Imam install HijackThis, sta se gleda i kako da prepoznam u cemu je problem, na osnovu dobijenih podataka?

Hvala na odgovoru.

Poooooooz

Pa log koji ti on napravi stavi ovde pa ce neko od kolega da ti kaze shta mozesh da iskljuchish

Nova tema.

Logfile of HijackThis v1.99.1
Scan saved at 18:08:42, on 28.3.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\AVG\AVG8\avgcsrvx.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
D:\Programi\HijackThis.exe

F2 - REG:system.ini: Shell=Explorer.exe %windir%\system32\drivers\RegSrv.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [NVIEW] rundll32.exe nview.dll,nViewLoadHook
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1235643967769
O17 - HKLM\System\CCS\Services\Tcpip\..\{B1C268A1-7C00-4BC9-A982-7BACF2A3C777}: NameServer = 80.74.164.249 80.74.160.26
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx.dll
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Unknown owner - C:\Program Files\Java\jre6\bin\jqs.exe" -service -config "C:\Program Files\Java\jre6\lib\deploy\jqs\jqs.conf (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

ovako izgleda log posle onog fixa...

Udji u safe mode (restart pa F8) i fixaj ovu liniju sa HJT

F2 - REG:system.ini: Shell=Explorer.exe %windir%\system32\drivers\RegSrv.exe

Onda ukljuci Hidden files

My Computer\ Tools\ Folder Options\ View \
selektuj Show hidden files and folders
Skini kvacicu sa Hide file extensions for known types
Skini kvacicu sa Hide protected operating system files
yes\ ok

pronadji i obrisi sledeci fajl

%windir%\system32\drivers\RegSrv.exe  tobi trebalo da je na C

@ cajodnane: Obrisani su ti postovi, ako imas neki problem mozes uraditi ovo sto sam ti rekao.

I ja imam jedan spor komp, isto 256 mb ram, al mi je spor zato sto imam na njemu dosta programa, tv karticu, internet, dva harda.... heh uopste ne znam kako ima snage da radi

Logfile of Trend Micro HijackThis v2. 0. 2
Scan saved at 18:09:19, on 14. 4. 2009
Platform: Windows XP SP2 (WinNT 5. 01. 2600)
MSIE: Internet Explorer v7. 00 (7. 00. 6000. 16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss. exe
C:\WINDOWS\SYSTEM32\winlogon. exe
C:\WINDOWS\system32\services. exe
C:\WINDOWS\system32\lsass. exe
C:\WINDOWS\system32\svchost. exe
C:\WINDOWS\System32\svchost. exe
C:\WINDOWS\system32\svchost. exe
C:\Program Files\AVG\AVG8\avgrsx. exe
C:\WINDOWS\system32\spoolsv. exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc. exe
C:\Program Files\CyberLink\Shared files\RichVideo. exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent. exe
C:\WINDOWS\system32\svchost. exe
C:\Program Files\Google\Update\GoogleUpdate. exe
C:\WINDOWS\Explorer. EXE
C:\WINDOWS\SOUNDMAN. EXE
C:\WINDOWS\system32\winsys2. exe
C:\WINDOWS\Logi_MwX. Exe
C:\WINDOWS\system32\WinSys. exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ. exe
C:\Program Files\Java\jre1. 6. 0_03\bin\jusched. exe
C:\Program Files\Analog Devices\SoundMAX\SMax4PNP. exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor. exe
C:\Program Files\Conexant\Adsl\dslstat. exe
C:\Program Files\Conexant\Adsl\dslagent. exe
C:\PROGRA~1\AVG\AVG8\avgtray. exe
C:\WINDOWS\system32\ctfmon. exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager. exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier. exe
C:\Program Files\Messenger\msmsgs. exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite. exe
C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr. exe
C:\Program Files\InterVideo\MSIPVS\WinScheduler. exe
C:\WINDOWS\system32\wuauclt. exe
C:\Program Files\Internet Explorer\iexplore. exe
C:\Program Files\PC Connectivity Solution\ServiceLayer. exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv. exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv. exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrv. exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy. exe
C:\Program Files\Trend Micro\HijackThis\HijackThis. exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = hxxp:|| search. bearshare. com/sidebar. html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp:|| search. bearshare. com/sidebar. html?src=ssb
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp:|| search. bearshare. com/sidebar. html?src=ssb
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp:|| go. microsoft. com/fwlink/?LinkId=54729
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp:|| go. microsoft. com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp:|| go. microsoft. com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp:|| go. microsoft. com/fwlink/?LinkId=55245&clcid={SUB_CLCID}
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6. 0\Reader\ActiveX\AcroIEHelper. dll
O2 - BHO: WormRadar. com IESiteBlocker. NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie. dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1. DLL
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareIEHelper. dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1. 6. 0_03\bin\ssv. dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin. dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1. DLL
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5. 1. 1309. 3572\swg. dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar. dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1. DLL
O4 - HKLM\. . \Run: [SoundMan] SOUNDMAN. EXE
O4 - HKLM\. . \Run: [NvCplDaemon] RUNDLL32. EXE C:\WINDOWS\system32\NvCpl. dll,NvStartup
O4 - HKLM\. . \Run: [nwiz] nwiz. exe /install
O4 - HKLM\. . \Run: [SW20] C:\WINDOWS\system32\sw20. exe
O4 - HKLM\. . \Run: [SW24] C:\WINDOWS\system32\sw24. exe
O4 - HKLM\. . \Run: [WinSys2] C:\WINDOWS\system32\winsys2. exe
O4 - HKLM\. . \Run: [NvMediaCenter] RUNDLL32. EXE C:\WINDOWS\system32\NvMcTray. dll,NvTaskbarInit
O4 - HKLM\. . \Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck. exe
O4 - HKLM\. . \Run: [Logitech Utility] Logi_MwX. Exe
O4 - HKLM\. . \Run: [WinSys] C:\WINDOWS\system32\WinSys. exe
O4 - HKLM\. . \Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ. exe"
O4 - HKLM\. . \Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language. exe"
O4 - HKLM\. . \Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1. 6. 0_03\bin\jusched. exe"
O4 - HKLM\. . \Run: [Sony Ericsson PC Suite] "C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher. exe" /startoptions
O4 - HKLM\. . \Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP. exe
O4 - HKLM\. . \Run: [SoundMAX] "C:\Program Files\Analog Devices\SoundMAX\Smax4. exe" /tray
O4 - HKLM\. . \Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor. exe"
O4 - HKLM\. . \Run: [DSLSTATEXE] C:\Program Files\Conexant\Adsl\dslstat. exe icon
O4 - HKLM\. . \Run: [DSLAGENTEXE] C:\Program Files\Conexant\Adsl\dslagent. exe
O4 - HKLM\. . \Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray. exe
O4 - HKCU\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\ctfmon. exe
O4 - HKCU\. . \Run: [LClock] C:\Program Files\LClock\LClock. exe
O4 - HKCU\. . \Run: [ViStart] C:\Program Files\ViStart\ViStart. exe
O4 - HKCU\. . \Run: [ViOrb] C:\Program Files\ViOrb\ViOrb. exe
O4 - HKCU\. . \Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier. exe
O4 - HKCU\. . \Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs. exe" /background
O4 - HKCU\. . \Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite. exe" -onlytray
O4 - HKUS\S-1-5-19\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'SYSTEM')
O4 - HKUS\. DEFAULT\. . \Run: [CTFMON. EXE] C:\WINDOWS\system32\CTFMON. EXE (User 'Default user')
O4 - Startup: OneNote 2007 Screen Clipper and Launcher. lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM. EXE
O4 - Global Startup: InterVideo WinCinema Manager. lnk = C:\Program Files\InterVideo\Common\Bin\WinCinemaMgr. exe
O4 - Global Startup: InterVideo WinScheduler. lnk = C:\Program Files\InterVideo\MSIPVS\WinScheduler. exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL. EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1. 6. 0_03\bin\ssv. dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1. 6. 0_03\bin\ssv. dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE. dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE. dll
O9 - Extra button: SmartShopper - Compare product prices - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEBF} - C:\WINDOWS\system32\shdocvw. dll
O9 - Extra button: (no name) - {3CC3D8FE-F0E0-4dd1-A69A-8C56BCC7BEC0} - (no file)
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR. DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag. exe
O9 - Extra 'Tools' menuitem: @xpsp3res. dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag. exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs. exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs. exe
O17 - HKLM\System\CCS\Services\Tcpip\. . \{50B0B9ED-3EC2-4395-ABFD-9FE31F05E838}: NameServer = 77. 105. 0. 19 77. 105. 0. 18
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1. DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp. dll
O20 - Winlogon Notify: avgrsstarter - C:\WINDOWS\SYSTEM32\avgrsstx. dll
O22 - SharedTaskScheduler: IE Component Categories cache daemon - {553858A7-4922-4e7e-B1C1-97140C1C16EF} - C:\WINDOWS\system32\ieframe. dll
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s. r. o.  - C:\PROGRA~1\AVG\AVG8\avgwdsvc. exe
O23 - Service: ?????? Google Update (gupdate1c9aa44fb74be80) (gupdate1c9aa44fb74be80) - Google Inc.  - C:\Program Files\Google\Update\GoogleUpdate. exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService. exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32. exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo. exe
O23 - Service: Seekeen Service - Unknown owner - C:\Program Files\Seekeen\seekeen. exe
O23 - Service: ServiceLayer - Nokia.  - C:\Program Files\PC Connectivity Solution\ServiceLayer. exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc.  - C:\Program Files\Analog Devices\SoundMAX\SMAgent. exe
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - Unknown owner - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc. exe (file missing)

--
End of file - 10200 bytes

Imam isti problem kao i ostali samo sto imam 512mb rama a Hijack mi je ovo izbacio.  Sta da radim? please help

Pozdrav, otvori novu temu, i kazi svoj problem. Ukoliko ti neko od modova kaze da das Hijackthis log na pregled, mozes da posaljes, ali nemoj ostavljati sam log. Savetujem da procitas ovo.


[Lock]