellungen\Anwendungsdaten\Microsoft\Wallpaper1.bmp
O31 - SafeBoot: AlternateShell - services32.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011.03.03 01:58:46 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O32 - AutoRun File - [2011.03.03 03:18:26 | 000,000,109 | -HS- | M] () - C:\autorun.inf -- [ NTFS ]
O33 - MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\Shell - "" = AutoRun
O33 - MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\Shell\AutoRun\command - "" = E:\Autorun.exe
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011.08.25 11:05:08 | 000,000,000 | -H-D | C] -- C:\WINXP\PIF
[2011.08.24 20:38:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Startmenü\Programme\Google Chrome
[2011.08.24 19:53:22 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\Malwarebytes
[2011.08.24 19:53:10 | 000,041,272 | ---- | C] (Malwarebytes Corporation) -- C:\WINXP\System32\drivers\mbamswissarmy.sys
[2011.08.24 19:53:10 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Malwarebytes' Anti-Malware
[2011.08.24 19:53:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Malwarebytes
[2011.08.24 19:53:04 | 000,022,712 | ---- | C] (Malwarebytes Corporation) -- C:\WINXP\System32\drivers\mbam.sys
[2011.08.24 19:53:04 | 000,000,000 | ---D | C] -- C:\Programme\Malwarebytes' Anti-Malware
[2011.08.24 13:56:21 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\pc\Startmenü\Programme\Verwaltung
[2011.08.23 22:59:31 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\DVDVideoSoft
[2011.08.23 22:56:22 | 014,563,768 | ---- | C] (DVDVideoSoft Ltd. ) -- C:\Dokumente und Einstellungen\pc\Desktop\FreeYouTubeToMP3Converter.exe
[2011.08.21 22:04:54 | 000,000,000 | ---D | C] -- C:\WINXP\ufa
[2011.08.21 22:04:54 | 000,000,000 | ---D | C] -- C:\WINXP\phoenix
[2011.08.21 22:02:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\Adobe
[2011.08.21 22:00:22 | 000,000,000 | -H-D | C] -- C:\WINXP\update.7.1
[2011.08.21 21:59:57 | 000,000,000 | -H-D | C] -- C:\WINXP\update.2
[2011.08.21 21:59:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\WinRAR
[2011.08.21 21:59:37 | 000,000,000 | -H-D | C] -- C:\WINXP\update.5.0
[2011.08.21 21:57:43 | 000,000,000 | ---D | C] -- C:\WINXP\av_ico
[2011.08.21 21:55:50 | 000,000,000 | -H-D | C] -- C:\WINXP\update.1
[2011.08.21 21:55:37 | 000,000,000 | -H-D | C] -- C:\WINXP\update.tray-8-0-lnk
[2011.08.21 21:55:37 | 000,000,000 | -H-D | C] -- C:\WINXP\update.tray-8-0
[2011.08.21 19:10:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Lokale Einstellungen\Anwendungsdaten\mquadr.at
[2011.08.21 19:10:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\mquadr.at
[2011.08.21 19:10:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\m2backup
[2011.08.21 17:25:45 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\ptpusb.dll
[2011.08.21 17:25:44 | 000,015,104 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\dllcache\usbscan.sys
[2011.08.21 17:25:43 | 000,159,232 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\ptpusd.dll
[2011.08.20 16:07:13 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Dokumente\Ramija i Bajramsa
[2011.08.19 23:02:27 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Skype
[2011.08.18 03:44:16 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Eigene Dateien\Moje primljene datoteke
[2011.08.16 00:36:50 | 000,000,000 | ---D | C] -- C:\WINXP\Minidump
[2011.08.09 16:18:36 | 003,246,432 | ---- | C] (TeamViewer GmbH) -- C:\Dokumente und Einstellungen\pc\Desktop\TeamViewer.exe
[2011.08.08 14:46:23 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\TeamViewer
[2011.08.07 19:35:07 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Microsoft Silverlight
[2011.08.07 19:24:34 | 000,000,000 | R--D | C] -- C:\Dokumente und Einstellungen\pc\Startmenü\Programme\Windows Live
[2011.08.07 19:18:11 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\xing shared
[2011.08.07 19:17:52 | 000,198,848 | ---- | C] (RealNetworks, Inc.) -- C:\WINXP\System32\rmoc3260.dll
[2011.08.07 19:17:39 | 000,006,656 | ---- | C] (RealNetworks, Inc.) -- C:\WINXP\System32\pndx5016.dll
[2011.08.07 19:17:39 | 000,005,632 | ---- | C] (RealNetworks, Inc.) -- C:\WINXP\System32\pndx5032.dll
[2011.08.07 19:17:36 | 000,272,896 | ---- | C] (Progressive Networks) -- C:\WINXP\System32\pncrt.dll
[2011.08.07 19:17:36 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Real
[2011.08.07 19:17:09 | 000,000,000 | ---D | C] -- C:\Programme\Real
[2011.08.07 19:17:08 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Real
[2011.08.07 19:17:03 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\Real
[2011.08.07 19:13:32 | 000,606,560 | ---- | C] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\pc\Desktop\RealPlayer_de14.exe
[2011.08.07 17:42:29 | 000,274,288 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\mucltui.dll
[2011.08.07 17:42:29 | 000,017,776 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\mucltui.dll.mui
[2011.08.07 15:05:00 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\BabylonToolbar
[2011.08.07 15:04:55 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Lokale Einstellungen\Anwendungsdaten\Winamp Toolbar
[2011.08.07 14:43:40 | 000,000,000 | ---D | C] -- C:\Programme\BabylonToolbar
[2011.08.07 14:43:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Startmenü\Programme\Winamp Erkennungs-Plug-in
[2011.08.07 14:43:05 | 000,000,000 | ---D | C] -- C:\Programme\Winamp Detect
[2011.08.07 14:43:05 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Startmenü\Programme\Winamp
[2011.08.07 14:42:57 | 000,000,000 | ---D | C] -- C:\Programme\Winamp Toolbar
[2011.08.07 14:42:57 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Winamp Toolbar
[2011.08.07 14:42:51 | 000,000,000 | ---D | C] -- C:\Programme\Gemeinsame Dateien\Software Update Utility
[2011.08.07 14:42:09 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\Winamp
[2011.08.07 14:19:30 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Uniblue
[2011.08.07 14:16:04 | 001,892,184 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\D3DX9_42.dll
[2011.08.07 14:15:57 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\d3dx9_31.dll
[2011.08.07 14:15:38 | 000,000,000 | ---D | C] -- C:\WINXP\Logs
[2011.08.07 14:13:00 | 002,095,600 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxsfs.dll
[2011.08.07 14:13:00 | 000,133,616 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxafs.dll
[2011.08.07 14:13:00 | 000,126,448 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxinsi64.exe
[2011.08.07 14:13:00 | 000,123,888 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxcpyi64.exe
[2011.08.07 14:13:00 | 000,072,176 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxhpinst.exe
[2011.08.07 14:13:00 | 000,068,592 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxinsa64.exe
[2011.08.07 14:13:00 | 000,068,080 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxcpya64.exe
[2011.08.07 14:13:00 | 000,009,200 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\drivers\cdralw2k.sys
[2011.08.07 14:13:00 | 000,009,072 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\drivers\cdr4_xp.sys
[2011.08.07 14:12:59 | 000,698,864 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\px.dll
[2011.08.07 14:12:59 | 000,571,888 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxdrv.dll
[2011.08.07 14:12:59 | 000,440,816 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxwave.dll
[2011.08.07 14:12:59 | 000,219,632 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxmas.dll
[2011.08.07 14:12:59 | 000,100,848 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\vxblock.dll
[2011.08.07 14:12:59 | 000,059,888 | ---- | C] (Sonic Solutions) -- C:\WINXP\System32\pxwma.dll
[2011.08.07 14:12:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Lokale Einstellungen\Anwendungsdaten\OpenCandy
[2011.08.07 14:12:32 | 000,000,000 | ---D | C] -- C:\Programme\Winamp
[2011.08.07 14:12:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\OpenCandy
[2011.08.07 14:01:31 | 000,054,760 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\drivers\fssfltr_tdi.sys
[2011.08.07 14:00:22 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft Sync Framework
[2011.08.07 13:58:52 | 000,000,000 | ---D | C] -- C:\Programme\Microsoft SQL Server Compact Edition
[2011.08.07 13:57:11 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live SkyDrive
[2011.08.07 13:56:56 | 000,000,000 | ---D | C] -- C:\Programme\Windows Live
[2011.08.07 13:46:29 | 001,292,136 | ---- | C] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\pc\Desktop\wlsetup-web.exe
[2011.08.06 01:10:42 | 000,000,000 | ---D | C] -- C:\Programme\FastestTube
[2011.08.06 00:59:56 | 000,000,000 | ---D | C] -- C:\Programme\DealPly
[2011.08.06 00:59:37 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\BabylonUpdater
[2011.08.06 00:59:35 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Lokale Einstellungen\Anwendungsdaten\Babylon
[2011.08.06 00:59:34 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\Babylon
[2011.08.06 00:59:33 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Anwendungsdaten\Babylon
[2011.08.05 11:47:49 | 000,018,808 | ---- | C] (Microsoft Corporation) -- C:\WINXP\System32\spmsg.dll
[2011.08.04 14:19:17 | 000,000,000 | R--D | C] -- C:\Programme\Skype
[2011.08.03 13:13:32 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\pc\Lokale Einstellungen\Anwendungsdaten\Identities
[9 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011.08.25 12:34:29 | 000,000,264 | ---- | M] () -- C:\WINXP\tasks\RealUpgradeLogonTaskS-1-5-21-1417001333-1580436667-842925246-1003.job
[2011.08.25 12:34:27 | 000,000,272 | ---- | M] () -- C:\WINXP\tasks\RealUpgradeScheduledTaskS-1-5-21-1417001333-1580436667-842925246-1003.job
[2011.08.25 12:32:52 | 000,002,353 | ---- | M] () -- C:\Dokumente und Einstellungen\pc\Desktop\Google Chrome.lnk
[2011.08.25 12:12:23 | 000,002,206 | ---- | M] () -- C:\WINXP\System32\wpa.dbl
[2011.08.25 12:11:08 | 000,002,048 | --S- | M] () -- C:\WINXP\bootstat.dat
[2011.08.25 09:00:22 | 000,005,123 | ---- | M] () -- C:\WirelessDiagLog.csv
[2011.08.25 02:17:00 | 000,000,470 | ---- | M] () -- C:\WINXP\tasks\Ad-Aware Update (Weekly).job
[2011.08.25 02:10:00 | 000,001,144 | ---- | M] () -- C:\WINXP\tasks\GoogleUpdateTaskUserS-1-5-21-1417001333-1580436667-842925246-1003Core.job
[2011.08.24 22:25:20 | 000,000,429 | ---- | M] () -- C:\WINXP\System32\drivers\etc\hosts.ics
[2011.08.24 19:53:11 | 000,000,756 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.08.23 23:03:00 | 003,016,915 | ---- | M] () -- C:\Dokumente und Einstellungen\pc\Desktop\Sako Polumenta - Devojka iz komsiluka.mp3
[2011.08.23 22:58:58 | 000,001,023 | ---- | M] () -- C:\Dokumente und Einstellungen\pc\Desktop\Free YouTube to MP3 Converter.lnk
[2011.08.23 22:56:46 | 014,563,768 | ---- | M] (DVDVideoSoft Ltd. ) -- C:\Dokumente und Einstellungen\pc\Desktop\FreeYouTubeToMP3Converter.exe
[2011.08.23 09:56:07 | 000,202,984 | -H-- | M] () -- C:\WINXP\System32\drivers\etc\hosts.msn
[2011.08.23 09:56:07 | 000,202,984 | -H-- | M] () -- C:\WINXP\System32\drivers\etc\hosts
[2011.08.23 09:56:07 | 000,000,734 | ---- | M] () -- C:\WINXP\System32\drivers\etc\hîsts
[2011.08.23 09:53:19 | 000,001,374 | ---- | M] () -- C:\WINXP\imsins.BAK
[2011.08.23 09:43:26 | 000,002,237 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2011.08.22 20:30:42 | 000,000,201 | ---- | M] () -- C:\WINXP\info1
[2011.08.21 22:04:53 | 005,589,370 | ---- | M] () -- C:\WINXP\phoenix.rar
[2011.08.21 22:04:53 | 000,246,272 | ---- | M] () -- C:\WINXP\unrar.exe
[2011.08.21 22:04:53 | 000,182,617 | ---- | M] () -- C:\WINXP\ufa.rar
[2011.08.21 22:04:51 | 001,075,284 | ---- | M] () -- C:\WINXP\rpcminer.rar
[2011.08.21 21:59:42 | 000,904,792 | ---- | M] () -- C:\WINXP\geoiplist.rar
[2011.08.21 21:59:14 | 000,000,000 | ---- | M] () -- C:\WINXP\loader2.exe_ok
[2011.08.21 21:56:00 | 000,000,211 | ---- | M] () -- C:\boot.ini
[2011.08.11 03:12:08 | 000,449,414 | ---- | M] () -- C:\WINXP\System32\perfh007.dat
[2011.08.11 03:12:08 | 000,433,236 | ---- | M] () -- C:\WINXP\System32\perfh009.dat
[2011.08.11 03:12:08 | 000,080,824 | ---- | M] () -- C:\WINXP\System32\perfc007.dat
[2011.08.11 03:12:08 | 000,068,192 | ---- | M] () -- C:\WINXP\System32\perfc009.dat
[2011.08.10 14:48:40 | 000,152,088 | ---- | M] () -- C:\img2-001.raw
[2011.08.09 16:18:43 | 003,246,432 | ---- | M] (TeamViewer GmbH) -- C:\Dokumente und Einstellungen\pc\Desktop\TeamViewer.exe
[2011.08.07 19:18:21 | 000,000,999 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\RealPlayer.lnk
[2011.08.07 19:17:52 | 000,198,848 | ---- | M] (RealNetworks, Inc.) -- C:\WINXP\System32\rmoc3260.dll
[2011.08.07 19:17:39 | 000,006,656 | ---- | M] (RealNetworks, Inc.) -- C:\WINXP\System32\pndx5016.dll
[2011.08.07 19:17:39 | 000,005,632 | ---- | M] (RealNetworks, Inc.) -- C:\WINXP\System32\pndx5032.dll
[2011.08.07 19:17:36 | 000,272,896 | ---- | M] (Progressive Networks) -- C:\WINXP\System32\pncrt.dll
[2011.08.07 19:13:34 | 000,606,560 | ---- | M] (RealNetworks, Inc.) -- C:\Dokumente und Einstellungen\pc\Desktop\RealPlayer_de14.exe
[2011.08.07 14:56:05 | 000,023,392 | ---- | M] () -- C:\WINXP\System32\nscompat.tlb
[2011.08.07 14:56:05 | 000,016,832 | ---- | M] () -- C:\WINXP\System32\amcompat.tlb
[2011.08.07 14:43:05 | 000,000,626 | ---- | M] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Winamp.lnk
[2011.08.07 13:46:31 | 001,292,136 | ---- | M] (Microsoft Corporation) -- C:\Dokumente und Einstellungen\pc\Desktop\wlsetup-web.exe
[2011.07.31 16:52:21 | 000,096,664 | ---- | M] () -- C:\WINXP\System32\FNTCACHE.DAT
[9 C:\WINXP\System32\*.tmp files -> C:\WINXP\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011.08.24 21:48:34 | 000,005,123 | ---- | C] () -- C:\WirelessDiagLog.csv
[2011.08.24 19:53:11 | 000,000,756 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Malwarebytes' Anti-Malware.lnk
[2011.08.23 23:02:41 | 003,016,915 | ---- | C] () -- C:\Dokumente und Einstellungen\pc\Desktop\Sako Polumenta - Devojka iz komsiluka.mp3
[2011.08.23 22:58:58 | 000,001,023 | ---- | C] () -- C:\Dokumente und Einstellungen\pc\Desktop\Free YouTube to MP3 Converter.lnk
[2011.08.21 22:04:53 | 005,589,370 | ---- | C] () -- C:\WINXP\phoenix.rar
[2011.08.21 22:04:53 | 000,182,617 | ---- | C] () -- C:\WINXP\ufa.rar
[2011.08.21 22:04:51 | 001,075,284 | ---- | C] () -- C:\WINXP\rpcminer.rar
[2011.08.21 21:59:45 | 004,636,907 | ---- | C] () -- C:\WINXP\geoiplist
[2011.08.21 21:59:43 | 000,246,272 | ---- | C] () -- C:\WINXP\unrar.exe
[2011.08.21 21:59:41 | 000,904,792 | ---- | C] () -- C:\WINXP\geoiplist.rar
[2011.08.21 21:59:36 | 000,000,201 | ---- | C] () -- C:\WINXP\info1
[2011.08.21 21:59:14 | 000,000,000 | ---- | C] () -- C:\WINXP\loader2.exe_ok
[2011.08.19 23:02:27 | 000,002,237 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Skype.lnk
[2011.08.07 19:19:32 | 000,000,264 | ---- | C] () -- C:\WINXP\tasks\RealUpgradeLogonTaskS-1-5-21-1417001333-1580436667-842925246-1003.job
[2011.08.07 19:19:26 | 000,000,272 | ---- | C] () -- C:\WINXP\tasks\RealUpgradeScheduledTaskS-1-5-21-1417001333-1580436667-842925246-1003.job
[2011.08.07 19:18:21 | 000,000,999 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\RealPlayer.lnk
[2011.08.07 14:56:05 | 000,023,392 | ---- | C] () -- C:\WINXP\System32\nscompat.tlb
[2011.08.07 14:56:05 | 000,016,832 | ---- | C] () -- C:\WINXP\System32\amcompat.tlb
[2011.08.07 14:43:05 | 000,000,626 | ---- | C] () -- C:\Dokumente und Einstellungen\All Users\Desktop\Winamp.lnk
[2011.08.05 11:47:24 | 000,000,764 | ---- | C] () -- C:\Dokumente und Einstellungen\pc\Startmenü\Programme\Windows Media Player.lnk
[2011.04.05 17:33:11 | 000,000,048 | -H-- | C] () -- C:\WINXP\System32\ezsidmv.dat
[2011.03.03 03:46:19 | 000,069,632 | ---- | C] () -- C:\WINXP\sm56spn.dll
[2011.03.03 03:46:19 | 000,069,632 | ---- | C] () -- C:\WINXP\sm56itl.dll
[2011.03.03 03:46:19 | 000,069,632 | ---- | C] () -- C:\WINXP\sm56eng.dll
[2011.03.03 03:46:19 | 000,069,632 | ---- | C] () -- C:\WINXP\sm56brz.dll
[2011.03.03 03:46:19 | 000,061,440 | ---- | C] () -- C:\WINXP\sm56ger.dll
[2011.03.03 03:46:19 | 000,061,440 | ---- | C] () -- C:\WINXP\sm56fra.dll
[2011.03.03 03:46:19 | 000,053,248 | ---- | C] () -- C:\WINXP\sm56jpn.dll
[2011.03.03 03:46:19 | 000,049,152 | ---- | C] () -- C:\WINXP\sm56cht.dll
[2011.03.03 03:46:19 | 000,049,152 | ---- | C] () -- C:\WINXP\sm56chs.dll
[2011.03.03 03:44:05 | 000,073,728 | ---- | C] () -- C:\WINXP\System32\RtNicProp32.dll
[2011.03.03 02:02:44 | 000,002,048 | --S- | C] () -- C:\WINXP\bootstat.dat
[2011.03.03 01:54:22 | 000,021,740 | ---- | C] () -- C:\WINXP\System32\emptyregdb.dat
[2011.03.03 01:48:04 | 000,004,073 | ---- | C] () -- C:\WINXP\ODBCINST.INI
[2011.03.03 01:46:30 | 000,096,664 | ---- | C] () -- C:\WINXP\System32\FNTCACHE.DAT
[2009.06.26 18:21:02 | 000,015,498 | ---- | C] () -- C:\WINXP\VX1000.ini
[2008.04.14 14:00:00 | 013,107,200 | ---- | C] () -- C:\WINXP\System32\oembios.bin
[2008.04.14 14:00:00 | 000,673,088 | ---- | C] () -- C:\WINXP\System32\mlang.dat
[2008.04.14 14:00:00 | 000,449,414 | ---- | C] () -- C:\WINXP\System32\perfh007.dat
[2008.04.14 14:00:00 | 000,433,236 | ---- | C] () -- C:\WINXP\System32\perfh009.dat
[2008.04.14 14:00:00 | 000,272,128 | ---- | C] () -- C:\WINXP\System32\perfi009.dat
[2008.04.14 14:00:00 | 000,269,480 | ---- | C] () -- C:\WINXP\System32\perfi007.dat
[2008.04.14 14:00:00 | 000,218,003 | ---- | C] () -- C:\WINXP\System32\dssec.dat
[2008.04.14 14:00:00 | 000,080,824 | ---- | C] () -- C:\WINXP\System32\perfc007.dat
[2008.04.14 14:00:00 | 000,068,192 | ---- | C] () -- C:\WINXP\System32\perfc009.dat
[2008.04.14 14:00:00 | 000,049,152 | ---- | C] () -- C:\WINXP\System32\mqupgrd.dll
[2008.04.14 14:00:00 | 000,046,258 | ---- | C] () -- C:\WINXP\System32\mib.bin
[2008.04.14 14:00:00 | 000,034,478 | ---- | C] () -- C:\WINXP\System32\perfd007.dat
[2008.04.14 14:00:00 | 000,028,626 | ---- | C] () -- C:\WINXP\System32\perfd009.dat
[2008.04.14 14:00:00 | 000,004,569 | ---- | C] () -- C:\WINXP\System32\secupd.dat
[2008.04.14 14:00:00 | 000,004,463 | ---- | C] () -- C:\WINXP\System32\oembios.dat
[2008.04.14 14:00:00 | 000,001,804 | ---- | C] () -- C:\WINXP\System32\Dcache.bin
[2008.04.14 14:00:00 | 000,000,741 | ---- | C] () -- C:\WINXP\System32\noise.dat

< End of report >


Dali je to to ...nemam pojma kako sam skenirala valjda je ok ???

Dopuna: 26 Avg 2011 12:46

OTL Extras logfile created on: 25.08.2011 12:23:04 - Run 1
OTL by OldTimer - Version 3.2.26.5 Folder = C:\Dokumente und Einstellungen\pc\Eigene Dateien\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy

502,48 Mb Total Physical Memory | 96,32 Mb Available Physical Memory | 19,17% Memory free
1,20 Gb Paging File | 0,64 Gb Available in Paging File | 53,27% Paging File free
Paging file location(s): C:\pagefile.sys 756 1512 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINXP | %ProgramFiles% = C:\Programme
Drive C: | 55,89 Gb Total Space | 48,98 Gb Free Space | 87,64% Space Free | Partition Type: NTFS

Computer Name: PC | User Name: pc | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = ChromeHTML] -- Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Programme\Winamp\winamp.exe" /BOOKMARK "%1" (Nullsoft, Inc.)
Directory [Winamp.Enqueue] -- "C:\Programme\Winamp\winamp.exe" /ADD "%1" (Nullsoft, Inc.)
Directory [Winamp.Play] -- "C:\Programme\Winamp\winamp.exe" "%1" (Nullsoft, Inc.)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 1
"FirewallOverride" = 1
"DisableThumbnailCache" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 1
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"139:TCP" = 139:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22004
"445:TCP" = 445:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22005
"137:UDP" = 137:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22001
"138:UDP" = 138:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22002
"3389:TCP" = 3389:TCP:*:Disabled:@xpsp2res.dll,-22009
"1900:UDP" = 1900:UDP:LocalSubNet:Disabled:@xpsp2res.dll,-22007
"2869:TCP" = 2869:TCP:LocalSubNet:Disabled:@xpsp2res.dll,-22008

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Programme\Logitech\Vid\Vid.exe" = C:\Programme\Logitech\Vid\Vid.exe:*:Enabled:Logitech Vid HD -- (Logitech Inc.)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{08610298-29AE-445B-B37D-EFBE05802967}" = LWS Pictures And Video
"{15634701-BACE-4449-8B25-1567DA8C9FD3}" = CameraHelperMsi
"{1651216E-E7AD-4250-92A1-FB8ED61391C9}" = LWS Help_main
"{16D0F2D2-242C-4885-BEF1-4B1655C141AE}" = Bing Bar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Windows Live alatka za otpremanje
"{21DF0294-6B9D-4741-AB6F-B2ABFBD2387E}" = LWS YouTube Plugin
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{28C2DED6-325B-4CC7-983A-1777C8F7FBAB}" = RealUpgrade 1.1
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{350C97B3-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{372B31CF-77FB-4E29-860C-A0EA2985AB7F}" = O2Micro Flash Memory Card Reader Driver (x86)
"{38F7A11E-E8C9-426B-9442-11F9AB60BFD1}" = DeskViewClient
"{3A8D27B4-15FA-47A6-9C05-B1940EE61519}" = Windows Live Essentials
"{3C9B04D6-AED0-4E7D-B364-A274771AAB62}" = Windows Live Writer
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = erLT
"{41D79AEF-38CC-4234-892E-3CBBF0FA040B}" = Windows Live Messenger
"{48CEAD6B-2E9D-4C59-8712-B56A91902CE7}" = Windows Live pomoćnik za prijavljivanje
"{4F250956-13D0-4064-AB2A-308C324119F3}" = Windows Live Pošta
"{4FBCEA31-5D18-4212-9231-DE7CF1BE7DBB}" = Logitech Vid
"{553C904F-57A2-4113-888E-BA0C3D1C69C0}" = Microsoft VC9 runtime libraries
"{6F76EC3C-34B1-436E-97FB-48C58D7BEDCD}" = LWS Gallery
"{71E66D3F-A009-44AB-8784-75E2819BA4BA}" = LWS Motion Detection
"{765147E8-4F26-449D-A89A-0E65213A33CF}" = Windows Live Porodična bezbednost
"{7770E71B-2D43-4800-9CB3-5B6CAAEBEBEA}" = RealNetworks - Microsoft Visual C++ 2008 Runtime
"{7959721D-8268-4565-9E0E-C41A9F4848A9}" = SigmaTel AC97 Audio Drivers
"{8196E2FD-9A24-4E67-8F5F-8A4FC5CF5455}" = Windows Live Foto-galerija
"{83C8FA3C-F4EA-46C4-8392-D3CE353738D6}" = LWS Launcher
"{87E96381-BE1A-4987-9D18-3DC7D979B16E}" = Windows Live Sync
"{8937D274-C281-42E4-8CDB-A0B2DF979189}" = LWS Webcam Software
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A708DD8-A5E6-11D4-A706-000629E95E20}" = Intel(R) Extreme Graphics 2 Driver
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9DAEA76B-E50F-4272-A595-0124E826553D}" = LWS WLM Plugin
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{AA59DDE4-B672-4621-A016-4C248204957A}" = Skype™ 5.5
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{AD976243-75CB-4A2B-809F-8C9EC4292377}" = Mobiles Internet für unterwegs
"{B6CF2967-C81E-40C0-9815-C05774FEF120}" = Click to Call with Skype
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D40EB009-0499-459c-A8AF-C9C110766215}" = Logitech Webcam Software
"{EED027B7-0DB6-404B-8F45-6DFEE34A0441}" = LWS Video Mask Maker
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F22FD942-651D-4EE8-BD6F-7E0AF5E17625}" = Intel(R) PROSet/Wireless WiFi-Software
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}" = Visual C++ 2008 x86 Runtime - (v9.0.30729)
"{F333A33D-125C-32A2-8DCE-5C5D14231E27}.vc_x86runtime_30729_01" = Visual C++ 2008 x86 Runtime - v9.0.30729.01
"{FF167195-9EE4-46C0-8CD7-FBA3457E88AB}" = LWS Facebook
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"BabylonToolbar" = Babylon toolbar on IE
"conduitEngine" = Conduit Engine
"DealPly" = DealPly
"DVDVideoSoftTB Toolbar" = DVDVideoSoftTB Toolbar
"Free Audio CD Burner_is1" = Free Audio CD Burner version 1.4.7
"Free YouTube Download_is1" = Free YouTube Download version 2.10.33.324
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.8.815
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware verzija 1.51.1.1800
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Mobiles Internet für unterwegs" = Mobiles Internet für unterwegs
"MSCompPackV1" = Microsoft Compression Client Pack 1.0 for Windows XP
"MSNINST" = MSN
"ProInst" = Intel PROSet Wireless
"RealPlayer 12.0" = RealPlayer
"SMSERIAL" = Motorola SM56 Data Fax Modem
"softonic-de3 Toolbar" = softonic-de3 Toolbar
"SoftwareUpdUtility" = Download Updater (AOL LLC)
"Uninstall_is1" = Uninstall 1.0.0.1
"Winamp" = Winamp
"Winamp Toolbar" = Winamp Toolbar
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR Archivierer
"WMFDist11" = Windows Media Format 11 runtime

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome
"Winamp Detect" = Winamp Erkennungs-Plug-in
"Winamp Toolbar" = Winamp Toolbar

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 18.08.2011 09:36:25 | Computer Name = PC | Source = WmiAdapter | ID = 4099
Description = Dienst konnte nicht geöffnet werden.

Error - 19.08.2011 18:36:46 | Computer Name = PC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung IEXPLORE.EXE, Version 8.0.6001.18702, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 21.08.2011 13:14:39 | Computer Name = PC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung IEXPLORE.EXE, Version 8.0.6001.18702, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 21.08.2011 20:32:25 | Computer Name = PC | Source = WindowsLiveMessenger | ID = 15728647
Description =

Error - 22.08.2011 10:31:19 | Computer Name = PC | Source = Windows Live Messenger | ID = 1000
Description =

Error - 25.08.2011 05:42:29 | Computer Name = PC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung OTL.exe, Version 3.2.26.5, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 25.08.2011 06:01:09 | Computer Name = PC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung OTL.exe, Version 3.2.26.5, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 25.08.2011 06:01:09 | Computer Name = PC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung OTL.exe, Version 3.2.26.5, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 25.08.2011 06:01:11 | Computer Name = PC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung OTL.exe, Version 3.2.26.5, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

Error - 25.08.2011 06:01:16 | Computer Name = PC | Source = Application Hang | ID = 1002
Description = Stillstehende Anwendung OTL.exe, Version 3.2.26.5, Stillstandmodul
hungapp, Version 0.0.0.0, Stillstandadresse 0x00000000.

[ System Events ]
Error - 25.08.2011 03:54:50 | Computer Name = PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
avgio

Error - 25.08.2011 04:56:10 | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Avira AntiVir Planer" wurde aufgrund folgenden Fehlers
nicht gestartet: %%3

Error - 25.08.2011 04:56:10 | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Avira AntiVir Guard" wurde aufgrund folgenden Fehlers
nicht gestartet: %%3

Error - 25.08.2011 04:56:10 | Computer Name = PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
avgio

Error - 25.08.2011 05:10:24 | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Avira AntiVir Planer" wurde aufgrund folgenden Fehlers
nicht gestartet: %%3

Error - 25.08.2011 05:10:24 | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Avira AntiVir Guard" wurde aufgrund folgenden Fehlers
nicht gestartet: %%3

Error - 25.08.2011 05:10:24 | Computer Name = PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
avgio

Error - 25.08.2011 06:11:52 | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Avira AntiVir Planer" wurde aufgrund folgenden Fehlers
nicht gestartet: %%3

Error - 25.08.2011 06:11:52 | Computer Name = PC | Source = Service Control Manager | ID = 7000
Description = Der Dienst "Avira AntiVir Guard" wurde aufgrund folgenden Fehlers
nicht gestartet: %%3

Error - 25.08.2011 06:11:56 | Computer Name = PC | Source = Service Control Manager | ID = 7026
Description = Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
avgio


< End of report >

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ponovo pokreni program OTL dvoklikom na ikonicu;

U beli okvir prozora gde piše Custom Scans/Fixes iskopirati sledeći tekst:

:OTL
O4 - HKLM..\Run: [tray_ico] File not found
O4 - HKLM..\Run: [tray_ico1] File not found
O4 - HKLM..\Run: [tray_ico2] File not found
O4 - HKLM..\Run: [tray_ico3] File not found
O4 - HKLM..\Run: [tray_ico4] File not found
O33 - MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\Shell - "" = AutoRun
O33 - MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\Shell\AutoRun\command - "" = E:\Autorun.exe
[2011.08.21 22:04:54 | 000,000,000 | ---D | C] -- C:\WINXP\ufa
[2011.08.21 22:04:54 | 000,000,000 | ---D | C] -- C:\WINXP\phoenix
[2011.08.21 22:00:22 | 000,000,000 | -H-D | C] -- C:\WINXP\update.7.1
[2011.08.21 21:59:57 | 000,000,000 | -H-D | C] -- C:\WINXP\update.2
[2011.08.21 21:59:45 | 000,000,000 | ---D | C] -- C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\WinRAR
[2011.08.21 21:59:37 | 000,000,000 | -H-D | C] -- C:\WINXP\update.5.0
[2011.08.21 21:57:43 | 000,000,000 | ---D | C] -- C:\WINXP\av_ico
[2011.08.21 21:55:50 | 000,000,000 | -H-D | C] -- C:\WINXP\update.1
[2011.08.21 21:55:37 | 000,000,000 | -H-D | C] -- C:\WINXP\update.tray-8-0-lnk
[2011.08.21 21:55:37 | 000,000,000 | -H-D | C] -- C:\WINXP\update.tray-8-0
[2011.08.22 20:30:42 | 000,000,201 | ---- | M] () -- C:\WINXP\info1
[2011.08.21 22:04:53 | 005,589,370 | ---- | M] () -- C:\WINXP\phoenix.rar
[2011.08.21 22:04:53 | 000,246,272 | ---- | M] () -- C:\WINXP\unrar.exe
[2011.08.21 22:04:53 | 000,182,617 | ---- | M] () -- C:\WINXP\ufa.rar
[2011.08.21 22:04:51 | 001,075,284 | ---- | M] () -- C:\WINXP\rpcminer.rar
[2011.08.21 21:59:42 | 000,904,792 | ---- | M] () -- C:\WINXP\geoiplist.rar
[2011.08.21 21:59:14 | 000,000,000 | ---- | M] () -- C:\WINXP\loader2.exe_ok
[2011.08.21 22:04:53 | 005,589,370 | ---- | C] () -- C:\WINXP\phoenix.rar
[2011.08.21 22:04:53 | 000,182,617 | ---- | C] () -- C:\WINXP\ufa.rar
[2011.08.21 22:04:51 | 001,075,284 | ---- | C] () -- C:\WINXP\rpcminer.rar
[2011.08.21 21:59:45 | 004,636,907 | ---- | C] () -- C:\WINXP\geoiplist
[2011.08.21 21:59:43 | 000,246,272 | ---- | C] () -- C:\WINXP\unrar.exe
[2011.08.21 21:59:41 | 000,904,792 | ---- | C] () -- C:\WINXP\geoiplist.rar
[2011.08.21 21:59:36 | 000,000,201 | ---- | C] () -- C:\WINXP\info1
[2011.08.21 21:59:14 | 000,000,000 | ---- | C] () -- C:\WINXP\loader2.exe_ok

:Commands
[purity]
[emptytemp]
[resethosts]
[EMPTYFLASH]
[Reboot]

Klikni taster Run Fix;


Log koji dobiješ iskopiraj ovde u poruci.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

========== OTL ==========
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\tray_ico deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\tray_ico1 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\tray_ico2 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\tray_ico3 deleted successfully.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\tray_ico4 deleted successfully.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\ not found.
Registry key HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\ not found.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{c2b798e6-45e7-11e0-8786-0012f0bf38e4}\ not found.
File E:\Autorun.exe not found.
C:\WINXP\ufa folder moved successfully.
C:\WINXP\phoenix\kernels\poclbm folder moved successfully.
C:\WINXP\phoenix\kernels\phatk folder moved successfully.
C:\WINXP\phoenix\kernels folder moved successfully.
C:\WINXP\phoenix folder moved successfully.
C:\WINXP\update.7.1 folder moved successfully.
C:\WINXP\update.2 folder moved successfully.
C:\Dokumente und Einstellungen\LocalService\Anwendungsdaten\WinRAR folder moved successfully.
C:\WINXP\update.5.0 folder moved successfully.
C:\WINXP\av_ico folder moved successfully.
C:\WINXP\update.1 folder moved successfully.
C:\WINXP\update.tray-8-0-lnk folder moved successfully.
C:\WINXP\update.tray-8-0 folder moved successfully.
C:\WINXP\info1 moved successfully.
C:\WINXP\phoenix.rar moved successfully.
C:\WINXP\unrar.exe moved successfully.
C:\WINXP\ufa.rar moved successfully.
C:\WINXP\rpcminer.rar moved successfully.
C:\WINXP\geoiplist.rar moved successfully.
C:\WINXP\loader2.exe_ok moved successfully.
File C:\WINXP\phoenix.rar not found.
File C:\WINXP\ufa.rar not found.
File C:\WINXP\rpcminer.rar not found.
C:\WINXP\geoiplist moved successfully.
File C:\WINXP\unrar.exe not found.
File C:\WINXP\geoiplist.rar not found.
File C:\WINXP\info1 not found.
File C:\WINXP\loader2.exe_ok not found.

OTL by OldTimer - Version 3.2.26.5 log created on 08252011_130052

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ok, pokreni sada program DDS i postavi mi njegov log da pogledam.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Otvorila sam DDS i opet mije blok i onda sam na papiru prepisala ono sto je pisalo pa sam gasila pc ...jer mi sve blokiralo (

As per the instructions you would have received,kindly ensure any onboard script blocking tools have been disabled for they shall interfere with DDS.
DDS is a non-invasive diagnostic tool
-DDS make no registry writes/changes
-DDS does not create permanent files/folders.
This scan should not take longer than three minutes to comlete.
When the scan is complete,a logfile /report shall pop open.
Post the contents of the logfile to the forum where it was requested.

#################################


ovako mi samo izadje i blokira mi sve zivo (

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Verovatno Avira blokira DDS, nije deinstalirana kako treba.

Reci mi kakvo je stanje sada, imas li problem ili ne?