|
Poslao: 19 Avg 2017 21:13
|
offline
- Pridružio: 07 Apr 2012
- Poruke: 114
|
Poštovanje,
- računar radi po svome, otvara nove prozore kako on hoće, sam bira preko kog pretraživača će otvoriti,
Norton sve živo blokira, a ko ga je skinuo nemam pojma, koči, ne mogu skinuti fotografije iz mail-a,
jednom rečju anarhija.
- duže vreme (dva tri meseca) računar ne ardi kako treba, ali ovo sada je vrhunac, neupotrebiv je
- koliko ja znam nemam neku posebnu zaštitu, pojavio se taj Norton koji prijavljuje Trojan.gen.8!cloud i
mislim Trojan.gen.2
- pokušao sam brisati neke stvari koje su mi se činile da tu ne pripadaju
- kablovski internet
- grupa tinejdžera često visi na računaru i Boga pitaj šta rade, nisam tražio dokaze ali sumnjam da su
oni ovo zakuvali
Skinuo sam Frst ali "pukao" nekoliko sekundi posle pokretanja, nakon toga je ikonica nestala sa radne površine. Više ga ne mogu skinuti.
|
|
|
|
|
|
|
Poslao: 19 Avg 2017 21:50
|
offline
- softwaremaniac
- AMF pripravnik
- Pridružio: 14 Jun 2016
- Poruke: 535
|
Pozdrav,
pokušaj da bootuješ u Safe Mode with Networking pa odande da skineš FRST i odradiš sken s njim (pazi da Addition.txt bude označen).
Ako uspije, zalepi FRST.txt i Addition.txt
|
|
|
|
|
|
|
Poslao: 19 Avg 2017 22:01
|
offline
- Pridružio: 07 Apr 2012
- Poruke: 114
|
Sada sam video u history da ga Norton blokira, čekira ga kao virus frst64.exe (SONAR.dopper) High, a ne mogu da isključim tog Nortona??
|
|
|
|
|
|
|
|
|
Poslao: 19 Avg 2017 22:21
|
offline
- Pridružio: 07 Apr 2012
- Poruke: 114
|
Uspelo iz Safe moda!!!
Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 19-08-2017
Ran by user6 (administrator) on USER6-PC (19-08-2017 23:09:26)
Running from C:\Users\user6\Desktop
Loaded Profiles: user6 (Available Profiles: user6)
Platform: Windows 7 Ultimate Service Pack 1 (X64) Language: engleski (SAD)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Safe Mode (with Networking)
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Program Files\Microsoft Security Client\MsMpEng.exe
(Microsoft Corporation) C:\Windows\HelpPane.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
==================== Registry (Whitelisted) ====================
(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)
HKLM\...\Run: [MSC] => C:\Program Files\Microsoft Security Client\msseces.exe [1353680 2016-11-14] (Microsoft Corporation)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [508240 2015-08-05] (Adobe Systems Incorporated)
HKLM\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [GrooveMonitor] => C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [30040 2009-02-27] (Microsoft Corporation)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1075296 2013-04-25] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [RealDownloader] => C:\Program Files (x86)\RealNetworks\RealDownloader\downloader2.exe [714992 2016-07-05] ()
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2137744 2016-10-08] (Wondershare)
HKLM-x32\...\Run: [DelaypluginInstall] => C:\ProgramData\Wondershare\Player\DelayPluginI.exe [1960008 2014-09-19] ()
HKLM-x32\...\Run: [boinctray] => C:\Program Files (x86)\BOINC\boinctray.exe [71312 2014-03-07] (Charity Engine)
HKLM-x32\...\Run: [boincmgr] => C:\Program Files (x86)\BOINC\charityengine.exe [3757712 2014-03-07] (Charity Engine)
HKLM-x32\...\Run: [TkBellExe] => C:\Program Files (x86)\Real\RealPlayer\update\realsched.exe [286784 2015-09-20] (RealNetworks, Inc.)
HKLM-x32\...\Run: [BrowserPlugInHelper] => C:\Program Files (x86)\Wondershare\VideoConverterFree\BrowserPlugInHelper.exe [410472 2012-09-28] (Wondershare Software)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [587288 2017-07-21] (Oracle Corporation)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\Run: [Google Update] => "C:\Users\user6\AppData\Local\Google\Update\GoogleUpdate.exe" /c
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files\DAEMON Tools Lite\DTLite.exe [5583120 2015-02-27] (Disc Soft Ltd)
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\Run: [Infigo] => C:\Program Files (x86)\Infigo\Infigo.exe onrun
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\Bluestacks\HD-Agent.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [3062560 2017-07-18] (Valve Corporation)
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: F - F:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: H - H:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {170fcda1-dcf4-11e4-a152-bc5ff4da1084} - H:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {1c03d322-cc9a-11e4-8e2b-bc5ff4da1084} - F:\Autorun.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {3c5c57a3-d5e1-11e4-86a5-bc5ff4da1084} - G:\setup.exe
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2017-08-19]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files (x86)\McAfee Security Scan\3.11.500\SSScheduler.exe (McAfee, Inc.)
Startup: C:\Users\user6\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Facebook Gameroom.lnk [2016-12-13]
ShortcutTarget: Facebook Gameroom.lnk -> C:\Users\user6\AppData\Local\Facebook\Games\FacebookGameroom.exe (Facebook)
==================== Internet (Whitelisted) ====================
(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)
Hosts: 5.79.79.150 pagead2.googlesyndication.com
Tcpip\Parameters: [DhcpNameServer] 81.24.247.61 91.102.231.242
Tcpip\..\Interfaces\{0E16808B-D60A-4908-9EEE-6C1CD27E1FBE}: [DhcpNameServer] 91.102.224.62 91.102.225.16
Tcpip\..\Interfaces\{340C8588-8867-45BF-97BF-AB2D523A4E71}: [DhcpNameServer] 81.24.247.61 91.102.231.242
Tcpip\..\Interfaces\{4CBF1F6E-0F2A-4803-8B1A-BBB882927A04}: [DhcpNameServer] 91.102.224.62 91.102.225.16
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = web/?type=dspp&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = web/?type=dspp&q={searchTerms}
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2683369425-3361945966-1453627295-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin64.dll [2015-07-27] (RealDownloader)
BHO: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine\22.9.3.14\coIEPlg.dll [2017-05-17] (Symantec Corporation)
BHO-x32: RealNetworks Download and Record Plugin for Internet Explorer -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> C:\Program Files (x86)\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll [2015-07-27] (RealDownloader)
BHO-x32: Wondershare Player 1.6.0 -> {43D9786F-A485-683B-9B5B-ACC97ABC17FC} -> C:\ProgramData\Wondershare\Player\WSBrowserAppMgr.dll [2014-09-19] (Wondershare)
BHO-x32: Norton Identity Safety -> {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} -> C:\Program Files\Norton Security\Engine32\22.9.3.14\coIEPlg.dll [2017-05-17] (Symantec Corporation)
BHO-x32: Wondershare Video Converter Ultimate -> {65DEE40A-3E93-4cae-9F98-B8E06DCEE2BF} -> C:\Program Files (x86)\Wondershare\VideoConverterFree\SVRIEPlugin.dll [2012-09-28] (Wondershare Software Co., Ltd.)
BHO-x32: Groove GFS Browser Helper -> {72853161-30C5-4D22-B7F9-0BBC1D38A37E} -> C:\Program Files (x86)\Microsoft Office\Office12\GrooveShellExtensions.dll [2009-02-27] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\ssv.dll [2017-08-18] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\jp2ssv.dll [2017-08-18] (Oracle Corporation)
Toolbar: HKLM - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.9.3.14\coIEPlg.dll [2017-05-17] (Symantec Corporation)
Toolbar: HKLM-x32 - Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine32\22.9.3.14\coIEPlg.dll [2017-05-17] (Symantec Corporation)
Toolbar: HKU\S-1-5-21-2683369425-3361945966-1453627295-1000 -> Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Security\Engine\22.9.3.14\coIEPlg.dll [2017-05-17] (Symantec Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2016-09-23] (Skype Technologies)
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C - No File
Handler: WSWSVCUchrome - No CLSID Value
StartMenuInternet: IEXPLORE.EXE - iexplore.exe
FireFox:
========
FF ProfilePath: C:\Users\user6\AppData\Roaming\Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154 [2017-08-19]
FF NewTab: Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154 -> resource://jid1-lpoiffmusixlib-at-jetpack/musixlib/data/index.html
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154 ->
FF Homepage: Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154 -> google.rs
FF Extension: (Video DownloadHelper) - C:\Users\user6\AppData\Roaming\Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154\Extensions\{b9db16a4-6edc-47ec-a1f4-b86292ed211d}.xpi [2017-05-09]
FF ProfilePath: C:\Users\user6\AppData\Roaming\KompoZer\Profiles\qq3j173k.default [2015-03-24]
FF Extension: (Activity Stream) - C:\Program Files (x86)\Mozilla Firefox\browser\features\activity-stream@mozilla.org.xpi [2017-08-17] [not signed]
FF Extension: (Photon onboarding) - C:\Program Files (x86)\Mozilla Firefox\browser\features\onboarding@mozilla.org.xpi [2017-08-17] [not signed]
FF HKLM\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.3.14\coFFAddon
FF Extension: (Norton Security Toolbar) - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.3.14\coFFAddon [2017-08-19]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF HKLM-x32\...\Firefox\Extensions: [{8D150B8F-EFE8-45a3-A4A3-053020F48FAC}] - C:\Program Files (x86)\Wondershare\VideoConverterFree\SVRFirefoxExt
FF Extension: (Wondershare Video Converter Ultimate) - C:\Program Files (x86)\Wondershare\VideoConverterFree\SVRFirefoxExt [2017-07-19] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [Player@Wondershare.com] - C:\ProgramData\Wondershare\Player\Player@Wondershare.com
FF Extension: (Wondershare Player) - C:\ProgramData\Wondershare\Player\Player@Wondershare.com [2017-07-19] [not signed]
FF HKLM-x32\...\Firefox\Extensions: [{C1A2A613-35F1-4FCF-B27F-2840527B6556}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\NS_22.9.3.14\coFFAddon
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_26_0_0_151.dll [2017-08-17] ()
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2015-08-06] (Adobe Systems)
FF Plugin: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll [2013-12-02] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_26_0_0_151.dll [2017-08-17] ()
FF Plugin-x32: @adobe.com/ShockwavePlayer -> C:\Windows\SysWOW64\Adobe\Director\np32dsw_1217157.dll [2015-02-05] (Adobe Systems, Inc.)
FF Plugin-x32: @java.com/DTPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\dtplugin\npDeployJava1.dll [2017-08-18] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.144.2 -> C:\Program Files (x86)\Java\jre1.8.0_144\bin\plugin2\npjp2.dll [2017-08-18] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-12-11] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin-x32: @real.com/nppl3260;version=18.0.2.59 -> c:\program files (x86)\real\realplayer\Netscape6\nppl3260.dll [2015-09-20] (RealNetworks, Inc.)
FF Plugin-x32: @real.com/nprpplugin;version=18.0.2.59 -> c:\program files (x86)\real\realplayer\Netscape6\nprpplugin.dll [2015-09-20] (RealTimes)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.5\npGoogleUpdate3.dll [2017-04-29] (Google Inc.)
FF Plugin-x32: @videolan.org/vlc,version=2.1.5 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2017-05-24] (VideoLAN)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2017-08-10] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2015-08-06] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [2013-12-02] (Adobe Systems)
FF Plugin HKU\S-1-5-21-2683369425-3361945966-1453627295-1000: @tools.google.com/Google Update;version=3 -> C:\Users\user6\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-2683369425-3361945966-1453627295-1000: @tools.google.com/Google Update;version=9 -> C:\Users\user6\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-2683369425-3361945966-1453627295-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\user6\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-08-08] (Unity Technologies ApS)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> ?type=hppppp
CHR NewTab: Default -> Not-active:"chrome-extension://kkpjbpgegkmeimeilaifpokpaciahdkc/newtab/newtab.html", Not-active:"chrome-extension://apdjgfelaciigibipbmoojknlkalhdoc/index.html", Not-active:"chrome-extension://jgkojlekkpfmddgjilkhmdbifgaicpfi/stubby.html"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee&type=C210US91075D20170305&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Profile: C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default [2017-07-25]
CHR Extension: (MyStartab) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdjgfelaciigibipbmoojknlkalhdoc [2017-02-17]
CHR Extension: (MEGA) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\bigefpfhnfcobdlfbedofhhaibnlghod [2017-07-25]
CHR Extension: (YouTube) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-24]
CHR Extension: (Wondershare Video Converter Ultimate) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\chgdeabpmphfhkoemjjglmilajldekbp [2017-07-25]
CHR Extension: (Google Search) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]
CHR Extension: (King to Kong) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfhmbbgdfphlgkibdmciphdighaocelc [2017-03-16]
CHR Extension: (Matsusps) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednhgmmecokelmaflmonebmpfcedabgo [2017-02-03]
CHR Extension: (McAfee® WebAdvisor) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho [2017-03-21]
CHR Extension: (Google документи офлајн) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (BiosUks) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjgiiojeoafcljdkdaigocmfgaoaeij [2017-02-02]
CHR Extension: (TypingFanatic) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgkojlekkpfmddgjilkhmdbifgaicpfi [2016-12-06]
CHR Extension: (MyStarTab) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\llcgkjbfoapgaojfdcpkncnboiicignl [2017-02-17]
CHR Extension: (Tishysd) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\mecbhbceedkbmdiednbdnaiaomeoldkc [2017-01-31]
CHR Extension: (Gmail) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2017-07-25]
CHR Extension: (Unura) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pknhddkbagfjncdopglmjooigpceekdb [2016-09-12]
CHR HKLM\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.9.3.14\Exts\Chrome.crx [2017-08-19]
CHR HKLM\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [chgdeabpmphfhkoemjjglmilajldekbp] - C:\Program Files (x86)\Wondershare\VideoConverterFree\SVRChromePlugin.crx [2017-07-19]
CHR HKLM-x32\...\Chrome\Extension: [cjabmdjcfcfdmffimndhafhblfmpjdpe] - C:\Program Files\Norton Security\Engine\22.9.3.14\Exts\Chrome.crx [2017-08-19]
CHR HKLM-x32\...\Chrome\Extension: [iikflkcanblccfahdhdonehdalibjnif] - hxxps://clients2.google.com/service/update2/crx
==================== Services (Whitelisted) ====================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S2 AGSService; C:\Program Files (x86)\Common Files\Adobe\AdobeGCClient\AGSService.exe [2246256 2017-05-18] (Adobe Systems, Incorporated)
S2 Capture Device Service; C:\Program Files (x86)\Common Files\InterVideo\DeviceService\DevSvc.exe [198168 2007-03-06] (InterVideo Inc.)
S3 Disc Soft Lite Bus Service; C:\Program Files\DAEMON Tools Lite\DiscSoftBusService.exe [1272592 2015-02-27] (Disc Soft Ltd)
S2 HPSupportSolutionsFrameworkService; C:\Program Files (x86)\Hewlett-Packard\HP Support Solutions\HPSupportSolutionsFrameworkService.exe [321896 2017-07-06] (HP Inc.)
S2 hshld; C:\Program Files (x86)\Hotspot Shield\bin\cmw_srv.exe [52656 2017-08-17] (AnchorFree Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [File not signed]
S3 McComponentHostService; C:\Program Files (x86)\McAfee Security Scan\3.11.500\McCHSvc.exe [272136 2017-01-19] (McAfee, Inc.)
R2 MsMpSvc; C:\Program Files\Microsoft Security Client\MsMpEng.exe [119864 2016-11-14] (Microsoft Corporation)
S3 NBService; C:\Program Files (x86)\Nero\Nero 7\Nero BackItUp\NBService.exe [724992 2006-10-10] (Nero AG) [File not signed]
S3 NisSrv; C:\Program Files\Microsoft Security Client\NisSrv.exe [361816 2016-11-14] (Microsoft Corporation)
S2 NS; C:\Program Files\Norton Security\Engine\22.9.3.14\NS.exe [326160 2017-05-17] (Symantec Corporation)
S2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [462784 2016-12-13] (NVIDIA Corporation)
S2 NVDisplay.ContainerLocalSystem; C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe [459832 2016-12-11] (NVIDIA Corporation)
S2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1163712 2016-12-13] (NVIDIA Corporation)
S2 NvTelemetryContainer; C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe [425408 2016-12-13] (NVIDIA Corporation)
S2 RealPlayerUpdateSvc; C:\Program Files (x86)\Real\UpdateService\RealPlayerUpdateSvc.exe [32880 2015-07-27] ()
S2 RealTimes Desktop Service; c:\program files (x86)\real\realplayer\RPDS\Bin\rpdsvc.exe [1115736 2015-09-20] (RealNetworks, Inc.)
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [File not signed]
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 WsAppService; C:\Program Files (x86)\Wondershare\WAF\2.3.1.204\WsAppService.exe [437392 2016-11-16] (Wondershare)
S2 BDSGRTP; "C:\Program Files (x86)\Common Files\Baidu\BaiduProtect1.3\1.3.0.645\BaiduProtect.exe" -r [X]
===================== Drivers (Whitelisted) ======================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
S3 AFTrafMgr1.3; C:\Program Files (x86)\Hotspot Shield\bin\TrafMgr_1_3_64.sys [64912 2017-08-14] (AnchorFree Inc.)
S1 BHDrvx64; C:\Program Files\Norton Security\NortonData\22.9.3.14\Definitions\BASHDefs\20170816.003\BHDrvx64.sys [1862816 2017-08-16] (Symantec Corporation)
S1 ccSet_NS; C:\Windows\system32\drivers\NSx64\1609030.00E\ccSetx64.sys [174232 2017-05-17] (Symantec Corporation)
R3 dtlitescsibus; C:\Windows\System32\DRIVERS\dtlitescsibus.sys [30352 2015-03-17] (Disc Soft Ltd)
S1 eeCtrl; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\eeCtrl64.sys [508032 2017-08-18] (Symantec Corporation)
S3 EraserUtilDrv11720; C:\Program Files (x86)\Common Files\Symantec Shared\EENGINE\EraserUtilDrv11720.sys [158336 2017-08-18] (Symantec Corporation)
S3 EvolveVirtualAdapter; C:\Windows\System32\DRIVERS\evolve.sys [21656 2014-08-21] (Echobit, LLC)
S3 hid8103; C:\Windows\SysWOW64\drivers\hid8103.sys [31128 2006-10-25] (Compuware Corporation) [File not signed]
S1 IDSVia64; C:\Program Files\Norton Security\NortonData\22.9.3.14\Definitions\IPSDefs\20170818.001\IDSvia64.sys [1056920 2017-08-18] (Symantec Corporation)
S3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-01-19] ()
S0 MpFilter; C:\Windows\System32\DRIVERS\MpFilter.sys [295000 2016-08-25] (Microsoft Corporation)
S3 NisDrv; C:\Windows\System32\DRIVERS\NisDrvWFP.sys [135928 2016-08-25] (Microsoft Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [27584 2016-12-13] (NVIDIA Corporation)
S3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [46016 2016-12-13] (NVIDIA Corporation)
S4 secdrv; C:\Windows\SysWow64\Drivers\secdrv.sys [12464 2015-12-29] (Macrovision Europe Ltd) [File not signed]
S1 SRTSP; C:\Windows\system32\drivers\NSx64\1609030.00E\SRTSP64.SYS [770712 2017-05-17] (Symantec Corporation)
S1 SRTSPX; C:\Windows\system32\drivers\NSx64\1609030.00E\SRTSPX64.SYS [49304 2017-05-17] (Symantec Corporation)
R0 SymEFASI; C:\Windows\System32\drivers\NSx64\1609030.00E\SYMEFASI64.SYS [1714328 2017-05-17] (Symantec Corporation)
S3 SymEvent; C:\Windows\system32\Drivers\SYMEVENT64x86.SYS [102608 2017-08-19] (Symantec Corporation)
S1 SymIRON; C:\Windows\system32\drivers\NSx64\1609030.00E\Ironx64.SYS [291480 2017-05-17] (Symantec Corporation)
S1 SymNetS; C:\Windows\system32\drivers\NSx64\1609030.00E\SYMNETS.SYS [567496 2017-05-17] (Symantec Corporation)
R3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42064 2016-03-01] (Anchorfree Inc.)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Apple, Inc.) [File not signed]
==================== NetSvcs (Whitelisted) ===================
(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)
==================== One Month Created files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-19 23:09 - 2017-08-19 23:11 - 000025103 _____ C:\Users\user6\Desktop\FRST.txt
2017-08-19 23:07 - 2017-08-19 23:07 - 000058648 _____ C:\Windows\ntbtlog.txt
2017-08-19 23:06 - 2017-08-19 23:06 - 000000000 ____D C:\Windows\SysWOW64\Hotspot Shield
2017-08-19 23:02 - 2017-08-19 23:02 - 002395648 _____ (Farbar) C:\Users\user6\Desktop\FRST64.exe
2017-08-19 22:48 - 2017-08-19 22:48 - 000000000 ____D C:\Windows\System32\Tasks\Remediation
2017-08-19 20:16 - 2017-08-19 20:16 - 001261556 _____ C:\Windows\system32\PerfStringBackup.TMP
2017-08-19 13:13 - 2017-08-19 13:13 - 000000000 ____D C:\Program Files\Common Files\AV
2017-08-19 10:55 - 2017-08-19 10:55 - 000000000 ____D C:\Windows\System32\Tasks\Norton Security
2017-08-19 10:54 - 2017-08-19 10:54 - 000102608 _____ (Symantec Corporation) C:\Windows\system32\Drivers\SYMEVENT64x86.SYS
2017-08-19 10:54 - 2017-08-19 10:54 - 000008339 _____ C:\Windows\system32\Drivers\SYMEVENT64x86.CAT
2017-08-19 10:54 - 2017-08-19 10:54 - 000003204 _____ C:\Windows\System32\Tasks\Norton WSC Integration
2017-08-19 10:54 - 2017-08-19 10:54 - 000000000 ____D C:\Program Files\Common Files\Symantec Shared
2017-08-19 10:51 - 2017-08-19 10:51 - 000002105 _____ C:\Users\Public\Desktop\Norton Security.lnk
2017-08-19 10:50 - 2017-08-19 19:18 - 000000000 ____D C:\Windows\system32\Drivers\NSx64
2017-08-19 10:50 - 2017-08-19 10:51 - 000000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Norton Security
2017-08-19 10:50 - 2017-08-19 10:51 - 000000000 ____D C:\Program Files\Norton Security
2017-08-19 10:44 - 2017-08-19 10:44 - 000001028 _____ C:\Users\Public\Desktop\Hotspot Shield.lnk
2017-08-19 10:44 - 2017-08-19 10:44 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hotspot Shield
2017-08-19 08:43 - 2017-08-19 08:43 - 001005434 _____ C:\Windows\SysWOW64\rsslogs.20170819084217
2017-08-19 01:07 - 2017-08-19 01:07 - 000000000 ____D C:\ProgramData\McAfee Security Scan
2017-08-19 00:37 - 2017-08-19 00:37 - 000002117 _____ C:\Users\Public\Desktop\McAfee Security Scan Plus.lnk
2017-08-19 00:37 - 2017-08-19 00:37 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\McAfee Security Scan Plus
2017-08-19 00:37 - 2017-08-19 00:37 - 000000000 ____D C:\Program Files (x86)\McAfee Security Scan
2017-08-18 10:27 - 2017-08-18 10:27 - 000000000 ____D C:\Program Files (x86)\NortonInstaller
2017-08-18 09:51 - 2017-08-18 09:51 - 001113966 _____ C:\Windows\SysWOW64\rsslogs.20170818095037
2017-08-17 16:00 - 2017-08-17 16:00 - 000600628 _____ C:\Windows\SysWOW64\rsslogs.20170817155952
2017-08-17 13:42 - 2017-08-17 13:42 - 000159858 _____ C:\Windows\SysWOW64\rsslogs.20170817134116
2017-08-17 08:11 - 2017-08-17 08:11 - 000382533 _____ C:\Windows\SysWOW64\rsslogs.20170817081055
2017-08-06 14:10 - 2017-08-06 14:10 - 000087508 _____ C:\Windows\SysWOW64\rsslogs.20170806140908
2017-08-06 08:45 - 2017-08-06 08:45 - 000349869 _____ C:\Windows\SysWOW64\rsslogs.20170806084451
2017-08-05 09:55 - 2017-08-05 09:55 - 001103275 _____ C:\Windows\SysWOW64\rsslogs.20170805095409
2017-08-04 11:32 - 2017-08-04 11:32 - 000998314 _____ C:\Windows\SysWOW64\rsslogs.20170804113158
2017-08-03 20:34 - 2017-08-03 20:34 - 000253132 _____ C:\Windows\SysWOW64\rsslogs.20170803203322
2017-08-03 15:56 - 2017-08-03 15:56 - 000000706 ____C C:\Users\Public\Desktop\BalkanPESBOX League 2017.lnk
2017-08-03 15:19 - 2017-08-03 15:56 - 000000783 _____ C:\Users\Public\Desktop\BalkanPESBOX Pes 2017 SELECTOR.lnk
2017-08-03 15:19 - 2017-08-03 15:56 - 000000783 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BalkanPESBOX Pes 2017 SELECTOR.lnk
2017-08-03 15:19 - 2017-08-03 15:56 - 000000706 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BalkanPESBOX League 2017.lnk
2017-08-03 11:15 - 2017-08-03 11:15 - 000648572 _____ C:\Windows\SysWOW64\rsslogs.20170803111410
2017-08-02 20:52 - 2017-08-02 20:52 - 000311567 _____ C:\Windows\SysWOW64\rsslogs.20170802205136
2017-08-01 21:54 - 2017-08-02 20:52 - 001607558 _____ C:\Windows\SysWOW64\rsslogs.20170801215306
2017-08-01 10:35 - 2017-08-01 10:35 - 000494570 _____ C:\Windows\SysWOW64\rsslogs.20170801103400
2017-07-31 23:54 - 2017-07-31 23:54 - 000000554 _____ C:\Users\Public\Desktop\The Matrix - Path of Neo.lnk
2017-07-31 23:46 - 2017-07-31 23:46 - 000000000 ____D C:\Program Files (x86)\Atari
2017-07-31 19:57 - 2017-07-31 19:57 - 000000000 ____D C:\Users\user6\AppData\LocalLow\uTorrent
2017-07-31 10:37 - 2017-07-31 10:37 - 000956692 _____ C:\Windows\SysWOW64\rsslogs.20170731103606
2017-07-30 10:26 - 2017-07-30 10:26 - 000996022 _____ C:\Windows\SysWOW64\rsslogs.20170730102516
2017-07-29 15:35 - 2017-07-29 15:35 - 000636582 _____ C:\Windows\SysWOW64\rsslogs.20170729153520
2017-07-28 16:37 - 2017-07-29 15:35 - 001606650 _____ C:\Windows\SysWOW64\rsslogs.20170728163623
2017-07-28 11:57 - 2017-07-28 11:57 - 000296309 _____ C:\Windows\SysWOW64\rsslogs.20170728115648
2017-07-27 20:51 - 2017-07-27 20:51 - 001054292 _____ C:\Windows\SysWOW64\rsslogs.20170727205005
2017-07-27 10:52 - 2017-07-27 10:52 - 000658771 _____ C:\Windows\SysWOW64\rsslogs.20170727105158
2017-07-26 23:27 - 2017-07-26 23:27 - 000020979 _____ C:\Windows\SysWOW64\rsslogs.20170726232631
2017-07-26 20:02 - 2017-07-26 20:02 - 000000000 ____D C:\Users\user6\AppData\Local\NokiaAccount
2017-07-26 10:57 - 2017-07-26 10:57 - 000868733 _____ C:\Windows\SysWOW64\rsslogs.20170726105612
2017-07-25 23:57 - 2017-07-25 23:57 - 000004665 _____ C:\Windows\SysWOW64\rsslogs.20170725235652
2017-07-25 09:07 - 2017-07-25 09:07 - 001017032 _____ C:\Windows\SysWOW64\rsslogs.20170725090613
2017-07-24 23:12 - 2017-07-24 23:12 - 000040826 _____ C:\Windows\SysWOW64\rsslogs.20170724231115
2017-07-24 12:02 - 2017-07-24 12:02 - 000000000 ____D C:\Users\user6\Documents\League of Legends
2017-07-24 11:36 - 2017-07-24 12:04 - 000000573 _____ C:\Users\Public\Desktop\League of Legends.lnk
2017-07-24 11:35 - 2017-07-24 11:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2017-07-24 09:42 - 2017-07-24 09:42 - 000919044 _____ C:\Windows\SysWOW64\rsslogs.20170724094105
==================== One Month Modified files and folders ========
(If an entry is included in the fixlist, the file/folder will be moved.)
2017-08-19 23:09 - 2015-03-22 20:01 - 000000000 ____D C:\FRST
2017-08-19 23:05 - 2017-03-05 16:52 - 000000000 ____D C:\ProgramData\BOINC
2017-08-19 22:51 - 2014-01-18 16:22 - 000000908 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2683369425-3361945966-1453627295-1000UA.job
2017-08-19 22:08 - 2015-04-22 10:47 - 000001686 _____ C:\Windows\Tasks\BYAIAMUF.job
2017-08-19 21:59 - 2017-04-22 11:18 - 000000000 ____D C:\Program Files (x86)\Mozilla Firefox
2017-08-19 21:57 - 2009-07-14 06:45 - 000026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2017-08-19 21:57 - 2009-07-14 06:45 - 000026768 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2017-08-19 21:43 - 2015-04-22 10:48 - 000001334 _____ C:\Windows\Tasks\GNOK.job
2017-08-19 20:16 - 2012-08-10 12:47 - 000686744 _____ C:\Windows\system32\perfh00E.dat
2017-08-19 20:16 - 2012-08-10 12:47 - 000172264 _____ C:\Windows\system32\perfc00E.dat
2017-08-19 20:16 - 2009-07-14 05:20 - 000000000 ____D C:\Windows\inf
2017-08-19 20:11 - 2009-07-14 07:13 - 000212992 _____ C:\Windows\system32\PerfStringBackup.INI
2017-08-19 17:53 - 2017-01-13 12:10 - 000000000 ____D C:\Users\user6\AppData\Local\CrashDumps
2017-08-19 17:25 - 2012-08-10 17:38 - 000000000 ____D C:\Users\user6\AppData\Roaming\Skype
2017-08-19 14:39 - 2009-07-14 05:20 - 000000000 ____D C:\Program Files\Common Files\System
2017-08-19 12:25 - 2014-01-07 03:41 - 000000000 ____D C:\ProgramData\NVIDIA
2017-08-19 10:50 - 2014-01-07 20:13 - 000000000 ____D C:\ProgramData\Norton
2017-08-19 10:44 - 2017-02-20 21:21 - 000000000 ____D C:\ProgramData\Hotspot Shield
2017-08-19 10:44 - 2017-02-20 21:21 - 000000000 ____D C:\Program Files (x86)\Hotspot Shield
2017-08-19 10:44 - 2015-09-20 08:36 - 000000000 ____D C:\ProgramData\Package Cache
2017-08-19 09:05 - 2014-11-04 20:05 - 000000000 ____D C:\Users\user6\AppData\Local\Adobe
2017-08-19 08:45 - 2017-05-17 16:04 - 000000000 ____D C:\Program Files (x86)\Steam
2017-08-19 08:41 - 2009-07-14 07:08 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2017-08-19 01:46 - 2017-01-05 21:03 - 000005307 _____ C:\ProgramData\NvTelemetryContainer.log_backup1
2017-08-18 23:51 - 2014-01-18 16:22 - 000000856 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2683369425-3361945966-1453627295-1000Core.job
2017-08-18 10:24 - 2015-01-23 21:30 - 000000000 ____D C:\ProgramData\Oracle
2017-08-18 10:23 - 2014-10-20 21:13 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2017-08-18 10:23 - 2014-01-18 17:09 - 000000000 ____D C:\Program Files (x86)\Java
2017-08-18 10:22 - 2014-10-20 21:13 - 000097856 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2017-08-18 10:15 - 2014-11-03 15:11 - 000002145 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2017-08-17 18:35 - 2010-11-21 05:27 - 000544424 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2017-08-17 13:40 - 2016-11-04 14:22 - 000000332 _____ C:\Windows\Tasks\HPCeeScheduleForuser6.job
2017-08-17 13:39 - 2012-08-10 17:22 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2017-08-17 13:00 - 2016-11-04 14:22 - 000003186 _____ C:\Windows\System32\Tasks\HPCeeScheduleForuser6
2017-08-17 08:36 - 2015-05-28 20:59 - 000004476 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2017-08-17 08:35 - 2015-07-01 18:08 - 000002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2017-08-17 08:18 - 2014-03-13 07:14 - 000004312 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2017-08-17 08:18 - 2014-01-07 07:49 - 000803328 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2017-08-17 08:18 - 2014-01-07 07:49 - 000144896 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2017-08-17 08:18 - 2014-01-07 07:49 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2017-08-17 08:18 - 2014-01-07 07:49 - 000000000 ____D C:\Windows\system32\Macromed
2017-08-03 23:25 - 2014-11-09 11:15 - 000000000 ____D C:\Users\user6\AppData\Roaming\vlc
2017-08-03 23:04 - 2017-07-19 23:12 - 000000000 ____D C:\ProgramData\Wondershare Player
2017-08-03 20:35 - 2009-07-14 06:45 - 005091352 _____ C:\Windows\system32\FNTCACHE.DAT
2017-08-03 15:22 - 2014-11-03 15:06 - 000140736 _____ C:\Users\user6\AppData\Local\GDIPFONTCACHEV1.DAT
2017-08-02 14:35 - 2014-01-08 00:15 - 000000000 _____ C:\Windows\system32\Drivers\lvuvc.hs
2017-08-01 00:15 - 2014-01-18 16:05 - 000000000 ____D C:\Users\user6\AppData\Roaming\uTorrent
2017-07-31 23:53 - 2014-05-17 16:30 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Activision
2017-07-31 23:47 - 2014-04-21 19:09 - 000000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2017-07-26 23:26 - 2014-01-07 07:49 - 000000000 ____D C:\ProgramData\McAfee
2017-07-26 23:19 - 2014-06-12 12:49 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rockstar Games
2017-07-26 23:18 - 2014-10-01 13:23 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2017-07-26 23:18 - 2009-07-14 07:32 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-07-26 23:17 - 2015-08-02 16:22 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Eidos
2017-07-26 23:15 - 2014-09-02 13:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JoWooD
2017-07-26 23:14 - 2014-11-15 20:05 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2017-07-26 23:14 - 2014-01-26 16:19 - 000000000 ____D C:\Program Files (x86)\Nokia
2017-07-26 23:11 - 2017-01-28 10:57 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\R.G. Mechanics
2017-07-26 23:10 - 2017-01-27 14:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
2017-07-26 20:03 - 2014-01-26 16:21 - 000000000 ____D C:\ProgramData\Nokia
2017-07-26 19:48 - 2014-11-04 19:29 - 000000000 ____D C:\Users\user6\AppData\Local\Microsoft Help
2017-07-24 11:34 - 2014-08-08 13:01 - 000000000 ____D C:\Users\user6\AppData\Roaming\Riot Games
==================== Files in the root of some directories =======
2015-06-18 17:24 - 2016-04-04 20:13 - 000000132 _____ () C:\Users\user6\AppData\Roaming\Adobe GIF Format CS6 Prefs
2015-03-09 23:30 - 2015-03-09 23:30 - 000005487 _____ () C:\Users\user6\AppData\Roaming\BYAIAMUF
2015-01-25 18:12 - 2015-01-25 18:12 - 000002086 _____ () C:\Users\user6\AppData\Roaming\GNOK
2015-03-23 14:35 - 2017-03-08 15:52 - 000026624 _____ () C:\Users\user6\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2017-01-13 20:32 - 2016-11-23 15:37 - 000000570 _____ () C:\Users\user6\AppData\Local\TroubleshooterConfig.json
2016-04-27 20:40 - 2016-04-27 20:40 - 000000057 _____ () C:\ProgramData\Ament.ini
2015-03-25 14:12 - 2015-03-25 14:12 - 000000199 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.351.32.bc
2017-01-05 21:03 - 2017-08-19 23:06 - 000005307 _____ () C:\ProgramData\NvTelemetryContainer.log
2017-01-05 21:03 - 2017-08-19 01:46 - 000005307 _____ () C:\ProgramData\NvTelemetryContainer.log_backup1
Files to move or delete:
====================
C:\Users\user6\HSS-5.2.2-install-hss-805-ext.exe
Some files in TEMP:
====================
2010-11-18 21:27 - 2010-11-18 21:27 - 000266752 _____ (Igor Pavlov) C:\Users\user6\AppData\Local\Temp\7za.exe
2016-08-13 22:41 - 2015-08-06 22:30 - 002212144 _____ (Adobe Systems Incorporated) C:\Users\user6\AppData\Local\Temp\AdobeApplicationManager.exe
2013-08-05 08:15 - 2013-08-05 08:15 - 004292136 _____ (www.Bandisoft.com) C:\Users\user6\AppData\Local\Temp\bdfilters.dll
2016-08-27 18:38 - 2016-12-13 19:24 - 000990744 _____ (BlueStack Systems, Inc.) C:\Users\user6\AppData\Local\Temp\BluestacksUninstaller.exe
2015-03-24 20:49 - 2015-03-24 20:49 - 000007224 _____ () C:\Users\user6\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
2015-04-07 10:36 - 2015-04-07 10:37 - 000036864 _____ () C:\Users\user6\AppData\Local\Temp\CmdLineExt02.dll
2015-08-02 16:29 - 2017-02-01 20:44 - 000065536 _____ (Sony DADC Austria AG) C:\Users\user6\AppData\Local\Temp\drm_dialogs.dll
2017-02-01 19:17 - 2017-02-01 20:44 - 000204800 _____ (Sony DADC Austria AG) C:\Users\user6\AppData\Local\Temp\drm_dyndata_7380015.dll
2015-12-29 21:34 - 2015-12-29 21:42 - 000327680 _____ (Sony DADC Austria AG) C:\Users\user6\AppData\Local\Temp\DSSExp.exe
2016-08-27 18:38 - 2016-12-13 19:23 - 000187416 _____ (BlueStack Systems) C:\Users\user6\AppData\Local\Temp\HD-LibraryHandler.dll
2016-08-27 18:38 - 2016-12-13 19:21 - 000246808 _____ (BlueStack Systems) C:\Users\user6\AppData\Local\Temp\HD-Logger-Native.dll
2016-08-24 11:08 - 2016-08-24 11:08 - 000741440 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u101-windows-au.exe
2016-10-24 17:13 - 2016-10-24 17:13 - 000737856 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u111-windows-au.exe
2017-04-01 09:01 - 2017-04-01 09:01 - 000739904 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u121-windows-au.exe
2017-04-23 10:11 - 2017-04-23 10:11 - 000739904 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u131-windows-au.exe
2017-08-18 10:10 - 2017-08-18 10:10 - 000740416 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u144-windows-au.exe
2015-07-27 22:18 - 2015-07-27 22:18 - 000563808 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u51-windows-au.exe
2015-12-05 10:22 - 2015-12-05 10:22 - 000585824 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u66-windows-au.exe
2016-01-24 11:09 - 2016-01-24 11:09 - 000644704 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u71-windows-au.exe
2016-03-12 13:22 - 2016-03-12 13:22 - 000736352 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u73-windows-au.exe
2016-03-25 10:28 - 2016-03-25 10:28 - 000736320 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u77-windows-au.exe
2016-04-28 20:19 - 2016-04-28 20:19 - 000739904 _____ (Oracle Corporation) C:\Users\user6\AppData\Local\Temp\jre-8u91-windows-au.exe
2017-03-19 14:04 - 2017-03-19 14:05 - 038086544 _____ (PandoraTV) C:\Users\user6\AppData\Local\Temp\KMPlayer_autoupdatecurrentfile.exe
2016-04-07 05:35 - 2016-04-07 05:35 - 000057152 _____ () C:\Users\user6\AppData\Local\Temp\KMP_Au_Uninstaller.exe
2015-09-16 19:28 - 2017-06-07 20:47 - 000186280 _____ (RealNetworks, Inc.) C:\Users\user6\AppData\Local\Temp\lowproc.exe
2015-03-29 10:09 - 2015-03-29 10:09 - 000001536 _____ () C:\Users\user6\AppData\Local\Temp\NOSEventMessages.dll
2015-02-17 13:12 - 2015-01-10 00:28 - 001216680 _____ (NVIDIA Corporation) C:\Users\user6\AppData\Local\Temp\nvSCPAPI.dll
2015-04-07 22:16 - 2015-01-10 00:27 - 000839312 _____ (NVIDIA Corporation) C:\Users\user6\AppData\Local\Temp\nvStInst.exe
2015-09-20 08:30 - 2015-09-20 08:30 - 001184848 _____ (RealNetworks, Inc.) C:\Users\user6\AppData\Local\Temp\rnsetup0.exe
2015-03-30 14:26 - 2015-04-07 10:37 - 000012067 ____T () C:\Users\user6\AppData\Local\Temp\SIntf16.dll
2015-03-30 14:26 - 2015-04-07 10:37 - 000019924 ____T () C:\Users\user6\AppData\Local\Temp\SIntf32.dll
2015-03-30 14:26 - 2015-04-07 10:37 - 000024516 ____T () C:\Users\user6\AppData\Local\Temp\SIntfNT.dll
2017-02-26 11:28 - 2017-03-04 19:24 - 000019968 _____ () C:\Users\user6\AppData\Local\Temp\SkidRow.exe
2015-03-30 12:28 - 2017-07-29 12:41 - 058740704 _____ (Skype Technologies S.A.) C:\Users\user6\AppData\Local\Temp\SkypeSetup.exe
2015-04-15 07:58 - 2015-04-15 07:58 - 000184320 ____N () C:\Users\user6\AppData\Local\Temp\SRLDetectionLibrary5817070978004225079.dll
2015-09-16 19:28 - 2017-06-07 20:47 - 000096496 _____ (RealNetworks, Inc.) C:\Users\user6\AppData\Local\Temp\stubhelper.dll
2015-04-22 11:54 - 2015-06-09 21:26 - 000222392 _____ () C:\Users\user6\AppData\Local\Temp\tu17p84.exe
2015-07-03 13:19 - 2017-02-14 14:35 - 000262743 _____ () C:\Users\user6\AppData\Local\Temp\Uninstall.exe
2017-07-06 18:20 - 2017-07-06 18:20 - 030950664 _____ () C:\Users\user6\AppData\Local\Temp\vlc-2.2.6-win32.exe
2017-01-23 14:52 - 2017-01-23 14:52 - 000309746 _____ () C:\Users\user6\AppData\Local\Temp\_inst1.exe
==================== Bamital & volsnap ======================
(There is no automatic fix for files that do not pass verification.)
C:\Windows\system32\winlogon.exe => File is digitally signed
C:\Windows\system32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\system32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\system32\services.exe => File is digitally signed
C:\Windows\system32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\system32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\system32\rpcss.dll => File is digitally signed
C:\Windows\system32\dnsapi.dll => File is digitally signed
C:\Windows\SysWOW64\dnsapi.dll => File is digitally signed
C:\Windows\system32\Drivers\volsnap.sys => File is digitally signed
LastRegBack: 2017-08-17 12:09
==================== End of FRST.txt ============================
mycity.rs/must-login.png
|
|
|
|
|
|
|
Poslao: 20 Avg 2017 19:48
|
offline
- softwaremaniac
- AMF pripravnik
- Pridružio: 14 Jun 2016
- Poruke: 535
|
1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:
CreateRestorePoint:
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: F - F:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: H - H:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {170fcda1-dcf4-11e4-a152-bc5ff4da1084} - H:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {1c03d322-cc9a-11e4-8e2b-bc5ff4da1084} - F:\Autorun.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {3c5c57a3-d5e1-11e4-86a5-bc5ff4da1084} - G:\setup.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2683369425-3361945966-1453627295-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C - No File
Handler: WSWSVCUchrome - No CLSID Value
FF NewTab: Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154 -> resource://jid1-lpoiffmusixlib-at-jetpack/musixlib/data/index.html
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154 ->
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-2683369425-3361945966-1453627295-1000: @tools.google.com/Google Update;version=3 -> C:\Users\user6\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-2683369425-3361945966-1453627295-1000: @tools.google.com/Google Update;version=9 -> C:\Users\user6\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [No File]
CHR HomePage: Default -> ?type=hppppp
CHR NewTab: Default -> Not-active:"chrome-extension://kkpjbpgegkmeimeilaifpokpaciahdkc/newtab/newtab.html", Not-active:"chrome-extension://apdjgfelaciigibipbmoojknlkalhdoc/index.html", Not-active:"chrome-extension://jgkojlekkpfmddgjilkhmdbifgaicpfi/stubby.html"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee&type=C210US91075D20170305&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (MyStartab) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdjgfelaciigibipbmoojknlkalhdoc [2017-02-17]
CHR Extension: (King to Kong) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfhmbbgdfphlgkibdmciphdighaocelc [2017-03-16]
CHR Extension: (Matsusps) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednhgmmecokelmaflmonebmpfcedabgo [2017-02-03]
CHR Extension: (BiosUks) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjgiiojeoafcljdkdaigocmfgaoaeij [2017-02-02]
CHR Extension: (TypingFanatic) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgkojlekkpfmddgjilkhmdbifgaicpfi [2016-12-06]
CHR Extension: (Tishysd) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\mecbhbceedkbmdiednbdnaiaomeoldkc [2017-01-31]
CHR Extension: (MyStarTab) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\llcgkjbfoapgaojfdcpkncnboiicignl [2017-02-17]
CHR Extension: (Unura) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pknhddkbagfjncdopglmjooigpceekdb [2016-09-12]
S2 BDSGRTP; "C:\Program Files (x86)\Common Files\Baidu\BaiduProtect1.3\1.3.0.645\BaiduProtect.exe" -r [X]
C:\Users\user6\HSS-5.2.2-install-hss-805-ext.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\ChromeHTML: -> "C:\Users\user6\AppData\Local\Google\Chrome\Application\chrome.exe" -- "%1" <==== ATTENTION
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_05.dll -> No File
ContextMenuHandlers1: [jZip] -> {E677C7AD-2B66-4539-AA29-3771A1CFEDA9} => C:\Program Files (x86)\jZip\jZipShell.dll -> No File
ContextMenuHandlers1: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => C:\Program Files\Common Files\System\SysMenu64.dll -> No File
ContextMenuHandlers6: [jZip] -> {E677C7AD-2B66-4539-AA29-3771A1CFEDA9} => C:\Program Files (x86)\jZip\jZipShell.dll -> No File
ContextMenuHandlers1_S-1-5-21-2683369425-3361945966-1453627295-1000: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => C:\Program Files\Common Files\System\SysMenu64.dll -> No File
Task: {0C068C1D-5E05-4D6B-A90C-9605CFD9CA64} - \Microsoft\Windows\Multimedia\SMupdate3 -> No File <==== ATTENTION
Task: {1AC189B1-E5F4-4BE2-9DBD-5010C19DBAEF} - System32\Tasks\FVPHQRKH => C:\Users\user6\AppData\Roaming\FVPHQRKH.exe <==== ATTENTION
C:\Users\user6\AppData\Roaming\FVPHQRKH.exe
Task: {AA98A3CB-37AE-4535-9917-19148E463F75} - \Microsoft\Windows\Maintenance\SMupdate2 -> No File <==== ATTENTION
Task: {DC8F208D-0469-4A9E-BC43-B277062DD1F2} - System32\Tasks\BYAIAMUF => C:\Users\user6\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION
C:\Users\user6\AppData\Roaming\BYAIAMUF.exe
Task: {E7DF82A4-6632-41B1-AB27-9C0DDF445EE3} - System32\Tasks\GNOK => C:\Users\user6\AppData\Roaming\GNOK.exe <==== ATTENTION
C:\Users\user6\AppData\Roaming\GNOK.exe
Task: C:\Windows\Tasks\BYAIAMUF.job => C:\Users\user6\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION
C:\Users\user6\AppData\Roaming\BYAIAMUF.exe
Task: C:\Windows\Tasks\GNOK.job => C:\Users\user6\AppData\Roaming\GNOK.exe <==== ATTENTION
FirewallRules: [{D7F5129E-59A2-4ECD-94C0-0E9213F0DAB4}] => (Allow) C:\Users\user6\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{DF4C0907-33E4-43EC-AC90-E5A60ACB0D6B}] => (Allow) C:\Users\user6\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{73F7F906-081C-4C55-8FF8-0FE3EF9113D8}] => (Allow) C:\Users\user6\Downloads\CodecPerformerSetup.exe
FirewallRules: [{E0C0E615-5100-4182-8993-A301B3AC01A6}] => (Allow) C:\Users\user6\Downloads\CodecPerformerSetup.exe
FirewallRules: [{DC24905E-900C-45CD-804F-15FC8F6F793D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{695AD5FC-947E-4162-B3AC-7217CC93C67D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E4509964-B8B8-4C8E-AB05-58AB15F2AFF7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
C:\Users\user6\AppData\Local\iLivid
2015-03-09 23:30 - 2015-03-09 23:30 - 000005487 _____ () C:\Users\user6\AppData\Roaming\BYAIAMUF
2015-01-25 18:12 - 2015-01-25 18:12 - 000002086 _____ () C:\Users\user6\AppData\Roaming\GNOK
C:\Users\user6\Downloads\CodecPerformerSetup.exe
C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
EmptyTemp:
2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.
3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.
Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmeš i koristiš ažuriranu kopiju FRST-a.
|
|
|
|
|
|
|
Poslao: 20 Avg 2017 20:42
|
offline
- Pridružio: 07 Apr 2012
- Poruke: 114
|
Fix result of Farbar Recovery Scan Tool (x64) Version: 20-08-2017
Ran by user6 (20-08-2017 21:25:35) Run:3
Running from C:\Users\user6\Desktop
Loaded Profiles: user6 (Available Profiles: user6)
Boot Mode: Normal
==============================================
fixlist content:
*****************
CreateRestorePoint:
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: F - F:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: H - H:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {170fcda1-dcf4-11e4-a152-bc5ff4da1084} - H:\setup.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {1c03d322-cc9a-11e4-8e2b-bc5ff4da1084} - F:\Autorun.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\MountPoints2: {3c5c57a3-d5e1-11e4-86a5-bc5ff4da1084} - G:\setup.exe
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2683369425-3361945966-1453627295-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
Handler: WSIEChrome - {6D02ED5F-FD0D-4C4C - No File
Handler: WSWSVCUchrome - No CLSID Value
FF NewTab: Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154 -> resource://jid1-lpoiffmusixlib-at-jetpack/musixlib/data/index.html
FF DefaultSearchEngine: Mozilla\Firefox\Profiles\ffa1oxh0.default-1433882133154 ->
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => not found
FF Plugin: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @microsoft.com/GENUINE -> disabled [No File]
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [No File]
FF Plugin HKU\S-1-5-21-2683369425-3361945966-1453627295-1000: @tools.google.com/Google Update;version=3 -> C:\Users\user6\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [No File]
FF Plugin HKU\S-1-5-21-2683369425-3361945966-1453627295-1000: @tools.google.com/Google Update;version=9 -> C:\Users\user6\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll [No File]
CHR HomePage: Default -> ?type=hppppp
CHR NewTab: Default -> Not-active:"chrome-extension://kkpjbpgegkmeimeilaifpokpaciahdkc/newtab/newtab.html", Not-active:"chrome-extension://apdjgfelaciigibipbmoojknlkalhdoc/index.html", Not-active:"chrome-extension://jgkojlekkpfmddgjilkhmdbifgaicpfi/stubby.html"
CHR DefaultSearchURL: Default -> hxxps://search.yahoo.com/search?fr=mcafee&type=C210US91075D20170305&p={searchTerms}
CHR DefaultSearchKeyword: Default -> mcafee
CHR Extension: (MyStartab) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdjgfelaciigibipbmoojknlkalhdoc [2017-02-17]
CHR Extension: (King to Kong) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfhmbbgdfphlgkibdmciphdighaocelc [2017-03-16]
CHR Extension: (Matsusps) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednhgmmecokelmaflmonebmpfcedabgo [2017-02-03]
CHR Extension: (BiosUks) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjgiiojeoafcljdkdaigocmfgaoaeij [2017-02-02]
CHR Extension: (TypingFanatic) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgkojlekkpfmddgjilkhmdbifgaicpfi [2016-12-06]
CHR Extension: (Tishysd) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\mecbhbceedkbmdiednbdnaiaomeoldkc [2017-01-31]
CHR Extension: (MyStarTab) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\llcgkjbfoapgaojfdcpkncnboiicignl [2017-02-17]
CHR Extension: (Unura) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pknhddkbagfjncdopglmjooigpceekdb [2016-09-12]
S2 BDSGRTP; "C:\Program Files (x86)\Common Files\Baidu\BaiduProtect1.3\1.3.0.645\BaiduProtect.exe" -r [X]
C:\Users\user6\HSS-5.2.2-install-hss-805-ext.exe
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\...\ChromeHTML: -> "C:\Users\user6\AppData\Local\Google\Chrome\Application\chrome.exe" -- "%1" <==== ATTENTION
ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_05.dll -> No File
ContextMenuHandlers1: [jZip] -> {E677C7AD-2B66-4539-AA29-3771A1CFEDA9} => C:\Program Files (x86)\jZip\jZipShell.dll -> No File
ContextMenuHandlers1: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => C:\Program Files\Common Files\System\SysMenu64.dll -> No File
ContextMenuHandlers6: [jZip] -> {E677C7AD-2B66-4539-AA29-3771A1CFEDA9} => C:\Program Files (x86)\jZip\jZipShell.dll -> No File
ContextMenuHandlers1_S-1-5-21-2683369425-3361945966-1453627295-1000: [SysMenuExt] -> {020B1D4B-5738-4C77-9E19-4F173DD9B486} => C:\Program Files\Common Files\System\SysMenu64.dll -> No File
Task: {0C068C1D-5E05-4D6B-A90C-9605CFD9CA64} - \Microsoft\Windows\Multimedia\SMupdate3 -> No File <==== ATTENTION
Task: {1AC189B1-E5F4-4BE2-9DBD-5010C19DBAEF} - System32\Tasks\FVPHQRKH => C:\Users\user6\AppData\Roaming\FVPHQRKH.exe <==== ATTENTION
C:\Users\user6\AppData\Roaming\FVPHQRKH.exe
Task: {AA98A3CB-37AE-4535-9917-19148E463F75} - \Microsoft\Windows\Maintenance\SMupdate2 -> No File <==== ATTENTION
Task: {DC8F208D-0469-4A9E-BC43-B277062DD1F2} - System32\Tasks\BYAIAMUF => C:\Users\user6\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION
C:\Users\user6\AppData\Roaming\BYAIAMUF.exe
Task: {E7DF82A4-6632-41B1-AB27-9C0DDF445EE3} - System32\Tasks\GNOK => C:\Users\user6\AppData\Roaming\GNOK.exe <==== ATTENTION
C:\Users\user6\AppData\Roaming\GNOK.exe
Task: C:\Windows\Tasks\BYAIAMUF.job => C:\Users\user6\AppData\Roaming\BYAIAMUF.exe <==== ATTENTION
C:\Users\user6\AppData\Roaming\BYAIAMUF.exe
Task: C:\Windows\Tasks\GNOK.job => C:\Users\user6\AppData\Roaming\GNOK.exe <==== ATTENTION
FirewallRules: [{D7F5129E-59A2-4ECD-94C0-0E9213F0DAB4}] => (Allow) C:\Users\user6\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{DF4C0907-33E4-43EC-AC90-E5A60ACB0D6B}] => (Allow) C:\Users\user6\AppData\Local\iLivid\iLivid.exe
FirewallRules: [{73F7F906-081C-4C55-8FF8-0FE3EF9113D8}] => (Allow) C:\Users\user6\Downloads\CodecPerformerSetup.exe
FirewallRules: [{E0C0E615-5100-4182-8993-A301B3AC01A6}] => (Allow) C:\Users\user6\Downloads\CodecPerformerSetup.exe
FirewallRules: [{DC24905E-900C-45CD-804F-15FC8F6F793D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{695AD5FC-947E-4162-B3AC-7217CC93C67D}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{E4509964-B8B8-4C8E-AB05-58AB15F2AFF7}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
C:\Users\user6\AppData\Local\iLivid
2015-03-09 23:30 - 2015-03-09 23:30 - 000005487 _____ () C:\Users\user6\AppData\Roaming\BYAIAMUF
2015-01-25 18:12 - 2015-01-25 18:12 - 000002086 _____ () C:\Users\user6\AppData\Roaming\GNOK
C:\Users\user6\Downloads\CodecPerformerSetup.exe
C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
EmptyTemp:
*****************
Error: (0) Failed to create a restore point.
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => value removed successfully
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\F => key removed successfully
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\H => key removed successfully
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{170fcda1-dcf4-11e4-a152-bc5ff4da1084} => key removed successfully
HKLM\Software\Classes\CLSID\{170fcda1-dcf4-11e4-a152-bc5ff4da1084} => key not found.
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{1c03d322-cc9a-11e4-8e2b-bc5ff4da1084} => key removed successfully
HKLM\Software\Classes\CLSID\{1c03d322-cc9a-11e4-8e2b-bc5ff4da1084} => key not found.
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{3c5c57a3-d5e1-11e4-86a5-bc5ff4da1084} => key removed successfully
HKLM\Software\Classes\CLSID\{3c5c57a3-d5e1-11e4-86a5-bc5ff4da1084} => key not found.
HKU\.DEFAULT\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-19\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-20\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => value removed successfully
HKLM\Software\Classes\PROTOCOLS\Handler\WSIEChrome => key removed successfully
HKLM\Software\Classes\PROTOCOLS\Handler\WSWSVCUchrome => key removed successfully
Firefox "newtab" removed successfully
Firefox DefaultSearchEngine removed successfully
HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758} => value removed successfully
HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@microsoft.com/GENUINE => key removed successfully
HKLM\Software\Wow6432Node\MozillaPlugins\@pandonetworks.com/PandoWebPlugin => key removed successfully
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\Software\MozillaPlugins\@tools.google.com/Google Update;version=3 => key removed successfully
C:\Users\user6\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll => not found.
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\Software\MozillaPlugins\@tools.google.com/Google Update;version=9 => key removed successfully
C:\Users\user6\AppData\Local\Google\Update\1.3.24.15\npGoogleUpdate3.dll => not found.
Chrome HomePage => removed successfully
Chrome NewTab => removed successfully
Chrome DefaultSearchURL => removed successfully
Chrome DefaultSearchKeyword => removed successfully
CHR Extension: (MyStartab) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdjgfelaciigibipbmoojknlkalhdoc [2017-02-17] => Error: No automatic fix found for this entry.
CHR Extension: (King to Kong) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\dfhmbbgdfphlgkibdmciphdighaocelc [2017-03-16] => Error: No automatic fix found for this entry.
CHR Extension: (Matsusps) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ednhgmmecokelmaflmonebmpfcedabgo [2017-02-03] => Error: No automatic fix found for this entry.
CHR Extension: (BiosUks) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikjgiiojeoafcljdkdaigocmfgaoaeij [2017-02-02] => Error: No automatic fix found for this entry.
CHR Extension: (TypingFanatic) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\jgkojlekkpfmddgjilkhmdbifgaicpfi [2016-12-06] => Error: No automatic fix found for this entry.
CHR Extension: (Tishysd) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\mecbhbceedkbmdiednbdnaiaomeoldkc [2017-01-31] => Error: No automatic fix found for this entry.
CHR Extension: (MyStarTab) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\llcgkjbfoapgaojfdcpkncnboiicignl [2017-02-17] => Error: No automatic fix found for this entry.
CHR Extension: (Unura) - C:\Users\user6\AppData\Local\Google\Chrome\User Data\Default\Extensions\pknhddkbagfjncdopglmjooigpceekdb [2016-09-12] => Error: No automatic fix found for this entry.
HKLM\System\CurrentControlSet\Services\BDSGRTP => key removed successfully
BDSGRTP => service removed successfully
C:\Users\user6\HSS-5.2.2-install-hss-805-ext.exe => moved successfully
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000_Classes\ChromeHTML => key removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\ANotepad++64 => key removed successfully
HKLM\Software\Classes\CLSID\{B298D29A-A6ED-11DE-BA8C-A68E55D89593} => key removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\jZip => key removed successfully
HKLM\Software\Classes\CLSID\{E677C7AD-2B66-4539-AA29-3771A1CFEDA9} => key removed successfully
HKLM\Software\Classes\*\ShellEx\ContextMenuHandlers\SysMenuExt => key removed successfully
HKLM\Software\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486} => key removed successfully
HKLM\Software\Classes\Folder\ShellEx\ContextMenuHandlers\jZip => key removed successfully
HKLM\Software\Classes\CLSID\{E677C7AD-2B66-4539-AA29-3771A1CFEDA9} => key not found.
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\Software\Classes\*\ShellEx\ContextMenuHandlers\SysMenuExt => key removed successfully
HKU\S-1-5-21-2683369425-3361945966-1453627295-1000\SOFTWARE\Classes\CLSID\{020B1D4B-5738-4C77-9E19-4F173DD9B486} => key not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{0C068C1D-5E05-4D6B-A90C-9605CFD9CA64} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{0C068C1D-5E05-4D6B-A90C-9605CFD9CA64} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Multimedia\SMupdate3 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{1AC189B1-E5F4-4BE2-9DBD-5010C19DBAEF} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1AC189B1-E5F4-4BE2-9DBD-5010C19DBAEF} => key removed successfully
C:\Windows\System32\Tasks\FVPHQRKH => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\FVPHQRKH => key removed successfully
"C:\Users\user6\AppData\Roaming\FVPHQRKH.exe" => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AA98A3CB-37AE-4535-9917-19148E463F75} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AA98A3CB-37AE-4535-9917-19148E463F75} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Maintenance\SMupdate2 => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{DC8F208D-0469-4A9E-BC43-B277062DD1F2} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{DC8F208D-0469-4A9E-BC43-B277062DD1F2} => key removed successfully
C:\Windows\System32\Tasks\BYAIAMUF => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\BYAIAMUF => key removed successfully
"C:\Users\user6\AppData\Roaming\BYAIAMUF.exe" => not found.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{E7DF82A4-6632-41B1-AB27-9C0DDF445EE3} => key removed successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E7DF82A4-6632-41B1-AB27-9C0DDF445EE3} => key removed successfully
C:\Windows\System32\Tasks\GNOK => moved successfully
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\GNOK => key removed successfully
"C:\Users\user6\AppData\Roaming\GNOK.exe" => not found.
C:\Windows\Tasks\BYAIAMUF.job => moved successfully
"C:\Users\user6\AppData\Roaming\BYAIAMUF.exe" => not found.
C:\Windows\Tasks\GNOK.job => moved successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{D7F5129E-59A2-4ECD-94C0-0E9213F0DAB4} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DF4C0907-33E4-43EC-AC90-E5A60ACB0D6B} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{73F7F906-081C-4C55-8FF8-0FE3EF9113D8} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E0C0E615-5100-4182-8993-A301B3AC01A6} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{DC24905E-900C-45CD-804F-15FC8F6F793D} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{695AD5FC-947E-4162-B3AC-7217CC93C67D} => value removed successfully
HKLM\SYSTEM\CurrentControlSet\services\SharedAccess\Parameters\FirewallPolicy\FirewallRules\\{E4509964-B8B8-4C8E-AB05-58AB15F2AFF7} => value removed successfully
"C:\Users\user6\AppData\Local\iLivid" => not found.
C:\Users\user6\AppData\Roaming\BYAIAMUF => moved successfully
C:\Users\user6\AppData\Roaming\GNOK => moved successfully
"C:\Users\user6\Downloads\CodecPerformerSetup.exe" => not found.
"C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe" => not found.
=========== EmptyTemp: ==========
BITS transfer queue => 8388608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 79049915 B
Java, Flash, Steam htmlcache => 232329911 B
Windows/system/drivers => 575805177 B
Edge => 0 B
Chrome => 316067762 B
Firefox => 25880083 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Users => 0 B
Default => 0 B
Public => 0 B
ProgramData => 0 B
systemprofile => 0 B
systemprofile32 => 128 B
LocalService => 0 B
NetworkService => 6206624 B
user6 => 5584458522 B
RecycleBin => 19125101 B
EmptyTemp: => 6.4 GB temporary data Removed.
================================
The system needed a reboot.
==== End of Fixlog 21:34:18 ====
|
|
|
|
|
|
|
Poslao: 20 Avg 2017 21:18
|
offline
- softwaremaniac
- AMF pripravnik
- Pridružio: 14 Jun 2016
- Poruke: 535
|
Otvori Chrome, u adresnu traku gore napiši: chrome://extensions/ i pritisni Enter.
Kad se pojave ekstenzije na popisu nađi:
MyStartab
King to Kong
Matsusps
BiosUks
TypingFanatic
Tishysd
MyStarTab
Unura
Klikni na ikonu kante za smeće kraj svake i potvrdi uklanjanje.
Nakon toga ugasi Chrome i isprati sledeća uputstva:
Preuzmi Malwarebytes Anti-Malware sa ovog ili ovog ili ovog linka i instaliraj aplikaciju.
Pokreni mb3-setup-consumer-{verzija}.exe i isprati uputstva za instalaciju programa. Nakon instalacije, klikni na Finish
Prilikom prvog pokretanja, program će prikazati prozor "dobrodošlice". Slobodno zatvori taj prozor.
Napomena: Premium funkcije programa su već aktivirane i važe 13 dana od trenutka instalacije. Premium funkcije možeš isključiti preko Settings > My Account tab podešavanja.
• Podešavanja skenera - u Settings, klikni na Protection tab. Ispod Scan Options sekcije, uključi "Scan for rootkits" opciju.
• Pripremi podešavanja za Threat Scan - u Dashboard , klikni na Scan Now dugme. MBAM će ažurirati bazu i započeti skeniranje.
Kada se skeniranje završi, ako je infekcija detektovana, obrati pažnju da je sve označeno, pa klikni na Remove Selected. Restartuj računar ako program upita za restart.
• Dostavi log: Pod Reports izaberi trenutni datum izveštaja Scan Report i potom klikni na View Report.
Izvezi log na Desktop;
- Klikni na Export dugme na dnu, pa onda izaberi 'Text file (*.txt)'
# U Save File dijalogu koji se pojavi, klikni na Desktop. U File name: polje, upiši "mbam" (bez navodnika) i klikni na Save.
- Pojaviće se poruka "Your file has been successfully exported", klikni Ok i zatvori prozor.
• U odgovoru prikači mbam.txt log koristeći "Prikači fajl" opciju.
Zatim:
Preuzmi AdwCleaner i sačuvaj ga na Desktop
Dvoklikom pokreni program.
U EULA prozoru klikni na I agree.
U Tools odaberi Options.
U dijaloškom okviru koji se pojavi isključi Reset Winsock settings ako je uključen.
Klikni na dugme Scan i sačekaj da se završi skeniranje.
Ako ti javi da postoji novija verzija, postaraj se da je preuzmeš.
Klikni na dugme Clean i pričekaj da program završi.
Program će zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni OK kao potvrdu.
Pojavit će se poruka da računar treba restartovati. Klikni OK
Računar će se restartovati, a potom otvoriti Notepad (C:\Adwcleaner\AdwCleaner[C0].txt) sa izvještajem.
Sačuvaj taj izvještaj na Desktop i okači ga uz poruku koristeći opciju "Prikači fajl"
Kakvo je sada stanje?
|
|
|
|
|
|
|
Poslao: 20 Avg 2017 21:54
|
offline
- Pridružio: 07 Apr 2012
- Poruke: 114
|
Nisam stigao do drugog dela zadataka jer navedene ekstenzije nisam našao, postoje samo tri:
Norton Identity Safe 1.0.5
Norton Security Toolbar 2017.0.0.9
Wondershare Video Converter Ultimate 6.0.0
|
|
|
|
|
|
|
|
