Prilikom startovanja WindowsXP dobijam poruku "Windows cannot discover clshwdis.dll confirm you have entered the name properly and then attempt once more". Sta da radim, pokretanjem antivirusa, on nalazi clshwdis.dll kojeg prebacuje u chest, a prilikom startovanja Windowsa kaze da ne moze da ga nadje?

Preuzmi program DDS na desktop   http://download.bleepingcomputer.com/sUBs/dds.scr
Dvoklikom pokreni DDS
Sacekaj malo, izbacice ti dva loga
Kopiraj mi log DDS.txt

EVO:

DDS (Ver_10-12-12.02) - NTFSx86 
Run by Maja Medic at 20:52:31.67 on Mon 02/28/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional  5.1.2600.3.1252.1.1033.18.766.365 [GMT 1:00]

AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
svchost.exe
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\S3trayp.exe
C:\PROGRA~1\ALWILS~1\Avast5\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\mts mobilni internet\mts mobilni internet.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Maja Medic\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\alwil software\avast5\aswWebRepIE.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\alwil software\avast5\aswWebRepIE.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
mRun: [VTTimer] VTTimer.exe
mRun: [S3Trayp] S3trayp.exe
mRun: [avast5] c:\progra~1\alwils~1\avast5\avastUI.exe /nogui
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dslmon.lnk - c:\program files\sagem\sagem f@st 800-840\dslmon.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
TCP: {DC9E3EDB-035B-456B-8241-8A89F6929CDB} = 195.178.38.3 195.178.38.8
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

============= SERVICES / DRIVERS ===============

R0 BtHidBus;Bluetooth HID Bus Service;c:\windows\system32\drivers\BtHidBus.sys [2008-7-31 20616]
R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [2008-3-4 11264]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2011-2-24 371544]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-1-13 301528]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-1-13 19544]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2011-1-13 42184]
R3 hwusbdev;Huawei DataCard USB PNP Device;c:\windows\system32\drivers\ewusbdev.sys [2011-1-14 100480]
R3 S3GIGP;S3GIGP;c:\windows\system32\drivers\S3gIGPm.sys [2008-3-4 709632]
S2 IKANLOADER2;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2011-1-13 63555]
S2 WdiSrvHost;Wdi Service Host;c:\windows\system32\wdisrvac.exe [2011-2-28 5120]
S3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2011-1-13 114616]
S3 IvtBtBUs;IVT Bluetooth Bus Service;c:\windows\system32\drivers\IvtBtBus.sys [2008-7-2 26248]

=============== Created Last 30 ================

2011-02-28 19:37:09   --------   d-----w-   c:\program files\CCleaner
2011-02-28 19:37:08   --------   d-----w-   c:\program files\BitTorrent
2011-02-28 19:37:08   --------   d-----w-   c:\docume~1\alluse~1\applic~1\Flood Light Games
2011-02-28 19:20:27   --------   d-----w-   c:\windows\pss
2011-02-28 18:39:16   --------   d-----w-   c:\program files\Womens Murder Club 2
2011-02-28 00:34:12   --------   d-----w-   c:\documents and settings\maja medic\Saved Games
2011-02-28 00:34:12   --------   d-----w-   c:\docume~1\majame~1\applic~1\Flood Light Games
2011-02-28 00:33:42   5120   ----a-w-   c:\windows\system32\wdisrvac.exe
2011-02-27 21:04:54   --------   d-----w-   c:\docume~1\majame~1\applic~1\BitTorrent
2011-02-24 11:58:39   371544   ----a-w-   c:\windows\system32\drivers\aswSnx.sys

==================== Find3M  ====================

2011-02-23 15:04:21   40648   ----a-w-   c:\windows\avastSS.scr
2011-01-21 14:44:37   439296   ----a-w-   c:\windows\system32\shimgvw.dll
2011-01-20 17:26:56   0   ----a-w-   c:\windows\system32\ConduitEngine.tmp
2011-01-07 14:09:02   290048   ----a-w-   c:\windows\system32\atmfd.dll
2010-12-31 13:10:33   1854976   ----a-w-   c:\windows\system32\win32k.sys
2010-12-22 12:34:28   301568   ----a-w-   c:\windows\system32\kerberos.dll
2010-12-20 23:59:20   916480   ----a-w-   c:\windows\system32\wininet.dll
2010-12-20 23:59:19   43520   ------w-   c:\windows\system32\licmgr10.dll
2010-12-20 23:59:19   1469440   ------w-   c:\windows\system32\inetcpl.cpl
2010-12-20 17:26:00   730112   ----a-w-   c:\windows\system32\lsasrv.dll
2010-12-20 12:55:26   385024   ------w-   c:\windows\system32\html.iec
2010-12-09 15:15:09   718336   ----a-w-   c:\windows\system32\ntdll.dll
2010-12-09 14:30:22   33280   ----a-w-   c:\windows\system32\csrsrv.dll
2010-12-09 13:38:47   2192768   ----a-w-   c:\windows\system32\ntoskrnl.exe
2010-12-09 13:07:05   2069376   ----a-w-   c:\windows\system32\ntkrnlpa.exe

============= FINISH: 20:55:48.35 ===============

Preuzmi program Malwarebytes' Anti-Malware
Dvoklikom pokreni instalaciju
Na samom pocetku proveri da li su stiklirane ove opcije
Update Malwarebytes' Anti-Malware
Launch Malwarebytes Anti-Malware

Zatim klikni Finish.

Izaberi opciju Perform Quick Scan i klikni Scan.
Po završetku procesa klikni OK, Show Results: u listi detektovanog malware-a proveri da li su obelezene sve stavke i klikni Remove Selected.

Po zavrsetku ciscenja zakaci MBAM log na forum.

EVO:

Malwarebytes' Anti-Malware 1.50.1.1100
www.malwarebytes.org

Database version: 5906

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

2/28/2011 21:19:57
mbam-log-2011-02-28 (21-19-57).txt

Scan type: Quick scan
Objects scanned: 130656
Time elapsed: 3 minute(s), 33 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 0

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
(No malicious items detected)

Start=>Run kucaj msconfig i stisni enter.

Idi na tab startup i slikaj ga pa postavi ovde da vidimo sta imas tamo...

Evo, izvinjavam se na cekanju:

Iz logova se ne moze videti da li je racunar zarazen.
Avast ima opciju Boot time scan, znaci skenira sistem pre podizanja.

Iskoristi tu opciju i skeniraj sistem. Potvrdi ovo sa slike i restartuj

Pretpostavljam da si skenirala sistem iz Windowsa i Avast ga detektuje, ali ne moze da ga obrise.
Da ne bi koristili neke jace alate, odradi ovo sto sam napisao, najverovatnije da ces uspeti da ga se resis. Ukoliko ne uspes, javi pa da idemo na nesto malo drugacije ciscenje.

E, ovako: avast je odradio iz boota svoje i nasao jedno 8 fajlova(za pola znam jer su kejgeni a ostalo sam izbrisala), ali nista od clshwdis.dll, jer nakon završetka avasta kada je pokušao da digne sistem u dva puta se zabagovao i nije prešao sa welcome screena na desktop, iz trećeg je uspelo da digne sistem, ali na desktopu opet obavestenje da .dll fali. Da li postoji još neko rešenje ili je najbolje da windows pređem ponovo?

Ovo je avastov  aswboot.txt :

02/28/2011 22:08
Scan of all local drives

File D:\Downloads\BitTorrent-7.2.exe|>bt_conduit-20101201.exe|>META-INF\manifest.mf Error 42125 {ZIP archive is corrupted.}
File D:\Downloads\New Folder (2).rar|>P1010005.JPG Error 42126 {RAR archive is corrupted.}
File D:\Instal\Advanced SystemCare Pro v3.0\asc-setup.exe|>{tmp}\IObitToolbarSetup.exe|>[Embedded_R#T8SETUP.EXE]|>content\menu.xul Error 42125 {ZIP archive is corrupted.}
File D:\Instal\Advanced SystemCare Pro v3.0\asc-setup.exe|>{tmp}\IObitToolbarSetup.exe|>[Embedded_R#T8SETUP.EXE]|>content\toolbar.js Error 42125 {ZIP archive is corrupted.}
File D:\MAJA\My programs\Messengeri\SweetImSetup.exe is infected by Win32:SweetIM-G [PUP]
File D:\MAJA\My programs\TeamViewer\TeamViewer_Setup.exe|>$TEMP\TeamViewer\Version4\TeamViewer_.exe|>$TEMP\TeamViewer\Version4\TeamViewer.exe is infected by Win32:WinVNCbased-F [PUP]
File D:\MAJA\My programs\TEME\Patcher\UXTheme Multi-Patcher (Neowin Edition) 4.0.exe|>%WIN%\System32\dllcache\uxtheme.dll Error 42145 {Installer archive is corrupted.}
File D:\MAJA\My programs\TEME\Patcher\UXTheme Multi-Patcher (Neowin Edition) 4.0.exe|>%WIN%\System32\dllcache\uxtheme.dll Error 42145 {Installer archive is corrupted.}
File D:\MAJA\My programs\TEME\Patcher\UXTheme Multi-Patcher (Neowin Edition) 4.0.exe|>%WIN%\System32\dllcache\uxtheme.dll Error 42145 {Installer archive is corrupted.}
File D:\MAJA\My programs\TEME\Patcher\UXTheme Multi-Patcher (Neowin Edition) 4.0.exe|>%WIN%\System32\dllcache\uxtheme.dll Error 42145 {Installer archive is corrupted.}
File D:\MAJA\My Samsung Mobile\S5230XXIG2.rar|>S5230XXIG2_PL\Rsrc_S5230_Open_Europe_Common_m.rc1 Error 42126 {RAR archive is corrupted.}
Number of searched folders: 3543
Number of tested files: 252351
Number of infected files: 2