Ćao drugari.Skoro sam instalirao NOD32,pa mi je danas alarmirao prvi put,dok sam bio na internetu i skidao neke igrice.
Ja sam postupio po uputstvu i to sada izgleda ovako:
Time   Module   Object   Name   Threat   Action   User   Information
31.3.2008 17:41:14   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined   HOME-4038E98321\Aca   
31.3.2008 17:40:28   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:39:03   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:38:23   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:37:41   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:37:00   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:36:18   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:35:37   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:34:54   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:34:08   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:33:09   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:32:25   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:31:22   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:30:24   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:29:43   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:28:55   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:28:11   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:27:24   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:26:30   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:25:29   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:24:30   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:23:31   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:22:49   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   Connection terminated   HOME-4038E98321\Aca   
31.3.2008 17:21:47   IMON   file   http://downloads.memedia.com/prod/MEADInst.exe   Win32/Adware.WhenU.SaveNow application   quarantined - Connection terminated   HOME-4038E98321\Aca   

Da li je ovo dobro ili ne i šta znači,pošto ja nemam pojma?Dali je ovaj virus zaustavljen?

nesto je detektovao i sta god da ga je "uznemirilo" on ga je uspesno quarantined-zatvorio....
skeniraj ponovo pa ako ti opet nalazi viruse zanci da su virusi povezani zajedno sa nekim sistemskim
fajlom...
Ukoliko se problem i dalje pojavljuje, preporucujem  da skeniras  racunar sa HiJackThis software-om koji je besplatan i mozete ga download-ovati na ovoj adresi, nakon cega zakacite ovde Vas tekstualni HiJackThis log.

Evo šta sam snimio:

Logfile of HijackThis v1.99.1
Scan saved at 20:48:52, on 31.3.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Analog Devices\SoundMAX\Smax4.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\ltmoh\Ltmoh.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
D:\New Folder\Nokia PC Suite 6\PCSync2.exe
D:\New Folder\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\7-Zip\7zFM.exe
C:\DOCUME~1\Aca\LOCALS~1\Temp\7zO53C.tmp\HijackThis.exe

O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LtMoh] C:\Program Files\ltmoh\Ltmoh.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Nokia.PCSync] "D:\New Folder\Nokia PC Suite 6\PCSync2.exe" /NoDialog
O4 - HKCU\..\Run: [PC Suite Tray] "D:\New Folder\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - Startup: Scheduler.lnk = D:\DOWNLOAD\Common\Scheduler\wcomschd.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O8 - Extra context menu item: Iz&vezi u Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Istraživanje - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

(izvinjavam se što misam ranije ovo odradio,bio sam odsutan)

Log ti je dobar

E,hvala puno!
Znači,kada NOD32 signalizira sumnjive pojave i aktivnosti i ja to obrišem,ili smestim u karantin,nema bojazni da če da mi zarazi sistem?!

nema 

Sada mi je mnogo lakše,hvala puno

nod32 je jak i mocan antivirus
staje rame uz rame sa najacima...
sa njim si full protected