Ajde ovako
WIn XP SP2
atlonov 2200+ procesor
giga rama

Od zastite korscen NOD 32
malwerbytes

Imam problem Nod prestao da se updejtuje, a mawerbytes ne mogu da pokrenem.Iscitao sam i ovde i googlovao pre postavljanja teme.Nisam naisao na slican problem da bih mogao da resim.Racunar je pregledan sa Trojan removerom, cc cliner,a-squared Anti-Malware,Advance uninstaler pro 10......
Problem je sledeci obrisao sam Nod i pokusao aviru da instaliram ali on samo otpakuje aviru i ne nastavi sa instalacijom.A malwerbytes otvori i posle sekund ako i toliko se ugasi
evo loga sa hijackthisom:
____________________________________________________________________________________
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:29:16, on 19.12.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
E:\WINDOWS\System32\smss.exe
E:\WINDOWS\system32\winlogon.exe
E:\WINDOWS\system32\services.exe
E:\WINDOWS\system32\lsass.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\system32\svchost.exe
E:\WINDOWS\System32\svchost.exe
E:\WINDOWS\system32\spoolsv.exe
E:\Program Files\a-squared Anti-Malware\a2service.exe
E:\Program Files\AskBarDis\bar\bin\AskService.exe
E:\Program Files\Java\jre6\bin\jqs.exe
E:\Program Files\CyberLink\Shared files\RichVideo.exe
E:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
E:\WINDOWS\system32\Ati2evxx.exe
E:\WINDOWS\Explorer.EXE
E:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
E:\WINDOWS\system32\svchost.exe
E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
E:\WINDOWS\system32\rundll32.exe
E:\Program Files\Winamp\winampa.exe
E:\Program Files\Java\jre6\bin\jusched.exe
E:\Program Files\ATI Technologies\ATI.ACE\cli.exe
E:\Program Files\Common Files\AOL\1260944772\ee\AOLSoftware.exe
E:\Program Files\Windows Live\Messenger\msnmsgr.exe
E:\WINDOWS\system32\ctfmon.exe
E:\Program Files\Skype\Phone\Skype.exe
E:\Program Files\FinePixViewer\QuickDCF2.exe
E:\Program Files\SEC\Natural Color\NaturalColorLoad.exe
E:\WINDOWS\system32\CNAB4RPK.EXE
E:\WINDOWS\system32\wscntfy.exe
E:\Program Files\ATI Technologies\ATI.ACE\cli.exe
E:\Program Files\ATI Technologies\ATI.ACE\cli.exe
E:\WINDOWS\System32\svchost.exe
E:\Program Files\Skype\Plugin Manager\skypePM.exe
E:\Program Files\Mozilla Firefox\firefox.exe
E:\WINDOWS\hh.exe
E:\Documents and Settings\vukasin\Desktop\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://search.live.com/sphome.aspx
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.live.com
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - E:\Program Files\Winamp Toolbar\winamptb.dll
R3 - URLSearchHook: DefaultSearchHook Class - {C94E154B-1459-4A47-966B-4B843BEFC7DB} - E:\Program Files\AskSearch\bin\DefaultSearch.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - E:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: AskBar BHO - {201f27d4-3704-41d6-89c1-aa35e39143ed} - E:\Program Files\AskBarDis\bar\bin\askBar.dll
O2 - BHO: Winamp Toolbar Loader - {25CEE8EC-5730-41bc-8B58-22DDC8AB8C20} - E:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - E:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - E:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - E:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - E:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - E:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - E:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - E:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Winamp Toolbar - {EBF2BA02-9094-4c5a-858B-BB198F3D8DE2} - E:\Program Files\Winamp Toolbar\winamptb.dll
O3 - Toolbar: Ask Toolbar - {3041d03e-fd4b-44e0-b742-2d9b88305f98} - E:\Program Files\AskBarDis\bar\bin\askBar.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - E:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [RemoteControl] "E:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "E:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "E:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [WinampAgent] "E:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "E:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "E:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin
O4 - HKLM\..\Run: [ATICCC] "E:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [HostManager] E:\Program Files\Common Files\AOL\1260944772\ee\AOLSoftware.exe
O4 - HKLM\..\Run: [TrojanScanner] E:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [a-squared] "E:\Program Files\a-squared Anti-Malware\a2guard.exe"
O4 - HKLM\..\RunOnce: [Malwarebytes' Anti-Malware] E:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [Google Update] "E:\Documents and Settings\vukasin\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [MsnMsgr] "E:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] E:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "E:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Skype] "E:\Program Files\Skype\\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [SpybotSD TeaTimer] E:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - Global Startup: ExifLauncher2.lnk = E:\Program Files\FinePixViewer\QuickDCF2.exe
O4 - Global Startup: NaturalColorLoad.lnk = ?
O8 - Extra context menu item: &Winamp Search - E:\Documents and Settings\All Users\Application Data\Winamp Toolbar\ieToolbar\resources\en-US\local\search.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://E:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... - res://E:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_60D6097707281E79.dll/cmsidewiki.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - E:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - E:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - E:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1258929178538
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1258929335554
O17 - HKLM\System\CCS\Services\Tcpip\..\{A11DAD00-B2A1-42DA-982C-5BBE15098F5E}: NameServer = 213.244.255.2,213.244.255.3
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - E:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Anti-Malware Service (a2AntiMalware) - Emsi Software GmbH - E:\Program Files\a-squared Anti-Malware\a2service.exe
O23 - Service: AOL Connectivity Service (AOL ACS) - AOL LLC - E:\Program Files\Common Files\AOL\ACS\AOLAcsd.exe
O23 - Service: ASKService - Unknown owner - E:\Program Files\AskBarDis\bar\bin\AskService.exe
O23 - Service: ASKUpgrade - Unknown owner - E:\Program Files\AskBarDis\bar\bin\ASKUpgrade.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - E:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - E:\WINDOWS\system32\ati2sgag.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - E:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Google Software Updater (gusvc) - Google - E:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - E:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - E:\Program Files\CyberLink\Shared files\RichVideo.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - E:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O24 - Desktop Component 0: (no name) - file:///E:/DOCUME~1/vukasin/LOCALS~1/Temp/msohtml1/01/clip_image002.jpg

--
End of file - 9013 bytes
________________________________________________________________________________________________

Da uradjen je i upgrade Windowsa i sve sto znam sam uradio ali definitivno ja neumem ovo da resim.Takodje mi se konstantno kada ukljucim da vidim skrivene fajlove pojavi skriveni folder sa slikama "originals" i na SD kartici i na svim mojim memoriskim stikovima.(sve sam to formatirao cistio ali nije dalo rezultata) Znam da je neki virus u pitanju da cu najverovatnije morati da reinstaliram sistem, ali bih zeleo da sacuvam fotografije ali da nisu zarazene.takodje pre odredjenog vremena ni neronije hteo da mi radi da narezem neke podatke.
molim pomoc ako je ikako moguce.Unapred hvala svima 

Za sledeci put: http://forum.burek.com/pc-klinika-pravila-i-preporuke-za-clanove-t427047.html

Sad cu da ti pogledam log posto me ne mrzi, a sledeci put zakljucavam.

Imas Ask i Winamp toolbarove, njih deinstaliraj kao i svaki drugi program. Na brzaka bih rekao da je to to. Sta se desi kad pokusas da pokrenes Malwarebytes?

Izvini ako je problem obrisi ja sam samo hteo da skratimno proceduru je l bi mi to  neko sigurno trazio. Elem Malwerbytes se ili ne pokrene iz prve ili ako se pokrene stoji otvoren sekund dva i samo nestane prozor iskljuci se jednostavno.Nema sanse da se pokrene.
Ako je problem da log stoji ovako obrisi ga a ja cu zakaciti atachmentom

edit:
obrisao sam toolbarove ali i dalje malwerbyts ne radi reinstalirao sam ga i ne radi, takodje ni aviru ne mogu da instaliram i sada sam totalno bez zastite.
Ps hvala Filipe u svakom slucaju, znam da je Nikoljdan pa se nadam kada prodje slava da ce mi neko pomoci da sredim ovo

Ja bih probao sa kaspersky-m 

ne bi bilo zgoreg probati i nesto drugo, cisto da se vidi dal ce naci neke viruse... avast, KIS, KAV, avg, Bitdefender,... bilo sta... 

I dalje imam problem, i dalje ne mogu da instaliram niti jedan antivirus a i ako instaliram ne mogu da ga apdejtujem ili pokrenem.
Malwearebyts nece da radi ni u safe modu ni ovako. pokrene se na par sekundi krene u skeniranje i ugasi se program.
Brisao sam neke potencijalne pretnje sa a-squared Anti-Malware je l jedino njega mogu da pokrenem.
Probao sam foru i sa drcuitom ali on mi samo pregleda na brzinu i nemam opciju da skeniram ceo racunar nego samo da skinem trajal verziju.Kada odem na sajt (preko programa) ne mogu da skinem tu trjal verziju.
Takodje mozda je relevantno,pojavljuje mi se u task baru u donjem desnom uglu upozorenje od windowsa da nemem firewall i da nije apdejtovan windows ali ne i da nemam antivirus (ranije se pojavljivalo da nemam i da instaliram) tako da OS kao da misli da imam antivirus (bar se meni tako cici).Predpostavljam da je u tome problem.
Ako ne resim za par dana ne preostaje mi drugo nego da formatiram disk. Ali sta cu sa podacima slikama i snimcima i sa apr filmova koje magarac nisam narezao.
Interesuje me koliku stetu mogu naneti novom OS ako takve fajlove vratim nazad. Cisto sumnjam da se virus zakaci za sliku tj fotografiju ali sve je moguce???

Skini ovaj program na desktop pokreni ga i ovde mi okaci DDS.txt fajl..preko attachment forme...

dva mi je izbacio pa evo oba
ps hvala

Kazi mi jel mozes da startujes ovaj program :

http://www.freedrweb.com/download+cureit/


Uradicemo jos jedan sken sa ovim programom

Startuj ga sacekaj da se zavrsi inicijalno skeniranje pa zatim klikni scan..Log isto okaci preko attachment forme...

Nego..nesto se razmisljam..ako nije neki sabotazni rootkit mozda se nesto igralo u registriju i blokiralo startovanje tih programa..problem je sto ja ne mogu da se setim gde se nalazi taj kljuc  gde mozes da upisujes vrednosti kojima blokiras startovanje nekih programa 

mogu ali samo onaj osnovni kada treba da izvrsim dublji dobijem da odem an njihov sajt i skinem trajal verziju, kada odem na sajt nista ne vidim tj ni jednu sliku niti gde da skinem tajal verziju, daje mi on neke stvari da skinem ali nije drweb cure it



ovo sam pokrenuo i zakucalo na pola pa nastavilo izbacio par nekih redova i ugasio se i ne mogu vise da ga pokrenem
ma koliko ja vidim bice disk format