trojanac virus :: Pc Klinika ~ Doktori za vas kompjuter

ona dva loga, fudbal sam instaliro i juče mi je bilo sve ok a danas kad sam upalio da vidim da li može nije moglo. na prečici nema slike i piše da je prečica izmenjena i tako to. a anti virus mi nadje uvek virus a vi kazete da nema pa mi nije ništa jasno.

DDS (Ver_09-09-29.01) - NTFSx86
Run by Vladan at 14:52:47,17 on cet 08.10.2009
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.2.1252.61.1033.18.1023.593 [GMT 2:00]

AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\Ati2evxx.exe
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\D-Link\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Logitech\QCDriver3\LVCOMS.EXE
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\D-Link\Bluetooth Software\BTTray.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Documents and Settings\Vladan\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://uk.eurosport.yahoo.com/
BHO: AcroIEHlprObj Class: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 6.0\reader\activex\AcroIEHelper.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Windows Live Family Safety Browser Helper Class: {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - c:\program files\windows live\family safety\fssbho.dll
BHO: Spybot-S&D IE Protection: {53707962-6f74-2d53-2644-206d7942484f} - c:\progra~1\spybot~1\SDHelper.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: Windows Live pomagac za prijavljivanje: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: {4B3803EA-5230-4DC3-A7FC-33638F3D3542} - No File
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\CLIStart.exe"
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [LVCOMS] c:\program files\common files\logitech\qcdriver3\LVCOMS.EXE
mRun: [LogitechGalleryRepair] c:\program files\logitech\imagestudio\ISStart.exe
mRun: [fssui] "c:\program files\windows live\family safety\fsui.exe" -autorun
mRun: [SoundMan] SOUNDMAN.EXE
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [tscuninstall] %systemroot%\system32\tscupgrd.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~1.lnk - c:\program files\d-link\bluetooth software\BTTray.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\d-link\bluetooth software\btsendto_ie_ctx.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\d-link\bluetooth software\btsendto_ie.htm
IE: {CD67F990-D8E9-11d2-98FE-00C0F0318AFE}
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - {53707962-6F74-2D53-2644-206D7942484F} - c:\progra~1\spybot~1\SDHelper.dll
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/C/0/C/C0CBBA88-A6F2-48D9-9B0E-1719D1177202/LegitCheckControl.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\vladan\applic~1\mozilla\firefox\profiles\m0qfqt54.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1142338&SearchSource=3&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://uk.eurosport.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1142338&SearchSource=2&q=
FF - component: c:\program files\real\realplayer\browserrecord\firefox\ext\components\nprpffbrowserrecordext.dll
FF - plugin: c:\program files\google\update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

============= SERVICES / DRIVERS ===============

R0 fasttrak;fasttrak;c:\windows\system32\drivers\Fasttrak.sys [2009-1-19 73088]
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2009-4-10 11608]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2009-4-10 108289]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2009-4-10 185089]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-4-10 55656]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-1-19 55136]
R2 fsssvc;Windows Live Porodicna bezbednost;c:\program files\windows live\family safety\fsssvc.exe [2009-2-6 533360]
S0 Lbd;Lbd;c:\windows\system32\drivers\lbd.sys --> c:\windows\system32\drivers\Lbd.sys [?]
S3 V90drv;v90drv;c:\windows\system32\drivers\v90drv.sys [2001-11-29 1432836]
S3 Video3D;ASUS Video3D Service;c:\windows\system32\drivers\video3d32.sys --> c:\windows\system32\drivers\Video3D32.sys [?]
S4 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-1-14 226656]

=============== Created Last 30 ================

2009-10-07 20:37   <DIR>   --d-----   c:\program files\Pro Evolution Soccer 2009
2009-10-06 16:23   <DIR>   --d-----   c:\windows\system32\CatRoot_bak
2009-10-05 22:34   <DIR>   --d-----   c:\documents and settings\vladan\DoctorWeb
2009-10-04 21:04   <DIR>   --d-----   c:\docume~1\vladan\applic~1\Malwarebytes
2009-10-04 21:04   <DIR>   --d-----   c:\docume~1\alluse~1\applic~1\Malwarebytes
2009-10-04 20:54   <DIR>   --d-----   c:\docume~1\vladan\applic~1\Uniblue
2009-09-26 14:43   5,632   a-------   c:\windows\system32\ptpusb.dll
2009-09-26 14:43   159,232   a-------   c:\windows\system32\ptpusd.dll
2009-09-26 14:43   15,104   ac------   c:\windows\system32\dllcache\usbscan.sys
2009-09-26 14:43   15,104   a-------   c:\windows\system32\drivers\usbscan.sys

==================== Find3M ====================

2009-08-14 20:51   22,720   a-------   c:\windows\system32\emptyregdb.dat
2009-08-05 11:11   204,800   a-------   c:\windows\system32\mswebdvd.dll
2009-07-29 06:53   119,808   a-------   c:\windows\system32\t2embed.dll
2009-07-29 06:53   82,432   a-------   c:\windows\system32\fontsub.dll
2009-07-17 20:55   58,880   a-------   c:\windows\system32\atl.dll
2009-07-13 02:18   233,472   a-------   c:\windows\system32\wmpdxm.dll

============= FINISH: 14:53:09,64 ===============

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-09-29.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 14.8.2009 20:57:06
System Uptime: 10.8.2009 14:38:39 (1416 hours ago)

Motherboard: | | Granite Bay
Processor: Intel(R) Pentium(R) 4 CPU 2.66GHz | Socket 478 | 2677/133mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 76 GiB total, 41,838 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

==== System Restore Points ===================

RP1: 14.8.2009 21:06:41 - Kontrolna tacka sistema
RP2: 14.8.2009 21:58:14 - Software Distribution Service 3.0
RP3: 14.8.2009 22:20:35 - Software Distribution Service 3.0
RP4: 15.8.2009 0:00:59 - Software Distribution Service 3.0
RP5: 15.8.2009 14:43:57 - Installed Windows XP WgaNotify.
RP6: 24.8.2009 13:39:27 - Installed Windows Media Player Firefox Plugin
RP7: 24.8.2009 13:50:55 - Removed Windows Media Player Firefox Plugin
RP8: 24.8.2009 13:51:56 - Installed Windows Media Player Firefox Plugin
RP9: 28.8.2009 14:55:18 - Kontrolna tacka sistema
RP10: 29.8.2009 22:43:25 - Kontrolna tacka sistema
RP11: 1.9.2009 13:38:42 - Instalacija nepotpisanog upravljackog programa
RP12: 1.9.2009 13:50:18 - Removed D-Link DBT-122 Bluetooth Software
RP13: 1.9.2009 13:56:43 - Installed D-Link DBT-122 Bluetooth Software
RP14: 1.9.2009 13:57:42 - Instalacija nepotpisanog upravljackog programa
RP15: 1.9.2009 13:59:12 - Instalacija nepotpisanog upravljackog programa
RP16: 3.9.2009 14:29:09 - Kontrolna tacka sistema
RP17: 6.9.2009 18:44:47 - Instalacija nepotpisanog upravljackog programa
RP18: 18.9.2009 17:52:20 - Kontrolna tacka sistema
RP19: 19.9.2009 20:46:01 - Instalacija nepotpisanog upravljackog programa
RP20: 22.9.2009 18:00:10 - Kontrolna tacka sistema
RP21: 23.9.2009 21:33:38 - Kontrolna tacka sistema
RP22: 26.9.2009 13:55:46 - Kontrolna tacka sistema
RP23: 28.9.2009 21:42:43 - Kontrolna tacka sistema
RP24: 30.9.2009 21:09:48 - Kontrolna tacka sistema
RP25: 1.10.2009 21:51:48 - Kontrolna tacka sistema
RP26: 3.10.2009 16:30:21 - Kontrolna tacka sistema
RP27: 6.10.2009 17:03:27 - Software Distribution Service 3.0
RP28: 7.10.2009 17:24:51 - Software Distribution Service 3.0

==== Installed Programs ======================

Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Reader 6.0.1
ASUS ATI Driver
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
ATI Parental Control & Encoder
Avira AntiVir Personal - Free Antivirus
Choice Guard
D-Link DBT-122 Bluetooth Software
Google Chrome
Google Update Helper
GRID
HijackThis 2.0.2
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Hotfix for Windows XP (KB952287)
Hotfix for Windows XP (KB961118)
Hotfix for Windows XP (KB970653-v3)
Jackpot City Online Casino
Java(TM) 6 Update 13
Junk Mail filter update
K-Lite Mega Codec Pack 3.4.5
LM-I56N
Logitech IM Video Companion
Logitech ImageStudio
Logitech Print Service
Microsoft .NET Framework 2.0 Service Pack 2
Microsoft .NET Framework 3.0 Service Pack 2
Microsoft .NET Framework 3.5 SP1
Microsoft Application Error Reporting
Microsoft Office Professional Edition 2003
Microsoft Search Enhancement Pack
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Mozilla Firefox (3.5.3)
MSVCRT
MSXML 6 Service Pack 2 (KB954459)
Nero 7 Essentials
OpenAL
Pro Evolution Soccer 2009 1.0
QuickTime
RealPlayer
Realtek AC'97 Audio
Registry Mechanic 7.0
RTLSetup 2.50.503
Security Update for Windows Media Player (KB952069)
Security Update for Windows Media Player (KB973540)
Security Update for Windows XP (KB923561)
Security Update for Windows XP (KB923689)
Security Update for Windows XP (KB938464-v2)
Security Update for Windows XP (KB941569)
Security Update for Windows XP (KB944338-v2)
Security Update for Windows XP (KB946648)
Security Update for Windows XP (KB950762)
Security Update for Windows XP (KB950974)
Security Update for Windows XP (KB951066)
Security Update for Windows XP (KB951376-v2)
Security Update for Windows XP (KB951748)
Security Update for Windows XP (KB952004)
Security Update for Windows XP (KB952954)
Security Update for Windows XP (KB954600)
Security Update for Windows XP (KB955069)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956803)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB957097)
Security Update for Windows XP (KB958470)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB958687)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960225)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961371-v2)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB968537)
Security Update for Windows XP (KB970238)
Security Update for Windows XP (KB971032)
Security Update for Windows XP (KB971557)
Security Update for Windows XP (KB971633)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972260)
Security Update for Windows XP (KB973346)
Security Update for Windows XP (KB973354)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Segoe UI
Skype™ 3.8
Sony Noise Reduction Plug-In 2.0h
Sony Sound Forge 9.0
Spybot - Search & Destroy
Total Commander (Remove or Repair)
Unlocker 1.8.7
Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Update for Windows XP (KB898461)
Update for Windows XP (KB925720)
Update for Windows XP (KB955839)
Update for Windows XP (KB961503)
Update for Windows XP (KB967715)
Update for Windows XP (KB968389)
Update for Windows XP (KB973815)
Visual C++ 2008 x86 Runtime - (v9.0.30729)
Visual C++ 2008 x86 Runtime - v9.0.30729.01
WebFldrs XP
Winamp (remove only)
Windows Genuine Advantage Notifications (KB905474)
Windows Installer 3.1 (KB893803)
Windows Live alatka za otpremanje
Windows Live Communications Platform
Windows Live Essentials
Windows Live Foto-galerija
Windows Live Messenger
Windows Live pomocnik za prijavljivanje
Windows Live Porodicna bezbednost
Windows Live Pošta
Windows Live Sync
Windows Live Toolbar
Windows Live Writer
Windows Media Format Runtime
Windows Media Player Firefox Plugin
Windows XP srpski interfejs paket - latinica
WinRAR archiver

==== Event Viewer Messages From Past Week ========

7.10.2009 19:46:03, error: Cdrom [11] - The driver detected a controller error on \Device\CdRom0.
7.10.2009 17:46:46, error: Service Control Manager [7031] - The Print Spooler service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 60000 milliseconds: Restart the service.
5.10.2009 13:58:21, error: Service Control Manager [7016] - The SmartLinkService service has reported an invalid current state 0.
4.10.2009 22:27:13, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: Lbd
4.10.2009 18:52:07, error: ati2mtag [52249] -
4.10.2009 18:26:39, error: Dhcp [1002] - The IP address lease 192.168.1.2 for the Network Card with network address 0001295006E2 has been denied by the DHCP server 192.168.1.1 (The DHCP Server sent a DHCPNACK message).
3.10.2009 19:05:55, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service SeaPort with arguments "-Service" in order to run the server: {D6381B4A-D254-46EB-9018-A62E0F4BA6BA}
3.10.2009 14:46:46, error: W32Time [17] - Time Provider NtpClient: An error occurred during DNS lookup of the manually configured peer 'time.windows.com,0x1'. NtpClient will try the DNS lookup again in 15 minutes. The error was: A socket operation was attempted to an unreachable host. (0x80072751)
2.10.2009 22:27:17, error: Schannel [36881] - The certificate received from the remote server has expired. The SSL connection request has failed. The attached data contains the server certificate.

==== End Of File ===========================
kada smo radili ove pretrage ovi problemi se sklone ali se povrate