MyCity » Ambulanta -> Arhiva Ambulante » cudno ponašanje

cudno ponašanje

Napisano na dan: 6.6.2011

cudno ponašanje

Sledeća strana

Pagination

Odgovori

GOKU91 Poslao: 06 Jun 2011 00:51 Idi na vrh
offline GOKU91 Ugledni građanin Pridružio: 13 Jul 2007 Poruke: 363	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: Napisano: 06 Jun 2011 0:49 Laptop neće preko wirelessa da se prikači na ruter (nije do rutera radi na drugom laptopu wireless) i hard disk stalno radi (lampica stalno treperi). Antivirus ne javlja ništa (koristim MSE). U procesima sam našao csrss.exe koji kada na njega kliknem da otvori izvorni folder, to ne radi, a pročitao sam da može da bude trojanac. https://www.mycity.rs/must-login.png OTL logfile created on: 06/06/2011 00:38:55 - Run 1 OTL by OldTimer - Version 3.2.23.0 Folder = C:\Users\Nemanja\Desktop 64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation Internet Explorer (Version = 9.0.8112.16421) Locale: 00000809 \| Country: United Kingdom \| Language: ENG \| Date Format: dd/MM/yyyy 3.86 Gb Total Physical Memory \| 1.88 Gb Available Physical Memory \| 48.69% Memory free 7.73 Gb Paging File \| 5.48 Gb Available in Paging File \| 70.97% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files (x86) Drive C: \| 149.04 Gb Total Space \| 68.43 Gb Free Space \| 45.91% Space Free \| Partition Type: NTFS Drive D: \| 148.65 Gb Total Space \| 98.13 Gb Free Space \| 66.01% Space Free \| Partition Type: NTFS Computer Name: NEMANJA-TOSH \| User Name: Nemanja \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user \| Include 64bit Scans Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2011/06/06 00:38:05 \| 000,580,096 \| ---- \| M] (OldTimer Tools) -- C:\Users\Nemanja\Desktop\OTL.exe PRC - [2011/06/04 15:12:10 \| 000,240,288 \| ---- \| M] (Adobe Systems, Inc.) -- C:\Windows\SysWOW64\Macromed\Flash\FlashUtil10r_ActiveX.exe PRC - [2011/06/03 22:13:46 \| 000,140,952 \| ---- \| M] (Google Inc.) -- C:\Program Files (x86)\Google\Update\1.3.21.57\GoogleCrashHandler.exe PRC - [2011/03/31 16:48:36 \| 001,540,096 \| ---- \| M] (Nokia) -- C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe PRC - [2011/03/30 22:22:21 \| 000,075,136 \| ---- \| M] () -- C:\Windows\SysWOW64\PnkBstrA.exe PRC - [2011/03/26 16:36:55 \| 000,262,144 \| ---- \| M] () -- C:\Program Files (x86)\MCShield\MCShieldRTM.exe PRC - [2011/03/25 23:26:58 \| 000,064,112 \| ---- \| M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Player\hqtray.exe PRC - [2011/03/25 23:26:46 \| 000,334,448 \| ---- \| M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnetdhcp.exe PRC - [2011/03/25 23:26:28 \| 000,404,080 \| ---- \| M] (VMware, Inc.) -- C:\Windows\SysWOW64\vmnat.exe PRC - [2011/03/25 23:26:16 \| 000,113,264 \| ---- \| M] (VMware, Inc.) -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe PRC - [2011/03/25 22:27:40 \| 000,539,248 \| ---- \| M] (VMware, Inc.) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe PRC - [2011/02/02 14:08:16 \| 000,018,656 \| ---- \| M] () -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe PRC - [2010/11/04 19:46:45 \| 000,073,728 \| ---- \| M] () -- C:\Program Files (x86)\MCShield\MCShieldTray.exe PRC - [2010/09/30 11:47:44 \| 000,093,360 \| ---- \| M] (OLYMPUS IMAGING CORP.) -- C:\Program Files (x86)\Olympus\ib\olycamdetect.exe PRC - [2010/09/16 22:04:06 \| 001,164,584 \| ---- \| M] () -- C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe PRC - [2009/10/28 12:15:10 \| 000,304,496 \| ---- \| M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\NDSTray.exe PRC - [2009/10/23 18:30:00 \| 002,712,928 \| ---- \| M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtMng.exe PRC - [2009/09/30 20:34:22 \| 002,314,240 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe PRC - [2009/09/30 20:33:08 \| 000,262,144 \| ---- \| M] (Intel Corporation) -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe PRC - [2009/08/12 13:30:42 \| 006,203,296 \| ---- \| M] (TOSHIBA) -- C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe PRC - [2009/07/28 21:26:42 \| 000,062,848 \| ---- \| M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSwMgr.exe PRC - [2009/06/08 15:34:00 \| 000,660,808 \| ---- \| M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosA2dp.exe PRC - [2009/06/03 16:33:00 \| 000,308,552 \| ---- \| M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHSP.exe PRC - [2009/03/10 19:51:20 \| 000,046,448 \| ---- \| M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe PRC - [2009/01/13 22:33:40 \| 000,034,088 \| ---- \| M] (TOSHIBA CORPORATION) -- C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe PRC - [2008/07/24 12:24:00 \| 000,083,272 \| ---- \| M] (TOSHIBA CORPORATION.) -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtHid.exe ========== Modules (SafeList) ========== MOD - [2011/06/06 00:38:05 \| 000,580,096 \| ---- \| M] (OldTimer Tools) -- C:\Users\Nemanja\Desktop\OTL.exe MOD - [2010/11/20 13:55:09 \| 001,680,896 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\winsxs\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.17514_none_41e6975e2bd6f2b2\comctl32.dll ========== Win32 Services (SafeList) ========== SRV:64bit: - [2011/04/17 15:24:47 \| 001,431,888 \| ---- \| M] (Flexera Software, Inc.) [On_Demand \| Stopped] -- C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService64.exe -- (FLEXnet Licensing Service 64) SRV:64bit: - [2010/11/11 15:36:38 \| 000,282,616 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Running] -- C:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -- (NisSrv) SRV:64bit: - [2010/11/11 15:36:38 \| 000,012,784 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -- (MsMpSvc) SRV:64bit: - [2010/09/22 18:10:10 \| 000,057,184 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Program Files\Windows Live\Mesh\wlcrasvc.exe -- (wlcrasvc) SRV:64bit: - [2010/02/05 17:53:08 \| 000,824,688 \| ---- \| M] (TOSHIBA Corporation) [On_Demand \| Running] -- C:\Program Files\TOSHIBA\TPHM\TPCHSrv.exe -- (TPCHSrv) SRV:64bit: - [2010/02/05 17:44:48 \| 000,137,560 \| ---- \| M] (TOSHIBA Corporation) [On_Demand \| Running] -- C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosSmartSrv.exe -- (TOSHIBA HDD SSD Alert Service) SRV:64bit: - [2009/11/05 23:05:28 \| 000,489,312 \| ---- \| M] (TOSHIBA Corporation) [Auto \| Running] -- C:\Program Files\TOSHIBA\Power Saver\TosCoSrv.exe -- (TosCoSrv) SRV:64bit: - [2009/09/28 15:46:02 \| 000,251,760 \| ---- \| M] (TOSHIBA Corporation) [Auto \| Running] -- C:\Program Files\TOSHIBA\TECO\TecoService.exe -- (TOSHIBA eco Utility Service) SRV:64bit: - [2009/09/09 00:56:12 \| 000,202,752 \| ---- \| M] (AMD) [Auto \| Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility) SRV:64bit: - [2009/07/28 16:48:06 \| 000,140,632 \| ---- \| M] (TOSHIBA Corporation) [Auto \| Running] -- C:\Windows\SysNative\TODDSrv.exe -- (TODDSrv) SRV:64bit: - [2009/07/14 03:41:27 \| 001,011,712 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2011/05/18 22:06:08 \| 003,275,864 \| ---- \| M] () [Auto \| Running] -- c:\Program Files (x86)\Common Files\Akamai\netsession_win_8832f4b.dll -- (Akamai) SRV - [2011/03/30 22:22:21 \| 000,075,136 \| ---- \| M] () [Auto \| Running] -- C:\Windows\SysWOW64\PnkBstrA.exe -- (PnkBstrA) SRV - [2011/03/25 23:26:46 \| 000,334,448 \| ---- \| M] (VMware, Inc.) [Auto \| Running] -- C:\Windows\SysWOW64\vmnetdhcp.exe -- (VMnetDHCP) SRV - [2011/03/25 23:26:28 \| 000,404,080 \| ---- \| M] (VMware, Inc.) [Auto \| Running] -- C:\Windows\SysWOW64\vmnat.exe -- (VMware NAT Service) SRV - [2011/03/25 23:26:16 \| 000,113,264 \| ---- \| M] (VMware, Inc.) [Auto \| Running] -- C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe -- (VMAuthdService) SRV - [2011/03/25 22:27:40 \| 000,539,248 \| ---- \| M] (VMware, Inc.) [Auto \| Running] -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator.exe -- (VMUSBArbService) SRV - [2011/03/21 13:21:24 \| 000,632,832 \| ---- \| M] (Nokia) [On_Demand \| Stopped] -- C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe -- (ServiceLayer) SRV - [2011/02/02 14:08:16 \| 000,018,656 \| ---- \| M] () [Auto \| Running] -- C:\Program Files (x86)\Autodesk\Content Service\Connect.Service.ContentService.exe -- (Autodesk Content Service) SRV - [2010/10/26 14:59:10 \| 000,124,368 \| ---- \| M] (Toshiba Europe GmbH) [Auto \| Running] -- C:\Program Files (x86)\Toshiba TEMPRO\TemproSvc.exe -- (TemproMonitoringService) Notebook Performance Tuning Service (TEMPRO) SRV - [2010/10/12 19:59:12 \| 000,206,072 \| ---- \| M] (WildTangent, Inc.) [On_Demand \| Stopped] -- C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe -- (GamesAppService) SRV - [2010/08/19 13:57:14 \| 000,191,024 \| ---- \| M] (VMware, Inc.) [On_Demand \| Stopped] -- C:\Program Files (x86)\VMware\VMware Player\vmware-ufad.exe -- (ufad-ws60) SRV - [2010/03/18 13:16:28 \| 000,130,384 \| ---- \| M] (Microsoft Corporation) [Auto \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32) SRV - [2009/10/27 21:12:14 \| 000,252,784 \| ---- \| M] (TOSHIBA CORPORATION) [Auto \| Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFIWmxSvcs64.exe -- (cfWiMAXService) SRV - [2009/10/21 11:40:00 \| 000,193,904 \| ---- \| M] (TOSHIBA CORPORATION) [On_Demand \| Running] -- C:\Program Files (x86)\TOSHIBA\Bluetooth Toshiba Stack\TosBtSrv.exe -- (TOSHIBA Bluetooth Service) SRV - [2009/10/06 10:21:50 \| 000,051,512 \| ---- \| M] (TOSHIBA Corporation) [On_Demand \| Running] -- C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe -- (TMachInfo) SRV - [2009/09/30 20:34:22 \| 002,314,240 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe -- (UNS) Intel(R) SRV - [2009/09/30 20:33:08 \| 000,262,144 \| ---- \| M] (Intel Corporation) [Auto \| Running] -- C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe -- (LMS) Intel(R) SRV - [2009/06/10 23:23:09 \| 000,066,384 \| ---- \| M] (Microsoft Corporation) [Disabled \| Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32) SRV - [2009/03/10 19:51:20 \| 000,046,448 \| ---- \| M] (TOSHIBA CORPORATION) [Auto \| Running] -- C:\Program Files (x86)\TOSHIBA\ConfigFree\CFSvcs.exe -- (ConfigFree Service) ========== Driver Services (SafeList) ========== DRV:64bit: - [2011/03/25 23:27:36 \| 000,068,720 \| ---- \| M] (VMware, Inc.) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\vmx86.sys -- (vmx86) DRV:64bit: - [2011/03/25 23:27:34 \| 000,081,008 \| ---- \| M] (VMware, Inc.) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\vmci.sys -- (vmci) DRV:64bit: - [2011/03/25 23:25:46 \| 000,031,856 \| ---- \| M] (VMware, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\VMkbd.sys -- (vmkbd) DRV:64bit: - [2011/03/25 23:25:34 \| 000,030,320 \| ---- \| M] (VMware, Inc.) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\vmnetuserif.sys -- (VMnetuserif) DRV:64bit: - [2011/03/25 22:27:36 \| 000,038,512 \| ---- \| M] (VMware, Inc.) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\hcmon.sys -- (hcmon) DRV:64bit: - [2011/03/25 20:04:58 \| 000,045,104 \| ---- \| M] (VMware, Inc.) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\vmnetbridge.sys -- (VMnetBridge) DRV:64bit: - [2011/03/25 20:04:58 \| 000,020,016 \| ---- \| M] (VMware, Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\vmnetadapter.sys -- (VMnetAdapter) DRV:64bit: - [2011/03/11 08:41:12 \| 000,107,904 \| ---- \| M] (Advanced Micro Devices) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata) DRV:64bit: - [2011/03/11 08:41:12 \| 000,027,008 \| ---- \| M] (Advanced Micro Devices) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata) DRV:64bit: - [2011/01/18 18:05:48 \| 000,154,256 \| ---- \| M] (Oracle Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys -- (VBoxNetAdp) DRV:64bit: - [2010/12/02 15:14:26 \| 000,009,216 \| ---- \| M] (Nokia) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltjx64.sys -- (UsbserFilt) DRV:64bit: - [2010/12/02 15:14:24 \| 000,009,216 \| ---- \| M] (Nokia) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usbser_lowerfltx64.sys -- (upperdev) DRV:64bit: - [2010/12/02 15:14:22 \| 000,027,136 \| ---- \| M] (Nokia) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ccdcmbox64.sys -- (nmwcdc) DRV:64bit: - [2010/12/02 15:14:18 \| 000,019,968 \| ---- \| M] (Nokia) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\ccdcmbx64.sys -- (nmwcd) DRV:64bit: - [2010/11/20 15:33:35 \| 000,078,720 \| ---- \| M] (Hewlett-Packard Company) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD) DRV:64bit: - [2010/11/20 13:07:05 \| 000,059,392 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TsUsbFlt.sys -- (TsUsbFlt) DRV:64bit: - [2010/11/20 12:43:57 \| 000,032,768 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\usbser.sys -- (usbser) DRV:64bit: - [2010/10/24 22:25:38 \| 000,072,064 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\NisDrvWFP.sys -- (NisDrv) DRV:64bit: - [2010/10/02 16:11:56 \| 000,834,544 \| ---- \| M] () [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd) DRV:64bit: - [2010/09/23 00:36:48 \| 000,048,488 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\fssfltr.sys -- (fssfltr) DRV:64bit: - [2010/07/02 02:14:00 \| 001,111,144 \| ---- \| M] (Realtek Semiconductor Corporation ) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\rtl8192se.sys -- (rtl8192se) DRV:64bit: - [2010/04/27 16:57:20 \| 000,016,200 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\WmVirHid.sys -- (WmVirHid) DRV:64bit: - [2010/04/27 16:57:14 \| 000,036,936 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\WmHidLo.sys -- (WmHidLo) DRV:64bit: - [2010/04/27 16:57:12 \| 000,026,440 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\WmBEnum.sys -- (WmBEnum) DRV:64bit: - [2010/04/27 14:03:12 \| 000,077,512 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\WmXlCore.sys -- (WmXlCore) DRV:64bit: - [2010/04/27 14:02:42 \| 000,043,976 \| ---- \| M] (Logitech Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\WmFilter.sys -- (WmFilter) DRV:64bit: - [2010/01/15 14:22:08 \| 000,538,136 \| ---- \| M] (Intel Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\iaStor.sys -- (iaStor) DRV:64bit: - [2009/11/06 00:15:40 \| 000,291,328 \| ---- \| M] (Realtek ) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167) DRV:64bit: - [2009/10/15 21:11:26 \| 000,307,760 \| ---- \| M] (Synaptics Incorporated) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\SynTP.sys -- (SynTP) DRV:64bit: - [2009/09/24 18:55:00 \| 000,212,072 \| ---- \| M] (TOSHIBA CORPORATION) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\tosrfbd.sys -- (tosrfbd) DRV:64bit: - [2009/09/17 13:54:54 \| 000,056,344 \| ---- \| M] (Intel Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\HECIx64.sys -- (HECIx64) Intel(R) DRV:64bit: - [2009/09/14 15:30:00 \| 000,058,744 \| ---- \| M] (TOSHIBA CORPORATION) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\tosrfusb.sys -- (Tosrfusb) DRV:64bit: - [2009/09/09 01:31:52 \| 006,204,928 \| ---- \| M] (ATI Technologies Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (atikmdag) DRV:64bit: - [2009/08/05 13:56:00 \| 000,063,856 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\TosRfSnd.sys -- (TosRfSnd) DRV:64bit: - [2009/07/30 22:02:36 \| 000,044,912 \| ---- \| M] (COMPAL ELECTRONIC INC.) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\LPCFilter.sys -- (LPCFilter) DRV:64bit: - [2009/07/30 21:22:04 \| 000,027,784 \| ---- \| M] (TOSHIBA Corporation.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\tdcmdpst.sys -- (tdcmdpst) DRV:64bit: - [2009/07/28 21:02:00 \| 000,081,768 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| System \| Running] -- C:\Windows\SysNative\drivers\tosrfcom.sys -- (Tosrfcom) DRV:64bit: - [2009/07/24 16:57:08 \| 000,482,384 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\tos_sps64.sys -- (tos_sps64) DRV:64bit: - [2009/07/24 12:33:00 \| 000,026,472 \| ---- \| M] (TOSHIBA Corporation.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\tosrfnds.sys -- (tosrfnds) DRV:64bit: - [2009/07/14 17:31:18 \| 000,026,840 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| Boot \| Running] -- C:\Windows\SysNative\drivers\TVALZ_O.SYS -- (TVALZ) DRV:64bit: - [2009/07/14 03:52:20 \| 000,194,128 \| ---- \| M] (AMD Technologies Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs) DRV:64bit: - [2009/07/14 03:48:04 \| 000,065,600 \| ---- \| M] (LSI Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2) DRV:64bit: - [2009/07/14 03:45:55 \| 000,024,656 \| ---- \| M] (Promise Technology) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor) DRV:64bit: - [2009/07/14 02:10:47 \| 000,011,264 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\rootmdm.sys -- (ROOTMODEM) DRV:64bit: - [2009/07/13 23:12:00 \| 000,019,824 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\tosrfec.sys -- (tosrfec) DRV:64bit: - [2009/06/22 18:06:38 \| 000,035,008 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\PGEffect.sys -- (PGEffect) DRV:64bit: - [2009/06/19 20:15:22 \| 000,014,472 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| Auto \| Running] -- C:\Windows\SysNative\drivers\TVALZFL.sys -- (TVALZFL) DRV:64bit: - [2009/06/19 11:00:00 \| 000,094,336 \| ---- \| M] (TOSHIBA Corporation.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\Tosrfhid.sys -- (Tosrfhid) DRV:64bit: - [2009/06/19 10:59:00 \| 000,050,664 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\tosrfbnp.sys -- (tosrfbnp) DRV:64bit: - [2009/06/17 13:01:00 \| 000,054,664 \| ---- \| M] (TOSHIBA Corporation) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\tosporte.sys -- (tosporte) DRV:64bit: - [2009/06/10 23:01:11 \| 001,485,312 \| ---- \| M] (Conexant Systems, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VSTDPV6.SYS -- (SrvHsfV92) DRV:64bit: - [2009/06/10 23:01:11 \| 000,740,864 \| ---- \| M] (Conexant Systems, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VSTCNXT6.SYS -- (SrvHsfWinac) DRV:64bit: - [2009/06/10 23:01:11 \| 000,292,864 \| ---- \| M] (Conexant Systems, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\VSTAZL6.SYS -- (SrvHsfHDA) DRV:64bit: - [2009/06/10 22:38:56 \| 000,000,308 \| ---- \| M] () [File_System \| On_Demand \| Running] -- C:\Windows\SysNative\wbem\ntfs.mof -- (Ntfs) DRV:64bit: - [2009/06/10 22:34:33 \| 003,286,016 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv) DRV:64bit: - [2009/06/10 22:34:28 \| 000,468,480 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv) DRV:64bit: - [2009/06/10 22:34:23 \| 000,270,848 \| ---- \| M] (Broadcom Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a) DRV:64bit: - [2009/06/10 22:31:59 \| 000,031,232 \| ---- \| M] (Hauppauge Computer Works, Inc.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir) DRV:64bit: - [2009/05/20 19:04:56 \| 000,202,016 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Running] -- C:\Windows\SysNative\drivers\RtHDMIVX.sys -- (RTHDMIAzAudService) DRV:64bit: - [2008/08/28 12:44:42 \| 000,025,600 \| ---- \| M] (Nokia) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysNative\drivers\pccsmcfdx64.sys -- (pccsmcfd) DRV - [2010/08/19 13:56:38 \| 000,032,816 \| ---- \| M] (VMware, Inc.) [Kernel \| Auto \| Running] -- C:\Program Files (x86)\VMware\VMware Player\vstor2-ws60.sys -- (vstor2-ws60) DRV - [2009/09/22 18:39:56 \| 000,225,280 \| ---- \| M] (Realtek Semiconductor Corp.) [Kernel \| On_Demand \| Stopped] -- C:\Windows\SysWOW64\drivers\RtsUStor.sys -- (RSUSBSTOR) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.google.rs/ IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://uk.msn.com/?ocid=iehp IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-GB IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 4B 43 55 72 7A 07 CC 01 [binary data] IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = .local ========== FireFox ========== FF - HKLM\software\mozilla\Firefox\Extensions\\{A27F3FEF-1113-4cfb-A032-8E12D7D8EE70}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension\ [2011/05/07 19:58:33 \| 000,000,000 \| ---D \| M] FF - HKLM\software\mozilla\Thunderbird\Extensions\\{CCB7D94B-CA92-4E3F-B79D-ADE0F07ADC74}: C:\Program Files (x86)\Nokia\Nokia Ovi Suite\Connectors\Thunderbird Connector\ThunderbirdExtension\ [2011/05/07 19:58:33 \| 000,000,000 \| ---D \| M] [2010/09/14 12:53:51 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Nemanja\AppData\Roaming\mozilla\Extensions [2010/07/31 14:29:20 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Nemanja\AppData\Roaming\mozilla\Extensions\mozswing@mozswing.org [2011/03/29 02:07:52 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files (x86)\Mozilla Firefox\extensions [2010/08/17 18:40:26 \| 000,000,000 \| ---D \| M] (Skype extension for Firefox) -- C:\Program Files (x86)\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1} O1 HOSTS File: ([2011/04/27 21:55:02 \| 000,433,294 \| R--- \| M]) - C:\Windows\SysNative\drivers\etc\hosts O1 - Hosts: 127.0.0.1 www.007guard.com O1 - Hosts: 127.0.0.1 007guard.com O1 - Hosts: 127.0.0.1 008i.com O1 - Hosts: 127.0.0.1 www.008k.com O1 - Hosts: 127.0.0.1 008k.com O1 - Hosts: 127.0.0.1 www.00hq.com O1 - Hosts: 127.0.0.1 00hq.com O1 - Hosts: 127.0.0.1 010402.com O1 - Hosts: 127.0.0.1 www.032439.com O1 - Hosts: 127.0.0.1 032439.com O1 - Hosts: 127.0.0.1 www.0scan.com O1 - Hosts: 127.0.0.1 0scan.com O1 - Hosts: 127.0.0.1 1000gratisproben.com O1 - Hosts: 127.0.0.1 www.1000gratisproben.com O1 - Hosts: 127.0.0.1 1001namen.com O1 - Hosts: 127.0.0.1 www.1001namen.com O1 - Hosts: 127.0.0.1 100888290cs.com O1 - Hosts: 127.0.0.1 www.100888290cs.com O1 - Hosts: 127.0.0.1 www.100sexlinks.com O1 - Hosts: 127.0.0.1 100sexlinks.com O1 - Hosts: 127.0.0.1 10sek.com O1 - Hosts: 127.0.0.1 www.10sek.com O1 - Hosts: 127.0.0.1 www.1-2005-search.com O1 - Hosts: 127.0.0.1 1-2005-search.com O1 - Hosts: 127.0.0.1 123fporn.info O1 - Hosts: 14910 more lines... O2:64bit: - BHO: (SimpleAdblock Class) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblockx64.dll (Simple Adblock) O2 - BHO: (SimpleAdblock Class) - {FFCB3198-32F3-4E8B-9539-4324694ED664} - C:\Program Files (x86)\Common Files\Simple Adblock\SimpleAdblock.dll (Simple Adblock) O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found. O4:64bit: - HKLM..\Run: [00TCrdMain] C:\Program Files\TOSHIBA\FlashCards\TCrdMain.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [HSON] C:\Program Files\TOSHIBA\TBS\HSON.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [MSC] C:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation) O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor) O4:64bit: - HKLM..\Run: [SmartFaceVWatcher] C:\Program Files\TOSHIBA\SmartFaceV\SmartFaceVWatcher.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [SmoothView] C:\Program Files\TOSHIBA\SmoothView\SmoothView.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [Teco] C:\Program Files\TOSHIBA\TECO\Teco.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [Toshiba Registration] C:\Program Files\TOSHIBA\Registration\ToshibaReminder.exe (Toshiba Europe GmbH) O4:64bit: - HKLM..\Run: [Toshiba TEMPRO] C:\Program Files (x86)\Toshiba TEMPRO\TemproTray.exe (Toshiba Europe GmbH) O4:64bit: - HKLM..\Run: [TosNC] C:\Program Files\TOSHIBA\BulletinBoard\TosNcCore.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [TosReelTimeMonitor] C:\Program Files\TOSHIBA\ReelTime\TosReelTimeMonitor.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [TosSENotify] C:\Program Files\TOSHIBA\TOSHIBA HDD SSD Alert\TosWaitSrv.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [TosWaitSrv] C:\Program Files\TOSHIBA\TPHM\TosWaitSrv.exe (TOSHIBA Corporation) O4:64bit: - HKLM..\Run: [TPwrMain] C:\Program Files\TOSHIBA\Power Saver\TPwrMain.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [Adobe Reader Speed Launcher] C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe (Adobe Systems Incorporated) O4 - HKLM..\Run: [DivXUpdate] C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe () O4 - HKLM..\Run: [HWSetup] C:\Program Files\TOSHIBA\Utilities\HWSetup.exe (TOSHIBA Electronics, Inc.) O4 - HKLM..\Run: [KeNotify] C:\Program Files (x86)\TOSHIBA\Utilities\KeNotify.exe (TOSHIBA CORPORATION) O4 - HKLM..\Run: [MDS_Menu] C:\Program Files (x86)\Olympus\ib\MUITransfer\MUIStartMenu.exe (CyberLink Corp.) O4 - HKLM..\Run: [NokiaMServer] C:\Program Files (x86)\Common Files\Nokia\MPlatform\NokiaMServer.exe (Nokia) O4 - HKLM..\Run: [Olympus ib] C:\Program Files (x86)\Olympus\ib\olycamdetect.exe (OLYMPUS IMAGING CORP.) O4 - HKLM..\Run: [StartCCC] C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [SVPWUTIL] C:\Program Files (x86)\TOSHIBA\Utilities\SVPWUTIL.exe (TOSHIBA CORPORATION) O4 - HKLM..\Run: [ToshibaServiceStation] C:\Program Files (x86)\TOSHIBA\TOSHIBA Service Station\ToshibaServiceStation.exe (TOSHIBA Corporation) O4 - HKLM..\Run: [TWebCamera] C:\Program Files (x86)\TOSHIBA\TOSHIBA Web Camera Application\TWebCamera.exe (TOSHIBA CORPORATION.) O4 - HKLM..\Run: [VMware hqtray] C:\Program Files (x86)\VMware\VMware Player\hqtray.exe (VMware, Inc.) O4 - HKCU..\Run: [] File not found O4 - HKCU..\Run: [MCShield] C:\Program Files (x86)\MCShield\MCShieldRTM.exe () O4 - HKCU..\Run: [MCShieldTray] C:\Program Files (x86)\MCShield\MCShieldTray.exe () O4 - HKCU..\Run: [Olympus ib] C:\Program Files (x86)\Olympus\ib\olycamdetect.exe (OLYMPUS IMAGING CORP.) O4 - HKCU..\Run: [TOSHIBA Online Product Information] C:\Program Files (x86)\TOSHIBA\Toshiba Online Product Information\TOPI.exe (TOSHIBA) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O10:64bit: - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10:64bit: - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Program Files (x86)\VMware\VMware Player\vsocklib.dll (VMware, Inc.) O13 - gopher Prefix: missing O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Reg Error: Key error.) O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} http://download.microsoft.com/download/E/5/6/E5611.....ontrol.cab (Windows Genuine Advantage Validation Tool) O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {95B5D20C-BD31-4489-8ABF-F8C8BE748463} http://zone.msn.com/bingame/zpagames/zpa_hrtz.cab99160.cab (MSN Games – Hearts) O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} http://cdn2.zone.msn.com/binFramework/v10/ZPAFramework.cab102118.cab (MSN Games - Installer) O16 - DPF: {C345E174-3E87-4F41-A01C-B066A90A49B4} http://trial.trymicrosoftoffice.com/trialoaa/buyms...../wrc32.ocx (WRC Class) O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_24-windows-i586.cab (Java Plug-in 1.6.0_24) O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O18:64bit: - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\ms-itss {0A9007C0-4076-11D3-8789-0000F8105754} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - Reg Error: Key error. File not found O18:64bit: - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - Reg Error: Key error. File not found O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies) O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation) O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - CLSID or File not found. O32 - HKLM CDRom: AutoRun - 1 O34 - HKLM BootExecute: (autocheck autochk ) - File not found O35:64bit: - HKLM\..comfile [open] -- "%1" %* O35:64bit: - HKLM\..exefile [open] -- "%1" %* O35 - HKLM\..comfile [open] -- "%1" %* O35 - HKLM\..exefile [open] -- "%1" %* O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %* O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* ========== Files/Folders - Created Within 30 Days ========== [2011/06/06 00:38:05 \| 000,580,096 \| ---- \| C] (OldTimer Tools) -- C:\Users\Nemanja\Desktop\OTL.exe [2011/05/30 19:23:42 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OLYMPUS ib [2011/05/30 18:56:08 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\CyberLink [2011/05/30 18:55:01 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\AppData\Local\OLYMPUS [2011/05/30 18:53:41 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Olympus [2011/05/30 18:53:05 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Temp [2011/05/27 22:28:09 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Notepad++ [2011/05/27 22:28:09 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++ [2011/05/27 22:28:08 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\AppData\Roaming\Notepad++ [2011/05/27 22:28:08 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Notepad++ [2011/05/24 22:32:36 \| 000,027,520 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\Diskdump.sys [2011/05/23 23:37:49 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\Desktop\sajt [2011/05/22 21:33:20 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\Documents\Excel2010SBS 2 [2011/05/17 21:08:24 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Service [2011/05/17 21:08:20 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\Photo-Service [2011/05/17 18:44:35 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MCShield [2011/05/17 18:44:32 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\MCShield [2011/05/15 22:47:23 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\Documents\OEI drugi kolokvijum [2011/05/14 01:28:28 \| 000,404,640 \| ---- \| C] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2011/05/12 17:31:00 \| 000,142,336 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\poqexec.exe [2011/05/12 17:31:00 \| 000,123,904 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\poqexec.exe [2011/05/11 16:20:36 \| 005,562,240 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\ntoskrnl.exe [2011/05/11 16:20:33 \| 003,967,872 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntkrnlpa.exe [2011/05/11 16:20:33 \| 003,912,576 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysWow64\ntoskrnl.exe [2011/05/11 16:20:28 \| 000,325,120 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbport.sys [2011/05/11 16:20:27 \| 000,007,936 \| ---- \| C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\usbd.sys [2011/05/11 01:04:02 \| 000,000,000 \| --SD \| C] -- C:\Users\Nemanja\Documents\My Data Sources [2011/05/07 20:13:10 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\NokiaAccount [2011/05/07 20:10:24 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\Documents\Ovi [2011/05/07 20:06:46 \| 000,000,000 \| ---D \| C] -- C:\Users\Nemanja\AppData\Roaming\Nokia Ovi Suite [2011/05/07 20:00:49 \| 000,000,000 \| ---D \| C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nokia [2011/05/07 19:58:07 \| 000,000,000 \| ---D \| C] -- C:\Program Files (x86)\PC Connectivity Solution [1 C:\Windows\.tmp files -> C:\Windows\.tmp -> ] ========== Files - Modified Within 30 Days ========== [2011/06/06 00:38:05 \| 000,580,096 \| ---- \| M] (OldTimer Tools) -- C:\Users\Nemanja\Desktop\OTL.exe [2011/06/06 00:18:21 \| 000,000,900 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job [2011/06/06 00:08:36 \| 000,016,080 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2011/06/06 00:08:36 \| 000,016,080 \| -H-- \| M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2011/06/06 00:01:31 \| 000,000,328 \| ---- \| M] () -- C:\Windows\tasks\GlaryInitialize.job [2011/06/06 00:01:30 \| 000,000,896 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job [2011/06/06 00:01:08 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2011/06/06 00:01:00 \| 3112,386,560 \| -HS- \| M] () -- C:\hiberfil.sys [2011/06/05 23:44:00 \| 000,000,916 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2486145639-3277750120-4253158006-1001UA.job [2011/06/05 23:35:09 \| 000,779,938 \| ---- \| M] () -- C:\Windows\SysNative\PerfStringBackup.INI [2011/06/05 23:35:09 \| 000,652,894 \| ---- \| M] () -- C:\Windows\SysNative\perfh009.dat [2011/06/05 23:35:09 \| 000,121,450 \| ---- \| M] () -- C:\Windows\SysNative\perfc009.dat [2011/06/05 23:32:42 \| 000,266,038 \| ---- \| M] () -- C:\Users\Nemanja\32TM1-Januar-2009.pdf [2011/06/05 23:32:38 \| 001,067,596 \| ---- \| M] () -- C:\Users\Nemanja\92TM1-Juni-2009-Resenja.pdf [2011/06/05 23:32:30 \| 001,366,843 \| ---- \| M] () -- C:\Users\Nemanja\74tm1_10_04-apr_resenja.pdf [2011/06/05 23:32:28 \| 001,606,171 \| ---- \| M] () -- C:\Users\Nemanja\23tm1_10_01-jan_resenja.pdf [2011/06/05 23:32:22 \| 001,416,182 \| ---- \| M] () -- C:\Users\Nemanja\30tm1 sep 10 resenja.pdf [2011/06/05 23:32:16 \| 000,598,592 \| ---- \| M] () -- C:\Users\Nemanja\29TM1-2011_01-januar-A_resenja.pdf [2011/06/05 23:32:06 \| 001,394,744 \| ---- \| M] () -- C:\Users\Nemanja\51tm1_10_06-jun_resenja.pdf [2011/06/05 01:44:00 \| 000,000,864 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-2486145639-3277750120-4253158006-1001Core.job [2011/06/04 15:12:10 \| 000,404,640 \| ---- \| M] (Adobe Systems Incorporated) -- C:\Windows\SysWow64\FlashPlayerCPLApp.cpl [2011/05/27 02:32:58 \| 000,000,089 \| ---- \| M] () -- C:\Users\Nemanja\AppData\Local\msmathematics.qat.Nemanja [2011/05/27 01:40:05 \| 000,002,423 \| ---- \| M] () -- C:\Users\Nemanja\Desktop\Google Chrome.lnk [2011/05/22 16:13:18 \| 000,161,579 \| ---- \| M] () -- C:\Users\Nemanja\Documents\7DrugikolGM1.pdf [2011/05/22 16:13:13 \| 000,091,395 \| ---- \| M] () -- C:\Users\Nemanja\Documents\47priprema rac kol 2010.pdf [2011/05/22 12:33:57 \| 000,546,960 \| ---- \| M] () -- C:\Windows\SysNative\FNTCACHE.DAT [2011/05/17 21:04:26 \| 000,056,116 \| ---- \| M] () -- C:\Users\Nemanja\92Pitanja za vezbe GM1.pdf [2011/05/10 00:45:25 \| 000,050,527 \| ---- \| M] () -- C:\Users\Nemanja\Documents\Animated_overlapping_color_bars.potx [2011/05/09 21:54:39 \| 009,875,773 \| ---- \| M] () -- C:\Users\Nemanja\Documents\PresentationPro_InMotionVideo.potx [2011/05/07 20:00:49 \| 000,002,107 \| ---- \| M] () -- C:\Users\Public\Desktop\Nokia Ovi Suite.lnk [2011/05/07 19:51:37 \| 000,004,608 \| ---- \| M] () -- C:\Users\Nemanja\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [1 C:\Windows\.tmp files -> C:\Windows\.tmp -> ] ========== Files Created - No Company Name ========== [2011/06/05 23:32:42 \| 000,266,038 \| ---- \| C] () -- C:\Users\Nemanja\32TM1-Januar-2009.pdf [2011/06/05 23:32:38 \| 001,067,596 \| ---- \| C] () -- C:\Users\Nemanja\92TM1-Juni-2009-Resenja.pdf [2011/06/05 23:32:30 \| 001,366,843 \| ---- \| C] () -- C:\Users\Nemanja\74tm1_10_04-apr_resenja.pdf [2011/06/05 23:32:26 \| 001,606,171 \| ---- \| C] () -- C:\Users\Nemanja\23tm1_10_01-jan_resenja.pdf [2011/06/05 23:32:20 \| 001,416,182 \| ---- \| C] () -- C:\Users\Nemanja\30tm1 sep 10 resenja.pdf [2011/06/05 23:32:16 \| 000,598,592 \| ---- \| C] () -- C:\Users\Nemanja\29TM1-2011_01-januar-A_resenja.pdf [2011/06/05 23:32:11 \| 001,394,744 \| ---- \| C] () -- C:\Users\Nemanja\51tm1_10_06-jun_resenja.pdf [2011/05/22 16:13:18 \| 000,161,579 \| ---- \| C] () -- C:\Users\Nemanja\Documents\7DrugikolGM1.pdf [2011/05/22 16:13:13 \| 000,091,395 \| ---- \| C] () -- C:\Users\Nemanja\Documents\47priprema rac kol 2010.pdf [2011/05/17 21:04:25 \| 000,056,116 \| ---- \| C] () -- C:\Users\Nemanja\92Pitanja za vezbe GM1.pdf [2011/05/10 00:45:29 \| 000,050,527 \| ---- \| C] () -- C:\Users\Nemanja\Documents\Animated_overlapping_color_bars.potx [2011/05/09 21:54:45 \| 009,875,773 \| ---- \| C] () -- C:\Users\Nemanja\Documents\PresentationPro_InMotionVideo.potx [2011/05/07 20:00:49 \| 000,002,107 \| ---- \| C] () -- C:\Users\Public\Desktop\Nokia Ovi Suite.lnk [2011/03/30 22:22:22 \| 000,270,240 \| ---- \| C] () -- C:\Windows\SysWow64\PnkBstrB.exe [2011/03/30 22:22:21 \| 000,075,136 \| ---- \| C] () -- C:\Windows\SysWow64\PnkBstrA.exe [2011/01/29 01:28:35 \| 000,000,038 \| ---- \| C] () -- C:\Windows\avisplitter.ini [2011/01/29 01:28:34 \| 000,810,496 \| ---- \| C] () -- C:\Windows\SysWow64\xvidcore.dll [2011/01/29 01:28:34 \| 000,183,808 \| ---- \| C] () -- C:\Windows\SysWow64\xvidvfw.dll [2011/01/29 01:28:34 \| 000,080,896 \| ---- \| C] () -- C:\Windows\SysWow64\ff_vfw.dll [2011/01/27 00:44:32 \| 000,009,321 \| ---- \| C] () -- C:\Users\Nemanja\AppData\Roaming\Microsoft Excel 97-2003.EML [2011/01/17 00:41:26 \| 000,000,089 \| ---- \| C] () -- C:\Users\Nemanja\AppData\Local\msmathematics.qat.Nemanja [2010/12/22 19:15:09 \| 000,765,482 \| ---- \| C] () -- C:\Windows\SysWow64\PerfStringBackup.INI [2010/11/29 01:11:32 \| 000,001,189 \| ---- \| C] () -- C:\Users\Nemanja\AppData\Roaming\vso_ts_preview.xml [2010/11/21 00:30:42 \| 000,004,608 \| ---- \| C] () -- C:\Users\Nemanja\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010/08/17 18:41:38 \| 000,000,056 \| -H-- \| C] () -- C:\ProgramData\ezsidmv.dat [2010/08/09 23:33:23 \| 000,451,072 \| ---- \| C] () -- C:\Windows\SysWow64\ISSRemoveSP.exe [2010/07/06 17:38:36 \| 000,000,156 \| ---- \| C] () -- C:\Users\Nemanja\AppData\Roaming\wklnhst.dat [2010/07/05 21:42:08 \| 000,165,376 \| ---- \| C] () -- C:\Windows\SysWow64\unrar.dll [2010/04/08 11:49:31 \| 000,000,000 \| ---- \| C] () -- C:\Windows\NDSTray.INI [2010/03/04 19:13:26 \| 000,000,000 \| ---- \| C] () -- C:\Windows\ativpsrm.bin [2009/07/14 07:38:36 \| 000,067,584 \| --S- \| C] () -- C:\Windows\bootstat.dat [2009/07/14 04:35:51 \| 000,000,741 \| ---- \| C] () -- C:\Windows\SysWow64\NOISE.DAT [2009/07/14 04:34:42 \| 000,215,943 \| ---- \| C] () -- C:\Windows\SysWow64\dssec.dat [2009/07/14 02:10:29 \| 000,043,131 \| ---- \| C] () -- C:\Windows\mib.bin [2009/07/14 01:42:10 \| 000,064,000 \| ---- \| C] () -- C:\Windows\SysWow64\BWContextHandler.dll [2009/07/13 23:03:59 \| 000,364,544 \| ---- \| C] () -- C:\Windows\SysWow64\msjetoledb40.dll [2009/06/10 23:26:10 \| 000,673,088 \| ---- \| C] () -- C:\Windows\SysWow64\mlang.dat [2009/04/28 05:37:00 \| 000,028,672 \| ---- \| C] () -- C:\Windows\SysWow64\SPCtl.dll ========== Files - Unicode (All) ========== [2010/07/20 17:59:04 \| 001,445,610 \| ---- \| C] ()(C:\Users\Nemanja\Documents\X ?????????? ?????????.docx) -- C:\Users\Nemanja\Documents\X Београдска гимназија.docx [2010/05/26 20:04:52 \| 001,445,610 \| ---- \| M] ()(C:\Users\Nemanja\Documents\X ?????????? ?????????.docx) -- C:\Users\Nemanja\Documents\X Београдска гимназија.docx ========== Alternate Data Streams ========== @Alternate Data Stream - 143 bytes -> C:\Users\Nemanja\AppData\Roaming\Microsoft Excel 97-2003.EML:OECustomProperty < End of report > https://www.mycity.rs/must-login.png p.s. sada sam preko kabla prikačen na net. Dopuna: 06 Jun 2011 0:51 e da, ne znam da li se vidi u logu, ali sad sam iskljucio wireless adapter, da vas ne buni.

Profil

Fil Poslao: 06 Jun 2011 17:43 Idi na vrh
offline Fil Legendarni građanin Pridružio: 11 Jun 2009 Poruke: 16586	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav, GOKU91 Problem sa laptopom i wirelessom nije uzrokovan sa malicioznim programima. Datoteka "csrss.exe" je legitimna, i ne predstavlja trojanca. Preporučujem ti da deinstaliraš GamePlayLabs (unutar Control Panela i stavke Programs and Features). Takođe proveri da li ima ostataka ove aplikacije unutar pretraživača Chrome. U Adress Bar ukucaj: chrome://plugins i ukoliko nađeš GamePlayLabs plugin onemogući ga (disable). Predlažem da otvoriš temu u Windows potforumu za rešavanje problema.

Profil

GOKU91 Poslao: 06 Jun 2011 18:12 Idi na vrh
offline GOKU91 Ugledni građanin Pridružio: 13 Jul 2007 Poruke: 363	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Ok, hvala

Profil

MyCity » Ambulanta -> Arhiva Ambulante » cudno ponašanje

Ko je trenutno na forumu

Ukupno su 1060 korisnika na forumu :: 53 registrovanih, 10 sakrivenih i 997 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: 357magnum, Andrija357, ArchaBasha, bbogdan, bojan_t, bojankrstc, BORUTUS, branko7, BratSrpska, cavatina, ccoogg123, cenejac111, darkangel, djboj, dolinalima, Excalibur13, FOX, Hans Gajger, Ilija Cvorovic, Istman, Kibice, kybonacci, laganini123, Litostroton, MB120mm, Mendonca, milenko crazy north, mnn2, MrNo, nebkv, nick79, Niko Bitan, nuke92, Povratak1912, radionica1, raketaš, Regrut Boskica, ruma, SD izvidjac, stegonosa, Suva planina, trutcina, Tvrtko I, vathra, vukovi, Webb, yrraf, YU-UKI, YugoSlav, zastavnik, Žoržo, Žrnov, šumar bk2

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by