idi na start=>search,ukucaj explorer.exe i daj mu da trazi na all files and folders, i ako ti negde nadje bas taj fajl a nije u c:\windows.....kill

Probaću to , pa ću javiti .

Ali pošto sam formatirao hard pre 2 dana a isti sam problem imao i pre nego što sam ga formatirao , programe sam skinuo sa neta a to su kaspersky , spybot , ad-aware , ccleaner .

Sad sam se setio , pošto sam preko rutera na adsl , a ranije sam bio na bežičnom netu , da sama kartica za bežični neradi to ???
Da li bi bilo moguće da bi mogla ona to da uzrokuje ???

pozz svima. moj ortak ima slican problem sa porukom work offline ali da krenem od pocetka. po njegovoj prici prvo mu se pojavila neka poruka da mu je komp zarazen virusom i da teba da ga skenira nekim on line softverom. Posto je imao Kav 6 koji nije mogao da update-je deinstalirao ga je i pokusao da instalira Kav 7 ali nije uspeo , i ja sam nekoliko puta pokusao ali takodje nisam uspeo kao ni da ponovo instaliram Kav 6. Sa Ad-Aware sam mu skenirao komp i nasao 317 pretnji od cega hrpu trojanaca. Nakon toga sam instalirao neki AVG (jedino to sam imao pri ruci) azurirao i s njim pronasao 13 virusa i obrisao. Poruka work offline se i dalje pojavljuje a Kav nemoze da se  instalira . Jel zna neko resenje za problem . Evo ga i log .



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:59:51, on 3.5.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\WINDOWS\system32\winlugan.exe
C:\WINDOWS\system32\LckFldService.exe
C:\WINDOWS\system32\slserv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\winmed.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\DOCUME~1\user\LOCALS~1\Temp\csrssc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\user\My Documents\Nokia PC Suite 6\PCSuite.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\totalcmd\TOTALCMD.EXE
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: C:\WINDOWS\system32\Hfdj84g.dll - {B5AC49A2-94F2-42BD-F434-2604812C897D} - C:\WINDOWS\system32\Hfdj84g.dll
O2 - BHO: C:\WINDOWS\system32\Kf94lfg.dll - {B5AF0562-94F3-42BD-F434-2604812C797D} - C:\WINDOWS\system32\Kf94lfg.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WinMed] winmed.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [autoload] C:\Documents and Settings\LocalService\Local Settings\Application Data\cftmon.exe
O4 - HKLM\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [autoload] C:\Documents and Settings\user\Local Settings\Application Data\cftmon.exe
O4 - HKCU\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exe
O4 - HKCU\..\Run: [Jnskdfmf9eldfd] C:\DOCUME~1\user\LOCALS~1\Temp\csrssc.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Documents and Settings\user\My Documents\Nokia PC Suite 6\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\WINDOWS\system32\wowfx.dll
O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dll
O20 - Winlogon Notify: WLCtrl32 - C:\WINDOWS\SYSTEM32\WLCtrl32.dll
O21 - SSODL: WinDrv - {07e2e0da-3338-4c63-a015-653988e99654} - C:\WINDOWS\Installer\{07e2e0da-3338-4c63-a015-653988e99654}\WinDrv.dll
O22 - SharedTaskScheduler: Hkjr94jdfdgj - {B5AC49A2-94F2-42BD-F434-2604812C897D} - C:\WINDOWS\system32\Hfdj84g.dll
O22 - SharedTaskScheduler: Hjkfj93dffd - {B5AF0562-94F3-42BD-F434-2604812C797D} - C:\WINDOWS\system32\Kf94lfg.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Google Online Search Service - Unknown owner - C:\WINDOWS\system32\winlugan.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LckFldService - Unknown owner - C:\WINDOWS\system32\LckFldService.exe
O23 - Service: Task Scheduler (Schedule) - Unknown owner - C:\WINDOWS\system32\drivers\spools.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SmartLinkService (SLService) -   - C:\WINDOWS\SYSTEM32\slserv.exe

--
End of file - 6187 bytes

Iz Safe Mode-a:

O2 - BHO: C:\WINDOWS\system32\Hfdj84g.dll - {B5AC49A2-94F2-42BD-F434-2604812C897D} C:\WINDOWS\system32\Hfdj84g.dll
O2 - BHO: C:\WINDOWS\system32\Kf94lfg.dll - {B5AF0562-94F3-42BD-F434-2604812C797D} - C:\WINDOWS\system32\Kf94lfg.dll
O4 - HKLM\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\wowfx.dll

@doowla log ti je u haosu
ima jos dosta da se radi pored ovog sto je filip rekao, ali ja sada idem na posao...
ako ti niko drugi ne uskoci, cujemo se veceras...
odmori se dobro,trebace ti za veceras

Sreca pa log nije moj  vec od ortaka ,ja sam mu predlozio reinstalaciju sistema ali on nije za tu opciju. Sredicu ovo sto mi je filip rekao , pa se cujemo veceras . Pozz

vidim da si tu...napisacu ti sve sto vidim, iako ti je filip vec neke stvari pomenuo...
ali prvo udji u control panel=>folder options i u tabu view nadji hidden files and folders i klikni na show hidden files and folders i idi na apply. e onda u safe mod...

pokreni hjt i sve ovo fixuj.

O2 - BHO: C:\WINDOWS\system32\Hfdj84g.dll - {B5AC49A2-94F2-42BD-F434-2604812C897D} - C:\WINDOWS\system32\Hfdj84g.dll
O2 - BHO: C:\WINDOWS\system32\Kf94lfg.dll - {B5AF0562-94F3-42BD-F434-2604812C797D} - C:\WINDOWS\system32\Kf94lfg.dll
O4 - HKLM\..\Run: [WinMed] winmed.exe
O4 - HKLM\..\Run: [autoload] C:\Documents and Settings\LocalService\Local Settings\Application Data\cftmon.exe
O4 - HKLM\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exe
O4 - HKCU\..\Run: [autoload] C:\Documents and Settings\user\Local Settings\Application Data\cftmon.exe
O4 - HKCU\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exe
O4 - HKCU\..\Run: [Jnskdfmf9eldfd] C:\DOCUME~1\user\LOCALS~1\Temp\csrssc.exe
O4 - HKUS\S-1-5-18\..\Run: [ntuser] C:\WINDOWS\system32\drivers\spools.exe (User 'SYSTEM')
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O20 - AppInit_DLLs: C:\WINDOWS\system32\wowfx.dll
O20 - Winlogon Notify: crypt - C:\WINDOWS\SYSTEM32\crypts.dll
O20 - Winlogon Notify: WLCtrl32 - C:\WINDOWS\SYSTEM32\WLCtrl32.dll
O22 - SharedTaskScheduler: Hkjr94jdfdgj - {B5AC49A2-94F2-42BD-F434-2604812C897D} - C:\WINDOWS\system32\Hfdj84g.dll
O22 - SharedTaskScheduler: Hjkfj93dffd - {B5AF0562-94F3-42BD-F434-2604812C797D} - C:\WINDOWS\system32\Kf94lfg.dll
O23 - Service: Google Online Search Service - Unknown owner - C:\WINDOWS\system32\winlugan.exe
O23 - Service: Task Scheduler (Schedule) - Unknown owner - C:\WINDOWS\system32\drivers\spools.exe

nadji peske sledece fajlove i pobrisi ih :
C:\WINDOWS\system32\winlugan.exe
C:\WINDOWS\system32\winmed.exe
C:\DOCUME~1\user\LOCALS~1\Temp\csrssc.exe
C:\WINDOWS\system32\Hfdj84g.dll
C:\WINDOWS\system32\Kf94lfg.dll
C:\Documents and Settings\LocalService\Local Settings\Application Data\cftmon.exe
C:\WINDOWS\system32\drivers\spools.exe
C:\Documents and Settings\user\Local Settings\Application Data\cftmon.exe
C:\WINDOWS\system32\wowfx.dll
C:\WINDOWS\SYSTEM32\crypts.dll
C:\WINDOWS\SYSTEM32\WLCtrl32.dll

bilo bi dobro da instaliras sistem mechanic ili tuneup utilities i da pustis u safe modu da mu proceslja i dotera racunar u red!!
(ako nemas skini sa neta a evo ti linkovi
sistem mechanic tuneup

i posle svega novi  log da vidimo sta smo uradili...ako mu digne sistem

Ja sam jednom imao isti problem. Ja sam instalirao nod32 podesio na maximum i posle skeniranja sve je bilo ok. Ali preporucio bih ipak reinstalaciju windowsa i instaliranje "peceve" za windows

Hvala svima na pomoci ,ali ortak je trnutno u bg-u , pa kad se vrati i odradimo ovo ,javicu sta je bilo. Jos jednom Hvala !!!