Nesto mi se pojavljuje kada mi se pali komp..Uspeo sam da uhvatim ss..Nista se narocito ne dogadja sa kompom osim sto se pri svakom paljenju ili resetovanju pojavljuje ova poruka sa slike i jos nesto sam zapazio a to je da skoro uvek skenira C(kao ima neke greske)...A pustio sam ga hiljadu puta da ih popravi(tako sto odem desni klik na particiju C pa onda Properties pa kartica Tools i onda idem Check Now i onda stikliram obe opcije i pustim da zavrsi to priliko sledeceg reseta)...Ali nista...

Јеси користио неке програме за "шминкање" ? 

Probaj da ides na run-cmd,kucaj chkdsk c:/r,pa yes
Trebalo bi da ispravi gresku,ako nije Trojan neki

to je neka buba...
skenirao si av-om?
baci log...

Ma izgleda da sam resio tako sto sam Perfect diskom defragmentovao C(on ima opciju da defragmentise offline ...To sam uradio i vise se ne pojavljuje)...Koliko sam provalio(sam),log mi je cist...Inace NOD32 nije nista nasao...Evo loga...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:48:59, on 17.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Webroot\Webroot Desktop Firewall\wdfsvc.exe
C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
C:\Program Files\Webroot\Webroot Desktop Firewall\WDF.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\LClock\lclock.exe
C:\Program Files\Mozilla Firefox 3 Beta 3\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINDOWS\pchealth\helpctr\System\panels\blank.htm
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [Webroot Desktop Firewall] C:\Program Files\Webroot\Webroot Desktop Firewall\WDF.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [LClock] C:\Program Files\LClock\lclock.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\RunOnce: [NeroHomeFirstStart] "C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe" (User 'LOCAL SERVICE')
O17 - HKLM\System\CCS\Services\Tcpip\..\{A33C7093-30AC-4E4A-8B89-0A07CA7E41D3}: NameServer = 217.24.17.17 217.24.17.80
O23 - Service: Eset HTTP Server (EhttpSrv) - Unknown owner - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco\PerfectDisk\PDEngine.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: Webroot Desktop Firewall network service (WDFNet) - Webroot Software, Inc. - C:\Program Files\Webroot\Webroot Desktop Firewall\wdfsvc.exe
O24 - Desktop Component 0: (no name) - D:\Slike\5.24.2007 [VIDIKOVAC]\2\goki i damljan.JPG

--
End of file - 2980 bytes


PS...Ne znam da li da brisem ovo:

   O17 - HKLM\System\CCS\Services\Tcpip\..\{A33C7093-30AC-4E4A-8B89-0A07CA7E41D3}: NameServer = 217.24.17.17 217.24.17.80

   O4 - HKUS\S-1-5-19\..\RunOnce: [NeroHomeFirstStart] "C:\Program Files\Common Files\Nero\Lib\NMFirstStart.exe" (User 'LOCAL SERVICE')...
Sta mislite?

Log je cist. Mozes da ovo fixuje ako ne znas sta je:
O24 - Desktop Component 0: (no name) - D:\Slike\5.24.2007 [VIDIKOVAC]\2\goki i damljan.JPG
 

brisi

i vidi start/run/ kucaj msconfig, idi na startup i pregledaj jos jednom ima li nesto sto ne zelis da ti se dize sa sistemom.