|
Imam problem sa službenim laptopom. Od pre par dana su počele same od sebe da se otvaraju reklame na stranicama gde ih ranije nije bilo. Neke su samo slike, a na nekim stranicama je to audio koji nije moguće isključiti. Kada hoću da zatvorim takvu stranicu, pojavljuje se prozor preko koga treba da potvrdim da napuštam stranicu.
Najgore je što se reklame pojavljuju na sajtu koji koristim za posao. Ovo se dešava samo u Chrome-u, dok u Firefox-u radi normalno. Inače, radim u Chrome-u jer je Firefox očajno spor. Evo kako to izgleda:
A ovako bi trebalo da bude:
Probao sam da skeniram antivirusom (Microsoft security essentials) ali on nije našao ništa.
Inače laptop pored mene koristi još jedna osoba. Na njemu ne smem ništa da instaliram ili menjam, ali imam administratorske privilegije.
Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 12-09-2016
Ran by Cvele (administrator) on CVELE-PC (17-09-2016 02:13:26)
Running from C:\Temp
Loaded Profiles: Cvele (Available Profiles: Cvele)
Platform: Microsoft® Windows Vista™ Home Premium Service Pack 2 (X86) Language: English (United States)
Internet Explorer Version 9 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-t.....scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Microsoft Corporation) C:\Windows\System32\SLsvc.exe
(ATI Technologies Inc.) C:\Windows\System32\Ati2evxx.exe
(Agere Systems) C:\Windows\System32\agrsmsvc.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\ConfigFree\CFSvcs.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS32.exe
() C:\Toshiba\IVP\ISM\pinger.exe
() C:\Toshiba\IVP\swupdate\swupdtmr.exe
(TOSHIBA Corporation) C:\Windows\System32\TODDSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
(TOSHIBA CORPORATION) C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\SMARTLogService\TosIPCSrv.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\NisSrv.exe
(TOSHIBA Corporation) C:\Program Files\Toshiba\Power Saver\TPwrMain.exe
(Realtek Semiconductor) C:\Windows\RtHDVCpl.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\msseces.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynToshiba.exe
(Synaptics Incorporated) C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
(Microsoft Corporation) C:\Windows\System32\wbem\unsecapp.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\conime.exe
==================== Registry (Whitelisted) ===========================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [TPwrMain] => C:\Program Files\TOSHIBA\Power Saver\TPwrMain.EXE [431456 2008-01-18] (TOSHIBA Corporation)
HKLM\...\Run: [Windows Defender] => C:\Program Files\Windows Defender\MSASCui.exe [1008184 2008-01-21] (Microsoft Corporation)
HKLM\...\Run: [RtHDVCpl] => C:\Windows\RtHDVCpl.exe [4911104 2008-01-30] (Realtek Semiconductor)
HKLM\...\Run: [NDSTray.exe] => NDSTray.exe
HKLM\...\Run: [HWSetup] => \HWSetup.exe hwSetUP
HKLM\...\Run: [SVPWUTIL] => C:\Program Files\TOSHIBA\Utilities\SVPWUTIL.exe [438272 2006-03-23] (TOSHIBA)
HKLM\...\Run: [Skytel] => C:\Windows\Skytel.exe [1826816 2007-11-21] (Realtek Semiconductor Corp.)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-26] (Microsoft Corporation)
HKLM\...\Run: [SynTPEnh] => C:\Program Files\Synaptics\SynTP\SynTPEnh.exe [1451304 2009-03-20] (Synaptics Incorporated)
HKLM\...\Run: [MSC] => c:\Program Files\Microsoft Security Client\msseces.exe [986872 2016-01-29] (Microsoft Corporation)
HKLM\...\Run: [LifeCam] => C:\Program Files\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKU\S-1-5-19\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Corporation)
HKU\S-1-5-20\...\Run: [WindowsWelcomeCenter] => C:\Windows\system32\oobefldr.dll [2153472 2009-04-11] (Microsoft Corporation)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1 82.118.16.11 8.8.8.8
Tcpip\..\Interfaces\{31DA1A57-C651-4C5C-887F-544707CE7B94}: [DhcpNameServer] 192.168.1.1 82.118.16.11 8.8.8.8
Tcpip\..\Interfaces\{F070898C-7673-49E9-94A1-07EDF0F32BAF}: [DhcpNameServer] 192.168.42.129
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.toshibadirect.com/dpdstart
HKU\S-1-5-21-1561422580-439840518-2458012633-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://www.google.rs/
SearchScopes: HKLM -> DefaultScope {292222F1-D40D-47E7-9ACF-7903C01582D4} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage};
SearchScopes: HKLM -> {292222F1-D40D-47E7-9ACF-7903C01582D4} URL = hxxp://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage};
BHO: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-26] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_91\bin\ssv.dll [2016-07-11] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_91\bin\jp2ssv.dll [2016-07-11] (Oracle Corporation)
DPF: {4C732FE1-B515-4277-9429-3AE6130F2A8D} hxxps://ispp.mfin.trezor.rs/isppplus/autorizacija/SCard2Web.CAB
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_65-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0065-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_65-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_65-windows-i586.cab
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll [2009-02-26] (Microsoft Corporation)
Handler: ms-itss - {0A9007C0-4076-11D3-8789-0000F8105754} - c:\Program Files\Common Files\Microsoft Shared\Information Retrieval\msitss.dll [2007-06-08] (Microsoft Corporation)
FireFox:
========
FF ProfilePath: C:\Users\Cvele\AppData\Roaming\Mozilla\Firefox\Profiles\d7oivxr4.default-1437678902123
FF Homepage: hxxps://www.google.com/webhp?ie=utf-8&oe=utf-8&gws_rd=cr&ei=UJ7LVbCHKsiPU7X0gfAP&fg=1
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF32_19_0_0_245.dll [2015-12-01] ()
FF Plugin: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-01-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @java.com/DTPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\dtplugin\npDeployJava1.dll [2016-07-11] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.91.2 -> C:\Program Files\Java\jre1.8.0_91\bin\plugin2\npjp2.dll [2016-07-11] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50428.0\npctrl.dll [2016-04-27] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 -> C:\Program Files\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin: @tracker-software.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-01-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin: @videolan.org/vlc,version=2.0.6 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2013-04-14] (VideoLAN)
FF Plugin: Adobe Reader -> C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-09-24] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-1561422580-439840518-2458012633-1000: @docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf -> C:\Program Files\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll [2014-01-08] (Tracker Software Products (Canada) Ltd.)
FF Plugin HKU\S-1-5-21-1561422580-439840518-2458012633-1000: @talk.google.com/GoogleTalkPlugin -> C:\Users\Cvele\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-1561422580-439840518-2458012633-1000: @talk.google.com/O1DPlugin -> C:\Users\Cvele\AppData\Roaming\Mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Plugin HKU\S-1-5-21-1561422580-439840518-2458012633-1000: @tools.google.com/Google Update;version=3 -> C:\Users\Cvele\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin HKU\S-1-5-21-1561422580-439840518-2458012633-1000: @tools.google.com/Google Update;version=9 -> C:\Users\Cvele\AppData\Local\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-28] (Google Inc.)
FF Plugin ProgramFiles/Appdata: C:\Users\Cvele\AppData\Roaming\mozilla\plugins\npgoogletalk.dll [2015-12-08] (Google)
FF Plugin ProgramFiles/Appdata: C:\Users\Cvele\AppData\Roaming\mozilla\plugins\npo1d.dll [2015-12-08] (Google)
FF Extension: (Firefox Hotfix) - C:\Users\Cvele\AppData\Roaming\Mozilla\Firefox\Profiles\d7oivxr4.default-1437678902123\Extensions\firefox-hotfix@mozilla.org.xpi [2016-09-11]
FF Extension: (Gmail™ Notifier (restartless)) - C:\Users\Cvele\AppData\Roaming\Mozilla\Firefox\Profiles\d7oivxr4.default-1437678902123\Extensions\jid0-GjwrPchS3Ugt7xydvqVK4DQk8Ls@jetpack.xpi [2016-07-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: (Microsoft .NET Framework Assistant) - c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2013-04-30] [not signed]
Chrome:
=======
CHR HomePage: Profile 1 -> hxxps://www.google.rs/
CHR StartupUrls: Profile 1 -> "hxxps://www.google.rs/"
CHR Profile: C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Docs) - C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-07-04]
CHR Extension: (Google Drive) - C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-07-04]
CHR Extension: (YouTube) - C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-07-04]
CHR Extension: (Google Docs Offline) - C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-07-22]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-04]
CHR Profile: C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Profile 1
CHR Extension: (Google Voice (by Google)) - C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\kcnhkahnjcbndmmehfkdnkjomaanaooo [2016-08-23]
CHR Extension: (Chrome Web Store Payments) - C:\Users\Cvele\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-07-01]
==================== Services (Whitelisted) ========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
R2 ConfigFree Service; C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe [40960 2007-12-25] (TOSHIBA CORPORATION) [File not signed]
S3 IDriverT; C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [File not signed]
S3 jswpsapi; C:\Program Files\Jumpstart\jswpsapi.exe [937984 2007-10-30] (Atheros Communications, Inc.) [File not signed]
R2 MsMpSvc; c:\Program Files\Microsoft Security Client\MsMpEng.exe [22216 2016-01-29] (Microsoft Corporation)
R3 NisSrv; c:\Program Files\Microsoft Security Client\NisSrv.exe [292816 2016-01-29] (Microsoft Corporation)
R2 pinger; C:\Toshiba\IVP\ISM\pinger.exe [136816 2007-01-26] ()
R2 Swupdtmr; c:\Toshiba\IVP\swupdate\swupdtmr.exe [66928 2007-10-24] ()
S3 TMachInfo; C:\Program Files\TOSHIBA\TOSHIBA Service Station\TMachInfo.exe [54136 2011-02-11] (TOSHIBA Corporation)
R2 TOSHIBA SMART Log Service; C:\Program Files\TOSHIBA\SMARTLogService\TosIPCSrv.exe [126976 2007-12-04] (TOSHIBA Corporation) [File not signed]
S2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [272952 2008-01-21] (Microsoft Corporation)
===================== Drivers (Whitelisted) ==========================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 CVirtA; C:\Windows\System32\DRIVERS\CVirtA.sys [5275 2007-01-18] (Cisco Systems, Inc.)
R3 DNE; C:\Windows\System32\DRIVERS\dne2000.sys [125328 2008-03-29] (Deterministic Networks, Inc.)
S3 GemCCID; C:\Windows\System32\DRIVERS\GemCCID.sys [98816 2013-04-24] (Gemalto)
R0 LPCFilter; C:\Windows\System32\DRIVERS\LPCFilter.sys [19456 2006-07-29] (COMPAL ELECTRONIC INC.)
R0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [253704 2015-11-13] (Microsoft Corporation)
R0 PxHelp20; C:\Windows\System32\DRIVERS\PxHelp20.sys [20016 2003-10-28] (Sonic Solutions) [File not signed]
S3 HTCAND32; System32\Drivers\ANDROIDUSB.sys [X]
S3 IpInIp; system32\DRIVERS\ipinip.sys [X]
S1 MpKslde6e1e73; \??\c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{97BB0B4C-80BD-492C-98EE-594EBA8A4595}\MpKslde6e1e73.sys [X]
S3 NwlnkFlt; system32\DRIVERS\nwlnkflt.sys [X]
S3 NwlnkFwd; system32\DRIVERS\nwlnkfwd.sys [X]
S3 Tosrfcom; no ImagePath
S3 TpChoice; system32\DRIVERS\TpChoice.sys [X]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-09-17 01:45 - 2016-09-17 02:12 - 00000749 _____ C:\Users\Cvele\Desktop\New Text Document.txt
2016-09-16 23:35 - 2016-09-16 23:36 - 00028863 _____ C:\Users\Cvele\Downloads\CarrierConfirmation.pdf
2016-09-15 00:42 - 2016-09-17 02:13 - 00000000 ____D C:\FRST
2016-09-14 21:04 - 2016-09-16 15:17 - 00000000 ____D C:\Program Files\Mozilla Firefox
2016-09-03 23:10 - 2016-09-03 23:10 - 00006926 _____ C:\Users\Cvele\Documents\cc_20160903_231010.reg
2016-08-25 21:12 - 2016-08-25 21:12 - 00046341 _____ C:\Users\Cvele\Documents\CCF_2450535.pdf
2016-08-22 01:14 - 2016-09-03 23:09 - 00000000 ____D C:\Users\Cvele\AppData\Local\MigWiz
2016-08-21 21:48 - 2016-08-21 21:49 - 00359452 _____ C:\Users\Cvele\Documents\cc_20160821_214848.reg
2016-08-18 17:29 - 2016-08-18 17:29 - 00000253 _____ C:\Users\Cvele\Desktop\win gen.txt
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2016-09-17 02:13 - 2016-07-02 17:35 - 00000000 ____D C:\Temp
2016-09-17 01:56 - 2006-11-02 14:47 - 00004016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
2016-09-17 01:56 - 2006-11-02 14:47 - 00004016 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
2016-09-17 01:43 - 2016-06-27 22:32 - 00000940 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1561422580-439840518-2458012633-1000UA.job
2016-09-17 01:34 - 2014-02-13 13:13 - 00000918 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-09-17 00:34 - 2015-11-23 14:21 - 00000914 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore1d125e97fdd7aa0.job
2016-09-16 23:56 - 2016-07-02 13:25 - 00000000 ____D C:\Users\Cvele\Desktop\RC
2016-09-16 23:47 - 2014-02-13 13:13 - 00000916 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-09-16 22:42 - 2016-06-27 22:32 - 00000888 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1561422580-439840518-2458012633-1000Core.job
2016-09-15 19:58 - 2013-05-25 02:14 - 00000000 ____D C:\Users\Cvele\AppData\Local\Microsoft Games
2016-09-15 15:16 - 2015-02-14 18:55 - 00000000 ____D C:\Program Files\Mozilla Maintenance Service
2016-09-15 15:16 - 2013-04-29 23:17 - 00000824 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
2016-09-15 15:16 - 2013-04-29 23:17 - 00000812 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2016-09-15 00:56 - 2006-11-02 15:01 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-09-15 00:56 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\Msdtc
2016-09-15 00:55 - 2013-04-29 23:57 - 00000000 ____D C:\Users\Cvele
2016-09-15 00:55 - 2006-11-02 12:22 - 56098816 _____ C:\Windows\system32\config\software_previous
2016-09-15 00:55 - 2006-11-02 12:22 - 41418752 _____ C:\Windows\system32\config\components_previous
2016-09-15 00:55 - 2006-11-02 12:22 - 22806528 _____ C:\Windows\system32\config\system_previous
2016-09-15 00:55 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\security_previous
2016-09-15 00:55 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\sam_previous
2016-09-15 00:55 - 2006-11-02 12:22 - 00262144 _____ C:\Windows\system32\config\default_previous
2016-09-15 00:54 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\spool
2016-09-15 00:54 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\registration
2016-09-15 00:54 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\inf
2016-09-15 00:36 - 2016-08-01 15:43 - 00000000 ____D C:\AdwCleaner
2016-09-14 19:28 - 2016-07-06 16:47 - 00000000 ____D C:\Dokumenti
2016-09-12 17:38 - 2016-07-06 16:46 - 00000000 ____D C:\Users\Cvele\Desktop\BoL
2016-09-08 00:58 - 2016-07-13 14:57 - 00000349 _____ C:\Users\Cvele\Desktop\1.txt
2016-08-24 16:56 - 2013-05-25 00:34 - 00000000 ____D C:\Users\Cvele\AppData\Roaming\vlc
2016-08-22 20:02 - 2006-11-02 12:33 - 00772934 _____ C:\Windows\system32\PerfStringBackup.INI
2016-08-22 05:12 - 2006-11-02 15:01 - 00032548 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2016-08-22 01:25 - 2013-12-31 13:01 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2016-08-22 01:25 - 2006-11-02 13:18 - 00000000 __RSD C:\Windows\Media
2016-08-22 01:25 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\rescache
2016-08-22 01:25 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\PolicyDefinitions
2016-08-22 01:22 - 2016-07-11 00:44 - 00000000 ____D C:\Program Files\Common Files\Java
2016-08-22 01:14 - 2006-11-02 13:18 - 00000000 ____D C:\Windows\system32\migwiz
2016-08-21 21:47 - 2014-01-04 23:14 - 00000000 ____D C:\Windows\Minidump
2016-08-21 21:47 - 2008-02-21 02:16 - 00000000 ____D C:\Windows\Panther
==================== Files in the root of some directories =======
2016-03-26 14:49 - 2016-03-26 14:49 - 6871040 _____ () C:\Program Files\GUT3562.tmp
2015-11-23 14:10 - 2015-11-23 14:10 - 6420480 _____ () C:\Program Files\GUT6F85.tmp
2014-09-27 21:08 - 2014-09-27 21:08 - 0000000 _____ () C:\Users\Cvele\AppData\Roaming\wklnhst.dat
2014-01-12 12:26 - 2016-07-07 12:17 - 0000680 _____ () C:\Users\Cvele\AppData\Local\d3d9caps.dat
2013-05-25 00:28 - 2016-07-18 15:31 - 0015872 _____ () C:\Users\Cvele\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2016-08-08 08:59 - 2016-08-08 08:59 - 0000000 _____ () C:\Users\Cvele\AppData\Local\{2C77955F-428B-4513-AB1D-AAAC28DB73E8}
2016-08-08 08:59 - 2016-08-08 08:59 - 0000000 _____ () C:\Users\Cvele\AppData\Local\{2F25162A-EF74-42E9-A97C-5AED193C4056}
2013-05-24 22:19 - 2013-05-24 23:40 - 0037516 _____ () C:\ProgramData\LUUnInstall.LiveUpdate
==================== Bamital & volsnap =================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2016-09-15 01:19
==================== End of FRST.txt ============================
https://www.mycity.rs/must-login.png
|
