Bio sam na Facebook, youtube, zamundi, umbrelli, hotmailu... na stranicama koje svakodnevno posecujem, i 2 ili 3 puta je avast izbacivao ja mislim network shield blocked ili tako nesto... par minuta kasnije Gom player mi se iskljucio i promenio mi je sliku na desktopu, i pocne da mi izbacuje balonice. Ugasim ga i odem da spavam, danas kad sam dosao sa posla probam da namestim... nije se moglo uci u task menager, system restore, vecina programa nije radila... Restrartujem ga i pri podizanju windowsa ponovo restartujem, on ocita gresku i ponudi mi system restore, vratim se para dana nazad, radi sve osim avasta, njega reinstaliram sada radi. Zaboravio sam da napomenem da je sliku i ostale drangulije izbacivao posle 5-6 sekundi od kada se windows pokrene, i kada se klikne na baloncic otvara prozor da se uplati 20-30 dolara za neki "windowsov" anti virus koji ce sigurno obrisati te viruse koje je isti taj program nasao i napisao tacno koji je, gde se nalazi i sta radi...

Sada mi komp radi, normalno se pali i restartuje, samo ni malwerebytes, spybot, avast ni nood32 ne mogu da nadju ni jedan virus, i kompjuter mi je malo usporen. Pokrenuo sam Ashampoo win optimizer, ccleaner i ista stvar.

kazite mi zasto ne moze da nadje virus, i kako je on nestao? I sta da radim dalje...

Hvala

Uradi boot scan sa avastom.

Ako je vec odradio skeniranje sa avast-om nema potrebe za boot scan-om. Detekcija je ista ( cak i smanjena ) samo je u boot scan-u jacina uklanjanja malware-a znatno pojacana upravo zbog toga sto skenira pre samog dizanja sistema. malware nije aktivan.

@kvaicnenad

Potrebno je uraditi dijagnostiku sistema. Oradi sledece

Preuzmi DDS Program na Desktop
http://download.bleepingcomputer.com/sUBs/dds.com

Dvoklikom pokreni dds,kad zavrsi, DDS ce otvoriti dva loga:
         1. DDS.txt
         2. Attach.txt
Oba izvestaja sacuvaj na Desktop.
Kopiraj mi DDS.txt

DDS (Ver_10-12-12.02) - NTFSx86 
Run by 'Nenad at 23:21:12.62 on 19-Jan-11
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate   6.1.7600.0.1250.381.1033.18.2047.974 [GMT 1:00]

AV: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {77DEAFED-8149-104B-25A1-21771CA47CD1}
AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: ESET NOD32 Antivirus 4.2 *Enabled/Updated* {CCBF4E09-A773-1FC5-1F11-1A056723366C}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Mouse Driver\KMWDSrv.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Mouse Driver\StartAutorun.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Labtec\WebCam10\WebCam10.exe
C:\Program Files\Mouse Driver\KMConfig.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Mouse Driver\KMProcess.exe
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\WindowsMobile\wmdcBase.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Users\'Nenad\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Windows\system32\DllHost.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Program Files\Winamp\winamp.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Riot Games\League of Legends\lol.launcher.exe
C:\Riot Games\League of Legends\Air\LOLClient.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Users\'Nenad\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\'Nenad\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\'Nenad\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\'Nenad\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\'Nenad\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\'Nenad\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\'Nenad\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Users\'Nenad\Desktop\Download!!!\dds.com
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [Google Update] "c:\users\'nenad\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [AdobeBridge]
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe"  -osboot
mRun: [KMCONFIG] c:\program files\mouse driver\StartAutorun.exe KMConfig.exe
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [ATICustomerCare] "c:\program files\ati\aticustomercare\ATICustomerCare.exe"
mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe"
mRun: [LVCOMSX] "c:\program files\common files\logishrd\lcommgr\LVComSX.exe"
mRun: [<NO NAME>]
mRun: [LogitechQuickCamRibbon] "c:\program files\labtec\webcam10\WebCam10.exe" /hide
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
mRun: [SwitchBoard] c:\program files\common files\adobe\switchboard\SwitchBoard.exe
mRun: [AdobeCS5ServiceManager] "c:\program files\common files\adobe\cs5servicemanager\CS5ServiceManager.exe" -launchedbylogin
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [JMB36X IDE Setup] c:\windows\raidtool\xInsIDE.exe
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s
mRun: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe
mRun: [avast5] "c:\program files\alwil software\avast5\avastUI.exe" /nogui
mRun: [egui] "c:\program files\eset\eset nod32 antivirus\egui.exe" /hide /waitservice
StartupFolder: c:\users\'nenad\appdata\roaming\micros~1\windows\startm~1\programs\startup\magicd~1.lnk - c:\program files\magicdisc\MagicDisc.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\programdata\microsoft\windows\start menu\programs\startup\Reboot.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Hosts: 127.0.0.1   www.spywareinfo.com

============= SERVICES / DRIVERS ===============

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-1-19 294608]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-1-19 17744]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-1-19 51280]
R2 eamonm;eamonm;c:\windows\system32\drivers\eamonm.sys [2010-9-3 137144]
R2 epfwwfpr;epfwwfpr;c:\windows\system32\drivers\epfwwfpr.sys [2010-7-29 96920]
R3 amdkmdag;amdkmdag;c:\windows\system32\drivers\atikmdag.sys [2010-10-27 6573568]
R3 amdkmdap;amdkmdap;c:\windows\system32\drivers\atikmpag.sys [2010-10-27 229888]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 KMWDFILTERx86;HIDServiceDesc;c:\windows\system32\drivers\KMWDFILTER.sys [2009-4-29 17024]

=============== Created Last 30 ================

2011-01-19 21:51:05   --------   d-----w-   c:\users\'nenad\appdata\local\ESET
2011-01-19 21:03:06   --------   d-----w-   c:\program files\Winamp Detect
2011-01-19 20:44:38   --------   d-----w-   c:\program files\ESET
2011-01-19 17:41:00   --------   d-----w-   c:\program files\Spybot - Search & Destroy
2011-01-19 17:41:00   --------   d-----w-   c:\progra~2\Spybot - Search & Destroy
2011-01-19 17:29:11   38848   ----a-w-   c:\windows\avastSS.scr
2011-01-19 17:25:35   6273872   ----a-w-   c:\progra~2\microsoft\windows defender\definition updates\{c13cabc3-23dc-4bae-8d5b-bde5504b4d0b}\mpengine.dll
2011-01-19 17:23:16   51280   ----a-w-   c:\windows\system32\drivers\aswMonFlt.sys
2011-01-19 17:10:50   --------   d-----w-   c:\windows\system32\wbem\repository
2011-01-18 22:19:59   --------   d-----w-   c:\progra~2\nPdCg09100
2011-01-09 20:17:33   --------   d-----w-   c:\program files\Activision Value
2011-01-06 20:43:22   --------   d-----w-   c:\users\'nenad\appdata\roaming\Rovio
2010-12-31 18:18:50   --------   d-----w-   c:\users\'nenad\appdata\roaming\ArcSoft
2010-12-31 18:17:57   --------   d-----w-   c:\progra~2\ArcSoft
2010-12-31 18:14:58   --------   d-----w-   c:\windows\Downloaded Installations

==================== Find3M  ====================

2010-11-21 22:03:26   319456   ----a-w-   c:\windows\DIFxAPI.dll
2010-11-04 05:52:17   978944   ----a-w-   c:\windows\system32\wininet.dll
2010-11-04 05:48:36   44544   ----a-w-   c:\windows\system32\licmgr10.dll
2010-11-04 04:41:26   386048   ----a-w-   c:\windows\system32\html.iec
2010-11-04 04:08:54   1638912   ----a-w-   c:\windows\system32\mshtml.tlb
2010-11-02 18:29:26   1084008   ----a-w-   c:\windows\system32\RTSndMgr.cpl
2010-11-02 18:29:14   1889896   ----a-w-   c:\windows\system32\RtkPgExt.dll
2010-11-02 18:29:02   68200   ----a-w-   c:\windows\system32\RtkCoInst.dll
2010-11-02 18:28:52   461416   ----a-w-   c:\windows\system32\RtkApoApi.dll
2010-11-02 18:28:52   3633256   ----a-w-   c:\windows\system32\RtkAPO.dll
2010-11-02 18:28:28   561256   ----a-w-   c:\windows\system32\RCoRes.dat
2010-11-02 18:28:28   406120   ----a-w-   c:\windows\system32\DTSVoiceClarityDLL.dll
2010-11-02 18:28:16   962664   ----a-w-   c:\windows\system32\DTSS2HeadphoneDLL.dll
2010-11-02 18:28:16   429160   ----a-w-   c:\windows\system32\DTSSymmetryDLL.dll
2010-11-02 18:28:16   291432   ----a-w-   c:\windows\system32\DTSNeoPCDLL.dll
2010-11-02 18:28:16   1132648   ----a-w-   c:\windows\system32\DTSS2SpeakerDLL.dll
2010-11-02 18:28:06   224360   ----a-w-   c:\windows\system32\DTSLimiterDLL.dll
2010-11-02 18:28:06   107112   ----a-w-   c:\windows\system32\DTSLFXAPO.dll
2010-11-02 18:28:06   107112   ----a-w-   c:\windows\system32\DTSGFXAPO.dll
2010-11-02 18:28:06   106600   ----a-w-   c:\windows\system32\DTSGFXAPONS.dll
2010-11-02 18:27:54   901224   ----a-w-   c:\windows\system32\DTSBoostDLL.dll
2010-11-02 18:27:54   448616   ----a-w-   c:\windows\system32\DTSBassEnhancementDLL.dll
2010-11-02 18:27:54   236648   ----a-w-   c:\windows\system32\DTSGainCompensatorDLL.dll
2010-11-02 04:41:36   442880   ----a-w-   c:\windows\system32\XpsPrint.dll
2010-11-02 04:41:36   283648   ----a-w-   c:\windows\system32\XpsGdiConverter.dll
2010-11-02 04:41:36   135168   ----a-w-   c:\windows\system32\XpsRasterService.dll
2010-11-02 04:41:12   351232   ----a-w-   c:\windows\system32\wmicmiplugin.dll
2010-11-02 04:40:36   496128   ----a-w-   c:\windows\system32\taskschd.dll
2010-11-02 04:40:36   305152   ----a-w-   c:\windows\system32\taskcomp.dll
2010-11-02 04:39:32   749056   ----a-w-   c:\windows\system32\schedsvc.dll
2010-11-02 04:36:16   801792   ----a-w-   c:\windows\system32\FntCache.dll
2010-11-02 04:35:51   1074176   ----a-w-   c:\windows\system32\DWrite.dll
2010-11-02 04:35:35   1170944   ----a-w-   c:\windows\system32\d3d10warp.dll
2010-11-02 04:35:34   739840   ----a-w-   c:\windows\system32\d2d1.dll
2010-11-02 04:35:34   218624   ----a-w-   c:\windows\system32\d3d10_1core.dll
2010-11-02 04:35:34   161792   ----a-w-   c:\windows\system32\d3d10_1.dll
2010-11-02 04:34:44   192000   ----a-w-   c:\windows\system32\taskeng.exe
2010-11-02 04:34:33   179712   ----a-w-   c:\windows\system32\schtasks.exe
2010-11-02 04:23:44   107520   ----a-w-   c:\windows\system32\cdd.dll
2010-10-28 09:46:00   1251944   ----a-w-   c:\windows\RtlExUpd.dll
2010-10-27 04:32:36   2048   ----a-w-   c:\windows\system32\tzres.dll
2010-10-27 02:08:18   16281600   ----a-w-   c:\windows\system32\atioglxx.dll
2010-10-27 01:55:32   143360   ----a-w-   c:\windows\system32\atiapfxx.exe
2010-10-27 01:55:24   547328   ----a-w-   c:\windows\system32\aticfx32.dll
2010-10-27 01:52:18   450560   ----a-w-   c:\windows\system32\ATIDEMGX.dll
2010-10-27 01:51:56   393216   ----a-w-   c:\windows\system32\atieclxx.exe
2010-10-27 01:51:28   176128   ----a-w-   c:\windows\system32\atiesrxx.exe
2010-10-27 01:50:22   159744   ----a-w-   c:\windows\system32\atitmmxx.dll
2010-10-27 01:50:10   356352   ----a-w-   c:\windows\system32\atipdlxx.dll
2010-10-27 01:49:58   278528   ----a-w-   c:\windows\system32\Oemdspif.dll
2010-10-27 01:49:52   15872   ----a-w-   c:\windows\system32\atimuixx.dll
2010-10-27 01:49:46   43520   ----a-w-   c:\windows\system32\ati2edxx.dll
2010-10-27 01:46:58   4020736   ----a-w-   c:\windows\system32\atidxx32.dll
2010-10-27 01:35:28   46080   ----a-w-   c:\windows\system32\aticalrt.dll
2010-10-27 01:35:18   44032   ----a-w-   c:\windows\system32\aticalcl.dll
2010-10-27 01:33:52   5441536   ----a-w-   c:\windows\system32\aticaldd.dll
2010-10-27 01:28:22   4094464   ----a-w-   c:\windows\system32\atiumdag.dll
2010-10-27 01:14:58   52736   ----a-w-   c:\windows\system32\coinst.dll
2010-10-27 01:14:50   249856   ----a-w-   c:\windows\system32\atiadlxx.dll
2010-10-27 01:14:42   12800   ----a-w-   c:\windows\system32\atiglpxx.dll
2010-10-27 01:14:32   27136   ----a-w-   c:\windows\system32\atigktxx.dll
2010-10-27 01:13:36   30720   ----a-w-   c:\windows\system32\atiuxpag.dll
2010-10-27 01:13:24   28672   ----a-w-   c:\windows\system32\atiu9pag.dll
2010-10-27 01:13:04   23040   ----a-w-   c:\windows\system32\atitmpxx.dll
2010-10-27 00:50:10   3460096   ----a-w-   c:\windows\system32\atiumdva.dll
2010-10-27 00:37:14   52736   ----a-w-   c:\windows\system32\atimpc32.dll
2010-10-27 00:37:14   52736   ----a-w-   c:\windows\system32\amdpcom32.dll
2010-10-26 12:02:26   1558432   ----a-w-   c:\windows\system32\FMAPO.dll
2010-10-26 08:15:58   94352   ----a-w-   c:\windows\system32\R4EEL32A.dll
2010-10-26 08:15:58   59536   ----a-w-   c:\windows\system32\R4EEG32A.dll
2010-10-26 08:15:58   339600   ----a-w-   c:\windows\system32\R4EED32A.dll
2010-10-26 08:15:58   1703568   ----a-w-   c:\windows\system32\R4EEP32A.dll
2010-10-26 08:15:56   78992   ----a-w-   c:\windows\system32\R4EEA32A.dll

============= FINISH: 23:24:18.34 ===============

Dal ja to vidim 2 anti virusa   

@kvaicnenad, sredice ti genije komp, samo sledeci put pazi sa torrent-ima, pazi sta skidas i pokreces 

Pregledao sam log na brzinu...i deluje cisto.
Imam sad nekog posla da odradim pa cu ga detaljnije pregledati mada deluje Ok.

Za to vreme...zabavi se. Imas instalirana dva AntiVirus programa. ESET i avast. Ako ti avast nije u tray-u znaci da njegova uninstalacija nije protekla kako treba.
Poseti ovaj sajt i preuzmi eset remover i ukloni ostatke.
http://www.askvg.com/ultimate-collection-of-uninstallers-removal-tools-for-all-popular-anti-virus-software/

takodje...dobar program tog tipa...
http://www.appremover.com/

imam samo avast,  nood sam instalirao danas samo da bih mogao da skeniram komp i sa njim posto avast nije nista nasao, obrisao sam nood.
Nisam pokupio virusa sa torrenta, posto skidam samo filmove, serije, i igrice sa zamunde ili arene, i mislim da sam za par godina naleteo na jedan, dva virusa odatle. Viruse pokupim na nekim stranicama (ne pornografskim), i sa tudjih fleseva.

Jos jednom....DDS log deluje cisto.

Odradi kompletnu uninstallaciju ESET-a ili avast AntiVirusa (izaber) kao sto sam napisao gore.
Dva AntiVirusa su i dalje prisutna u sistemu. Probaj uninstall tool ili appremover.

Posle toga...idemo na dublju analizu.

Preuzmi AVZ Antiviral Toolkit program na Desktop.
http://devbuilds.kaspersky-labs.com/devbuilds/AVZ/avz4.zip

Raspakuj arhivu u neki folder.
Pokreni AVZ dvoklikom na ovu ikonicu:



U meniju izaberi File > Standard Scripts;
U prozoru koji se otvori stikliraj opciju 2 i klikni Execute Selected Scripts;
Klikni Yes;
Po zavrsetku skeniranja dobices obavestenje: Script Executed;

Izadji iz programa.

Uploaduj fajl  virusinfo_syscheck.zip koji se nalazi u avz\log folderu na forum uz poruku.

# Ponovo pokreni DDS log i postavi mi svez DDS.txt log.

Ti ni ne znas odakle i kad ti ulecu virusi na komp... samo filmove, igrice i serije...pa to je skoro sve sto se i skida... a igrice su ti najopasnije, njihovi crack-ovi pa cak i same instalacije... ja sam ti samo skrenuo paznju da se cuvas 
i srecno sa ciscenjem kompa 

p.s. aj nam okaci nove ss-ove, jel i dalje imas onu promenjenu pozadinu i onaj System Tools?

DDS (Ver_10-12-12.02) - NTFSx86 
Run by 'Nenad at  0:20:30.17 on 20-Jan-11
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate   6.1.7600.0.1250.381.1033.18.2047.1297 [GMT 1:00]

AV: avast! Antivirus *Enabled/Updated* {C37D8F93-0602-E43C-40AA-47DAD597F308}
SP: avast! Antivirus *Enabled/Updated* {781C6E77-2038-EBB2-7A1A-7CA8AE10B9B5}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskhost.exe
C:\Program Files\Mouse Driver\KMWDSrv.exe
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Spybot - Search & Destroy\SDWinSec.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Mouse Driver\StartAutorun.exe
C:\Program Files\Mouse Driver\KMConfig.exe
C:\Windows\system32\WUDFHost.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\Communications_Helper.exe
C:\Program Files\Common Files\LogiShrd\LComMgr\LVComSX.exe
C:\Program Files\Labtec\WebCam10\WebCam10.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Mouse Driver\KMProcess.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Windows\WindowsMobile\wmdcBase.exe
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Windows\system32\svchost.exe -k WindowsMobile
C:\Users\'Nenad\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\MagicDisc\MagicDisc.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\system32\DllHost.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\svchost.exe -k SDRSVC
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Users\'Nenad\Desktop\Download!!!\dds.com
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [Google Update] "c:\users\'nenad\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [AdobeBridge]
uRun: [SpybotSD TeaTimer] c:\program files\spybot - search & destroy\TeaTimer.exe
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe"  -osboot
mRun: [KMCONFIG] c:\program files\mouse driver\StartAutorun.exe KMConfig.exe
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [ATICustomerCare] "c:\program files\ati\aticustomercare\ATICustomerCare.exe"
mRun: [LogitechCommunicationsManager] "c:\program files\common files\logishrd\lcommgr\Communications_Helper.exe"
mRun: [LVCOMSX] "c:\program files\common files\logishrd\lcommgr\LVComSX.exe"
mRun: [<NO NAME>]
mRun: [LogitechQuickCamRibbon] "c:\program files\labtec\webcam10\WebCam10.exe" /hide
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [AdobeAAMUpdater-1.0] "c:\program files\common files\adobe\oobe\pdapp\uwa\UpdaterStartupUtility.exe"
mRun: [SwitchBoard] c:\program files\common files\adobe\switchboard\SwitchBoard.exe
mRun: [AdobeCS5ServiceManager] "c:\program files\common files\adobe\cs5servicemanager\CS5ServiceManager.exe" -launchedbylogin
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [JMB36X IDE Setup] c:\windows\raidtool\xInsIDE.exe
mRun: [Malwarebytes Anti-Malware (reboot)] "c:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s
mRun: [Windows Mobile-based device management] %WINDIR%\WindowsMobile\wmdcBase.exe
mRun: [avast5] "c:\program files\alwil software\avast5\avastUI.exe" /nogui
StartupFolder: c:\users\'nenad\appdata\roaming\micros~1\windows\startm~1\programs\startup\magicd~1.lnk - c:\program files\magicdisc\MagicDisc.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\programdata\microsoft\windows\start menu\programs\startup\Reboot.exe
mPolicies-system: ConsentPromptBehaviorAdmin = 5 (0x5)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Handler: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - c:\program files\windows live\photo gallery\AlbumDownloadProtocolHandler.dll
Hosts: 127.0.0.1   www.spywareinfo.com

============= SERVICES / DRIVERS ===============

R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2011-1-19 294608]
R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-2-3 176128]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2011-1-19 17744]
R2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-1-19 51280]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast5\AvastSvc.exe [2011-1-19 40384]
R2 KMWDSERVICE;Keyboard And Mouse Communication Service;c:\program files\mouse driver\KMWDSrv.exe [2007-4-5 208896]
R2 SBSDWSCService;SBSD Security Center Service;c:\program files\spybot - search & destroy\SDWinSec.exe [2011-1-19 1153368]
R3 amdkmdag;amdkmdag;c:\windows\system32\drivers\atikmdag.sys [2010-10-27 6573568]
R3 amdkmdap;amdkmdap;c:\windows\system32\drivers\atikmpag.sys [2010-10-27 229888]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2010-6-23 275048]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-4-15 136176]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 KMWDFILTERx86;HIDServiceDesc;c:\windows\system32\drivers\KMWDFILTER.sys [2009-4-29 17024]
S3 SrvHsfPCI;SrvHsfPCI;c:\windows\system32\drivers\VSTBS23.SYS [2009-7-13 266752]
S3 SrvHsfV92;SrvHsfV92;c:\windows\system32\drivers\VSTDPV3.SYS [2009-7-13 980992]
S3 SrvHsfWinac;SrvHsfWinac;c:\windows\system32\drivers\VSTCNXT3.SYS [2009-7-13 661504]
S3 SwitchBoard;SwitchBoard;c:\program files\common files\adobe\switchboard\SwitchBoard.exe [2010-2-19 517096]

=============== Created Last 30 ================

2011-01-19 21:51:05   --------   d-----w-   c:\users\'nenad\appdata\local\ESET
2011-01-19 21:03:06   --------   d-----w-   c:\program files\Winamp Detect
2011-01-19 17:41:00   --------   d-----w-   c:\program files\Spybot - Search & Destroy
2011-01-19 17:41:00   --------   d-----w-   c:\progra~2\Spybot - Search & Destroy
2011-01-19 17:29:11   38848   ----a-w-   c:\windows\avastSS.scr
2011-01-19 17:25:35   6273872   ----a-w-   c:\progra~2\microsoft\windows defender\definition updates\{c13cabc3-23dc-4bae-8d5b-bde5504b4d0b}\mpengine.dll
2011-01-19 17:23:16   51280   ----a-w-   c:\windows\system32\drivers\aswMonFlt.sys
2011-01-19 17:10:50   --------   d-----w-   c:\windows\system32\wbem\repository
2011-01-18 22:19:59   --------   d-----w-   c:\progra~2\nPdCg09100
2011-01-09 20:17:33   --------   d-----w-   c:\program files\Activision Value
2011-01-06 20:43:22   --------   d-----w-   c:\users\'nenad\appdata\roaming\Rovio
2010-12-31 18:18:50   --------   d-----w-   c:\users\'nenad\appdata\roaming\ArcSoft
2010-12-31 18:17:57   --------   d-----w-   c:\progra~2\ArcSoft
2010-12-31 18:14:58   --------   d-----w-   c:\windows\Downloaded Installations

==================== Find3M  ====================

2010-11-21 22:03:26   319456   ----a-w-   c:\windows\DIFxAPI.dll
2010-11-04 05:52:17   978944   ----a-w-   c:\windows\system32\wininet.dll
2010-11-04 05:48:36   44544   ----a-w-   c:\windows\system32\licmgr10.dll
2010-11-04 04:41:26   386048   ----a-w-   c:\windows\system32\html.iec
2010-11-04 04:08:54   1638912   ----a-w-   c:\windows\system32\mshtml.tlb
2010-11-02 18:29:26   1084008   ----a-w-   c:\windows\system32\RTSndMgr.cpl
2010-11-02 18:29:14   1889896   ----a-w-   c:\windows\system32\RtkPgExt.dll
2010-11-02 18:29:02   68200   ----a-w-   c:\windows\system32\RtkCoInst.dll
2010-11-02 18:28:52   461416   ----a-w-   c:\windows\system32\RtkApoApi.dll
2010-11-02 18:28:52   3633256   ----a-w-   c:\windows\system32\RtkAPO.dll
2010-11-02 18:28:28   561256   ----a-w-   c:\windows\system32\RCoRes.dat
2010-11-02 18:28:28   406120   ----a-w-   c:\windows\system32\DTSVoiceClarityDLL.dll
2010-11-02 18:28:16   962664   ----a-w-   c:\windows\system32\DTSS2HeadphoneDLL.dll
2010-11-02 18:28:16   429160   ----a-w-   c:\windows\system32\DTSSymmetryDLL.dll
2010-11-02 18:28:16   291432   ----a-w-   c:\windows\system32\DTSNeoPCDLL.dll
2010-11-02 18:28:16   1132648   ----a-w-   c:\windows\system32\DTSS2SpeakerDLL.dll
2010-11-02 18:28:06   224360   ----a-w-   c:\windows\system32\DTSLimiterDLL.dll
2010-11-02 18:28:06   107112   ----a-w-   c:\windows\system32\DTSLFXAPO.dll
2010-11-02 18:28:06   107112   ----a-w-   c:\windows\system32\DTSGFXAPO.dll
2010-11-02 18:28:06   106600   ----a-w-   c:\windows\system32\DTSGFXAPONS.dll
2010-11-02 18:27:54   901224   ----a-w-   c:\windows\system32\DTSBoostDLL.dll
2010-11-02 18:27:54   448616   ----a-w-   c:\windows\system32\DTSBassEnhancementDLL.dll
2010-11-02 18:27:54   236648   ----a-w-   c:\windows\system32\DTSGainCompensatorDLL.dll
2010-11-02 04:41:36   442880   ----a-w-   c:\windows\system32\XpsPrint.dll
2010-11-02 04:41:36   283648   ----a-w-   c:\windows\system32\XpsGdiConverter.dll
2010-11-02 04:41:36   135168   ----a-w-   c:\windows\system32\XpsRasterService.dll
2010-11-02 04:41:12   351232   ----a-w-   c:\windows\system32\wmicmiplugin.dll
2010-11-02 04:40:36   496128   ----a-w-   c:\windows\system32\taskschd.dll
2010-11-02 04:40:36   305152   ----a-w-   c:\windows\system32\taskcomp.dll
2010-11-02 04:39:32   749056   ----a-w-   c:\windows\system32\schedsvc.dll
2010-11-02 04:36:16   801792   ----a-w-   c:\windows\system32\FntCache.dll
2010-11-02 04:35:51   1074176   ----a-w-   c:\windows\system32\DWrite.dll
2010-11-02 04:35:35   1170944   ----a-w-   c:\windows\system32\d3d10warp.dll
2010-11-02 04:35:34   739840   ----a-w-   c:\windows\system32\d2d1.dll
2010-11-02 04:35:34   218624   ----a-w-   c:\windows\system32\d3d10_1core.dll
2010-11-02 04:35:34   161792   ----a-w-   c:\windows\system32\d3d10_1.dll
2010-11-02 04:34:44   192000   ----a-w-   c:\windows\system32\taskeng.exe
2010-11-02 04:34:33   179712   ----a-w-   c:\windows\system32\schtasks.exe
2010-11-02 04:23:44   107520   ----a-w-   c:\windows\system32\cdd.dll
2010-10-28 09:46:00   1251944   ----a-w-   c:\windows\RtlExUpd.dll
2010-10-27 04:32:36   2048   ----a-w-   c:\windows\system32\tzres.dll
2010-10-27 02:08:18   16281600   ----a-w-   c:\windows\system32\atioglxx.dll
2010-10-27 01:55:32   143360   ----a-w-   c:\windows\system32\atiapfxx.exe
2010-10-27 01:55:24   547328   ----a-w-   c:\windows\system32\aticfx32.dll
2010-10-27 01:52:18   450560   ----a-w-   c:\windows\system32\ATIDEMGX.dll
2010-10-27 01:51:56   393216   ----a-w-   c:\windows\system32\atieclxx.exe
2010-10-27 01:51:28   176128   ----a-w-   c:\windows\system32\atiesrxx.exe
2010-10-27 01:50:22   159744   ----a-w-   c:\windows\system32\atitmmxx.dll
2010-10-27 01:50:10   356352   ----a-w-   c:\windows\system32\atipdlxx.dll
2010-10-27 01:49:58   278528   ----a-w-   c:\windows\system32\Oemdspif.dll
2010-10-27 01:49:52   15872   ----a-w-   c:\windows\system32\atimuixx.dll
2010-10-27 01:49:46   43520   ----a-w-   c:\windows\system32\ati2edxx.dll
2010-10-27 01:46:58   4020736   ----a-w-   c:\windows\system32\atidxx32.dll
2010-10-27 01:35:28   46080   ----a-w-   c:\windows\system32\aticalrt.dll
2010-10-27 01:35:18   44032   ----a-w-   c:\windows\system32\aticalcl.dll
2010-10-27 01:33:52   5441536   ----a-w-   c:\windows\system32\aticaldd.dll
2010-10-27 01:28:22   4094464   ----a-w-   c:\windows\system32\atiumdag.dll
2010-10-27 01:14:58   52736   ----a-w-   c:\windows\system32\coinst.dll
2010-10-27 01:14:50   249856   ----a-w-   c:\windows\system32\atiadlxx.dll
2010-10-27 01:14:42   12800   ----a-w-   c:\windows\system32\atiglpxx.dll
2010-10-27 01:14:32   27136   ----a-w-   c:\windows\system32\atigktxx.dll
2010-10-27 01:13:36   30720   ----a-w-   c:\windows\system32\atiuxpag.dll
2010-10-27 01:13:24   28672   ----a-w-   c:\windows\system32\atiu9pag.dll
2010-10-27 01:13:04   23040   ----a-w-   c:\windows\system32\atitmpxx.dll
2010-10-27 00:50:10   3460096   ----a-w-   c:\windows\system32\atiumdva.dll
2010-10-27 00:37:14   52736   ----a-w-   c:\windows\system32\atimpc32.dll
2010-10-27 00:37:14   52736   ----a-w-   c:\windows\system32\amdpcom32.dll
2010-10-26 12:02:26   1558432   ----a-w-   c:\windows\system32\FMAPO.dll
2010-10-26 08:15:58   94352   ----a-w-   c:\windows\system32\R4EEL32A.dll
2010-10-26 08:15:58   59536   ----a-w-   c:\windows\system32\R4EEG32A.dll
2010-10-26 08:15:58   339600   ----a-w-   c:\windows\system32\R4EED32A.dll
2010-10-26 08:15:58   1703568   ----a-w-   c:\windows\system32\R4EEP32A.dll
2010-10-26 08:15:56   78992   ----a-w-   c:\windows\system32\R4EEA32A.dll

============= FINISH:  0:21:08.42 ===============