Upravo se zajebavam sa ovim sto si napisao,valjda ce raditi. Kasnije cu okaciti i Hijack This logfile...

kako da reinstaliram xp jer mi javlja da je trenutno instalirana novija verzija od ove koju imam na cd-u. Tu stariju verziju sam stavljao bukvalno 100 puta pre, pa sam dobio ovu kao noviju verziju koja je totalno losa ali sad kad hocu da vratim staru on javlja da ne moze ...

Zvonko,hvala ti k'o bratu kojeg nikad nisam imao. Odradio sam prvi deo onoga sto si napisao i sve je nestalo,cak i ono obavestenje o privacy danger-u (bez brisanja icega iz registry-ja)

Evo ga i Hijack This log:



Logfile of HijackThis v1.99.1
Scan saved at 8:57:56 PM, on 10/5/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\uTorrent\uTorrent.exe
D:\Programi download\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www.faststone.org/ThankYou.htm
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = :
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Mega Manager IE Click Monitor - {bf00e119-21a3-4fd1-b178-3b8537e75c92} - C:\Program Files\Megaupload\Mega Manager\MegaIEMn.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~2\MEGAUP~1.DLL
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
O8 - Extra context menu item: Download Link Using Mega Manager... - C:\Program Files\Megaupload\Mega Manager\mm_file.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {8167C273-DF59-4416-B647-C8BB2C7EE83E} (WebSDev Control) - http://liveupdate.msi.com.tw/autobios/LOnline/install.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3D3A8F04-167D-4120-B226-255E125DC4B0}: NameServer = 194.247.192.33 194.247.192.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{490A1383-5FA2-474E-85D5-75FB622C8F23}: NameServer = 194.247.192.33,194.247.192.1
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O21 - SSODL: mssql - {0A1818DF-4E78-486A-A518-370B867DF323} - C:\WINDOWS\mssql.dll (file missing)
O21 - SSODL: syscore - {CD2FA38A-5603-4993-8070-2ECA6A6D515B} - C:\WINDOWS\syscore.dll (file missing)
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

@samuraj078 Pa ne pokusavaj iz Win-a, botuj sa CD-a.

@Falzone  http://softwarereferral.com/jump.php?wmid=6010&mid=MjI6Ojg5&lid=2 ulaskom na taj link, AV mi prijavljuje 57 akrepa.

@Falzone:
Nema ne čemu.
Ovaj sajt što ti je lightsoft označio je za Ultimate Cleaner a to je lažni anti spy.
Naći ćeš ga ovde na spisku kao i mnoge druge lažne.
http://spywarewarrior.com/rogue_anti-spyware.htm
Ne vidim da ti je instaliran ali ako si ga skidao odatle ne instaliraj ga.
Od reg. cleanera ti je dobar ccleaner.
Bilo bi dobro da skineš  Spyware Doctor pa da sa njim pregledaš sistem.

@lightsoft:
Koji AV koristiš

Spyware terminator sa integrisanim ClamAV in real time shield. Crawler toolbar sa web security gard-om. Do pre oko pola godine nod, a onda me sjebo ko nikad. Neko vreme i Avast.
Sto pitas, mislis da nesto nije u redu ?? Ako mislis ili imas primedbu reci, da korigujem na bolje.

Joj edno pitanje i necu vise (valjda): sta je "image" windowsa? Drug mi juce rece na brzaka da bi bilo dobro da uradim image i posle ne moram da radim reinstalaciju ili taj repair,ali sam zurio pa se nisam raspitao dalje...

Ceo win zapamtis kao jedan fajl, narezes na cd, i nakon formatiranja harda ponovo iskopiras na hard. Samo time pamtis i kopiras opet sve iste greske.

Sa instaliranim programima i drajverima? To bi bilo lepo

Da, to podosta servisa tako radi. Na nekom hardu imaju instaliran xp, kada im neko donese komp sa oborenim sistemom, formatiraju hard i samo iskopiraju. Naknadno u zavisnosti od ploce,grafike .... ubace samo drajvere. Ti to vec imas.