Komp mi je bio pun virusa i kada sam ga ocistio nedostali su mi neki systemski fajlovi. Za sada sljaka nekako, ali jedva... Pola stvari ne radi, recimo cmd ne moze da se pokrene kao jos gomila gluposti. Zanima me da li nekako moze da se uradi oporavak systema i da racunar sam prepozna sta mu nedostaje i to ponovo prekopira?!  Hvala!

mozes da odradis repair sistema, on ti samo sredjuje sistemske fajlove u win-u. treba ti instalacioni cd win-a...
mada se meni cini da se ti jos nisi resio zaraze...

Upravo se resavam zaraze... U stvari komp. nije hteo ni da se upali, pa sam sa sistemskim diskom isao na oporavak i onda sam daobio kao neki dos prozor i trazio mi je da sam unesem komandu... ja sam odradio CHKDSK /p /r ili tako nesto i kada je zavrsio uspeo sam da upalim komp, ali ne funkcionise sve najbolje... tj. gomila sistemskih stvari zeza! Recimo nece da mi prepozna stampac jer je iskljucen "printer spooler", ja odem i rucno ga aktiviram, a on se ponovo ugasi i nece nikako. Ne mogu da prikazem skrivene ikonice, kada obelezim da budu vidljive i sacuvam, on ne zapamti i tako... ima puno stvari da ne nabrajam sad. Da li ima jos nesto sto bih mogao da odradim sa win CD-om?

Skini  http://www.trendsecure.com/portal/en-US/_download/HiJackThis.exe   HiJackThis program:


Stavi ga u zaseban Folder na Desktop
Promeni naziv Foldera u Provera i Programa u Provera

* Pokreni HijackThis
* Izaberi opciju "Do a system scan and save the logfile"
* Na kraju skeniranja program ce izbaciti tekstualni log.
* taj log kopiraj ovde ( opcije copy / paste)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:51:24, on 7.6.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Terminator\Quick TV\Scheduled.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSI\Bluetooth Software\BTTray.exe
C:\WINDOWS\ATKKBService.exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\MSI\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
C:\Program Files\Common Files\Nero\Lib\NMIndexStoreSvr.exe
C:\Program Files\AVG\AVG8\avgscanx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Sale\Desktop\Provera\Provera.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.1.3.28.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: TGTSoft Explorer Toolbar Changer - {C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program Files\TGTSoft\StyleXP\TGT_BHO.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Quick TV Agent] C:\Program Files\Terminator\Quick TV\Scheduled.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Nero\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NBKeyScan] "C:\Program Files\Nero\Nero8\Nero BackItUp\NBKeyScan.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [OSSelectorReinstall] C:\Program Files\Common Files\Acronis\Acronis Disk Director\oss_reinstall.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Program Files\Common Files\Nero\Lib\NMBgMonitor.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: InterVideo WinCinema Manager.lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr.exe
O4 - Global Startup: TV Remote Control.lnk = C:\Program Files\Terminator\TV7131 Utilities\P3XRCtl.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\MSI\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O23 - Service: ATK Keyboard Service (ATKKeyboardService) - ASUSTeK COMPUTER INC. - C:\WINDOWS\ATKKBService.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - WIDCOMM, Inc. - C:\Program Files\MSI\Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Update Service (gupdate1c9c003ff1bd4fe) (gupdate1c9c003ff1bd4fe) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Nero\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 7635 bytes

Ok je...

Skini http://www.freedrweb.com/download+cureit/gr/

pusti ga da skenira u safe modu.. izvestaj okaci preko attachment forme..

Edit: da neko ne shvati pogresno..Slazem se sa Filipom ali posto kazes da se resavas zaraze ja tipujem na nekog fajl infetkora

http://www.virusbtn.com/resources/glossary/file_infector_virus.xml

To se u hjt logu ne moze videti 

zato sam ti dao dr.web da sa njim proverimo.

Odradicu to cim mi antivirus zavsi skeniranje...

Javi sta je nasao.. kopiraj izvestaj ili uslikaj.

dr web nije nasao nista u safe modu.

[img=http://img211.imageshack.us/img211/4485/81768015.th.jpg]
ovo mi se cesto pojavljuje kao i slicne greske...

U tom slucaju se vracas na drugi post na ovoj temi.

Ako je ono slika skeniranja sa tvojim AVG antivirusom, ovako stoje stvari. Ti si pazario Virut, moras da formatiras komp, i odmah posle formatiranja da instaliras dr_WebCureIt i da pustis scan.
Mozes da probas da skines  http://www.freedrweb.com/livecd/ live CD i narezes ga na disk, pa ga bootujes  i skeniras, ali male su sanse i ako ocistis komp da ce Windows da se podigne uopste. Uostalom vec je dovoljno ostecen. Kada si instalirao CureIt, tog momenta je i on sam bio inficiran.
 Virut je fajl infektor i siri se neverovatnom brzinom,tu nema boze pomozi, tako stoje stvari. Sacekaj ako hoces jos neko misljenje ali  po meni to je to.

omanuo AVG 

tuzna vest.. AVG nije uspeo da dezinfikuje lepo sistemske fajlove .. pa ih je malo...obrisao 

Mozes da probas sa repairom al bih se ja ipak slozio sa iznetim misljenjem iznad mog posta..mozes i sa repairom nesto da uradis... kako hoces

Tako sam i mislio Posto ovih dana nemam bas vremena za reinstalaciju windowsa, onda bih odradio repair da mu malo prodizim vek bar... Da li neko od vas moze da mi kaze kako tacno to da izvedem... da li trebam da otkucam neku komandu kada mi se pojavi ono u DOS-u ili kako?

Repair windowsa traje koliko i formatiranje i instalacija novog sistema, s tim sto kod repaira kliknes na slovo R (kad se pojavi drugi put), ne prvi, a kod instalacije novog ides na format. Jos jednom podvlacim da je repair gubljenje vremena, jer si ti zakacio monstruma koji jede sve. Ako instaliras neki AV sada, na ovom sistemu, on ce automatski da bude inficiran i stvar je gotova. Nijedan drugi alat osim antivirusa ne moze da ocisti Virut.
Znaci jedino ispravno resenje je da podignes novi sistem i da odmah zatim instaliras neki antivirus i skeniras sve particije koje imas.
Vec je bilo nekoliko infekcija tog tipa ovde na forumu, mozes da ukucas u pretragu Sality / Virut i da procitas kako su prosli pojedini sa tim monstrumom.

Ok, hvala na pomoci. Mozda moj AVG moze da pomogne jer sam ga instalirao cim sam podigao system, sto je bilo relativno skoro. Kada samo vec kod repaira zanima me sta treba da ukucam u command promptu da bi prekopirao fajlove koje je verovatno AV obrisao. Da li je u pitanju ovako nesto:

COPY X:\i386\NTLDR C:
COPY X:\i386\NTDETECT.COM C:
(X- CD drive)
ili kako vec....? 

Ja sad nista ne kapiram 

Kada pustis repair sve ce windows sam kopirati i srediti.. ti nista ne moras da radis..Ti fajlovi koje si naveo AVG verovatno nije inficirao... Tebi su zeznuti mnogi drgui bitni fajlovi tipa cmd.exe i slicni..

Ubaci instalacioni disk od wina, udji u bios, postavi da ti first boot bude cd-dvd Rom, bootuj, zatim kad te pita sta zelis, kliknes na R, ali ne prvi put vec drugi. Ako si podizao sistem znas o cemu pricamo.

i meni je nesto usporio komp mislim da mu nesto fali evoi loga

Edit by Filip93: Pogledja Pravila i preporuke za korisnike na PC klinici, pa onda otvori novu temu.

repair i nije neko rjesenje,ja ga koristim da bi komp funkcionisao dovoljno dugo da spasim sto se spasti moze sa harda a onda bacim reinsall

Nemojte slati vise komentara za redom. Postoji dugme izmeni ako ste nesto zaboravili reci. Postovanjem vise odgovora zaredom tema se samo razvodnjava i smanjuje se preglednost. Za ostala pravila ponasanja pogledajte pravilnik Burek Foruma.

Logfile of Trend Micro HijackThis v2. 0. 2
Scan saved at 23:06:11, on 30. 10. 2009
Platform: Windows XP SP2 (WinNT 5. 01. 2600)
MSIE: Internet Explorer v8. 00 (8. 00. 6001. 18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss. exe
C:\WINDOWS\system32\winlogon. exe
C:\WINDOWS\system32\services. exe
C:\WINDOWS\system32\lsass. exe
C:\WINDOWS\system32\svchost. exe
C:\WINDOWS\System32\svchost. exe
C:\WINDOWS\system32\spoolsv. exe
C:\WINDOWS\system32\WgaTray. exe
C:\WINDOWS\Explorer. EXE
C:\WINDOWS\system32\drivers\CDAC11BA. EXE
C:\Program Files\Eset\nod32krn. exe
C:\WINDOWS\system32\svchost. exe
C:\WINDOWS\SOUNDMAN. EXE
C:\WINDOWS\system32\VTTimer. exe
C:\Program Files\Eset\nod32kui. exe
C:\WINDOWS\PixArt\PAC207\Monitor. exe
C:\Program Files\Winamp\winampa. exe
C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox. exe
C:\WINDOWS\system32\ctfmon. exe
C:\Program Files\McAfee Security Scan\1. 0. 150\SSScheduler. exe
C:\Program Files\Trend Micro\HijackThis\HijackThis. exe
C:\WINDOWS\system32\wuauclt. exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:|| go. microsoft. com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:|| www. yahoo. com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/su/msgr9/*hxxp:|| www. yahoo. com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/sb/msgr9/*hxxp:|| www. yahoo. com/ext/search/search. html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp:|| us. rd. yahoo. com/customize/ie/defaults/sp/msgr9/*hxxp:|| www. yahoo. com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:|| www. yahoo. com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Dealio Toolbar\SearchSettings. dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE. dll
O2 - BHO: (no name) - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - (no file)
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - C:\Program Files\Winamp Toolbar\winamptb. dll
O2 - BHO: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl. dll
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper. dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32. dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5. 3. 4501. 1418\swg. dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E. dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv. dll
O2 - BHO: (no name) - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Dealio Toolbar\SearchSettings. dll
O2 - BHO: OTS Software Toolbar - {e41b29e5-88b5-40b1-903e-080e0f2c4b65} - C:\Program Files\OTS_Software\tbOTS0. dll
O3 - Toolbar: OTS Software Toolbar - {e41b29e5-88b5-40b1-903e-080e0f2c4b65} - C:\Program Files\OTS_Software\tbOTS0. dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - C:\Program Files\Winamp Toolbar\winamptb. dll
O3 - Toolbar: (no name) - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE. dll
O3 - Toolbar: The Weather Channel Toolbar - {2E5E800E-6AC0-411E-940A-369530A35E43} - C:\WINDOWS\system32\TwcToolbarIe7. dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar. dll (file missing)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32. dll
O3 - Toolbar: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl. dll
O4 - HKLM\. . \Run: [SoundMan] SOUNDMAN. EXE
O4 - HKLM\. . \Run: [VTTimer] VTTimer. exe
O4 - HKLM\. . \Run: [nod32kui] "C:\Program Files\Eset\nod32kui. exe" /WAITSERVICE
O4 - HKLM\. . \Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck. exe
O4 - HKLM\. . \Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor. exe
O4 - HKLM\. . \Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor. exe
O4 - HKLM\. . \Run: [WinampAgent] "C:\Program Files\Winamp\winampa. exe"
O4 - HKLM\. . \Run: [Google Quick Search Box] "C:\Program Files\Google\Quick Search Box\GoogleQuickSearchBox. exe"  /autorun
O4 - HKLM\. . \Run: [SearchSettings] C:\Program Files\Dealio Toolbar\SearchSettings. exe
O4 - HKLM\. . \Run: [Synchronization Manager] %SystemRoot%\system32\mobsync. exe /logon
O4 - HKLM\. . \Run: [MyWebSearch Plugin] rundll32 C:\PROGRA~1\MYWEBS~1\bar\7. bin\M3PLUGIN. DLL,UPF
O4 - HKCU\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\ctfmon. exe
O4 - HKUS\S-1-5-19\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\. . \RunOnce: [RunNarrator] Narrator. exe (User 'SYSTEM')
O4 - HKUS\. DEFAULT\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'Default user')
O4 - HKUS\. DEFAULT\. . \RunOnce: [RunNarrator] Narrator. exe (User 'Default user')
O4 - Global Startup: McAfee Security Scan. lnk = ?
O9 - Extra button: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
O9 - Extra 'Tools' menuitem: The Weather Channel - {2E5E800E-6AC0-411E-940A-369530A35E43} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR. DLL
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\TWEETY\Start Menu\Programs\IMVU\Run IMVU. lnk
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau. dll
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - hxxp:|| update. microsoft. com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site. cab?1242592323734
O18 - Protocol: ebk - {1E411CE8-FE8B-4973-B8E0-6EA2CC3C6B06} - C:\WINDOWS\system32\ebkp. dll
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA. EXE
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService. exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService. exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - C:\Program Files\Eset\nod32krn. exe

--
End of file - 7169 bytes

majko       

otvori novu temu, navedi problem pa da vidimo sta cemo dalje 

lock