offline
- Krstić
- Zaslužni građanin
- Pridružio: 02 Nov 2014
- Poruke: 614
|
Pozdrav, laptop je počeo previše da baguje. Kada otvorim nekoliko tabova, prebacivanje sa jednog na drugi laptop koči. Takođe i ceo desktop, otvaranje foldera, slika, programa. Programi baguju i ne rade kao pre. Skeniran je sa Eset Nod32, i malwerbytes programom, nisu našli ništa.
Evo izveštaja:
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 10-05-2020 03
Ran by Mihajlo (administrator) on KRSTIC (ASUSTeK Computer Inc. K53SC) (10-05-2020 23:26:27)
Running from C:\Users\Mihajlo\Desktop
Loaded Profiles: Mihajlo
Platform: Windows 8.1 (Update) (X64) Language: English (United Kingdom)
Default browser: Opera
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\egui.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\eguiProxy.exe
(ESET, spol. s r.o. -> ESET) C:\Program Files\ESET\ESET Security\ekrn.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler.exe
(Google LLC -> Google LLC) C:\Program Files (x86)\Google\Update\1.3.35.452\GoogleCrashHandler64.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\hkcmd.exe
(Intel Corporation - pGFX -> Intel Corporation) C:\Windows\System32\igfxpers.exe
(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe <2>
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(Opera Software AS -> Opera Software) C:\Users\Mihajlo\AppData\Local\Programs\Opera\68.0.3618.63\opera.exe <15>
(Opera Software AS -> Opera Software) C:\Users\Mihajlo\AppData\Local\Programs\Opera\68.0.3618.63\opera_crashreporter.exe
(Viber Media S.à r.l. -> Viber Media S.Ã r.l.) C:\Users\Mihajlo\AppData\Local\Viber\Viber.exe
==================== Registry (Whitelisted) ===================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET Security\ecmds.exe [185648 2020-04-03] (ESET, spol. s r.o. -> ESET)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)
HKLM-x32\...\Run: [PWRISOVM.EXE] => C:\Program Files\PowerISO\PWRISOVM.EXE [456160 2019-09-15] (Power Software Limited -> Power Software Ltd)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [646776 2020-03-12] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\Run: [Viber] => C:\Users\Mihajlo\AppData\Local\Viber\Viber.exe [41192976 2020-04-21] (Viber Media S.à r.l. -> Viber Media S.Ã r.l.)
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\Run: [Discord] => C:\Users\Mihajlo\AppData\Local\Discord\app-0.0.306\Discord.exe [90950968 2020-02-24] (Discord Inc. -> Discord Inc.)
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\Run: [Opera Browser Assistant] => C:\Users\Mihajlo\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3004440 2020-04-29] (Opera Software AS -> Opera Software)
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1
HKU\S-1-5-21-1294692145-876352972-4198589163-1001\...\MountPoints2: F - "F:\setup.exe"
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\81.0.4044.138\Installer\chrmstp.exe [2020-05-08] (Google LLC -> Google LLC)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [182784 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [159704 2018-03-25] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation)
==================== Scheduled Tasks (Whitelisted) ============
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
Task: {23178F6A-D7E2-4C26-B68E-6494C7466E21} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [510912 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {3282049F-F7A0-4C69-A37B-055ECFFABDCD} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2069952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {4E4014DF-72CD-483D-BDE6-A530E6416763} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {568178EC-161C-45C8-B050-5A5B44A25376} - System32\Tasks\WiseCleaner\WDCSkipUAC => C:\Program Files (x86)\Wise\Wise Disk Cleaner\WiseDiskCleaner.exe [7060040 2020-02-04] (Lespeed Technology Ltd. -> WiseCleaner.com)
Task: {56C2C083-9E85-4219-A2DC-5362214934DE} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [757184 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {5C60CCD4-276F-4227-BC13-5F5103CBD0D1} - System32\Tasks\WiseCleaner\WRCSkipUAC => C:\Program Files (x86)\Wise\Wise Registry Cleaner\WiseRegCleaner.exe [5542984 2020-02-13] (Lespeed Technology Ltd. -> WiseCleaner.com)
Task: {5E28835E-96D6-4BCA-8812-EE2E64B46FDA} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe [469952 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {A88D2429-7036-448C-AD4B-A021510965ED} - System32\Tasks\Opera scheduled assistant Autoupdate 1582282773 => C:\Users\Mihajlo\AppData\Local\Programs\Opera\launcher.exe [1517592 2020-04-29] (Opera Software AS -> Opera Software)
Task: {B75AF750-D182-44DB-A1D0-21EDA2E1B5A1} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [662464 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C1779FAA-D9A4-4175-8906-8FE106679C94} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [976832 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {C4CBEA83-9568-43E7-80E4-52AF13F20C02} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-10-23] (Google Inc -> Google LLC)
Task: {CB558125-1293-4C2D-B52C-528B24F05E69} - System32\Tasks\Opera scheduled Autoupdate 1571852220 => C:\Users\Mihajlo\AppData\Local\Programs\Opera\launcher.exe [1517592 2020-04-29] (Opera Software AS -> Opera Software)
Task: {F2F5061B-ED22-459C-9004-AEE75BDC5DB7} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
Task: {F565A825-A897-4E11-9D9B-9171D45E550A} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [155432 2019-10-23] (Google Inc -> Google LLC)
(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{32828D49-CF2E-48A9-A7BF-A1701124929C}: [NameServer] 8.8.8.8,8.8.4.4
Tcpip\..\Interfaces\{32828D49-CF2E-48A9-A7BF-A1701124929C}: [DhcpNameServer] 192.168.0.1
Tcpip\..\Interfaces\{47C2A1A4-0B0A-4DD2-A855-A4AC179B5CC4}: [DhcpNameServer] 192.168.0.1
Internet Explorer:
==================
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_251\bin\ssv.dll [2020-04-26] (Oracle America, Inc. -> Oracle Corporation)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2019-10-23] (Google Inc -> Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation -> Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_251\bin\jp2ssv.dll [2020-04-26] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2019-10-23] (Google Inc -> Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files (x86)\Microsoft Office\Office14\URLREDIR.DLL [2010-02-28] (Microsoft Corporation -> Microsoft Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2019-10-23] (Google Inc -> Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2019-10-23] (Google Inc -> Google Inc.)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll [2008-05-23] (Microsoft Corporation) [File not signed]
FireFox:
========
FF Plugin: @java.com/DTPlugin,version=11.251.2 -> C:\Program Files\Java\jre1.8.0_251\bin\dtplugin\npDeployJava1.dll [2020-04-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.251.2 -> C:\Program Files\Java\jre1.8.0_251\bin\plugin2\npjp2.dll [2020-04-26] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~1\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPAUTHZ.DLL [2010-01-09] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\PROGRA~2\MICROS~1\Office14\NPSPWRAP.DLL [2010-03-24] (Microsoft Corporation -> Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2018-03-24] (NVIDIA Corporation PE Sign v2016 -> NVIDIA Corporation) [File not signed]
Chrome:
=======
CHR Profile: C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default [2020-05-08]
CHR StartupUrls: Default -> "hxxp://netflix.com/"
CHR Extension: (Slides) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2020-04-14]
CHR Extension: (Just Black) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aghfnjkcakhmadgdomlmlhhaocbkloab [2020-04-14]
CHR Extension: (Docs) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2020-04-14]
CHR Extension: (Google Drive) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2020-04-14]
CHR Extension: (YouTube) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-04-14]
CHR Extension: (Sheets) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2020-04-14]
CHR Extension: (Google Docs Offline) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2020-05-03]
CHR Extension: (Super Netflix) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\iakpdiefpdniabbekcbofaanjcpjkloe [2020-04-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-04-14]
CHR Extension: (Gmail) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2020-04-14]
CHR Extension: (Chrome Media Router) - C:\Users\Mihajlo\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-04-14]
Opera:
=======
OPR Notifications: hxxps://binatex.com; hxxps://filmovitica.com; hxxps://www1a.debrahinton.pro; hxxps://www1a.ramirocampos.pro; hxxps://www1a.sherwoodsutton.pro
OPR StartupUrls: "hxxp://google.com/"
OPR Extension: (Install Chrome Extensions) - C:\Users\Mihajlo\AppData\Roaming\Opera Software\Opera Stable\Extensions\kipjbhgniklcnglfaldilecjomjaddfi [2020-01-24]
==================== Services (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [383016 2019-10-26] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 ekrn; C:\Program Files\ESET\ESET Security\ekrn.exe [2358784 2020-04-03] (ESET, spol. s r.o. -> ESET)
R3 ekrnEpfw; C:\Program Files\ESET\ESET Security\ekrn.exe [2358784 2020-04-03] (ESET, spol. s r.o. -> ESET)
S2 Freemake Improver; C:\ProgramData\Freemake\FreemakeUtilsService\FreemakeUtilsService.exe [81280 2020-01-24] (Mixbyte Inc -> Freemake)
S2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [6933272 2020-03-09] (Malwarebytes Inc -> Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [522688 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [File not signed]
S3 uncheater_bgl; C:\Program Files\Common Files\Uncheater\uncheater_bgl.exe [2097008 2019-10-24] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [361824 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [119872 2017-01-12] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r
===================== Drivers (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus.sys [136040 2019-09-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
R1 eamonm; C:\Windows\System32\DRIVERS\eamonm.sys [154336 2020-04-03] (ESET, spol. s r.o. -> ESET)
R0 edevmon; C:\Windows\System32\DRIVERS\edevmon.sys [106840 2020-03-21] (ESET, spol. s r.o. -> ESET)
S0 eelam; C:\Windows\System32\DRIVERS\eelam.sys [15800 2019-10-16] (Microsoft Windows Early Launch Anti-malware Publisher -> ESET)
R1 ehdrv; C:\Windows\system32\DRIVERS\ehdrv.sys [188872 2020-03-21] (ESET, spol. s r.o. -> ESET)
R2 ekbdflt; C:\Windows\system32\DRIVERS\ekbdflt.sys [53048 2020-03-21] (ESET, spol. s r.o. -> ESET)
R1 epfw; C:\Windows\system32\DRIVERS\epfw.sys [79520 2020-03-21] (ESET, spol. s r.o. -> ESET)
R1 epfwwfp; C:\Windows\system32\DRIVERS\epfwwfp.sys [115960 2020-03-21] (ESET, spol. s r.o. -> ESET)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [31168 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [59240 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
R3 nvvhci; C:\Windows\System32\drivers\nvvhci.sys [58816 2018-03-24] (NVIDIA Corporation -> NVIDIA Corporation)
R3 RTL8168; C:\Windows\system32\DRIVERS\Rt630x64.sys [591360 2013-06-18] (Microsoft Windows -> Realtek )
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [166760 2019-09-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [46600 2017-02-10] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [274776 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [117592 2017-01-12] (Microsoft Windows -> Microsoft Corporation)
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One month (created) ===================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-05-10 23:11 - 2020-05-10 23:24 - 000027939 _____ C:\Users\Mihajlo\Desktop\Addition.txt
2020-05-10 23:07 - 2020-05-10 23:28 - 000018755 _____ C:\Users\Mihajlo\Desktop\FRST.txt
2020-05-10 23:07 - 2020-05-10 23:07 - 002284544 _____ (Farbar) C:\Users\Mihajlo\Desktop\FRST64.exe
2020-05-10 23:04 - 2020-05-10 23:27 - 000000000 ____D C:\FRST
2020-05-10 22:01 - 2020-05-10 22:02 - 035038278 _____ C:\Users\Mihajlo\Downloads\Grits - My Life Be LikeOhh Ahh (Remix ft. 2Pac & Xzibit - Tokyo Drift video version).mp4
2020-05-09 17:59 - 2020-05-09 17:59 - 004996808 _____ C:\Windows\system32\FNTCACHE.DAT
2020-05-08 18:11 - 2020-05-08 18:11 - 000000000 ____D C:\Users\Mihajlo\Downloads\New folder
2020-05-08 13:58 - 2020-05-08 13:58 - 000067544 _____ C:\Users\Mihajlo\Downloads\HOTELSKI RACUN.pdf
2020-05-06 22:31 - 2020-05-06 22:31 - 000403110 _____ C:\Users\Mihajlo\Downloads\Podvrda - redovan ucenik Krstic Mihajlo (razredna Ana).pdf
2020-05-06 21:16 - 2020-05-06 21:25 - 1346136140 _____ C:\Users\Mihajlo\Downloads\New Project.mp4
2020-04-30 14:16 - 2020-04-30 14:16 - 000001405 _____ C:\Users\Mihajlo\Desktop\NVIDIA GeForce NOW.lnk
2020-04-29 20:07 - 2020-04-29 20:07 - 000573125 _____ C:\Users\Mihajlo\Downloads\Bozmesacuvaj.m4a
2020-04-28 02:49 - 2020-04-28 02:58 - 088384546 _____ C:\Users\Mihajlo\Downloads\Winthor Medieval MC 1.15_v3.0.zip
2020-04-28 02:45 - 2020-04-28 02:45 - 003050045 _____ C:\Users\Mihajlo\Downloads\Vanilla-PBR-1-0-2 (1).zip
2020-04-28 00:17 - 2020-04-28 00:17 - 003050045 _____ C:\Users\Mihajlo\Downloads\Vanilla-PBR-1-0-2.zip
2020-04-27 23:36 - 2020-05-09 00:15 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\.tlauncher
2020-04-27 23:36 - 2020-04-27 23:36 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\java
2020-04-27 23:12 - 2020-04-27 23:12 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft
2020-04-26 19:21 - 2020-05-08 18:16 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\TeamViewer
2020-04-26 19:21 - 2020-04-26 19:21 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\TeamViewer
2020-04-26 17:20 - 2020-04-26 17:23 - 033324843 _____ C:\Users\Mihajlo\Downloads\JINJER - Teacher, Teacher! (Official Video) Napalm Records.mp4
2020-04-26 02:01 - 2020-04-26 02:01 - 000129192 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge-64.dll
2020-04-26 02:01 - 2020-04-26 02:01 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Sun
2020-04-26 02:01 - 2020-04-26 02:01 - 000000000 ____D C:\Users\Mihajlo\AppData\LocalLow\Sun
2020-04-26 02:01 - 2020-04-26 02:01 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2020-04-26 02:00 - 2020-04-26 02:00 - 007062638 _____ C:\Users\Mihajlo\Downloads\SEUS-Renewed-v1.0.1.zip
2020-04-26 02:00 - 2020-04-26 02:00 - 000000000 ____D C:\ProgramData\Oracle
2020-04-26 02:00 - 2020-04-26 02:00 - 000000000 ____D C:\Program Files\Java
2020-04-26 01:54 - 2020-05-09 00:19 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\.minecraft
2020-04-25 04:49 - 2020-04-25 04:49 - 000000000 ___HD C:\Program Files (x86)\Temp
2020-04-23 19:56 - 2020-04-23 19:56 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\Viber
2020-04-23 18:51 - 2020-04-23 18:51 - 000688775 _____ C:\Users\Mihajlo\Downloads\Nedogledi_5-144-158.pdf
2020-04-22 22:44 - 2020-04-22 22:44 - 000230163 _____ C:\Users\Mihajlo\Downloads\Future Forces-FontZillion.zip
2020-04-22 02:04 - 2020-04-22 02:04 - 000002579 _____ C:\Users\Mihajlo\Desktop\HITMAN™2 on GeForce NOW.lnk
2020-04-22 02:04 - 2020-04-22 02:04 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2020-04-20 18:40 - 2020-04-20 18:40 - 000051353 _____ C:\Users\Mihajlo\Downloads\bray_notes.zip
2020-04-16 01:48 - 2020-04-16 01:48 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Io Interactive
2020-04-14 22:23 - 2020-04-14 22:23 - 000879258 _____ C:\Users\Mihajlo\Downloads\92569485_246521353067097_1225600542904258286_n.mp4
2020-04-14 16:07 - 2020-04-30 14:16 - 000001413 _____ C:\Users\Mihajlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\NVIDIA GeForce NOW.lnk
2020-04-14 14:01 - 2020-05-08 13:02 - 000002244 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2020-04-13 01:41 - 2020-04-13 02:03 - 000000000 ____D C:\Users\Mihajlo\Documents\JoWooD
2020-04-13 00:13 - 2020-04-13 00:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2020-04-12 18:55 - 2020-04-12 18:57 - 008718856 _____ C:\Users\Mihajlo\Downloads\Ты и я.mp4
2020-04-11 04:37 - 2020-04-11 04:37 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Milestone
2020-04-11 04:37 - 2020-04-11 04:37 - 000000000 ____D C:\ProgramData\Steam
2020-04-11 04:34 - 2020-04-11 04:34 - 000000503 _____ C:\Users\Public\Desktop\WRC 4 FIA World Rally Championship.lnk
2020-04-11 04:34 - 2020-04-11 04:34 - 000000503 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WRC 4 FIA World Rally Championship.lnk
2020-04-11 04:34 - 2020-04-11 04:34 - 000000503 _____ C:\ProgramData\Desktop\WRC 4 FIA World Rally Championship.lnk
==================== One month (modified) ==================
(If an entry is included in the fixlist, the file/folder will be moved.)
2020-05-10 22:10 - 2019-11-03 23:11 - 000000000 ____D C:\Users\Mihajlo\Documents\Camtasia Studio
2020-05-10 16:51 - 2019-10-23 15:38 - 000003782 _____ C:\Windows\system32\Tasks\User_Feed_Synchronization-{511FE2DD-3690-4758-BFDF-E286B335D6FE}
2020-05-10 12:25 - 2019-10-23 19:40 - 000000000 ____D C:\ProgramData\NVIDIA
2020-05-10 11:31 - 2020-03-19 17:55 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\discord
2020-05-10 04:49 - 2013-08-22 15:36 - 000000000 ____D C:\Windows\Inf
2020-05-10 04:01 - 2019-12-08 19:26 - 000000000 ___RD C:\Users\Mihajlo\Desktop\ALL
2020-05-10 03:23 - 2020-03-17 19:05 - 000000000 ____D C:\Users\Mihajlo\Documents\ViberDownloads
2020-05-09 18:04 - 2020-02-21 15:47 - 000000000 ____D C:\Users\Mihajlo\Downloads\opera autoupdate
2020-05-09 17:59 - 2019-10-23 15:30 - 000000000 ____D C:\Users\Mihajlo
2020-05-09 17:59 - 2013-08-22 16:45 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2020-05-09 12:45 - 2019-10-26 02:41 - 000000000 ____D C:\Program Files (x86)\Steam
2020-05-09 00:50 - 2014-11-22 03:01 - 000820208 _____ C:\Windows\system32\PerfStringBackup.INI
2020-05-08 20:01 - 2020-02-28 23:58 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\vlc
2020-05-08 18:16 - 2019-11-23 01:37 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Wise Disk Cleaner
2020-05-08 18:16 - 2019-10-23 23:33 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\CrashDumps
2020-05-08 18:16 - 2019-10-23 16:59 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\BitTorrent
2020-05-08 13:12 - 2019-10-23 15:36 - 000003598 _____ C:\Windows\system32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-1294692145-876352972-4198589163-1001
2020-04-30 14:16 - 2019-10-23 19:43 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\NVIDIA Corporation
2020-04-30 11:38 - 2019-10-23 19:37 - 000004058 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1571852220
2020-04-30 11:38 - 2019-10-23 19:37 - 000001340 _____ C:\Users\Mihajlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera browser.lnk
2020-04-29 18:54 - 2020-02-21 12:59 - 000004296 _____ C:\Windows\system32\Tasks\Opera scheduled assistant Autoupdate 1582282773
2020-04-28 10:45 - 2013-08-22 17:36 - 000000000 ____D C:\Windows\AppReadiness
2020-04-27 22:45 - 2020-03-09 20:56 - 000000000 ____D C:\Users\Mihajlo\AppData\LocalLow\BitTorrent
2020-04-25 18:36 - 2020-03-17 19:05 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\ViberPC
2020-04-22 22:52 - 2020-03-05 23:42 - 000153312 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2020-04-16 02:11 - 2020-01-17 23:15 - 000000000 ____D C:\Users\Mihajlo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2020-04-16 02:04 - 2013-08-22 15:25 - 000524288 ___SH C:\Windows\system32\config\BBI
2020-04-14 16:07 - 2019-10-23 19:37 - 000000000 ____D C:\ProgramData\NVIDIA Corporation
2020-04-14 14:01 - 2019-10-23 15:39 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\Google
2020-04-14 14:01 - 2019-10-23 15:39 - 000000000 ____D C:\Program Files (x86)\Google
2020-04-10 18:56 - 2019-11-12 20:48 - 000000000 ____D C:\Users\Mihajlo\AppData\Local\Microsoft Help
==================== Files in the root of some directories ========
2020-02-29 00:18 - 2020-03-01 19:23 - 000000132 _____ () C:\Users\Mihajlo\AppData\Roaming\Adobe PNG Format CS6 Prefs
==================== SigCheck ============================
(There is no automatic fix for files that do not pass verification.)
LastRegBack: 2020-05-10 04:49
==================== End of FRST.txt ========================
https://www.mycity.rs/must-login.png
|
