MOLIM vas za hitnu pomoc... :: Pc Klinika ~ Doktori za vas kompjuter

Toolbar

Pravilnik foruma

Burek marketing

Najčešća pitanja

Posetite Burek Prodavnicu

Zatvori

BUREK marketing

Burek :: Forumi :: > Tehnicki deo foruma > Pc Klinika ~ Doktori za vas kompjuter

Tema: MOLIM vas za hitnu pomoc... (Moderatori: enaB, chelavi1)

Trenutno vreme je: 25. Sep 2025, 08:23:30

Korisnici koji su trenutno na forumu 0 članova i 0 gostiju pregledaju ovu temu.

Napomena: Za sva pitanja u vezi kupovine novog hardware-a ili procene vrednosti i preporuke koristite - ovu temu!

Spyware,sta je,kako radi,kako se zastititi? :: Kako rade mreze :: Burek Anti-virus software review :: Index tema koje ne treba propustiti

Stranice:

1 2 3 [Sve]

Tema: MOLIM vas za hitnu pomoc... (Pročitano 8276 puta)

srecnicaa

12. Nov 2008, 20:16:08

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

Ludi pomagajte!!!! Odjednom ne mogu da otvorim nista u kompu!!! Znaci nista, cak ni korpu za otpatke, ni jedan folder, program. nista... samo mi daje info da je neki error i da saljem raport microsofu da bi oni uz pomoc tog raporta radili na poboljsanju.... .... skidala sam neki igricu, avast nije nista nasao medjutim kad sam kliknula na folder gde je downloadovao nije hteo da otvori folder, uradila sam restart, skenirala komp, ali nista... ne otvara ne samo taj folder nego ni jedan,znaci NISTA ...Otvorio mi je jedino browser ali uz pomoc tog infoa o erroru, kliknem da saljem taj raport i otvori mi browser e tako udjoh na net.... a inace kad hocu da otvorim sa desktopa nema sanse, samo iskace taj prozor da je error i da saljem raport microsoftu,ne mogu da otvorim ni start, ni moj komp, ni kontrolnu tablu... ni programe, apsolutno nista....pomagajte sta da radim??.... poslala sam im prokleti raport, a kada kliknem dont send onda mi samo refreshuje desktop.... i to ne uobicajeni refresh nego mi se ikonice sa desktopa izgube na minut dva i onda se polako ponovo pojave....

« Poslednja izmena: 12. Nov 2008, 20:18:20 od srecnicaa »

IP sačuvana

Zatvori

chelavi1

Poruka #1

12. Nov 2008, 20:29:45

Moderator

Svedok stvaranja istorije

necu da ti kazem, chelavi...

Zodijak
Pol
Poruke	22023
Zastava

	Linux
	Mozilla (hardy)
	Apple iPhone 12, S21

restartuj racunar, i dok ti dize sistem pritisni par puta taster f8 i pronadji opciju safe mode idi strelicom do nje i pritisni enter. kada udjes u safe mode pokreni avast, i ako imas jos nesto od programa za zastitu (spy-bot, malwarebytes anti-malware...) pokreni i njih, sve sto pronadju obrisi i posle restartuj racunar ali ovaj put pusti da se sistem normalno digne i vidi da li se sta promenilo, pa javi...

IP sačuvana

- A robot may not injure a human being or, through inaction, allow a human being to come to harm
- A robot must obey the orders given to it by human beings, except where such orders would conflict with the First Law
- A robot must protect its own existence as long as such protection does not conflict with the First or Second Laws

Zatvori

srecnicaa

Poruka #2

12. Nov 2008, 20:34:19

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

Citat: chelavi1 12. Nov 2008, 20:29:45

ok... idem odmah to da probam... pa javim

IP sačuvana

Zatvori

ivicaspas

Poruka #3

12. Nov 2008, 20:39:56

Prijatelj foruma

Poznata licnost

MC- argus

Zodijak
Pol
Poruke	4467
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	HTC

Cekaj ne moras da restartujes u safe mode, Avast ima tu opciju. Klikni desni klik na na avast skin, to je kao onaj plejer, i tu imas opciju da skenira sistem pre podizanja, prakticno u Safe Mode. Oznacis tu opciju i restartujes, posle samo gledaj on ce sam da odradi scan, ako te pita sta da radi kad nadje virus, klikni na broj 6.

« Poslednja izmena: 12. Nov 2008, 20:40:14 od ivicaspas »

IP sačuvana

Zatvori

chelavi1

Poruka #4

12. Nov 2008, 20:43:52

Moderator

Svedok stvaranja istorije

necu da ti kazem, chelavi...

Zodijak
Pol
Poruke	22023
Zastava

	Linux
	Mozilla (hardy)
	Apple iPhone 12, S21

jes` , ali jel moze da pokrene spy-bot ili jos nesto iz avastovog safe moda Smile

IP sačuvana

Zatvori

ivicaspas

Poruka #5

12. Nov 2008, 20:52:58

Prijatelj foruma

Poznata licnost

MC- argus

Zodijak
Pol
Poruke	4467
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	HTC

Ajde da vidimo da li ce da uspe iz safe mode, ja sam imao slican slucaj da explorer nije radio ni u sigurnom modu.

IP sačuvana

Zatvori

srecnicaa

Poruka #6

12. Nov 2008, 21:59:44

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

uradila iz safe mode i nista... avast je nasao meke malwere ali kad sam opet pokrenula sistem isto je... ne mogu nista da otvorim osim info o erroru i odatle uspem da otvorim browser.... Smile

evo momci da javim da sam uspela Smiley

uradila sam oporavak sistema iz safe mode... vratila sistem na stanje od 10h jutros i sad radi... doduse malo usporeno ali... o tome cu misliti sutra Smiley

U svakom slucaju hvala vam na podrsci i savetima...

« Poslednja izmena: 12. Nov 2008, 22:57:41 od srecnicaa »

IP sačuvana

Zatvori

chelavi1

Poruka #7

12. Nov 2008, 23:10:20

Moderator

Svedok stvaranja istorije

necu da ti kazem, chelavi...

Zodijak
Pol
Poruke	22023
Zastava

	Linux
	Mozilla (hardy)
	Apple iPhone 12, S21

dve preporuke: skini kasperski, pa makar i trial, koji ti vazi trideset dana i potrazi malwarebyte`s anti-malware, instaliraj ih kod sebe, odradi update i onda ponovi sve ovo skeniranje u safe modu...

IP sačuvana

Zatvori

srecnicaa

Poruka #8

13. Nov 2008, 00:42:08

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

Citat: chelavi1 12. Nov 2008, 23:10:20

e nedaju mi vise trial verziju.... skidala ga nekoliko puta.... ali evo uz pomoc http://www.malwarebytes.org/mbam.php ovog anti malwera u kombinaciji sa avastom sam ocistila ...

IP sačuvana

Zatvori

chelavi1

Poruka #9

13. Nov 2008, 01:10:23

Moderator

Svedok stvaranja istorije

necu da ti kazem, chelavi...

Zodijak
Pol
Poruke	22023
Zastava

	Linux
	Mozilla (hardy)
	Apple iPhone 12, S21

IP sačuvana

Zatvori

milicik

Poruka #10

13. Nov 2008, 06:17:14

Hronicar svakodnevice

Zodijak
Pol
Poruke	508

	Windows XP
	Mozilla Firefox 3.0.3
	SonyEricsson k800i

Takodje ti jako dobar Spywere doctor, ja sam se resio muka pomogu njega Smile

IP sačuvana

Zatvori

srecnicaa

Poruka #11

13. Nov 2008, 18:08:45

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

znaci ovaj anti malwer mi je nasao cak 90 komada.. bruka... evo log karte.... pogledajte

Kod:

Malwarebytes' Anti-Malware 1.30
Verzija baze podataka: 1390
Windows 5.1.2600 Service Pack 3

11/12/2008 11:33:01 PM
mbam-log-2008-11-12 (23-33-00).txt

Tip skeniranja: Brzo Skeniranje
Skeniranih objekata: 49217
Proteklo vreme: 12 minute(s), 3 second(s)

Inficirani procesi u memoriji: 0
Inficirani moduli u memoriji: 2
Inficirani ključevi u registru: 34
Inficirane vrednosti u registru: 7
Inficirani podaci u registru: 2
Inficirane fascikle: 7
Inficirane datoteke: 38

Inficirani procesi u memoriji:
(Maliciozne stavke nisu detektovane)

Inficirani moduli u memoriji:
C:\Program Files\MySearch\bar\2.bin\S4BAR.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MySearch\bar\2.bin\S4PLUGIN.DLL (Adware.MyWebSearch) -> Delete on reboot.

Inficirani ključevi u registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{b2adb537-aff6-4d72-ba77-da012a6fdea6} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\iifedeby (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{b2adb537-aff6-4d72-ba77-da012a6fdea6} (Trojan.Vundo.H) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mysearchtoolbar.settingsplugin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\TypeLib\{014da6c0-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{014da6ca-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{014da6cc-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{014da6c1-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{014da6c1-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{014da6c1-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{014da6c9-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{014da6c9-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{014da6cb-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{014da6cb-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{fac94900-96d9-47fa-ba33-7ef1bbfbbcec} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\mysearchtoolbar.settingsplugin.1 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\toolbarbesttoolbarstoolbar.besttoolbarstoolbarobject (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\CLSID\{9afb8248-617f-460d-9366-d71cdeda3179} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{b2adb537-aff6-4d72-ba77-da012a6fdea6} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{25560540-9571-4d7b-9389-0f166788785a} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{2eff3cf7-99c1-4c29-bc2b-68e057e22340} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3dc201fb-e9c9-499c-a11f-23c360d7c3f8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{63d0ed2c-b45b-4458-8b3b-60c69bbbd83c} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{98d9753d-d73b-42d5-8c85-4469cda897ab} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{9ff05104-b030-46fc-94b8-81276e4e27df} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{a6573479-9075-4a65-98a6-19fd29cf7374} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Instant Access (Adware.InstantAccess) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\My Search Uninstall (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\MySearch (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\contim (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\rdfa (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\FCOVM (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RemoveRP (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Multimedia\WMPlayer\Schemes\f3pss (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Inficirane vrednosti u registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{014da6c9-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\ShellBrowser\{014da6c9-189f-421a-88cd-07cfe51cff10} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{12f02779-6d88-4958-8ad3-83c12d86adc7} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\URLSearchHooks\{12f02779-6d88-4958-8ad3-83c12d86adc7} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{12f02779-6d88-4958-8ad3-83c12d86adc7} (Fake.Dropped.Malware) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{b2adb537-aff6-4d72-ba77-da012a6fdea6} (Trojan.Vundo) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Instant Access (Adware.InstantAccess) -> Quarantined and deleted successfully.

Inficirani podaci u registru:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyDocs (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowMyComputer (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

Inficirane fascikle:
C:\Program Files\MySearch (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MySearch\bar (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MySearch\bar\2.bin (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MySearch\bar\Cache (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\History (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\Settings (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\ac8zt2 (Trojan.FakeAlert) -> Quarantined and deleted successfully.

Inficirane datoteke:
C:\WINDOWS\system32\iifedebY.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\qxyyfvat.dll (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\tavfyyxq.ini (Trojan.Vundo.H) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\2.bin\S4BAR.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsnBA.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nslB3.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsmDC.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsmE3.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsmE6.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsnB7.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsoCB.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsuD2.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsyCF.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\nsyD8.tmp\blowfish_d.dll (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\2.bin\NPMYSRCH.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\2.bin\S4FFXTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\2.bin\S4FFXTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\2.bin\S4NTSTBR.JAR (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\2.bin\S4NTSTBR.MANIFEST (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\2.bin\S4PLUGIN.DLL (Adware.MyWebSearch) -> Delete on reboot.
C:\Program Files\MySearch\bar\Cache\0005BC14 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\Cache\001A6EC8.bmp (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\Cache\001A91F0.bmp (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\Cache\0096DB72 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\Cache\files.ini (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\History\search2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Program Files\MySearch\bar\Settings\prevcfg2.htm (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\WINDOWS\k.txt (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\iuosmcu_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ooqkyya_navps.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\iuosmcu_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\WINDOWS\system32\ooqkyya_nav.dat (Adware.NaviPromo) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Start Menu\NoCreditCard.lnk (Dialer) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Favorites\Search Online.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Favorites\VIP Casino.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Favorites\Cheap Pharmacy Online.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Favorites\SMS TRAP.url (Rogue.Link) -> Quarantined and deleted successfully.
C:\Documents and Settings\xp profesional\Local Settings\Temp\myconfig.php (Trojan.FakeAlert) -> Quarantined and deleted successfully.

« Poslednja izmena: 13. Nov 2008, 18:09:38 od srecnicaa »

IP sačuvana

Zatvori

Filip93

Poruka #12

13. Nov 2008, 19:05:47

Moderator

Legenda foruma

Zodijak
Pol
Poruke	31625
Zastava

	Windows XP
	Opera 9.60
	Nokia 6120

Ok, daj nam sada Hijackthis log da vidimo. Mozete ga download-ovati na ovoj adresi.

IP sačuvana

Zatvori

srecnicaa

Poruka #13

14. Nov 2008, 00:52:04

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

evo ga log... a recimi sta radim sa svim ovim sto mi je ovaj program nasao? da cekiram i brisem ili? sta?

Kod:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:49:32 AM, on 11/14/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\GIGABYTE\Common\GNConfig.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\xp profesional\Desktop\ceca\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://happy.srecnica.com/xhtml
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com
R3 - URLSearchHook: HAPPYFORUM Toolbar - {286c0758-b7bc-493d-9cd7-1c2e526c92df} - C:\Program Files\HAPPYFORUM\tbHAPP.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: HAPPYFORUM Toolbar - {286c0758-b7bc-493d-9cd7-1c2e526c92df} - C:\Program Files\HAPPYFORUM\tbHAPP.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {E4F4A367-5837-4632-8D95-0BE5AB794BBA} - C:\WINDOWS\system32\jkkKeeDt.dll (file missing)
O3 - Toolbar: HAPPYFORUM Toolbar - {286c0758-b7bc-493d-9cd7-1c2e526c92df} - C:\Program Files\HAPPYFORUM\tbHAPP.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiSRaid] C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Gigabyte Wireless Utility.lnk = C:\Program Files\GIGABYTE\Common\GNConfig.exe
O8 - Extra context menu item: &Search - ?p=ZNfox000
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Internet Radio by Endicosoft.com - {1F958B09-3312-7f0e-9723-4C1324C57B20} - C:\Program Files\Internet Radio\Radio.exe (file missing)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1222667699921
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3576EC4B-DCD2-44FB-9CF0-105B91F606BB}: NameServer = 82.114.64.3,82.114.64.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{BFB23324-EC96-40CB-A1A8-C3D111544931}: NameServer = 217.169.208.1,217.169.208.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: Omniquad MyPrivacy - Unknown owner - C:\Program Files\XMicro Internet Security\MyPrivacy\mpsvc.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 6448 bytes

IP sačuvana

Zatvori

ivicaspas

Poruka #14

14. Nov 2008, 08:45:54

Prijatelj foruma

Poznata licnost

MC- argus

Zodijak
Pol
Poruke	4467
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	HTC

Ja mislim da imas jos problema, sta ti kazes??

IP sačuvana

Zatvori

Filip93

Poruka #15

14. Nov 2008, 15:35:27

Moderator

Legenda foruma

Zodijak
Pol
Poruke	31625
Zastava

	Windows XP
	Opera 9.60
	Nokia 6120

Iz Safe Mode-a ( Sta je Safe Mode, i kako uci u njega?) pokreni Hijackthis, odaberi Do a sytem scan only, stikliraj sledece, pa Fix Checked. Restartuj racunar, udji normalno u Windows, i daj mi svez log i kazi kako se sada ponasa racunar:

R3 - URLSearchHook: HAPPYFORUM Toolbar - {286c0758-b7bc-493d-9cd7-1c2e526c92df} - C:\Program Files\HAPPYFORUM\tbHAPP.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: HAPPYFORUM Toolbar - {286c0758-b7bc-493d-9cd7-1c2e526c92df} - C:\Program Files\HAPPYFORUM\tbHAPP.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {E4F4A367-5837-4632-8D95-0BE5AB794BBA} - C:\WINDOWS\system32\jkkKeeDt.dll (file missing)
O3 - Toolbar: HAPPYFORUM Toolbar - {286c0758-b7bc-493d-9cd7-1c2e526c92df} - C:\Program Files\HAPPYFORUM\tbHAPP.dll
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Search - ?p=ZNfox000
O9 - Extra button: Internet Radio by Endicosoft.com - {1F958B09-3312-7f0e-9723-4C1324C57B20} - C:\Program Files\Internet Radio\Radio.exe (file missing)
O23 - Service: Omniquad MyPrivacy - Unknown owner - C:\Program Files\XMicro Internet Security\MyPrivacy\mpsvc.exe (file missing)

IP sačuvana

Zatvori

srecnicaa

Poruka #16

14. Nov 2008, 21:26:06

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

Citat: ivicaspas 14. Nov 2008, 08:45:54

Ja mislim da imas jos problema, sta ti kazes??

pa ne primecujem... cini mi se da radi sasvim normalno, ali mozda je to privid .. jer u odnosu na pre neki dan komp mnogo bolje radi... a mozda ima jos nesto... videcu da sada uradim ovo sto je filip rekao pa cu da javim Smiley

IP sačuvana

Zatvori

srecnicaa

Poruka #17

14. Nov 2008, 22:07:38

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

uradila sto je filip rekao... evo ga svez lo fajl...

Kod:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:06:19 PM, on 11/14/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ATKKBService.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe
C:\Program Files\Google\Google Talk\googletalk.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\GIGABYTE\Common\GNConfig.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\xp profesional\Desktop\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://happy.srecnica.com/xhtml
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://uk.yahoo.com
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SiSRaid] C:\Program Files\Silicon Integrated Systems\SiSRaidPackage\SRaid.exe
O4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostart
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Global Startup: Gigabyte Wireless Utility.lnk = C:\Program Files\GIGABYTE\Common\GNConfig.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .UVR: C:\Program Files\Internet Explorer\Plugins\NPUPano.dll
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1222667699921
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{3576EC4B-DCD2-44FB-9CF0-105B91F606BB}: NameServer = 82.114.64.3,82.114.64.4
O17 - HKLM\System\CCS\Services\Tcpip\..\{BFB23324-EC96-40CB-A1A8-C3D111544931}: NameServer = 217.169.208.1,217.169.208.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5200 bytes

evo da dodam da mi se cini da komp radi jos malo bolje i brze nego pre ovog fixiranja... ne znam... videcu ovih dana jos.... ali probala sam otvaranje nekih fascikli koje su bas velike i koje je jako sporo otvarao sada ih otvara skoro na klik... jako brzo ih ucita, a pre svega ovoga mu je trebalo malte ne minut dva da ih otvori..... sve u svemu zadovoljna sam.... brz je i ne koci....

« Poslednja izmena: 14. Nov 2008, 22:45:06 od srecnicaa »

IP sačuvana

Zatvori

geza

Poruka #18

14. Nov 2008, 23:16:45

Hronicar svakodnevice

Per Aspera Ad Astra

Zodijak
Pol
Poruke	711
Zastava

	Windows XP
	Opera 9.27
	SonyEricsson K810i

Ajde da se i ja prisljamcim Smile

, posto imam slicne probleme. Nadam se da pokretac teme ne zamera Smile

Patim isto od sporog otvaranje fajlova Smile

Kod:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:11:04, on 14.11.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\Program Files\IObit\Advanced WindowsCare V2\MemCleaner.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
C:\Program Files\SECUREMAKER\MySecurer.exe
C:\Program Files\RALINK\Common\RaUI.exe
C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Opera\Opera.exe
D:\Moji Dokumenti\Programi\procexp.exe
D:\Moji Dokumenti\Programi\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: IeHelper Class - {A491D208-B353-490F-B81A-A8A3DC97042D} - C:\WINDOWS\system32\smiehlp.dll
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\AntiVir PersonalEdition Classic\avgnt.exe" /min
O4 - HKLM\..\Run: [ATIPTA] "C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe"
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [SmartRAM] C:\Program Files\IObit\Advanced WindowsCare V2\MemCleaner.exe /m
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: ATI CATALYST System Tray.lnk = C:\Program Files\ATI Technologies\ATI.ACE\CLI.exe
O4 - Global Startup: MySecurer.lnk = C:\Program Files\SECUREMAKER\MySecurer.exe
O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe
O8 - Extra context menu item: &Download by Arles Download Manager - C:\Documents and Settings\Geza\Local Settings\Application Data\Ariel Download Manager\DownloadManager.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} - http://download.divx.com/webplayer/stage6/windows/AutoDLDivXWebPlayerInstaller.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{15BABADB-75FB-4DF9-8904-EEB3DFD6440B}: NameServer = 217.169.208.1,217.169.208.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{15BABADB-75FB-4DF9-8904-EEB3DFD6440B}: NameServer = 217.169.208.1,217.169.208.2
O23 - Service: AntiVir PersonalEdition Classic Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\sched.exe
O23 - Service: AntiVir PersonalEdition Classic Guard (AntiVirService) - Avira GmbH - C:\Program Files\AntiVir PersonalEdition Classic\avguard.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

--
End of file - 5811 bytes

IP sačuvana

Zatvori

srecnicaa

Poruka #19

14. Nov 2008, 23:25:11

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

geza naravno da se ne ljutim Smile

i nadam se da ces i ti uspeti da resis problem... ja sam uspela i ovo je kao preporod u odnosu na pre nekoliko dana .... mozda treba da budem i zahvalna prokletoj igrici sa kojom sam pokupila "kretena" i zbog koga je pocelo sve ovo... da nije bilo toga verovatno bih i danas imala patnje sa sporim racunarom ..... Smile

odoh momci... hvala vam na svoj pomoci, jako sam vam zahvalna

IP sačuvana

Zatvori

alziraczizu

Poruka #20

15. Nov 2008, 09:09:09

Zvezda u usponu

Zodijak
Pol
Poruke	1064
Zastava

	Windows XP
	Opera 9.60

evo da ne otvaram novu temu, koristim registry mechanic, i kad stavim da mi skenira komp nadje mi neku gresku u C/WINDOWS/sistem 32/macromedia/flash i nece da obrise, probao sam i iz safe moda, nece, evo sta izbaci

sta znaci ovo tacno?

IP sačuvana

Zatvori

srecnicaa

Poruka #21

15. Nov 2008, 09:19:56

Clan u razvoju

Zodijak
Pol
Poruke	30
Zastava

	Windows XP
	Mozilla Firefox 3.0.3
	Nokia E65

Citat: alziraczizu 15. Nov 2008, 09:09:09

sta znaci ovo tacno?

ovo obavestenje ti je da ti je taj sadrzaj ili zasticen ili ga koristis trenutno i ne dozvoljava brisanje....

IP sačuvana

Zatvori

alziraczizu

Poruka #22

15. Nov 2008, 09:27:51

Zvezda u usponu

Zodijak
Pol
Poruke	1064
Zastava

	Windows XP
	Opera 9.60

Citat: srecnicaa 15. Nov 2008, 09:19:56

Citat: alziraczizu 15. Nov 2008, 09:09:09

sta znaci ovo tacno?

ovo obavestenje ti je da ti je taj sadrzaj ili zasticen ili ga koristis trenutno i ne dozvoljava brisanje....

a kako da ga odstitim Smile

? ne koristim ga trenunto, tako da ne znam shto nece, hvala u svakom slucaju

IP sačuvana

Zatvori

Filip93

Poruka #23

15. Nov 2008, 09:55:35

Moderator

Legenda foruma

Zodijak
Pol
Poruke	31625
Zastava

	Windows XP
	Opera 9.51
	Nokia 6120

Posto je problem autorke teme resen, tema ide pod kljuc. Ostali mogu da otvore nove teme za svoj problem. Smile

[Lock]

IP sačuvana

Zatvori

Stranice:

1 2 3 [Sve]

Burek :: Forumi :: > Tehnicki deo foruma > Pc Klinika ~ Doktori za vas kompjuter

Tema: MOLIM vas za hitnu pomoc... (Moderatori: enaB, chelavi1)

Trenutno vreme je: 25. Sep 2025, 08:23:30

Prebaci se na:

Oznake: malwere dns MOLIM pck uci fajlova otvaranje server preporod ati
safe malvar malwer settings dwtrig20 sistem fakealert zasticen anti wireless

Upozorenje:ova tema je zaključana!
Samo administratori i moderatori mogu odgovoriti.

Forum Info: Banneri Foruma :: Burek Toolbar :: Burek Prodavnica :: Burek Quiz :: Najcesca pitanja :: Tim Foruma :: Prijava zloupotrebe

Izvori vesti: Blic :: Wikipedia :: Mondo :: Press :: Naša mreža :: Sportska Centrala :: Glas Javnosti :: Kurir :: Mikro :: B92 Sport :: RTS :: Danas

Prijatelji foruma: Triviador :: Nova godina Beograd :: nova godina restorani :: FTW.rs :: MojaPijaca :: Pojacalo :: 011info :: Burgos :: Sudski tumač Novi Beograd

Pravne Informacije: Pravilnik Foruma :: Politika privatnosti :: Uslovi koriscenja :: O nama :: Marketing :: Kontakt :: Sitemap

All content on this website is property of "Burek.com" and, as such, they may not be used on other websites without written permission.