MyCity » Ambulanta -> Arhiva Ambulante » Spor rad sistema

Spor rad sistema

Napisano na dan: 14.7.2012

Spor rad sistema

Sledeća strana

Pagination

Odgovori

cvetkopopovic Poslao: 14 Jul 2012 19:35 Idi na vrh
offline cvetkopopovic Novi MyCity građanin Pridružio: 14 Jul 2012 Poruke: 2	1Ovo se svidja korisniku: metak sa posvetom Registruj se da bi pohvalio/la poruku! Racunar sporo otvara sve programe, sporo se pali, sporo ulazi u slike, mislim da imam dosta virusa. Pozdrav

Profil

ivance95 Poslao: 14 Jul 2012 20:15 Idi na vrh
offline ivance95 AMF pripravnik Pridružio: 04 Jul 2011 Poruke: 5424	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Isprati uputstvo sa sledećeg linka: [Link mogu videti samo ulogovani korisnici] Ivance95 (AMF Tim)

Profil

cvetkopopovic Poslao: 14 Jul 2012 22:03 Idi na vrh
offline cvetkopopovic Novi MyCity građanin Pridružio: 14 Jul 2012 Poruke: 2	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: OTL logfile created on: 14.7.2012 21:01:46 - Run 1 OTL by OldTimer - Version 3.2.54.0 Folder = C:\Users\Administrator\Downloads Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation Internet Explorer (Version = 9.0.7930.16406) Locale: 0000241A \| Country: Serbia \| Language: SRM \| Date Format: d.M.yyyy 511,59 Mb Total Physical Memory \| 70,18 Mb Available Physical Memory \| 13,72% Memory free 1,50 Gb Paging File \| 0,22 Gb Available in Paging File \| 14,76% Paging File free Paging file location(s): ?:\pagefile.sys [binary data] %SystemDrive% = C: \| %SystemRoot% = C:\Windows \| %ProgramFiles% = C:\Program Files Drive C: \| 25,69 Gb Total Space \| 0,15 Gb Free Space \| 0,59% Space Free \| Partition Type: NTFS Drive D: \| 48,83 Gb Total Space \| 26,78 Gb Free Space \| 54,84% Space Free \| Partition Type: NTFS Drive E: \| 4,05 Gb Total Space \| 0,00 Gb Free Space \| 0,00% Space Free \| Partition Type: UDF Computer Name: XDARK \| User Name: Administrator \| Logged in as Administrator. Boot Mode: Normal \| Scan Mode: Current user Company Name Whitelist: Off \| Skip Microsoft Files: Off \| No Company Name Whitelist: On \| File Age = 30 Days ========== Processes (SafeList) ========== PRC - [2012.07.14 21:00:19 \| 000,596,480 \| ---- \| M] (OldTimer Tools) -- C:\Users\Administrator\Downloads\OTL.exe PRC - [2012.02.18 08:59:28 \| 000,282,648 \| ---- \| M] (McAfee, Inc.) -- c:\Program Files\McAfee\SiteAdvisor\saUI.exe PRC - [2012.01.13 12:21:10 \| 000,095,200 \| ---- \| M] (McAfee, Inc.) -- c:\Program Files\McAfee\SiteAdvisor\McSACore.exe PRC - [2011.01.28 13:22:52 \| 001,590,232 \| ---- \| M] (PC Tools) -- C:\Program Files\Registry Mechanic\Upgrade.exe PRC - [2010.11.15 16:05:30 \| 000,112,600 \| ---- \| M] (PC Tools) -- C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe PRC - [2010.09.29 20:28:34 \| 002,614,784 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\explorer.exe PRC - [2010.09.29 19:37:01 \| 000,049,152 \| ---- \| M] (Microsoft Corporation) -- C:\Windows\System32\taskhost.exe PRC - [2010.08.10 19:26:42 \| 000,066,824 \| ---- \| M] (Raxco Software, Inc.) -- C:\Program Files\Raxco\PerfectDisk\PDAgentS1.exe PRC - [2010.08.10 19:26:40 \| 001,570,056 \| ---- \| M] (Raxco Software, Inc.) -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe PRC - [2010.05.31 13:18:16 \| 000,323,976 \| ---- \| M] (BillP Studios) -- C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe PRC - [2010.01.16 16:54:08 \| 000,717,696 \| ---- \| M] (Microsoft Corporation) -- C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE PRC - [2010.01.15 14:49:20 \| 000,255,536 \| ---- \| M] (McAfee, Inc.) -- C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe PRC - [2009.11.03 15:03:04 \| 000,603,472 \| ---- \| M] (ACD Systems International Inc.) -- C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe PRC - [2009.04.26 18:32:34 \| 000,629,493 \| ---- \| M] () -- C:\Win\lsass.exe PRC - [2008.11.02 10:38:58 \| 000,167,936 \| ---- \| M] (PowerISO Computing, Inc.) -- C:\Program Files\PowerISO\PWRISOVM.EXE PRC - [2007.12.21 15:21:16 \| 000,468,224 \| ---- \| M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe PRC - [2007.12.21 15:21:06 \| 001,443,072 \| ---- \| M] (ESET) -- C:\Program Files\ESET\ESET Smart Security\egui.exe PRC - [2005.07.27 04:07:34 \| 000,278,528 \| ---- \| M] (InterVideo Inc.) -- C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe PRC - [2003.05.05 15:57:30 \| 000,143,360 \| ---- \| M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMTray.exe PRC - [2002.09.20 23:50:10 \| 000,045,056 \| ---- \| M] (Analog Devices, Inc.) -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe ========== Modules (No Company Name) ========== MOD - [2012.06.28 12:28:56 \| 000,438,296 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppgooglenaclpluginchrome.dll MOD - [2012.06.28 12:28:54 \| 003,972,120 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll MOD - [2012.06.28 12:27:40 \| 000,554,520 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\libglesv2.dll MOD - [2012.06.28 12:27:38 \| 000,117,784 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\libegl.dll MOD - [2012.06.28 12:27:29 \| 000,140,328 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\avutil-51.dll MOD - [2012.06.28 12:27:28 \| 000,262,184 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\avformat-54.dll MOD - [2012.06.28 12:27:26 \| 002,386,984 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\avcodec-54.dll MOD - [2012.06.28 10:27:26 \| 009,252,040 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\gcswf32.dll MOD - [2012.05.25 19:25:50 \| 000,134,144 \| ---- \| M] () -- C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.6_0\BabylonChromeToolBar.dll MOD - [2012.05.21 18:03:36 \| 000,511,488 \| ---- \| M] () -- C:\Users\Administrator\AppData\Roaming\BabylonToolbar\CR\BUSolution.dll MOD - [2010.11.17 14:16:56 \| 000,067,872 \| ---- \| M] () -- C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll MOD - [2010.11.03 15:25:52 \| 000,011,776 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Runtime\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Runtime.dll MOD - [2010.11.03 15:25:52 \| 000,008,704 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Shared\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Shared.dll MOD - [2010.11.03 15:25:52 \| 000,007,680 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Wizard\2.0.3693.42556__90ba9c70f846762e\CLI.Caste.HydraVision.Wizard.dll MOD - [2010.11.03 15:25:52 \| 000,007,680 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.HydraVision.Dashboard\2.0.3693.42552__90ba9c70f846762e\CLI.Caste.HydraVision.Dashboard.dll MOD - [2010.11.03 15:25:51 \| 001,728,512 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Wizard\2.0.3693.42460__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Wizard.dll MOD - [2010.11.03 15:25:51 \| 000,692,224 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Wizard\2.0.3693.42508__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Wizard.dll MOD - [2010.11.03 15:25:51 \| 000,491,520 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Wizard\2.0.3693.42537__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Wizard.dll MOD - [2010.11.03 15:25:51 \| 000,364,544 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Wizard\2.0.3693.42522__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Wizard.dll MOD - [2010.11.03 15:25:51 \| 000,290,816 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime\2.0.3693.42442__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.dll MOD - [2010.11.03 15:25:51 \| 000,204,800 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Wizard\2.0.3693.42461__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Wizard.dll MOD - [2010.11.03 15:25:51 \| 000,077,824 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Runtime\2.0.3693.42517__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Runtime.dll MOD - [2010.11.03 15:25:51 \| 000,069,632 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Runtime\2.0.3693.42499__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Runtime.dll MOD - [2010.11.03 15:25:51 \| 000,040,960 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard\2.0.3693.42456__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.dll MOD - [2010.11.03 15:25:51 \| 000,036,864 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Runtime\2.0.3693.42486__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Runtime.dll MOD - [2010.11.03 15:25:51 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Runtime\2.0.3693.42451__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Runtime.dll MOD - [2010.11.03 15:25:50 \| 000,364,544 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Dashboard\2.0.3693.42504__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:50 \| 000,139,264 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Welcome.Graphics.Dashboard\2.0.3693.42537__90ba9c70f846762e\CLI.Aspect.Welcome.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:50 \| 000,094,208 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Wizard\2.0.3693.42504__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Wizard.dll MOD - [2010.11.03 15:25:50 \| 000,073,728 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard\2.0.3693.42450__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:50 \| 000,061,440 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Runtime\2.0.3693.42503__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Runtime.dll MOD - [2010.11.03 15:25:49 \| 000,045,056 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime\2.0.3693.42536__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Runtime.dll MOD - [2010.11.03 15:25:48 \| 000,405,504 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Wizard\2.0.3693.42512__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Wizard.dll MOD - [2010.11.03 15:25:47 \| 000,811,008 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Dashboard\2.0.3693.42488__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:46 \| 000,798,720 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Dashboard\2.0.3693.42518__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:46 \| 000,712,704 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysManager.Graphics.Dashboard\2.0.3693.42452__90ba9c70f846762e\CLI.Aspect.DisplaysManager.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:46 \| 000,675,840 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Dashboard\2.0.3693.42500__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:46 \| 000,589,824 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Dashboard\2.0.3693.42462__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:46 \| 000,450,560 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Dashboard\2.0.3693.42482__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:46 \| 000,225,280 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.InfoCentre.Graphics.Dashboard\2.0.3693.42462__90ba9c70f846762e\CLI.Aspect.InfoCentre.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:46 \| 000,126,976 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Dashboard\2.0.3693.42496__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:46 \| 000,081,920 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Runtime\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Runtime.dll MOD - [2010.11.03 15:25:46 \| 000,065,536 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Runtime\2.0.3693.42486__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Runtime.dll MOD - [2010.11.03 15:25:46 \| 000,040,960 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Runtime\2.0.3693.42466__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Runtime.dll MOD - [2010.11.03 15:25:46 \| 000,036,864 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Runtime\2.0.3693.42496__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Runtime.dll MOD - [2010.11.03 15:25:46 \| 000,032,768 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Runtime\2.0.3693.42497__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Runtime.dll MOD - [2010.11.03 15:25:45 \| 000,438,272 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Dashboard\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Dashboard.dll MOD - [2010.11.03 15:25:45 \| 000,040,960 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Runtime\2.0.3693.42487__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Runtime.dll MOD - [2010.11.03 15:25:45 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Hotkeys.Shared\2.0.3309.28617__90ba9c70f846762e\AEM.Plugin.Hotkeys.Shared.dll MOD - [2010.11.03 15:25:45 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Actions.CCAA.Shared\2.0.3309.28608__90ba9c70f846762e\AEM.Actions.CCAA.Shared.dll MOD - [2010.11.03 15:25:45 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.WinMessages.Shared\2.0.3309.28629__90ba9c70f846762e\AEM.Plugin.WinMessages.Shared.dll MOD - [2010.11.03 15:25:45 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.REG.Shared\2.0.3309.28645__90ba9c70f846762e\AEM.Plugin.REG.Shared.dll MOD - [2010.11.03 15:25:45 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.GD.Shared\2.0.3309.28647__90ba9c70f846762e\AEM.Plugin.GD.Shared.dll MOD - [2010.11.03 15:25:45 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.EEU.Shared\2.0.3309.28627__90ba9c70f846762e\AEM.Plugin.EEU.Shared.dll MOD - [2010.11.03 15:25:45 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.DPPE.Shared\2.0.3309.28647__90ba9c70f846762e\AEM.Plugin.DPPE.Shared.dll MOD - [2010.11.03 15:25:45 \| 000,007,168 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\atixclib\1.0.0.0__90ba9c70f846762e\atixclib.dll MOD - [2010.11.03 15:25:44 \| 000,073,728 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation\2.0.3309.28604__90ba9c70f846762e\CLI.Foundation.dll MOD - [2010.11.03 15:25:44 \| 000,045,056 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0601\2.0.2573.17685__90ba9c70f846762e\DEM.Graphics.I0601.dll MOD - [2010.11.03 15:25:44 \| 000,032,768 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation\2.0.3309.28601__90ba9c70f846762e\LOG.Foundation.dll MOD - [2010.11.03 15:25:44 \| 000,028,672 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\NEWAEM.Foundation\2.0.3309.28603__90ba9c70f846762e\NEWAEM.Foundation.dll MOD - [2010.11.03 15:25:44 \| 000,028,672 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.XManifest\2.0.3309.28669__90ba9c70f846762e\CLI.Foundation.XManifest.dll MOD - [2010.11.03 15:25:44 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\DEM.OS.I0602\2.0.3309.28630__90ba9c70f846762e\DEM.OS.I0602.dll MOD - [2010.11.03 15:25:44 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared\2.0.3309.28620__90ba9c70f846762e\CLI.Component.Wizard.Shared.dll MOD - [2010.11.03 15:25:44 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Foundation\2.0.3309.28626__90ba9c70f846762e\MOM.Foundation.dll MOD - [2010.11.03 15:25:44 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\DEM.OS\2.0.3309.28645__90ba9c70f846762e\DEM.OS.dll MOD - [2010.11.03 15:25:44 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics.I0706\2.0.2743.23304__90ba9c70f846762e\DEM.Graphics.I0706.dll MOD - [2010.11.03 15:25:44 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Graphics\2.0.3309.28630__90ba9c70f846762e\DEM.Graphics.dll MOD - [2010.11.03 15:25:44 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\DEM.Foundation\2.0.2573.17684__90ba9c70f846762e\DEM.Foundation.dll MOD - [2010.11.03 15:25:43 \| 000,065,536 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceTV.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.DeviceTV.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,061,440 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Shared\2.0.3309.28618__90ba9c70f846762e\CLI.Caste.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,053,248 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.Radeon3D.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.Radeon3D.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,053,248 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.MMVideo.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.MMVideo.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,040,960 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.TransCode.Graphics.Shared\2.0.3309.28644__90ba9c70f846762e\CLI.Aspect.TransCode.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,028,672 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.PowerPlayDPPE.Graphics.Shared\2.0.3309.28644__90ba9c70f846762e\CLI.Aspect.PowerPlayDPPE.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,028,672 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysColour2.Graphics.Shared\2.0.3309.28632__90ba9c70f846762e\CLI.Aspect.DisplaysColour2.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,024,576 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DisplaysOptions.Graphics.Shared\2.0.3309.28635__90ba9c70f846762e\CLI.Aspect.DisplaysOptions.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared\2.0.3309.28617__90ba9c70f846762e\CLI.Component.Dashboard.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared\2.0.3309.28611__90ba9c70f846762e\CLI.Component.Client.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.HotkeysHandling.Graphics.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Aspect.HotkeysHandling.Graphics.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared\2.0.3309.28617__90ba9c70f846762e\CLI.Component.Runtime.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Wizard.Shared\2.0.3309.28631__90ba9c70f846762e\CLI.Caste.Graphics.Wizard.Shared.dll MOD - [2010.11.03 15:25:43 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Dashboard.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Caste.Graphics.Dashboard.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,503,808 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Implementation\2.0.3693.42564__90ba9c70f846762e\ResourceManagement.Foundation.Implementation.dll MOD - [2010.11.03 15:25:42 \| 000,106,496 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\MOM.Implementation\2.0.3693.42531__90ba9c70f846762e\MOM.Implementation.dll MOD - [2010.11.03 15:25:42 \| 000,061,440 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation\2.0.3693.42530__90ba9c70f846762e\LOG.Foundation.Implementation.dll MOD - [2010.11.03 15:25:42 \| 000,053,248 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCRT.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.DeviceCRT.Graphics.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,049,152 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceDFP.Graphics.Shared\2.0.3309.28634__90ba9c70f846762e\CLI.Aspect.DeviceDFP.Graphics.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,045,056 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Plugin.Source.Kit.Server\2.0.3693.42545__90ba9c70f846762e\AEM.Plugin.Source.Kit.Server.dll MOD - [2010.11.03 15:25:42 \| 000,040,960 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceCV.Graphics.Shared\2.0.3309.28636__90ba9c70f846762e\CLI.Aspect.DeviceCV.Graphics.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,032,768 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Private\2.0.3309.28614__90ba9c70f846762e\LOG.Foundation.Private.dll MOD - [2010.11.03 15:25:42 \| 000,032,768 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceProperty.Graphics.Shared\2.0.3309.28624__90ba9c70f846762e\CLI.Aspect.DeviceProperty.Graphics.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,028,672 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.DeviceLCD.Graphics.Shared\2.0.3309.28630__90ba9c70f846762e\CLI.Aspect.DeviceLCD.Graphics.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,028,672 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Aspect.CustomFormats.Graphics.Shared\2.0.3309.28627__90ba9c70f846762e\CLI.Aspect.CustomFormats.Graphics.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,024,576 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\ACE.Graphics.DisplaysManager.Shared\2.0.2573.17685__90ba9c70f846762e\ACE.Graphics.DisplaysManager.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\ResourceManagement.Foundation.Private\2.0.3309.28612__90ba9c70f846762e\ResourceManagement.Foundation.Private.dll MOD - [2010.11.03 15:25:42 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\LOG.Foundation.Implementation.Private\2.0.3309.28626__90ba9c70f846762e\LOG.Foundation.Implementation.Private.dll MOD - [2010.11.03 15:25:42 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\APM.Foundation\2.0.3309.28626__90ba9c70f846762e\APM.Foundation.dll MOD - [2010.11.03 15:25:42 \| 000,016,384 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server.Shared\2.0.3309.28617__90ba9c70f846762e\AEM.Server.Shared.dll MOD - [2010.11.03 15:25:42 \| 000,014,848 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AxInterop.WBOCXLib\1.0.0.0__90ba9c70f846762e\AxInterop.WBOCXLib.dll MOD - [2010.11.03 15:25:42 \| 000,013,312 \| ---- \| M] () -- C:\Windows\assembly\GAC\Interop.WBOCXLib\1.0.0.0__90ba9c70f846762e\Interop.WBOCXLib.dll MOD - [2010.11.03 15:25:42 \| 000,007,168 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Extension.EEU\2.0.3693.42437__90ba9c70f846762e\CLI.Component.Runtime.Extension.EEU.dll MOD - [2010.11.03 15:25:41 \| 000,544,768 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Systemtray\2.0.3693.42525__90ba9c70f846762e\CLI.Component.Systemtray.dll MOD - [2010.11.03 15:25:41 \| 000,405,504 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard\2.0.3693.42455__90ba9c70f846762e\CLI.Component.Wizard.dll MOD - [2010.11.03 15:25:41 \| 000,081,920 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime\2.0.3693.42440__90ba9c70f846762e\CLI.Component.Runtime.dll MOD - [2010.11.03 15:25:41 \| 000,057,344 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.SkinFactory\2.0.3693.42441__90ba9c70f846762e\CLI.Component.SkinFactory.dll MOD - [2010.11.03 15:25:41 \| 000,045,056 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Runtime.Shared.Private\2.0.3309.28628__90ba9c70f846762e\CLI.Component.Runtime.Shared.Private.dll MOD - [2010.11.03 15:25:41 \| 000,040,960 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Foundation.Private\2.0.3309.28608__90ba9c70f846762e\CLI.Foundation.Private.dll MOD - [2010.11.03 15:25:41 \| 000,024,576 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Wizard.Shared.Private\2.0.3309.28627__90ba9c70f846762e\CLI.Component.Wizard.Shared.Private.dll MOD - [2010.11.03 15:25:41 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard.Shared.Private\2.0.3309.28624__90ba9c70f846762e\CLI.Component.Dashboard.Shared.Private.dll MOD - [2010.11.03 15:25:40 \| 001,142,784 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Dashboard\2.0.3693.42446__90ba9c70f846762e\CLI.Component.Dashboard.dll MOD - [2010.11.03 15:25:40 \| 000,081,920 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\ATIDEMOS\2.0.3693.42440__90ba9c70f846762e\ATIDEMOS.dll MOD - [2010.11.03 15:25:40 \| 000,061,440 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\APM.Server\2.0.3693.42439__90ba9c70f846762e\APM.Server.dll MOD - [2010.11.03 15:25:40 \| 000,045,056 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\AEM.Server\2.0.3693.42438__90ba9c70f846762e\AEM.Server.dll MOD - [2010.11.03 15:25:40 \| 000,040,960 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Component.Client.Shared.Private\2.0.3309.28621__90ba9c70f846762e\CLI.Component.Client.Shared.Private.dll MOD - [2010.11.03 15:25:40 \| 000,032,768 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\ATICCCom\2.0.0.0__90ba9c70f846762e\ATICCCom.dll MOD - [2010.11.03 15:25:40 \| 000,028,672 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CCC.Implementation\2.0.3693.42531__90ba9c70f846762e\CCC.Implementation.dll MOD - [2010.11.03 15:25:40 \| 000,020,480 \| ---- \| M] () -- C:\Windows\assembly\GAC_MSIL\CLI.Caste.Graphics.Runtime.Shared.Private\2.0.3309.28637__90ba9c70f846762e\CLI.Caste.Graphics.Runtime.Shared.Private.dll MOD - [2010.10.18 22:31:40 \| 011,490,304 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\81719621f9033956bc041fcc582947b2\mscorlib.ni.dll MOD - [2010.10.18 20:43:50 \| 000,025,600 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\Accessibility\0b13863cebda3c30626cf14b8ecf287b\Accessibility.ni.dll MOD - [2010.10.18 20:43:49 \| 012,430,848 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\766756cebd102bc8f3b6a0a99605a24e\System.Windows.Forms.ni.dll MOD - [2010.10.18 20:43:14 \| 000,771,584 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\2c485b5bfb4e43ef8b2e5e4bdf001f8a\System.Runtime.Remoting.ni.dll MOD - [2010.10.18 20:42:49 \| 011,819,008 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\65b18c3387f4c94257085a5b6d84351e\System.Web.ni.dll MOD - [2010.10.18 20:42:02 \| 001,586,688 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\b80c9ab1947bbf7170a295927ef3e8c3\System.Drawing.ni.dll MOD - [2010.10.18 20:38:00 \| 005,452,800 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\661c071f332a4b21eba78da7c90ae35a\System.Xml.ni.dll MOD - [2010.10.18 20:37:40 \| 000,971,264 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\c8b9da034afedd10ef21f1a0ca7e7db1\System.Configuration.ni.dll MOD - [2010.10.18 20:37:29 \| 007,949,824 \| ---- \| M] () -- C:\Windows\assembly\NativeImages_v2.0.50727_32\System\e0d58494d7c591835582a227f59c64ca\System.ni.dll MOD - [2010.07.10 04:18:28 \| 000,141,824 \| ---- \| M] () -- C:\Program Files\WinRAR\RarExt.dll MOD - [2010.03.29 22:02:48 \| 000,520,234 \| ---- \| M] () -- C:\Program Files\BillP Studios\WinPatrol\sqlite3.dll MOD - [2010.01.21 08:34:10 \| 008,793,952 \| ---- \| M] () -- C:\Program Files\Microsoft Office\Office14\1033\GrooveIntlResource.dll MOD - [2010.01.10 03:18:18 \| 004,254,560 \| ---- \| M] () -- C:\Program Files\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF MOD - [2009.11.24 20:36:36 \| 000,016,384 \| R--- \| M] () -- C:\Program Files\ATI Technologies\ATI.ACE\Branding\Branding.dll MOD - [2009.04.26 18:32:34 \| 000,629,493 \| ---- \| M] () -- C:\Win\lsass.exe ========== Win32 Services (SafeList) ========== SRV - [2012.01.27 01:00:34 \| 000,827,456 \| ---- \| M] (McAfee, Inc.) [Disabled \| Stopped] -- C:\Windows\Temp\0071511329946318mcinst.exe -- (0071511329946318mcinstcleanup) McAfee Application Installer Cleanup (0071511329946318) SRV - [2012.01.13 12:21:10 \| 000,095,200 \| ---- \| M] (McAfee, Inc.) [Auto \| Running] -- c:\Program Files\McAfee\SiteAdvisor\McSACore.exe -- (McAfee SiteAdvisor Service) SRV - [2011.06.25 20:48:48 \| 000,246,112 \| ---- \| M] () [Disabled \| Stopped] -- C:\Program Files\Telenor Internet\UpdateDog\ouc.exe -- (Telenor Internet. RunOuc) SRV - [2011.01.28 13:22:50 \| 000,632,792 \| ---- \| M] (PC Tools) [Disabled \| Stopped] -- C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe -- (PCToolsSSDMonitorSvc) SRV - [2010.11.03 11:21:46 \| 000,120,152 \| ---- \| M] (WeFi) [Disabled \| Stopped] -- C:\Program Files\WeFi\WefiEngSvc.exe -- (WefiEngSvc) SRV - [2010.08.10 19:26:40 \| 001,570,056 \| ---- \| M] (Raxco Software, Inc.) [Auto \| Running] -- C:\Program Files\Raxco\PerfectDisk\PDAgent.exe -- (PDAgent) SRV - [2010.08.10 19:26:30 \| 001,475,848 \| ---- \| M] (Raxco Software, Inc.) [On_Demand \| Stopped] -- C:\Program Files\Raxco\PerfectDisk\PDEngine.exe -- (PDEngine) SRV - [2010.01.22 00:51:12 \| 030,963,576 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Program Files\Microsoft Office\Office14\GROOVE.EXE -- (Microsoft SharePoint Workspace Audit Service) SRV - [2010.01.15 14:49:20 \| 000,227,232 \| ---- \| M] (McAfee, Inc.) [On_Demand \| Stopped] -- C:\Program Files\McAfee Security Scan\2.0.181\McCHSvc.exe -- (McComponentHostService) SRV - [2009.07.14 03:16:13 \| 000,025,088 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\System32\sensrsvc.dll -- (SensrSvc) SRV - [2009.07.14 03:16:12 \| 001,004,544 \| ---- \| M] (Microsoft Corporation) [On_Demand \| Stopped] -- C:\Windows\System32\PeerDistSvc.dll -- (PeerDistSvc) SRV - [2009.07.14 03:15:41 \| 000,680,960 \| ---- \| M] (Microsoft Corporation) [Auto \| Running] -- C:\Program Files\Windows Defender\MpSvc.dll -- (WinDefend) SRV - [2007.12.21 15:22:44 \| 000,019,200 \| ---- \| M] (ESET) [On_Demand \| Stopped] -- C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe -- (EHttpSrv) SRV - [2007.12.21 15:21:16 \| 000,468,224 \| ---- \| M] (ESET) [Auto \| Running] -- C:\Program Files\ESET\ESET Smart Security\ekrn.exe -- (ekrn) SRV - [2005.04.17 12:30:42 \| 000,124,608 \| ---- \| M] (symantec) [Disabled \| Stopped] -- C:\Program Files\Symantec AntiVirus\SavRoam.exe -- (SavRoam) SRV - [2005.04.17 12:30:40 \| 001,706,176 \| ---- \| M] (Symantec Corporation) [Disabled \| Stopped] -- C:\Program Files\Symantec AntiVirus\Rtvscan.exe -- (Symantec AntiVirus) SRV - [2005.04.17 12:30:32 \| 000,019,648 \| ---- \| M] (Symantec Corporation) [Disabled \| Stopped] -- C:\Program Files\Symantec AntiVirus\DefWatch.exe -- (DefWatch) SRV - [2005.04.08 15:54:52 \| 000,161,392 \| ---- \| M] (Symantec Corporation) [Disabled \| Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe -- (ccSetMgr) SRV - [2005.04.08 15:54:50 \| 000,083,568 \| ---- \| M] (Symantec Corporation) [Disabled \| Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe -- (ccPwdSvc) SRV - [2005.04.08 15:52:32 \| 000,185,968 \| ---- \| M] (Symantec Corporation) [Disabled \| Stopped] -- C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe -- (ccEvtMgr) SRV - [2005.04.05 11:17:22 \| 000,206,552 \| ---- \| M] (Symantec Corporation) [Disabled \| Stopped] -- C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe -- (SNDSrvc) SRV - [2005.03.30 21:48:22 \| 000,992,864 \| ---- \| M] (Symantec Corporation) [Disabled \| Stopped] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe -- (SPBBCSvc) SRV - [2002.09.20 23:50:10 \| 000,045,056 \| ---- \| M] (Analog Devices, Inc.) [Auto \| Running] -- C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe -- (SoundMAX Agent Service (default)) ========== Driver Services (SafeList) ========== DRV - File not found [Kernel \| On_Demand \| Stopped] -- system32\DRIVERS\ew_jubusenum.sys -- (huawei_enumerator) DRV - File not found [Kernel \| On_Demand \| Stopped] -- system32\drivers\ALCXWDM.SYS -- (ALCXWDM) Service for Realtek AC97 Audio (WDM) DRV - [2011.08.18 10:00:00 \| 001,576,312 \| ---- \| M] (Symantec Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110930.002\NAVEX15.SYS -- (NAVEX15) DRV - [2011.08.18 10:00:00 \| 000,086,136 \| ---- \| M] (Symantec Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Program Files\Common Files\Symantec Shared\VirusDefs\20110930.002\NAVENG.SYS -- (NAVENG) DRV - [2011.07.28 10:00:00 \| 000,374,392 \| ---- \| M] (Symantec Corporation) [Kernel \| System \| Running] -- C:\Program Files\Common Files\Symantec Shared\EENGINE\eeCtrl.sys -- (eeCtrl) DRV - [2010.10.18 20:44:33 \| 000,436,792 \| ---- \| M] () [Kernel \| Boot \| Running] -- C:\Windows\System32\drivers\sptd.sys -- (sptd) DRV - [2010.09.29 20:43:21 \| 000,175,752 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\vmbus.sys -- (vmbus) DRV - [2010.09.29 19:36:31 \| 000,035,840 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\winusb.sys -- (WinUsb) DRV - [2010.04.07 07:22:06 \| 000,135,184 \| ---- \| M] (Raxco Software, Inc.) [File_System \| Auto \| Running] -- C:\Windows\System32\drivers\DefragFs.sys -- (DefragFS) DRV - [2010.02.11 09:42:22 \| 004,450,816 \| ---- \| M] (ATI Technologies Inc.) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\atikmdag.sys -- (atikmdag) DRV - [2009.12.30 19:21:16 \| 000,027,192 \| ---- \| M] (VS Revo Group) [File_System \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\revoflt.sys -- (Revoflt) DRV - [2009.07.23 23:02:56 \| 000,043,008 \| ---- \| M] (Realtek Semiconductor Corporation ) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\Rtnicxp.sys -- (RTL8023xp) DRV - [2009.07.14 03:19:10 \| 000,040,896 \| ---- \| M] (Microsoft Corporation) [Kernel \| Boot \| Running] -- C:\Windows\System32\drivers\vmstorfl.sys -- (storflt) DRV - [2009.07.14 03:19:10 \| 000,028,224 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\storvsc.sys -- (storvsc) DRV - [2009.07.14 01:28:47 \| 000,005,632 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\vms3cap.sys -- (s3cap) DRV - [2009.07.14 01:28:45 \| 000,017,920 \| ---- \| M] (Microsoft Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\VMBusHID.sys -- (VMBusHID) DRV - [2009.07.14 00:02:53 \| 000,044,032 \| ---- \| M] (VIA Technologies, Inc. ) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\fetnd6.sys -- (FETNDIS) DRV - [2008.11.02 10:44:10 \| 000,056,572 \| ---- \| M] (PowerISO Computing, Inc.) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\scdemu.sys -- (SCDEmu) DRV - [2007.12.21 15:21:54 \| 000,053,768 \| ---- \| M] (ESET) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\epfwtdi.sys -- (epfwtdi) DRV - [2007.12.21 15:21:52 \| 000,030,728 \| ---- \| M] (ESET) [Kernel \| On_Demand \| Running] -- C:\Windows\System32\drivers\epfwndis.sys -- (Epfwndis) DRV - [2007.12.21 15:21:46 \| 000,071,176 \| ---- \| M] (ESET) [Kernel \| Auto \| Running] -- C:\Windows\System32\drivers\epfw.sys -- (epfw) DRV - [2007.12.21 15:20:14 \| 000,030,216 \| ---- \| M] (ESET) [Kernel \| System \| Running] -- C:\Windows\System32\drivers\easdrv.sys -- (easdrv) DRV - [2007.12.21 15:19:54 \| 000,039,944 \| ---- \| M] (ESET) [Kernel \| Auto \| Running] -- C:\Windows\System32\drivers\eamon.sys -- (eamon) DRV - [2005.04.05 11:17:02 \| 000,267,192 \| ---- \| M] (Symantec Corporation) [Kernel \| System \| Stopped] -- C:\Windows\System32\drivers\symtdi.sys -- (SYMTDI) DRV - [2005.04.01 20:36:04 \| 000,123,200 \| ---- \| M] (Symantec Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Program Files\Symantec\SYMEVENT.SYS -- (SymEvent) DRV - [2005.03.30 21:48:20 \| 000,372,832 \| ---- \| M] (Symantec Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCDrv.sys -- (SPBBCDrv) DRV - [2005.02.04 20:14:32 \| 000,053,896 \| ---- \| M] (Symantec Corporation) [Kernel \| System \| Running] -- C:\Program Files\Symantec AntiVirus\Savrtpel.sys -- (SAVRTPEL) DRV - [2005.02.04 20:14:30 \| 000,324,232 \| ---- \| M] (Symantec Corporation) [Kernel \| On_Demand \| Stopped] -- C:\Program Files\Symantec AntiVirus\savrt.sys -- (SAVRT) DRV - [2004.06.10 01:42:38 \| 000,015,429 \| ---- \| M] ( ) [Kernel \| On_Demand \| Stopped] -- C:\Windows\System32\drivers\Sacm2A.sys -- (USBCM) ========== Standard Registry (SafeList) ========== ========== Internet Explorer ========== IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici] IE - HKLM\..\URLSearchHook: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) IE - HKLM\..\SearchScopes,DefaultScope = {afdbddaa-5d3f-42ee-b79c-185a7020515b} IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [Link mogu videti samo ulogovani korisnici]{searchTerms}&FORM=IE8SRC IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = [Link mogu videti samo ulogovani korisnici]{searchTerms}&SearchSource=4&ctid=CT2405280 IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = [Link mogu videti samo ulogovani korisnici] IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = en-US IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 1C 98 BC B8 40 7D CB 01 [binary data] IE - HKCU\..\URLSearchHook: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - C:\Program Files\Softonic-Eng7\tbSoft.dll (Conduit Ltd.) IE - HKCU\..\SearchScopes,DefaultScope = {1CEC67E5-1959-4AF6-A2E3-14B023C4C0A1} IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = [Link mogu videti samo ulogovani korisnici]{searchTerms}&src=IE-SearchBox&FORM=IE8SRC IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = [Link mogu videti samo ulogovani korisnici]{searchTerms}&affID=111434&babsrc=SP_ss&mntrId=40080cff00000000000000055d0e0961 IE - HKCU\..\SearchScopes\{1CEC67E5-1959-4AF6-A2E3-14B023C4C0A1}: "URL" = [Link mogu videti samo ulogovani korisnici]{searchTerms} IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = [Link mogu videti samo ulogovani korisnici]{searchTerms}&SearchSource=4&ctid=CT2405280 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1 IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = .local;<local> ========== FireFox ========== FF - prefs.js..browser.startup.homepage: "http://utilu.com/" FF - user.js - File not found FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32.dll () FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\Windows\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.) FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll () FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.5.1: C:\Windows\system32\npDeployJava1.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.5.1: C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\plugin2\npjp2.dll (Oracle Corporation) FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.) FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll ( Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL (Microsoft Corporation) FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL (Microsoft Corporation) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Administrator\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Administrator\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.) FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files\McAfee\SiteAdvisor [2012.02.23 11:21:28 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.28\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2012.06.30 18:31:09 \| 000,000,000 \| ---D \| M] FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 3.6.28\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins [2012.06.30 18:31:09 \| 000,000,000 \| ---D \| M] [2010.10.01 02:38:42 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Extensions [2010.07.21 18:05:30 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Extensions\{3550f703-e582-4d05-9a08-453d09bdfdc6} [2010.07.21 18:08:20 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Extensions\{92650c4d-4b8e-4d2a-b7eb-24ecf4f6b63a} [2010.06.30 16:02:00 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Extensions\{a463f10c-3994-11da-9945-000d60ca027b} [2010.06.30 18:52:07 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\dltyhoh6.default\extensions [2010.06.30 18:55:25 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\qkmk5rxg.Mozilla_Firefox_3.6\extensions [2012.06.30 18:31:47 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions [2011.01.14 17:01:44 \| 000,000,000 \| ---D \| M] ("ColorfulTabs") -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} [2012.01.11 17:41:33 \| 000,000,000 \| ---D \| M] (Make Link) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{0B6B0D55-DFAC-4006-AEE6-25667F55A2A8} [2012.06.30 18:31:37 \| 000,000,000 \| ---D \| M] (Flagfox) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} [2010.10.01 02:38:44 \| 000,000,000 \| ---D \| M] (Linkification) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} [2012.01.11 17:41:28 \| 000,000,000 \| ---D \| M] (Flashblock) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} [2012.06.30 18:31:46 \| 000,000,000 \| ---D \| M] (ST-Eng7 Community Toolbar) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} [2012.01.11 17:41:34 \| 000,000,000 \| ---D \| M] (RemoveTabs) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{41a40cb1-aa9e-47c6-a207-66b9f5875870} [2012.01.11 17:41:46 \| 000,000,000 \| ---D \| M] (Cookie Monster) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{45d8ff86-d909-11db-9705-005056c00008} [2012.01.11 17:41:37 \| 000,000,000 \| ---D \| M] (Stylish) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} [2012.06.30 18:31:41 \| 000,000,000 \| ---D \| M] (ReloadEvery) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644} [2010.10.01 02:38:46 \| 000,000,000 \| ---D \| M] (MR Tech Toolkit) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{9669CC8F-B388-42FE-86F4-CB5E7F5A8BDC} [2012.01.11 17:41:28 \| 000,000,000 \| ---D \| M] (Download status) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{9fb8c270-7124-11dd-ad8b-0800200c9a66} [2012.01.11 17:41:32 \| 000,000,000 \| ---D \| M] (Interclue) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{c33c5b47-69c8-45a4-a5e0-af85bbe628dd} [2012.01.11 17:41:27 \| 000,000,000 \| ---D \| M] (Adblock Plus) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} [2012.06.30 18:31:36 \| 000,000,000 \| ---D \| M] ("BetterPrivacy") -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3} [2012.01.11 17:41:28 \| 000,000,000 \| ---D \| M] (Download Statusbar) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} [2012.01.11 17:41:38 \| 000,000,000 \| ---D \| M] (Navigational Sounds) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{d84a846d-f7cb-4187-a408-b171020e8940} [2012.06.30 18:31:39 \| 000,000,000 \| ---D \| M] (Greasemonkey) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} [2012.06.30 18:31:41 \| 000,000,000 \| ---D \| M] (QuickWiki) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{EE223D7A-F30F-11DD-8F0A-D2AD55D89593} [2011.01.14 17:01:41 \| 000,000,000 \| ---D \| M] (Download Manager Tweak) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB} [2010.10.01 02:38:42 \| 000,000,000 \| ---D \| M] (Ctrl-Tab) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\ctrl-tab@design-noir.de [2012.06.30 18:31:41 \| 000,000,000 \| ---D \| M] (United States English Spellchecker) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\en-US@dictionaries.addons.mozilla.org [2012.06.07 12:32:27 \| 000,000,000 \| ---D \| M] (searchya.com) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\ffxtlbr@searchya.com [2012.06.30 18:31:44 \| 000,000,000 \| ---D \| M] (HTTPS-Everywhere) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\https-everywhere@eff.org [2010.10.01 02:38:43 \| 000,000,000 \| ---D \| M] (iTunesFox) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\iTunesFox@sjcmankimo.tw [2012.06.30 18:31:40 \| 000,000,000 \| ---D \| M] ("Quick Dictionary Lookup") -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\lexilook@lexiology.com [2010.10.01 02:38:43 \| 000,000,000 \| ---D \| M] (MuPDF) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\mupdf@ccxvii.net [2012.06.30 16:15:45 \| 000,000,000 \| ---D \| M] (NASA Night Launch) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\nasanightlaunch@example.com [2010.07.04 04:16:40 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\rsDownloadHelper@yevgenyandrov.net [2012.01.11 17:41:38 \| 000,000,000 \| ---D \| M] (Tab Scope) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\tabscope@xuldev.org [2010.10.01 02:38:43 \| 000,000,000 \| ---D \| M] ("Undo Closed Tabs Button") -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\undoclosedtabsbutton@supernova00.biz [2012.01.11 17:41:47 \| 000,000,000 \| ---D \| M] (YesScript) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\r2yk6h25.default\extensions\yesscript@userstyles.org [2010.06.30 18:55:15 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\Firefox\Profiles\xsie5w90.Mozilla_Firefox_2.0\extensions [2010.07.21 18:08:20 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Users\Administrator\AppData\Roaming\Mozilla\SeaMonkey\Profiles\vjuyo9wf.default\extensions [2012.06.30 15:28:24 \| 000,000,000 \| ---D \| M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions [2011.06.26 18:55:29 \| 000,000,000 \| ---D \| M] (Skype extension) -- C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} [2012.02.12 18:20:04 \| 000,000,000 \| ---D \| M] (Java Console) -- C:\Program Files\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} [2012.05.25 00:30:07 \| 000,000,000 \| ---D \| M] (Babylon) -- C:\Program Files\Mozilla Firefox\extensions\ffxtlbr@babylon.com [2009.09.11 22:56:28 \| 000,075,208 \| ---- \| M] (Foxit Software Company) -- C:\Program Files\mozilla firefox\plugins\npFoxitReaderPlugin.dll [2012.06.30 18:31:03 \| 000,001,538 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\amazon-en-GB.xml [2012.05.25 00:29:27 \| 000,002,313 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml [2012.06.30 18:31:03 \| 000,000,947 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\chambers-en-GB.xml [2012.06.30 18:31:03 \| 000,000,769 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\eBay-en-GB.xml [2012.07.14 00:46:27 \| 000,002,024 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\McSiteAdvisor.xml [2012.06.30 18:31:03 \| 000,001,135 \| ---- \| M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-en-GB.xml ========== Chrome ========== CHR - homepage: [Link mogu videti samo ulogovani korisnici]* CHR - default_search_provider: SearchYa! (Enabled) CHR - default_search_provider: search_url = [Link mogu videti samo ulogovani korisnici]{searchTerms} CHR - default_search_provider: suggest_url = CHR - homepage: [Link mogu videti samo ulogovani korisnici] CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer CHR - plugin: Native Client (Enabled) = C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\ppGoogleNaClPluginChrome.dll CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\pdf.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Administrator\AppData\Local\Google\Chrome\Application\20.0.1132.47\gcswf32.dll CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\system32\Macromed\Flash\NPSWF32.dll CHR - plugin: Java Deployment Toolkit 6.0.300.12 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npdeployJava1.dll CHR - plugin: Java(TM) Platform SE 6 U30 (Enabled) = C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll CHR - plugin: Foxit Reader Plugin for Mozilla (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npFoxitReaderPlugin.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin2.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin3.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin4.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin5.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin6.dll CHR - plugin: QuickTime Plug-in 7.6.8 (Enabled) = C:\Program Files\Mozilla Firefox\plugins\npqtplugin7.dll CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~4\Office14\NPAUTHZ.DLL CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~1\MICROS~4\Office14\NPSPWRAP.DLL CHR - plugin: McAfee SiteAdvisor (Enabled) = C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll CHR - plugin: Silverlight Plug-In (Enabled) = C:\Program Files\Microsoft Silverlight\4.0.50917.0\npctrl.dll CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll CHR - plugin: Google Update (Enabled) = C:\Users\Administrator\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll CHR - plugin: Shockwave for Director (Enabled) = C:\Windows\system32\Adobe\Director\np32dsw.dll CHR - Extension: Babylon Toolbar = C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\dhkplhfnhceodhffomolpfigojocbpcb\1.6_0\ CHR - Extension: SiteAdvisor = C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\fheoggkfdfchfphceeifdbepaooicaho\3.41.123.2_0\ CHR - Extension: Skype Extension = C:\Users\Administrator\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\5.3.0.7550_0\ O1 HOSTS File: ([2009.06.10 23:39:37 \| 000,000,824 \| ---- \| M]) - C:\Windows\System32\drivers\etc\hosts O2 - BHO: (Ironsource LTD Helper Object) - {25927741-5E5B-4D27-8D8B-9188FE64373F} - C:\Program Files\Ironsource\searchya\1.5.13.0\bh\searchya.dll (Montera Technologeis LTD) O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll (Oracle Corporation) O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) O2 - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Program Files\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation) O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll (Oracle Corporation) O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) O3 - HKLM\..\Toolbar: (SearchYa Toolbar) - {33AA308B-B565-4376-AC66-59EE9B6AD13E} - C:\Program Files\Ironsource\searchya\1.5.13.0\searchyaTlbr.dll (Montera Technologeis LTD) O4 - HKLM..\Run: [BCSSync] C:\Program Files\Microsoft Office\Office14\BCSSync.exe (Microsoft Corporation) O4 - HKLM..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe (Symantec Corporation) O4 - HKLM..\Run: [egui] C:\Program Files\ESET\ESET Smart Security\egui.exe (ESET) O4 - HKLM..\Run: [PWRISOVM.EXE] C:\Program Files\PowerISO\PWRISOVM.EXE (PowerISO Computing, Inc.) O4 - HKLM..\Run: [run32] C:\Win\lsass.exe () O4 - HKLM..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe (Analog Devices, Inc.) O4 - HKLM..\Run: [SSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe (PC Tools) O4 - HKLM..\Run: [StartCCC] C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe (Advanced Micro Devices, Inc.) O4 - HKLM..\Run: [WinPatrol] C:\Program Files\BillP Studios\WinPatrol\winpatrol.exe (BillP Studios) O4 - HKCU..\Run: [Device Detector] DevDetect.exe -autorun File not found O4 - HKCU..\Run: [OfficeSyncProcess] C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE (Microsoft Corporation) O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: VerboseStatus = 1 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousMachineGroupPolicy = 0 O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SynchronousUserGroupPolicy = 0 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: LinkResolveIgnoreLinkInfo = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveSearch = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoResolveTrack = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoInternetOpenWith = 1 O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145 O8 - Extra context menu item: E&xport to Microsoft Excel - C:\Program Files\Microsoft Office\Office14\EXCEL.EXE (Microsoft Corporation) O8 - Extra context menu item: Se&nd to OneNote - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Program Files\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation) O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Program Files\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation) O9 - Extra Button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O9 - Extra 'Tools' menuitem : Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files\Bonjour\mdnsNSP.dll (Apple Inc.) O13 - gopher Prefix: missing O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} [Link mogu videti samo ulogovani korisnici] (Java Plug-in 10.5.1) O16 - DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} [Link mogu videti samo ulogovani korisnici] (Java Plug-in 1.6.0_30) O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} [Link mogu videti samo ulogovani korisnici] (Java Plug-in 10.5.1) O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2869E069-62EE-4E4B-98CD-2269E7DBC995}: NameServer = 194.247.192.33,194.247.192.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{8B1B4DFE-90DC-4294-97CB-37BFE5D70DD5}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{ED9E7F8A-EDEA-4715-9260-461719E1BD3A}: DhcpNameServer = 192.168.1.1 O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FC173EB9-3A20-44D1-9284-4669829A660F}: DhcpNameServer = 192.168.1.1 O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Program Files\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.) O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies) O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.) O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation) O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation) O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found O20 - Winlogon\Notify\AtiExtEvent: DllName - (Reg Error: Value error.) - Reg Error: Value error. File not found O20 - Winlogon\Notify\NavLogon: DllName - () - File not found O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found. O22 - SharedTaskScheduler: {E31004D1-A431-41B8-826F-E902F9D95C81} - Windows DreamScene - C:\Windows\System32\DreamScene.dll (Microsoft Corporation) O27 - HKLM IFEO\notepad.exe: Debugger - C:\Program Files\Notepad2\Notepad2.exe () O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Program Files\Microsoft Office\Office14\GROOVEEX.DLL (Microsoft Corporation) O32 - HKLM CDRom: AutoRun - 1 O32 - AutoRun File - [2009.06.10 23:42:20 \| 000,000,024 \| ---- \| M] () - C:\autoexec.bat -- [ NTFS ] O33 - MountPoints2\{29bcb570-9f05-11e0-b3bf-00112fdb8063}\Shell - "" = AutoRun O33 - MountPoints2\{29bcb570-9f05-11e0-b3bf-00112fdb8063}\Shell\AutoRun\command - "" = H:\AutoRun.exe O34 - HKLM BootExecute: (PDBoot.exe) O34 - HKLM BootExecute: (autocheck autochk ) O35 - HKLM\..comfile [open] -- "%1" % O35 - HKLM\..exefile [open] -- "%1" %* O37 - HKLM\...com [@ = comfile] -- "%1" %* O37 - HKLM\...exe [@ = exefile] -- "%1" %* O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3) O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2) O38 - SubSystems\\Windows: (ServerDll=sxssrv,4) ========== Files/Folders - Created Within 30 Days ========== [2012.07.06 10:57:27 \| 000,000,000 \| -HSD \| C] -- C:\found.004 [2012.07.02 13:58:15 \| 000,227,720 \| ---- \| C] (Oracle Corporation) -- C:\Windows\System32\javaws.exe [2012.07.02 13:57:28 \| 000,174,064 \| ---- \| C] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2012.07.02 13:57:27 \| 000,174,064 \| ---- \| C] (Oracle Corporation) -- C:\Windows\System32\java.exe [2012.06.30 15:54:21 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Common Files\Java [2012.06.30 15:49:29 \| 000,000,000 \| ---D \| C] -- C:\Program Files\Oracle [2012.06.30 15:49:10 \| 000,772,504 \| ---- \| C] (Oracle Corporation) -- C:\Windows\System32\npDeployJava1.dll [1 C:\Windows\System32\drivers\.tmp files -> C:\Windows\System32\drivers\.tmp -> ] [1 C:\Windows\System32\.tmp files -> C:\Windows\System32\.tmp -> ] ========== Files - Modified Within 30 Days ========== [2012.07.14 21:12:48 \| 000,009,584 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 [2012.07.14 21:12:48 \| 000,009,584 \| -H-- \| M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 [2012.07.14 20:22:04 \| 000,000,940 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1648178426-4100161995-1716385242-500UA.job [2012.07.14 19:53:31 \| 001,734,180 \| ---- \| M] () -- C:\Users\Administrator\Desktop\IMG_8173.JPG [2012.07.14 19:48:23 \| 001,047,041 \| ---- \| M] () -- C:\Users\Administrator\Desktop\AVGInstLog.cab [2012.07.14 19:12:56 \| 000,000,304 \| ---- \| M] () -- C:\Windows\tasks\WefiStartup.job [2012.07.14 19:12:24 \| 000,067,584 \| --S- \| M] () -- C:\Windows\bootstat.dat [2012.07.14 19:10:19 \| 000,000,270 \| ---- \| M] () -- C:\Windows\tasks\RMSchedule.job [2012.07.14 17:38:06 \| 001,482,836 \| ---- \| M] () -- C:\Users\Administrator\Desktop\IMG_8172.JPG [2012.07.14 17:32:15 \| 001,157,272 \| ---- \| M] () -- C:\Users\Administrator\Desktop\IMG_8171.JPG [2012.07.14 16:22:23 \| 000,000,888 \| ---- \| M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1648178426-4100161995-1716385242-500Core.job [2012.07.13 18:19:47 \| 000,000,486 \| -H-- \| M] () -- C:\Windows\tasks\Norton Security Scan for Administrator.job [2012.07.10 01:40:31 \| 000,075,754 \| ---- \| M] () -- C:\Users\Administrator\Desktop\IMAG0377.jpg [2012.07.10 01:35:28 \| 000,069,064 \| ---- \| M] () -- C:\Users\Administrator\Desktop\IMAG0365.jpg [2012.07.10 00:58:41 \| 000,745,436 \| ---- \| M] () -- C:\Windows\System32\perfh00A.dat [2012.07.10 00:58:41 \| 000,662,484 \| ---- \| M] () -- C:\Windows\System32\perfh009.dat [2012.07.10 00:58:41 \| 000,157,482 \| ---- \| M] () -- C:\Windows\System32\perfc00A.dat [2012.07.10 00:58:41 \| 000,121,352 \| ---- \| M] () -- C:\Windows\System32\perfc009.dat [2012.07.08 22:20:48 \| 000,074,300 \| ---- \| M] () -- C:\Users\Administrator\Desktop\IMG1583.jpg [2012.07.08 13:33:52 \| 000,008,192 \| ---- \| M] () -- C:\Windows\System32\Ikeext.etl [2012.07.08 00:49:31 \| 000,040,507 \| ---- \| M] () -- C:\Users\Administrator\Desktop\129541C.jpg [2012.07.08 00:41:37 \| 000,238,004 \| ---- \| M] () -- C:\Users\Administrator\Desktop\26_schauble_81_6.jpg [2012.07.08 00:37:14 \| 000,215,554 \| ---- \| M] () -- C:\Users\Administrator\Desktop\26_balcer_12_6.jpg [2012.07.07 18:59:45 \| 000,530,217 \| ---- \| M] () -- C:\Users\Administrator\Desktop\mara ludaaa.jpg [2012.07.07 18:21:32 \| 001,895,472 \| ---- \| M] () -- C:\Users\Administrator\Desktop\Lepotice moje.jpg [2012.07.07 17:15:39 \| 001,662,629 \| ---- \| M] () -- C:\Users\Administrator\Desktop\Brankic mojj.jpg [2012.07.02 13:57:09 \| 000,174,064 \| ---- \| M] (Oracle Corporation) -- C:\Windows\System32\javaw.exe [2012.07.02 13:57:09 \| 000,174,064 \| ---- \| M] (Oracle Corporation) -- C:\Windows\System32\java.exe [2012.07.02 01:39:58 \| 000,230,604 \| ---- \| M] () -- C:\Users\Administrator\Desktop\rema dva.jpg [2012.07.02 01:07:06 \| 000,226,718 \| ---- \| M] () -- C:\Users\Administrator\Documents\rema2.jpg [2012.07.02 00:59:24 \| 000,237,250 \| ---- \| M] () -- C:\Users\Administrator\Desktop\rema.jpg [1 C:\Windows\System32\drivers\.tmp files -> C:\Windows\System32\drivers\.tmp -> ] [1 C:\Windows\System32\.tmp files -> C:\Windows\System32\.tmp -> ] ========== Files Created - No Company Name ========== [2012.07.14 19:53:29 \| 001,734,180 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMG_8173.JPG [2012.07.14 19:48:22 \| 001,047,041 \| ---- \| C] () -- C:\Users\Administrator\Desktop\AVGInstLog.cab [2012.07.14 17:38:03 \| 001,482,836 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMG_8172.JPG [2012.07.14 17:32:13 \| 001,157,272 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMG_8171.JPG [2012.07.10 01:39:13 \| 000,189,932 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMAG0381.jpg [2012.07.10 01:39:13 \| 000,156,140 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMAG0388.jpg [2012.07.10 01:39:13 \| 000,151,529 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMAG0374.jpg [2012.07.10 01:39:13 \| 000,075,754 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMAG0377.jpg [2012.07.10 01:39:13 \| 000,069,064 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMAG0365.jpg [2012.07.10 01:39:12 \| 000,179,208 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMAG0401.jpg [2012.07.10 01:39:12 \| 000,159,940 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMAG0395.jpg [2012.07.10 01:39:12 \| 000,137,949 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMAG0402.jpg [2012.07.10 01:23:35 \| 000,079,166 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMG1118.jpg [2012.07.10 01:01:40 \| 000,074,300 \| ---- \| C] () -- C:\Users\Administrator\Desktop\IMG1583.jpg [2012.07.08 00:49:43 \| 000,040,507 \| ---- \| C] () -- C:\Users\Administrator\Desktop\129541C.jpg [2012.07.08 00:41:40 \| 000,238,004 \| ---- \| C] () -- C:\Users\Administrator\Desktop\26_schauble_81_6.jpg [2012.07.08 00:37:41 \| 000,215,554 \| ---- \| C] () -- C:\Users\Administrator\Desktop\26_balcer_12_6.jpg [2012.07.07 18:59:14 \| 000,530,217 \| ---- \| C] () -- C:\Users\Administrator\Desktop\mara ludaaa.jpg [2012.07.07 18:22:01 \| 001,895,472 \| ---- \| C] () -- C:\Users\Administrator\Desktop\Lepotice moje.jpg [2012.07.07 17:16:18 \| 001,662,629 \| ---- \| C] () -- C:\Users\Administrator\Desktop\Brankic mojj.jpg [2012.07.02 01:39:58 \| 000,230,604 \| ---- \| C] () -- C:\Users\Administrator\Desktop\rema dva.jpg [2012.07.02 01:07:03 \| 000,226,718 \| ---- \| C] () -- C:\Users\Administrator\Documents\rema2.jpg [2012.07.02 00:59:22 \| 000,237,250 \| ---- \| C] () -- C:\Users\Administrator\Desktop\rema.jpg [2011.07.26 15:43:39 \| 000,037,336 \| ---- \| C] () -- C:\Windows\System32\CleanMFT32.exe [2011.06.26 19:48:26 \| 000,000,000 \| ---- \| C] () -- C:\Windows\VPC32.INI [2011.06.26 19:13:18 \| 000,000,056 \| -H-- \| C] () -- C:\Windows\System32\ezsidmv.dat [2011.02.04 00:11:40 \| 000,000,218 \| ---- \| C] () -- C:\Users\Administrator\.recently-used.xbel [2010.11.16 13:29:09 \| 000,010,240 \| ---- \| C] () -- C:\Users\Administrator\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini [2010.11.03 15:29:31 \| 000,000,000 \| ---- \| C] () -- C:\Windows\ativpsrm.bin [2010.11.02 20:46:54 \| 000,073,728 \| ---- \| C] () -- C:\Windows\System32\RtNicProp32.dll [2010.11.02 10:00:52 \| 000,204,800 \| ---- \| C] () -- C:\Windows\System32\IVIresizeW7.dll [2010.11.02 10:00:52 \| 000,200,704 \| ---- \| C] () -- C:\Windows\System32\IVIresizeA6.dll [2010.11.02 10:00:52 \| 000,192,512 \| ---- \| C] () -- C:\Windows\System32\IVIresizeP6.dll [2010.11.02 10:00:52 \| 000,192,512 \| ---- \| C] () -- C:\Windows\System32\IVIresizeM6.dll [2010.11.02 10:00:52 \| 000,188,416 \| ---- \| C] () -- C:\Windows\System32\IVIresizePX.dll [2010.11.02 10:00:52 \| 000,020,480 \| ---- \| C] () -- C:\Windows\System32\IVIresize.dll [2010.11.02 10:00:16 \| 000,831,600 \| ---- \| C] () -- C:\Windows\System32\Ctaa1.dat [2010.11.02 10:00:15 \| 000,122,880 \| ---- \| C] () -- C:\Windows\System32\cddvdint.dll [2010.11.02 09:55:28 \| 000,002,828 \| -HS- \| C] () -- C:\Windows\System32\KGyGaAvL.sys [2010.11.02 09:43:38 \| 000,007,609 \| ---- \| C] () -- C:\Users\Administrator\AppData\Local\Resmon.ResmonCfg [2010.10.30 20:58:17 \| 000,000,010 \| ---- \| C] () -- C:\Windows\WININIT.INI [2010.10.19 01:22:25 \| 000,000,044 \| ---- \| C] () -- C:\Windows\System32\msssc.dll [2010.10.18 21:56:24 \| 000,053,693 \| ---- \| C] () -- C:\Windows\UNDPX2A.sys [2010.10.18 21:56:24 \| 000,015,429 \| ---- \| C] ( ) -- C:\Windows\System32\drivers\Sacm2A.sys [2010.10.18 21:47:38 \| 000,446,258 \| ---- \| C] () -- C:\Windows\AutoKMS.exe [2010.10.18 20:40:38 \| 000,110,602 \| ---- \| C] () -- C:\Windows\System32\xcdsfx32.bin [2010.10.18 20:36:20 \| 000,165,376 \| ---- \| C] () -- C:\Windows\System32\unrar.dll [2010.10.18 20:36:19 \| 000,000,038 \| ---- \| C] () -- C:\Windows\avisplitter.ini [2010.10.18 20:36:18 \| 000,790,528 \| ---- \| C] () -- C:\Windows\System32\xvidcore.dll [2010.10.18 20:36:18 \| 000,134,144 \| ---- \| C] () -- C:\Windows\System32\xvidvfw.dll [2010.10.18 20:36:18 \| 000,108,032 \| ---- \| C] () -- C:\Windows\System32\ff_vfw.dll [2010.09.30 15:22:08 \| 000,000,794 \| ---- \| C] () -- C:\Windows\Removes.ini [2010.09.30 00:48:11 \| 000,001,684 \| ---- \| C] () -- C:\Windows\System32\RTSLCS.dll [2010.09.29 19:42:56 \| 000,066,048 \| ---- \| C] () -- C:\Windows\System32\PrintBrmUi.exe [2010.09.29 19:14:42 \| 000,341,432 \| ---- \| C] () -- C:\Windows\System32\perfi00A.dat [2010.09.29 19:14:41 \| 000,745,436 \| ---- \| C] () -- C:\Windows\System32\perfh00A.dat [2010.09.29 19:14:41 \| 000,157,482 \| ---- \| C] () -- C:\Windows\System32\perfc00A.dat [2010.09.29 19:14:41 \| 000,041,390 \| ---- \| C] () -- C:\Windows\System32\perfd00A.dat ========== Files - Unicode (All) ========== [2012.07.14 17:37:53 \| 000,000,000 \| ---D \| M](C:\Users\Administrator\Desktop\memories?) -- C:\Users\Administrator\Desktop\memories☻ [2012.06.17 23:56:55 \| 000,000,000 \| ---D \| C](C:\Users\Administrator\Desktop\memories?) -- C:\Users\Administrator\Desktop\memories☻ ========== Alternate Data Streams ========== @Alternate Data Stream - 127 bytes -> C:\ProgramData\TEMP:D1B5B4F1 < End of report > [Link mogu videti samo ulogovani korisnici]

Profil

TwinHeadedEagle Poslao: 15 Jul 2012 13:32 Idi na vrh
offline TwinHeadedEagle Anti Malware Fighter Rank 2 Pridružio: 09 Avg 2011 Poruke: 15879 Gde živiš: Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Pozdrav, cvetkopopovic Potrebno je da ponovo ispratis uputstvo za 32-bitni Windows, i da nam dostavis odgovarajuce logove, greskom si ispratio uputstvo za 64-bitni Windows [Link mogu videti samo ulogovani korisnici] Na racunaru imas instalirana dva antivirusa, sto moze biti jedan od uzroka sporog rada racunara. Otidji u Control Panel i obrisi jedan od ova dva: - ESET - Symantec Antvirus

Profil

cvetkopopovic Poslao: 30 Jul 2012 14:19 Idi na vrh
offline cvetkopopovic Novi MyCity građanin Pridružio: 14 Jul 2012 Poruke: 2	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Uloguj se preko Facebooka da bi skinuo fajl: . DDS (Ver_2011-08-26.01) - NTFSx86 Internet Explorer: 9.0.7930.16406 BrowserJavaVersion: 10.5.1 Run by Administrator at 11:29:44 on 2012-07-30 Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.512.67 [GMT 2:00] . SP: Windows Defender Enabled/Outdated {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . ============== Running Processes =============== . C:\Windows\system32\wininit.exe C:\Windows\system32\lsm.exe C:\Windows\system32\svchost.exe -k DcomLaunch C:\Windows\system32\svchost.exe -k RPCSS C:\Windows\system32\Ati2evxx.exe C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted C:\Windows\system32\svchost.exe -k netsvcs C:\Windows\system32\svchost.exe -k LocalService C:\Windows\system32\svchost.exe -k NetworkService C:\Windows\System32\spoolsv.exe C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe C:\Windows\system32\Ati2evxx.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\ESET\ESET Smart Security\ekrn.exe C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation c:\PROGRA~1\mcafee\SITEAD~1\mcsacore.exe C:\Program Files\Raxco\PerfectDisk\PDAgent.exe C:\Windows\system32\rundll32.exe C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe C:\Windows\system32\svchost.exe -k imgsvc C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted C:\Windows\system32\taskhost.exe C:\Windows\system32\taskhost.exe C:\Windows\system32\sppsvc.exe C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE C:\Windows\system32\Dwm.exe C:\Windows\Explorer.EXE C:\Program Files\BillP Studios\WinPatrol\WinPatrol.exe C:\Program Files\PowerISO\PWRISOVM.EXE C:\Program Files\ESET\ESET Smart Security\egui.exe C:\Program Files\Analog Devices\SoundMAX\SMTray.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe C:\Program Files\iTunes\iTunesHelper.exe C:\Win\lsass.exe C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe C:\Program Files\Common Files\Java\Java Update\jusched.exe C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Microsoft Office\Office14\MSOSYNC.EXE C:\Program Files\Windows Sidebar\sidebar.exe C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe C:\Program Files\iPod\bin\iPodService.exe C:\Windows\System32\svchost.exe -k secsvcs C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\msiexec.exe c:\PROGRA~1\mcafee\SITEAD~1\saui.exe C:\Windows\system32\UI0Detect.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\rundll32.exe C:\Users\Administrator\AppData\Local\Google\Chrome\Application\chrome.exe C:\Windows\system32\taskeng.exe C:\Windows\system32\conhost.exe C:\Windows\system32\wbem\wmiprvse.exe . ============== Pseudo HJT Report =============== . uSearch Page = [Link mogu videti samo ulogovani korisnici] uStart Page = [Link mogu videti samo ulogovani korisnici] mSearch Page = [Link mogu videti samo ulogovani korisnici] uInternet Settings,ProxyOverride = .local;<local> uURLSearchHooks: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll mURLSearchHooks: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll BHO: Ironsource LTD Helper Object: {25927741-5e5b-4d27-8d8b-9188fe64373f} - c:\program files\ironsource\searchya\1.5.13.0\bh\searchya.dll BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~4\office14\GROOVEEX.DLL BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\oracle\javafx 2.1 runtime\bin\ssv.dll BHO: McAfee SiteAdvisor BHO: {b164e929-a1b6-4a06-b104-2cd0e90a88ff} - c:\progra~1\mcafee\sitead~1\mcieplg.dll BHO: Office Document Cache Handler: {b4f3a835-0e21-4959-ba22-42b3008e02ff} - c:\progra~1\micros~4\office14\URLREDIR.DLL BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\oracle\javafx 2.1 runtime\bin\jp2ssv.dll TB: McAfee SiteAdvisor Toolbar: {0ebbbe48-bad4-4b4c-8e5a-516abecae064} - c:\progra~1\mcafee\sitead~1\mcieplg.dll TB: SearchYa Toolbar: {33aa308b-b565-4376-ac66-59ee9b6ad13e} - c:\program files\ironsource\searchya\1.5.13.0\searchyaTlbr.dll uRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -startup uRun: [Device Detector] DevDetect.exe -autorun uRun: [Google Update] "c:\users\administrator\appdata\local\google\update\GoogleUpdate.exe" /c uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized uRun: [OfficeSyncProcess] "c:\program files\microsoft office\office14\MSOSYNC.EXE" uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun mRun: [WinPatrol] c:\program files\billp studios\winpatrol\winpatrol.exe -expressboot mRun: [PWRISOVM.EXE] c:\program files\poweriso\PWRISOVM.EXE mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice mRun: [BCSSync] "c:\program files\microsoft office\office14\BCSSync.exe" /DelayServices mRun: [Smapp] c:\program files\analog devices\soundmax\SMTray.exe mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime mRun: [iTunesHelper] "c:\program files\itunes\iTunesHelper.exe" mRun: [run32] c:\win\lsass.exe mRun: [ccApp] "c:\program files\common files\symantec shared\ccApp.exe" mRun: [SSDMonitor] c:\program files\common files\pc tools\smonitor\SSDMonitor.exe mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe" StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\interv~1.lnk - c:\program files\intervideo\common\bin\WinCinemaMgr.exe StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe uPolicies-explorer: NoResolveTrack = 1 (0x1) mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0) mPolicies-system: EnableInstallerDetection = 0 (0x0) mPolicies-system: EnableLUA = 0 (0x0) mPolicies-system: EnableSecureUIAPaths = 0 (0x0) mPolicies-system: EnableUIADesktopToggle = 0 (0x0) mPolicies-system: EnableVirtualization = 0 (0x0) mPolicies-system: PromptOnSecureDesktop = 0 (0x0) mPolicies-system: SynchronousMachineGroupPolicy = 0 (0x0) mPolicies-system: SynchronousUserGroupPolicy = 0 (0x0) dPolicies-explorer: NoResolveTrack = 1 (0x1) IE: E&xport to Microsoft Excel - c:\progra~1\micros~4\office14\EXCEL.EXE/3000 IE: Se&nd to OneNote - c:\progra~1\micros~4\office14\ONBttnIE.dll/105 IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office14\ONBttnIE.dll IE: {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - {FFFDC614-B694-4AE6-AB38-5D6374584B52} - c:\program files\microsoft office\office14\ONBttnIELinkedNotes.dll IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici]* DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici] DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici] TCP: DhcpNameServer = 192.168.1.1 TCP: Interfaces\{2869E069-62EE-4E4B-98CD-2269E7DBC995} : NameServer = 194.247.192.33,194.247.192.1 TCP: Interfaces\{8B1B4DFE-90DC-4294-97CB-37BFE5D70DD5} : DhcpNameServer = 192.168.1.1 TCP: Interfaces\{ED9E7F8A-EDEA-4715-9260-461719E1BD3A} : DhcpNameServer = 192.168.1.1 TCP: Interfaces\{FC173EB9-3A20-44D1-9284-4669829A660F} : DhcpNameServer = 192.168.1.1 Filter: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - c:\program files\common files\microsoft shared\office14\MSOXMLMF.DLL Handler: dssrequest - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll Handler: sacore - {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\progra~1\mcafee\sitead~1\McIEPlg.dll Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL Notify: NavLogon - STS: Windows DreamScene: {e31004d1-a431-41b8-826f-e902f9d95c81} - %SystemRoot%\System32\DreamScene.dll SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~4\office14\GROOVEEX.DLL IFEO: notepad.exe - "c:\program files\notepad2\Notepad2.exe" /z . ================= FIREFOX =================== . FF - ProfilePath - c:\users\administrator\appdata\roaming\mozilla\firefox\profiles\r2yk6h25.default\ FF - prefs.js: browser.search.defaulturl - [Link mogu videti samo ulogovani korisnici]{searchTerms} FF - prefs.js: browser.search.selectedEngine - Secure Search FF - prefs.js: browser.startup.homepage - [Link mogu videti samo ulogovani korisnici] FF - prefs.js: keyword.URL - [Link mogu videti samo ulogovani korisnici] FF - component: c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll FF - plugin: c:\progra~1\micros~4\office14\NPAUTHZ.DLL FF - plugin: c:\progra~1\micros~4\office14\NPSPWRAP.DLL FF - plugin: c:\program files\java\jre7\bin\npjpi170_05.dll FF - plugin: c:\program files\mcafee\siteadvisor\NPMcFFPlg32.dll FF - plugin: c:\program files\mozilla firefox\plugins\npFoxitReaderPlugin.dll FF - plugin: c:\program files\oracle\javafx 2.1 runtime\bin\plugin2\npjp2.dll FF - plugin: c:\users\administrator\appdata\local\google\update\1.3.21.115\npGoogleUpdate3.dll FF - plugin: c:\users\administrator\appdata\roaming\mozilla\firefox\profiles\r2yk6h25.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\plugins\np-mswmp.dll FF - plugin: c:\users\administrator\appdata\roaming\mozilla\firefox\profiles\r2yk6h25.default\extensions\mupdf@ccxvii.net\plugins\npmupdf.dll FF - plugin: c:\windows\system32\npDeployJava1.dll FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd} FF - Ext: Skype extension: {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} - c:\program files\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A} FF - Ext: Java Console: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} FF - Ext: Babylon: [Link mogu videti samo ulogovani korisnici] - c:\program files\mozilla firefox\extensions\ffxtlbr@babylon.com FF - Ext: Adblock Plus: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} - %profile%\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d} FF - Ext: BetterPrivacy: {d40f5e7b-d2cf-4856-b441-cc613eeffbe3} - %profile%\extensions\{d40f5e7b-d2cf-4856-b441-cc613eeffbe3} FF - Ext: Ctrl-Tab: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\ctrl-tab@design-noir.de FF - Ext: Download status: {9fb8c270-7124-11dd-ad8b-0800200c9a66} - %profile%\extensions\{9fb8c270-7124-11dd-ad8b-0800200c9a66} FF - Ext: Download Statusbar: {D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} - %profile%\extensions\{D4DD63FA-01E4-46a7-B6B1-EDAB7D6AD389} FF - Ext: Flagfox: {1018e4d6-728f-4b20-ad56-37578a4de76b} - %profile%\extensions\{1018e4d6-728f-4b20-ad56-37578a4de76b} FF - Ext: Flashblock: {3d7eb24f-2740-49df-8937-200b1cc08f8a} - %profile%\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a} FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781} FF - Ext: Interclue: {c33c5b47-69c8-45a4-a5e0-af85bbe628dd} - %profile%\extensions\{c33c5b47-69c8-45a4-a5e0-af85bbe628dd} FF - Ext: Linkification: {35106bca-6c78-48c7-ac28-56df30b51d2a} - %profile%\extensions\{35106bca-6c78-48c7-ac28-56df30b51d2a} FF - Ext: Make Link: {0B6B0D55-DFAC-4006-AEE6-25667F55A2A8} - %profile%\extensions\{0B6B0D55-DFAC-4006-AEE6-25667F55A2A8} FF - Ext: MR Tech Toolkit: {9669CC8F-B388-42FE-86F4-CB5E7F5A8BDC} - %profile%\extensions\{9669CC8F-B388-42FE-86F4-CB5E7F5A8BDC} FF - Ext: Quick Dictionary Lookup: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\lexilook@lexiology.com FF - Ext: QuickWiki: {EE223D7A-F30F-11DD-8F0A-D2AD55D89593} - %profile%\extensions\{EE223D7A-F30F-11DD-8F0A-D2AD55D89593} FF - Ext: ReloadEvery: {888d99e7-e8b5-46a3-851e-1ec45da1e644} - %profile%\extensions\{888d99e7-e8b5-46a3-851e-1ec45da1e644} FF - Ext: RemoveTabs: {41a40cb1-aa9e-47c6-a207-66b9f5875870} - %profile%\extensions\{41a40cb1-aa9e-47c6-a207-66b9f5875870} FF - Ext: Stylish: {46551EC9-40F0-4e47-8E18-8E5CF550CFB8} - %profile%\extensions\{46551EC9-40F0-4e47-8E18-8E5CF550CFB8} FF - Ext: Tab Scope: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\tabscope@xuldev.org FF - Ext: Undo Closed Tabs Button: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\undoclosedtabsbutton@supernova00.biz FF - Ext: United States English Spellchecker: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\en-US@dictionaries.addons.mozilla.org FF - Ext: ColorfulTabs: {0545b830-f0aa-4d7e-8820-50a4629a56fe} - %profile%\extensions\{0545b830-f0aa-4d7e-8820-50a4629a56fe} FF - Ext: Navigational Sounds: {d84a846d-f7cb-4187-a408-b171020e8940} - %profile%\extensions\{d84a846d-f7cb-4187-a408-b171020e8940} FF - Ext: NASA Night Launch: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\nasanightlaunch@example.com FF - Ext: MuPDF: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\mupdf@ccxvii.net FF - Ext: iTunesFox: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\iTunesFox@sjcmankimo.tw FF - Ext: HTTPS-Everywhere: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\https-everywhere@eff.org FF - Ext: Cookie Monster: {45d8ff86-d909-11db-9705-005056c00008} - %profile%\extensions\{45d8ff86-d909-11db-9705-005056c00008} FF - Ext: YesScript: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\yesscript@userstyles.org FF - Ext: Download Manager Tweak: {F8A55C97-3DB6-4961-A81D-0DE0080E53CB} - %profile%\extensions\{F8A55C97-3DB6-4961-A81D-0DE0080E53CB} FF - Ext: ST-Eng7 Community Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - %profile%\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} FF - Ext: searchya.com: [Link mogu videti samo ulogovani korisnici] - %profile%\extensions\ffxtlbr@searchya.com FF - Ext: McAfee SiteAdvisor: {4ED1F68A-5463-4931-9384-8FFF5ED91D92} - c:\program files\mcafee\SiteAdvisor . ---- FIREFOX POLICIES ---- FF - user.js: extensions.searchya_i.hmpg - true FF - user.js: extensions.searchya_i.hmpgUrl - [Link mogu videti samo ulogovani korisnici] FF - user.js: extensions.searchya_i.dfltSrch - true FF - user.js: extensions.searchya_i.srchPrvdr - SearchYa! FF - user.js: extensions.searchya_i.dnsErr - true FF - user.js: extensions.searchya_i.newTab - true FF - user.js: extensions.searchya_i.newTabUrl - [Link mogu videti samo ulogovani korisnici] FF - user.js: extensions.searchya_i.tlbrSrchUrl - [Link mogu videti samo ulogovani korisnici] FF - user.js: extensions.searchya_i.id - 40080cff00000000000000055d0e0961 FF - user.js: extensions.searchya_i.instlDay - 15498 FF - user.js: extensions.searchya_i.vrsn - 1.5.13.0 FF - user.js: extensions.searchya_i.vrsni - 1.5.13.0 FF - user.js: extensions.searchya_i.vrsnTs - 1.5.13.012:35:06 FF - user.js: extensions.searchya_i.prtnrId - ironsrc FF - user.js: extensions.searchya_i.prdct - searchya FF - user.js: extensions.searchya_i.aflt - dcom FF - user.js: extensions.searchya_i.smplGrp - none FF - user.js: extensions.searchya_i.tlbrId - base FF - user.js: extensions.searchya_i.instlRef - dcom-100 FF - user.js: extensions.searchya_i.dfltLng - FF - user.js: extensions.searchya_i.excTlbr - false . ============= SERVICES / DRIVERS =============== . S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888] S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [2010-10-18 27192] . =============== Created Last 30 ================ . 2012-07-30 09:18:27 -------- d-----w- c:\program files\GUM3B0F.tmp 2012-07-06 08:57:27 -------- d-sh--w- C:\found.004 2012-06-30 13:49:29 -------- d-----w- c:\program files\Oracle 2012-06-30 13:49:10 772504 ----a-w- c:\windows\system32\npDeployJava1.dll . ==================== Find3M ==================== . 2012-05-04 17:29:16 687504 ----a-w- c:\windows\system32\deployJava1.dll . ============= FINISH: 11:33:38,27 =============== [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici] [Link mogu videti samo ulogovani korisnici]

Profil

TwinHeadedEagle Poslao: 30 Jul 2012 15:50 Idi na vrh
offline TwinHeadedEagle Anti Malware Fighter Rank 2 Pridružio: 09 Avg 2011 Poruke: 15879 Gde živiš: Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Poz Korak 1 Preuzmi sUBs-ov ComboFix sa sljedeće adrese na Desktop: Bleeping Computer Klikni desnim tasterom na link i odaberi opciju Save Target As... (Save Link As..., Save Linked Content As... ili sličnu); Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati fajl, odaberi Desktop i klikni Save. Kada preuzimanje programa bude završeno: deaktiviraj zaštitni softver (uputstvo); zatvori pokrenute programe; dvoklikom pokreni program ComboFix; u prozoru koji se otvori klikni "I Agree". U toku rada, ComboFix će:provjeriti postoji li novija verzija programa: klikni Yes ako bude ponuđeno preuzimanje iste.ako Recovery Console nije instalirana, ponuditi instalaciju: obavezno prihvati klikom na Yes i isprati postupak.postaviti/dati određeni broj upita/obaveštenja: prihvati klikom na Yes ili OK.po potrebi, restartovati Windows (više puta); na kraju rada, otvoriti Notepad sa izveštajem o skeniranju. Iskopiraj izvještaj koji je ComboFix napravio u temu na forumu: klikni desnim tasterom miša u prozor Notepad-a i izaberi Select All; klikni desnim tasterom miša na obilježeni tekst i izaberi Copy; klikni desnim tasterom miša u polje za pisanje poruke i izaberi Paste. Napomena:Izvještaj će biti sačuvan pod nazivom ComboFix.txt na sistemskoj particiji (tipična lokacija: C:\ComboFix.txt); Ukoliko nakon slanja poruke primjetiš da izvještaj nije kompletan, iskoristi opciju Prikači fajl za prilaganje fajla C:\ComboFix.txt uz poruku. Korak 2 Preuzmi MCShield sa sljedeće adrese: [Link mogu videti samo ulogovani korisnici] Instaliraj MCShield i sačekaj da se završi uvodno skeniranje. Kad se završi uvodno skeniranje, ubacuj sve USB memorijske uređaje redom u USB port i svaki zadrži u portu dok MCShield ne izbaci poruku da je skeniranje završeno. Ukoliko imaš više USB uređaja, zabilježi negdje kojim su redom ubacivani. Objašnjenje: U USB memorijske uređaje spadaju svi oni uređaji koji po priključivanju na kompjuter dobijaju svoju oznaku particije. Tu spadaju USB flash drajvovi, eksterni hard-diskovi, memorijske kartice, MP3 i MP4 plejeri, neki mobilni telefoni, neki GPS (navigacioni) uređaji itd. Idi na Start -> All Programs -> MCShield -> Logs -> AllScans Otvoriće ti se izvještaj u Notepad-u čiji sadržaj treba da postaviš u poruku Korak 3 Ponovo pokreni OTL, klikni na Run scan i postavi mi svez OTL.txt Korak 4 Ponovo pokreni DDS, nakon skeniranja izbaci ce ti dva izvestaja, prikaci mi Attach.txt

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Spor rad sistema

Ko je trenutno na forumu

Ukupno su 837 korisnika na forumu :: 13 registrovanih, 1 sakriven i 823 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: 4. Ozrenska, Bobrock1, Bojan85, cikadeda, Fabius, GrobarPovratak, IQ116, kaskadija, ljubo70, Mane88, Shilok, UAV operator, vidra1

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by