OK uradi sledece skini program
http://www.download.com/Malwarebytes-Anti-Malware/3000-8022_4-10804572.htm

On ce ti sve stavke koje su u registriju modifikovane a vezane za task manager i folder options  i ostale restrikcije detektovati kao Hijack.Task manager disabled i sl i posle remove selected vratiti default vrednosti...

Takodje ce verovatno naci jos gamadi...

Okaci ovde izvestaj nakon ciscenja u obliku attacha kako se tema ne bi "sirila"

Cisto da imamo predstavu koja je tacno infekcija u pitanju...

Posle toga pusti program Dr.web Cure it da ti skenira iz safe moda[stavi samo C particiju da ti skenira]
Kad zavrsi express scan Klikni Options > Change settings ; u prozoru koji će se otvoriti, dečekiraj opciju Heuristic Analysis a zatim klikni OK.

Onda klikni na dugme koje ima simbol play a pre toga  stavi samo C particiju da ti skenira]

Uradio sam sve kako si napisao ali sve je ostalo isto, nemam Run u star meniju, task manager ne radi, izgleda da je reinstalacija Windows-a ipak neizbezna. 

Ajmo ovako:

Kao prvo  klikni na log i otvori izvestaj u notapadu i sacuvaj ga na desktop i okaci ovde izvestaj kao attachment;
Ne vide se sve infekcije;

Kao drugo jel si uklonio ovo sto je nasao?

Ako nije pusti sada iz Safe moda opet ovaj program.

Sta je bilo sa Dr.Web Cure It?
Jel on nesto nasao?

Kao trece skini ovaj program

http://downloads.malwareremoval.com/BillCastner/FixPolicies.exe

Pokreni ga..Klikni na Install button.Tada ce biti kreiran novi folder FixPolicies.
Udji i klikni na Fix_Policies.cmd.
Sacekaj 5 do 10 sekundi i posle toga restartuj komp.

Pa javi...

Edit:

Hmm, lepo se vidi da je MBAM detektovao restrikcije... Trebalo je posle ciscenja da restartujes komp...

Malwarebytes' Anti-Malware 1.28
Database version: 1165
Windows 5.1.2600 Service Pack 2

9/18/2008 9:11:30 PM
mbam-log-2008-09-18 (21-11-25).txt

Scan type: Quick Scan
Objects scanned: 44381
Time elapsed: 59 second(s)

Memory Processes Infected: 2
Memory Modules Infected: 0
Registry Keys Infected: 9
Registry Values Infected: 1
Registry Data Items Infected: 4
Folders Infected: 1
Files Infected: 16

Memory Processes Infected:
C:\WINDOWS\faceback.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\stfMeane450.exe (Trojan.Downloader) -> No action taken.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\bho_myjavacore.mjcore (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\TypeLib\{e0f01490-dcf3-4357-95aa-169a8c2b2190} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\Interface\{17e44256-51e0-4d46-a0c8-44e80ab4ba5b} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{d88e1558-7c2d-407a-953a-c044f5607cea} (Trojan.BHO) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{d88e1558-7c2d-407a-953a-c044f5607cea} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\bho_myjavacore.mjcore.1 (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\AppID\{80ef304a-b1c4-425c-8535-95ab6f1eefb8} (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\AppID\BHO_MyJavaCore.DLL (Trojan.BHO) -> No action taken.
HKEY_CLASSES_ROOT\WR (Malware.Trace) -> No action taken.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\runner1 (Trojan.Downloader) -> No action taken.

Registry Data Items Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoFolderOptions (Hijack.FolderOptions) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoRun (Hijack.Run) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\System\DisableCMD (Hijack.CMDPrompt) -> Bad: (1) Good: (0) -> No action taken.

Folders Infected:
C:\Program Files\Mjcore (Trojan.BHO) -> No action taken.

Files Infected:
C:\WINDOWS\faceback.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\stfMeane450.exe (Trojan.Downloader) -> No action taken.
C:\Program Files\Mjcore\Mjcore.dll (Trojan.BHO) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\27.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\66.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\23.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\56.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\28.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\85.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\06.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\32.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\14.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\25.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temp\18.exe (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temporary Internet Files\Content.IE5\K6AYC2Z4\juniper[1].jpg (Trojan.Downloader) -> No action taken.
C:\Documents and Settings\Stefan Petrovic\Local Settings\Temporary Internet Files\Content.IE5\GD8PSVW9\meane[1].stf (Trojan.Downloader) -> No action taken.


Dr.Web Cure It je na tri mesta detektovao Trojana i to sam izbrisao.
Uradio sam i ovo ali isto. A sto je najgore sve mogucnosti koje ima administrator su mi zabranjene, iskljucen mi je i system restore i ne mogu da ga ukljucim ponovo 

Aj molim te jos samo ovo ucini i posle preuzimaju modovi...

Skeniraj iz safe moda posto iz nekog razloga MBAM nije ni pipnuo ove fajlove...

Znaci ni fixpolicies. ne pomaze...

Ok nemoj paniciti jos nije vreme za dizanje sistema... 

Kada zavrsis sa ovim sto ti je Diarno rekao, okaci Hijackthis log, da vidimo sta je ostalo.

Isti taj Trojan.Downloader sam ja cistio pre neki dan na jednom kompu i takodje nije uspeo da ga obrise malwarebytes (No action taken). Nismo probali iz safe mode.