Treba mi pomoc. Imam avast antivirus, i danas je pocelo da mi iskace u donjem desnm uglu gde god da udjem na internetu: avast web sheild has blocked... (stavicu sliku)
Skeniram i nema virusa, a ovo mi sve vreme iskace, kako to da resim?
Hvala unapred.

Preuzmi FRST   -  (Farbar Recovery Scan Tool) i sacuvaj ga na Desktop

Napomena: Potrebno je preuzeti onu verziju koja je kompatibilna sa tvojim sistemom.
 

• Dvoklikom pokreni FRST;
  
• Kada se alat startuje, klikni Yes na disclaimer.
  
• Klikni na dugme Scan;
  
• Alat ce kreirati izvestaj (FRST.txt) u isti direktorijum gde je i FRST.exe sacuvan.
  
• Iskopiraj sadrzaj tog loga u poruku.
  
• Alat bi takodje pri prvom pokretanju trebao da kreira i dodatni izvestaj (Addition.txt). Taj izvestaj okaci u poruku koristeci opciju "Prikaci file".

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version:30-04-2014 03
Ran by Rada (administrator) on RADA-PC on 30-04-2014 23:28:19
Running from C:\Users\Rada\Downloads
Microsoft Windows 7 Ultimate  Service Pack 1 (X86) OS Language: English(US)
Internet Explorer Version 11
Boot Mode: Normal

The only official download link for FRST:
Download link for 32-Bit version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/81/
Download link for 64-Bit Version: http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/dl/82/
Download link from any site other than Bleeping Computer is unpermitted or outdated.
See tutorial for FRST: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\System32\atiesrxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\afwServ.exe
(Protexis Inc.) C:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastUI.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
(Oracle Corporation) C:\Program Files\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Nero AG) C:\Program Files\Nero\Update\NASvc.exe
(Microsoft Corporation) C:\Windows\System32\wuauclt.exe
(Microsoft Corporation) C:\Windows\System32\WerFault.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe
(Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe
(Adobe Systems, Inc.) C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_13_0_0_206.exe


==================== Registry (Whitelisted) ==================

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [3873704 2014-04-30] (AVAST Software)
HKLM\...\Run: [GrooveMonitor] => C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-27] (Microsoft Corporation)
HKLM\...\Run: [SunJavaUpdateSched] => C:\Program Files\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
HKU\.DEFAULT\...\RunOnce: [SPReview] - C:\Windows\System32\SPReview\SPReview.exe [280576 2013-11-13] (Microsoft Corporation)
HKU\S-1-5-21-3138685496-2236490502-2148332070-1000\...\Run: [iLivid] => "C:\Users\Rada\AppData\Local\iLivid\iLivid.exe" -autorun
HKU\S-1-5-21-3138685496-2236490502-2148332070-1000\...\Run: [Google+ Auto Backup] => "C:\Users\Rada\AppData\Local\Programs\Google\Google+ Auto Backup\Google+ Auto Backup.exe" /autostart
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
HKLM\...\AppCertDlls: [x86] -> C:\Program Files\Movies Toolbar\Datamngr\apcrtldr.dll <===== ATTENTION
HKLM\...\AppCertDlls: [x64] -> c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll <===== ATTENTION

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.bing.com
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://www.msn.com/?ocid=iehp
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 0xF05FE5FEDEDFCE01
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = sr-Latn-RS
HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.bing.com
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=484&systemid=406&v=n11465-251&apn_uid=7301186132224702&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=90EA00E04DA65259&affID=128403&tsp=5197
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=484&systemid=406&v=n11465-251&apn_uid=7301186132224702&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
BHO: No Name - {11111111-1111-1111-1111-110511131190} -  No File
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO: avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO: No Name - {F1C81E40-2485-4DB6-8C9D-04BD596B281E} -  No File
Toolbar: HKLM - No Name - {828DC97A-2277-4E10-92A9-4907FA0922A9} -  No File
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default
FF user.js: detected! => C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\user.js
FF SearchEngineOrder.1: Google
FF Homepage: https://www.google.rs/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF32_13_0_0_206.dll ()
FF Plugin: @foxitsoftware.com/Foxit Reader Plugin,version=1.0,application/pdf - C:\Program Files\Foxit Software\Foxit Reader\plugins\npFoxitReaderPlugin.dll No File
FF Plugin: @google.com/npPicasa3,version=3.0.0 - C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
FF Plugin: @java.com/DTPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=10.51.2 - C:\Program Files\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin: @Nero.com/KM - C:\PROGRA~1\COMMON~1\Nero\BROWSE~1\NPBROW~1.DLL (Nero AG)
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Rada\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF Plugin ProgramFiles/Appdata: C:\Program Files\mozilla firefox\plugins\npwachk.dll (Nullsoft, Inc.)
FF SearchPlugin: C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\searchplugins\Ask.xml
FF SearchPlugin: C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml
FF Extension: Torntv V9.0 - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com [2014-03-25]
FF Extension: BuenoSearch - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\ffxtlbr@buenosearch.com [2014-03-25]
FF Extension: YoutubeAdblocker - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\sha-xii@cjpoauavl.edu [2014-03-25]
FF Extension: SaifewEibb - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\zhfa@xdzjlp.net [2014-03-25]
FF Extension: Ask New Tabs - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\{2FD73609-F02D-3849-D765-5F8F93ECC348} [2014-02-07]
FF Extension: Movies Toolbar (Dist. by Bandoo Media, Inc.) - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\{d1dac034-9fd9-4c13-a388-d2e10e57707f} [2014-02-07]
FF Extension: Adblock Plus - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-04-19]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-11-12]

========================== Services (Whitelisted) =================

R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [50344 2014-04-30] (AVAST Software)
R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [109048 2014-04-30] (AVAST Software)
R2 NAUpdate; C:\Program Files\Nero\Update\NASvc.exe [769432 2012-07-13] (Nero AG)

==================== Drivers (Whitelisted) ====================

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24184 2014-04-30] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [26136 2014-04-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [67824 2014-04-30] (AVAST Software)
R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [269728 2014-04-30] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81768 2014-04-30] (AVAST Software)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49944 2014-04-30] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [776976 2014-04-30] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [411552 2014-04-30] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [67776 2014-04-30] (AVAST Software)
S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [38472 2013-11-12] (The OpenVPN Project)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [180632 2014-04-30] ()
R1 wStLibG; C:\Windows\System32\drivers\wStLibG.sys [52928 2014-03-25] (StdLib)
S3 Synth3dVsc; System32\drivers\synth3dvsc.sys [X]
S3 tsusbhub; system32\drivers\tsusbhub.sys [X]
S3 VGPU; System32\drivers\rdvgkmd.sys [X]

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2014-04-30 23:28 - 2014-04-30 23:28 - 00011248 _____ () C:\Users\Rada\Downloads\FRST.txt
2014-04-30 23:28 - 2014-04-30 23:28 - 00000000 ____D () C:\FRST
2014-04-30 23:26 - 2014-04-30 23:27 - 01050624 _____ (Farbar) C:\Users\Rada\Downloads\FRST.exe
2014-04-30 20:43 - 2014-04-30 20:43 - 00002053 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-04-30 20:43 - 2014-04-30 20:42 - 00026136 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-04-30 20:43 - 2014-04-30 20:42 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-04-30 20:42 - 2014-04-30 20:42 - 00269728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-04-30 20:42 - 2014-04-30 20:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-23 22:33 - 2014-04-23 22:33 - 00001698 _____ () C:\Users\Rada\Desktop\Counter-Strike WaRzOnE.lnk
2014-04-23 22:33 - 2014-04-23 22:33 - 00000794 _____ () C:\Users\Rada\Desktop\Half-Life WaRzOnE.lnk
2014-04-23 22:33 - 2014-04-23 22:33 - 00000732 _____ () C:\Users\Rada\Desktop\HLDS.lnk
2014-04-23 22:33 - 2014-04-23 22:33 - 00000000 ____D () C:\Users\Rada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HLDS
2014-04-23 22:33 - 2014-04-23 22:33 - 00000000 ____D () C:\Users\Rada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Half-Life
2014-04-23 22:26 - 2014-04-23 22:32 - 268591972 _____ (CSwarzone) C:\Users\Rada\Downloads\Counter-Strike.exe
2014-04-20 14:11 - 2014-04-20 14:11 - 00000000 __SHD () C:\Users\Rada\AppData\Local\EmieUserList
2014-04-20 14:11 - 2014-04-20 14:11 - 00000000 __SHD () C:\Users\Rada\AppData\Local\EmieSiteList
2014-04-20 12:18 - 2014-04-20 12:18 - 00000000 ____D () C:\Users\Rada\Documents\NFS Carbon
2014-04-20 12:16 - 2014-04-20 12:16 - 00002140 _____ () C:\Users\Public\Desktop\Need for Speed™ Carbon.lnk
2014-04-20 12:16 - 2014-04-20 12:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2014-04-20 12:10 - 2014-04-20 12:10 - 00000000 ____D () C:\Program Files\Electronic Arts
2014-04-18 18:19 - 2014-04-18 18:19 - 00001186 _____ () C:\Users\Rada\Desktop\Counter-Strike v42.lnk
2014-04-18 18:18 - 2014-04-18 18:18 - 00000000 ____D () C:\Program Files\CS v42
2014-04-18 18:10 - 2014-04-18 18:17 - 290773603 _____ (Vranje-Online Community ) C:\Users\Rada\Downloads\CS_v42_FULL.exe
2014-04-15 17:10 - 2014-04-18 00:50 - 00000000 ____D () C:\Users\Rada\Desktop\Informatika
2014-04-15 08:56 - 2014-03-06 11:19 - 17387008 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2014-04-15 08:56 - 2014-03-06 10:32 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2014-04-15 08:56 - 2014-03-06 10:31 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2014-04-15 08:56 - 2014-03-06 10:02 - 00455168 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2014-04-15 08:56 - 2014-03-06 10:02 - 00061952 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2014-04-15 08:56 - 2014-03-06 10:01 - 00051200 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2014-04-15 08:56 - 2014-03-06 09:47 - 02178048 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2014-04-15 08:56 - 2014-03-06 09:46 - 04254720 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2014-04-15 08:56 - 2014-03-06 09:46 - 00043008 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2014-04-15 08:56 - 2014-03-06 09:45 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2014-04-15 08:56 - 2014-03-06 09:40 - 00440832 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2014-04-15 08:56 - 2014-03-06 09:38 - 00112128 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2014-04-15 08:56 - 2014-03-06 09:38 - 00108032 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2014-04-15 08:56 - 2014-03-06 09:36 - 00592896 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2014-04-15 08:56 - 2014-03-06 09:28 - 00646144 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2014-04-15 08:56 - 2014-03-06 09:22 - 00367616 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2014-04-15 08:56 - 2014-03-06 09:18 - 00575488 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2014-04-15 08:56 - 2014-03-06 09:13 - 00032256 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2014-04-15 08:56 - 2014-03-06 09:07 - 00164864 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2014-04-15 08:56 - 2014-03-06 09:01 - 00244224 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2014-04-15 08:56 - 2014-03-06 08:46 - 00524288 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2014-04-15 08:56 - 2014-03-06 08:40 - 01967104 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2014-04-15 08:56 - 2014-03-06 08:36 - 11745792 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2014-04-15 08:56 - 2014-03-06 07:43 - 00704512 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2014-04-15 08:56 - 2014-03-06 07:41 - 01789440 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2014-04-15 08:56 - 2014-03-06 07:36 - 01143808 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2014-04-14 00:30 - 2014-04-14 00:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-14 00:30 - 2014-04-14 00:30 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-14 00:30 - 2014-04-14 00:30 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-14 00:30 - 2014-04-14 00:30 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-04-14 00:30 - 2014-04-14 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-14 00:29 - 2014-04-14 00:29 - 00000000 ____D () C:\Program Files\Java
2014-04-14 00:27 - 2014-04-14 00:27 - 01069776 _____ (Solid State Networks) C:\Users\Rada\Downloads\install_flashplayer13x32_mssd_aaa_aih.exe
2014-04-14 00:26 - 2014-04-14 00:27 - 29141928 _____ (Oracle Corporation) C:\Users\Rada\Downloads\jre-7u51-windows-i586.exe
2014-04-09 08:46 - 2014-03-04 11:17 - 00868352 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll
2014-04-09 08:46 - 2014-02-04 04:07 - 00234432 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\msiscsi.sys
2014-04-09 08:46 - 2014-02-04 04:07 - 00149440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\storport.sys
2014-04-09 08:46 - 2014-02-04 04:07 - 00027072 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\Diskdump.sys
2014-04-09 08:46 - 2014-02-04 04:00 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\iologmsg.dll
2014-04-09 08:46 - 2014-01-24 04:18 - 01212352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys

==================== One Month Modified Files and Folders =======

2014-04-30 23:28 - 2014-04-30 23:28 - 00011248 _____ () C:\Users\Rada\Downloads\FRST.txt
2014-04-30 23:28 - 2014-04-30 23:28 - 00000000 ____D () C:\FRST
2014-04-30 23:27 - 2014-04-30 23:26 - 01050624 _____ (Farbar) C:\Users\Rada\Downloads\FRST.exe
2014-04-30 22:56 - 2013-11-14 22:41 - 00000830 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2014-04-30 22:18 - 2013-11-13 04:39 - 01927553 _____ () C:\Windows\WindowsUpdate.log
2014-04-30 22:00 - 2014-03-25 10:57 - 00001492 _____ () C:\Windows\Tasks\Torntv V9.0-updater.job
2014-04-30 22:00 - 2014-03-25 10:56 - 00003078 _____ () C:\Windows\Tasks\Torntv V9.0-chromeinstaller.job
2014-04-30 22:00 - 2014-03-25 10:56 - 00002402 _____ () C:\Windows\Tasks\Torntv V9.0-firefoxinstaller.job
2014-04-30 22:00 - 2014-03-25 10:56 - 00001442 _____ () C:\Windows\Tasks\Torntv V9.0-codedownloader.job
2014-04-30 22:00 - 2014-03-25 10:56 - 00001332 _____ () C:\Windows\Tasks\Torntv V9.0-enabler.job
2014-04-30 20:51 - 2013-11-12 19:54 - 00726316 _____ () C:\Windows\system32\PerfStringBackup.INI
2014-04-30 20:51 - 2009-07-14 06:34 - 00010016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2014-04-30 20:51 - 2009-07-14 06:34 - 00010016 ____H () C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2014-04-30 20:46 - 2009-07-14 06:53 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2014-04-30 20:46 - 2009-07-14 06:39 - 00066711 _____ () C:\Windows\setupact.log
2014-04-30 20:45 - 2013-11-13 10:14 - 00083640 _____ () C:\Windows\PFRO.log
2014-04-30 20:43 - 2014-04-30 20:43 - 00002053 _____ () C:\Users\Public\Desktop\avast! Internet Security.lnk
2014-04-30 20:43 - 2013-11-12 21:58 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast
2014-04-30 20:42 - 2014-04-30 20:43 - 00026136 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys
2014-04-30 20:42 - 2014-04-30 20:43 - 00024184 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2014-04-30 20:42 - 2014-04-30 20:42 - 00269728 _____ (AVAST Software) C:\Windows\system32\Drivers\aswNdisFlt.sys
2014-04-30 20:42 - 2014-04-30 20:42 - 00043152 _____ (AVAST Software) C:\Windows\avastSS.scr
2014-04-30 20:42 - 2014-03-05 20:54 - 00067776 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys
2014-04-30 20:42 - 2013-11-12 21:58 - 00776976 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys
2014-04-30 20:42 - 2013-11-12 21:58 - 00411552 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys
2014-04-30 20:42 - 2013-11-12 21:58 - 00271264 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe
2014-04-30 20:42 - 2013-11-12 21:58 - 00180632 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2014-04-30 20:42 - 2013-11-12 21:58 - 00081768 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys
2014-04-30 20:42 - 2013-11-12 21:58 - 00067824 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys
2014-04-30 20:42 - 2013-11-12 21:58 - 00049944 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2014-04-30 19:32 - 2014-03-25 11:20 - 00000000 ____D () C:\ProgramData\safewweeb
2014-04-28 23:13 - 2013-11-14 22:41 - 00692400 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerApp.exe
2014-04-28 23:13 - 2013-11-13 12:00 - 00070832 _____ (Adobe Systems Incorporated) C:\Windows\system32\FlashPlayerCPLApp.cpl
2014-04-23 22:33 - 2014-04-23 22:33 - 00001698 _____ () C:\Users\Rada\Desktop\Counter-Strike WaRzOnE.lnk
2014-04-23 22:33 - 2014-04-23 22:33 - 00000794 _____ () C:\Users\Rada\Desktop\Half-Life WaRzOnE.lnk
2014-04-23 22:33 - 2014-04-23 22:33 - 00000732 _____ () C:\Users\Rada\Desktop\HLDS.lnk
2014-04-23 22:33 - 2014-04-23 22:33 - 00000000 ____D () C:\Users\Rada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\HLDS
2014-04-23 22:33 - 2014-04-23 22:33 - 00000000 ____D () C:\Users\Rada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Half-Life
2014-04-23 22:33 - 2013-11-30 15:35 - 00000000 ____D () C:\Users\Rada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Counter-Strike
2014-04-23 22:32 - 2014-04-23 22:26 - 268591972 _____ (CSwarzone) C:\Users\Rada\Downloads\Counter-Strike.exe
2014-04-23 22:32 - 2013-11-29 21:08 - 00000000 ____D () C:\Games
2014-04-20 14:15 - 2013-11-14 22:40 - 00000000 ____D () C:\Users\Rada\AppData\Local\Adobe
2014-04-20 14:11 - 2014-04-20 14:11 - 00000000 __SHD () C:\Users\Rada\AppData\Local\EmieUserList
2014-04-20 14:11 - 2014-04-20 14:11 - 00000000 __SHD () C:\Users\Rada\AppData\Local\EmieSiteList
2014-04-20 12:18 - 2014-04-20 12:18 - 00000000 ____D () C:\Users\Rada\Documents\NFS Carbon
2014-04-20 12:17 - 2013-11-17 16:54 - 00000000 ____D () C:\Users\Rada\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2014-04-20 12:16 - 2014-04-20 12:16 - 00002140 _____ () C:\Users\Public\Desktop\Need for Speed™ Carbon.lnk
2014-04-20 12:16 - 2014-04-20 12:16 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Electronic Arts
2014-04-20 12:10 - 2014-04-20 12:10 - 00000000 ____D () C:\Program Files\Electronic Arts
2014-04-20 12:09 - 2013-11-13 10:59 - 00079537 _____ () C:\Windows\DirectX.log
2014-04-18 18:19 - 2014-04-18 18:19 - 00001186 _____ () C:\Users\Rada\Desktop\Counter-Strike v42.lnk
2014-04-18 18:18 - 2014-04-18 18:18 - 00000000 ____D () C:\Program Files\CS v42
2014-04-18 18:17 - 2014-04-18 18:10 - 290773603 _____ (Vranje-Online Community ) C:\Users\Rada\Downloads\CS_v42_FULL.exe
2014-04-18 00:50 - 2014-04-15 17:10 - 00000000 ____D () C:\Users\Rada\Desktop\Informatika
2014-04-15 12:50 - 2009-07-14 04:37 - 00000000 ____D () C:\Windows\rescache
2014-04-14 00:30 - 2014-04-14 00:30 - 00264616 _____ (Oracle Corporation) C:\Windows\system32\javaws.exe
2014-04-14 00:30 - 2014-04-14 00:30 - 00175016 _____ (Oracle Corporation) C:\Windows\system32\javaw.exe
2014-04-14 00:30 - 2014-04-14 00:30 - 00174504 _____ (Oracle Corporation) C:\Windows\system32\java.exe
2014-04-14 00:30 - 2014-04-14 00:30 - 00094632 _____ (Oracle Corporation) C:\Windows\system32\WindowsAccessBridge.dll
2014-04-14 00:30 - 2014-04-14 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2014-04-14 00:30 - 2014-01-04 18:09 - 00000000 ____D () C:\ProgramData\Oracle
2014-04-14 00:29 - 2014-04-14 00:29 - 00000000 ____D () C:\Program Files\Java
2014-04-14 00:27 - 2014-04-14 00:27 - 01069776 _____ (Solid State Networks) C:\Users\Rada\Downloads\install_flashplayer13x32_mssd_aaa_aih.exe
2014-04-14 00:27 - 2014-04-14 00:26 - 29141928 _____ (Oracle Corporation) C:\Users\Rada\Downloads\jre-7u51-windows-i586.exe
2014-04-10 07:35 - 2013-11-12 20:43 - 00000000 ____D () C:\Windows\system32\MRT
2014-03-31 09:35 - 2013-11-12 20:20 - 00231584 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2014-03-31 03:51 - 2013-11-12 20:43 - 88028728 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

Some content of TEMP:
====================
C:\Users\Rada\AppData\Local\Temp\AutoRun.exe
C:\Users\Rada\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Rada\AppData\Local\Temp\BackupSetup.exe
C:\Users\Rada\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\Rada\AppData\Local\Temp\Delta.exe
C:\Users\Rada\AppData\Local\Temp\DeltaTB.exe
C:\Users\Rada\AppData\Local\Temp\EAInstall.dll
C:\Users\Rada\AppData\Local\Temp\Foxit Updater.exe
C:\Users\Rada\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Rada\AppData\Local\Temp\MybabylonTB.exe
C:\Users\Rada\AppData\Local\Temp\ose00000.exe
C:\Users\Rada\AppData\Local\Temp\Tsu9D83BDEA.dll
C:\Users\Rada\AppData\Local\Temp\TsuAA288824.dll
C:\Users\Rada\AppData\Local\Temp\Uninstall.exe
C:\Users\Rada\AppData\Local\Temp\WSSetup.exe


==================== Bamital & volsnap Check =================

C:\Windows\explorer.exe => MD5 is legit
C:\Windows\system32\winlogon.exe => MD5 is legit
C:\Windows\system32\wininit.exe => MD5 is legit
C:\Windows\system32\svchost.exe => MD5 is legit
C:\Windows\system32\services.exe => MD5 is legit
C:\Windows\system32\User32.dll => MD5 is legit
C:\Windows\system32\userinit.exe => MD5 is legit
C:\Windows\system32\rpcss.dll => MD5 is legit
C:\Windows\system32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2014-04-29 10:49

==================== End Of Log ============================

Deinstaliraj sledece:

Bandoo - iLivid
Torntv




1. Otvori Notepad (Text Document) i iskopiraj sledeći tekst unutar kod polja ispod:


2. Sačuvaj notepad na Desktop pod nazivom fixlist.txt
To možes uraditi i iz notepad-a => klik na File potom na Save As i u novom prozoru, dole pod File Name: staviš za naziv fixlist.txt
Napomena: Važno je da se oba fajla, FRST i fixlist nalaze na istoj lokaciji jer u suprotnom fix nece raditi.

3. Ponovo pokreni FRST/FRST64, klikni jednom na dugme Fix i sačekaj.
Ukoliko alat zatraži restart sistema, dozvoli mu i postaraj se da alat kompletira fix nakon restarta sistema.



Alat će formirati log (Fixlog.txt) na Desktop-u. Potrebno je sadržaj tog loga iskopirati u poruku.
Napomena: Ukoliko te alat upozori da postoji novija verzija, postaraj se da preuzmes i koristiš ažuriranu kopiju FRST-a.





*********** Sledece ************







Pokreni AdwCleaner
Klikni Scan
Klikni Clean
Potvrdi sa OK sve do restarta.

Dostavi mi log fajl.

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x86) Version:30-04-2014 03
Ran by Rada at 2014-05-01 12:55:31 Run:1
Running from C:\Users\Rada\Desktop
Boot Mode: Normal

==============================================

Content of fixlist:
*****************
Start
HKU\S-1-5-21-3138685496-2236490502-2148332070-1000\...\Run: [iLivid] => "C:\Users\Rada\AppData\Local\iLivid\iLivid.exe" -autorun
C:\Users\Rada\AppData\Local\iLivid\iLivid.exe
IFEO\bitguard.exe: [Debugger] tasklist.exe
IFEO\bprotect.exe: [Debugger] tasklist.exe
IFEO\bpsvc.exe: [Debugger] tasklist.exe
IFEO\browsemngr.exe: [Debugger] tasklist.exe
IFEO\browserdefender.exe: [Debugger] tasklist.exe
IFEO\browsermngr.exe: [Debugger] tasklist.exe
IFEO\browserprotect.exe: [Debugger] tasklist.exe
IFEO\browsersafeguard.exe: [Debugger] tasklist.exe
IFEO\bundlesweetimsetup.exe: [Debugger] tasklist.exe
IFEO\cltmngsvc.exe: [Debugger] tasklist.exe
IFEO\delta babylon.exe: [Debugger] tasklist.exe
IFEO\delta tb.exe: [Debugger] tasklist.exe
IFEO\delta2.exe: [Debugger] tasklist.exe
IFEO\deltainstaller.exe: [Debugger] tasklist.exe
IFEO\deltasetup.exe: [Debugger] tasklist.exe
IFEO\deltatb.exe: [Debugger] tasklist.exe
IFEO\deltatb_2501-c733154b.exe: [Debugger] tasklist.exe
IFEO\dprotectsvc.exe: [Debugger] tasklist.exe
IFEO\iminentsetup.exe: [Debugger] tasklist.exe
IFEO\protectedsearch.exe: [Debugger] tasklist.exe
IFEO\rjatydimofu.exe: [Debugger] tasklist.exe
IFEO\searchprotection.exe: [Debugger] tasklist.exe
IFEO\searchprotector.exe: [Debugger] tasklist.exe
IFEO\snapdo.exe: [Debugger] tasklist.exe
IFEO\stinst32.exe: [Debugger] tasklist.exe
IFEO\stinst64.exe: [Debugger] tasklist.exe
IFEO\sweetimsetup.exe: [Debugger] tasklist.exe
IFEO\tbdelta.exetoolbar783881609.exe: [Debugger] tasklist.exe
IFEO\utiljumpflip.exe: [Debugger] tasklist.exe
HKLM\...\AppCertDlls: [x86] -> C:\Program Files\Movies Toolbar\Datamngr\apcrtldr.dll <===== ATTENTION
HKLM\...\AppCertDlls: [x64] -> c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll <===== ATTENTION
C:\Program Files\Movies Toolbar\Datamngr\apcrtldr.dll
c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll
SearchScopes: HKLM - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=484&systemid=406&v=n11465-251&apn_uid=7301186132224702&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www.buenosearch.com/?q={searchTerms}&babsrc=SP_ss&mntrId=90EA00E04DA65259&affID=128403&tsp=5197
SearchScopes: HKCU - {9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} URL = http://dts.search.ask.com/sr?src=ieb&gct=ds&appid=484&systemid=406&v=n11465-251&apn_uid=7301186132224702&apn_dtid=BND406&o=APN10645&apn_ptnrs=AG6&q={searchTerms}
BHO: No Name - {11111111-1111-1111-1111-110511131190} -  No File
BHO: No Name - {F1C81E40-2485-4DB6-8C9D-04BD596B281E} -  No File
Toolbar: HKLM - No Name - {828DC97A-2277-4E10-92A9-4907FA0922A9} -  No File
FF Plugin HKCU: @unity3d.com/UnityPlayer,version=1.0 - C:\Users\Rada\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
FF SearchPlugin: C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\searchplugins\Ask.xml
FF SearchPlugin: C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\searchplugins\buenosearch.xml
FF SearchPlugin: C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml
FF Extension: Torntv V9.0 - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com [2014-03-25]
FF Extension: BuenoSearch - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\ffxtlbr@buenosearch.com [2014-03-25]
FF Extension: SaifewEibb - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\zhfa@xdzjlp.net [2014-03-25]
FF Extension: Ask New Tabs - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\{2FD73609-F02D-3849-D765-5F8F93ECC348} [2014-02-07]
FF Extension: Movies Toolbar (Dist. by Bandoo Media, Inc.) - C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\{d1dac034-9fd9-4c13-a388-d2e10e57707f} [2014-02-07]
C:\Users\Rada\AppData\Local\Temp\AutoRun.exe
C:\Users\Rada\AppData\Local\Temp\AutoRunGUI.dll
C:\Users\Rada\AppData\Local\Temp\BackupSetup.exe
C:\Users\Rada\AppData\Local\Temp\BundleSweetIMSetup.exe
C:\Users\Rada\AppData\Local\Temp\Delta.exe
C:\Users\Rada\AppData\Local\Temp\DeltaTB.exe
C:\Users\Rada\AppData\Local\Temp\EAInstall.dll
C:\Users\Rada\AppData\Local\Temp\Foxit Updater.exe
C:\Users\Rada\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\Rada\AppData\Local\Temp\MybabylonTB.exe
C:\Users\Rada\AppData\Local\Temp\ose00000.exe
C:\Users\Rada\AppData\Local\Temp\Tsu9D83BDEA.dll
C:\Users\Rada\AppData\Local\Temp\TsuAA288824.dll
C:\Users\Rada\AppData\Local\Temp\Uninstall.exe
C:\Users\Rada\AppData\Local\Temp\WSSetup.exe
Task: {06A61BB6-6066-4A02-9A4F-54E1F6DA0FB3} - System32\Tasks\Torntv V9.0-updater => C:\Program Files\Torntv V9.0\Torntv V9.0-updater.exe <==== ATTENTION
Task: {5A3464AC-E090-4E5C-B994-DE7937FE7C3B} - System32\Tasks\Torntv V9.0-firefoxinstaller => C:\Program Files\Torntv V9.0\Torntv V9.0-firefoxinstaller.exe <==== ATTENTION
Task: {AEFC594B-2568-4301-94A2-57E48B310A52} - System32\Tasks\Torntv V9.0-codedownloader => C:\Program Files\Torntv V9.0\Torntv V9.0-codedownloader.exe <==== ATTENTION
Task: {B7772710-C97C-4BA4-B940-D9AAF644788E} - System32\Tasks\EPUpdater => C:\Users\Rada\AppData\Roaming\BabSolution\Shared\BabMaint.exe [2013-12-12] () <==== ATTENTION
Task: {C7DA8DE0-430C-46CF-9D61-EF0C5B9D624F} - System32\Tasks\Torntv V9.0-enabler => C:\Program Files\Torntv V9.0\Torntv V9.0-enabler.exe <==== ATTENTION
Task: {FF81D344-366E-42DE-8F88-B3588E8FAE1F} - System32\Tasks\Torntv V9.0-chromeinstaller => C:\Program Files\Torntv V9.0\Torntv V9.0-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Torntv V9.0-chromeinstaller.job => C:\Program Files\Torntv V9.0\Torntv V9.0-chromeinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Torntv V9.0-codedownloader.job => C:\Program Files\Torntv V9.0\Torntv V9.0-codedownloader.exe <==== ATTENTION
Task: C:\Windows\Tasks\Torntv V9.0-enabler.job => C:\Program Files\Torntv V9.0\Torntv V9.0-enabler.exe <==== ATTENTION
Task: C:\Windows\Tasks\Torntv V9.0-firefoxinstaller.job => C:\Program Files\Torntv V9.0\Torntv V9.0-firefoxinstaller.exe <==== ATTENTION
Task: C:\Windows\Tasks\Torntv V9.0-updater.job => C:\Program Files\Torntv V9.0\Torntv V9.0-updater.exe <==== ATTENTION
End
*****************

HKU\S-1-5-21-3138685496-2236490502-2148332070-1000\Software\Microsoft\Windows\CurrentVersion\Run\\iLivid => Value deleted successfully.
"C:\Users\Rada\AppData\Local\iLivid\iLivid.exe" => File/Directory not found.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bitguard.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bprotect.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bpsvc.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsemngr.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserdefender.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsermngr.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browserprotect.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\browsersafeguard.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\bundlesweetimsetup.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\cltmngsvc.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta babylon.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta tb.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\delta2.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltainstaller.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltasetup.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltatb.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\deltatb_2501-c733154b.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\dprotectsvc.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\iminentsetup.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\protectedsearch.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\rjatydimofu.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotection.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\searchprotector.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\snapdo.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\stinst32.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\stinst64.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\sweetimsetup.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\tbdelta.exetoolbar783881609.exe => Key deleted successfully.
HKLM\Software\microsoft\windows nt\currentversion\Image File Execution Options\utiljumpflip.exe => Key deleted successfully.
HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls\\x86 => Value deleted successfully.
HKLM\System\CurrentControlSet\Control\Session Manager\AppCertDlls\\x64 => Value deleted successfully.
"C:\Program Files\Movies Toolbar\Datamngr\apcrtldr.dll" => File/Directory not found.
"c:\program files\movies toolbar\datamngr\x64\apcrtldr.dll" => File/Directory not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{11111111-1111-1111-1111-110511131190} => Key deleted successfully.
HKCR\CLSID\{11111111-1111-1111-1111-110511131190} => Key not found.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F1C81E40-2485-4DB6-8C9D-04BD596B281E} => Key deleted successfully.
HKCR\CLSID\{F1C81E40-2485-4DB6-8C9D-04BD596B281E} => Key not found.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{828DC97A-2277-4E10-92A9-4907FA0922A9} => Value deleted successfully.
HKCR\CLSID\{828DC97A-2277-4E10-92A9-4907FA0922A9} => Key not found.
HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0 => Key deleted successfully.
C:\Users\Rada\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll => Moved successfully.
C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\searchplugins\Ask.xml => Moved successfully.
C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\searchplugins\buenosearch.xml => Moved successfully.
C:\Program Files\mozilla firefox\browser\searchplugins\Ask.xml => Moved successfully.
C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\5a6bf058-b978-4b84-a2ec-6f5462cfccb2@10120365-d3c0-4ec9-8624-5fac2592d0df.com => Moved successfully.
C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\ffxtlbr@buenosearch.com => Moved successfully.
C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\zhfa@xdzjlp.net => Moved successfully.
C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\{2FD73609-F02D-3849-D765-5F8F93ECC348} => Moved successfully.
C:\Users\Rada\AppData\Roaming\Mozilla\Firefox\Profiles\ndjdpu39.default\Extensions\{d1dac034-9fd9-4c13-a388-d2e10e57707f} => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\AutoRun.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\AutoRunGUI.dll => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\BackupSetup.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\BundleSweetIMSetup.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\Delta.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\DeltaTB.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\EAInstall.dll => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\Foxit Updater.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\fp_pl_pfs_installer.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\MybabylonTB.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\ose00000.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\Tsu9D83BDEA.dll => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\TsuAA288824.dll => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\Uninstall.exe => Moved successfully.
C:\Users\Rada\AppData\Local\Temp\WSSetup.exe => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{06A61BB6-6066-4A02-9A4F-54E1F6DA0FB3} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{06A61BB6-6066-4A02-9A4F-54E1F6DA0FB3} => Key deleted successfully.
C:\Windows\System32\Tasks\Torntv V9.0-updater => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V9.0-updater => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{5A3464AC-E090-4E5C-B994-DE7937FE7C3B} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{5A3464AC-E090-4E5C-B994-DE7937FE7C3B} => Key deleted successfully.
C:\Windows\System32\Tasks\Torntv V9.0-firefoxinstaller => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V9.0-firefoxinstaller => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{AEFC594B-2568-4301-94A2-57E48B310A52} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{AEFC594B-2568-4301-94A2-57E48B310A52} => Key deleted successfully.
C:\Windows\System32\Tasks\Torntv V9.0-codedownloader => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V9.0-codedownloader => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{B7772710-C97C-4BA4-B940-D9AAF644788E} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{B7772710-C97C-4BA4-B940-D9AAF644788E} => Key deleted successfully.
C:\Windows\System32\Tasks\EPUpdater => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\EPUpdater => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{C7DA8DE0-430C-46CF-9D61-EF0C5B9D624F} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C7DA8DE0-430C-46CF-9D61-EF0C5B9D624F} => Key deleted successfully.
C:\Windows\System32\Tasks\Torntv V9.0-enabler => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V9.0-enabler => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{FF81D344-366E-42DE-8F88-B3588E8FAE1F} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{FF81D344-366E-42DE-8F88-B3588E8FAE1F} => Key deleted successfully.
C:\Windows\System32\Tasks\Torntv V9.0-chromeinstaller => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Torntv V9.0-chromeinstaller => Key deleted successfully.
C:\Windows\Tasks\Torntv V9.0-chromeinstaller.job not found.
C:\Windows\Tasks\Torntv V9.0-codedownloader.job not found.
C:\Windows\Tasks\Torntv V9.0-enabler.job not found.
C:\Windows\Tasks\Torntv V9.0-firefoxinstaller.job not found.
C:\Windows\Tasks\Torntv V9.0-updater.job not found.

==== End of Fixlog ====
Nisam sigurna da li sam uspela da deinstaliram bandoo- ilivid i torntv.

Ok sada cemo da pogledamo jos malo po browserima, to jest precizniju dijagnozu pa ako treba da odradimo fix



Preuzmi smeenk-ov zoek.zip ili zoek.rar () sa ovog ili ovog linka i sačuvaj ga na Desktop.

Raspakuj arhivu u neki folder (uputstvo), a zatim:

•   zatvori browser i ostale pokrenute programe;
  
•   privremeno deaktiviraj zaštitni softver ( ukoliko je to potrebno ) Uputstvo ;
  
•   dvoklikom pokreni zoek na ikonicu programa ;
  pričekaj da se alat startuje ...
  
  
  
•   U beli okvir prozora iskopiraj sledeći tekst:
  
  
  Kod:
  filesrcm;
  startupall;
  emptyalltemp;
  autoclean;
  emptyclsid;
  
  
  
• Klikni na dugme i pričekaj da se skeniranje završi.
  
  
  
• zoek ce po potrebi, restartovati Windows a na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.
  

Napomena:Izveštaj će biti sačuvan pod nazivom zoek-results.log na sistemskoj particiji (tipična lokacija: C:\zoek-results.log)


:arrow: Kopiraj sadrzaj tog loga u poruku.

Ne znam gde treba da iskopiram ovaj tekst, pretpostavljam da nisam dobro raspakovala zoek, ali ne znam kako, mada vise mi ne iskacu one "bube", ali bih volela da uradim do kraja sve sto treba.

Raspakuj u folder i vidi sliku

Kad otvorim folder izgleda mi kao na slici i kad udjem tu gde treba kompjuter mi se restartuje.

Nesto se tvoj sistem i zoek ne podnose  nema veze ako smo resili problem onda nema potrebe dalje da se petlja.

Samo da jos da pocistimo temp fajlove.


 Preuzmi TFC (Temp File Cleaner) i sacuvaj ga na Desktop.

• Dvoklikom pokreni program i klikni na dugme Start da bi dozvolio programu da otpocne skeniranje.
  
• Kada program zavrsi skeniranje,mozda ce zatraziti da restartujes racunar. Dozvoli mu.

Napomena: Kada zavrsis sa ciscenjem temp fajlova,program mozes obrisati ili ga sacuvati za kasniju upotrebu.




****************




• Sledeća procedura će implementirati završno čišćenje.

:arrow:  Preuzmi "Xplode"-ov DelFix alat i snimi ga na Desktop.
Dvoklikom pokreni alat i štikliraj kućice ispred sledećih opcija;

Remove disinfection tools
Create registry backup
Purge System Restore

Klikni na dugme Run i pričekaj trenutak dok alat ne završi svoj rad.
Od ovog trenutka, svi korišćeni alati u ovoj temi bi trebali biti obrisani.
Alat će takođe formirati izveštaj za tebe. (C:\DelFix.txt)

Alat će snimiti i zdravo stanje registy-ja i napraviti backup koristeci integrisan program "ERUNT" u %windir%\ERUNT\DelFix
Alat briše stare system restore tačke i pravi novu, svežu tačku nakon čišćenja.



Azuriraj Firefox na novu verziju.