Kolko stotina virusa?

sa avirom 400 i kusur.posle sam skenirao sa UnHackMe nasao je 1 trojanca u registru,sad nema vise virusi

UnHackME je izvukao stvar.

Pusti ti prijatelju, Dr.Web Cure IT - Full scan. Da ne nastradas kad budes resio da dizes sistem sledeci put. Sken ce potrajati 5+ sati.

ovaj Dr.webcure.It...antivirus nemoze da ocisti moje trojance ima ih oko 25 komada al da ih obrise nemoze.dali vam pada jos nesto na pamet sta da radim

руши систем...најефикасније решење

Probaj sa Avastom mada Kaspersky bi 100% resio problem (al ko zna koliko vremena bi to trajalo).Ne kazu dzabe "There can be only one" .Ako ne zelis viruse koristi linux (Ubuntu). A ako si se navikao i ne zelis da menjas Windows onda kupi neki profesionalni antivirus/internet security (opet predlazem Kaspersky). Da sam na tvom mestu ponovo bih instalirao sistem za svaki slucaj.Poz

ja ti savetujem da procitas diarnovu poruku od pocetka do kraja preuzmes dds sto ti je ostavio okacis log ovde da "proucavaju" sto bi ti rekao neko od ovlascenih @ivicaspas ili @genije1 ce ti verovatno resiti problem ako pazljivo pratis uputsva

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by marko at 16:36:39 on 2011-09-02
Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.1918.1403 [GMT 2:00]
.
FW: Avira FireWall *Disabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Everything\Everything.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\marko\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\marko\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\marko\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\marko\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
.
============== Pseudo HJT Report ===============
.
uSearch Bar = hxxp://dts.search-results.com/sidebar.html?src=ssb&appid=0&systemid=2
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT1142338
mURLSearchHooks: Winamp Toolbar Search Class: {57bca5fa-5dbb-45a2-b558-1755c3f6253b} - c:\program files\winamp toolbar\winamptb.dll
BHO: Winamp Toolbar Loader: {25cee8ec-5730-41bc-8b58-22ddc8ab8c20} - c:\program files\winamp toolbar\winamptb.dll
BHO: DivX Plus Web Player HTML5 <video>: {326e768d-4182-46fd-9c16-1449a49795f4} - c:\program files\divx\divx plus web player\ie\divxhtml5\DivXHTML5.dll
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: Winamp Toolbar: {ebf2ba02-9094-4c5a-858b-bb198f3d8de2} - c:\program files\winamp toolbar\winamptb.dll
TB: {c2d64ff7-0ab8-4263-89c9-ea3b0f8f050c} - No File
TB: !{98889811-442D-49dd-99D7-DC866BE87DBC} - No File
TB: {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - No File
TB: {30F9B915-B755-4826-820B-08FBA6BD249D} - No File
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
uRun: [RegistryReviver] "c:\program files\reviversoft\registry reviver\RegistryReviver.exe" StartedAfterOptimization
uRun: [Registry Reviver] c:\program files\reviversoft\registry reviver\RegistryReviver.exe
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [Everything] "c:\program files\everything\Everything.exe" -startup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
uPolicies-explorer: EditLevel = 0 (0x0)
uPolicies-explorer: NoCommonGroups = 0 (0x0)
uPolicies-system: <NO NAME> = 1
uPolicies-system: DisableTaskMgr = 1 (0x1)
uPolicies-system: DisableRegistryTools = 1 (0x1)
mPolicies-system: EnableLUA = 0 (0x0)
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
LSP: c:\program files\avira\antivir desktop\avsda.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1309717538750
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - hxxp://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1309717528187
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: Interfaces\{B8AF1A19-B4E8-4366-9E2C-C3B5A15A9E5C} : NameServer = 80.93.224.1,80.93.224.2
LSA: Authentication Packages = msv1_0 nwprovau
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\marko\application data\mozilla\firefox\profiles\h3wora2b.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Ask.com
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://dts.search-results.com/sr?src=ffb&appid=0&systemid=2&q=
FF - prefs.js: network.proxy.type - 0
FF - component: c:\documents and settings\marko\application data\mozilla\firefox\profiles\h3wora2b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\MailUtil.dll
FF - component: c:\documents and settings\marko\application data\mozilla\firefox\profiles\h3wora2b.default\extensions\{0b38152b-1b20-484d-a11f-5e04a9b0661f}\components\WinampPlayer.dll
FF - component: c:\documents and settings\marko\application data\mozilla\firefox\profiles\h3wora2b.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCore.dll
FF - component: c:\documents and settings\marko\application data\mozilla\firefox\profiles\h3wora2b.default\extensions\{bf7380fa-e3b4-4db2-af3e-9d8783a45bfc}\components\RadioWMPCoreGecko19.dll
FF - plugin: c:\documents and settings\marko\local settings\application data\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: c:\program files\divx\divx ovs helper\npovshelper.dll
FF - plugin: c:\program files\divx\divx plus web player\npdivx32.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
.
---- FIREFOX POLICIES ----
FF - user.js: network.protocol-handler.warn-external.dnupdate - false
============= SERVICES / DRIVERS ===============
.
R1 avfwot;avfwot;c:\windows\system32\drivers\avfwot.sys [2011-8-31 106904]
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2011-8-30 11608]
R1 BIOS;BIOS;c:\windows\system32\drivers\BIOS.sys [2011-7-3 13696]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2011-8-30 66616]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\drivers\avfwim.sys [2011-8-31 82952]
S2 AntiVirFirewallService;Avira FireWall;c:\program files\avira\antivir desktop\avfwsvc.exe [2011-8-31 567464]
S2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\avira\antivir desktop\avmailc.exe [2011-8-31 340136]
S2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\avira\antivir desktop\avwebgrd.exe [2011-8-30 428200]
S2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2011-8-29 170640]
S3 aawservice;Ad-Aware 2007 Service;c:\program files\lavasoft\ad-aware 2007\aawservice.exe --> c:\program files\lavasoft\ad-aware 2007\aawservice.exe [?]
S3 abp470n5;abp470n5;\??\c:\windows\system32\drivers\nnsmlo.sys --> c:\windows\system32\drivers\nnsmlo.sys [?]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\eaglexnt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 MBAMProtector;MBAMProtector;\??\c:\windows\system32\drivers\mbam.sys --> c:\windows\system32\drivers\mbam.sys [?]
S3 Partizan;Partizan;c:\windows\system32\drivers\Partizan.sys [2011-8-30 31170]
.
=============== Created Last 30 ================
.
2011-09-02 12:53:55   --------   d-----w-   c:\program files\GPMC
2011-09-02 12:32:09   753664   ----a-w-   c:\program files\common files\installshield\professional\runtime\11\00\intel32\iKernel.dll
2011-09-02 12:32:09   69714   ----a-w-   c:\program files\common files\installshield\professional\runtime\11\00\intel32\ctor.dll
2011-09-02 12:32:09   5632   ----a-w-   c:\program files\common files\installshield\professional\runtime\11\00\intel32\DotNetInstaller.exe
2011-09-02 12:32:09   274432   ----a-w-   c:\program files\common files\installshield\professional\runtime\11\00\intel32\iscript.dll
2011-09-02 12:32:09   200836   ----a-w-   c:\program files\common files\installshield\professional\runtime\11\00\intel32\iGdi.dll
2011-09-02 12:32:09   184320   ----a-w-   c:\program files\common files\installshield\professional\runtime\11\00\intel32\iuser.dll
2011-09-02 12:32:08   331908   ----a-w-   c:\program files\common files\installshield\professional\runtime\11\00\intel32\setup.dll
2011-09-02 12:14:47   --------   d-----w-   c:\program files\RegCleaner
2011-09-02 11:52:34   --------   d-----w-   c:\documents and settings\all users\application data\Kaspersky Lab Setup Files
2011-09-02 10:00:15   --------   d-----w-   c:\program files\MagicISO
2011-09-02 09:20:14   9674   ----a-w-   C:\DELTREE.EXE
2011-09-02 09:02:17   --------   d-----w-   C:\$WIN_NT$.~BT
2011-09-02 09:00:39   --------   d-----w-   c:\windows\system32\msmq
2011-09-02 09:00:39   --------   d-----w-   c:\windows\system32\Logfiles
2011-09-02 09:00:39   --------   d-----w-   C:\Inetpub
2011-09-01 14:26:24   224256   ----a-w-   c:\windows\system32\REGEDIT.EXE
2011-09-01 13:39:34   4984   ----a-w-   c:\windows\system32\drivers\nvphy.bin
2011-09-01 13:39:33   446464   ----a-w-   c:\windows\system32\nvunrm.exe
2011-09-01 13:19:09   --------   d-----w-   c:\documents and settings\marko\WINDOWS
2011-09-01 08:51:53   --------   d-sh--w-   c:\documents and settings\marko\IECompatCache
2011-09-01 08:31:57   6144   -c--a-w-   c:\windows\system32\dllcache\snmpmib.dll
2011-09-01 08:30:59   142848   -c--a-w-   c:\windows\system32\dllcache\fxsclnt.exe
2011-09-01 08:20:59   150082   ----a-w-   c:\program files\NeroExpressPortable.exe
2011-09-01 08:20:59   145972   ----a-w-   c:\program files\NeroPortable.exe
2011-09-01 08:20:51   81042   ----a-w-   c:\program files\Nero.reg
2011-09-01 08:20:51   --------   d-----w-   c:\program files\Nero
2011-08-31 21:52:44   82952   ----a-w-   c:\windows\system32\drivers\avfwim.sys
2011-08-31 21:52:44   106904   ----a-w-   c:\windows\system32\drivers\avfwot.sys
2011-08-31 16:09:20   96768   ----a-w-   c:\windows\system32\srvsvc.dll
2011-08-31 16:09:15   456320   ----a-w-   c:\windows\system32\drivers\mrxsmb.sys
2011-08-31 16:08:48   --------   dc-h--w-   c:\windows\ie8
2011-08-31 16:00:02   139656   ----a-w-   c:\windows\system32\drivers\rdpwd.sys
2011-08-31 15:59:26   10496   ----a-w-   c:\windows\system32\drivers\ndistapi.sys
2011-08-31 14:20:36   --------   d-----w-   c:\program files\Everything
2011-08-30 22:45:01   --------   d-----w-   c:\documents and settings\marko\local settings\application data\Help
2011-08-30 14:00:37   --------   d-----w-   c:\documents and settings\marko\DoctorWeb
2011-08-30 13:36:13   2400   ----a-w-   c:\windows\system32\ASOROSet.bin
2011-08-30 13:31:09   --------   d-----w-   c:\documents and settings\marko\application data\Reviversoft
2011-08-30 13:30:48   17224   ----a-w-   c:\windows\system32\roboot.exe
2011-08-30 12:27:02   --------   d-----w-   c:\documents and settings\marko\application data\URSoft
2011-08-30 12:26:58   --------   d-----w-   C:\UTILCD
2011-08-30 12:14:52   22016   ----a-r-   c:\windows\system32\rspmmpsy.sys
2011-08-30 09:37:30   31170   ----a-w-   c:\windows\system32\drivers\Partizan.sys
2011-08-30 09:37:26   8944   ----a-w-   c:\windows\system32\drivers\UnHackMeDrv.sys
2011-08-29 22:37:01   --------   d-----w-   c:\documents and settings\marko\application data\Avira
2011-08-29 22:35:13   66616   ----a-w-   c:\windows\system32\drivers\avgntflt.sys
2011-08-29 22:35:12   --------   d-----w-   c:\documents and settings\all users\application data\Avira
2011-08-29 20:00:52   --------   d-----w-   c:\windows\RegistryWorkshop
2011-08-29 19:42:27   --------   d-----w-   c:\program files\MSECACHE
2011-08-29 17:56:01   --------   d-----w-   c:\documents and settings\marko\application data\ElevatedDiagnostics
2011-08-29 17:46:48   --------   d-----w-   c:\documents and settings\marko\local settings\application data\AskToolbar
2011-08-29 14:28:06   --------   d-----w-   c:\program files\Malwarebytes' Anti-Malware
2011-08-29 13:31:56   --------   d-----w-   c:\program files\Avira
2011-08-29 13:26:32   --------   d-----w-   c:\windows\setup.pss
2011-08-29 13:21:31   --------   d-----w-   c:\windows\pss
2011-08-29 12:35:46   2560   ----a-w-   c:\documents and settings\all users\application data\microsoft\usmt\iconlib.dll
2011-08-29 11:55:17   293376   ----a-w-   c:\windows\system32\SETBA.tmp
2011-08-29 11:40:51   --------   d--h--w-   c:\windows\PIF
2011-08-29 10:10:18   264832   ----a-w-   c:\windows\system32\drivers\http.sys
2011-08-29 10:10:14   354304   ----a-w-   c:\windows\system32\SETBE.tmp
2011-08-29 10:10:07   666112   ----a-w-   c:\windows\system32\SETAD.tmp
2011-08-29 10:10:07   619520   ----a-w-   c:\windows\system32\SETAC.tmp
2011-08-29 10:10:07   449024   ----a-w-   c:\windows\system32\SETA7.tmp
2011-08-29 10:10:07   37888   ----a-w-   c:\windows\system32\SETAB.tmp
2011-08-29 10:10:07   3066880   ----a-w-   c:\windows\system32\SETA6.tmp
2011-08-29 10:10:07   1499136   ----a-w-   c:\windows\system32\SETA9.tmp
2011-08-29 10:10:07   1025024   ----a-w-   c:\windows\system32\SETA2.tmp
2011-08-28 12:27:16   --------   d-----w-   c:\documents and settings\marko\application data\GetRightToGo
2011-08-26 01:07:29   456320   -c----w-   c:\windows\system32\dllcache\mrxsmb.sys
2011-08-26 01:04:47   132096   ----a-w-   c:\windows\system32\wkssvc.dll
2011-08-26 01:04:43   226880   ----a-w-   c:\windows\system32\drivers\tcpip6.sys
2011-08-26 01:04:16   617472   ----a-w-   c:\windows\system32\advapi32.dll
2011-08-26 01:04:16   110592   ----a-w-   c:\windows\system32\services.exe
2011-08-26 01:04:09   138496   ----a-w-   c:\windows\system32\drivers\afd.sys
2011-08-26 01:03:51   345600   ----a-w-   c:\windows\system32\localspl.dll
2011-08-26 01:03:40   218112   ----a-w-   c:\program files\windows nt\accessories\wordpad.exe
2011-08-26 01:01:40   343040   ----a-w-   c:\windows\system32\mspaint.exe
2011-08-26 01:00:31   92928   ----a-w-   c:\windows\system32\drivers\ksecdd.sys
2011-08-25 21:09:54   89048   ----a-w-   c:\program files\mozilla firefox\libEGL.dll
2011-08-25 21:09:54   785368   ----a-w-   c:\program files\mozilla firefox\mozsqlite3.dll
2011-08-25 21:09:54   478168   ----a-w-   c:\program files\mozilla firefox\libGLESv2.dll
2011-08-25 21:09:54   1846232   ----a-w-   c:\program files\mozilla firefox\mozjs.dll
2011-08-25 21:09:54   15832   ----a-w-   c:\program files\mozilla firefox\mozalloc.dll
2011-08-25 21:09:54   134104   ----a-w-   c:\program files\mozilla firefox\components\browsercomps.dll
2011-08-25 21:09:53   2106216   ----a-w-   c:\program files\mozilla firefox\D3DCompiler_43.dll
2011-08-25 21:09:53   1998168   ----a-w-   c:\program files\mozilla firefox\d3dx9_43.dll
2011-08-22 22:33:07   --------   d-----w-   c:\program files\Display.Update
2011-08-22 22:33:01   --------   d-----w-   c:\program files\HDAudio
2011-08-22 22:33:00   --------   d-----w-   c:\program files\NVI2
2011-08-22 22:33:00   --------   d-----w-   c:\program files\Display.Driver
2011-08-22 22:32:54   --------   d-----w-   c:\program files\DisplayControlPanel
2011-08-22 22:32:52   --------   d-----w-   c:\program files\PhysX
2011-08-22 22:32:52   --------   d-----w-   c:\program files\NView
2011-08-22 22:15:11   --------   d-----w-   c:\program files\Ask.com
2011-08-22 13:04:52   --------   d-----w-   c:\documents and settings\marko\local settings\application data\uTorrentBar
2011-08-22 13:04:52   --------   d-----w-   c:\documents and settings\marko\local settings\application data\ConduitEngine
2011-08-22 13:04:51   --------   d-----w-   c:\program files\ConduitEngine
2011-08-22 13:04:51   --------   d-----w-   c:\documents and settings\marko\local settings\application data\Conduit
2011-08-21 22:46:52   --------   d-----w-   c:\documents and settings\marko\local settings\application data\SKIDROW
2011-08-21 22:46:32   --------   d-----w-   c:\documents and settings\marko\local settings\application data\2K Games
2011-08-21 22:00:08   --------   d-----w-   c:\program files\NVIDIA Corporation
2011-08-21 21:59:59   --------   d-----w-   c:\program files\common files\Wise Installation Wizard
2011-08-21 10:28:40   272128   -c----w-   c:\windows\system32\dllcache\bthport.sys
2011-08-21 10:28:40   272128   ------w-   c:\windows\system32\drivers\bthport.sys
2011-08-21 09:58:37   2192768   -c----w-   c:\windows\system32\dllcache\ntoskrnl.exe
2011-08-21 09:58:37   2148864   -c----w-   c:\windows\system32\dllcache\ntkrnlmp.exe
2011-08-21 09:58:37   2027008   -c----w-   c:\windows\system32\dllcache\ntkrpamp.exe
2011-08-21 09:58:36   2069376   -c----w-   c:\windows\system32\dllcache\ntkrnlpa.exe
2011-08-20 21:04:22   --------   d-----w-   c:\windows\system32\appmgmt
2011-08-20 15:52:35   --------   d-----w-   c:\documents and settings\marko\application data\Media Get LLC
2011-08-20 15:52:35   --------   d-----w-   c:\documents and settings\all users\application data\Media Get LLC
2011-08-20 13:35:57   --------   d-----w-   c:\documents and settings\marko\local settings\application data\Media Get LLC
2011-08-20 13:31:03   --------   d-----w-   c:\documents and settings\marko\application data\BabylonToolbar
2011-08-19 15:22:08   --------   d-----w-   c:\documents and settings\marko\local settings\application data\MediaGet2
2011-08-16 15:42:08   --------   d-----w-   c:\program files\Rockstar Games
2011-08-16 15:29:32   --------   d-sh--w-   c:\documents and settings\marko\PrivacIE
2011-08-16 15:29:30   --------   d-----w-   c:\documents and settings\marko\local settings\application data\Winamp Toolbar
2011-08-16 15:29:14   69715   ----a-w-   c:\program files\common files\installshield\professional\runtime\10\50\intel32\ctor.dll
2011-08-16 15:29:14   5632   ----a-w-   c:\program files\common files\installshield\professional\runtime\10\50\intel32\DotNetInstaller.exe
2011-08-16 15:29:14   274432   ----a-w-   c:\program files\common files\installshield\professional\runtime\10\50\intel32\iscript.dll
2011-08-16 15:29:14   180224   ----a-w-   c:\program files\common files\installshield\professional\runtime\10\50\intel32\iuser.dll
2011-08-16 15:29:13   749568   ----a-w-   c:\program files\common files\installshield\professional\runtime\10\50\intel32\iKernel.dll
2011-08-16 15:29:10   323716   ----a-w-   c:\program files\common files\installshield\professional\runtime\10\50\intel32\setup.dll
2011-08-16 15:29:10   192644   ----a-w-   c:\program files\common files\installshield\professional\runtime\10\50\intel32\iGdi.dll
2011-08-15 20:06:24   --------   d-----w-   c:\documents and settings\marko\application data\ChemTable Software
2011-08-15 20:06:17   --------   d-----w-   c:\documents and settings\marko\local settings\application data\ChemTable Software
2011-08-15 15:45:21   --------   d-----w-   c:\documents and settings\marko\local settings\application data\NeoSmart_Technologies
2011-08-15 13:15:24   --------   d-sh--w-   c:\documents and settings\marko\IETldCache
2011-08-15 10:58:02   7680   -c----w-   c:\windows\system32\dllcache\iecompat.dll
2011-08-15 10:57:52   --------   d-----w-   c:\windows\ie8updates
2011-08-15 10:57:38   743424   -c----w-   c:\windows\system32\dllcache\iedvtool.dll
2011-08-15 10:57:38   602112   -c----w-   c:\windows\system32\dllcache\msfeeds.dll
2011-08-15 10:57:38   55296   -c----w-   c:\windows\system32\dllcache\msfeedsbs.dll
2011-08-15 10:57:38   247808   -c----w-   c:\windows\system32\dllcache\ieproxy.dll
2011-08-15 10:57:38   1991680   -c----w-   c:\windows\system32\dllcache\iertutil.dll
2011-08-15 10:57:38   12800   -c----w-   c:\windows\system32\dllcache\xpshims.dll
2011-08-15 10:57:38   11081728   -c----w-   c:\windows\system32\dllcache\ieframe.dll
2011-08-10 15:13:46   --------   d-----w-   c:\documents and settings\marko\local settings\application data\Identities
2011-08-03 15:07:32   --------   d-----w-   c:\program files\URUSoft
.
==================== Find3M  ====================
.
2011-09-01 13:38:58   319488   ----a-w-   c:\windows\HideWin.exe
2011-08-31 20:15:00   2855   ----a-w-   c:\windows\_default.pif
2011-07-16 19:37:09   404640   ----a-w-   c:\windows\system32\FlashPlayerCPLApp.cpl
2011-06-23 18:36:30   916480   ----a-w-   c:\windows\system32\wininet.dll
2011-06-23 18:36:30   43520   ----a-w-   c:\windows\system32\licmgr10.dll
2011-06-23 18:36:30   1469440   ----a-w-   c:\windows\system32\inetcpl.cpl
2011-06-23 12:05:13   385024   ----a-w-   c:\windows\system32\html.iec
2011-06-20 17:44:52   293376   ------w-   c:\windows\system32\winsrv.dll
2008-04-29 19:25:20   1343632   ----a-r-   c:\program files\BLACK_THEME_FROM_MICROSOFT.msstyles
.
============= FINISH: 16:37:17.14 ===============

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-08-26.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 7/3/2011 7:53:10 PM
System Uptime: 9/2/2011 4:31:31 PM (0 hours ago)
.
Motherboard: BIOSTAR Group |  | N61PB-M2S
Processor: AMD Athlon(tm) Processor LE-1640 | Socket AM2  | 2712/201mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 51 GiB total, 31.933 GiB free.
D: is FIXED (NTFS) - 98 GiB total, 52.928 GiB free.
E: is CDROM ()
F: is CDROM ()
.
==== Disabled Device Manager Items =============
.
==== System Restore Points ===================
.
No restore point in system.
.
==== Installed Programs ======================
.
Adobe Flash Player 10 Plugin
Adobe Flash Player ActiveX
AIMP2
AMD Processor Driver
Ask Toolbar
BearShare
Conduit Engine
DivX Setup
Everything 1.2.1.358
GOM Player
Google Chrome
GTA San Andreas
Hotfix for Microsoft .NET Framework 3.5 (KB2418240)
Hotfix for Windows XP (KB2570791)
Hotfix for Windows XP (KB952287)
Internet Explorer (Enable DEP)
iWisoft Free Video Converter 1.2
Java Auto Updater
Java(TM) 6 Update 26
JDownloader
K-Lite Codec Pack 4.1.7 (Full)
Magic ISO Maker v5.5 (build 0261)
Microsoft .NET Framework 1.1
Microsoft .NET Framework 1.1 Security Update (KB2416447)
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft .NET Framework 3.5
Microsoft Group Policy Management Console with SP1
Microsoft VC9 runtime libraries
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Mozilla Firefox 6.0 (x86 en-US)
Notepad++
NVIDIA Drivers
NVIDIA PhysX
REALTEK GbE & FE Ethernet PCI NIC Driver
Realtek High Definition Audio Driver
Security Update for Windows Internet Explorer 8 (KB2510531)
Security Update for Windows Internet Explorer 8 (KB2544521)
Security Update for Windows Internet Explorer 8 (KB2559049)
Security Update for Windows Media Encoder (KB2447961)
Security Update for Windows Media Player (KB954155)
Security Update for Windows Media Player (KB973540)
Security Update for Windows Media Player (KB975558)
Security Update for Windows Media Player (KB978695)
Security Update for Windows XP (KB2347290)
Security Update for Windows XP (KB2503665)
Security Update for Windows XP (KB2536276-v2)
Security Update for Windows XP (KB2562937)
Security Update for Windows XP (KB2566454)
Security Update for Windows XP (KB2570222)
Security Update for Windows XP (KB956572)
Security Update for Windows XP (KB956802)
Security Update for Windows XP (KB956844)
Security Update for Windows XP (KB958644)
Security Update for Windows XP (KB959426)
Security Update for Windows XP (KB960803)
Security Update for Windows XP (KB960859)
Security Update for Windows XP (KB961501)
Security Update for Windows XP (KB969059)
Security Update for Windows XP (KB971657)
Security Update for Windows XP (KB972270)
Security Update for Windows XP (KB973507)
Security Update for Windows XP (KB973869)
Security Update for Windows XP (KB973904)
Security Update for Windows XP (KB974112)
Security Update for Windows XP (KB974318)
Security Update for Windows XP (KB974392)
Security Update for Windows XP (KB974571)
Security Update for Windows XP (KB975025)
Security Update for Windows XP (KB975467)
Security Update for Windows XP (KB975560)
Security Update for Windows XP (KB975562)
Security Update for Windows XP (KB977816)
Security Update for Windows XP (KB977914)
Security Update for Windows XP (KB978338)
Security Update for Windows XP (KB978542)
Security Update for Windows XP (KB978601)
Security Update for Windows XP (KB978706)
Security Update for Windows XP (KB979309)
Security Update for Windows XP (KB979482)
Security Update for Windows XP (KB979687)
Security Update for Windows XP (KB981322)
Security Update for Windows XP (KB981997)
Security Update for Windows XP (KB982132)
Security Update for Windows XP (KB982665)
Subtitle Workshop 2.51
The KMPlayer (remove only)
Update for Windows XP (KB955759)
Update for Windows XP (KB968389)
Update for Windows XP (KB971029)
Update for Windows XP (KB973687)
Update for Windows XP (KB973815)
VC80CRTRedist - 8.0.50727.4053
WebFldrs XP
Winamp
Winamp Toolbar
Windows Internet Explorer 8
Windows XP Professional
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0
.
==== Event Viewer Messages From Past Week ========
.
9/1/2011 12:04:39 AM, error: Service Control Manager [7003]  - The Avira AntiVir MailGuard service depends on the following nonexistent service: AntiVirService
9/1/2011 10:10:05 AM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the Avira FireWall service to connect.
9/1/2011 10:10:05 AM, error: Service Control Manager [7000]  - The Avira FireWall service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
8/31/2011 9:42:54 PM, error: NetDDE [69]  - StartServiceCtrlDispatcher() Failed: 1063
8/31/2011 9:42:27 PM, error: DCOM [10016]  - The application-specific permission settings do not grant Local Launch permission for the COM Server application with CLSID  {38B22A43-49A8-45AB-BEB7-9137A488B1D3}  to the user KUCNI-560CE87A9\marko SID (S-1-5-21-1123561945-838170752-682003330-1003).  This security permission can be modified using the Component Services administrative tool.
8/31/2011 9:14:35 AM, error: SideBySide [59]  - Resolve Partial Assembly failed for Microsoft.VC80.MFCLOC. Reference error message: The referenced assembly is not installed on your system. .
8/31/2011 9:14:35 AM, error: SideBySide [59]  - Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80U.DLL. Reference error message: The operation completed successfully. .
8/31/2011 9:14:35 AM, error: SideBySide [59]  - Generate Activation Context failed for C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_3bf8fa05\MFC80.DLL. Reference error message: The operation completed successfully. .
8/31/2011 9:14:35 AM, error: SideBySide [32]  - Dependent Assembly Microsoft.VC80.MFCLOC could not be found and Last Error was The referenced assembly is not installed on your system.
8/31/2011 9:08:22 PM, error: Service Control Manager [7034]  - The Ad-Aware 2007 Service service terminated unexpectedly.  It has done this 2 time(s).
8/31/2011 8:02:35 PM, error: Service Control Manager [7034]  - The Ad-Aware 2007 Service service terminated unexpectedly.  It has done this 1 time(s).
8/30/2011 5:18:19 PM, error: Service Control Manager [7009]  - Timeout (30000 milliseconds) waiting for the Avira AntiVir Guard service to connect.
8/30/2011 5:18:19 PM, error: Service Control Manager [7000]  - The Avira AntiVir Guard service failed to start due to the following error:  The service did not respond to the start or control request in a timely fashion.
8/30/2011 2:26:17 AM, error: Service Control Manager [7034]  - The MBAMService service terminated unexpectedly.  It has done this 1 time(s).
8/30/2011 2:01:21 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 13 time(s).
8/30/2011 2:00:29 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 12 time(s).
8/30/2011 12:44:23 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 5 time(s).
8/30/2011 12:39:01 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 4 time(s).
8/30/2011 12:36:00 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 3 time(s).
8/30/2011 12:35:52 AM, error: Service Control Manager [7031]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 2 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.
8/30/2011 12:35:43 AM, error: Service Control Manager [7031]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 1 time(s).  The following corrective action will be taken in 0 milliseconds: Restart the service.
8/30/2011 11:42:38 AM, error: Service Control Manager [7001]  - The MBAMService service depends on the MBAMProtector service which failed to start because of the following error:  The system cannot find the file specified.
8/30/2011 11:42:38 AM, error: Service Control Manager [7000]  - The MBAMProtector service failed to start due to the following error:  The system cannot find the file specified.
8/30/2011 11:34:35 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 15 time(s).
8/30/2011 11:13:52 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 14 time(s).
8/30/2011 10:27:49 PM, error: Service Control Manager [7003]  - The Avira AntiVir WebGuard service depends on the following nonexistent service: AntiVirService
8/30/2011 1:57:41 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 11 time(s).
8/30/2011 1:38:52 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 10 time(s).
8/30/2011 1:34:04 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 9 time(s).
8/30/2011 1:33:11 AM, error: Service Control Manager [7000]  - The Ad-Aware 2007 Service service failed to start due to the following error:  The system cannot find the file specified.
8/30/2011 1:32:59 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 8 time(s).
8/30/2011 1:31:39 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 7 time(s).
8/30/2011 1:19:24 AM, error: Service Control Manager [7034]  - The Avira AntiVir Guard service terminated unexpectedly.  It has done this 6 time(s).
8/29/2011 5:07:15 PM, error: Windows Update Agent [20]  - Installation Failure: Windows failed to install the following update with error 0x80246007: Internet Explorer 8 for Windows XP.
8/29/2011 5:00:00 PM, error: Removable Storage Service [15]  - RSM cannot manage library CdRom1. The database is corrupt.
8/29/2011 5:00:00 PM, error: Removable Storage Service [15]  - RSM cannot manage library CdRom0. The database is corrupt.
8/29/2011 4:24:28 PM, error: Service Control Manager [7034]  - The Avira AntiVir Personal - Free Antivirus Guard service terminated unexpectedly.  It has done this 2 time(s).
8/29/2011 4:21:53 PM, error: Service Control Manager [7034]  - The Avira AntiVir Personal - Free Antivirus Guard service terminated unexpectedly.  It has done this 1 time(s).
8/29/2011 12:58:54 PM, error: nvgts [9]  - The device, \Device\Scsi\nvgts2, did not respond within the timeout period.
8/29/2011 12:58:54 PM, error: nvgts [5]  - A parity error was detected on \Device\Scsi\nvgts2.
8/29/2011 12:08:55 PM, error: SideBySide [59]  - Resolve Partial Assembly failed for Microsoft.VC80.MFC. Reference error message: The referenced assembly is not installed on your system. .
8/29/2011 12:08:55 PM, error: SideBySide [59]  - Generate Activation Context failed for C:\Documents and Settings\marko\Application Data\CBS Interactive\CNET TechTracker\TechTracker.exe. Reference error message: The operation completed successfully. .
8/29/2011 12:08:55 PM, error: SideBySide [32]  - Dependent Assembly Microsoft.VC80.MFC could not be found and Last Error was The referenced assembly is not installed on your system.
8/29/2011 12:06:59 PM, error: sr [1]  - The System Restore filter encountered the unexpected error '0xC0000001' while processing the file '' on the volume 'HarddiskVolume1'.  It has stopped monitoring the volume.
8/29/2011 1:58:20 PM, error: Service Control Manager [7011]  - Timeout (30000 milliseconds) waiting for a transaction response from the NVSvc service.
.
==== End Of File ===========================

Sledeci put kad kacis logove imas dodatne opcije, kliknes lepo i prilozis fajl.

Blokiran ti je regedit, task manager.

Imas Sality virus, fajl infektor. Evo ga:

S3 abp470n5;abp470n5;\??\c:\windows\system32\drivers\nnsmlo.sys --> c:\windows\system32\drivers\nnsmlo.sys

To nece moci bez reinstalacije sistema.

E sad, nije dovoljna samo reinstalacija (format C-install), jer sve sto imas na ostalim particijama, a vezano za exe fajlove je zarazeno.

Znaci, kad podignes sistem instaliraj drajver za mreznu sa CD-a, nikako sa particije ako ga imas.
Preuzmi Avast na desktop i odradi Boot Time scan (full). Sve brisi sto nadje.

Tek nakon toga mozes nastaviti sa instalacijom drajvera i programa.

Pre detaljnog ciscenja nemoj ni slucajno da otvaras ostale particije, si razumeo.

Ako imas neko pitanje slobodno pitaj.