Problem. Trazila sam neki serial number na net-u..i glupaca pokupila Trojanac...imam Kaspersky antivirusni..i sve regularno,otvarali se trojanci,on ih detektovao i brisao. ALI... bilo se smirilo i sada mi se stalno...znaci,od momenta kada upalim komp pa dok ga ne ugasim u intervalima pojavljuje jedan te isti trojanac kojeg Kasp. otkrije i obrise ali kaze da ne moze da odradi disinfect jer mjesto na kojem je trojanac-ne postoji.

   Infected: Trojan program Trojan-Clicker.Win32.Delf.qg   C:\WINDOWS\ IEXPLORE.EXE   
 je govno koje me smara....i jos neki downloader...ali njega cu nadam se maci kada skinem limewire i sve fajlove koje sam skinula pomocu njega.

Otvori mi se stranica u mozili na svakih 15 min cca...ali to nije moja mozila nego ta neka improvizovana. i nudi mi neki sajt..ja to stalno gasim..ali me smara...cekam druga da bude slobodan da mi to rijesi,ako pomoci ima? Ili mi sada neko fino krade podatke i past ce mi sistem?

skeniraj  racunar sa HiJackThis software-om  mozes ga download-ovati na ovoj adresi, nakon cega zakaci ovde  tekstualni HiJackThis log.

...preporucujemo Vam da skenirate Vas racunar sa HiJackThis software-om koji je besplatan i mozete ga download-ovati na ovoj adresi, nakon cega zakacite ovde Vas tekstualni HiJackThis log.

Hmm...nisam isla u safe mode...a valjda sam dobro uradila i ovako 

Nije dobro...Daj uradi lepo Hijack This i prekopiraj log ovde ceo,pa cemo da vidimo...

poslala je log kao attachment....

Jesam...da 

idi u safe mode,i nadji C:\Windows\iexplorer.exe,i obrisi. 

    R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
    R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\8.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\8.bin\MWSSRCAS.DLL (file missing)
    O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\5.bin\MWSBAR.DLL (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: (no name) - {A57EE9D7-0534-496A-B2B0-E95866D0C1B0} - (no file)
    O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\5.bin\MWSBAR.DLL (file missing)
    O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\5.bin\m3SrchMn.exe" /m=2 /w
    O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZUfox000
    O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\add\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
    O9 - Extra button: Quick Login www.yu-mp3.com - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Funnsystems YuMp3Com-User-Authorization\YuMp3ComLogin.exe (file missing)
O9 - Extra 'Tools' menuitem: &Quick Login www.yu-mp3.com - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Funnsystems YuMp3Com-User-Authorization\YuMp3ComLogin.exe (file missing)

Ovo je sto sam ja vide ali modovi ce bolje da pogledaju, crna ti gde se nagrdi ovako.

pleybeck ne radi napamet...

nocna ptico...udjes u safe mode i pokrenes hjt,das mu da fixuje sledece:

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://search.bearshare.com/sidebar.html?src=ssb
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\8.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\8.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\8.bin\MWSSRCAS.DLL (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: (no name) - {A57EE9D7-0534-496A-B2B0-E95866D0C1B0} - (no file)
O3 - Toolbar: My Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\5.bin\MWSBAR.DLL (file missing)
O4 - HKLM\..\Run: [My Web Search Bar Search Scope Monitor] "C:\PROGRA~1\MYWEBS~1\bar\5.bin\m3SrchMn.exe" /m=2 /w
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZUfox000
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\Documents and Settings\add\Start Menu\Programs\IMVU\Run IMVU.lnk (file missing)
O9 - Extra button: Quick Login www.yu-mp3.com - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Funnsystems YuMp3Com-User-Authorization\YuMp3ComLogin.exe (file missing)
O9 - Extra 'Tools' menuitem: &Quick Login www.yu-mp3.com - {ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Funnsystems YuMp3Com-User-Authorization\YuMp3ComLogin.exe (file missing)
O23 - Service: cfm - Unknown owner - C:\WINDOWS\system32\cfmom.exe

a dok si u safe modu potrazi ove fajlove i obrisi ih peske(shift+del)

C:\Program Files\MyWebSearch\SrchAstt\8.bin\MWSSRCAS.DLL
C:\PROGRA~1\MYWEBS~1\bar\5.bin\m3SrchMn.exe
C:\PROGRA~1\MYWEBS~1\bar\5.bin\mwsoemon.exe

posle toga pokreni regystry booster da ti sredi registry, a mozes i sistem mechanic...posle svega toga daj novi log


ivicaspas brzina ti je vrlina....