Poslao: 18 Jun 2015 09:18
|
offline
- elvin85
- Novi MyCity građanin
- Pridružio: 10 Mar 2011
- Poruke: 27
|
Pozdrav,
prije par dana prilikom paljenja kompjuter (dell d630, 2GB ram, c2duo 1,8ghz) mi je izbacio nekakav error longouin.exe kliknuo sam samo na ok i kompjuter je startovao. Medjutim, kada sam krenuo da udjem u google chrome nisam mogao samo mi izbaci gresku gdje pise kako program ne moze startovati jer nedostaje wkscli.dll i da probam reinstalirati program. Pokusao sam i obrisao chrome ali vise nisam mogao da ga instaliram jer mi samo izbacuje iznova ovu gresku.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 13-06-2015
Ran by CRYSIS (administrator) on CRYSIS-PC on 18-06-2015 09:12:02
Running from C:\Users\CRYSIS\Desktop
Loaded Profiles: CRYSIS (Available Profiles: CRYSIS)
Platform: Microsoft Windows 7 Starter (X86) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Company) C:\Program Files\Popcorn Time\Updater.exe
(Intel Corporation) C:\Windows\System32\igfxtray.exe
(Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Intel Corporation) C:\Windows\System32\igfxsrvc.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
(Microsoft Corporation) C:\Program Files\Internet Explorer\iexplore.exe
==================== Registry (Whitelisted) ==================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [152392 2014-05-14] (Apple Inc.)
HKU\S-1-5-21-1326385590-816306483-3295208736-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\system32\Macromed\Flash\FlashUtil32_12_0_0_77_ActiveX.exe [841096 2014-04-07] (Adobe Systems Incorporated)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
HKU\S-1-5-21-1326385590-816306483-3295208736-1000\Software\Microsoft\Internet Explorer\Main,Start Page = google.ba/?gws_rd=cr&ei=39hCU5TUH8ertAalrIDoCw
HKU\S-1-5-21-1326385590-816306483-3295208736-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = msn.com/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_25\bin\ssv.dll [2015-01-07] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_25\bin\jp2ssv.dll [2015-01-07] (Oracle Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll [2013-02-27] (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
FireFox:
========
FF Plugin: @Apple.com/iTunes,version=1.0 -> C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll [2014-02-21] ()
FF Plugin: @java.com/DTPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\dtplugin\npDeployJava1.dll [2015-01-07] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.25.2 -> C:\Program Files\Java\jre1.8.0_25\bin\plugin2\npjp2.dll [2015-01-07] (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-25] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-25] (Google Inc.)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-07-23] (VideoLAN)
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\eudict.xml [2015-05-26]
Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR Profile: C:\Users\CRYSIS\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\CRYSIS\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2014-04-05]
CHR Extension: (Google Drive) - C:\Users\CRYSIS\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2014-04-05]
CHR Extension: (YouTube) - C:\Users\CRYSIS\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-04-05]
CHR Extension: (Google Search) - C:\Users\CRYSIS\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2014-04-05]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\CRYSIS\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-06-11]
CHR Extension: (Google Wallet) - C:\Users\CRYSIS\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2014-04-05]
CHR Extension: (Gmail) - C:\Users\CRYSIS\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2014-04-05]
========================== Services (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 Update service; C:\Program Files\Popcorn Time\Updater.exe [335360 2014-12-17] (Company) [File not signed]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [680960 2009-07-14] (Microsoft Corporation)
S2 eventlog; %SystemRoot%\System32\wevtsvc.dll [X]
==================== Drivers (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 hitmanpro37; C:\Windows\system32\drivers\hitmanpro37.sys [35992 2015-02-14] ()
S3 MBAMSwissArmy; \??\C:\Windows\system32\drivers\MBAMSwissArmy.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-18 09:12 - 2015-06-18 09:12 - 00006449 _____ C:\Users\CRYSIS\Desktop\FRST.txt
2015-06-18 09:11 - 2015-06-18 09:12 - 00000000 ____D C:\FRST
2015-06-18 09:10 - 2015-06-18 09:10 - 01148416 _____ (Farbar) C:\Users\CRYSIS\Desktop\FRST.exe
2015-06-17 19:02 - 2015-06-17 19:02 - 00146688 _____ C:\Windows\Minidump\061715-15880-01.dmp
2015-06-17 12:23 - 2015-06-17 12:23 - 00000000 __RSH C:\MSDOS.SYS
2015-06-17 12:23 - 2015-06-17 12:23 - 00000000 __RSH C:\IO.SYS
2015-06-15 19:45 - 2015-06-15 19:45 - 00146688 _____ C:\Windows\Minidump\061515-15865-01.dmp
2015-06-14 19:55 - 2015-06-14 19:55 - 00001117 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2015-06-14 19:55 - 2015-06-14 19:55 - 00001105 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2015-06-14 19:55 - 2015-06-14 19:55 - 00000000 ____D C:\ProgramData\Mozilla
2015-06-14 19:55 - 2015-06-14 19:55 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2015-06-14 19:55 - 2015-06-14 19:55 - 00000000 ____D C:\Program Files\Mozilla Firefox
2015-06-14 19:42 - 2015-02-17 11:20 - 00018992 _____ (Dll-Files.com) C:\Windows\system32\roboot.exe
2015-06-14 19:37 - 2015-06-14 19:37 - 00000000 ____D C:\Users\CRYSIS\AppData\Roaming\KSafe
2015-06-14 19:37 - 2015-06-14 19:37 - 00000000 ____D C:\ProgramData\KSafe
2015-06-14 19:37 - 2015-06-14 19:37 - 00000000 ____D C:\Program Files\DllTool
2015-06-13 20:46 - 2015-06-13 20:46 - 00146784 _____ C:\Windows\Minidump\061315-18860-01.dmp
2015-06-06 20:14 - 2015-06-06 20:14 - 00000000 ____D C:\Users\CRYSIS\Downloads\PopcornTime
2015-06-06 20:11 - 2015-06-06 20:11 - 00000000 ____D C:\Users\CRYSIS\Documents\CPY_SAVES
2015-06-04 09:04 - 2015-06-04 09:04 - 00146832 _____ C:\Windows\Minidump\060415-25646-01.dmp
2015-06-02 18:46 - 2015-06-02 18:46 - 00150952 _____ C:\Windows\Minidump\060215-24024-01.dmp
2015-06-01 20:39 - 2015-06-01 20:39 - 00146784 _____ C:\Windows\Minidump\060115-17113-01.dmp
2015-05-28 20:55 - 2015-05-28 20:55 - 00146784 _____ C:\Windows\Minidump\052815-16863-01.dmp
2015-05-26 16:27 - 2015-05-26 16:27 - 00146832 _____ C:\Windows\Minidump\052615-18018-01.dmp
2015-05-25 11:12 - 2015-05-25 11:12 - 00146832 _____ C:\Windows\Minidump\052515-29905-01.dmp
2015-05-25 11:11 - 2015-05-25 11:11 - 00000000 _____ C:\Windows\Minidump\052515-29998-01.dmp
2015-05-25 10:35 - 2015-05-25 10:35 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d096c5c9d7b203.job
2015-05-20 12:29 - 2015-05-25 10:35 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d092e7ca090ddd.job
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2015-06-18 09:01 - 2009-07-14 06:34 - 00010272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-06-18 09:01 - 2009-07-14 06:34 - 00010272 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-06-18 08:58 - 2014-04-05 02:38 - 00726316 _____ C:\Windows\system32\PerfStringBackup.INI
2015-06-18 08:57 - 2014-04-04 09:21 - 01480790 _____ C:\Windows\WindowsUpdate.log
2015-06-18 08:54 - 2009-07-14 06:39 - 00046567 _____ C:\Windows\setupact.log
2015-06-17 19:02 - 2014-04-05 02:32 - 125506199 _____ C:\Windows\MEMORY.DMP
2015-06-17 19:02 - 2014-04-05 02:32 - 00000000 ____D C:\Windows\Minidump
2015-06-14 19:40 - 2014-04-05 02:34 - 00000000 ____D C:\Users\CRYSIS\AppData\Local\Deployment
2015-06-14 19:40 - 2014-04-05 02:34 - 00000000 ____D C:\Program Files\Google
2015-06-14 19:26 - 2015-02-04 20:15 - 00000020 _____ C:\Users\CRYSIS\AppData\Roaming\appdataFr3.bin
2015-06-13 21:00 - 2014-04-06 04:39 - 00000000 ____D C:\Users\CRYSIS\AppData\Roaming\Skype
2015-05-31 21:26 - 2014-10-13 20:58 - 00000000 ____D C:\Users\CRYSIS\Desktop\New folder
2015-05-25 11:11 - 2014-04-05 02:42 - 00008130 _____ C:\Windows\PFRO.log
2015-05-21 19:12 - 2014-04-06 04:36 - 00000000 ____D C:\ProgramData\Skype
2015-05-20 12:29 - 2015-01-07 13:40 - 00000882 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
==================== Files in the root of some directories =======
2015-02-04 20:15 - 2015-06-14 19:26 - 0000020 _____ () C:\Users\CRYSIS\AppData\Roaming\appdataFr3.bin
Some files in TEMP:
====================
C:\Users\CRYSIS\AppData\Local\Temp\HitmanPro.exe
C:\Users\CRYSIS\AppData\Local\Temp\ICReinstall_FreeFileViewerDMSetup.exe
C:\Users\CRYSIS\AppData\Local\Temp\Quarantine.exe
C:\Users\CRYSIS\AppData\Local\Temp\SkypeSetup.exe
C:\Users\CRYSIS\AppData\Local\Temp\sqlite3.dll
==================== Bamital & volsnap Check =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
mycity.rs/must-login.png
|
|
|
|
Poslao: 18 Jun 2015 20:28
|
offline
- Sass Drake
- Anti Malware Fighter
Rank 2
- Pridružio: 26 Avg 2010
- Poruke: 10622
- Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building
|
Addition.txt izvještaj nije dobro generisan, no idemo ovako:
Korak 1
Otvori Notepad i iskopiraj sljedeći tekst koji se nalazi unutar Kod polja.
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
EmptyTemp:
U okviru Notepad-a klikni na File --> Save As
Fajl nazovi Fixlist i sačuvaj na Desktop
Dvoklikom ponovo pokreni FRST.exe
Klikni na Fix i sačekaj dok program ne završi.
Ukoliko program zatraži restart računara, omogući mu da to nesmetano obavi.
Nakon završetka rada, otvoriće se fixlog.txt, sa sadržajem koji treba da kopiraš u temu.
Takođe, na Desktop-u će se nalaziti (fixlog.txt).
Korak 2
Imaš instaliranu developer verziju Google Chrome-a.
Ako je ti lično nisi instalirao/la idi u Start -> Control Panel -> Programs and Features i deinstaliraj Google Chrome. Obavezno označni opciju Also delete your browsing data.
Bookmarkse možeš da izvezeš i da ih kasnije opet ubaciš.
Kada ga deinstaliraš, skini ga sa Google sajta, https://www.google.com/chrome/browser/ i instaliraj opet.
Ponovo pokreni FRST, označi opciju Addition.txt, klikni na Scan, sačekaj da završi pa mi postavi nove izvještaje.
|
|
|
|
Poslao: 18 Jun 2015 22:53
|
offline
- elvin85
- Novi MyCity građanin
- Pridružio: 10 Mar 2011
- Poruke: 27
|
Korak prvi odradjen.
Fix result of Farbar Recovery Scan Tool (x86) Version: 13-06-2015
Ran by CRYSIS at 2015-06-18 22:33:47 Run:1
Running from C:\Users\CRYSIS\Desktop
Loaded Profiles: CRYSIS (Available Profiles: CRYSIS)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
EmptyTemp:
*****************
"HKLM\SOFTWARE\Policies\Google" => key removed successfully.
EmptyTemp: => 879.2 MB temporary data Removed.
The system needed a reboot.
==== End of Fixlog 22:34:14 ====
Drugi korak nisam mogao da odradim jer kad odem na Start -> Control Panel -> Programs and Features u listi programa mi uopste nema Google chrome. Nisam mogao ni da ga instaliram jer mi izbaci opet ovu gresku wkscli.dll.
|
|
|
|
Poslao: 18 Jun 2015 22:59
|
offline
- Sass Drake
- Anti Malware Fighter
Rank 2
- Pridružio: 26 Avg 2010
- Poruke: 10622
- Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building
|
Taj fajl je Windowsov fajl. Probaj opet da mi postaviš FRST izvještaje.
|
|
|
|
|
|
|
Poslao: 20 Jun 2015 19:29
|
offline
- Sass Drake
- Anti Malware Fighter
Rank 2
- Pridružio: 26 Avg 2010
- Poruke: 10622
- Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building
|
Sačekaj. Nismo još završili. Postavi mi opet FRST izvještaje.
|
|
|
|
Poslao: 24 Jun 2015 10:07
|
offline
- elvin85
- Novi MyCity građanin
- Pridružio: 10 Mar 2011
- Poruke: 27
|
Additional scan result of Farbar Recovery Scan Tool (x86) Version: 21-06-2015 01
Ran by CRYSIS at 2015-06-24 10:06:08
Running from C:\Users\CRYSIS\Downloads
Boot Mode: Normal
==========================================================
==================== Accounts: =============================
Administrator (S-1-5-21-1326385590-816306483-3295208736-500 - Administrator - Disabled)
CRYSIS (S-1-5-21-1326385590-816306483-3295208736-1000 - Administrator - Enabled) => C:\Users\CRYSIS
Guest (S-1-5-21-1326385590-816306483-3295208736-501 - Limited - Disabled)
==================== Security Center ========================
(If an entry is included in the fixlist, it will be removed.)
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installed Programs ======================
(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)
µTorrent (HKU\S-1-5-21-1326385590-816306483-3295208736-1000\...\uTorrent) (Version: 3.4.1.30768 - BitTorrent Inc.)
Adobe Flash Player 12 ActiveX (HKLM\...\Adobe Flash Player ActiveX) (Version: 12.0.0.77 - Adobe Systems Incorporated)
Apple Application Support (HKLM\...\{D9DAD0FF-495A-472B-9F10-BAE430A26682}) (Version: 3.0.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{18D47FA1-0440-48D3-A7E0-DA09537FF471}) (Version: 7.1.1.3 - Apple Inc.)
Google Chrome (HKLM\...\Google Chrome) (Version: 43.0.2357.130 - Google Inc.)
Google Update Helper (Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (Version: 1.3.27.5 - Google Inc.) Hidden
Intel(R) Graphics Media Accelerator Driver (HKLM\...\HDMI) (Version: 8.15.10.1930 - Intel Corporation)
Intel(R) TV Wizard (HKLM\...\TVWiz) (Version: - Intel Corporation)
iTunes (HKLM\...\{249F2B83-BF1B-4D25-AE09-72AEE3651167}) (Version: 11.2.0.114 - Apple Inc.)
Java 8 Update 25 (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319 (HKLM\...\{196BB40D-1578-3D01-B289-BEFC77A11A1E}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Mozilla Firefox 38.0.5 (x86 hr) (HKLM\...\Mozilla Firefox 38.0.5 (x86 hr)) (Version: 38.0.5 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 38.0.5 - Mozilla)
Popcorn Time (HKLM\...\Popcorn Time_is1) (Version: Beta 5.2.1 - Popcorn Time)
Skype™ 6.14 (HKLM\...\{7A3C7E05-EE37-47D6-99E1-2EB05A3DA3F7}) (Version: 6.14.104 - Skype Technologies S.A.)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
WinRAR 5.01 (32-bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)
==================== Custom CLSID (Whitelisted): ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== Restore Points =========================
Check "winmgmt" service or repair WMI.
==================== Hosts content: ==========================
(If needed Hosts: directive could be included in the fixlist to reset Hosts.)
2009-07-14 04:04 - 2009-06-10 23:39 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Scheduled Tasks (Whitelisted) =============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {1E8C199E-717A-487F-87BE-2D7BB59BACA0} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-01-07] (Google Inc.)
Task: {261FD89E-B2B4-4A31-88CD-2C849BD81BBF} - System32\Tasks\{16C7C683-9128-47D7-9681-47D6CF87BE7B} => Chrome.exe ui.skype.com/ui/0/6.14.0.104/en/abandoninstall?page=tsMain
Task: {64E896CE-A817-4BDB-B20B-0B8A2245E542} - System32\Tasks\{1CAE2ADB-CB73-4F2E-8BF4-CCFA97C819FD} => Chrome.exe skype.com/go/downloading?source=lightin.....stError=-3
Task: {6921A843-7DDB-4091-BE07-8AF2CD798D7A} - System32\Tasks\{B7F4D45A-82EF-4687-AA79-4A1C3FEB0B90} => Chrome.exe ui.skype.com/ui/0/6.14.0.104/en/abandoninst.....age=tsBing
Task: {A67A608E-5D7A-41D5-8794-F5789522208E} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files\Google\Update\GoogleUpdate.exe [2015-01-07] (Google Inc.)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d092e7ca090ddd.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d096c5c9d7b203.job => C:\Program Files\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files\Google\Update\GoogleUpdate.exe
==================== Loaded Modules (Whitelisted) ==============
2014-04-23 16:05 - 2014-04-23 16:05 - 00073544 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2014-04-23 16:04 - 2014-04-23 16:04 - 01044808 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-06-22 21:37 - 2015-06-20 07:46 - 01281864 _____ () C:\Program Files\Google\Chrome\Application\43.0.2357.130\libglesv2.dll
2015-06-22 21:37 - 2015-06-20 07:46 - 00080712 _____ () C:\Program Files\Google\Chrome\Application\43.0.2357.130\libegl.dll
2015-06-22 21:37 - 2015-06-20 07:46 - 15003976 _____ () C:\Program Files\Google\Chrome\Application\43.0.2357.130\PepperFlash\pepflashplayer.dll
==================== Alternate Data Streams (Whitelisted) =========
(If an entry is included in the fixlist, only the ADS will be removed.)
==================== Safe Mode (Whitelisted) ===================
(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)
==================== EXE Association (Whitelisted) ===============
(If an entry is included in the fixlist, the registry item will be restored to default or removed.)
==================== Internet Explorer trusted/restricted ===============
(If an entry is included in the fixlist, it will be removed from the registry.)
==================== Other Areas ============================
(Currently there is no automatic fix for this section.)
HKU\S-1-5-21-1326385590-816306483-3295208736-1000\Control Panel\Desktop\\Wallpaper -> C:\Windows\Web\Wallpaper\Windows\img0 (2).jpg
DNS Servers: 192.168.0.1
==================== MSCONFIG/TASK MANAGER disabled items ==
(Currently there is no automatic fix for this section.)
==================== FirewallRules (Whitelisted) ===============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
FirewallRules: [{3C31719A-0900-4A87-87C8-C65F2BA90707}] => (Allow) C:\Users\CRYSIS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9041F66E-CB89-41B5-89BB-D8466A344F0A}] => (Allow) C:\Users\CRYSIS\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{512B3E62-259D-4939-A67D-CA8CB1305E99}] => (Allow) C:\Program Files\Skype\Phone\Skype.exe
FirewallRules: [{AB2463C6-1BD6-41A8-9198-B09D40F6C389}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [TCP Query User{63ACF6D8-10C3-4A99-A5FF-6E6E2C11E5DE}C:\users\crysis\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Block) C:\users\crysis\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [UDP Query User{8C15B514-B46D-45F1-8B04-E0DB2BF00A3A}C:\users\crysis\appdata\local\popcorn time\node-webkit\popcorn time.exe] => (Block) C:\users\crysis\appdata\local\popcorn time\node-webkit\popcorn time.exe
FirewallRules: [{4C77AF3E-40ED-4291-B89D-8B52E881CD53}] => (Allow) C:\Program Files\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{5432B067-4513-4DFE-942A-811E0114D6E6}] => (Allow) C:\Program Files\Popcorn Time\PopcornTimeDesktop.exe
FirewallRules: [{3A9361A5-1A8F-48BA-9CE5-FEF2978A4C86}] => (Allow) C:\Program Files\Popcorn Time\Updater.exe
FirewallRules: [{9E811A29-404C-45D0-8D3A-260B463C027D}] => (Allow) C:\Program Files\Popcorn Time\Updater.exe
FirewallRules: [TCP Query User{B474DBBF-69DF-44AE-A084-967EC5664884}C:\program files\popcorn time\chromecast\node.exe] => (Block) C:\program files\popcorn time\chromecast\node.exe
FirewallRules: [UDP Query User{43D27AE3-BC98-4F94-8490-57BBFEF5E74E}C:\program files\popcorn time\chromecast\node.exe] => (Block) C:\program files\popcorn time\chromecast\node.exe
FirewallRules: [{7EF41DC8-9C64-47E3-8D4F-1C8E2C5BB47E}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{AF49205A-BF47-4F4E-AF00-78E5F0255646}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe
FirewallRules: [{70C3B29E-AFAD-4030-BA71-4F2F209DCB47}] => (Allow) C:\Program Files\Google\Chrome\Application\chrome.exe
==================== Faulty Device Manager Devices =============
==================== Event log errors: =========================
Application errors:
==================
Error: (06/24/2015 10:06:09 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80004002, No such interface supported
.
Operation:
Instantiating VSS server
Error: (06/24/2015 10:06:09 AM) (Source: VSS) (EventID: 22) (User: )
Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered.
This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider.
The error returned from CoCreateInstance on class with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and Name IVssCoordinatorEx2 is [0x80004002, No such interface supported
].
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:03 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80004002, No such interface supported
.
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:03 AM) (Source: VSS) (EventID: 22) (User: )
Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered.
This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider.
The error returned from CoCreateInstance on class with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and Name IVssCoordinatorEx2 is [0x80004002, No such interface supported
].
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:00 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80004002, No such interface supported
.
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:00 AM) (Source: VSS) (EventID: 22) (User: )
Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered.
This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider.
The error returned from CoCreateInstance on class with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and Name IVssCoordinatorEx2 is [0x80004002, No such interface supported
].
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:00 AM) (Source: VSS) (EventID: 8193) (User: )
Description: Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80004002, No such interface supported
.
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:00 AM) (Source: VSS) (EventID: 22) (User: )
Description: Volume Shadow Copy Service error: A critical component required by the Volume Shadow Copy service is not registered.
This might happened if an error occurred during Windows setup or during installation of a Shadow Copy provider.
The error returned from CoCreateInstance on class with CLSID {e579ab5f-1cc4-44b4-bed9-de0991ff0623} and Name IVssCoordinatorEx2 is [0x80004002, No such interface supported
].
Operation:
Instantiating VSS server
Error: (06/20/2015 08:59:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: fm.exe, version: 15.3.2.0, time stamp: 0x551d37bc
Faulting module name: fm.exe, version: 15.3.2.0, time stamp: 0x551d37bc
Exception code: 0xc0000005
Fault offset: 0x00b5fdb6
Faulting process id: 0xbf0
Faulting application start time: 0xfm.exe0
Faulting application path: fm.exe1
Faulting module path: fm.exe2
Report Id: fm.exe3
Error: (06/19/2015 07:24:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Faulting application name: SyncServer.exe, version: 17.669.22.23, time stamp: 0x52fa24ee
Faulting module name: MSVCR100.dll, version: 10.0.40219.1, time stamp: 0x4d5f0c22
Exception code: 0xc0000005
Fault offset: 0x0001804f
Faulting process id: 0xdf4
Faulting application start time: 0xSyncServer.exe0
Faulting application path: SyncServer.exe1
Faulting module path: SyncServer.exe2
Report Id: SyncServer.exe3
System errors:
=============
Error: (06/24/2015 10:02:27 AM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000008e (0xc0000005, 0x93774922, 0x8a674590, 0x00000000)C:\Windows\MEMORY.DMP062415-22464-01
Error: (06/24/2015 09:05:37 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolume2.
Error: (06/24/2015 09:04:55 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume C:.
Error: (06/24/2015 09:01:09 AM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: The Windows Update service terminated with the following error:
%%1392
Error: (06/24/2015 09:01:09 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume C:.
Error: (06/24/2015 09:01:09 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume C:.
Error: (06/24/2015 08:59:57 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume C:.
Error: (06/24/2015 08:59:54 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolume2.
Error: (06/24/2015 08:59:14 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolume2.
Error: (06/24/2015 08:59:14 AM) (Source: Ntfs) (EventID: 55) (User: )
Description: The file system structure on the disk is corrupt and unusable.
Please run the chkdsk utility on the volume \Device\HarddiskVolume2.
Microsoft Office:
=========================
Error: (06/24/2015 10:06:09 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80004002, No such interface supported
Operation:
Instantiating VSS server
Error: (06/24/2015 10:06:09 AM) (Source: VSS) (EventID: 22) (User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x80004002, No such interface supported
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:03 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80004002, No such interface supported
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:03 AM) (Source: VSS) (EventID: 22) (User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x80004002, No such interface supported
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:00 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80004002, No such interface supported
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:00 AM) (Source: VSS) (EventID: 22) (User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x80004002, No such interface supported
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:00 AM) (Source: VSS) (EventID: 8193) (User: )
Description: CoCreateInstance0x80004002, No such interface supported
Operation:
Instantiating VSS server
Error: (06/22/2015 10:40:00 AM) (Source: VSS) (EventID: 22) (User: )
Description: {e579ab5f-1cc4-44b4-bed9-de0991ff0623}IVssCoordinatorEx20x80004002, No such interface supported
Operation:
Instantiating VSS server
Error: (06/20/2015 08:59:55 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: fm.exe15.3.2.0551d37bcfm.exe15.3.2.0551d37bcc000000500b5fdb6bf001d0ab1ee32a7b12C:\Games\Football Manager 2015\fm.exeC:\Games\Football Manager 2015\fm.exef4321798-1719-11e5-b26f-001c230c52fc
Error: (06/19/2015 07:24:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: SyncServer.exe17.669.22.2352fa24eeMSVCR100.dll10.0.40219.14d5f0c22c00000050001804fdf401d0aab4bb609d36C:\Program Files\Common Files\Apple\Mobile Device Support\SyncServer.exeC:\Windows\system32\MSVCR100.dllfa9b7545-16a7-11e5-82ad-001c230c52fc
==================== Memory info ===========================
Processor: Intel(R) Core(TM)2 Duo CPU T7100 @ 1.80GHz
Percentage of memory in use: 46%
Total physical RAM: 2038.12 MB
Available physical RAM: 1094.34 MB
Total Pagefile: 4076.23 MB
Available Pagefile: 2962.31 MB
Total Virtual: 2047.88 MB
Available Virtual: 1905.66 MB
==================== Drives ================================
Drive c: () (Fixed) (Total:74.43 GB) (Free:51.57 GB) NTFS
==================== MBR & Partition Table ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 74.5 GB) (Disk ID: B4CE7D6D)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=74.4 GB) - (Type=07 NTFS)
==================== End of log ============================
mycity.rs/must-login.png
|
|
|
|
|