offline
- comi79
- Novi MyCity građanin
- Pridružio: 24 Feb 2024
- Poruke: 1
|
Postovani,
iskreno nemam neke posebne probleme osim sto mi se komp mnogo usporio. Star je ali mi je bitan zbog podataka i nije mi pogodna reinstalacija pa zelim da proverim da li je sve ok. Hvala na izdvojenom vremenu
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 23.02.2024
Ran by Mica (administrator) on MICA-PC (ASUS All Series) (24-02-2024 11:41:28)
Running from C:\Users\Mica\Desktop\FRST64.exe
Loaded Profiles: Mica
Platform: Microsoft Windows 7 Ultimate Service Pack 1 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Acronis International GmbH -> ) C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe
(Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe
(Beijing Qihu Technology Co., Ltd. -> Qihoo 360 Technology Co. Ltd.) C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe
(C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe ->) (QIHU 360 SOFTWARE CO. LIMITED -> QIHU 360 SOFTWARE CO. LIMITED) C:\Program Files (x86)\360\Total Security\safemon\QHWatchdog.exe
(C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Service.exe ->) (Electronics for Imaging, Inc.) [File not signed] C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Server.exe
(C:\Program Files (x86)\GlassWire\GWCtlSrv.exe ->) (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GWIdlMon.exe
(C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe ->) (Byte Technologies LLC -> Byte Technologies LLC.) C:\Program Files\ByteFence\rtop\bin\rtop_bg.exe
(C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(explorer.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe
(explorer.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(explorer.exe ->) (EIZO Corporation -> EIZO Corporation) C:\Program Files (x86)\EIZO\ScreenManager Pro for LCD (DDCCI)\LcdctrlDdcci.exe
(explorer.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 7720 series\Bin\ScanToPCActivationApp.exe
(explorer.exe ->) (London Jamocha Community CIC -> AdoptOpenJDK) C:\Program Files (x86)\XDM\java-runtime\bin\javaw.exe
(explorer.exe ->) (NetSeT Global Solutions d.o.o.) [File not signed] C:\Program Files\NetSeT\TrustEdgeID\TokenUtil.exe
(Hewlett-Packard Company -> Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(HP Inc. -> HP Inc.) C:\Program Files\HP\HP OfficeJet Pro 7720 series\Bin\HPNetworkCommunicatorCom.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(nvvsvc.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(services.exe ->) () [File not signed] C:\Program Files (x86)\Common Files\Global Graphics Software\Harlequin License Server\bin\hqn_lsd.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe
(services.exe ->) (Acronis International GmbH -> ) C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe
(services.exe ->) (Acronis International GmbH -> Acronis International GmbH) C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe
(services.exe ->) (Adobe Inc. -> Adobe Systems, Incorporated) C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe
(services.exe ->) (AnyDesk Software GmbH -> AnyDesk Software GmbH) C:\Program Files (x86)\AnyDesk\AnyDesk.exe <3>
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(services.exe ->) (Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (Arvato Digital Services Canada Inc -> arvato digital services llc) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ) [File not signed] C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe
(services.exe ->) (ASUSTeK Computer Inc. -> ) C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe
(services.exe ->) (Beijing Qihu Technology Co., Ltd. -> Qihoo 360 Technology Co. Ltd.) C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe
(services.exe ->) (Byte Technologies LLC -> Byte Technologies LLC.) C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe
(services.exe ->) (Electronics for Imaging, Inc.) [File not signed] C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Service.exe
(services.exe ->) (Flexera Software LLC -> Flexera Software LLC) C:\Program Files (x86)\Common Files\Macrovision Shared\FlexNet Publisher\FNPLicensingService.exe
(services.exe ->) (GlassWire -> SecureMix LLC) C:\Program Files (x86)\GlassWire\GWCtlSrv.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(services.exe ->) (NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe <2>
(services.exe ->) (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe
(services.exe ->) (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\printfilterpipelinesvc.exe
(WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.) C:\Program Files (x86)\Western Digital\WD App Manager\WDAppManager.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [297784 2017-09-11] (Apple Inc. -> Apple Inc.)
HKLM\...\Run: [AdobeGCInvoker-1.0] => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
HKLM\...\Run: [Acronis Scheduler2 Service] => C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedhlp.exe [754416 2018-11-23] (Acronis International GmbH -> )
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-11-14] (NVIDIA Corporation -> NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart [1767712 2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
HKLM-x32\...\Run: [QHSafeTray] => C:\Program Files (x86)\360\Total Security\safemon\QHSafeTray.exe [1811456 2019-01-29] (Beijing Qihu Technology Co., Ltd. -> Qihoo 360 Technology Co. Ltd.)
HKLM-x32\...\Run: [WDAppManager] => C:\Program Files (x86)\Western Digital\WD App Manager\AppManagerLauncher.exe [21384 2016-04-15] (WESTERN DIGITAL TECHNOLOGIES -> Western Digital Technologies, Inc.)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [TrueImageMonitor.exe] => C:\Program Files (x86)\Acronis\TrueImageHome\TrueImageMonitor.exe [4785640 2018-11-23] (Acronis International GmbH -> )
HKLM-x32\...\Run: [AcronisTibMounterMonitor] => C:\Program Files (x86)\Common Files\Acronis\TibMounter\tib_mounter_monitor.exe [446256 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Run: [XDM] => "C:\Program Files (x86)\XDM\java-runtime\bin\javaw.exe" -Xmx1024m -jar "C:\Program Files (x86)\XDM\xdman.jar" -m [1821653 2020-03-18] () [File not signed] [File is in use]
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Run: [HP OfficeJet Pro 7720 (NET)] => C:\Program Files\HP\HP OfficeJet Pro 7720 series\Bin\ScanToPCActivationApp.exe [4066464 2021-11-21] (HP Inc. -> HP Inc.)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Run: [] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe (No File)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Run: [KiesPDLR.exe] => C:\Program Files (x86)\Samsung\Kies\External\FirmwareUpdate\KiesPDLR.exe Run (No File)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\RunOnce: [FlashPlayerUpdate] => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_238_Plugin.exe [1457208 2019-08-26] (Adobe Inc. -> Adobe)
HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-18\...\Run: [] => [X]
HKLM\...\Windows x64\Print Processors\KOAYQJ_P: C:\Windows\System32\spool\prtprocs\x64\KOAYQJ_P.DLL [83968 2012-08-09] (Monotype Imaging Inc.) [File not signed]
HKLM\...\Windows x64\Print Processors\KOAYTJ_P: C:\Windows\System32\spool\prtprocs\x64\KOAYTJ_P.dll [92680 2016-08-24] (Microsoft Windows Hardware Compatibility Publisher -> Monotype Imaging Inc.)
HKLM\...\Windows x64\Print Processors\TSKPPR: C:\Windows\System32\spool\prtprocs\x64\TSKppr.dll [92160 2015-09-11] (Monotype Imaging Inc.) [File not signed]
HKLM\...\Print\Monitors\Adobe PDF Port Monitor: C:\Windows\system32\AdobePDF.dll [54944 2015-03-17] (Adobe Systems, Incorporated -> Adobe Systems Inc)
HKLM\...\Print\Monitors\C360iSeriesPCL Language Monitor: C:\Windows\system32\KOAXGJ_L.dll [25704 2022-10-28] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Print\Monitors\C364SeriesPCL Language Monitor: C:\Windows\system32\KOAYTJ_L.DLL [25600 2016-08-24] (Microsoft Windows Hardware Compatibility Publisher -> KONICA MINOLTA, INC.)
HKLM\...\Print\Monitors\Gprinter Language Monitor: C:\Windows\system32\GprinterLM.dll [865560 2018-07-09] (Euro Plus d.o.o. -> NiceLabel)
HKLM\...\Print\Monitors\HP 1754 Status Monitor: C:\Windows\system32\hpinksts1754LM.dll [476296 2017-02-17] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\HP 6012 Status Monitor: C:\Windows\system32\hpinksts6012LM.dll [331664 2012-08-12] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP 612a Status Monitor: C:\Windows\system32\hpinksts612aLM.dll [468576 2018-08-01] (Hewlett Packard -> HP Inc.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP Officejet 7110 series): C:\Windows\system32\HPDiscoPM6012.dll [751720 2012-10-21] (Hewlett Packard -> Hewlett-Packard Co.)
HKLM\...\Print\Monitors\HP Discovery Port Monitor (HP OfficeJet Pro 7720 series): C:\Windows\system32\HPDiscoPM1754.dll [987808 2021-11-21] (HP Inc. -> HP Inc.)
HKLM\...\Print\Monitors\Language monitor: C:\Windows\system32\TSKMON.DLL [60928 2015-09-11] (Monotype Imaging Inc.) [File not signed]
HKLM\...\Print\Monitors\Xerox Phaser 6020 Language Monitor: xcthp1mlm.dll (No File)
HKLM\Software\...\AppCompatFlags\Custom\SBNT.EXE: [{af6131fc-32da-45ea-a1e7-fe634f8f2722}.sdb] -> SignBlazer5.5 XP buttons
HKLM\Software\...\AppCompatFlags\Custom\SBNTDEMO.EXE: [{af6131fc-32da-45ea-a1e7-fe634f8f2722}.sdb] -> SignBlazer5.5 XP buttons
HKLM\Software\...\AppCompatFlags\Custom\SBPRNT32.EXE: [{af6131fc-32da-45ea-a1e7-fe634f8f2722}.sdb] -> SignBlazer5.5 XP buttons
HKLM\Software\...\AppCompatFlags\InstalledSDB\{af6131fc-32da-45ea-a1e7-fe634f8f2722}: [DatabasePath] -> C:\Windows\AppPatch\Custom\{af6131fc-32da-45ea-a1e7-fe634f8f2722}.sdb [2003-02-27]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\109.0.5414.120\Installer\chrmstp.exe [2023-01-27] (Google LLC -> Google LLC)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\EFI ES-1000.lnk [2016-05-06]
ShortcutTarget: EFI ES-1000.lnk -> C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Notifier.exe (Electronics for Imaging, Inc.) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\ScreenManager Pro for LCD (DDCCI) Ver.2.4.0.lnk [2016-06-17]
ShortcutTarget: ScreenManager Pro for LCD (DDCCI) Ver.2.4.0.lnk -> C:\Windows\Installer\{DAB265AD-27B2-4651-B8D8-F4F3A8ECC705}\LcdctrlDdcci.exe1_A2457035AC9A449AAFF91D310EF3707A.exe (Macrovision Corporation) [File not signed]
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Token Manager.lnk [2017-05-16]
ShortcutTarget: Token Manager.lnk -> C:\Program Files\NetSeT\TrustEdgeID\TokenUtil.exe (NetSeT Global Solutions d.o.o.) [File not signed]
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION
==================== Scheduled Tasks (Whitelisted) =================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {60921CB9-0473-4843-99BE-D8949AF1C4FF} - System32\Tasks\{0C240FFE-C0CA-48EB-99FF-5C0EBB24F0E1} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Users\Mica\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3V1C4A62\jre-8u171-windows-i586.exe" -d C:\Users\Mica\Desktop
Task: {B0CE69C6-145F-43E6-BEA2-19761F69BB4D} - System32\Tasks\{2CD10DFC-5478-4499-97DD-5E0F52BDF564} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a C:\Windows\IsUn0804.exe -c -fc:\artcut6\Uninst.isu
Task: {38244428-4E95-4943-BBC6-C4D5289760E6} - System32\Tasks\{850AE461-75A6-4DF6-A282-734BAE5DEE62} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a D:\SETUP.EXE -d D:\
Task: {5C482B66-7BE6-44E6-9C3C-12E2D089E585} - System32\Tasks\{953B3F22-F752-4325-9A99-6212AFF1A8AD} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Program Files (x86)\FormatFactory\FFInst.exe" -d "C:\Program Files (x86)\FormatFactory"
Task: {468D0E97-9CFC-474D-BF15-444AB9A5FE99} - System32\Tasks\{BFAC24D1-978D-4781-BEC4-85748A9CF9FC} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "C:\Users\Mica\Downloads\jre-8u171-windows-i586 (1).exe" -d C:\Users\Mica\Desktop
Task: {F829DFB0-AF36-4C01-899B-404E72840DE8} - System32\Tasks\{C6A5A6B2-12F3-4D25-9204-83A727667756} => C:\Windows\system32\pcalua.exe [9728 2019-06-12] (Microsoft Windows -> Microsoft Corporation) -> -a "E:\Install\DC12_phaser 6120\32_64bitw2kps.exe" -d "E:\Install\DC12_phaser 6120"
Task: {75C051A0-937D-42BF-A5EF-D6AEAFD853C4} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1085656 2015-12-14] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {B9FDD1A9-0E87-4DB4-BF0D-D81FD4F2BB79} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_238_Plugin.exe [1457208 2019-08-26] (Adobe Inc. -> Adobe)
Task: {15398DC3-F355-411D-B519-BCEE3E8EDE3F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-08-26] (Adobe Inc. -> Adobe)
Task: {3181D890-84A3-4B5C-846E-09948FA58BD8} - System32\Tasks\AdobeGCInvoker-1.0 => C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGCInvokerUtility.exe [3412680 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
Task: {C844D85F-FE6D-427C-A796-50605B0152DE} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-28] (Google LLC -> Google LLC)
Task: {3E09E84F-9EFE-4292-8758-89A7393DA3BF} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [156232 2021-10-28] (Google LLC -> Google LLC)
Task: {020DEFF5-B416-48F7-A849-066DF4343159} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe scan upload mininterval:2880 (No File)
Task: {BFF45F5C-A3EA-4509-9062-C8CFC16D9007} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files (x86)\Microsoft Office\root\Office16\msoia.exe scan upload (No File)
Task: {8DD2B2A0-4464-46DE-979F-2BA4897DDE83} - System32\Tasks\Mozilla\Firefox Background Update E7CF176E110C211B => C:\Program Files (x86)\Mozilla Firefox\firefox.exe [686496 2024-02-21] (Mozilla Corporation -> Mozilla Corporation) -> --MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\E7CF176E110C211B\backgroundupdate.moz_log --backgroundtask backgroundupdate
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Winsock: Catalog5 07 C:\Program Files (x86)\Bonjour\mdnsNSP.dll [152864 2010-05-18] (Apple Inc. -> Apple Inc.)
Winsock: Catalog5-x64 07 C:\Program Files\Bonjour\mdnsNSP.dll [193824 2010-05-18] (Apple Inc. -> Apple Inc.)
Hosts: There are more than one entry in Hosts. See Hosts section of Addition.txt
Tcpip\..\Interfaces\{B2D25A6E-D396-47B4-A925-63C09AEF5C55}: [NameServer] 1.1.1.1,1.0.0.1
HKLM\System\...\Parameters\PersistentRoutes: [0.0.0.0,0.0.0.0,192.168.1.1,-1]
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <==== ATTENTION
FireFox:
========
FF DefaultProfile: uvuyfm1z.default-1604042653134
FF ProfilePath: C:\Users\Mica\AppData\Roaming\Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134 [2024-02-24]
FF DownloadDir: L:\Downloads Firefox
FF Homepage: Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134 -> zlatnaknjiga.co.rs/|hxxps://mail.google.com/mail/u/0/#inbox
FF NewTab: Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134 -> hxxps://poshukach.com?fr=ps&gp=496723&altserp=1
FF Notifications: Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134 -> hxxps://www.unicreditbank.rs
FF Extension: (Show/Hide passwords) - C:\Users\Mica\AppData\Roaming\Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134\Extensions\shpassword@shpassword.fr.xpi [2020-11-30]
FF Extension: (Y2mate.com - YouTube Converter & Downloader) - C:\Users\Mica\AppData\Roaming\Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134\Extensions\{8f4bbf79-5514-4d04-a901-d5fabfe91d73}.xpi [2022-10-28]
FF Extension: (EasyLoad) - C:\Users\Mica\AppData\Roaming\Mozilla\Firefox\Profiles\uvuyfm1z.default-1604042653134\Extensions\{c6485c3a-2ca8-4751-9fc3-c9a852173c83}.xpi [2020-10-30]
FF HKLM-x32\...\Firefox\Extensions: [WebProtection@360safe.com] - C:\Program Files (x86)\360\Total Security\safemon\webprotection_firefox
FF Extension: (360 Internet Protection) - C:\Program Files (x86)\360\Total Security\safemon\webprotection_firefox [2016-07-15] [Legacy]
FF HKLM-x32\...\Firefox\Extensions: [web2pdfextension.15@web2pdf.adobedotcom] - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn
FF Extension: (Adobe Acrobat DC - Create PDF) - C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Browser\WCFirefoxExtn [2016-03-26] [Legacy]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_238.dll [2019-08-26] (Adobe Inc. -> )
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_238.dll [2019-08-26] (Adobe Inc. -> )
FF Plugin-x32: @DVR/npmedia,version=33.2.0.4 -> C:\Program Files (x86)\webrec\WEB30\DVR32\33.2.0.4\npmedia.dll [2016-09-27] (Zhejiang Dahua Technology CO.,LTD. -> ) [File not signed]
FF Plugin-x32: @DVR/npTimeGrid,version=33.2.0.4 -> C:\Program Files (x86)\webrec\WEB30\DVR32\33.2.0.4\npTimeGrid.dll [2016-09-27] (Zhejiang Dahua Technology CO.,LTD. -> Unauthorized copy) [File not signed]
FF Plugin-x32: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2021-07-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files (x86)\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2021-07-05] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files (x86)\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [No File]
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files (x86)\Microsoft Office\root\Office16\NPSPWRAP.DLL [No File]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-11-14] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @NVR/npmedia4.1.63.0,version=4.1.63.0 -> C:\Program Files (x86)\webrec\Torch\4.1.63.0\npmedia.dll [2019-01-17] (Zhejiang Dahua Technology CO.,LTD. -> )
FF Plugin-x32: @videolan.org/vlc,version=2.2.4 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.6 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN -> VideoLAN)
FF Plugin-x32: Adobe Acrobat -> C:\Program Files (x86)\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2016-02-26] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2017-09-20] (Adobe Systems Incorporated -> Adobe Systems)
FF Plugin-x32: JFGuide -> C:\Program Files (x86)\NetSurveillance\CMS\npGuide.dll [2018-12-26] () [File not signed]
FF Plugin-x32: JFWeb -> C:\Program Files (x86)\NetSurveillance\CMS\npWebPlugin.dll [2018-12-26] () [File not signed]
Chrome:
=======
CHR Profile: C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default [2024-02-24]
CHR Extension: (MEGA) - C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2024-02-24]
CHR Extension: (Adobe Acrobat: PDF edit, convert, sign tools) - C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2024-02-24]
CHR Extension: (Google Docs Offline) - C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2023-08-03]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mica\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2021-10-28]
CHR HKU\S-1-5-21-1926981875-1775378530-3465027807-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd]
CHR HKLM-x32\...\Chrome\Extension: [bknbnapaddjdnbilpmlacdkjdkjmbjhd]
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 AcronisActiveProtectionService; C:\Program Files (x86)\Common Files\Acronis\ActiveProtection\anti_ransomware_service.exe [4380176 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
R2 AcrSch2Svc; C:\Program Files (x86)\Common Files\Acronis\Schedule2\schedul2.exe [1157592 2018-11-23] (Acronis International GmbH -> )
S3 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [82128 2015-12-14] (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
S3 AdobeFlashPlayerUpdateSvc; C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [335416 2019-08-26] (Adobe Inc. -> Adobe)
S3 AdobeUpdateService; C:\Program Files (x86)\Common Files\Adobe\Adobe Desktop Common\ElevationManager\AdobeUpdateService.exe [817760 2017-09-20] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
R2 afcdpsrv; C:\Program Files (x86)\Common Files\Acronis\CDP\afcdpsrv.exe [6299944 2019-02-07] (Acronis International GmbH -> )
R2 AGMService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGMService.exe [3780296 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [3548360 2021-02-17] (Adobe Inc. -> Adobe Systems, Incorporated)
R2 AnyDesk; C:\Program Files (x86)\AnyDesk\AnyDesk.exe [3910472 2024-02-14] (AnyDesk Software GmbH -> AnyDesk Software GmbH)
R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [83768 2017-09-07] (Apple Inc. -> Apple Inc.)
R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-06-18] (ASUSTeK Computer Inc. -> )
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-06-18] (ASUSTeK Computer Inc. -> ) [File not signed]
R2 EFI ES1000; C:\Program Files (x86)\Common Files\EFI\EFI ES-1000 Service\ES1000Service.exe [11776 2009-10-19] (Electronics for Imaging, Inc.) [File not signed]
R2 GlassWire; C:\Program Files (x86)\GlassWire\GWCtlSrv.exe [8924672 2016-02-05] (GlassWire -> SecureMix LLC)
R2 HarlequinLicenceServer; C:\Program Files (x86)\Common Files\Global Graphics Software\Harlequin License Server\bin\hqn_lsd.exe [494656 2011-07-19] () [File not signed]
S2 hasplms; C:\Windows\system32\hasplms.exe [1757696 2007-08-09] (Microsoft Windows Hardware Compatibility Publisher -> Aladdin Knowledge Systems Ltd.)
R2 mmsminisrv; C:\Program Files (x86)\Common Files\Acronis\Infrastructure\mms_mini.exe [4808088 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_server; C:\Program Files (x86)\Common Files\Acronis\MobileBackupServer\mobile_backup_server.exe [3004128 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
S3 mobile_backup_status_server; C:\Program Files (x86)\Acronis\TrueImageHome\mobile_backup_status_server.exe [1765160 2018-11-23] (Acronis International GmbH -> )
R2 PSI_SVC_2; c:\Program Files (x86)\Common Files\Protexis\License Service\PsiService_2.exe [277360 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 PSI_SVC_2_x64; c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe [337776 2014-04-30] (Arvato Digital Services Canada Inc -> arvato digital services llc)
R2 QHActiveDefense; C:\Program Files (x86)\360\Total Security\safemon\QHActiveDefense.exe [937472 2019-01-29] (Beijing Qihu Technology Co., Ltd. -> Qihoo 360 Technology Co. Ltd.)
R2 rtop; C:\Program Files\ByteFence\rtop\bin\rtop_svc.exe [297288 2018-04-11] (Byte Technologies LLC -> Byte Technologies LLC.) <==== ATTENTION
S3 ss_conn_launcher_service; C:\Windows\system32\Samsung\EasySetup\ss_conn_launcher.exe [182328 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2022-05-13] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)
R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [920768 2022-05-13] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
R2 syncagentsrv; C:\Program Files (x86)\Common Files\Acronis\SyncAgent\syncagentsrv.exe [7128176 2018-11-23] (Acronis International GmbH -> )
S3 Tib Mounter Service; C:\Program Files (x86)\Common Files\Acronis\TibMounter64\tib_mounter_service.exe [6926040 2018-11-23] (Acronis International GmbH -> Acronis International GmbH)
S3 uSHAREitSvc; C:\Program Files (x86)\SHAREit Technologies\SHAREit\SHAREit.Service.exe [33224 2016-04-22] (SHAREit Technologies Co.Ltd -> SHAREit Technologies Co.Ltd)
S4 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Windows -> Microsoft Corporation)
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R1 360AntiHacker; C:\Windows\System32\Drivers\360AntiHacker64.sys [183416 2017-12-01] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R3 360AvFlt; C:\Windows\System32\DRIVERS\360AvFlt.sys [86248 2019-01-29] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R3 360AvFlt; C:\Windows\SysWOW64\DRIVERS\360AvFlt.sys [86248 2019-01-29] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R1 360Box64; C:\Windows\System32\DRIVERS\360Box64.sys [332384 2019-01-29] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
S3 360Camera; C:\Windows\System32\Drivers\360Camera64.sys [49088 2017-04-21] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
R1 360FsFlt; C:\Windows\System32\DRIVERS\360FsFlt.sys [454208 2019-01-29] (Beijing Qihu Technology Co., Ltd. -> 360.cn)
R1 360netmon; C:\Windows\System32\DRIVERS\360netmon.sys [87672 2018-01-25] (Qihoo 360 Software (Beijing) Company Limited -> 360.cn)
S3 A38CCID; C:\Windows\System32\DRIVERS\a38ccid.sys [81264 2018-06-22] (Microsoft Windows Hardware Compatibility Publisher -> Advanced Card Systems Ltd.)
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-06-18] (ASUSTeK Computer Inc. -> )
S1 BAPIDRV; C:\Windows\System32\DRIVERS\BAPIDRV64.sys [202304 2019-01-29] (Beijing Qihu Technology Co., Ltd. -> 360.cn)
R2 file_protector; C:\Windows\System32\DRIVERS\file_protector.sys [667144 2019-02-07] (Acronis International GmbH -> Acronis International GmbH)
R0 file_tracker; C:\Windows\System32\DRIVERS\file_tracker.sys [390592 2019-02-07] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 fltsrv; C:\Windows\System32\DRIVERS\fltsrv.sys [182832 2019-02-07] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 GemCCID; C:\Windows\System32\DRIVERS\GemCCID.sys [137712 2016-10-17] (Microsoft Windows Hardware Compatibility Publisher -> Gemalto)
R1 gwdrv; C:\Windows\System32\DRIVERS\gwdrv.sys [33248 2015-05-29] (GlassWire -> SecureMix LLC)
R3 iKeyEnum; C:\Windows\System32\DRIVERS\ikeyenum.sys [16160 2011-07-06] (SafeNet, Inc. -> SafeNet, Inc.)
R3 iKeyIFD; C:\Windows\System32\DRIVERS\ikeyifd.sys [22304 2011-07-06] (SafeNet, Inc. -> SafeNet, Inc.)
R2 multikey; C:\Windows\System32\DRIVERS\multikey.sys [67584 2015-07-21] (Chingachguk & Denger2k (Elite & SP edition)) [File not signed]
U5 RnbToken; C:\Windows\System32\Drivers\RnbToken.sys [24352 2011-07-06] (SafeNet, Inc. -> SafeNet, Inc.)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [29392 2018-11-06] () [File not signed]
R2 Sentinel64; C:\Windows\System32\Drivers\Sentinel64.sys [145448 2009-09-17] (SafeNet, Inc. -> SafeNet, Inc.)
R3 SNTUSB64; C:\Windows\System32\DRIVERS\SNTUSB64.SYS [63528 2011-05-27] (SafeNet, Inc. -> SafeNet, Inc.)
S3 ssudmdm; C:\Windows\System32\DRIVERS\ssudmdm.sys [166760 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 ss_conn_usb_driver2; C:\Windows\System32\Drivers\ss_conn_usb_driver2.sys [43368 2020-04-24] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 tib; C:\Windows\System32\DRIVERS\tib.sys [885880 2019-02-07] (Acronis International GmbH -> Acronis International GmbH)
R2 tib_mounter; C:\Windows\System32\DRIVERS\tib_mounter.sys [173536 2019-02-07] (Acronis International GmbH -> Acronis International GmbH)
S3 tnd; C:\Windows\System32\DRIVERS\tnd.sys [693768 2019-02-07] (Acronis International GmbH -> Acronis International GmbH)
S3 TodosAgmII; C:\Windows\System32\Drivers\AgmIIusb.sys [25088 2007-01-22] (Microsoft Windows Hardware Compatibility Publisher -> Todos Data System AB)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2017-09-07] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R2 virtual_file; C:\Windows\System32\DRIVERS\virtual_file.sys [331976 2019-02-07] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
R0 volume_tracker; C:\Windows\System32\DRIVERS\volume_tracker.sys [243472 2019-02-07] (ACRONIS INTERNATIONAL GMBH -> Acronis International GmbH)
S3 dgderdrv; System32\drivers\dgderdrv.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) (Whitelisted) =========
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-02-24 11:41 - 2024-02-24 11:43 - 000034833 _____ C:\Users\Mica\Desktop\FRST.txt
2024-02-24 11:41 - 2024-02-24 11:42 - 000000000 ____D C:\FRST
2024-02-24 11:33 - 2024-02-24 11:33 - 000000542 __RSH C:\ProgramData\ntuser.pol
2024-02-24 11:24 - 2024-02-24 11:24 - 002386944 _____ (Farbar) C:\Users\Mica\Desktop\FRST64.exe
2024-02-21 06:59 - 2024-02-23 06:41 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2024-02-13 07:58 - 2024-02-13 07:58 - 000249856 _____ C:\Users\Mica\Downloads\RC1TP-02UA.xls
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2024-02-24 11:29 - 2020-04-20 11:26 - 000000000 ____D C:\Users\Mica\AppData\Local\CrashDumps
2024-02-24 11:29 - 2015-09-11 10:44 - 000000000 ____D C:\Users\Mica\AppData\Local\ElevatedDiagnostics
2024-02-24 11:29 - 2009-07-14 05:45 - 000030112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2024-02-24 11:29 - 2009-07-14 05:45 - 000030112 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2024-02-24 11:07 - 2021-10-28 08:22 - 000000000 ____D C:\Program Files (x86)\Google
2024-02-24 11:03 - 2015-09-09 07:57 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2024-02-24 10:52 - 2015-09-05 13:32 - 000000000 ____D C:\Users\Mica\AppData\Roaming\360Safe
2024-02-24 10:51 - 2015-09-05 13:32 - 000000000 ____D C:\Users\Mica\AppData\LocalLow\360WD
2024-02-24 10:33 - 2019-10-03 13:07 - 000000000 ___HD C:\Users\Public\Documents\AdobeGCData
2024-02-24 10:13 - 2020-04-10 14:49 - 000000000 ____D C:\ProgramData\NVIDIA
2024-02-24 10:13 - 2009-07-14 06:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2024-02-23 15:31 - 2022-03-09 13:47 - 000043272 _____ C:\Users\Mica\Desktop\STAMPA KOD DARKA.xlsx
2024-02-23 15:31 - 2015-09-09 11:17 - 000000000 ____D C:\Users\Mica\AppData\Roaming\Microsoft\Excel
2024-02-23 06:41 - 2015-09-11 07:35 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2024-02-19 13:40 - 2019-07-23 11:33 - 000000000 ____D C:\Users\Mica\Documents\ViberDownloads
2024-02-19 07:47 - 2015-09-05 13:32 - 000000000 ____D C:\ProgramData\360safe
2024-02-14 15:54 - 2015-09-09 14:57 - 000000000 ____D C:\Windows\system32\MRT
2024-02-14 15:48 - 2015-07-18 23:46 - 191155960 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2024-02-14 15:40 - 2020-07-15 13:46 - 000000000 ____D C:\Program Files (x86)\AnyDesk
2024-02-13 12:11 - 2020-12-12 14:40 - 000000000 ____D C:\Users\Public\SmartPSS
2024-02-05 12:05 - 2009-07-14 04:20 - 000000000 ____D C:\Windows\system32\NDF
2024-01-31 07:02 - 2021-10-28 08:22 - 000003628 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineUA
2024-01-31 07:02 - 2021-10-28 08:22 - 000003500 _____ C:\Windows\system32\Tasks\GoogleUpdateTaskMachineCore
2024-01-30 07:04 - 2019-07-23 11:32 - 000000000 ____D C:\Users\Mica\AppData\Roaming\ViberPC
==================== Files in the root of some directories ========
2017-02-25 12:42 - 2017-02-25 12:42 - 000087552 _____ (IAIK) C:\Users\Mica\pkcs11wrapper_32.dll
2021-01-25 17:52 - 2021-01-25 17:52 - 018731062 _____ () C:\Users\Mica\SPOPR Scan_Monday, January 25, 2021 17_52_58.DAT
2015-09-05 14:00 - 2015-09-05 14:01 - 063831744 _____ () C:\Users\Mica\WDMyCloud_win.exe
2019-03-15 15:58 - 2019-03-15 15:58 - 000000132 _____ () C:\Users\Mica\AppData\Roaming\Adobe IllExport Filter CS6 Prefs
2015-12-26 13:49 - 2015-12-26 14:49 - 000022046 _____ () C:\Users\Mica\AppData\Roaming\Comma Separated Values (Windows).ADR
2015-11-17 15:00 - 2017-02-13 09:52 - 000006569 _____ () C:\Users\Mica\AppData\Roaming\Comma Separated Values (Windows).EML
2015-12-26 11:43 - 2017-02-13 09:52 - 000006210 _____ () C:\Users\Mica\AppData\Roaming\Microsoft Excel 97-2003.EML
2017-02-23 21:42 - 2017-02-23 21:42 - 000001456 _____ () C:\Users\Mica\AppData\Local\Adobe Save for Web 13.0 Prefs
2015-09-21 11:25 - 2017-07-26 11:17 - 000004096 ____H () C:\Users\Mica\AppData\Local\keyfile3.drm
2018-09-28 07:01 - 2018-09-28 07:01 - 000000000 _____ () C:\Users\Mica\AppData\Local\oobelibMkey.log
2017-08-12 09:01 - 2017-09-09 10:42 - 000007596 _____ () C:\Users\Mica\AppData\Local\Resmon.ResmonCfg
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2024-02-19 07:51
==================== End of FRST.txt ========================
mycity.rs/must-login.png
|
