ajde ovako, da razjasnimo nesto po ko zna koji put.

Mod, smod, admin ili bilo koji drugi korisnik nije u obavezi nikome da odgovori na pitanje, da pomogne oko problema ili slicno. To je iskljucivo dobra volja ljudi.
Pravilnik foruma postoji, treba ga se pridrzavati, tim Burek foruma je i vise nego popustljiv prema korisnicima koji su poceli da se ponasaju u zadnje vreme kao stoka ( ne govorim o pc klinici generalno, nego o svim podforumima na ovom sajtu).
Generalno za ovu temu: Sta je piraterija i ostalo, odlucicu ja, kolege na klinici, smodovi i admini ako budu gledali ovu temu a ne Vi. Ukoliko Vam nesto smeta u ucescu bilo kog korisnika, opcija prijavi poruku, privatnu poruku ili podforum predlozite-pitajte Vam je uvek na raspolaganju. Ako pak i to ne odgovara, opcija  vam je uvek dostupna.

Toliko od mene, ovde zavrsavamo offtopic na ovoj temi.

Prijatan boravak na Burek Forumu.

Evo ovako..
Radio sam svasta - uradio nisam NISTA!


Uspeo sam da odradim taj prvi deo sto se ticao HijackThis-a, ali nisam uspeo da pronadjem ni jedan "fajl" niti tag koji si naveo, tipa:

"sysvx" = "%Windir%\sysvx_.exe"

"TcpNumConnections" = "0x00001000"

"%System%\sysvx.exe" = "%System%\sysvx.exe:*:Enabled:enable"

Naravno, usao sam u direktorijume, ali navedenih datoteka nema!


Skenirao sam iz SAFE mode-a pomocu KIS, SpySweeper, AdAware i Spz BOT programa (jos pre nego sto sam potrazio pomoc na forumu).... ali i dalje se pojavljuje sve isto!
Na desktopu su mi neprestano prisutne tri ikonice, koje se i nakon brisanja prilikom sledeceg paljenja sistema ponovo stvaraju i direktno su povezane sa ovim problemom. Prikaz istih u attackmentu:

Bio sam misljenja da je neko na forumu imao ovakva iskustva...
probacu jos nesto da  uradim...  skeniracui jos nekim anty spyware alatima...
... a format C... he,he... pa to uvek moze, ali kada bi svaki put kada naidjemo na neki slican problem to radili - hm, da li bi ikada nesto naucili...

@Crowz
HVALA !!!

evo i ja da ti javim. i ja sam imao iste te probleme. evo bas ove tri ikonice su mi stalno bile na ekranu. skenirao sam sa svim i svacim. brisao sa svim poznatim programima i nista nije pomoglo osim jednog. format c. mozda to nije jedino resenje ali je meni bar najlakse. stedi mi zivce. hehe. poz

Desni klik na tu ikonu pa idi na properties. Saznaces putanju do programa. Kada to saznas idi do prave lokacije gde se to nalazi i zipuj sve to, pa uploaduj na rapidshare i posalji mi PP sa linkom.

Problem je u tome sto nema putanje do programa...
putanje na svakoj od njih vode na web sajtove !!!
Primer:
Error Cleaner  putanja je  http://virusprotectionproonline.com/shandler.php?sid=502&aid=454&said=234&pn=0&sg=1

meni je u gotovo istoj situaciji pomogao program SpySweeper. U trenutku kada ni KIS 6, KAV, ZA, SpyBOT, AdAware, NOD32 i ostali nisu mogli nista da pronadju - SPYSWEEPER jeste! Cak sta vise - on ga je virus uklonio potpuno sa racunara!
Doduse, tada sam imao licencu za taj program - te su mi sve njegove finkcije bile dostupne - kada je u trial rezimu, moguce da moze samo da skenira ali ne i da obrise zarzene fajlove i ukloni spywareove!

Iskreno - jedini nacin da se covek resi ovog problema, ukoliko neki slican program ne pomogne je Reinstaliranje Sistema.

Evo i ja da se udostojim i da kazem da sam i ja imao taj problem...moras na neki nacin pregledati koji se programi dizu zajedno sa sistemom..te ih iskljuciti i obrisati iz registrya..probaj sa "msconfig" mada nevjerujem...moras nesto naprednije nac...

Ok, ajmo ovako:

Pobij sve startup procese sem osnovnih, npr:

C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\AirLive\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Ovislink\Common\TurboG-UI.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\AirLive\Bluetooth Software\BTTray.exe
C:\Program Files\SEC\MagicTune3.6\GammaTray.exe
C:\Program Files\Launchy\Launchy.exe
C:\Program Files\SEC\MagicTune3.6\MagicTune.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\mspaint.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE


Zatim uzmi i fixuj sledece:

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: MSVPS System - {208D7BCC-9857-4C9E-823B-D04E72490A67} - C:\WINDOWS\mxduo.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: MSVPS System - {208D7BCC-9857-4C9E-823B-D04E72490A67} - C:\WINDOWS\mxduo.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.7.4.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Canon Easy Web Print Helper - {68F9551E-0411-48E4-9AAF-4BC42A6A46BE} - C:\Program Files\Canon\Easy-WebPrint\EWPBrowseLoader.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [WheelMouse] C:\PROGRA~1\A4Tech\Mouse\Amoumain.exe
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [OpwareSE4] "C:\Program Files\ScanSoft\OmniPageSE4.0\OpwareSE4.exe"
O4 - HKLM\..\Run: [CorelDRAW Graphics Suite 11b] C:\Program Files\Corel\Corel Graphics 12\Languages\EN\Programs\Registration.exe /title="CorelDRAW Graphics Suite 12" /date=083007 serial=DR12WEX-1504397-KTY lang=EN
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - Global Startup: AirLive Turbo-G Wireless Utility.lnk = C:\Program Files\Ovislink\Common\TurboG-UI.exe
O4 - Global Startup: BlueSoleil.lnk = ?
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: Color Calibration.lnk = ?
O4 - Global Startup: Launchy.lnk = C:\Program Files\Launchy\Launchy.exe
O4 - Global Startup: MagicTune 3.6.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\AirLive\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.7.4.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\AirLive\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\AirLive\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O20 - AppInit_DLLs: "C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll"
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: wmphost - {1CE1616B-45E8-474D-B91D-DB00E0C9E30C} - C:\WINDOWS\wmphost.dll
O21 - SSODL: wmpdev - {A9E892C1-1437-478B-B212-7DE24D0DFFA0} - C:\WINDOWS\wmpdev.dll
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apple Mobile Device - Apple, Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\AirLive\Bluetooth Software\bin\btwdins.exe
O23 - Service: Diskeeper - Diskeeper Corporation - C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SiSoftware Database Agent Service (SandraDataSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Professional Home XI.SP1a\Win32\RpcDataSrv.exe
O23 - Service: SiSoftware Sandra Agent Service (SandraTheSrv) - SiSoftware - C:\Program Files\SiSoftware\SiSoftware Sandra Professional Home XI.SP1a\RpcSandraSrv.exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe (file missing)



Jeste da je malo predugacko
ali obavezno to uradi. Pa kada to zavrsis, postuj novi Hijack this log, da vidim o cemu se radi.

Uradio sam sve sto si rekao...

EPILOG...
Na kraju se sve zavrsilo sa - format c...
Mogao sam po savetu mnogih od vas to uraditi odmah - ali, predati se bez borbe...
(@ Havin Fun) kako bi tek to - bilo  NEMORALNO !!!