na poslu imamo adsl. ide na onaj njihov modem a onda na ruter koji je zapravo jedan racunar na kome je linux. sa tog rutera ide na nasu mrezu koja je podijeljena svicevima na nekoliko racunara. ranije je mogao da odradi windows update ali sad ne moze ni na jednom racunarau iako imamo licencirane windowse.
da li mozda znate ovako iz prve ruke sta bi moglo biti?
pozz i hvala

Skini malwarebytes i proveri na jednom racunaru da niste nesto zakacili. http://fileforum.betanews.com/download/Malwarebytes-AntiMalware/1186760019/1

Moze biti da je neki malware, pa se prosirio na mrezu i onemogucio update. Pusti Quick scan.

mislim da sam prije nekoliko dana skenirao sa ovim alatom ali nije dalo rezultate. ipak pokusacu jos jednom.
hvala

nasao je 6 komada !!!
poslije restarta pokusacu update.

Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 4052

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

11/3/2010 12:52:41 PM
mbam-log-2010-11-03 (12-52-41).txt

Scan type: Quick scan
Objects scanned: 138631
Time elapsed: 5 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 4
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\SSHNAS (Trojan.Renos) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\{9437d150-1f14-43a2-890f-b5c9a2dddfba}\NameServer (Trojan.DNSChanger) -> Data: 85.255.112.189 -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\WINDOWS\Sysvxd.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Hm, nakon restarta pokusao je da odradi update ali nisam mogao izaci na internet jer mi je program obrisao DNS adresu.

Odradi ovo

Start > Run > cmd  Upisati  ipconfig /flushdns  enter.

Obrisao ti je ovu adresu 


Ova tri kljuca si mogao da zanemaris, posto si to ti iskljucio, nije malware u pitanju 

da ali morao sam opet upisati tu DNS adresu da bih mogao izaci na internet. nisam mogao izaci na internet dok nisam upisao tu adresu. da li sam pogrijesio s tim ili sta sam trebao uraditi?
ehh ivica bas si spas.....imas ladno pivo od mene za pomoc 

i da mi je uhvatiti tog lika sa te adrese da ga malo prodrmam ako mi nesto hakuje racunare. 

kako sam ljut na to. ili je to neka random IP adresa, nevezano za njegovu aktivnost na internetu

Ukucaj u run sledece:

C:\Windows\notepad.exe C:\windows\system32\drivers\etc\hosts

Enter pa mi iskopiraj sadrzaj notepada.

# Copyright (c) 1993-1999 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
#      102.54.94.97     rhino.acme.com          # source server
#       38.25.63.10     x.acme.com              # x client host
127.0.0.1    localhost