reklame i usporen internet

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Pozdrav!
Ćerka prijateljice je na mom laptopu spremala neku prezentaciju (powerpoint) za školu. Pretpostavljam da je skidala sve i svašta za te potrebe i od tada su počele da mi iskaču raznorazne reklame i internet mi radi puno sporije. Od zaštite imam samo AVG i ništa drugo,jer ja zaista pazim na koje sajtove ulazim .(AVG nije ništa detektovao)-
Laptop je inače nov i radio je do sada bez mane.
Prilažem izveštaj:

Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 23-04-2015 02
Ran by User (administrator) on MIRJANA on 24-04-2015 08:17:24
Running from C:\Users\User\Downloads
Loaded Profiles: User (Available profiles: User)
Platform: Windows 7 Ultimate (X64) OS Language: English (United States)
Internet Explorer Version 8 (Default browser: Chrome)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: geekstogo.com/forum/topic/335081-frst-t.....scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgrsa.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgcsrva.exe
() C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe
(Intel Corporation) C:\Windows\System32\igfxCUIService.exe
(ASUS) C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AdminService.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(Intel Corporation) C:\Windows\System32\DptfParticipantProcessorService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyConfigTDPService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyCriticalService.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmService.exe
(AVG Secure Search) C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe
() C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\loggingserver.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Intel Corporation) C:\Windows\System32\DptfPolicyLpmServiceHelper.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Intel Corporation) C:\Windows\System32\igfxEM.exe
(Intel Corporation) C:\Windows\System32\igfxHK.exe
(Intel Corporation) C:\Windows\System32\igfxTray.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgui.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
() C:\Program Files (x86)\AVG Web TuneUp\vprot.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(AVG Secure Search) C:\Program Files (x86)\AVG Web TuneUp\avgcefrend.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [DptfPolicyLpmServiceHelper] => C:\Windows\system32\DptfPolicyLpmServiceHelper.exe [111488 2013-10-14] (Intel Corporation)
HKLM\...\Run: [AtherosBtStack] => C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [615584 2011-03-01] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] => C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-01] (Atheros Commnucations)
HKLM-x32\...\Run: [AVG_UI] => C:\Program Files (x86)\AVG\AVG2015\avgui.exe [3745232 2015-04-15] (AVG Technologies CZ, s.r.o.)
HKLM-x32\...\Run: [Adobe ARM] => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [959904 2013-12-21] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-03-06] (Intel Corporation)
HKLM-x32\...\Run: [vProt] => C:\Program Files (x86)\AVG Web TuneUp\vprot.exe [3033112 2015-03-20] ()
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [335232 2015-04-10] (Oracle Corporation)
HKU\S-1-5-21-2880687076-1870761582-3877499354-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31682144 2015-03-25] (Skype Technologies S.A.)
HKU\S-1-5-21-2880687076-1870761582-3877499354-1000\...\MountPoints2: {16cf70bd-d7de-11dd-a67e-806e6f6e6963} - E:\DriverPackSolution.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\drugi svetski rat - konacni trijumf SSSR-a.lnk [2015-04-22]
ShortcutTarget: drugi svetski rat - konacni trijumf SSSR-a.lnk -> C:\ProgramData\{080ed7c1-54f9-9b4b-080e-ed7c154f5f05}\drugi svetski rat - konacni trijumf SSSR-a.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = websearch.goodforsearch.info/?pid=2921&.....p;unqvl=86
HKU\S-1-5-21-2880687076-1870761582-3877499354-1000\Software\Microsoft\Internet Explorer\Main,Start Page = websearch.goodforsearch.info/?pid=2921&.....p;unqvl=86
HKU\S-1-5-21-2880687076-1870761582-3877499354-1000\Software\Microsoft\Internet Explorer\Main,Secondary Start Pages = google.rs/
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
SearchScopes: HKLM-x32 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> {8582134D-CA24-448A-BF4B-79C73F174FD7} URL = google.com/search?q={searchTerms}
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = mysearch.avg.com/search?cid={46D1D2F3-7060-4D13-BF45-89E41B5CE5E3}&mid=4b249c0bc39547cd925b7dfc3bbe5617-3026cfb0971093064fd5b83bed5deebd2091d33f&lang=en&ds=AVG&coid=avgtbavg&cmpid=0215pi&pr=fr&d=2015-03-20 05:37:49&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> {D3D5C58F-341B-4E17-A17B-BD502CCEF353} URL = bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-23] (Oracle Corporation)
BHO-x32: CIESpeechBHO Class -> {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} -> C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll [2011-03-01] (Atheros Commnucations)
BHO-x32: AVG Web TuneUp -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> C:\Program Files (x86)\AVG Web TuneUp\4.1.0.411\AVG Web TuneUp.dll [2015-03-20] (AVG)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-23] (Oracle Corporation)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2014-07-14] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2014-07-14] (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default
FF DefaultSearchEngine,S: WebSearch
FF DefaultSearchUrl: hxxp://websearch.goodforsearch.info/?pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86&l=1&q=
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: WebSearch
FF SelectedSearchEngine,S: WebSearch
FF Homepage: hxxp://websearch.goodforsearch.info/?pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
FF Keyword.URL: hxxp://websearch.goodforsearch.info/?pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86&l=1&q=
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_169.dll [2015-04-16] ()
FF Plugin: @java.com/DTPlugin,version=10.9.2 -> C:\Windows\system32\npDeployJava1.dll [2015-03-28] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll [2015-04-16] ()
FF Plugin-x32: @avg.com/AVG SiteSafety plugin,version=11.0.0.1,application/x-avg-sitesafety-plugin -> C:\Program Files (x86)\Common Files\AVG Secure Search\SiteSafetyInstaller\18.4.0\\npsitesafety.dll No File
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.30514.0\npctrl.dll [2014-05-13] ( Microsoft Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-18] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.26.9\npGoogleUpdate3.dll [2015-03-18] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2013-12-21] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2880687076-1870761582-3877499354-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-02-18] (Unity Technologies ApS)
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\searchplugins\avg-secure-search.xml [2015-03-20]
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\searchplugins\WebSearch.xml [2015-04-23]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\wtu-secure-search.xml [2015-03-20]
FF Extension: AVG Web TuneUp - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\avg@toolbar [2015-03-20]
FF Extension: Bing Search Engine - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\bingsearch.full@microsoft.com [2015-03-18]
FF Extension: UniDeals - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\d@A89oD.net [2015-04-23]
FF Extension: bestadblocker - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\Zy@mIO.org [2015-04-23]
FF Extension: Java Console - C:\Program Files (x86)\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA} [2015-04-23]
FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-21]

Chrome:
=======
CHR dev: Chrome dev build detected! <======= ATTENTION
CHR HomePage: Default -> hxxp://www.google.com/ig
CHR StartupUrls: Default -> "https://www.google.rs/?gws_rd=cr&ei=fV-1UpScA4eWtAawtoGYDw"
CHR DefaultSearchKeyword: Default -> google.rs_
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Profile: C:\Users\User\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Translate) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapbdbdomjkkjkaonfhkkikfgjllcleb [2015-03-20]
CHR Extension: (Google Slides) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-03-18]
CHR Extension: (Google Docs) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-03-18]
CHR Extension: (Google Drive) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-03-18]
CHR Extension: (YouTube) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-03-18]
CHR Extension: (TV) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\bppbpeijolfcampacpljolaegibfhjph [2015-03-20]
CHR Extension: (Google Search) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-03-18]
CHR Extension: (Logitech Smooth Scrolling) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk [2015-03-20]
CHR Extension: (YoWindow Weather) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\fanogbnclpilemkifpjeglokomebpnef [2015-03-20]
CHR Extension: (Google Sheets) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-03-18]
CHR Extension: (Bookmark Manager) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-21]
CHR Extension: (Tweet Button for Chrome by Shareaholic) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\homldgnlpldcmdflhnabedgkgpmeanhd [2015-04-22]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-18]
CHR Extension: (Skype Click to Call) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-03-18]
CHR Extension: (Google Mail Checker) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2015-03-20]
CHR Extension: (Google Wallet) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-03-18]
CHR Extension: (Gmail) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-18]
CHR HKU\S-1-5-21-2880687076-1870761582-3877499354-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2014-07-14]

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 ASNB4LDRSvc; C:\Program Files (x86)\ASUS\Wireless Console 3\ASNB4LDRSvc.exe [33912 2014-03-11] (ASUS)
R2 AtherosSvc; C:\Program Files (x86)\Bluetooth Suite\adminservice.exe [76448 2011-03-01] (Atheros Commnucations) [File not signed]
R2 avgfws; C:\Program Files (x86)\AVG\AVG2015\avgfws.exe [1517480 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 AVGIDSAgent; C:\Program Files (x86)\AVG\AVG2015\avgidsagent.exe [3438032 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 avgwd; C:\Program Files (x86)\AVG\AVG2015\avgwdsvc.exe [311792 2015-04-15] (AVG Technologies CZ, s.r.o.)
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1390176 2014-07-14] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1767520 2014-07-14] (Microsoft Corporation)
R2 DptfParticipantProcessorService; C:\Windows\system32\DptfParticipantProcessorService.exe [115656 2013-10-14] (Intel Corporation)
R2 DptfPolicyConfigTDPService; C:\Windows\system32\DptfPolicyConfigTDPService.exe [118728 2013-10-14] (Intel Corporation)
R2 DptfPolicyCriticalService; C:\Windows\system32\DptfPolicyCriticalService.exe [148160 2013-10-14] (Intel Corporation)
R2 DptfPolicyLpmService; C:\Windows\system32\DptfPolicyLpmService.exe [124904 2013-10-14] (Intel Corporation)
R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [315352 2014-06-13] (Intel Corporation)
R2 vToolbarUpdater18.4.0; C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\18.4.0\ToolbarUpdater.exe [1875480 2015-03-20] (AVG Secure Search)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2009-07-14] (Microsoft Corporation)
R2 WtuSystemSupport; C:\Program Files (x86)\AVG Web TuneUp\WtuSystemSupport.exe [620056 2015-03-20] ()

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R1 Avgdiska; C:\Windows\System32\DRIVERS\avgdiska.sys [162784 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgfwfd; C:\Windows\System32\DRIVERS\avgfwd6a.sys [67040 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 AVGIDSDriver; C:\Windows\System32\DRIVERS\avgidsdrivera.sys [284128 2015-04-09] (AVG Technologies CZ, s.r.o.)
R0 AVGIDSHA; C:\Windows\System32\DRIVERS\avgidsha.sys [213984 2015-03-11] (AVG Technologies CZ, s.r.o.)
R1 Avgldx64; C:\Windows\System32\DRIVERS\avgldx64.sys [256992 2015-04-15] (AVG Technologies CZ, s.r.o.)
R0 Avgloga; C:\Windows\System32\DRIVERS\avgloga.sys [344544 2015-03-11] (AVG Technologies CZ, s.r.o.)
R0 Avgmfx64; C:\Windows\System32\DRIVERS\avgmfx64.sys [137184 2015-04-03] (AVG Technologies CZ, s.r.o.)
R0 Avgrkx64; C:\Windows\System32\DRIVERS\avgrkx64.sys [40928 2015-03-20] (AVG Technologies CZ, s.r.o.)
R1 Avgtdia; C:\Windows\System32\DRIVERS\avgtdia.sys [291296 2015-04-07] (AVG Technologies CZ, s.r.o.)
R3 DptfDevDram; C:\Windows\System32\DRIVERS\DptfDevDram.sys [145640 2013-10-14] (Intel Corporation)
R3 DptfDevPch; C:\Windows\System32\DRIVERS\DptfDevPch.sys [116752 2013-10-14] (Intel Corporation)
R3 DptfDevProc; C:\Windows\System32\DRIVERS\DptfDevProc.sys [290256 2013-10-14] (Intel Corporation)
R3 DptfManager; C:\Windows\System32\DRIVERS\DptfManager.sys [494808 2013-10-14] (Intel Corporation)
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [100312 2013-12-10] (Intel Corporation)

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-24 08:17 - 2015-04-24 08:18 - 00021195 _____ () C:\Users\User\Downloads\FRST.txt
2015-04-24 08:17 - 2015-04-24 08:17 - 00000000 ____D () C:\FRST
2015-04-24 08:16 - 2015-04-24 08:16 - 02099712 _____ (Farbar) C:\Users\User\Downloads\FRST64.exe
2015-04-24 08:13 - 2015-04-24 08:13 - 00000000 ___RD () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2015-04-23 10:44 - 2015-04-23 10:44 - 00000000 ____D () C:\Users\User\AppData\Roaming\java
2015-04-23 10:43 - 2015-04-23 10:43 - 00098216 _____ (Oracle Corporation) C:\Windows\SysWOW64\WindowsAccessBridge-32.dll
2015-04-23 10:43 - 2015-04-23 10:43 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-04-23 10:42 - 2015-04-23 10:42 - 00000000 ____D () C:\ProgramData\Oracle
2015-04-23 10:37 - 2015-04-23 10:37 - 00561576 _____ (Oracle Corporation) C:\Users\User\Downloads\chromeinstall-8u45.exe
2015-04-23 08:13 - 2015-04-23 08:13 - 17090992 _____ (Sun Microsystems, Inc.) C:\Users\User\Downloads\jre-6u45-windows-i586 (1).exe
2015-04-23 08:12 - 2015-04-23 08:12 - 00000000 ____D () C:\Windows\system32\appmgmt
2015-04-23 08:09 - 2015-04-23 08:09 - 00000000 ____D () C:\Users\User\AppData\Roaming\MPC-HC
2015-04-23 08:05 - 2015-04-23 08:05 - 00000000 ____D () C:\ProgramData\Sun
2015-04-23 08:00 - 2015-04-23 10:42 - 00000000 ____D () C:\Program Files (x86)\Java
2015-04-23 08:00 - 2015-04-23 08:00 - 00162224 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaws.exe
2015-04-23 08:00 - 2015-04-23 08:00 - 00149936 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\javaw.exe
2015-04-23 08:00 - 2015-04-23 08:00 - 00149936 _____ (Sun Microsystems, Inc.) C:\Windows\SysWOW64\java.exe
2015-04-23 07:59 - 2015-04-23 07:59 - 17090992 _____ (Sun Microsystems, Inc.) C:\Users\User\Downloads\jre-6u45-windows-i586.exe
2015-04-23 07:45 - 2015-04-23 07:47 - 00004608 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-04-23 07:44 - 2015-04-23 07:44 - 00003672 _____ () C:\Windows\System32\Tasks\klcp_update
2015-04-23 07:44 - 2015-04-23 07:44 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
2015-04-23 07:44 - 2015-04-23 07:44 - 00000000 ____D () C:\Program Files (x86)\K-Lite Codec Pack
2015-04-23 07:43 - 2015-04-23 07:43 - 35431386 _____ ( ) C:\Users\User\Downloads\K-Lite_Codec_Pack_1110_Full.exe
2015-04-23 06:49 - 2015-04-23 06:49 - 00000000 ____D () C:\Users\User\AppData\Roaming\NVIDIA
2015-04-23 06:49 - 2015-04-23 06:49 - 00000000 ____D () C:\ProgramData\GRETECH
2015-04-23 06:45 - 2015-04-23 06:45 - 00259032 _____ () C:\Users\User\Downloads\coreaacSetup.exe
2015-04-23 06:44 - 2015-04-23 06:44 - 00000000 ____D () C:\Users\User\AppData\Roaming\GRETECH
2015-04-22 21:34 - 2015-04-23 22:26 - 00000000 ____D () C:\Program Files (x86)\UniDeals
2015-04-22 21:34 - 2015-04-22 21:35 - 00000000 ____D () C:\Program Files (x86)\bestadblocker
2015-04-22 21:34 - 2015-04-22 21:34 - 00000000 ____D () C:\ProgramData\8226692290686905384
2015-04-22 21:34 - 2015-04-22 21:34 - 00000000 ____D () C:\Program Files (x86)\Tweet Button for Chrome by Shareaholic
2015-04-22 21:33 - 2015-04-23 22:24 - 00000000 ____D () C:\ProgramData\{080ed7c1-54f9-9b4b-080e-ed7c154f5f05}
2015-04-22 21:33 - 2015-04-23 21:33 - 00000396 _____ () C:\Windows\Tasks\Bidaily Synchronize Task.job
2015-04-22 21:33 - 2015-04-22 21:33 - 00003306 _____ () C:\Windows\System32\Tasks\Bidaily Synchronize Task
2015-04-22 21:33 - 2015-04-22 21:33 - 00000000 ____D () C:\ProgramData\heakkeipmpalngbklmfpdcjcomlccele
2015-04-22 12:06 - 2015-04-22 12:08 - 327964808 _____ (Microsoft Corporation) C:\Users\User\Downloads\X16-32694.exe
2015-04-21 20:08 - 2015-04-23 08:00 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-04-19 22:46 - 2015-04-19 22:46 - 00000000 ____D () C:\Users\User\AppData\Local\CrashDumps
2015-04-19 00:24 - 2015-04-19 00:25 - 00002337 _____ () C:\Users\User\Downloads\software_removal_tool.log
2015-04-18 20:04 - 2015-04-18 20:04 - 01073440 _____ () C:\Users\User\Downloads\SIMc-InnerChair.rar
2015-04-18 20:04 - 2015-04-18 20:04 - 01048532 _____ () C:\Users\User\Downloads\SIMc-InnerLoves.rar
2015-04-18 20:04 - 2015-04-18 20:04 - 00946037 _____ () C:\Users\User\Downloads\SIMc-InnerBookc.rar
2015-04-18 20:04 - 2015-04-18 20:04 - 00890475 _____ () C:\Users\User\Downloads\SIMc-Inner-4Fountain.rar
2015-04-18 20:04 - 2015-04-18 20:04 - 00684623 _____ () C:\Users\User\Downloads\SIMc-Inner-3Plants.rar
2015-04-18 20:04 - 2015-04-18 20:04 - 00650640 _____ () C:\Users\User\Downloads\SIMc-InnerCTbl.rar
2015-04-18 20:04 - 2015-04-18 20:04 - 00522665 _____ () C:\Users\User\Downloads\SIMc-Inner-2Plants.rar
2015-04-18 20:04 - 2015-04-18 20:04 - 00210010 _____ () C:\Users\User\Downloads\SIMc-Inner-2Deck.rar
2015-04-18 20:04 - 2015-04-18 20:04 - 00080968 _____ () C:\Users\User\Downloads\SIMc-InnerTerrain.rar
2015-04-15 13:06 - 2015-04-15 13:06 - 00256992 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgldx64.sys
2015-04-14 18:04 - 2015-04-14 18:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\JaiboGames
2015-04-14 18:01 - 2011-09-29 16:06 - 00000000 ____D () C:\Users\User\Desktop\Heroes of Hellas 3 Athens
2015-04-13 16:08 - 2015-04-13 16:08 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Silverlight
2015-04-13 16:08 - 2015-04-13 16:08 - 00000000 ____D () C:\Program Files\Microsoft Silverlight
2015-04-13 16:08 - 2015-04-13 16:08 - 00000000 ____D () C:\Program Files (x86)\Microsoft Silverlight
2015-04-12 13:14 - 2015-04-12 13:14 - 00000000 ____D () C:\Users\User\AppData\Roaming\Spark Plug Games
2015-04-12 13:14 - 2015-04-12 13:14 - 00000000 ____D () C:\Users\User\AppData\Local\Spark Plug Games
2015-04-12 13:14 - 2015-04-12 13:14 - 00000000 ____D () C:\ProgramData\TEMP
2015-04-12 11:59 - 2015-04-12 11:59 - 00000000 ____D () C:\Users\User\AppData\Roaming\AlawarEntertainment
2015-04-09 14:11 - 2015-04-09 14:11 - 00284128 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgidsdrivera.sys
2015-04-07 12:39 - 2015-04-07 12:39 - 00291296 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgtdia.sys
2015-04-03 11:17 - 2015-04-03 11:17 - 00286696 _____ () C:\Windows\Minidump\040315-20888-01.dmp
2015-04-03 09:34 - 2015-04-03 09:34 - 00137184 _____ (AVG Technologies CZ, s.r.o.) C:\Windows\system32\Drivers\avgmfx64.sys
2015-04-01 23:04 - 2015-04-01 23:04 - 00000144 _____ () C:\Windows\system32\{A6D608F0-0BDE-491A-97AE-5C4B05D86E01}.bat
2015-03-31 14:55 - 2015-03-31 14:55 - 00000000 ____D () C:\Users\Default\AppData\Roaming\TuneUp Software
2015-03-31 14:55 - 2015-03-31 14:55 - 00000000 ____D () C:\Users\Default User\AppData\Roaming\TuneUp Software
2015-03-29 21:37 - 2015-03-29 21:37 - 00000000 ____D () C:\Users\User\AppData\Roaming\Unity
2015-03-29 08:21 - 2015-03-29 08:25 - 00000000 ___DC () C:\Users\User\AppData\Local\MigWiz
2015-03-29 08:21 - 2015-03-29 08:21 - 00000000 ____H () C:\Users\User\Documents\Default.rdp
2015-03-29 08:08 - 2015-03-29 08:08 - 00010960 _____ () C:\Windows\DPINST.LOG
2015-03-28 16:21 - 2015-03-28 16:21 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ASUS
2015-03-28 16:21 - 2015-03-28 16:21 - 00000000 ____D () C:\Program Files (x86)\ASUS
2015-03-28 13:03 - 2015-03-28 13:03 - 01034216 _____ (Oracle Corporation) C:\Windows\system32\npDeployJava1.dll
2015-03-28 13:03 - 2015-03-28 13:03 - 00916456 _____ (Oracle Corporation) C:\Windows\system32\deployJava1.dll
2015-03-28 12:51 - 2015-03-28 12:51 - 00000000 ____D () C:\ProgramData\McAfee
2015-03-28 12:42 - 2015-04-23 10:50 - 00000000 ____D () C:\Users\User\AppData\Roaming\.minecraft
2015-03-28 12:42 - 2015-03-28 12:42 - 00002081 _____ () C:\Users\User\Desktop\Minecraft.lnk
2015-03-28 12:42 - 2015-03-28 12:42 - 00000000 ____D () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Minecraft
2015-03-28 10:21 - 2015-03-28 10:21 - 00000000 ____H () C:\Windows\system32\Drivers\Msft_User_WpdFs_01_09_00.Wdf

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-04-24 08:18 - 2015-03-18 18:52 - 00000000 ____D () C:\ProgramData\MFAData
2015-04-24 08:18 - 2009-07-14 07:13 - 00713888 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-04-24 08:15 - 2015-03-18 20:51 - 00000000 ____D () C:\Users\User\AppData\Roaming\Skype
2015-04-24 08:15 - 2015-03-18 16:00 - 00323643 _____ () C:\Windows\WindowsUpdate.log
2015-04-24 08:12 - 2015-03-20 17:32 - 00000035 _____ () C:\Users\Public\Documents\AtherosServiceConfig.ini
2015-04-24 08:12 - 2015-03-18 18:40 - 00000890 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-04-24 08:12 - 2009-07-14 07:08 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-04-24 08:12 - 2009-07-14 06:51 - 00029426 _____ () C:\Windows\setupact.log
2015-04-23 22:45 - 2015-03-18 18:40 - 00000894 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-04-23 22:45 - 2009-07-14 06:45 - 00017136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-04-23 22:45 - 2009-07-14 06:45 - 00017136 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-04-23 22:42 - 2015-03-18 19:08 - 00001246 _____ () C:\Windows\PFRO.log
2015-04-23 22:39 - 2015-03-18 18:54 - 00000965 _____ () C:\Users\Public\Desktop\AVG 2015.lnk
2015-04-23 22:39 - 2015-03-18 18:54 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVG
2015-04-23 22:26 - 2015-03-18 18:14 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-04-23 11:50 - 2009-07-14 07:09 - 00000000 ____D () C:\Windows\System32\Tasks\WPD
2015-04-23 07:42 - 2009-07-14 09:45 - 00000000 ___RD () C:\Users\Public\Recorded TV
2015-04-23 07:40 - 2009-07-14 05:20 - 00000000 __RHD () C:\Users\Public\Libraries
2015-04-23 06:48 - 2015-03-18 18:57 - 00001213 _____ () C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\GOM Player.lnk
2015-04-23 06:48 - 2015-03-18 18:57 - 00001189 _____ () C:\Users\Public\Desktop\GOM Player.lnk
2015-04-23 06:48 - 2015-03-18 18:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOM Player
2015-04-23 06:10 - 2015-03-18 17:47 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-04-19 09:55 - 2015-03-18 20:50 - 00000000 ____D () C:\ProgramData\Skype
2015-04-16 21:28 - 2015-03-18 18:14 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-04-16 21:28 - 2015-03-18 18:14 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-04-16 21:28 - 2015-03-18 18:14 - 00003768 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-04-16 19:11 - 2015-03-20 17:30 - 00000000 ____D () C:\Users\User\Documents\Bluetooth Folder
2015-04-07 20:06 - 2015-03-18 18:47 - 00000000 ____D () C:\Users\User\AppData\Local\Microsoft Help
2015-04-04 23:00 - 2015-03-20 17:04 - 00000000 ____D () C:\Users\User\AppData\Roaming\uTorrent
2015-04-03 11:17 - 2015-03-23 22:08 - 527890276 _____ () C:\Windows\MEMORY.DMP
2015-04-03 11:17 - 2015-03-23 22:08 - 00000000 ____D () C:\Windows\Minidump
2015-04-01 23:03 - 2015-03-20 06:38 - 00074336 _____ () C:\Windows\SysWOW64\debug.log
2015-03-29 07:46 - 2009-07-14 05:20 - 00000000 ____D () C:\Windows\system32\NDF

==================== Files in the root of some directories =======

2015-04-23 07:45 - 2015-04-23 07:47 - 0004608 _____ () C:\Users\User\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2015-03-18 16:18 - 2015-03-18 16:18 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some content of TEMP:
====================
C:\Users\User\AppData\Local\Temp\askToolbarInstaller.exe
C:\Users\User\AppData\Local\Temp\ExPromo.exe
C:\Users\User\AppData\Local\Temp\GomEncDnInstaller.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\SysWOW64\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-04-15 11:32

==================== End Of Log ============================
mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav.

Deinstaliraj sledece programe:

bestadblocker
Tweet Button for Chrome by Shareaholic


1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:

Start
closeprocesses:
Task: {C2494090-6157-4BC7-A5C5-48C00AB3B9AD} - System32\Tasks\Bidaily Synchronize Task => C:\ProgramData\{080ed7c1-54f9-9b4b-080e-ed7c154f5f05}\drugi svetski rat - konacni trijumf SSSR-a.exe
Task: C:\Windows\Tasks\Bidaily Synchronize Task.job => C:\ProgramData\{080ed7c1-54f9-9b4b-080e-ed7c154f5f05}\drugi svetski rat - konacni trijumf SSSR-a.exe
HKU\S-1-5-21-2880687076-1870761582-3877499354-1000\...\MountPoints2: {16cf70bd-d7de-11dd-a67e-806e6f6e6963} - E:\DriverPackSolution.exe
Startup: C:\Users\User\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\drugi svetski rat - konacni trijumf SSSR-a.lnk [2015-04-22]
ShortcutTarget: drugi svetski rat - konacni trijumf SSSR-a.lnk -> C:\ProgramData\{080ed7c1-54f9-9b4b-080e-ed7c154f5f05}\drugi svetski rat - konacni trijumf SSSR-a.exe (No File)
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://websearch.goodforsearch.info/?pid=2921&.....p;unqvl=86
HKU\S-1-5-21-2880687076-1870761582-3877499354-1000\Software\Microsoft\Internet Explorer\Main,Start Page = http://websearch.goodforsearch.info/?pid=2921&.....p;unqvl=86
SearchScopes: HKLM-x32 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
SearchScopes: HKLM-x32 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> DefaultScope {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> {95B7759C-8C7F-4BF1-B163-73684A933233} URL = https://mysearch.avg.com/search?cid={46D1D2F3-7060-4D13-BF45-89E41B5CE5E3}&mid=4b249c0bc39547cd925b7dfc3bbe5617-3026cfb0971093064fd5b83bed5deebd2091d33f&lang=en&ds=AVG&coid=avgtbavg&cmpid=0215pi&pr=fr&d=2015-03-20 05:37:49&v=4.1.0.411&pid=wtu&sg=&sap=dsp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2880687076-1870761582-3877499354-1000 -> {BB82DE59-BC4C-4172-9AC4-73315F71CFFE} URL = http://websearch.goodforsearch.info/?l=1&q={searchTerms}&pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
FF DefaultSearchEngine,S: WebSearch
FF DefaultSearchUrl: hxxp://websearch.goodforsearch.info/?pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86&l=1&q=
FF SearchEngineOrder.1: WebSearch
FF SearchEngineOrder.1,S: WebSearch
FF SearchEngineOrder.3: Bing
FF SelectedSearchEngine: WebSearch
FF SelectedSearchEngine,S: WebSearch
FF Homepage: hxxp://websearch.goodforsearch.info/?pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86
FF Keyword.URL: hxxp://websearch.goodforsearch.info/?pid=2921&r=2015/04/22&hid=4097535966205783424&lg=EN&cc=RS&unqvl=86&l=1&q=
FF SearchPlugin: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\searchplugins\WebSearch.xml [2015-04-23]
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\searchplugins\WebSearch.xml
FF Extension: Bing Search Engine - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\bingsearch.full@microsoft.com [2015-03-18]
FF Extension: UniDeals - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\d@A89oD.net [2015-04-23]
FF Extension: bestadblocker - C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\Zy@mIO.org [2015-04-23]
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\bingsearch.full@microsoft.com
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\d@A89oD.net
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\Extensions\Zy@mIO.org
CHR DefaultSuggestURL: Default -> {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggestRid}&xssi=t&q={searchTerms}&{google:inputType}{google:cursorPosition}{google:currentPageUrl}{google:pageClassification}{google:searchVersion}{google:sessionToken}{google:prefetchQuery}sugkey={google:suggestAPIKeyParameter}
CHR Extension: (Tweet Button for Chrome by Shareaholic) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\homldgnlpldcmdflhnabedgkgpmeanhd [2015-04-22]
CHR Extension: (Tweet Button for Chrome by Shareaholic) - C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Extensions\homldgnlpldcmdflhnabedgkgpmeanhd
CHR HKU\S-1-5-21-2880687076-1870761582-3877499354-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [fcfenmboojpjinhpgggodefccipikbpd] - https://clients2.google.com/service/update2/crx
emptytemp:
End

2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.




Korak 2



Preuzmi smeenk-ov zoek.zip ili zoek.rar () sa ovog ili ovog linka i sačuvaj ga na Desktop.

Raspakuj arhivu u neki folder (uputstvo), a zatim:

zatvori browser i ostale pokrenute programe;
privremeno deaktiviraj zaštitni softver ( ukoliko je to potrebno ) Uputstvo ;
dvoklikom pokreni zoek na ikonicu programa ;
pričekaj da se alat startuje ...


U beli okvir prozora iskopiraj sledeći tekst:


createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b


Klikni na dugme i pričekaj da se skeniranje završi.


zoek ce po potrebi, restartovati Windows a na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Napomena:Izveštaj će biti sačuvan pod nazivom zoek-results.log na sistemskoj particiji (tipična lokacija: C:\zoek-results.log)


Kopiraj sadrzaj tog loga u poruku.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Zoek.exe v5.0.0.0 Updated 23-04-2015
Tool run by User on 24-Apr-15 at 10:20:18.41.
Microsoft Windows 7 Ultimate 6.1.7600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\User\Desktop\New folder\zoek.scr [Scan all users] [Script inserted]

==== System Restore Info ======================

24-Apr-15 10:20:57 AM Zoek.exe System Restore Point Created Successfully.

==== Empty Folders Check ======================

C:\Users\User\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WtuSystemSupport deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\WtuSystemSupport deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\vToolbarUpdater18.4.0 deleted successfully
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\vToolbarUpdater18.4.0 deleted successfully

==== FireFox Fix ======================

ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default

user.js not found
---- Lines extensions.AeUVjeJ63EqBbMtx removed from prefs.js ----
user_pref("extensions.AeUVjeJ63EqBbMtx.epoch", "1429863704");
user_pref("extensions.AeUVjeJ63EqBbMtx.url", "http://film-racer.com/sync2/?q=hfZ9ofV9CShEAen0rTUGrihTB6lKDzt4oltjtNtVh7n0rjkEqdsGrjUHqds8tMFHhd9Fqja9r
---- Lines extensions.szyWu6MuM4DpMi3p removed from prefs.js ----
user_pref("extensions.szyWu6MuM4DpMi3p.epoch", "1429863704");
user_pref("extensions.szyWu6MuM4DpMi3p.url", "http://fellabooks.net/sync2/?q=hfZ9ofqUAMhHA7nMCyVUojs4rTwMg708BNmGWj8ikGhGheDUojw8rdnGrTw4rHr8rShIC7n0r
---- FireFox user.js and prefs.js backups ----

prefs__1034_.backup

==== Batch Command(s) Run By Tool======================


==== Deleting Files \ Folders ======================

C:\PROGRA~2\bestadblocker deleted
C:\PROGRA~2\Tweet Button for Chrome by Shareaholic deleted
C:\PROGRA~2\UniDeals deleted
C:\PROGRA~3\heakkeipmpalngbklmfpdcjcomlccele deleted
C:\PROGRA~3\{080ed7c1-54f9-9b4b-080e-ed7c154f5f05} deleted
C:\PROGRA~3\8226692290686905384 deleted
C:\PROGRA~2\Mozilla Firefox\browser\searchplugins\wtu-secure-search.xml deleted
C:\Users\User\AppData\Roaming\AlawarEntertainment deleted
C:\Users\User\AppData\Roaming\OpenCandy deleted
C:\PROGRA~3\AVG Web TuneUp deleted
C:\PROGRA~3\AVG Security Toolbar deleted
C:\PROGRA~3\AVG Secure Search deleted
C:\PROGRA~3\Package Cache deleted
C:\Users\User\AppData\LocalLow\AVG Web TuneUp deleted
C:\Windows\sysWoW64\config\systemprofile\AppData\LocalLow\AVG Web TuneUp deleted
C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\searchplugins\avg-secure-search.xml deleted
"C:\PROGRA~2\AVG Web TuneUp\avgcefrend.exe" deleted
"C:\PROGRA~2\AVG Web TuneUp\icudt.dll" deleted
"C:\PROGRA~2\AVG Web TuneUp\libcef.dll" deleted
"C:\PROGRA~2\AVG Web TuneUp\TBAPI.dll" deleted
"C:\PROGRA~2\AVG Web TuneUp\vprot.exe" deleted
"C:\Users\User\AppData\Local\AVG Web TuneUp\IE\cef_cache\Cookies" deleted
"C:\PROGRA~2\AVG Web TuneUp\locales\en-US.pak" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.4.0\avgdttbx.dll" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.4.0\log4cplusU.dll" deleted
"C:\Users\User\AppData\Local\AVG Web TuneUp" deleted
"C:\PROGRA~2\AVG Web TuneUp" not deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search" deleted
"C:\Users\User\AppData\Local\AVG Web TuneUp\IE" deleted
"C:\Users\User\AppData\Local\AVG Web TuneUp\IE\cef_cache" deleted
"C:\PROGRA~2\AVG Web TuneUp\locales" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\DNTInstaller\18.4.0" deleted
"C:\PROGRA~2\COMMON~1\AVG Secure Search\vToolbarUpdater\18.4.0" deleted

==== Firefox Extensions Registry ======================

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"DSE"="true" []

==== Firefox Extensions ======================

ProfilePath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default
- AVG Web TuneUp - %ProfilePath%\extensions\avg@toolbar

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Java Console - %AppDir%\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default
9AE02005247DA91AB1743F5208DBEF76 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll - Shockwave Flash
E59F2C1BBB20E70419A33CCAA727B747 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System


==== Deleted Firefox Extensions ======================

C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default\extensions\avg@toolbar deleted

==== Chromium Look ======================

Google Chrome Version: 42.0.2311.90 (Latest Stable version: 42.0.2311.90) [z-db]

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[14-Jul-14 07:22 PM]

Logitech Smooth Scrolling - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk
Bookmark Manager - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik
Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
Skype Click to Call - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

==== Chromium Startpages ======================

C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Preferences
"homepage": "http://www.msn.com/?pc=__PARAM__&ocid=__PARAM__DHP&osmkt=en-us",
"homepage": "http://www.google.com/ig",
"startup_urls": [ "https://www.google.rs/?gws_rd=cr&ei=fV-1UpScA4eWtAawtoGYDw" ]


==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="res://ieframe.dll/tabswelcome.htm"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
No DefaultScope Set For HKCU

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\AboutURLs]
"Tabs"="about:newtab"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{8582134D-CA24-448A-BF4B-79C73F174FD7} Google Url="https://www.google.com/search?q={searchTerms}"
{D3D5C58F-341B-4E17-A17B-BD502CCEF353} Bing Url="http://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox"

==== Deleting CLSID Registry Keys ======================

HKEY_USERS\S-1-5-21-2880687076-1870761582-3877499354-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_USERS\S-1-5-21-2880687076-1870761582-3877499354-1000\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233} deleted successfully

==== Deleting CLSID Registry Values ======================


==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{AA164BF8-11D2-CE28-1BD1-236D9A5C326F} deleted successfully
HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\AVG Web TuneUp deleted successfully

==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=537 folders=102 376629089 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\User\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\User\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\PROGRA~2\AVG Web TuneUp" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on 24-Apr-15 at 10:41:57.26 ======================

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ponovo pokreni Zoek sa ovom skriptom:


autoclean;
C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Preferences;f

I dostavi mi Fixlog.txt izvestaj.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Zoek.exe v5.0.0.0 Updated 23-04-2015
Tool run by User on 24-Apr-15 at 21:34:40.40.
Microsoft Windows 7 Ultimate 6.1.7600 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\User\Desktop\New folder\zoek.com [Scan all users] [Script inserted]

==== Older Logs ======================

C:\zoek-results2015-04-24-084157.log 11420 bytes

==== Empty Folders Check ======================

C:\Users\User\AppData\Local\VirtualStore deleted successfully

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Deleting Files \ Folders ======================

"C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Preferences" deleted

==== Firefox Extensions Registry ======================

[HKEY_CURRENT_USER\Software\Mozilla\Firefox\Extensions]
"DSE"="true" []

==== Firefox Extensions ======================

AppDir: C:\Program Files (x86)\Mozilla Firefox
- Java Console - %AppDir%\extensions\{CAFEEFAC-0016-0000-0045-ABCDEFFEDCBA}
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
- Skype Click to Call - %AppDir%\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi

==== Firefox Plugins ======================

Profilepath: C:\Users\User\AppData\Roaming\Mozilla\Firefox\Profiles\mo2jvd24.default
9AE02005247DA91AB1743F5208DBEF76 - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_169.dll - Shockwave Flash
E59F2C1BBB20E70419A33CCAA727B747 - C:\Users\User\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll - Unity Player
15E298B5EC5B89C5994A59863969D9FF - C:\Windows\SysWOW64\npmproxy.dll - Microsoft® Windows® Operating System


==== Chromium Look ======================

Google Chrome Version: 42.0.2311.90 (Latest Stable version: 42.0.2311.90) [z-db]

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx[14-Jul-14 07:22 PM]

Logitech Smooth Scrolling - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\dkpejdfnpdkhifgbancbammdijojoffk
Bookmark Manager - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik
Chrome Hotword Shared Module - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg
Skype Click to Call - User\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"
{8582134D-CA24-448A-BF4B-79C73F174FD7} Google Url="https://www.google.com/search?q={searchTerms}"
{D3D5C58F-341B-4E17-A17B-BD502CCEF353} Bing Url="http://www.bing.com/search?FORM=SKY2DF&PC=SKY2&q={searchTerms}&src=IE-SearchBox"

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Empty IE Cache ======================

C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\SysNative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWoW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\sysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

No FireFox Cache found

==== Empty Chrome Cache ======================

C:\Users\User\AppData\Local\Google\Chrome\User Data\Default\Cache emptied successfully

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

Java Cache cleared successfully

==== C:\zoek_backup content ======================

C:\zoek_backup (files=539 folders=105 376752696 bytes)

==== Empty Temp Folders ======================

C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Users\User\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp will be emptied at reboot
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\User\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\User\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp\Low" not deleted

==== EOF on 24-Apr-15 at 21:56:45.54 ======================

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Kako se sada ponasa PC? Mislim da smo odradili veliki posao.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Sad je ponovo sve OK.Hvala puno na pomoći!

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ima jos malo posla.

Verzija Google Chroma koju imas je lazna verzija, potrebna je reinstalacija.
Deinstaliraj taj Chrome i u toku deinstalacije cekiraj "Also delete your browsing data".

Zatim preuzmi i instaliraj legitimnu verziju.
https://www.google.com/intl/en/chrome/browser/desktop/



• Sledeća procedura će implementirati završno čišćenje.



Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.

Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;
Remove disinfection tools
Create registry backup
Purge System Restore

Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.

Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Ukoliko neki alat ili izveštaj nije uklonjen, slobodno ih obriši ručno.


Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)
- Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
- DelFix briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uradila sam kako si mi kazao,još jednom hvala na pomoći !

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ubuduce, ko sedne na tvoj kompm ne dozvoljavaj da bilo sta skida, jer ne znaju odakle da preuzmu aplikacije i onda ti napune sistem adware-om.