|
U poslednje 2 sedmice je pocelo sa 'kocenjem' kada gledam onlajn video, konkretno EON.
U vreme kada je slika zamznuta procesor nije na 100% niti je memorija puna a ni inernet veza nije na maksimumu (150/15 SBB).
Nisam siguran da li je nesto do drajvera, isao sam na sajt Dell, otprilike posle toga je pocelo. U menadzeru uredjaja se pojavio neki SMS/MMS uredjaj koji nije postojao ranije i koji nisam uspeo da uklonim.
Skenirao sam sa MBAM, nije nista pronasao.
Skenirao sam sa FRST, prilazem po uputstvu.
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 15-08-2022
Ran by ZokiVale (administrator) on DESKTOP-HB07RRJ (Dell Inc. Inspiron N5050) (24-08-2022 12:09:45)
Running from C:\Users\ZokiVale\Desktop
Loaded Profiles: ZokiVale
Platform: Microsoft Windows 10 Enterprise Version 20H2 19042.1052 (X64) Language: English (United States) -> Serbian (Cyrillic, Serbia)
Default browser: Edge
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.UserSessionAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\DCF\Dell.DCF.UA.Bradbury.API.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DataManagerSubAgent\Dell.TechHub.DataManager.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\DiagnosticsSubAgent\Dell.TechHub.Diagnostics.SubAgent.exe
(C:\Program Files\Dell\TechHub\Dell.TechHub.exe ->) (Dell Inc -> ) C:\Program Files\Dell\DTP\InstrumentationSubAgent\Dell.TechHub.Instrumentation.SubAgent.exe
(C:\Users\ZokiVale\AppData\Roaming\uTorrent\updates\3.5.5_46348\utorrentie.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\EdgeWebView\Application\104.0.1293.54\msedgewebview2.exe <6>
(C:\Users\ZokiVale\AppData\Roaming\uTorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\ZokiVale\AppData\Roaming\uTorrent\helper\helper.exe
(C:\Users\ZokiVale\AppData\Roaming\uTorrent\uTorrent.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\ZokiVale\AppData\Roaming\uTorrent\updates\3.5.5_46348\utorrentie.exe
(CodeLathe, LLC -> CodeLathe LLC) C:\Users\ZokiVale\AppData\Roaming\Tonido\tonido.exe
(explorer.exe ->) (BitTorrent Inc -> BitTorrent Inc.) C:\Users\ZokiVale\AppData\Roaming\uTorrent\uTorrent.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(explorer.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\igfxtray.exe
(explorer.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe <15>
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Dell Inc -> ) C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe
(services.exe ->) (Dell Inc -> Dell Inc.) C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe
(services.exe ->) (Dell Inc -> Dell Technologies Inc.) C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe
(services.exe ->) (Dell Inc -> Dell) C:\Program Files\Dell\TechHub\Dell.TechHub.exe
(services.exe ->) (Greatis Software LLC -> Greatis Software, LLC) C:\Windows\Y891NREA60\SU10Guard.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe
(svchost.exe ->) (ALCPU -> ALCPU) C:\Program Files\Core Temp\Core Temp.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.2103.8.0_x64__8wekyb3d8bbwe\Calculator.exe
(svchost.exe ->) (Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12104.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\ImmersiveControlPanel\SystemSettings.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [Apoint] => C:\Program Files\DellTPad\Apoint.exe [708952 2018-11-23] (Alps Electric Co., LTD. -> Alps Electric Co., Ltd.)
HKLM\...\RunOnce: [msedge_cleanup_{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}] => C:\Program Files (x86)\Microsoft\EdgeWebView\Application\104.0.1293.63\Installer\setup.exe [3286968 2022-08-22] (Microsoft Corporation -> Microsoft Corporation)
HKLM\...\Policies\Explorer: [NoWindowsUpdate] 1
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Restriction <==== ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\Run: [Tonido] => C:\Users\ZokiVale\AppData\Roaming\Tonido\launcher.exe [197120 2017-01-12] (CodeLathe LLC) [File not signed]
HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\Run: [MicrosoftEdgeAutoLaunch_B26E48C294AEB9AE5E3E7B001C36AED4] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start /prefetch:5 [3827128 2022-08-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\Run: [Microsoft Edge Update] => C:\Users\ZokiVale\AppData\Local\Microsoft\EdgeUpdate\1.3.167.21\MicrosoftEdgeUpdateCore.exe [253888 2022-08-23] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\RunOnce: [Delete Cached Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\ZokiVale\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\WINDOWS\system32\cmd.exe /q /c del /q "C:\Users\ZokiVale\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\RunOnce: [Uninstall 22.151.0717.0001\i386] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ZokiVale\AppData\Local\Microsoft\OneDrive\22.151.0717.0001\i386" (No File)
HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\RunOnce: [Uninstall 22.151.0717.0001] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\ZokiVale\AppData\Local\Microsoft\OneDrive\22.151.0717.0001" (No File)
HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\Policies\Explorer: [NoSecurityTab] 1
HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
HKLM\Software\Microsoft\Active Setup\Installed Components: [{F69213F0-C729-C1BC-6234-7B824B6A4267}] -> reg delete HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /f
IFEO\dismHost.exe: [Debugger] *
IFEO\EOSNOTIFY.EXE: [Debugger] *
IFEO\InstallAgent.exe: [Debugger] *
IFEO\MusNotification.exe: [Debugger] *
IFEO\MUSNOTIFICATIONUX.EXE: [Debugger] *
IFEO\remsh.exe: [Debugger] *
IFEO\SIHClient.exe: [Debugger] *
IFEO\UpdateAssistant.exe: [Debugger] *
IFEO\UPFC.EXE: [Debugger] *
IFEO\UsoClient.exe: [Debugger] *
IFEO\WaaSMedic.exe: [Debugger] *
IFEO\WaasMedicAgent.exe: [Debugger] *
IFEO\Windows10Upgrade.exe: [Debugger] *
IFEO\WINDOWS10UPGRADERAPP.EXE: [Debugger] *
Startup: C:\Users\ZokiVale\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\EUpravaDigitalSignature.exe.lnk [2022-03-22]
ShortcutTarget: EUpravaDigitalSignature.exe.lnk -> C:\Users\ZokiVale\AppData\Roaming\Microsoft\Installer\{2F8F1CA2-8EAB-4381-948A-E64C4941AEAC}\_9CBF76805A4BD4C0D3355A.exe (No File)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {076A0B6A-F034-45DA-829F-B0EFA76DD0D6} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-112308427-2752319856-531434809-1001UA => C:\Users\ZokiVale\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {2D48A7F8-F80C-4749-8039-CEAED63808DD} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office16\OLicenseHeartbeat.exe [316632 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {4C98677D-BE7E-4205-A7A9-A8CA6013A409} - System32\Tasks\IUM-F1E24CA0-B63E-4F13-A9E3-4ADE3BFF3473 => C:\Program Files (x86)\Intel\Intel(R) Update Manager\bin\iumsvc.exe --automatic (No File)
Task: {6FE98E99-99EB-42D2-8939-58B1C5F94146} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1564424 2021-11-18] (Adobe Inc. -> Adobe Inc.)
Task: {714FE91B-7BF3-40CB-B70E-445EFBFED40B} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {759548A3-3295-4985-B164-1AC2443A92F2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-15] (Google Inc -> Google LLC)
Task: {8BCBF774-89D1-4A6A-B140-4B77F4B17BD7} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-112308427-2752319856-531434809-1001Core => C:\Users\ZokiVale\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [205744 2022-06-23] (Microsoft Corporation -> Microsoft Corporation)
Task: {9DB98197-1A89-4A9B-ABB2-002369D686DE} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files\Dell\SupportAssistAgent\bin\FrameworkAgents\SupportAssistInstaller.exe [665952 2022-06-21] (Dell Inc -> Dell Inc.)
Task: {CB3C6726-887F-4EF2-BF35-8DC706CC20DE} - System32\Tasks\Core Temp Autostart ZokiVale => C:\Program Files\Core Temp\Core Temp.exe [1035096 2021-04-11] (ALCPU -> ALCPU)
Task: {E1965707-EA7B-43AA-AB09-F6F3D2F7EECE} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {E3BE30E1-2C2A-4303-8440-15EFBFD4235E} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\Office16\msoia.exe [416432 2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Task: {ECC10471-0DB4-4090-BF81-A3C09C065E5F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-11-15] (Google Inc -> Google LLC)
Task: {F0DD5A4B-0B68-4C2D-9D3C-8B55B12141BB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F51D31FC-9BE1-49F6-BF47-6A2DECC8804F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {F92F172D-2B22-42F0-B03C-31C8418E7D69} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MpCmdRun.exe [993008 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
Task: C:\WINDOWS\Tasks\CreateExplorerShellUnelevatedTask.job => C:\WINDOWS\explorer.exe
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\Parameters: [DhcpNameServer] 89.216.1.30 89.216.1.50
Tcpip\..\Interfaces\{4edcae80-1cb4-406e-b0b3-1108b298741d}: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{e91a1c3d-8442-4867-8f37-19c3d4383569}: [DhcpNameServer] 89.216.1.30 89.216.1.50
Edge:
=======
Edge DefaultProfile: Default
Edge Profile: C:\Users\ZokiVale\AppData\Local\Microsoft\Edge\User Data\Default [2022-08-24]
Edge Notifications: Default -> hxxps://eon.tv; hxxps://forum.benchmark.rs
Edge HomePage: Default -> hxxps://www.google.rs/
Edge StartupUrls: Default -> "hxxps://www.google.rs/"
Edge Session Restore: Default -> is enabled.
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\ZokiVale\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\bojobppfploabceghnmlahpoonbcbacn [2022-08-18]
Edge Extension: (Malwarebytes Browser Guard) - C:\Users\ZokiVale\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ihcjicgdanjaechkgeegckofjjedodee [2022-08-18]
Edge HKLM\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
Edge HKLM-x32\...\Edge\Extension: [bojobppfploabceghnmlahpoonbcbacn]
FireFox:
========
FF HKU\S-1-5-21-112308427-2752319856-531434809-1001\...\Firefox\Extensions: [acewebextension_unlisted@acestream.org] - C:\Users\ZokiVale\AppData\Roaming\ACEStream\extensions\awe\firefox\acewebextension_unlisted.xpi => not found
FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~1\MICROS~1\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=3.0.11 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.12 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.7.1 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.8 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2021-01-04] (VideoLAN -> VideoLAN)
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2022-08-02] (Adobe Inc. -> Adobe Systems Inc.)
FF Plugin-x32: @IPC/npmedia3.0.0.3,version=3.0.0.3 -> C:\Program Files\webrec\Torch\3.0.0.3\npmedia3.0.0.3.dll [2017-09-22] () [File not signed]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-11-11] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~3\Office16\NPSPWRAP.DLL [2015-07-31] (Microsoft Corporation -> Microsoft Corporation)
Chrome:
=======
CHR HKLM\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
CHR HKU\S-1-5-21-112308427-2752319856-531434809-1001\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [mjbepbhonbojpoaenhckjocchgfiaofo]
CHR HKLM-x32\...\Chrome\Extension: [ihcjicgdanjaechkgeegckofjjedodee]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [169728 2021-11-18] (Adobe Inc. -> Adobe Inc.)
R2 DDVCollectorSvcApi; C:\Program Files\Dell\DellDataVault\DDVCollectorSvcApi.exe [458960 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 DDVDataCollector; C:\Program Files\Dell\DellDataVault\DDVDataCollector.exe [138448 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 DDVRulesProcessor; C:\Program Files\Dell\DellDataVault\DDVRulesProcessor.exe [484560 2022-05-20] (Dell Inc -> Dell Technologies Inc.)
R2 DellClientManagementService; C:\Program Files (x86)\Dell\UpdateService\ServiceShell.exe [44448 2022-04-27] (Dell Inc -> )
R2 DellTechHub; C:\Program Files\Dell\TechHub\Dell.TechHub.exe [134560 2022-02-19] (Dell Inc -> Dell)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5393304 2021-06-09] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 SU10Guard; C:\Windows\Y891NREA60\SU10Guard.exe [72776 2020-05-30] (Greatis Software LLC -> Greatis Software, LLC)
R2 SupportAssistAgent; C:\Program Files\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [137056 2022-06-21] (Dell Inc -> Dell Inc.)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\NisSrv.exe [3120992 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2205.7-0\MsMpEng.exe [133544 2022-06-23] (Microsoft Windows Publisher -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R3 ALSysIO; C:\Users\ZokiVale\AppData\Local\Temp\ALSysIO64.sys [47240 2022-08-22] (ALCPU (Arthur Liberman) -> Arthur Liberman) <==== ATTENTION
S3 DellInstrumentation; C:\WINDOWS\System32\drivers\DellInstrumentation.sys [37808 2022-05-20] (Microsoft Windows Hardware Compatibility Publisher -> Dell)
R3 MpKsl3fc9c8c3; C:\ProgramData\Microsoft\Windows Defender\Definition Updates\{FD4F3772-4A67-4435-9F77-CBD247C1DA63}\MpKslDrv.sys [141576 2022-08-23] (Microsoft Windows -> Microsoft Corporation)
S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [165504 2020-04-21] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S3 ViGEmBus; C:\WINDOWS\System32\drivers\ViGEmBus.sys [69168 2019-04-04] (Microsoft Windows Hardware Compatibility Publisher -> Benjamin Höglinger-Stelzer)
S3 vjoy; C:\WINDOWS\System32\drivers\vjoy.sys [67448 2019-07-14] (On-site Dental Systems (Justin Shafer) -> Shaul Eizikovich)
U5 vsock; C:\Windows\System32\Drivers\vsock.sys [92040 2018-06-22] (VMware, Inc. -> VMware, Inc.)
S0 WdBoot; C:\WINDOWS\System32\drivers\wd\WdBoot.sys [49576 2022-06-23] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\wd\WdFilter.sys [452856 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [91384 2022-06-23] (Microsoft Windows -> Microsoft Corporation)
S3 semav6msr64; \??\C:\WINDOWS\system32\drivers\semav6msr64.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-08-23 21:59 - 2022-08-23 21:59 - 000003382 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-112308427-2752319856-531434809-1001
2022-08-23 21:59 - 2022-08-23 21:59 - 000002396 _____ C:\Users\ZokiVale\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2022-08-22 14:51 - 2022-08-22 14:51 - 000000000 ____D C:\Users\ZokiVale\AppData\LocalLow\uTorrent
2022-08-22 11:34 - 2022-08-22 11:34 - 000024918 _____ C:\Users\ZokiVale\Desktop\Addition.txt
2022-08-21 19:41 - 2022-08-22 13:33 - 000008192 ___SH C:\DumpStack.log.tmp
2022-08-21 17:37 - 2022-08-24 12:11 - 000019357 _____ C:\Users\ZokiVale\Desktop\FRST.txt
2022-08-21 17:36 - 2022-08-24 12:10 - 000000000 ____D C:\FRST
2022-08-21 17:10 - 2022-08-21 17:11 - 002371072 _____ (Farbar) C:\Users\ZokiVale\Desktop\FRST64.exe
2022-08-21 11:48 - 2022-08-21 11:48 - 000000000 ____D C:\WINDOWS\Panther
2022-08-20 11:30 - 2022-08-20 11:30 - 000003946 _____ C:\WINDOWS\system32\Tasks\Dell SupportAssistAgent AutoUpdate
2022-08-20 11:27 - 2022-08-20 11:27 - 000000000 ____D C:\Program Files (x86)\Dell
2022-08-20 11:24 - 2022-08-20 11:24 - 000000000 ____D C:\Program Files\dotnet
2022-08-12 15:14 - 2022-08-12 15:14 - 000058510 _____ C:\Users\ZokiVale\Downloads\Otpornik-0.25W-5.htm
2022-08-12 15:08 - 2022-08-12 15:09 - 000172378 _____ C:\Users\ZokiVale\Downloads\datasheet.pdf
2022-08-12 11:26 - 2022-08-12 11:26 - 000004562 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task
2022-08-12 11:26 - 2022-08-12 11:26 - 000002075 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat DC.lnk
2022-08-12 11:26 - 2022-08-12 11:26 - 000002063 _____ C:\Users\Public\Desktop\Adobe Acrobat DC.lnk
2022-08-09 21:41 - 2022-08-09 21:41 - 000000000 ____D C:\Users\ZokiVale\AppData\LocalLow\webviewdata
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2022-08-24 12:11 - 2018-11-24 18:53 - 000000000 ____D C:\Users\ZokiVale\AppData\Roaming\uTorrent
2022-08-24 12:10 - 2019-11-15 13:41 - 000000000 ____D C:\Program Files (x86)\Google
2022-08-24 11:58 - 2020-11-19 09:40 - 000000000 ____D C:\WINDOWS\system32\SleepStudy
2022-08-24 11:25 - 2019-12-07 11:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2022-08-24 11:25 - 2019-03-21 17:56 - 000000000 ____D C:\Users\ZokiVale\AppData\Local\BitTorrentHelper
2022-08-24 08:24 - 2021-05-13 00:05 - 000004170 _____ C:\WINDOWS\system32\Tasks\User_Feed_Synchronization-{781556F2-720F-4AF5-A857-A0596C0A14DB}
2022-08-23 21:59 - 2021-12-11 12:36 - 000003584 _____ C:\WINDOWS\system32\Tasks\OneDrive Reporting Task-S-1-5-21-112308427-2752319856-531434809-1001
2022-08-23 09:16 - 2020-11-19 09:43 - 000003556 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA
2022-08-23 09:16 - 2020-11-19 09:43 - 000003432 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore
2022-08-23 08:52 - 2022-06-23 23:41 - 000003818 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-112308427-2752319856-531434809-1001UA
2022-08-23 08:52 - 2022-06-23 23:41 - 000003760 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-112308427-2752319856-531434809-1001Core
2022-08-22 23:30 - 2020-11-19 09:43 - 000002398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk
2022-08-22 23:30 - 2020-11-19 09:43 - 000002236 _____ C:\Users\Public\Desktop\Microsoft Edge.lnk
2022-08-22 21:55 - 2021-09-30 20:42 - 000000000 ____D C:\Program Files\Core Temp
2022-08-22 13:36 - 2018-11-23 18:48 - 000005948 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2022-08-22 13:34 - 2021-06-10 22:05 - 000000000 ____D C:\WINDOWS\Y891NREA60
2022-08-22 13:33 - 2020-11-19 09:41 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT
2022-08-22 13:12 - 2019-12-07 11:03 - 000524288 _____ C:\WINDOWS\system32\config\BBI
2022-08-22 13:11 - 2019-09-02 13:44 - 000000000 ____D C:\ProgramData\Dell
2022-08-22 13:10 - 2018-12-15 11:41 - 000000000 ____D C:\Program Files\Dell
2022-08-22 13:10 - 2018-11-24 18:44 - 000000000 ____D C:\ProgramData\Package Cache
2022-08-22 12:53 - 2019-12-07 11:14 - 000000000 ____D C:\WINDOWS\AppReadiness
2022-08-22 12:41 - 2021-05-12 23:44 - 000000000 ____D C:\Users\ZokiVale
2022-08-20 22:00 - 2020-11-19 09:40 - 000354864 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2022-08-20 12:15 - 2019-12-07 11:14 - 000000000 ___HD C:\Program Files\WindowsApps
2022-08-20 12:14 - 2019-12-07 11:13 - 000000000 ____D C:\WINDOWS\INF
2022-08-20 09:56 - 2019-06-09 21:39 - 000000000 ____D C:\Users\ZokiVale\AppData\Local\ElevatedDiagnostics
2022-08-09 21:17 - 2021-05-14 13:08 - 000000000 ____D C:\Users\ZokiVale\AppData\Local\PlaceholderTileLogoFolder
2022-08-03 11:48 - 2019-01-04 20:03 - 000000000 ____D C:\Users\ZokiVale\AppData\Roaming\vlc
==================== Files in the root of some directories ========
2018-12-02 18:12 - 2018-12-02 18:12 - 000000069 _____ () C:\Program Files (x86)\dialogysclip.bat
2018-12-02 18:11 - 2018-12-02 18:40 - 000001815 _____ () C:\Program Files (x86)\DialogysUninstWPS.bat
2018-12-02 18:11 - 2018-12-02 18:11 - 000000840 _____ () C:\Program Files (x86)\INSTALL.LOG
2018-12-02 18:11 - 2017-11-08 17:09 - 000176040 _____ () C:\Program Files (x86)\UninstScript.EXE
2019-02-09 19:05 - 2022-04-07 23:16 - 000004492 _____ () C:\Users\ZokiVale\AppData\Roaming\LTspiceXVII.ini
2021-03-01 21:33 - 2021-03-01 21:33 - 000000073 _____ () C:\Users\ZokiVale\AppData\Roaming\settings.conf
2020-12-11 09:27 - 2020-12-11 09:27 - 000000218 _____ () C:\Users\ZokiVale\AppData\Local\recently-used.xbel
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
==================== End of FRST.txt ========================
mycity.rs/must-login.png
|
