kada sam skenirao komp uz pomoc nod 32 antivirus programa nasao je nesto sto kad se izbrise mi ugasi komp

File D:\FOUND.007\FILE0001.CHK is infected with trojan Win32/Qhosts. The file can be deleted. It is strongly recommended that you back up any crucial data before you proceed.

ovo pise a moguce opcije su leave,rename,delete ... kad uradim delete pojavi se plavi ekran na sekund i restartuje se komp a kad uradim leave sve je u redu ali on je i dalje u kompu

sta da radim?

Prilikom pojavljivanja doticnih problema kao preliminarno resenje preporucujemo vam da skenirate vas racunar sa azuriranim Anti-Virus i Anti-Spyware programima. Posetite ovu temu za vise informacija, kao i ovu temu za spisak i test najboljih Anti-Virus programa.
Ukoliko se Vas problem i dalje pojavljuje, preporucujemo Vam da skenirate Vas racunar sa HiJackThis software-om koji je besplatan i mozete ga download-ovati na ovoj adresi, nakon cega zakacite ovde Vas tekstualni HiJackThis log.

azurirao sam pre skeniranja pa evo onda hijackthis log-a

Logfile of HijackThis v1.99.1
Scan saved at 23:19:33, on 22.4.2007
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\system32\spoolsv.exe
D:\WINDOWS\Explorer.EXE
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
D:\Program Files\Eset\nod32krn.exe
D:\WINDOWS\System32\nvsvc32.exe
D:\WINDOWS\System32\tcpsvcs.exe
D:\WINDOWS\System32\snmp.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
D:\WINDOWS\System32\RUNDLL32.EXE
D:\PROGRA~1\TIADSL~1\bin\win2k\tidslmon.exe
D:\Program Files\Eset\nod32kui.exe
D:\WINDOWS\System32\ctfmon.exe
D:\Program Files\Eset\nod32.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
D:\Program Files\Internet Explorer\iexplore.exe
D:\Documents and Settings\DEJAN.PC\My Documents\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - D:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE D:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE D:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [TIxDSL] D:\PROGRA~1\TIADSL~1\bin\win2k\tidslmon.exe
O4 - HKLM\..\Run: [nod32kui] "D:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\RunServices: [SchedulingAgent] mstask.exe
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] D:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://D:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - D:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: YU-MP3.COM Account Login - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - D:\Program Files\Funnsystems YuMp3Com-User-Authorization\YuMp3ComLogin.exe
O9 - Extra 'Tools' menuitem: &YU-MP3.COM User Login - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - D:\Program Files\Funnsystems YuMp3Com-User-Authorization\YuMp3ComLogin.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{DF3A6311-34EA-4168-89E6-3D33B2841A15}: NameServer = 80.74.160.12 80.74.160.38
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - D:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - AppInit_DLLs: 
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset  - D:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - D:\WINDOWS\System32\nvsvc32.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

*.CHK file se kreira kada Windows iz nekih razloga nestabilno radi ili "padne". Tada se skenira disk i pravi se neki backup file sa extenzijom *.CHK. Ovo ne bi trebalo da ima ikakve veze sa gasenjem kompjutera....
Idi Start-->Run: msconfg i u tab-u Startup ugasi sve sto ti ne treba (nije poznato). Prvo da pokusamo da vidimo zasto se to dogadja.
Mislim da je u pitanju neki virus, ali ne taj *.CHK file, vec nesto sto linkuje na taj file. Pokusaj da skeniras sa UPDATE-ovanim Ad-Aware i Spybot S&D, kao i AVG Anti Spyware, koje vidim imas na sistemu...

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~1\SPYBOT~1\SDHelper.dll
O20 - AppInit_DLLs: 

cist je log...

skenirao sam i samo je ad aware nasao neki tracking cookie ali cini mi se da to nije to sto mi maltretira komp jer i dalje je vise poslatih bajtova nego primljenih sto se konekcije tice i i dalje mi nod nalazi isti onaj virus taj fajl sto ti kazes da je windows-ov

a sta dalje da uradim ?... nesto definitivno imam sto ovi programi ne nalaze ...probao sam scan u safe mode-u takodje ali nista

Hm...
Imas li firewall i kakva su mu podesavanja?
Pokusaj da skeniras disk sa Run: chkdsk /f
Nije do toga, ali ce bar javiti da li imas nekih gresaka sa diskom...

ne znam sta je firewall pa pretpostavljam da nemam

chkdsk nece da se pokrene jer ga koristi neki drugi proces tako pise

Firewall: ZoneAlarm, Outpost,... ma nije vazno...
Kad pokrense chkdsk /f, javice ti: Volume used by onother process. Ti treba da ukucas slovo "Y" (bez navodnika) i udaris ENter. Zatim restartuj komp. Pose toga ne diraj nista, cak ni kada se pojavi plavi ekran. On ce da odradi svoje i popravi greske ako nadje....