Win 10 se čudno ponaša i trza

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Win 10. 64-bit. Laptop HP. Nema antivirusa i sličnih programa. Sve radilo super.
Od juče kompjuter trza, koči, čuje se ventilator kako radu pojačanom modu. Imam miša Logi MX Master 3S i software Logi Option +. Miš koči, neće da se pokrene ili se pokreće sa zakašnjenjem. Iskopčao sam taj miš i stavio normalan miš na kabl. Ista situacija. Teško se pokreće Firefox i ima slab odziv na komande. Deinstalirao sam taj Logi Option i ponovo instalirao. Malo bolja situacija ali svako malo se na ekranu pojavi meni koji je sa desnog tastera miša iako miš ne diram. Ventilator se češće uključuje nego inače.
Hvala unapred na pomoći.

Evo iskopiranog FIRST izveštaja:

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 24-03-2025
Ran by eldar (administrator) on DESKTOP-KR86JCD (HP HP 250 G5 Notebook PC) (24-03-2025 20:40:41)
Running from C:\Users\eldar\Desktop\FRST64.exe
Loaded Profiles: eldar
Platform: Microsoft Windows 10 Pro Version 1809 17763.1577 (X64) Language: English (United States)
Default browser: FF
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_appbroker.exe
(C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxEM.exe
(DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atieclxx.exe
(explorer.exe ->) (Ivaylo Beltchev -> IvoSoft) [File not signed] C:\Program Files\Classic Shell\ClassicStartMenu.exe
(explorer.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Intel\DPTF\esif_uf.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\Temp\DPTF\esif_assist_64.exe
(Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_agent.exe
(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <16>
(services.exe ->) (Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(services.exe ->) (Advanced Micro Devices, Inc. -> AMD) C:\Windows\System32\DriverStore\FileRepository\u0346830.inf_amd64_35731e557194973d\B345901\atiesrxx.exe
(services.exe ->) (Alcohol Soft -> Alcohol Soft Development Team) C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe
(services.exe ->) (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.) C:\Program Files (x86)\AOMEI Backupper\ABService.exe
(services.exe ->) (HP Inc. -> HP Inc.) C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\mewmiprov.inf_amd64_cad1db73e8c782a6\WMIRegistrationService.exe
(services.exe ->) (Intel Corporation -> Intel Corporation) C:\Windows\System32\Intel\DPTF\esif_uf.exe
(services.exe ->) (Intel(R) Embedded Subsystems and IP Blocks Group -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\dal.inf_amd64_b5484efd38adbe8d\jhi_service.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\igfxCUIService.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHDCPSvc.exe
(services.exe ->) (Intel(R) pGFX -> Intel Corporation) C:\Windows\System32\DriverStore\FileRepository\ki131191.inf_amd64_d668106cb6f2eae0\IntelCpHeciSvc.exe
(services.exe ->) (Intel(R) Wireless Connectivity Solutions -> Intel Corporation) C:\Windows\System32\ibtsiva.exe
(services.exe ->) (Logitech Inc -> Logitech, Inc.) C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe
(services.exe ->) (Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe
(services.exe ->) (Microsoft Windows Publisher -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe
(services.exe ->) (Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkAudioService64.exe
(services.exe ->) (Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnhService.exe
(svchost.exe ->) (Microsoft Corporation -> ) C:\Program Files\WindowsApps\Microsoft.ZuneMusic_10.20112.10111.0_x64__8wekyb3d8bbwe\Music.UI.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <2>
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MusNotifyIcon.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(svchost.exe ->) (Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Synaptics Incorporated -> Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe

==================== Registry (Whitelisted) ===================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [11235928 2020-04-24] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [Logitech Download Assistant] => C:\Windows\system32\rundll32.exe C:\Windows\System32\LogiLDA.dll,LogiFetch [3831808 2021-08-30] (Microsoft Windows Hardware Compatibility Publisher -> Logitech)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [163640 2018-07-15] (Ivaylo Beltchev -> IvoSoft) [File not signed]
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation -> Microsoft Corporation)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [HPUsageTrackingLEDM] => "C:\Program Files (x86)\HP\HP UT LEDM\bin\hppusg.exe" "C:\Program Files (x86)\HP\HP UT LEDM\" [0 2023-05-26] () <==== ATTENTION [zero byte File/Folder]
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate: Restriction <==== ATTENTION
HKU\S-1-5-21-1797985647-760240199-3322030732-1002\...\Run: [Microsoft Edge Update] => C:\Users\eldar\AppData\Local\Microsoft\EdgeUpdate\1.3.195.45\MicrosoftEdgeUpdateCore.exe [268384 2025-03-07] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1797985647-760240199-3322030732-1002\...\Run: [Opera Browser Assistant] => C:\Users\eldar\AppData\Local\Programs\Opera\assistant\browser_assistant.exe [3996064 2024-03-04] (Opera Norway AS -> Opera Software)
HKU\S-1-5-21-1797985647-760240199-3322030732-1002\...\Run: [AlcoholAutomount] => C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft -> Alcohol Soft Development Team)
HKU\S-1-5-21-1797985647-760240199-3322030732-1002\...\MountPoints2: {7bc6c510-f55a-11ed-9071-58fb84eec847} - "F:\SISetup.exe"
HKU\S-1-5-21-1797985647-760240199-3322030732-1003\...\RunOnce: [Delete Cached Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\kanita\AppData\Local\Microsoft\OneDrive\Update\OneDriveSetup.exe" [42164600 2022-08-11] (Microsoft Corporation -> Microsoft Corporation)
HKU\S-1-5-21-1797985647-760240199-3322030732-1003\...\RunOnce: [Delete Cached Standalone Update Binary] => C:\Windows\system32\cmd.exe /q /c del /q "C:\Users\kanita\AppData\Local\Microsoft\OneDrive\StandaloneUpdater\OneDriveSetup.exe" (No File)
HKLM\...\Windows x64\Print Processors\HP1100PrintProc: C:\Windows\System32\spool\prtprocs\x64\HP1100PP.DLL [74240 2012-08-31] () [File not signed]
HKLM\...\Print\Monitors\HP1100LM: HP1100LM.DLL (No File)
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files\Google\Chrome\Application\134.0.6998.118\Installer\chrmstp.exe [2025-03-21] (Google LLC -> Google LLC)
GroupPolicy: Restriction ? <==== ATTENTION
Policies: C:\ProgramData\NTUSER.pol: Restriction <==== ATTENTION

==================== Scheduled Tasks (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {F59AB4CB-9CD3-4015-B453-2D41AA189782} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (No File)
Task: {7E9DBCDD-BB73-443D-B00E-09F675AE8A4A} - System32\Tasks\GoogleSystem\GoogleUpdater\GoogleUpdaterTaskSystem135.0.7023.0{609BD481-B64A-4695-8C55-5669AF1507C1} => C:\Program Files (x86)\Google\GoogleUpdater\135.0.7023.0\updater.exe [5745760 2025-02-19] (Google LLC -> Google LLC)
Task: {1134A0AC-F810-4C3C-9AF6-D203E4093C9C} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [78288 2025-03-06] (HP Inc. -> HP Inc.)
Task: {04D78578-B3D9-41ED-BFD5-BCFF32667D15} - System32\Tasks\HP\HP Print Scan Doctor\Printer Health Monitor Logon => C:\Program Files\HPPrintScanDoctor\HPPrinterHealthMonitor.exe [78288 2025-03-06] (HP Inc. -> HP Inc.)
Task: {672E4950-03FF-4437-9B0A-22B467E62925} - System32\Tasks\Intel PTT EK Recertification => C:\Windows\System32\DriverStore\FileRepository\iclsclient.inf_amd64_76523213b78d9046\lib\IntelPTTEKRecertification.exe [818008 2021-09-15] (Intel Corporation -> Intel(R) Corporation)
Task: {8D25F83C-A199-43C9-B54F-0DD316A49A36} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {4B003150-437E-4166-B0D0-919CD51EFA38} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {11B8D8B3-F016-447B-90F9-583D6B0B01AC} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {3EFAF8BC-AB76-4790-ACCC-925E6D49F6CD} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpCmdRun.exe [1732816 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
Task: {8AC5753A-55A7-4AC0-8A89-E2B9305AB608} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1797985647-760240199-3322030732-1002Core{8227E1D1-5591-40BC-AA28-C5B733C8EA4F} => C:\Users\eldar\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206264 2022-12-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {A2992E08-8D02-411C-B862-D91C931CCB74} - System32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1797985647-760240199-3322030732-1002UA{9A2D435D-7392-418C-A6A6-9B0B4AD79B82} => C:\Users\eldar\AppData\Local\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe [206264 2022-12-21] (Microsoft Corporation -> Microsoft Corporation)
Task: {7EA5C562-9B5D-479E-AAD1-87F9415C1465} - System32\Tasks\Mozilla\Firefox Background Update 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [682560 2025-03-19] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {E90C808B-4C5F-4CDD-B77C-16F38136571F} - System32\Tasks\Mozilla\Firefox Background Update S-1-5-21-1797985647-760240199-3322030732-1002 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\firefox.exe [682560 2025-03-19] (Mozilla Corporation -> Mozilla Corporation) -> C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\--MOZ_LOG sync,prependheader,timestamp,append,maxsize:1,Dump:5 --MOZ_LOG_FILE C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38\updates\308046B0AF4A39CB\backgroundupdate.moz_log --backgroundtask background (the data entry has 6 more characters).
Task: {0533870C-AFD0-439E-904D-6116F775A20B} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [34880 2025-03-19] (Mozilla Corporation -> Mozilla Foundation)
Task: {2149A99C-C46C-4247-9953-09A51196ACDA} - System32\Tasks\OneDrive Startup Task-S-1-5-21-1797985647-760240199-3322030732-1002 => C:\Users\eldar\AppData\Local\Microsoft\OneDrive\25.035.0223.0003\OneDriveLauncher.exe [670528 2025-03-19] (Microsoft Corporation -> Microsoft Corporation)
Task: {4CCB71C3-C2B4-4761-AEEB-B9F3E30DC45C} - System32\Tasks\Opera scheduled assistant Autoupdate 1660220888 => C:\Users\eldar\AppData\Local\Programs\Opera\launcher.exe -> --scheduledautoupdate --component-name=assistant --component-path="C:\Users\eldar\AppData\Local\Programs\Opera\assistant" $(Arg0)
Task: {D93E4D48-36D6-40AC-A4E7-37825FAEB2A4} - System32\Tasks\Opera scheduled Autoupdate 1660220883 => C:\Users\eldar\AppData\Local\Programs\Opera\autoupdate\opera_autoupdate.exe [5645720 2025-02-28] (Opera Norway AS -> Opera Software)

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)


==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

Tcpip\Parameters: [DhcpNameServer] 84.22.33.3 84.22.33.4
Tcpip\..\Interfaces\{01f3e407-5be7-4ff1-a1ec-9b21af6f76ad}: [DhcpNameServer] 84.22.33.3 84.22.33.4
Tcpip\..\Interfaces\{01f3e407-5be7-4ff1-a1ec-9b21af6f76ad}: [DhcpDomain] localdomain
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}: [DhcpNameServer] 84.22.33.3 84.22.33.4
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}: [DhcpDomain] localdomain
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\1402230313: [DhcpNameServer] 192.168.201.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\1402230333: [DhcpNameServer] 192.168.203.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\1402230353: [DhcpNameServer] 192.168.205.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\14458494E414: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\4505D2C494E4B4: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\4505D2C494E4B4D223F55374: [DhcpNameServer] 192.168.100.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\4505D2C494E4B4D223F55374: [DhcpDomain] dlinkrouter
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\53E20254C656D656E647: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{1b92b97f-bc02-465a-8c62-2328b324a637}\B4553414: [DhcpNameServer] 192.168.50.1

FireFox:
========
FF DefaultProfile: lxb5645i.default
FF ProfilePath: C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\lxb5645i.default [2025-02-23]
FF user.js: detected! => C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\lxb5645i.default\user.js [2015-01-25]
FF DownloadDir: C:\Users\Eldar\Desktop
FF Extension: (Tab Reloader (page auto refresh)) - C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\lxb5645i.default\Extensions\jid0-bnmfwWw2w2w4e4edvcdDbnMhdVg@jetpack.xpi [2022-03-12]
FF Extension: (Tab Mix - Links) - C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\lxb5645i.default\Extensions\webext@tabmixplus.org.xpi [2021-12-21]
FF ProfilePath: C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\ndox47fu.default-release [2025-03-24]
FF Extension: (Tab Reloader (page auto refresh)) - C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\ndox47fu.default-release\Extensions\jid0-bnmfwWw2w2w4e4edvcdDbnMhdVg@jetpack.xpi [2025-01-09]
FF Extension: (Tab Mix - Links) - C:\Users\eldar\AppData\Roaming\Mozilla\Firefox\Profiles\ndox47fu.default-release\Extensions\webext@tabmixplus.org.xpi [2024-04-26]
FF HKLM-x32\...\Firefox\Extensions: [quickprint@hp.com] - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension
FF Extension: (SmartPrintButton) - C:\Program Files (x86)\Hewlett-Packard\SmartPrint\QPExtension [2011-01-26] [Legacy] [not signed]
FF Plugin: Adobe Acrobat -> C:\Program Files\Adobe\Acrobat DC\Acrobat\Air\nppdf32.dll [2023-10-09] (Adobe Inc. -> Adobe Systems Inc.)

Chrome:
=======
CHR DefaultProfile: Profile 2
CHR Profile: C:\Users\eldar\AppData\Local\Google\Chrome\User Data\Guest Profile [2023-04-25]
CHR Profile: C:\Users\eldar\AppData\Local\Google\Chrome\User Data\Profile 2 [2025-03-24]
CHR DownloadDir: C:\Users\eldar\Downloads
CHR Extension: (Google Docs Offline) - C:\Users\eldar\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2025-02-25]hxxps://clients2.google.com/service/update2/crx
CHR Extension: (Chrome Web Store Payments) - C:\Users\eldar\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2023-07-28]hxxps://clients2.google.com/service/update2/crx
CHR Profile: C:\Users\eldar\AppData\Local\Google\Chrome\User Data\System Profile [2023-06-04]

Opera:
=======
OPR DefaultProfile: Default

==================== Services (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [173040 2023-09-20] (Adobe Inc. -> Adobe Inc.)
S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAutoMntSrv.exe [39376 2015-03-12] (Alcohol Soft -> Alcohol Soft Development Team)
R2 AxVirtualAHCISrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 120\AxAHCIServiceEx.exe [105888 2019-06-12] (Alcohol Soft -> Alcohol Soft Development Team)
R2 Backupper Service; C:\Program Files (x86)\AOMEI Backupper\ABService.exe [873560 2019-12-20] (CHENGDU AOMEI TECHNOLOGY CO., LTD. -> AOMEI Tech Co., Ltd.)
R2 HPPrintScanDoctorService; C:\Program Files\HPPrintScanDoctor\HPPrintScanDoctorService.exe [243664 2025-03-06] (HP Inc. -> HP Inc.)
R2 MDCoreSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MpDefenderCoreService.exe [1926976 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 OptionsPlusUpdaterService; C:\Program Files\LogiOptionsPlus\logioptionsplus_updater.exe [22217608 2025-03-24] (Logitech Inc -> Logitech, Inc.)
S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [6117960 2022-08-21] (Microsoft Windows Publisher -> Microsoft Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\NisSrv.exe [4352456 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.25010.11-0\MsMpEng.exe [270056 2025-03-04] (Microsoft Windows Publisher -> Microsoft Corporation)

===================== Drivers (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R0 ambakdrv; C:\Windows\System32\ambakdrv.sys [51120 2016-12-22] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 ammntdrv; C:\Windows\system32\ammntdrv.sys [171952 2016-12-22] (CHENGDU AOMEI Tech Co., Ltd. -> )
R2 amwrtdrv; C:\Windows\system32\amwrtdrv.sys [38320 2017-09-02] (CHENGDU AOMEI Tech Co., Ltd. -> )
S3 dg_ssudbus; C:\Windows\system32\DRIVERS\ssudbus2.sys [167440 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
R3 KslD; C:\Windows\System32\drivers\wd\KslD.sys [278944 2025-02-14] (Microsoft Windows -> Microsoft Corporation)
S3 mvusbews; C:\Windows\System32\Drivers\mvusbews.sys [20480 2012-09-26] (Microsoft Windows Hardware Compatibility Publisher -> Marvell Semiconductor, Inc.)
R0 sptd2; C:\Windows\System32\Drivers\sptd2.sys [207344 2024-11-20] (Disc Soft Ltd -> Duplex Secure Ltd)
S3 ssudmdm; C:\Windows\system32\DRIVERS\ssudmdm.sys [174112 2022-09-30] (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [20016 2025-03-04] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [601520 2025-03-04] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [100768 2025-03-04] (Microsoft Windows -> Microsoft Corporation)
R3 WirelessButtonDriver64; C:\Windows\System32\drivers\WirelessButtonDriver64.sys [35392 2020-06-08] (HP Inc. -> HP)

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One month (created) (Whitelisted) =========

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-24 20:40 - 2025-03-24 20:41 - 000021691 _____ C:\Users\eldar\Desktop\FRST.txt
2025-03-24 20:40 - 2025-03-24 20:41 - 000000000 ____D C:\FRST
2025-03-24 20:39 - 2025-03-24 20:39 - 002404352 _____ (Farbar) C:\Users\eldar\Desktop\FRST64.exe
2025-03-24 20:12 - 2025-03-24 20:12 - 000000000 ____D C:\Program Files\Logi
2025-03-24 20:11 - 2025-03-24 20:36 - 000000000 ____D C:\Users\eldar\AppData\Local\LogiOptionsPlus
2025-03-24 20:11 - 2025-03-24 20:12 - 000000000 ____D C:\Users\eldar\AppData\Roaming\logioptionsplus
2025-03-24 20:10 - 2025-03-24 20:11 - 000000000 ____D C:\ProgramData\LogiOptionsPlus
2025-03-24 20:10 - 2025-03-24 20:11 - 000000000 ____D C:\Program Files\LogiOptionsPlus
2025-03-24 20:10 - 2025-03-24 20:10 - 000000931 _____ C:\Users\Public\Desktop\Logi Options+.lnk
2025-03-24 20:10 - 2025-03-24 20:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Logi
2025-03-24 12:13 - 2025-03-24 16:31 - 000000000 ____D C:\Users\eldar\Desktop\Old Henry (2021) [1080p] [BluRay] [5.1] [YTS.MX]
2025-03-21 12:21 - 2025-03-22 22:14 - 000000000 ____D C:\Users\eldar\Desktop\Godless (2017) Season 1 S01 (1080p NF WEBRip x265 HEVC 10bit AAC 5.1 ImE)
2025-03-21 06:10 - 2025-03-21 06:10 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_6248_31822024
2025-03-19 16:18 - 2025-03-19 16:27 - 000000000 ____D C:\Users\eldar\Desktop\Last Breath (2025) [1080p] [WEBRip] [5.1] [YTS.MX]
2025-03-14 17:22 - 2025-03-14 17:22 - 000000000 ____D C:\Users\eldar\AppData\Roaming\Microsoft\PowerPoint
2025-03-12 21:51 - 2025-03-12 21:51 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_10560_1909738217
2025-03-10 21:51 - 2025-03-10 21:51 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_11948_4159075
2025-03-07 20:14 - 2025-03-07 20:14 - 004000256 _____ C:\Users\eldar\Downloads\KOPIJA-1.xls
2025-03-07 17:24 - 2025-03-07 17:25 - 004000256 _____ C:\Users\eldar\Desktop\KOPIJA-1.xls
2025-03-07 17:20 - 2025-03-07 17:20 - 001660643 _____ C:\Users\eldar\Desktop\KOPIJA.xlsx
2025-03-06 09:02 - 2025-03-08 15:43 - 000003758 _____ C:\Users\eldar\Desktop\temu - indira.txt
2025-03-05 05:28 - 2025-03-05 05:28 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_6804_66967742
2025-03-02 13:27 - 2025-03-08 15:19 - 000004274 _____ C:\Users\eldar\Desktop\temu.txt
2025-02-28 07:08 - 2025-02-28 07:08 - 000000000 ____D C:\Users\eldar\AppData\Roaming\Microsoft\Publisher
2025-02-27 21:51 - 2025-02-27 21:51 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_5092_1200296246
2025-02-27 19:21 - 2025-02-27 19:22 - 000000074 _____ C:\Users\eldar\Desktop\laser.txt
2025-02-27 14:27 - 2025-02-27 14:25 - 029138978 _____ C:\Users\eldar\Desktop\0-04-05-61c356876c3948bf8f0d64cb1fd2d44ea59c360f830cba4bb0b697e686485d60_d792574ab79fbadd.mp4
2025-02-25 06:46 - 2025-02-25 06:46 - 000000000 ____D C:\Program Files (x86)\chrome_url_fetcher_6552_2131012689
2025-02-24 11:36 - 2025-02-24 11:36 - 009113132 _____ C:\Users\eldar\Desktop\PROGRAM VJEŽBI ZA BOL U DONJIM LEDJIMA.mp4
2025-02-23 15:03 - 2025-03-23 11:23 - 000000000 ____D C:\Users\eldar\Desktop\Faton-aga

==================== One month (modified) ==================

(If an entry is included in the fixlist, the file/folder will be moved.)

2025-03-24 20:39 - 2023-08-05 15:17 - 000000000 ____D C:\Users\eldar\AppData\Roaming\ViberPC
2025-03-24 20:35 - 2023-08-05 15:17 - 000000000 ____D C:\Users\eldar\Documents\ViberDownloads
2025-03-24 20:17 - 2023-07-28 13:46 - 000000000 ____D C:\ProgramData\Mozilla-1de4eec8-1241-4177-a864-e594e8d1fb38
2025-03-24 20:14 - 2023-08-22 19:06 - 000000000 ____D C:\Users\eldar\AppData\Local\ClassicShell
2025-03-24 20:13 - 2018-11-14 18:16 - 000841376 _____ C:\Windows\system32\PerfStringBackup.INI
2025-03-24 20:13 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2025-03-24 20:10 - 2023-07-28 12:54 - 000000000 ____D C:\ProgramData\Logishrd
2025-03-24 20:08 - 2022-08-10 21:56 - 000000208 _____ C:\Windows\SysWOW64\AbBakConfig.dat
2025-03-24 20:08 - 2022-08-10 21:56 - 000000150 _____ C:\Windows\SysWOW64\winsevr.dat
2025-03-24 20:08 - 2022-08-10 21:55 - 000000000 ____D C:\Program Files (x86)\AOMEI Backupper
2025-03-24 20:08 - 2022-08-10 19:22 - 000000000 __SHD C:\Users\eldar\IntelGraphicsProfiles
2025-03-24 20:08 - 2018-11-14 18:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2025-03-24 20:08 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2025-03-24 20:07 - 2018-09-15 07:09 - 000786432 _____ C:\Windows\system32\config\BBI
2025-03-24 20:04 - 2023-07-28 12:54 - 000000000 ____D C:\ProgramData\Package Cache
2025-03-24 19:27 - 2018-11-14 18:06 - 000000000 ____D C:\Windows\system32\SleepStudy
2025-03-24 11:24 - 2023-07-28 13:03 - 000000000 ____D C:\Users\eldar\AppData\Local\Deployment
2025-03-24 06:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2025-03-21 06:10 - 2022-08-10 19:08 - 000002247 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2025-03-21 06:10 - 2022-08-10 19:08 - 000002206 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2025-03-20 19:27 - 2024-10-23 04:49 - 000000000 ____D C:\Users\eldar\Desktop\Machine
2025-03-20 15:16 - 2022-08-11 10:59 - 000000000 ____D C:\Users\eldar\AppData\Roaming\Microsoft\Word
2025-03-19 19:39 - 2022-08-10 19:09 - 000000000 ____D C:\Users\eldar\AppData\Local\D3DSCache
2025-03-19 15:35 - 2023-08-19 05:29 - 000000000 ____D C:\Program Files\Mozilla Firefox
2025-03-19 15:35 - 2023-07-28 13:46 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2025-03-19 05:36 - 2025-01-29 07:33 - 000003570 _____ C:\Windows\system32\Tasks\OneDrive Startup Task-S-1-5-21-1797985647-760240199-3322030732-1002
2025-03-19 05:36 - 2023-07-28 13:46 - 000001065 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2025-03-19 05:36 - 2023-07-28 13:46 - 000000000 ____D C:\Windows\system32\Tasks\Mozilla
2025-03-19 05:36 - 2022-08-11 01:54 - 000003378 _____ C:\Windows\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-1797985647-760240199-3322030732-1002
2025-03-19 05:36 - 2022-08-11 01:51 - 000002379 _____ C:\Users\eldar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2025-03-19 05:36 - 2022-08-10 19:21 - 000003588 _____ C:\Windows\system32\Tasks\OneDrive Reporting Task-S-1-5-21-1797985647-760240199-3322030732-1002
2025-03-18 13:11 - 2024-09-29 19:38 - 000000000 ____D C:\Users\eldar\Desktop\AUTO FINAL
2025-03-18 13:11 - 2023-08-05 14:59 - 000000000 ____D C:\Users\eldar\Desktop\auto
2025-03-15 12:20 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2025-03-14 17:15 - 2024-05-11 17:55 - 000003584 _____ C:\Users\eldar\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2025-03-11 12:59 - 2023-08-05 15:17 - 000000000 ____D C:\Users\eldar\AppData\Local\Viber
2025-03-08 18:16 - 2025-01-31 21:13 - 000000000 ____D C:\Users\eldar\Desktop\Mad Max Fury Road (2015)
2025-03-08 18:16 - 2025-01-31 08:54 - 000000000 ____D C:\Users\eldar\Desktop\Furiosa A Mad Max Saga (2024)
2025-03-07 17:14 - 2022-08-11 01:52 - 000000000 ____D C:\Users\eldar\AppData\Local\Packages
2025-03-07 16:27 - 2023-11-11 20:45 - 000216196 _____ C:\Users\eldar\Desktop\664-------- Director Fehmi Krasniqi.srt
2025-03-07 15:24 - 2022-08-11 13:28 - 000004266 _____ C:\Windows\system32\Tasks\Opera scheduled Autoupdate 1660220883
2025-03-07 15:24 - 2022-08-11 13:28 - 000001386 _____ C:\Users\eldar\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Opera Browser.lnk
2025-03-07 07:04 - 2022-12-21 22:30 - 000003872 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1797985647-760240199-3322030732-1002UA{9A2D435D-7392-418C-A6A6-9B0B4AD79B82}
2025-03-07 07:04 - 2022-12-21 22:30 - 000003808 _____ C:\Windows\system32\Tasks\MicrosoftEdgeUpdateTaskUserS-1-5-21-1797985647-760240199-3322030732-1002Core{8227E1D1-5591-40BC-AA28-C5B733C8EA4F}
2025-03-06 06:39 - 2023-08-10 10:28 - 000000000 ____D C:\Windows\system32\Tasks\HP
2025-03-06 06:39 - 2023-07-28 12:59 - 000000000 ____D C:\Program Files\HPPrintScanDoctor
2025-03-05 17:02 - 2024-01-08 21:00 - 000000000 ____D C:\Users\eldar\Desktop\New folder
2025-03-04 05:34 - 2018-11-14 18:07 - 000000000 ____D C:\Windows\system32\Drivers\wd
2025-03-03 12:46 - 2024-07-01 09:35 - 000000000 ____D C:\Users\eldar\Desktop\Plata
2025-02-28 21:05 - 2024-11-26 13:11 - 000000000 ____D C:\Users\eldar\Desktop\WhatsApp sent video
2025-02-28 07:08 - 2022-08-11 10:59 - 000000000 ____D C:\Users\eldar\AppData\Roaming\Microsoft\Office
2025-02-28 06:39 - 2023-08-05 15:17 - 000001027 _____ C:\Users\eldar\Desktop\Viber.lnk
2025-02-23 14:09 - 2024-11-26 12:46 - 000000000 ____D C:\Users\eldar\Desktop\WhatsApp Images
2025-02-23 13:25 - 2024-11-19 21:30 - 000000000 ____D C:\Users\eldar\Desktop\slike za ssd
2025-02-23 13:23 - 2024-11-26 20:02 - 000000000 ____D C:\Users\eldar\Desktop\Sa mobilnog
2025-02-23 11:27 - 2022-08-10 22:12 - 000001024 ____H C:\SYSTAG.BIN
2025-02-22 20:02 - 2022-08-10 21:55 - 000000000 ____D C:\ProgramData\AomeiBR

==================== Files in the root of some directories ========

2024-10-29 08:59 - 2025-03-21 06:10 - 000530609 _____ () C:\Program Files\chrome_installer.log
2024-11-17 11:10 - 2024-11-17 11:10 - 000533208 _____ () C:\Program Files (x86)\updater.log
2024-12-17 09:45 - 2024-12-17 09:45 - 000000018 _____ () C:\Users\eldar\AppData\Roaming\.cache9050425797200915815.dat
2024-03-25 11:05 - 2025-02-17 14:38 - 000015175 _____ () C:\Users\eldar\AppData\Roaming\plugin_scan_state_VST2_x32.scan
2024-03-25 11:05 - 2025-02-17 14:38 - 000019623 _____ () C:\Users\eldar\AppData\Roaming\plugin_scan_state_VST2_x64.scan
2024-03-25 11:05 - 2025-02-17 14:38 - 000001686 _____ () C:\Users\eldar\AppData\Roaming\plugin_scan_state_VST3_x32.scan
2024-03-25 11:05 - 2025-02-17 14:38 - 000006101 _____ () C:\Users\eldar\AppData\Roaming\plugin_scan_state_VST3_x64.scan
2024-05-11 17:55 - 2025-03-14 17:15 - 000003584 _____ () C:\Users\eldar\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2023-08-20 10:12 - 2023-08-20 10:12 - 000007605 _____ () C:\Users\eldar\AppData\Local\Resmon.ResmonCfg

==================== SigCheck ============================

(There is no automatic fix for files that do not pass verification.)

==================== End of FRST.txt ========================


[Link mogu videti samo ulogovani korisnici]