Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 13-08-2013 01
Ran by Dragan (administrator) on 13-08-2013 20:49:54
Running from C:\Users\Dragan\Downloads\Programs
Windows 7 Ultimate Service Pack 1 (X64) OS Language: English(US)
Internet Explorer Version 8
Boot Mode: Normal

==================== Processes (Whitelisted) =================

(AMD) C:\Windows\system32\atiesrxx.exe
(AMD) C:\Windows\system32\atieclxx.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe
() C:\Windows\SysWOW64\ASDR.exe
() C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe
() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Infowatch) C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe
(Intel Corporation) C:\Windows\system32\IProsetMonitor.exe
(Skype Technologies S.A.) C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(WIBU-SYSTEMS AG) C:\Program Files (x86)\CodeMeter\Runtime\bin\CodeMeter.exe
(Microsoft Corporation) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe
(Atheros Commnucations) C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe
(ASUSTeK Inc.) C:\Program Files (x86)\ASUS\SmartDoctor\SmartDoctor.exe
(Akamai Technologies, Inc.) C:\Users\Dragan\AppData\Local\Akamai\netsession_win.exe
(Nokia) C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe
() C:\Program Files (x86)\Garena Plus\ggdllhost.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe
(Akamai Technologies, Inc.) C:\Users\Dragan\AppData\Local\Akamai\netsession_win.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IDMan.exe
(MagicISO, Inc.) C:\Program Files (x86)\MagicDisc\MagicDisc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe
(ACD Systems) C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe
(Renesas Electronics Corporation) C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Tonec Inc.) C:\Program Files (x86)\Internet Download Manager\IEMonitor.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\ServiceLayer.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclUSBSrv64.exe
(Nokia) C:\Program Files (x86)\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
(Kaspersky Lab ZAO) C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\klwtblfs.exe
(Microsoft Corporation) C:\Windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe
(Kaspersky Lab) C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\stpass.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\iPhone Simulator\pnSvc.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\EC Simulator.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe
(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_11_8_800_94.exe
(Google Inc.) C:\Users\Dragan\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dragan\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dragan\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dragan\AppData\Local\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Users\Dragan\AppData\Local\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\osk.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [RtHDVCpl] - C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11545192 2012-05-02] (Realtek Semiconductor)
HKLM\...\Run: [BCSSync] - C:\Program Files\Microsoft Office\Office14\BCSSync.exe [112512 2010-03-13] (Microsoft Corporation)
HKLM\...\Run: [AtherosBtStack] - C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe [617120 2011-03-13] (Atheros Commnucations)
HKLM\...\Run: [AthBtTray] - C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe [379552 2011-03-13] (Atheros Commnucations)
HKCU\...\Run: [Akamai NetSession Interface] - C:\Users\Dragan\AppData\Local\Akamai\netsession_win.exe [4489472 2013-06-05] (Akamai Technologies, Inc.)
HKCU\...\Run: [GarenaPlus] - C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe [9697072 2013-07-15] ()
HKCU\...\Run: [NokiaSuite.exe] - C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe [1090040 2012-12-21] (Nokia)
HKCU\...\Run: [Steam] - C:\Program Files (x86)\Steam\Steam.exe [1807272 2013-07-27] (Valve Corporation)
HKCU\...\Run: [Facebook Update] - C:\Users\Dragan\AppData\Local\Facebook\Update\FacebookUpdate.exe [138096 2013-03-09] (Facebook Inc.)
HKCU\...\Run: [IDMan] - C:\Program Files (x86)\Internet Download Manager\IDMan.exe [3665488 2013-08-07] (Tonec Inc.)
HKLM-x32\...\Run: [ASUS ShellProcess Execute] - C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe [252544 2010-09-28] (ASUSTeK Computer Inc.)
HKLM-x32\...\Run: [ACPW05EN] - C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe [822384 2011-11-17] (ACD Systems)
HKLM-x32\...\Run: [Adobe ARM] - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [958576 2013-04-04] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [NUSB3MON] - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [113288 2010-11-17] (Renesas Electronics Corporation)
HKLM-x32\...\Run: [Nikon Message Center 2] - C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe [571392 2011-10-30] (Nikon Corporation)
HKLM-x32\...\Run: [APSDaemon] - C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [59280 2012-08-27] (Apple Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [253816 2013-03-12] (Oracle Corporation)
HKLM-x32\...\Run: [AVP] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
HKLM-x32\...\Run: [StartCCC] - C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [336384 2011-05-24] (Advanced Micro Devices, Inc.)
Startup: C:\Users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk
ShortcutTarget: MagicDisc.lnk -> C:\Program Files (x86)\MagicDisc\MagicDisc.exe (MagicISO, Inc.)

==================== Internet (Whitelisted) ====================

ProxyServer: http=;ftp=;https=;
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://start.funmoods.com/?f=1&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984
StartMenuInternet: IEXPLORE.EXE - C:\Program Files (x86)\Internet Explorer\iexplore.exe
SearchScopes: HKLM - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984
SearchScopes: HKLM - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984
SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984
SearchScopes: HKLM-x32 - Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984
SearchScopes: HKCU - Backup.Old.DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
SearchScopes: HKCU - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984
BHO: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)
BHO: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO: Skype add-on for Internet Explorer - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\x64\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
BHO-x32: IDM integration (IDMIEHlprObj Class) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)
BHO-x32: Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab)
BHO-x32: Content Blocker Plugin - {5564CC73-EFA7-4CBF-918A-5CF7FBBFFF4F} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\ContentBlocker\ie_content_blocker_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~3\Office14\GROOVEEX.DLL (Microsoft Corporation)
BHO-x32: Virtual Keyboard Plugin - {73455575-E40C-433C-9784-C78DC7761455} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\VirtualKeyboard\ie_virtual_keyboard_plugin.dll (Kaspersky Lab ZAO)
BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
BHO-x32: CIESpeechBHO Class - {8D10F6C4-0E01-4BD4-8601-11AC1FDF8126} - C:\Program Files (x86)\Bluetooth Suite\IEPlugIn.dll (Atheros Commnucations)
BHO-x32: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
BHO-x32: Safe Money Plugin - {9E6D0D23-3D72-4A94-AE1F-2D167624E3D9} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\OnlineBanking\online_banking_bho.dll (Kaspersky Lab ZAO)
BHO-x32: Skype Browser Helper - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
BHO-x32: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~3\Office14\URLREDIR.DLL (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
BHO-x32: URL Advisor Plugin - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\IEExt\UrlAdvisor\klwtbbho.dll (Kaspersky Lab ZAO)
Toolbar: HKLM-x32 - Kaspersky Passsword Manager Toolbar - {215BA832-75A3-426E-A4FC-7C5B58CE6A10} - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\spIEBho.dll (Kaspersky Lab)
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF ProfilePath: C:\Users\Dragan\AppData\Roaming\Mozilla\Firefox\Profiles\o94wqkcc.default
FF SelectedSearchEngine: YouTube
FF Homepage: hxxp://www.google.com/
FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_8_800_94.dll ()
FF Plugin: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF Plugin-x32: @java.com/DTPlugin,version=10.25.2 - C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=10.25.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 - C:\Program Files (x86)\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/OfficeAuthz,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 - C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF Plugin-x32: @nokia.com/EnablerPlugin - C:\Program Files (x86)\Nokia\Nokia Suite\npNokiaSuiteEnabler.dll ( )
FF Plugin-x32: @t.garena.com/garenatalk - C:\Program Files (x86)\Garena Plus\bbtalk\plugins\npPlugin\npGarenaTalkPlugin.dll ( Garena)
FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin-x32: @veetle.com/veetleCorePlugin,version=0.9.19 - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
FF Plugin-x32: @veetle.com/veetlePlayerPlugin,version=0.9.18 - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
FF Plugin-x32: @videolan.org/vlc,version=2.0.2 - C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF Plugin HKCU: @kaspersky.com/Kaspersky PURE - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\npkpmAutofill.dll (Kaspersky Lab)
FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\Dragan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
FF Plugin HKCU: @tools.google.com/Google Update;version=3 - C:\Users\Dragan\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: @tools.google.com/Google Update;version=9 - C:\Users\Dragan\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
FF Plugin HKCU: ubisoft.com/uplaypc - C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll No File
FF SearchPlugin: C:\Users\Dragan\AppData\Roaming\Mozilla\Firefox\Profiles\o94wqkcc.default\searchplugins\youtube.xml
FF Extension: Default - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF HKLM-x32\...\Firefox\Extensions: [url_advisor@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF Extension: Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [virtual_keyboard@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF Extension: Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [content_blocker@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF Extension: Content Blocker - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\content_blocker@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [anti_banner@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF Extension: Anti-Banner - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\anti_banner@kaspersky.com
FF HKLM-x32\...\Firefox\Extensions: [online_banking@kaspersky.com] C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF Extension: Safe Money - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\online_banking@kaspersky.com
FF HKCU\...\Firefox\Extensions: [mozilla_cc@internetdownloadmanager.com] C:\Users\Dragan\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Dragan\AppData\Roaming\IDM\idmmzcc5
FF HKCU\...\Firefox\Extensions: [{72CA2996-F580-47DF-98FF-0B853D09CEC8}] C:\Users\Dragan\AppData\Roaming\Kaspersky Lab\Password Manager\kpmAutofill
FF Extension: Wtyczka Menedżera haseł - C:\Users\Dragan\AppData\Roaming\Kaspersky Lab\Password Manager\kpmAutofill
FF HKCU\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] C:\Users\Dragan\AppData\Roaming\IDM\idmmzcc5
FF Extension: IDM CC - C:\Users\Dragan\AppData\Roaming\IDM\idmmzcc5

Chrome:
=======
CHR HomePage: hxxp://start.funmoods.com/?f=1&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984
CHR RestoreOnStartup: "hxxp://www.google.com/"
CHR DefaultSearchURL: (Google) - {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
CHR DefaultSuggestURL: (Google) - {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}{google:zeroPrefixUrl}sugkey={google:suggestAPIKeyParameter}
CHR Plugin: (Remoting Viewer) - internal-remoting-viewer
CHR Plugin: (Native Client) - C:\Users\Dragan\AppData\Local\Google\Chrome\Application\28.0.1500.95\ppGoogleNaClPluginChrome.dll ()
CHR Plugin: (Chrome PDF Viewer) - C:\Users\Dragan\AppData\Local\Google\Chrome\Application\28.0.1500.95\pdf.dll ()
CHR Plugin: (Shockwave Flash) - C:\Users\Dragan\AppData\Local\Google\Chrome\Application\28.0.1500.95\gcswf32.dll No File
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_235.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\12.0.1.288_0\plugin/npUrlAdvisor.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\12.0.1.288_0\plugin/npVKPlugin.dll No File
CHR Plugin: (Kaspersky Anti-Virus) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\12.0.1.288_0\plugin/npABPlugin.dll No File
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Browser\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Kaspersky Password Manager) - C:\PROGRA~2\KASPER~1\KASPER~1.0\KASPER~2\MODULE~1\npkpmAutofill.dll No File
CHR Plugin: (Veetle TV Player) - C:\Program Files (x86)\Veetle\Player\npvlc.dll (Veetle Inc)
CHR Plugin: (Veetle TV Core) - C:\Program Files (x86)\Veetle\plugins\npVeetle.dll (Veetle Inc)
CHR Plugin: (Google Update) - C:\Users\Dragan\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll No File
CHR Extension: (YouTube) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.6_0
CHR Extension: (Google Search) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.20_0
CHR Extension: (Kaspersky URL Advisor) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj\13.0.2.558_0
CHR Extension: (Password Manager plugin) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ddagfbbgmdhmolnjoaghlapikdcahbbl\7.0.1.75
CHR Extension: (Safe Money) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\hakdifolhalapjijoafobooafbilfakh\13.0.2.558_0
CHR Extension: (Virtual Keyboard) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh\13.0.2.558_0
CHR Extension: (IDM Integration Module) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn\6.17.7_0
CHR Extension: (Skype Click to Call) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl\6.10.0.13089_0
CHR Extension: (Gmail) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_1
CHR Extension: (Anti-Banner) - C:\Users\Dragan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman\13.0.2.558_0
CHR HKLM\...\Chrome\Extension: [bbjciahceamgodcoidkjpchnokgfpphh] - C:\Users\Dragan\AppData\Local\funmoods.crx
CHR HKLM\...\Chrome\Extension: [cjpglkicenollcignonpgiafdgfeehoj] - C:\Users\Dragan\AppData\Local\funmoods-speeddial.crx
CHR HKLM-x32\...\Chrome\Extension: [dchlnpcodkpfdpacogkljefecpegganj] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx
CHR HKLM-x32\...\Chrome\Extension: [hakdifolhalapjijoafobooafbilfakh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [hghkgaeecgjhjkannahfamoehjmkjail] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx
CHR HKLM-x32\...\Chrome\Extension: [jagncdcchgajhfhijbbhecadmaiegcmh] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx
CHR HKLM-x32\...\Chrome\Extension: [jeaohhlajejodfjadcponpnjgkiikocn] - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx
CHR HKLM-x32\...\Chrome\Extension: [pjldcfjmnllhmgjclecdnfampinooman] - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx

==================== Services (Whitelisted) =================

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.00.13\atkexComSvc.exe [918144 2012-05-02] ()
R2 ASDR; C:\Windows\SysWOW64\ASDR.exe [61440 2009-07-27] ()
R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.13\aaHMSvc.exe [915584 2012-05-02] ()
R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe [586880 2010-10-21] ()
R2 AVP; C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe [356968 2012-12-20] (Kaspersky Lab ZAO)
R2 CSObjectsSrv; C:\Program Files (x86)\Common Files\InfoWatch\CryptoStorage\ProtectedObjectsSrv.exe [819040 2012-12-21] (Infowatch)

==================== Drivers (Whitelisted) ====================

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2012-05-02] ()
R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2012-05-02] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2010-08-03] ()
R0 CSCrySec; C:\Windows\System32\DRIVERS\CSCrySec.sys [84536 2011-06-02] (Infowatch)
R1 CSVirtualDiskDrv; C:\Windows\System32\DRIVERS\CSVirtualDiskDrv.sys [66616 2011-06-02] (Infowatch)
R1 EIO64; C:\Windows\System32\DRIVERS\EIO64.sys [16384 2013-08-12] (ASUSTeK Computer Inc.)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [23680 2010-02-22] (ASUSTeK Computer Inc.)
R3 IOMap; C:\Windows\system32\drivers\IOMap64.sys [23680 2010-02-22] (ASUSTeK Computer Inc.)
R0 kl1; C:\Windows\System32\DRIVERS\kl1.sys [458584 2012-06-19] (Kaspersky Lab ZAO)
R1 KLIF; C:\Windows\System32\DRIVERS\klif.sys [620128 2013-08-11] (Kaspersky Lab ZAO)
R1 KLIM6; C:\Windows\System32\DRIVERS\klim6.sys [28504 2012-08-02] (Kaspersky Lab ZAO)
R3 klkbdflt; C:\Windows\System32\DRIVERS\klkbdflt.sys [29016 2012-09-03] (Kaspersky Lab)
R3 klmouflt; C:\Windows\System32\DRIVERS\klmouflt.sys [29528 2012-09-03] (Kaspersky Lab)
R1 kltdi; C:\Windows\System32\DRIVERS\kltdi.sys [54368 2013-08-11] (Kaspersky Lab ZAO)
R1 kneps; C:\Windows\System32\DRIVERS\kneps.sys [178448 2013-08-11] (Kaspersky Lab ZAO)
R1 Serial; C:\Windows\System32\DRIVERS\serial.sys [94208 2009-07-14] (Brother Industries Ltd.)
S3 catchme; \??\C:\ComboFix\catchme.sys

S3 GGSAFERDriver; \??\C:\Program Files (x86)\Garena Plus\Room\safedrv.sys

S3 Synth3dVsc; System32\drivers\synth3dvsc.sys

S3 tsusbhub; system32\drivers\tsusbhub.sys

S3 VGPU; System32\drivers\rdvgkmd.sys

==================== NetSvcs (Whitelisted) ===================


==================== One Month Created Files and Folders ========

2013-08-13 15:44 - 2013-08-13 15:44 - 00000000 ___RD C:\Users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-08-13 15:44 - 2013-08-13 15:44 - 00000000 ____H C:\ProgramData\cm-lock
2013-08-13 13:38 - 2013-08-13 13:38 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-13 13:38 - 2013-08-13 13:38 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Mozilla
2013-08-13 13:38 - 2013-08-13 13:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-13 13:38 - 2013-08-13 13:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-13 13:24 - 2013-08-13 13:24 - 00281896 _____ (Mozilla) C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0 (2).exe
2013-08-13 13:23 - 2013-08-13 13:23 - 00281896 _____ (Mozilla) C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0 (1).exe
2013-08-13 13:22 - 2013-08-13 13:22 - 00000000 ____D C:\ProgramData\ATI
2013-08-13 13:19 - 2013-08-13 13:19 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-08-13 13:19 - 2013-08-13 13:19 - 00000000 ____D C:\Program Files (x86)\AMD APP
2013-08-13 13:18 - 2013-08-13 13:19 - 00000000 ____D C:\Program Files\ATI Technologies
2013-08-13 13:18 - 2013-08-13 13:19 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-08-13 13:07 - 2013-08-12 15:48 - 169958188 _____ C:\8_861_Asus_Vista_Win7_WHQL.zip
2013-08-12 18:17 - 2013-08-13 15:44 - 00003496 _____ C:\Windows\System32\Tasks\gg_uac_daemon_Dragan
2013-08-12 18:13 - 2013-08-12 18:13 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2013-08-12 18:12 - 2013-08-12 18:12 - 00016384 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\EIO64.sys
2013-08-12 16:09 - 2013-08-12 16:09 - 00003782 _____ C:\Users\Dragan\Desktop\Report.xml.htm
2013-08-12 15:47 - 2013-08-12 15:48 - 169958188 _____ C:\Users\Dragan\Desktop\8_861_Asus_Vista_Win7_WHQL.zip
2013-08-12 13:10 - 2013-08-12 13:10 - 00002438 _____ C:\Users\Dragan\AppData\Local\Tempdetails.1.html
2013-08-12 13:09 - 2013-08-13 14:16 - 00010072 _____ C:\Users\Dragan\AppData\Local\Temp7.html
2013-08-12 13:09 - 2013-08-13 14:16 - 00000000 ____D C:\Program Files\WhoCrashed
2013-08-12 13:09 - 2013-08-12 13:09 - 00000836 _____ C:\Users\Dragan\Desktop\WhoCrashed.lnk
2013-08-11 20:35 - 2013-08-13 19:27 - 00000000 ____D C:\Users\Dragan\Desktop\Luther.1x05.720p_HDTV_x264-FoV
2013-08-11 17:02 - 2013-08-11 17:02 - 00054033 _____ C:\Users\Dragan\Downloads\[kickass.to]luther.season.1.complete.720p.torrent
2013-08-11 13:36 - 2013-08-11 13:36 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Kaspersky Lab
2013-08-11 13:14 - 2013-08-11 13:14 - 00000000 ____D C:\Windows\ELAMBKUP
2013-08-11 13:14 - 2012-07-11 17:09 - 00064856 _____ (Kaspersky Lab) C:\Windows\system32\klfphc.dll
2013-08-11 13:14 - 2011-06-02 14:39 - 00084536 _____ (Infowatch) C:\Windows\system32\Drivers\CSCrySec.sys
2013-08-11 13:14 - 2011-06-02 14:39 - 00066616 _____ (Infowatch) C:\Windows\system32\Drivers\CSVirtualDiskDrv.sys
2013-08-11 13:13 - 2013-08-11 13:25 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-08-11 13:13 - 2013-08-11 13:25 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-08-11 13:13 - 2013-08-11 13:13 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-08-11 12:59 - 2013-08-13 19:11 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\IDM
2013-08-11 12:59 - 2013-08-11 13:00 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2013-08-11 12:59 - 2013-08-11 12:59 - 00000000 ____D C:\ProgramData\IDM
2013-08-11 12:37 - 2013-08-11 12:37 - 00281896 _____ (Mozilla) C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0.exe
2013-08-10 18:16 - 2013-08-13 13:38 - 00000000 ____D C:\Users\Dragan\Desktop\New folder (3)
2013-08-08 22:55 - 2013-08-13 19:14 - 00000000 ____D C:\Users\Dragan\Desktop\Luther - 01x04 - Episode Four HDTV-720p HR
2013-08-08 22:55 - 2013-08-08 22:54 - 00010760 _____ C:\Users\Dragan\Desktop\Luther - 01x04 - Episode Four HDTV-720p HR.rar
2013-08-06 16:38 - 2013-06-27 11:57 - 00172920 _____ (Tonec Inc.) C:\Windows\system32\Drivers\idmwfp.sys
2013-08-05 01:32 - 2013-08-05 01:32 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-05 01:32 - 2013-08-05 01:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-04 21:06 - 2013-08-04 21:07 - 00098901 _____ C:\Users\Dragan\Downloads\Luther.S01.720p.BluRay.X264-7SinS.torrent
2013-08-04 13:28 - 2013-08-04 13:28 - 00015277 _____ C:\Users\Dragan\Downloads\[pornolab.net].t1697782.torrent
2013-08-03 21:41 - 2013-08-03 21:41 - 00203449 _____ C:\Users\Dragan\Downloads\Shameless.US.S01.720p.BluRay.X264-REWARD.torrent
2013-07-31 21:04 - 2013-07-31 21:04 - 00001240 _____ C:\Users\Dragan\Desktop\Recover My Files v5.lnk
2013-07-31 21:04 - 2013-07-31 21:04 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recover My Files v5
2013-07-31 21:04 - 2013-07-31 21:04 - 00000000 ____D C:\Program Files\CodeMeter
2013-07-31 21:04 - 2013-07-31 21:04 - 00000000 ____D C:\Program Files (x86)\GetData
2013-07-31 21:04 - 2013-07-31 21:04 - 00000000 ____D C:\Program Files (x86)\CodeMeter
2013-07-31 21:04 - 2012-07-19 15:18 - 00847272 _____ (WIBU-SYSTEMS AG) C:\Windows\system32\WibuCm64.dll
2013-07-31 21:04 - 2012-07-19 15:18 - 00666024 _____ (WIBU-SYSTEMS AG) C:\Windows\SysWOW64\WibuCm32.dll
2013-07-27 13:13 - 2013-07-27 13:13 - 00043496 _____ C:\ComboFix.txt
2013-07-27 13:04 - 2013-07-27 13:13 - 00000000 ____D C:\Qoobox
2013-07-27 13:04 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe
2013-07-27 13:04 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe
2013-07-27 13:04 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe
2013-07-27 13:04 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe
2013-07-27 13:04 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe
2013-07-27 13:04 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe
2013-07-27 13:04 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe
2013-07-27 13:04 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe
2013-07-27 13:03 - 2013-07-27 13:12 - 00000000 ____D C:\Windows\erdnt
2013-07-27 12:59 - 2013-07-27 12:59 - 00015167 _____ C:\Users\Dragan\Desktop\hijackthis.log
2013-07-26 14:48 - 2013-07-26 14:48 - 05250397 _____ C:\Users\Dragan\Downloads\finish.html
2013-07-26 12:31 - 2013-07-26 12:31 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Malwarebytes
2013-07-26 12:31 - 2013-07-26 12:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-25 23:34 - 2013-07-26 12:30 - 00000000 ____D C:\Users\Dragan\Desktop\The_latest_firmware_file_v03.21.03
2013-07-25 23:33 - 2013-07-31 21:04 - 00000000 ____D C:\Users\Dragan\Desktop\Fles backup
2013-07-18 19:35 - 2013-07-18 19:35 - 00001067 _____ C:\Users\Public\Desktop\Garena Plus.lnk

==================== One Month Modified Files and Folders =======

2013-08-13 20:49 - 2013-08-13 20:49 - 00000000 ____D C:\FRST
2013-08-13 20:17 - 2012-08-06 01:24 - 00000000 ____D C:\ProgramData\Kaspersky Lab
2013-08-13 20:16 - 2012-09-22 11:43 - 00000898 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2013-08-13 19:57 - 2013-03-09 20:52 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1414197781-3143207240-2177284752-1000UA.job
2013-08-13 19:57 - 2013-03-09 20:52 - 00000910 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1414197781-3143207240-2177284752-1000Core.job
2013-08-13 19:56 - 2012-05-11 17:18 - 00000912 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1414197781-3143207240-2177284752-1000UA.job
2013-08-13 19:27 - 2013-08-11 20:35 - 00000000 ____D C:\Users\Dragan\Desktop\Luther.1x05.720p_HDTV_x264-FoV
2013-08-13 19:25 - 2012-05-02 20:40 - 00000000 ____D C:\Users\Dragan\Downloads\Compressed
2013-08-13 19:14 - 2013-08-08 22:55 - 00000000 ____D C:\Users\Dragan\Desktop\Luther - 01x04 - Episode Four HDTV-720p HR
2013-08-13 19:11 - 2013-08-11 12:59 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\IDM
2013-08-13 15:49 - 2009-07-14 06:45 - 00010208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2013-08-13 15:49 - 2009-07-14 06:45 - 00010208 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2013-08-13 15:47 - 2012-05-03 02:43 - 01092248 _____ C:\Windows\WindowsUpdate.log
2013-08-13 15:46 - 2013-02-15 20:45 - 00000000 ____D C:\Program Files (x86)\Steam
2013-08-13 15:44 - 2013-08-13 15:44 - 00000000 ___RD C:\Users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-08-13 15:44 - 2013-08-13 15:44 - 00000000 ____H C:\ProgramData\cm-lock
2013-08-13 15:44 - 2013-08-12 18:17 - 00003496 _____ C:\Windows\System32\Tasks\gg_uac_daemon_Dragan
2013-08-13 15:44 - 2012-09-22 11:43 - 00000894 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2013-08-13 15:43 - 2012-08-01 12:51 - 00112166 _____ C:\Windows\setupact.log
2013-08-13 15:43 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2013-08-13 15:41 - 2012-05-02 20:40 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\DMCache
2013-08-13 14:20 - 2012-05-01 23:52 - 00224873 _____ C:\Users\Dragan\Desktop\presario.txt
2013-08-13 14:16 - 2013-08-12 13:09 - 00010072 _____ C:\Users\Dragan\AppData\Local\Temp7.html
2013-08-13 14:16 - 2013-08-12 13:09 - 00000000 ____D C:\Program Files\WhoCrashed
2013-08-13 13:42 - 2009-07-14 07:13 - 00778150 _____ C:\Windows\system32\PerfStringBackup.INI
2013-08-13 13:38 - 2013-08-13 13:38 - 00001151 _____ C:\Users\Public\Desktop\Mozilla Firefox.lnk
2013-08-13 13:38 - 2013-08-13 13:38 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Mozilla
2013-08-13 13:38 - 2013-08-13 13:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-13 13:38 - 2013-08-13 13:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2013-08-13 13:38 - 2013-08-10 18:16 - 00000000 ____D C:\Users\Dragan\Desktop\New folder (3)
2013-08-13 13:24 - 2013-08-13 13:24 - 00281896 _____ (Mozilla) C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0 (2).exe
2013-08-13 13:23 - 2013-08-13 13:23 - 00281896 _____ (Mozilla) C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0 (1).exe
2013-08-13 13:22 - 2013-08-13 13:22 - 00000000 ____D C:\ProgramData\ATI
2013-08-13 13:19 - 2013-08-13 13:19 - 00000000 ____D C:\Program Files\Common Files\ATI Technologies
2013-08-13 13:19 - 2013-08-13 13:19 - 00000000 ____D C:\Program Files (x86)\AMD APP
2013-08-13 13:19 - 2013-08-13 13:18 - 00000000 ____D C:\Program Files\ATI Technologies
2013-08-13 13:19 - 2013-08-13 13:18 - 00000000 ____D C:\Program Files (x86)\ATI Technologies
2013-08-13 13:18 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2013-08-13 13:00 - 2012-08-28 22:40 - 00000000 ____D C:\Windows\Minidump
2013-08-13 12:59 - 2012-08-28 22:40 - 507291860 _____ C:\Windows\MEMORY.DMP
2013-08-13 12:59 - 2012-05-17 13:18 - 00032134 _____ C:\Windows\PFRO.log
2013-08-13 01:35 - 2012-05-02 19:57 - 00000000 ___SD C:\Users\Dragan\Documents\Passwords Database
2013-08-13 00:26 - 2013-03-08 23:56 - 00000000 ____D C:\Users\Dragan\Desktop\30 Rock - 01x01 - Pilot 720p.WEB-DL HR
2013-08-12 23:56 - 2012-05-11 17:18 - 00000860 _____ C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1414197781-3143207240-2177284752-1000Core.job
2013-08-12 18:13 - 2013-08-12 18:13 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2013-08-12 18:13 - 2012-05-02 19:03 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2013-08-12 18:13 - 2012-05-02 18:16 - 00000000 ____D C:\Program Files (x86)\ASUS
2013-08-12 18:12 - 2013-08-12 18:12 - 00016384 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\EIO64.sys
2013-08-12 16:09 - 2013-08-12 16:09 - 00003782 _____ C:\Users\Dragan\Desktop\Report.xml.htm
2013-08-12 16:00 - 2012-09-29 12:49 - 00050346 _____ C:\Windows\DPINST.LOG
2013-08-12 15:48 - 2013-08-13 13:07 - 169958188 _____ C:\8_861_Asus_Vista_Win7_WHQL.zip
2013-08-12 15:48 - 2013-08-12 15:47 - 169958188 _____ C:\Users\Dragan\Desktop\8_861_Asus_Vista_Win7_WHQL.zip
2013-08-12 13:10 - 2013-08-12 13:10 - 00002438 _____ C:\Users\Dragan\AppData\Local\Tempdetails.1.html
2013-08-12 13:09 - 2013-08-12 13:09 - 00000836 _____ C:\Users\Dragan\Desktop\WhoCrashed.lnk
2013-08-12 02:09 - 2012-05-10 18:29 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\uTorrent
2013-08-11 20:38 - 2012-06-05 15:11 - 00000000 ____D C:\Users\Dragan\Desktop\New folder
2013-08-11 17:02 - 2013-08-11 17:02 - 00054033 _____ C:\Users\Dragan\Downloads\[kickass.to]luther.season.1.complete.720p.torrent
2013-08-11 13:36 - 2013-08-11 13:36 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Kaspersky Lab
2013-08-11 13:25 - 2013-08-11 13:13 - 00620128 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klif.sys
2013-08-11 13:25 - 2013-08-11 13:13 - 00090208 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\klflt.sys
2013-08-11 13:25 - 2012-10-18 14:50 - 00054368 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kltdi.sys
2013-08-11 13:25 - 2012-08-13 16:49 - 00178448 _____ (Kaspersky Lab ZAO) C:\Windows\system32\Drivers\kneps.sys
2013-08-11 13:14 - 2013-08-11 13:14 - 00000000 ____D C:\Windows\ELAMBKUP
2013-08-11 13:13 - 2013-08-11 13:13 - 00000000 ____D C:\Program Files (x86)\Kaspersky Lab
2013-08-11 13:05 - 2012-09-15 13:12 - 00000000 ____D C:\Users\Dragan\AppData\Local\CrashDumps
2013-08-11 13:00 - 2013-08-11 12:59 - 00000000 ____D C:\Program Files (x86)\Internet Download Manager
2013-08-11 12:59 - 2013-08-11 12:59 - 00000000 ____D C:\ProgramData\IDM
2013-08-11 12:37 - 2013-08-11 12:37 - 00281896 _____ (Mozilla) C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0.exe
2013-08-09 04:55 - 2012-07-19 10:22 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\vlc
2013-08-09 03:04 - 2012-05-23 01:21 - 00006144 _____ C:\Users\Dragan\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2013-08-08 22:54 - 2013-08-08 22:55 - 00010760 _____ C:\Users\Dragan\Desktop\Luther - 01x04 - Episode Four HDTV-720p HR.rar
2013-08-08 19:39 - 2012-09-15 06:13 - 00000000 ____D C:\Users\Dragan\Documents\Bluetooth Folder
2013-08-05 01:32 - 2013-08-05 01:32 - 00692104 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-08-05 01:32 - 2013-08-05 01:32 - 00071048 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-05 01:32 - 2012-05-08 15:16 - 00000000 ____D C:\Users\Dragan\AppData\Local\Adobe
2013-08-04 21:07 - 2013-08-04 21:06 - 00098901 _____ C:\Users\Dragan\Downloads\Luther.S01.720p.BluRay.X264-7SinS.torrent
2013-08-04 13:28 - 2013-08-04 13:28 - 00015277 _____ C:\Users\Dragan\Downloads\[pornolab.net].t1697782.torrent
2013-08-03 21:41 - 2013-08-03 21:41 - 00203449 _____ C:\Users\Dragan\Downloads\Shameless.US.S01.720p.BluRay.X264-REWARD.torrent
2013-07-31 22:01 - 2012-05-02 20:35 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\BSplayer PRO
2013-07-31 21:04 - 2013-07-31 21:04 - 00001240 _____ C:\Users\Dragan\Desktop\Recover My Files v5.lnk
2013-07-31 21:04 - 2013-07-31 21:04 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recover My Files v5
2013-07-31 21:04 - 2013-07-31 21:04 - 00000000 ____D C:\Program Files\CodeMeter
2013-07-31 21:04 - 2013-07-31 21:04 - 00000000 ____D C:\Program Files (x86)\GetData
2013-07-31 21:04 - 2013-07-31 21:04 - 00000000 ____D C:\Program Files (x86)\CodeMeter
2013-07-31 21:04 - 2013-07-25 23:33 - 00000000 ____D C:\Users\Dragan\Desktop\Fles backup
2013-07-31 01:51 - 2013-01-06 12:45 - 00000000 ____D C:\Windows\SysWOW64\%Report%
2013-07-27 13:39 - 2012-05-02 19:29 - 00000000 ____D C:\Users\Dragan\AppData\Local\Apps\2.0
2013-07-27 13:34 - 2013-04-11 16:28 - 00000000 ____D C:\Users\Dragan\Desktop\Trial Resetter v2.3.0.0
2013-07-27 13:34 - 2013-04-11 15:30 - 00000000 ____D C:\Users\Dragan\Desktop\KW-1.3.9.19
2013-07-27 13:13 - 2013-07-27 13:13 - 00043496 _____ C:\ComboFix.txt
2013-07-27 13:13 - 2013-07-27 13:04 - 00000000 ____D C:\Qoobox
2013-07-27 13:12 - 2013-07-27 13:03 - 00000000 ____D C:\Windows\erdnt
2013-07-27 13:12 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini
2013-07-27 12:59 - 2013-07-27 12:59 - 00015167 _____ C:\Users\Dragan\Desktop\hijackthis.log
2013-07-27 10:17 - 2012-09-22 11:43 - 00000000 ____D C:\Program Files (x86)\Google
2013-07-27 09:55 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF
2013-07-26 14:48 - 2013-07-26 14:48 - 05250397 _____ C:\Users\Dragan\Downloads\finish.html
2013-07-26 12:31 - 2013-07-26 12:31 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\Malwarebytes
2013-07-26 12:31 - 2013-07-26 12:31 - 00000000 ____D C:\ProgramData\Malwarebytes
2013-07-26 12:30 - 2013-07-25 23:34 - 00000000 ____D C:\Users\Dragan\Desktop\The_latest_firmware_file_v03.21.03
2013-07-19 18:00 - 2012-10-13 15:12 - 00000000 ___RD C:\Program Files (x86)\Skype
2013-07-19 18:00 - 2012-10-13 15:12 - 00000000 ____D C:\ProgramData\Skype
2013-07-19 14:13 - 2012-08-03 01:06 - 00045270 _____ C:\Users\Dragan\AppData\Roaming\room_v3.dat
2013-07-19 13:54 - 2012-08-02 23:34 - 00000000 ____D C:\Users\Dragan\AppData\Roaming\GarenaPlus
2013-07-19 13:54 - 2012-08-02 23:34 - 00000000 ____D C:\ProgramData\GarenaMessenger
2013-07-18 19:35 - 2013-07-18 19:35 - 00001067 _____ C:\Users\Public\Desktop\Garena Plus.lnk
2013-07-18 19:35 - 2012-08-02 23:34 - 00000000 ____D C:\Program Files (x86)\Garena Plus
2013-07-18 07:04 - 2013-03-10 00:59 - 00000000 ____D C:\Users\Dragan\Desktop\PROGRAMI

==================== Bamital & volsnap Check =================

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\services.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\userinit.exe => MD5 is legit
C:\Windows\SysWOW64\userinit.exe => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit


LastRegBack: 2013-08-12 15:20

==================== End Of Log ============================

Fajlovi prikačeni uz poruku (kliknite na slike za punu veličinu)

Addition.txt (24.67 KB)

Trebao si ga zakacis veliki je log.


Pokreni AdwCleaner
Klikni Delete
Potvrdi sa OK sve do restarta.



Preuzmi na desktop zoek.exe

 zatvori browser i ostale pokrenute programe;
deaktiviraj zaštitni softver ( po potrebi ) ;
dvoklikom pokreni zoek.exe;

U beli okvir prozora iskopiraj sledeci tekst:


Klikni na dugme Run Script i pricekaj da se skeniranje završi.

Zoek ce na kraju rada otvoriti Notepad sa izvestajem.


Isopiraj sadrzaj izvestaja.




btw.

Ne pokreci CF, na svoju ruku. Prvo ne znas da radis sa tim alatom, drugo nije isto na x86. i x64. sistemima.

Krenucu sad redom kako si mi rekao.

cf sam pokrenuo kad nesto nikako nisam uspevao da ocistim (virus mi slao mejlove)

izgleda da je sredio taj problem ali mi je napravio neki belaj (moja pretpostavka)

otprilike posle koriscenja combofixa krecu problemi


edit:

odradio ovo (nista sem delete jer tako pise)

Kad je doslo do restarta opet bsod

opet problem sa dxgkrnl.sys na potpuno istom mestu

sad cu dalje

evo ga i zoek (av mi ga je video ko virus pa sam ga iskljucio)


Zoek.exe Version 4.0.0.4 Updated 10-August-2013
Tool run by Dragan on Tue 08/13/2013 at 21:29:07.79.
Microsoft Windows 7 Ultimate  6.1.7601 Service Pack 1 x64
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\Dragan\Downloads\Programs\zoek.exe [Script inserted]

==== System Restore Info ======================

8/13/2013 9:31:16 PM Zoek.exe System Restore Point Created Succesfully.

==== Files Recently Created / Modified ======================

====== C:\Windows ====
2013-07-27 11:04:42   F042EE4C8D66248D9B86DCF52ABAE416   256000   ----a-w-   C:\Windows\PEV.exe
2013-07-27 11:04:42   9E05A9C264C8A908A8E79450FCBFF047   80412   ----a-w-   C:\Windows\grep.exe
2013-07-27 11:04:42   5E832F4FAF5F481F2EAF3B3A48F603B8   68096   ----a-w-   C:\Windows\zip.exe
2013-07-27 11:04:42   0297C72529807322B152F517FDB0A9FC   406528   ----a-w-   C:\Windows\SWSC.exe
2013-07-27 11:04:42   0277C027A26428DB64EF4F64F52BB4FD   208896   ----a-w-   C:\Windows\MBR.exe
====== C:\Users\Dragan\AppData\Local\Temp ====
2013-08-11 11:52:15   D2D24FE8E1D9F66E0B93CFEC5ADB813E   281896   ----a-w-   C:\Users\Dragan\AppData\Local\Temp\Firefox Setup Stub 23.0.exe
====== C:\Windows\SysWOW64 =====
2013-08-04 23:32:09   8C1348AB014241E4C92E12AC5B0C34FC   71048   ----a-w-   C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2013-08-04 23:32:09   81360ACBCA851F9FEE87E6BDC53E1289   692104   ----a-w-   C:\Windows\SysWOW64\FlashPlayerApp.exe
2013-07-31 19:04:51   CA80A282458D49637A22799C2B55F484   666024   ----a-w-   C:\Windows\SysWOW64\WibuCm32.dll
====== C:\Windows\SysWOW64\drivers =====
====== C:\Windows\Sysnative =====
2013-08-11 11:14:55   48DA65F29BB4C5AD21EC67C2D64700D6   64856   ----a-w-   C:\Windows\Sysnative\klfphc.dll
2013-07-31 19:04:51   63365158EFEEC05BBFCC296F79D7273A   847272   ----a-w-   C:\Windows\Sysnative\WibuCm64.dll
====== C:\Windows\Sysnative\drivers =====
2013-08-12 16:12:28   343ADA10D948DB29251F2D9C809AF204   16384   ----a-w-   C:\Windows\Sysnative\drivers\EIO64.sys
2013-08-11 11:14:27   7D7F90460F1309B5205BF8CDFAD63E42   66616   ----a-w-   C:\Windows\Sysnative\drivers\CSVirtualDiskDrv.sys
2013-08-11 11:14:23   04199CA5C4A6F6E935906A74EAFCA8E7   84536   ----a-w-   C:\Windows\Sysnative\drivers\CSCrySec.sys
2013-08-11 11:13:43   2CBD248370721DCAD632DB70D09C5A6D   620128   ----a-w-   C:\Windows\Sysnative\drivers\klif.sys
2013-08-11 11:13:43   03D8651EAED0D9084A59355A92B7246F   90208   ----a-w-   C:\Windows\Sysnative\drivers\klflt.sys
2013-08-06 14:38:13   728D82A4A2A875F96AEF1F0A44B9A309   172920   ----a-w-   C:\Windows\Sysnative\drivers\idmwfp.sys
====== C:\Windows\Tasks ======
2013-08-12 16:17:41   BD1E3C7B5A86F3005A794C34A138568F   3496   ----a-w-   C:\Windows\Sysnative\Tasks\gg_uac_daemon_Dragan
====== C:\Windows\Temp ======
======= C:\Program Files =====
2013-08-12 11:09:04   --------   d-----w-   C:\Program Files\WhoCrashed
2013-07-31 19:04:51   --------   d-----w-   C:\Program Files\CodeMeter
======= C:\Program Files (x86) =====
2013-08-13 11:38:31   --------   d-----w-   C:\Program Files (x86)\Mozilla Maintenance Service
2013-08-13 11:19:59   --------   d-----w-   C:\Program Files (x86)\AMD APP
2013-08-11 11:13:59   --------   d-----w-   C:\Program Files (x86)\Kaspersky Lab
2013-08-11 11:13:59   --------   d-----w-   C:\Program Files (x86)\Common Files\InfoWatch
2013-08-11 10:59:15   --------   d-----w-   C:\Program Files (x86)\Internet Download Manager
2013-07-31 19:04:50   --------   d-----w-   C:\Program Files (x86)\CodeMeter
2013-07-31 19:04:48   --------   d-----w-   C:\Program Files (x86)\GetData
======= C: =====
2013-08-13 19:19:54   99EB32452F43DE3E00282A65D5917043   7285   ----a-w-   C:\AdwCleaner[S1].txt
2013-08-13 11:07:21   74D3F6D001A7D0E96B55787D7410FD7B   169958188   ----a-w-   C:\8_861_Asus_Vista_Win7_WHQL.zip
====== C:\Users\Dragan\AppData\Roaming ======
2013-08-13 19:23:31   --------   d-----r-   C:\users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BT Devices
2013-08-13 11:38:35   --------   d-----w-   C:\users\Dragan\AppData\Roaming\Mozilla
2013-08-12 16:13:39   --------   d-----w-   C:\users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASUS
2013-08-12 11:10:34   8E9BCF95BDDDB699A5E7A19C84FE598A   2438   ----a-w-   C:\users\Dragan\AppData\Local\Tempdetails.1.html
2013-08-12 11:09:28   CDE07B9C966C9C6D4D2890E46617C31A   10072   ----a-w-   C:\users\Dragan\AppData\Local\Temp7.html
2013-08-11 11:36:35   --------   d-----w-   C:\users\Dragan\AppData\Roaming\Kaspersky Lab
2013-08-11 10:59:23   --------   d-----w-   C:\users\Dragan\AppData\Roaming\IDM
2013-07-31 19:04:51   --------   d-----w-   C:\users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Recover My Files v5
2013-07-27 11:13:39   --------   d-----w-   C:\users\Public\AppData\Local\temp
2013-07-27 11:13:39   --------   d-----w-   C:\users\Default\AppData\Local\temp
2013-07-27 11:13:39   --------   d-----w-   C:\users\Default User\AppData\Local\temp
====== C:\Users\Dragan ======
2013-08-13 13:44:10   !HASH: COULD NOT OPEN FILE !!!!!   0   ---ha-w-   C:\ProgramData\cm-lock
2013-08-13 11:24:57   D2D24FE8E1D9F66E0B93CFEC5ADB813E   281896   ----a-w-   C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0 (2).exe
2013-08-13 11:23:58   D2D24FE8E1D9F66E0B93CFEC5ADB813E   281896   ----a-w-   C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0 (1).exe
2013-08-13 11:22:08   --------   d-----w-   C:\ProgramData\ATI
2013-08-13 11:19:49   --------   d-----w-   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Catalyst Control Center
2013-08-12 11:09:04   --------   d-----w-   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2013-08-11 11:15:05   --------   d-----w-   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Kaspersky PURE 3.0
2013-08-11 10:59:23   --------   d-----w-   C:\ProgramData\IDM
2013-08-11 10:37:41   D2D24FE8E1D9F66E0B93CFEC5ADB813E   281896   ----a-w-   C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0.exe
2013-07-27 11:13:39   --------   d-----w-   C:\Users\Public\AppData
2013-07-27 08:17:30   --------   d-----w-   C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth

====== C: exe-files ==
2013-08-13 19:19:36   4C47469F47FD9F8437B62A86F6E0874F   666633   ----a-w-   C:\Users\Dragan\Downloads\Programs\adwcleaner.exe
2013-08-13 18:49:08   CF271BE65BE43B3878997925EFF62DC2   1575274   ----a-w-   C:\Users\Dragan\Downloads\Programs\FRST64.exe
2013-08-13 11:38:33   3F03612125FDFA1DE204582CEEBB8ED5   106212   ----a-w-   C:\Program Files (x86)\Mozilla Maintenance Service\Uninstall.exe
2013-08-13 11:38:31   7D0CB8FCC7063D5BBDE4193D1FBFDB44   117144   ----a-w-   C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
2013-08-13 11:24:57   D2D24FE8E1D9F66E0B93CFEC5ADB813E   281896   ----a-w-   C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0 (2).exe
2013-08-13 11:23:58   D2D24FE8E1D9F66E0B93CFEC5ADB813E   281896   ----a-w-   C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0 (1).exe
2013-08-12 16:57:57   B279A302CAE70FD1858A4E77AD2BF340   21537144   ----a-w-   C:\Users\Dragan\Desktop\New folder (3)\Firefox Setup 22.0b6.exe
2013-08-12 16:12:07   D198D2BFC53C0DEF52407E4E46D7F401   253952   ----a-w-   C:\$RECYCLE.BIN\S-1-5-21-1414197781-3143207240-2177284752-1000\$R473JBP\SmartDoc580\setup.exe
2013-08-12 16:12:07   61A5FB191AE2AE876DB31DCCE75E4183   1822520   ----a-w-   C:\$RECYCLE.BIN\S-1-5-21-1414197781-3143207240-2177284752-1000\$R473JBP\SmartDoc580\instmsiw.exe
2013-08-12 11:09:04   FE3CAD470B51A51126E07FD95C6C22F9   1944120   ----a-w-   C:\Program Files\WhoCrashed\whocrashedex.exe
2013-08-12 11:09:04   47EF03EBD8FE5CF099C5AD3BB49AB4CD   714526   ----a-w-   C:\Program Files\WhoCrashed\unins000.exe
2013-08-12 11:09:04   23831AF269199AAC24CC126BF2CE4975   1083960   ----a-w-   C:\Program Files\WhoCrashed\whocrashed.exe
2013-08-11 11:58:08   C57324BDFE3063EDF7DFD1942242917E   21840856   ----a-w-   C:\Users\Dragan\Desktop\New folder (3)\Firefox Setup 22.0.exe
2013-08-11 11:52:15   D2D24FE8E1D9F66E0B93CFEC5ADB813E   281896   ----a-w-   C:\Users\Dragan\AppData\Local\Temp\Firefox Setup Stub 23.0.exe
2013-08-11 11:26:02   B17C7C12A864669F075468A686730356   130056   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\klwtblfs.exe
2013-08-11 11:26:02   917D977C6C841EF5EC730C2029F94F36   201736   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\klwtbws.exe
2013-08-11 11:26:02   8E287A411C3740C61671186B13F3E5E6   40864   ----a-w-   C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\patch_b.exe
2013-08-11 11:26:02   560C99FFABC1082973C3AEFEEC2B6F61   157704   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\x64\klwtblfs.exe
2013-08-11 11:26:02   279BCD21B30A4B69F1C76506C4AC6062   224776   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\x64\klwtbws.exe
2013-08-11 11:10:42   2458A8F8ACD54A6CA42BC3E053359A98   222371152   ----a-w-   C:\Users\Dragan\Downloads\Programs\pure13.0.2.558aEN_4385.exe
2013-08-11 10:58:29   C3A1C2DC53E00C3038CC7FC33CFBB49D   5244760   ----a-w-   C:\Users\Dragan\Desktop\Luther - 01x04 - Episode Four HDTV-720p HR\sHaRewbb_intnedwnldmng617b7\sHaRewbb_intnedwnldmng617b7\IDM617_sHaRe\idman617f.exe
2013-08-11 10:58:28   A800C10155DA44C9666BCFB44B1BDD12   3665488   ----a-w-   C:\Users\Dragan\Desktop\Luther - 01x04 - Episode Four HDTV-720p HR\sHaRewbb_intnedwnldmng617b7\sHaRewbb_intnedwnldmng617b7\IDM617_sHaRe\Crack\IDMan.exe
2013-08-11 10:37:41   D2D24FE8E1D9F66E0B93CFEC5ADB813E   281896   ----a-w-   C:\Users\Dragan\Downloads\Firefox Setup Stub 23.0.exe
=== C: other files ==
2013-08-13 11:07:21   74D3F6D001A7D0E96B55787D7410FD7B   169958188   ----a-w-   C:\8_861_Asus_Vista_Win7_WHQL.zip
2013-08-12 16:12:28   343ADA10D948DB29251F2D9C809AF204   16384   ----a-w-   C:\Windows\System32\drivers\EIO64.sys
2013-08-12 13:47:31   74D3F6D001A7D0E96B55787D7410FD7B   169958188   ----a-w-   C:\Users\Dragan\Desktop\8_861_Asus_Vista_Win7_WHQL.zip
2013-08-11 11:26:02   DE362982A3645C8FD14E983E12BB67F2   89944   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\600\p\klflt.sys
2013-08-11 11:26:02   DE362982A3645C8FD14E983E12BB67F2   89944   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\600\klflt.sys
2013-08-11 11:26:02   C3A07CDBF8C756F27910AB0DBDFBB099   89944   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\602\p\klflt.sys
2013-08-11 11:26:02   A8081ED8D48FA611D11DB97F49A5343D   54104   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\p\kltdi.sys
2013-08-11 11:26:02   A8081ED8D48FA611D11DB97F49A5343D   54104   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\kltdi.sys
2013-08-11 11:26:02   65F3B81FA285EAB641F5E6EF7AEB984D   613720   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\600\p\klif.sys
2013-08-11 11:26:02   65F3B81FA285EAB641F5E6EF7AEB984D   613720   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\600\klif.sys
2013-08-11 11:26:02   5D0104D068AA740A4CD75158652EA986   612696   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\602\p\klif.sys
2013-08-11 11:26:02   1D43E6BD18BC4751604134456E840790   194943   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\ChromeExt\virtkbd.crx
2013-08-11 11:26:02   185D21CB8F10CFB351FF65DA88C18BC9   178008   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\p\kneps.sys
2013-08-11 11:26:02   185D21CB8F10CFB351FF65DA88C18BC9   178008   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\kneps.sys
2013-08-11 11:26:02   07124B89A614CB25D993B81DE041E595   48472   ----a-w-   C:\ProgramData\Kaspersky Lab\PURE13\Data\Updater\Temporary Files\rollback\patch\AutoPatches\kts9\13.0.2.558\drv64\p\klwfp.sys
2013-08-11 11:14:27   7D7F90460F1309B5205BF8CDFAD63E42   66616   -c--a-w-   C:\Windows\System32\DRVSTORE\CSVirtualD_4A7E0979EB81D8417FF9B7CE1B2294025B38D354\wnet\amd64\CSVirtualDiskDrv.sys
2013-08-11 11:14:27   7D7F90460F1309B5205BF8CDFAD63E42   66616   ----a-w-   C:\Windows\System32\drivers\CSVirtualDiskDrv.sys
2013-08-11 11:14:23   04199CA5C4A6F6E935906A74EAFCA8E7   84536   -c--a-w-   C:\Windows\System32\DRVSTORE\CSCrySec_4A7E0979EB81D8417FF9B7CE1B2294025B38D354\w2k\amd64\CSCrySec.sys
2013-08-11 11:14:23   04199CA5C4A6F6E935906A74EAFCA8E7   84536   ----a-w-   C:\Windows\System32\drivers\CSCrySec.sys
2013-08-11 11:13:43   2CBD248370721DCAD632DB70D09C5A6D   620128   ----a-w-   C:\Windows\System32\drivers\klif.sys
2013-08-11 11:13:43   03D8651EAED0D9084A59355A92B7246F   90208   ----a-w-   C:\Windows\System32\drivers\klflt.sys

==== Startup Registry Enabled ======================

[HKEY_USERS\S-1-5-21-1414197781-3143207240-2177284752-1000\Software\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="C:\Users\Dragan\AppData\Local\Akamai\netsession_win.exe"
"GarenaPlus"="C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe -autolaunch"
"NokiaSuite.exe"="C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray"
"Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent"
"Facebook Update"="C:\Users\Dragan\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"IDMan"="C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ASUS ShellProcess Execute"="C:\Program Files (x86)\ASUS\AI Suite II\ASUS Mobilink\Simulator\AsShellProcess.exe"
"ACPW05EN"="C:\Program Files (x86)\ACD Systems\ACDSee Pro\5.0\ACDSeeProInTouch2.exe /pid ACPW05EN"
"Adobe ARM"="C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
"NUSB3MON"="C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe"
"Nikon Message Center 2"="C:\Program Files (x86)\Nikon\Nikon Message Center 2\NkMC2.exe -s"
"APSDaemon"="C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
"SunJavaUpdateSched"="C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
"AVP"="C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\avp.exe"
"StartCCC"="C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe MSRun"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"Akamai NetSession Interface"="C:\Users\Dragan\AppData\Local\Akamai\netsession_win.exe"
"GarenaPlus"="C:\Program Files (x86)\Garena Plus\GarenaMessenger.exe -autolaunch"
"NokiaSuite.exe"="C:\Program Files (x86)\Nokia\Nokia Suite\NokiaSuite.exe -tray"
"Steam"="C:\Program Files (x86)\Steam\Steam.exe -silent"
"Facebook Update"="C:\Users\Dragan\AppData\Local\Facebook\Update\FacebookUpdate.exe /c /nocrashserver"
"IDMan"="C:\Program Files (x86)\Internet Download Manager\IDMan.exe /onboot"

==== Startup Registry Enabled x64 ======================

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe -s"
"BCSSync"="C:\Program Files\Microsoft Office\Office14\BCSSync.exe /DelayServices"
"AtherosBtStack"="C:\Program Files (x86)\Bluetooth Suite\BtvStack.exe"
"AthBtTray"="C:\Program Files (x86)\Bluetooth Suite\AthBtTray.exe"

==== Startup Folders ======================

2012-05-02 19:13:36   993   ----a-w-   C:\users\Dragan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MagicDisc.lnk

==== Task Scheduler Jobs ======================

C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1414197781-3143207240-2177284752-1000Core.job --a------ C:\Users\Dragan\AppData\Local\Facebook\Update\FacebookUpdate.exe [03/09/2013 08:52 PM]
C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1414197781-3143207240-2177284752-1000UA.job --a------ [Undetermined Task]
C:\Windows\tasks\GoogleUpdateTaskMachineCore.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [09/22/2012 11:43 AM]
C:\Windows\tasks\GoogleUpdateTaskMachineUA.job --a------ C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [09/22/2012 11:43 AM]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1414197781-3143207240-2177284752-1000Core.job --a------ C:\Users\Dragan\AppData\Local\Google\Update\GoogleUpdate.exe [05/11/2012 05:18 PM]
C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1414197781-3143207240-2177284752-1000UA.job --a------ C:\Users\Dragan\AppData\Local\Google\Update\GoogleUpdate.exe [05/11/2012 05:18 PM]

==== Firefox Extensions ======================

ProfilePath: C:\Users\Dragan\AppData\Roaming\Mozilla\Firefox\Profiles\o94wqkcc.default
- IDM CC - C:\Users\Dragan\AppData\Roaming\IDM\idmmzcc5
- Wtyczka Menedera hase - C:\Users\Dragan\AppData\Roaming\Kaspersky Lab\Password Manager\kpmAutofill
- Kaspersky URL Advisor - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\url_advisor@kaspersky.com
- Virtual Keyboard - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\FFExt\virtual_keyboard@kaspersky.com

==== Firefox Plugins ======================

Profilepath: C:\Users\Dragan\AppData\Roaming\Mozilla\Firefox\Profiles\o94wqkcc.default
0C8597DBC74AAF5179471BA013E3C6B4   - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_8_800_94.dll -   Shockwave Flash
101700E93EB905992B518256CB441829   - C:\Users\Dragan\AppData\Local\Google\Update\1.3.21.153\npGoogleUpdate3.dll -   Google Update
D7324EB1EDCB8990F8522DE0311359E9   - C:\Windows\SysWOW64\npDeployJava1.dll -   Java Deployment Toolkit 7.0.250.17
0B31B0F8FA99CFD009C8FBEA9E20C9DE   - C:\Users\Dragan\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll -   Facebook Video Calling Plugin
15E298B5EC5B89C5994A59863969D9FF   - C:\Windows\SysWOW64\npmproxy.dll -   Microsoft® Windows® Operating System


==== Chrome Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
dchlnpcodkpfdpacogkljefecpegganj - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\urladvisor.crx[03/06/2013 08:03 PM]
hakdifolhalapjijoafobooafbilfakh - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\online_banking_chrome.crx[03/06/2013 08:03 PM]
hghkgaeecgjhjkannahfamoehjmkjail - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\content_blocker_chrome.crx[03/06/2013 08:03 PM]
jagncdcchgajhfhijbbhecadmaiegcmh - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\virtkbd.crx[08/11/2013 01:19 PM]
jeaohhlajejodfjadcponpnjgkiikocn - C:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx[08/07/2013 02:06 AM]
lifbcibllhkdhoafpjfnlhfpfgnpldfl - C:\Program Files (x86)\Skype\Toolbars\Skype for Chromium\skype_chrome_extension.crx[07/12/2013 02:38 PM]
pjldcfjmnllhmgjclecdnfampinooman - C:\Program Files (x86)\Kaspersky Lab\Kaspersky PURE 3.0\ChromeExt\ab.crx[03/06/2013 08:03 PM]

YouTube - Dragan - Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
Google Search - Dragan - Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
Kaspersky URL Advisor - Dragan - Default\Extensions\dchlnpcodkpfdpacogkljefecpegganj
Password Manager plugin - Dragan - Default\Extensions\ddagfbbgmdhmolnjoaghlapikdcahbbl
Safe Money - Dragan - Default\Extensions\hakdifolhalapjijoafobooafbilfakh
Virtual Keyboard - Dragan - Default\Extensions\jagncdcchgajhfhijbbhecadmaiegcmh
IDM Integration Module - Dragan - Default\Extensions\jeaohhlajejodfjadcponpnjgkiikocn
Skype for Chromium - Dragan - Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl
Gmail - Dragan - Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia
Anti-Banner - Dragan - Default\Extensions\pjldcfjmnllhmgjclecdnfampinooman

==== IE Start and Search Settings ======================

[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com/"
"Backup.Old.Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{7D9A9862-0B60-15F7-813F-6A8FA600BCDC}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Funmoods  Url="http://start.funmoods.com/results.php?f=4&q={searchTerms}&a=ddrnw&chnl=ddrnw&cd=2XzuyEtN2Y1L1Qzu0B0C0A0E0CyDyByC0CyDyBtByDtDtByCtN0D0Tzu0CtByDyEtN1L2XzutBtFtCtFtCtFtAtCtB&cr=514056984"
{7D9A9862-0B60-15F7-813F-6A8FA600BCDC} Bing  Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== EOF on Tue 08/13/2013 at 21:34:06.93 ======================



Jel mislis da ima svrhe zezati se sa ovim ili da mu formatiram c i opalim novi win?

U medjuvremenu dok ja pregledam log uradi sledece:

Preuzmi najnovije drajvere za tu ATI karticu.

Skini sebi Driver Sweeper odavde http://www.techspot.com/downloads/4266-driver-sweeper.html i instaliraj ga. Zatim idi u kontol panel i deinstaliraj trenutni drajver za grafiku koji imaš instaliran.
Restartuj računar i idi u safe mode, kad si u safe modu pokreni Driver Sweeper i zakači samo opciju ATI Display i klikni na Analyse. U sledećom prozoru treba da je sve čekirano i klikni na Clean.

Restartuj Računar i probaj ponovi instalaciju tih AMD drajvera.

Probao sam to vec par puta. Nesto mi ne ide da udjem u safe mode posto kod mene kad pritiskam f8 izadje mi da biram boot device.

Sad cu da probam po tvojim uputstvima

edit: opet mi je ff sve slogiraniji (prvo vreme posle instala drajvera danas radio skoro savrseno)

kliknem na ovaj link sto si mi ostavio a otvori mi se ova stranica sa automobilima 

edit 2(sa drugog kompa) kaspersky mi provalio onaj zosk kao virus pa sad radi dezinfekciju sa restartom. Kad to odradi nastavicu po tvom uputstvu.

Pogledaj malo bolje kad se zaustavi na boot opciju, imas opciju da kliknes ili na esc. ili neki drugi taster da preskocis boot, a onda nastavis sa F8.

Ima ona neka fora da mu zadam da se butuje u safe mode sledeci put.mozda lupam ali cini mi se da to ide preko msconfig ili nesto

edit (drugi komp. pisacu dk ubuduce kad se budem javljao sa njega) uspeo sam preko f8

sad cu da odradim sta treba

Evo ti skripta za zoek, poteraj ga posle.




Kad sve to odradis idemo jos jednu proveru.


Preuzmi TDSSKiller sa sljedeće adrese na Desktop:

TDSSKiller


Kad preuzimanje bude završeno:

• Pokreni TDSSKiller i klikni na Change parametres.
  
  
• U dijelu Additional options štrikliraj opcije Verify driver signatures i Detect TDLFS file system, a zatim klikni na OK.
  
  
• Klikni na Start scan.
  
  
• Kad završi prikazaće ti rezultate skeniranja i tu nemoj ništa da mijenjaš već samo klikni na Continue.
  
  
• Ukoliko program bude zatražio restart sistema dozvoli mu to.
  
  
• Prikači uz poruku izvještaj koji se nalazi na sljedećoj lokaciji:
  C:\TDSSKiller_verzija programa_DD.MM.GG_HH.MM.SS.txt
  (DD-dan, MM-mesec, GG-godina, HH-sat, MM-minut, SS-sekunda; datum i vrijeme kada je log napravljen)

sad sam obrisao ati drajver i idem u safe mode da odradim sta treba. Malocas sam usao u safe mode a da nisam prethodno obrisao drajver. Gledacu da to sto pre odradim.

opet sa drugog kompa tako da to ne utice na celu proceduru

edit: odradio sa driver sweeperom. Sad cu da mu instaliram drajvere ponovo pa nastavljam.

edit 2: instalirao drajvere. Izaslo mi nesto warnings occured dutring instalation ali u logu je sve ok. verovatno opet smara oko c++ redistributable

cim se butuje nastavljam dalje