OTL logovi

[LKockica]

"K:\Igrice\Steam\Steam.exe" = K:\Igrice\Steam\Steam.exe:*nabled:Steam -- (Valve Corporation)
"C:\Documents and Settings\Spika\Application Data\Dropbox\bin\Dropbox.exe" = C:\Documents and Settings\Spika\Application Data\Dropbox\bin\Dropbox.exe:*nabledropbox -- (Dropbox, Inc.)
"K:\Igrice\Steam\steamapps\common\dc universe online\LaunchPad.exe" = K:\Igrice\Steam\steamapps\common\dc universe online\LaunchPad.exe:*nabledC Universe Online -- ()
"K:\Tehnikalije\stickynotes.exe" = K:\Tehnikalije\stickynotes.exe:*nabled:Sticky-Notes -- ()
"K:\Igrice\BF1942.exe" = K:\Igrice\BF1942.exe:*nabledF1942 -- ()
"C:\Program Files\Iminent\Iminent.exe" = C:\Program Files\Iminent\Iminent.exe:*nabled:Iminent Firewall Rule -- (Iminent)
"C:\Program Files\Iminent\Iminent.Messengers.exe" = C:\Program Files\Iminent\Iminent.Messengers.exe:*nabled:Imi nent.Messengers Firewall Rule -- (Iminent)

[LKockica]

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\DomainPr ofile\AuthorizedApplications\List]
"C:\Program Files\BearShare Applications\BearShare\BearShare.exe" = C:\Program Files\BearShare Applications\BearShare\BearShare.exe:*nabledea rShare

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SharedAccess\Parameters\FirewallPolicy\Standard Profile\AuthorizedApplications\List]
"C:\Program Files\uTorrent\uTorrent.exe" = C:\Program Files\uTorrent\uTorrent.exe:*nabled:µTorrent -- (BitTorrent, Inc.)
"C:\Program Files\ArcSoft\TotalMedia 3.5\TotalMedia.exe" = C:\Program Files\ArcSoft\TotalMedia 3.5\TotalMedia.exe:*nabled:ArcSoft TotalMedia -- (ArcSoft, Inc.)
"C:\Program Files\Cyanide\GameCenter\GameCenter.exe" = C:\Program Files\Cyanide\GameCenter\GameCenter.exe:*nabled: GameCenter -- (Cyanide)
"C:\Program Files\Eidos\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe" = C:\Program Files\Eidos\Batman Arkham Asylum\Binaries\ShippingPC-BmGame.exe:*nabledatman: Arkham Asylum -- (Rocksteady Studios Ltd)
"D:\Binaries\Wolverine.exe" = D:\Binaries\Wolverine.exe:*nabled:X-Men Origins - Wolverine -- (Raven Software)

[LKockica]

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Uninstall]
"_{1E964D62-3397-45B7-A9D2-F27C22D9D4BA}" = Corel Painter 12
"{01E9B2FF-DAF4-4529-9CC9-2101625517C7}" = nero.prerequisites.msi
"{034DCAF9-96E7-4936-9A07-712F80B5181E}" = Nero RescueAgent 11
"{048298C9-A4D3-490B-9FF9-AB023A9238F3}" = Steam
"{0A0CADCF-78DA-33C4-A350-CD51849B9702}" = Microsoft .NET Framework 4 Extended
"{11D3EF85-63E1-4AE4-A7C1-9241BDB16B51}" = Nero ControlCenter 11
"{18522005-B8F6-4552-A228-823328696F48}" = Yamaha Supercross
"{1A6D6B28-888F-4512-910E-89FB2E189FEA}" = Vizzed Retro Game Room
"{1AED4ABF-0852-4B3F-9F87-00CF88F25CE0}" = IconHandler 32 bit
"{1E964D62-3397-45B7-A9D2-F27C22D9D4BA}" = Painter 12 - Setup Files
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{2333E82C-E577-4982-B60F-80C74BA69A07}" = Corel Painter 12 - IPM
"{26A24AE4-039D-4CA4-87B4-2F83216031FF}" = Java(TM) 6 Update 31
"{26D8D185-F70E-4311-A511-22E979A036C5}" = Iron Man
"{29E44E9D-ACB2-4D2D-849F-5361C941B7E1}" = ArcSoft TotalMedia 3.5
"{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{3CE06D54-72B1-44B2-AB60-E4277EC80EF4}" = Microsoft XML Parser
"{3D88D0F7-FE8C-46A9-9966-3FEE8CAAD8F8}" = LIMBO [Install&Play]
"{44FDF3F0-9DEF-46A6-A552-404BBF55451B}" = Painter 12 - Core
"{4781569D-5404-1F26-4B2B-6DF444441031}" = Nero 7 Ultra Edition
"{47BBA5AA-CA6F-4A41-858D-A7A776F29A8B}" = Google SketchUp 8
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4BD8E034-E0F4-4509-A753-467A8E854CD8}" = Iminent
"{4E79A60F-15D2-4BEC-91AD-E41EC42E61B0}" = Batman: Arkham Asylum
"{505AFDC0-5E72-4928-8368-5DEA385E3647}" = CorelDRAW Graphics Suite 12
"{53F7746A-96AA-49A5-86B8-59989680DAC5}" = Nero Burning ROM 11 Help (CHM)
"{56BFAA6E-2BCC-4AED-9233-84731E66B205}" = Solid Converter PDF
"{64958DA4-79D3-43FD-AF06-720DAD044F9E}" = LEGO® Pirates of the Caribbean The Video Game
"{65BB0407-4CC8-4DC7-952E-3EEFDF05602A}" = Nero Update
"{6833245E-DD86-479A-882A-8360D62C8194}" = NVIDIA PhysX
"{698D7E61-E4BF-4CA6-8A09-CF6BDBFDEF65}" = Battlefield 1942
"{716E0306-8318-4364-8B8F-0CC4E9376BAC}" = MSXML 4.0 SP2 Parser and SDK
"{7E265513-8CDA-4631-B696-F40D983F3B07}_is1" = CDBurnerXP
"{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}" = Activision(R)
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8DEE4C35-1C60-413E-9630-77A0222D5C45}" = CSI-Dark Motives
"{90120000-0010-0409-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (English) 12
"{90120000-0011-0000-0000-0000000FF1CE}" = Microsoft Office Professional Plus 2007
"{90120000-0011-0000-0000-0000000FF1CE}_PROPLUS_{BEE75E01-DD3F-4D5F-B96C-609E6538D419}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0015-0409-0000-0000000FF1CE}" = Microsoft Office Access MUI (English) 2007
"{90120000-0015-0409-0000-0000000FF1CE}_PROPLUS_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0016-0409-0000-0000000FF1CE}" = Microsoft Office Excel MUI (English) 2007
"{90120000-0016-0409-0000-0000000FF1CE}_PROPLUS_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0018-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (English) 2007
"{90120000-0018-0409-0000-0000000FF1CE}_PROPLUS_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0019-0409-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (English) 2007
"{90120000-0019-0409-0000-0000000FF1CE}_PROPLUS_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001A-0409-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (English) 2007
"{90120000-001A-0409-0000-0000000FF1CE}_PROPLUS_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001B-0409-0000-0000000FF1CE}" = Microsoft Office Word MUI (English) 2007
"{90120000-001B-0409-0000-0000000FF1CE}_PROPLUS_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_PROPLUS_{3EC77D26-799B-4CD8-914F-C1565E796173}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_PROPLUS_{430971B1-C31E-45DA-81E0-72C095BAB72C}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_PROPLUS_{F7A31780-33C4-4E39-951A-5EC9B91D7BF1}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-002C-0409-0000-0000000FF1CE}" = Microsoft Office Proofing (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (English) 2007
"{90120000-0044-0409-0000-0000000FF1CE}_PROPLUS_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-006E-0409-0000-0000000FF1CE}" = Microsoft Office Shared MUI (English) 2007
"{90120000-006E-0409-0000-0000000FF1CE}_PROPLUS_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0115-0409-0000-0000000FF1CE}" = Microsoft Office Shared Setup Metadata MUI (English) 2007
"{90120000-0115-0409-0000-0000000FF1CE}_PROPLUS_{FAD8A83E-9BAC-4179-9268-A35948034D85}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90120000-0117-0409-0000-0000000FF1CE}" = Microsoft Office Access Setup Metadata MUI (English) 2007
"{90120000-0117-0409-0000-0000000FF1CE}_PROPLUS_{4CA4ECC1-DBD4-4591-8F4C-AA12AD2D3E59}" = 2007 Microsoft Office Suite Service Pack 1 (SP1)
"{90280409-6000-11D3-8CFE-0050048383C9}" = Microsoft Office XP Professional with FrontPage

[LKockica]

"{990166FA-1ACB-4AA7-B592-4D370C7CDD1A}" = Spider-Man 3(TM)
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A43BF6A5-D5F0-4AAA-BF41-65995063EC44}" = MSXML 6.0 Parser
"{A48B9CD8-C2BA-4EC9-0081-7260D238C7CF}" = Need for Speed™ Most Wanted
"{A5CB0BC7-9553-420D-A3CD-D3C59FB99872}" = Painter 12 - EN
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A979B2D8-E3EE-4523-A26C-4AF0A6809280}" = Sniper Elite
"{AC76BA86-7AD7-1033-7B44-000000000001}" = Adobe Reader 6.0
"{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}" = REALTEK GbE & FE Ethernet PCI NIC Driver
"{B073B30C-7D4C-401D-ABF6-993F7A0DE762}" = Mystery Case Files - 13th Skull Collectors Edition
"{B1846721-A8E6-46C7-83B6-0DCF7ADB4267}" = Nero Burning ROM 11
"{B1A8A5D7-0613-4373-BB0C-2AA428C935BD}" = NWZ-B160 WALKMAN Guide
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B42A6552-1A83-4D79-9137-AB0C9036249A}" = Quake Live Mozilla Plugin
"{B45FABE7-D101-4D99-A671-E16DA40AF7F0}" = Microsoft Games for Windows - LIVE
"{B4C89330-0416-4B4A-93C1-E577D208D803}" = Sticky-Notes
"{B578C85A-A84C-4230-A177-C5B2AF565B8C}" = Microsoft Games for Windows - LIVE Redistributable
"{BCE46757-7674-4416-BEDB-68205A60409E}" = Canon CanoScan Toolbox 4.1
"{BEBEE34D-84A2-4EDD-8BEA-96CC54371263}" = Nero Core Components 11
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}" = Fable - The Lost Chapters
"{C5A8DF48-580B-44D3-B2B2-E965A9368F28}" = LEGO® Harry Potter™: Years 1-4
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D01CE99A-8802-483C-A79F-298B691EB432}" = Nero RescueAgent 11 Help (CHM)
"{D4D66270-9147-4BDF-9946-FCA2B303AA8F}" = Nero ControlCenter 11 Help (CHM)
"{DB0A8A2A-4EA7-4FE3-802E-8A6DEE32696C}_is1" = Orban/Coding Technologies AAC/aacPlus Player Plugin™ 1.0
"{DDBB7C89-1A09-441E-AA0F-6AA465755C17}" = REALTEK DTV USB DEVICE
"{E656D89A-8CBB-497F-918F-8361A4071C26}" = Nero Burning ROM 11
"{EE7257A2-39A2-4D2F-9DAC-F9F25B8AE1D8}" = Skype™ 5.9
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F2776738-1A97-45F2-BE5A-DBBC66ACB9D4}" = Painter 12 - Painter
"{F7FC9307-374E-4017-8E9D-DE1154780480}" = System Requirements Lab for Intel
"{FBAAC4C8-D5ED-4308-9FC6-84E44E392395}" = Painter 12 - Content
"1947ed9c549f680a9ed3f1fdbb9337a4" = Myst V End Of Ages
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin
"Adobe Photoshop 7.0" = Adobe Photoshop 7.0
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"ArtRage Free_is1" = ArtRage 2.2 Free

[LKockica]

"avast" = avast! Free Antivirus
"BFG-Azada" = Azada ™
"BFG-Azada - Ancient Magic" = Azada: Ancient Magic ™
"Champions Online" = Champions Online
"ClocX" = ClocX (1.5b1)
"Comical_is1" = Comical 0.8
"CPUID HWMonitor_is1" = CPUID HWMonitor 1.17
"Dia" = Dia (remove only)
"DriverAgent.exe" = DriverAgent by eSupport.com
"EADM" = EA Download Manager
"EVEREST Ultimate Edition_is1" = EVEREST Ultimate Edition v5.00
"FontCreator6_is1" = High-Logic FontCreator 6.5
"Free YouTube Download_is1" = Free YouTube Download version 3.0.16.923
"Free YouTube to MP3 Converter_is1" = Free YouTube to MP3 Converter version 3.10.13.1123
"GameCenter" = GameCenter
"GLC_Player" = GLC_Player
"GOM Player" = GOM Player
"Google Chrome" = Google Chrome
"Google Desktop" = Google Desktop
"IMBoosterARP" = Iminent
"InstallShield_{7F0B94C6-828C-4EDE-A86B-ECF4D792B68D}" = X-Men Origins - Wolverine(TM)
"InstallShield_{990166FA-1ACB-4AA7-B592-4D370C7CDD1A}" = Spider-Man 3 (TM)
"InstallShield_{C3C9EB3D-24FA-4462-B784-0EC6AAFCD2DD}" = Fable - The Lost Chapters
"IrfanView" = IrfanView (remove only)
"KLiteCodecPack_is1" = K-Lite Codec Pack 8.0.0 (Full)
"LucasArts' Star Wars: Episode I Racer" = LucasArts' Star Wars: Episode I Racer
"MagicDisc 2.7.106" = MagicDisc 2.7.106
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware version 1.61.0.1400
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Extended" = Microsoft .NET Framework 4 Extended
"Miuchiz - Planet Mion" = Miuchiz - Planet Mion
"Movie Player Pro ActiveX Control_is1" = Movie Player Pro ActiveX Control
"Mozilla Firefox 12.0 (x86 hr)" = Mozilla Firefox 12.0 (x86 hr)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"MSNINST" = MSN
"mswt" = MS Worldtour Kart
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"NVIDIA Display Control Panel" = NVIDIA Display Control Panel
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"OpenAL" = OpenAL
"Pen Tablet Driver" = Bamboo
"PROPLUS" = Microsoft Office Professional Plus 2007
"QuickTime" = QuickTime
"SearchCore for Browsers" = SearchCore for Browsers
"Steam App 24200" = DC Universe Online
"Steam App 400" = Portal
"Sweet Home 3D_is1" = Sweet Home 3D version 3.4
"The Incredible Hulk" = The Incredible Hulk
"TVWiz" = Intel(R) TV Wizard
"Uninstall_is1" = Uninstall 1.0.0.1
"uTorrent" = µTorrent
"VMidi" = vanBasco's Karaoke Player
"Wacom WebTabletPlugin for IE" = WebTablet IE Plugin
"Wacom WebTabletPlugin for Netscape" = WebTablet Netscape Plugin
"Winamp" = Winamp
"Windows Media Format Runtime" = Windows Media Format 11 runtime
"WinRAR archiver" = WinRAR archiver
"WMFDist11" = Windows Media Format 11 runtime
"Wudf01000" = Microsoft User-Mode Driver Framework Feature Pack 1.0

[LKockica]

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Uninstall]
"Dropbox" = Dropbox
"Winamp Detect" = Winamp Detector Plug-in

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 6.5.2012 15:46:38 | Computer Name = HOME | Source = Application Hang | ID = 1002
Description = Hanging application explorer.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 6.5.2012 15:47:02 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x0000120e.

Error - 6.5.2012 17:18:44 | Computer Name = HOME | Source = Application Hang | ID = 1002
Description = Hanging application explorer.exe, version 6.0.2900.5512, hang module
hungapp, version 0.0.0.0, hang address 0x00000000.

Error - 6.5.2012 17:20:09 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x0000120e.

Error - 6.5.2012 19:20:45 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x0000120e.

Error - 6.5.2012 19:37:17 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x0000120e.

Error - 6.5.2012 19:42:11 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x0000120e.

Error - 6.5.2012 19:57:35 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x0000120e.

Error - 6.5.2012 19:58:03 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x0000120e.

Error - 7.5.2012 5:58:24 | Computer Name = HOME | Source = Application Error | ID = 1000
Description = Faulting application explorer.exe, version 6.0.2900.5512, faulting
module ntdll.dll, version 5.1.2600.6055, fault address 0x0000120e.

[ OSession Events ]
Error - 24.10.2010 13:03:57 | Computer Name = HOME | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6211.1000, Microsoft Office Version: 12.0.6215.1000. This session lasted 10887
seconds with 8700 seconds of active time. This session ended with a crash.


< End of report >

[dobrota]

otvori OTL i ovo kopiraj u prazno polje

:OTL
FF - prefs.js..extensions.enabledItems: [email protected]:3.11.3.15590
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.order.1: "Ask.com"
[2012.05.07 01:32:02 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files\Mozilla Firefox\extensions
O4 - HKLM..\Run: [MP10_EnsureFileVer] C:\WINDOWS\inf\unregmp2.exe (Microsoft Corporation)
O32 - AutoRun File - [2010.09.21 10:45:09 | 000,000,000 | R--D | M] - K:\autorun -- [ NTFS ]

:files
C:\WINDOWS\QTFont.qfn

:Commands
[emptytemp]
[EMPTYFLASH]
[emptyjava]
[Reboot]

klik na RUN FIX

ako nemaš ccleaner skini ga >instaliraj

otvori program >klik na alati >klik na pokretanje s računalom


označi ove programe i klik na disable

[ArcSoft Connection Service]
[Iminent]
[IminentMessenger]
[Malwarebytes' Anti-Malware]
[NvCplDaemon]
[NvMediaCenter]
[nwiz] 
[BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
[Steam]
[Sticky-Notes]
[uTorrent]

ostat će ti samo avast i clock...

nakon toga

start /run / u run polje kopiraj ovo i potvrdi

sfc /scannow

zatražit će te vrlo vjerojatno da ubaciš windows cd, ubaci ga u računalo i sačekaj dok ne odradi do kraja...scan je obično jako brzo gotov

nakon toga restart i javi promjene

OTL kog se čini skroz ok i unjemu nema ništa posebno vridno pažnje..uzrok greške treba tražiti na drugm mistu..

uradi ovao, pa javi kako je

[LKockica]

Ne mogu nac CD od windowsa,tj u drugom je stanu vjerojatno pa cim to sredim, javim promjene! HVALA PUNO!

Mogu li sad odradit ove akcije do drugog koda? Da obavim bar ovo sa ccleanerom?

[dobrota]

LKockica kaže:

Ne mogu nac CD od windowsa,tj u drugom je stanu vjerojatno pa cim to sredim, javim promjene! HVALA PUNO!

Mogu li sad odradit ove akcije do drugog koda? Da obavim bar ovo sa ccleanerom?

da, obavi što sada možeš

[Gustavo]

dobrota kaže:

ne treba ti avast , outpost ima svoj antivirus

Zašto mi windows security center ne prepoznaje outpust kao antivirus, stalno mi ikona alerts dolje u trayu ?

[LKockica]

dobrota kaže:

da, obavi što sada možeš

OTL mi se zablokirao pa sam morala restartat racunalo.

CCleaner m ne nalazi ni jedan od tri navedena programa

btw. upravo mi opet ukazuje na onaj problem koji smo prije neki dan rjesavali . ne zeli otvorit istu stranicu.

[dobrota]

LKockica kaže:

OTL mi se zablokirao pa sam morala restartat racunalo.

CCleaner m ne nalazi ni jedan od tri navedena programa

btw. upravo mi opet ukazuje na onaj problem koji smo prije neki dan rjesavali . ne zeli otvorit istu stranicu.

ostavi samo avast i clocX, a sve ostalo postavi na disable

[betatestalo]

http://pastebin.com/fqEGf6y4

http://pastebin.com/1b9pujsg

dobrota savjetuj molim te

[dobrota]

betatestalo kaže:

http://pastebin.com/fqEGf6y4

http://pastebin.com/1b9pujsg

dobrota savjetuj molim te

otvori OTL i ovo kopiraj u prazno polje

:services

:OTL
O3 - HKCU\..\Toolbar\ShellBrowser: (no name) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {A057A204-BACC-4D26-9990-79A187E2698E} - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZUxdm266YYHR File not found
O33 - MountPoints2\{3809bd3c-b80b-11db-99cf-00012982bb99}\Shell\AutoRun\command - "" = ie.exe
O33 - MountPoints2\{3809bd3c-b80b-11db-99cf-00012982bb99}\Shell\explore\Command - "" = ie.exe
O33 - MountPoints2\{3809bd3c-b80b-11db-99cf-00012982bb99}\Shell\open\Command - "" = ie.exe
O33 - MountPoints2\{41e125d8-b28d-11db-99ca-00012982bb99}\Shell\Auto\command - "" = AdobeR.exe e
O33 - MountPoints2\{41e125d8-b28d-11db-99ca-00012982bb99}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{41e125d8-b28d-11db-99ca-00012982bb99}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
O33 - MountPoints2\{4d3f01c5-ddf8-11dc-9b50-00012982bb99}\Shell\Auto\command - "" = AdobeR.exe e
O33 - MountPoints2\{4d3f01c5-ddf8-11dc-9b50-00012982bb99}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{4d3f01c5-ddf8-11dc-9b50-00012982bb99}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
O33 - MountPoints2\{611f8811-0378-11dc-9a3c-00012982bb99}\Shell\Auto\command - "" = AdobeR.exe e
O33 - MountPoints2\{611f8811-0378-11dc-9a3c-00012982bb99}\Shell\AutoRun - "" = Auto&Play
O33 - MountPoints2\{611f8811-0378-11dc-9a3c-00012982bb99}\Shell\AutoRun\command - "" = C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL AdobeR.exe e
O33 - MountPoints2\{e4689bbe-e993-11de-b05c-00012982bb99}\Shell\AutoRun\command - "" = F:\WDSetup.exe
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]
@Alternate Data Stream - 117 bytes -> C:\Documents and Settings\All Users.WINDOWS\Application Data\TEMP:1CA73D29

:files


:Commands
[emptytemp]
[EMPTYFLASH]
[emptyjava]
[Reboot]

klik na RUN FIX

log koji dobiješ kopiraj

2.skini combofix i spremi na desktop
-isključi antivirus
-pokreni combofix i na sve što traži odgovori potvrdno
-log kopiraj

[betatestalo]

Nakon sta sam pokrenia RUN FIX, sve je uredno proslo, samo se nije tia izgasit... pisalo je ono windows is shutting down sigurno 15 min, pa sam ga rucno izgasia i upalia.

Evo loga koji se pojavia nakon dizanja windowsa:
http://pastebin.com/61QGk01C

sad combofix i to je to?

ne znan koje iman antiviruse instalirane

[betatestalo]

greska za dupli post...

kako cu znat koji su antivirusi install? (nije moj komp)

[dobrota]

betatestalo kaže:

greska za dupli post...

kako cu znat koji su antivirusi install? (nije moj komp)

na ovom račnal nemaš instaliran antivirus..imaš ad-aware i malwarebytes

izbriši ad-aware preko add/remove i pokreni combofix

[betatestalo]

dobrota kaže:

na ovom račnal nemaš instaliran antivirus..imaš ad-aware i malwarebytes

izbriši ad-aware preko add/remove i pokreni combofix

Maka sam ga bia vec prije (ad aware).

Evo log od combofixa:

http://pastebin.com/fSP5UXCf

[dobrota]

betatestalo kaže:

Maka sam ga bia vec prije (ad aware).

Evo log od combofixa:

http://pastebin.com/fSP5UXCf

otvori notepad i ovo kopiraj u notepad

ClearJavaCache::

Driver::
Lbd

zatvori notepad i spremi kao CFScript na desktop
-skriptu s mišem uvuci u combofix.exe
-log koji dobieš kopiraj

2.pokreni malwarebytes>update>quick scan
-log kopiraj

[betatestalo]

combofix:
http://pastebin.com/6nBTp2Bg

sutra cu malwarebytes (ne znam iman li ga uopce instaliranog?....)