Jako lose stanje racunara - potrebna pomoc

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Pre svega bi trebalo da napomenem da prethodni opost je vezan za laptop koji nije ni u priblizno losem stanju kao ovaj racunar. Radi sporije nego pre, ali sve moze da se radi nesmetano, samo jednostavno hocu da proverim sta se tu desava, da li treba nekako da se cisti ili su to neki virusi. Da se vrartim ovom problemu, crvena lampica konstantno svetli na kucistu, potrebno je par minuta da se otvoti bilo koji program, cesto zakucava u radu, prosto nije normalno i ne moze se korisititi. Znam da je konfiguracija dosta losa, ali bas ovako.... Ovaj problem traje dosta dugo, sve sam ignorisao ali sad je vec pocelo dosta da me nervira. Zastitni softver ne detektuje nista. Logovi u prilogu. Brzina 6mb/s. Hvala unapred.


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Karavida at 7:25:40 on 2011-12-11
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.511.60 [GMT -8:00]
.
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
FW: ActiveArmor Firewall *Disabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2-ui.exe
C:\Program Files\SweetIM\Messenger\SweetIM.exe
C:\Program Files\AVAST Software\Avast\avastUI.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\IObit\Advanced SystemCare 4\ASCService.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcAppFlt.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\LogMeIn Hamachi\hamachi-2.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Nero\Update\NASvc.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcIp.exe
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\bin\nSvcLog.exe
C:\WINDOWS\system32\slmdmsr.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\NVIDIA Corporation\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Documents and Settings\Karavida\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Karavida\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Karavida\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Karavida\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Karavida\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
C:\Documents and Settings\Karavida\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://home.sweetim.com
uSearch Bar = hxxp://www.google.com/ie
uDefault_Search_URL = hxxp://www.google.com/ie
mStart Page = hxxp://home.sweetim.com
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: avast! WebRep: {8e5e2654-ad2d-48bf-ac2d-d17f00898d06} - c:\program files\avast software\avast\aswWebRepIE.dll
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe" /MINIMIZED
uRun: [Google Update] "c:\documents and settings\karavida\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [Facebook Update] "c:\documents and settings\karavida\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [LogMeIn Hamachi Ui] "c:\program files\logmein hamachi\hamachi-2-ui.exe" --auto-start
mRun: [SweetIM] c:\program files\sweetim\messenger\SweetIM.exe
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.181\SSScheduler.exe
uPolicies-explorer: NoInstrumentation = 1 (0x1)
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
LSP: %SYSTEMROOT%\system32\nvappfilter.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_26-windows-i586.cab
TCP: DhcpNameServer = 89.216.1.40 89.216.1.50
TCP: Interfaces\{6557AB78-408D-4F24-B997-166C6D1B8F20} : DhcpNameServer = 89.216.1.40 89.216.1.50
SecurityProviders: schannel.dll, credssp.dll, digest.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\karavida\application data\mozilla\firefox\profiles\uah2qcal.default\
FF - prefs.js: browser.search.defaulturl -
FF - prefs.js: browser.search.selectedEngine - SweetIM Search
FF - prefs.js: browser.startup.homepage - hxxp://home.sweetim.com
FF - prefs.js: keyword.URL - hxxp://search.babylon.com/?babsrc=SP_ss&mntrId=94be1c590000000000000015f21809d7&tlver=1.4.31.2&instlRef=sst&affID=100370&q=
FF - prefs.js: network.proxy.type - 0
FF - plugin: c:\documents and settings\all users\application data\nexoneu\ngm\npNxGameeu.dll
FF - plugin: c:\documents and settings\karavida\local settings\application data\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
FF - plugin: d:\programi\picasa3\npPicasa3.dll
.
============= SERVICES / DRIVERS ===============
.
R0 mv61xxmm;mv61xxmm;c:\windows\system32\drivers\mv61xxmm.sys [2011-4-14 13616]
R0 mv64xxmm;mv64xxmm;c:\windows\system32\drivers\mv64xxmm.sys [2011-4-14 5632]
R0 mvxxmm;mvxxmm;c:\windows\system32\drivers\mvxxmm.sys [2011-4-14 13616]
R0 nvcchflt;NVIDIA Disk Cache Filter Driver;c:\windows\system32\drivers\nvcchflt.sys [2011-4-30 16640]
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2012-10-21 442200]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2012-10-21 320856]
R1 HWiNFO32;HWiNFO32/64 Kernel Driver;c:\program files\hwinfo32\HWiNFO32.SYS [2012-7-31 20216]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2012-10-21 20568]
S3 cpuz;cpuz;\??\c:\docume~1\karavida\locals~1\temp\cpuz.sys --> c:\docume~1\karavida\locals~1\temp\cpuz.sys [?]
S3 cpuz134;cpuz134;c:\program files\cpuid\pc wizard 2010\pcwiz_x32.sys [2012-7-31 20328]
S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\eaglexnt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [2012-7-1 27064]
S3 VMUVC;Vimicro Camera Service VMUVC;c:\windows\system32\drivers\VMUVC.sys [2012-6-20 252928]
S3 vvftUVC;Vimicro Camera Filter Service VMUVC;c:\windows\system32\drivers\vvftUVC.sys [2012-6-20 398720]
.
=============== Created Last 30 ================
.
2012-10-22 05:11:04 442200 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-10-22 05:10:39 41184 ----a-w- c:\windows\avastSS.scr
2012-10-21 20:50:38 -------- d-----w- C:\Fraps
2012-10-12 18:35:22 -------- d-----w- c:\documents and settings\karavida\application data\BabylonToolbar
2012-10-08 02:03:42 -------- d-----w- c:\program files\common files\SWF Studio
2012-10-08 02:03:41 -------- d-sh--w- c:\documents and settings\karavida\application data\.#
2012-10-02 17:05:34 404640 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-02 17:05:19 -------- d-----w- c:\documents and settings\all users\application data\McAfee Security Scan
2012-10-02 17:05:13 -------- d-----w- c:\program files\McAfee Security Scan
2012-09-28 03:35:55 -------- d-----w- c:\windows\San Andreas Mod Installer
2012-09-28 03:35:55 -------- d-----w- c:\program files\San Andreas Mod Installer
2012-09-23 21:07:23 -------- d-----w- c:\program files\SweetIM
2012-09-23 21:07:23 -------- d-----w- c:\documents and settings\all users\application data\SweetIM
2012-09-18 17:36:09 -------- d-----w- c:\documents and settings\karavida\local settings\application data\LogMeIn Hamachi
2012-09-18 17:35:15 -------- d-----w- c:\program files\LogMeIn Hamachi
2012-09-18 02:24:08 -------- d-----w- c:\documents and settings\karavida\application data\.minecraft server
2012-09-01 18:59:55 -------- d-----w- C:\Download
2012-09-01 03:02:41 0 ----a-w- c:\windows\system32\ConduitEngine.tmp
2012-09-01 02:57:44 -------- d-----w- c:\documents and settings\karavida\local settings\application data\uTorrent
2012-08-30 19:37:00 -------- d-----w- c:\program files\EA GAMES
2012-08-30 18:26:30 749568 ----a-w- c:\program files\common files\installshield\professional\runtime\10\50\intel32\iKernel.dll
2012-08-30 18:26:30 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\10\50\intel32\ctor.dll
2012-08-30 18:26:30 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\10\50\intel32\DotNetInstaller.exe
2012-08-30 18:26:30 274432 ----a-w- c:\program files\common files\installshield\professional\runtime\10\50\intel32\iscript.dll
2012-08-30 18:26:30 180224 ----a-w- c:\program files\common files\installshield\professional\runtime\10\50\intel32\iuser.dll
2012-08-30 18:26:23 192644 ----a-w- c:\program files\common files\installshield\professional\runtime\10\50\intel32\iGdi.dll
2012-08-30 18:26:22 323716 ----a-w- c:\program files\common files\installshield\professional\runtime\10\50\intel32\setup.dll
2012-08-29 19:22:00 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2012-08-29 19:22:00 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2012-08-29 19:22:00 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2012-08-27 23:56:06 -------- d-----w- c:\documents and settings\all users\application data\IObit
2012-08-25 19:22:30 -------- d-----w- c:\documents and settings\all users\application data\Age of Empires 3
2012-08-24 20:45:59 -------- d-----w- c:\documents and settings\all users\application data\Nexon
2012-08-24 06:04:39 -------- d-----w- C:\Nexon
2012-08-24 06:04:35 -------- d-----w- c:\documents and settings\all users\application data\NexonUS
2012-08-24 04:06:36 -------- d-----w- c:\documents and settings\karavida\local settings\application data\PMB Files
2012-08-24 04:06:26 -------- d-----w- c:\documents and settings\all users\application data\PMB Files
2012-08-24 04:05:48 -------- d-----w- c:\program files\Pando Networks
2012-08-21 01:17:11 -------- d-----w- c:\documents and settings\all users\application data\NexonEU
2012-08-20 19:31:17 2297552 ----a-w- c:\windows\system32\d3dx9_26.dll
2012-08-20 19:31:05 -------- d-----w- c:\windows\RegisteredPackages
2012-08-19 21:35:48 -------- d-----w- c:\documents and settings\karavida\local settings\application data\Babylon
2012-08-19 21:35:45 -------- d-----w- c:\documents and settings\karavida\application data\Babylon
2012-08-19 21:35:45 -------- d-----w- c:\documents and settings\all users\application data\Babylon
2012-08-19 21:33:05 -------- d-----w- c:\documents and settings\karavida\local settings\application data\Mozilla
2012-08-11 22:36:24 442368 ----a-r- c:\windows\system32\vp6vfw.dll
2012-08-05 05:05:24 -------- d-----w- c:\documents and settings\all users\application data\vsosdk
2012-07-31 23:51:00 114176 ----a-w- c:\windows\system32\PCWizard.cpl
2012-07-31 23:50:58 -------- d-----w- c:\program files\CPUID
2012-07-31 20:22:59 -------- d-----w- c:\program files\HWiNFO32
2012-07-13 03:32:44 -------- d-----w- c:\program files\VideoLAN
2012-07-08 19:49:46 -------- d-----w- c:\windows\system32\appmgmt
2012-07-08 18:46:41 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2012-07-08 18:46:07 80544 ----a-w- c:\windows\system32\clhook4.dll
2012-07-08 18:46:07 39584 ----a-w- c:\windows\system32\drivers\pcisys.sys
2012-07-08 18:46:07 32831 ----a-w- c:\windows\system32\pcigina.dll
2012-07-08 18:46:07 32822 ----a-w- c:\windows\system32\pcimsg.dll
2012-07-08 18:46:07 32256 ----a-w- c:\windows\system32\drivers\nsafltr.sys
2012-07-08 18:46:07 20542 ----a-w- c:\windows\system32\pcivdd.dll
2012-07-08 18:46:07 102462 ----a-w- c:\windows\system32\pcimon.dll
2012-07-08 18:46:06 -------- d-----w- c:\documents and settings\all users\application data\NetSupport
2012-07-08 18:45:58 -------- d-----w- c:\program files\NetSupport
2012-07-07 03:30:25 -------- d-----w- c:\documents and settings\all users\application data\regid.1986-12.com.adobe
2012-07-07 03:20:25 -------- d-----w- c:\documents and settings\karavida\local settings\application data\Adobe
2012-07-06 22:46:04 -------- d-----w- c:\documents and settings\karavida\local settings\application data\WMTools Downloaded Files
2012-07-06 02:37:51 -------- d-----w- C:\Test Drive Unlimited
2012-07-02 03:12:18 -------- d-----w- c:\documents and settings\karavida\local settings\application data\VS Revo Group
2012-07-02 03:12:04 27064 ----a-w- c:\windows\system32\drivers\revoflt.sys
2012-07-02 03:12:01 -------- d-----w- c:\program files\VS Revo Group
2012-07-02 02:22:34 -------- d-----w- c:\documents and settings\karavida\application data\IObit
2012-07-02 02:22:25 -------- d-----w- c:\program files\IObit
2012-07-01 23:41:21 4224 ----a-w- c:\windows\system32\drivers\NVStrap.sys
2012-06-20 23:59:49 -------- d-----r- c:\program files\Skype
2012-06-20 23:40:52 -------- d-----w- c:\windows\VMUVC
2012-06-20 23:40:45 98304 ----a-w- c:\windows\system32\VMCtrl.ax
2012-06-20 23:40:45 94208 ----a-w- c:\windows\system32\VvFtCtrl.dll
2012-06-20 23:40:45 73728 ----a-w- c:\windows\system32\exvmuvc.ax
2012-06-20 23:40:45 516096 ----a-w- c:\windows\system32\VMUVC.ax
2012-06-20 23:40:45 398720 ----a-w- c:\windows\system32\drivers\vvftUVC.sys
2012-06-20 23:40:45 252928 ----a-w- c:\windows\system32\drivers\VMUVC.sys
2012-06-20 23:40:45 188416 ----a-w- c:\windows\system32\vvftUVC.ax
2012-06-20 23:40:45 11776 ----a-w- c:\windows\system32\VMUVC.dll
2012-06-20 23:40:37 319456 ----a-w- c:\windows\system32\DIFxAPI.dll
2012-06-20 23:40:24 -------- d-----w- c:\program files\Vimicro Corporation
2012-06-09 20:08:04 -------- d-----w- c:\program files\Black Bean
2012-06-09 19:34:37 221184 ----a-w- c:\windows\system32\wmpns.dll
2012-05-28 05:01:17 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2012-05-26 03:19:33 -------- d-----w- c:\program files\SystemRequirementsLab
2012-05-12 19:43:31 18944 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
2012-05-12 19:43:31 17920 ----a-w- c:\windows\system32\mdimon.dll
2012-05-12 19:42:31 -------- d-----w- c:\program files\Microsoft ActiveSync
2012-05-12 19:41:44 -------- d-----w- c:\windows\SHELLNEW
2011-12-11 10:53:24 -------- d-----w- c:\documents and settings\karavida\local settings\application data\Facebook
2011-11-27 04:41:40 89360 ----a-w- c:\windows\system32\VB5DB.DLL
2011-11-27 04:41:37 -------- d-----w- c:\program files\Custom-Strike
2011-11-23 18:15:16 -------- d-----w- c:\documents and settings\karavida\application data\GetRightToGo
2011-11-23 05:14:58 -------- d-----w- c:\documents and settings\all users\application data\Canneverbe Limited
2011-11-23 05:14:57 -------- d-----w- c:\documents and settings\karavida\application data\Canneverbe Limited
2011-11-23 05:14:22 5504 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2011-11-19 23:06:27 -------- d-----w- c:\windows\SxsCaPendDel
2011-11-19 23:04:50 -------- d-----w- c:\windows\ie8updates
2011-11-19 12:03:45 -------- d-----w- C:\games
2011-11-19 11:57:09 457856 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
.
==================== Find3M ====================
.
2012-08-05 04:47:42 87608 ----a-w- c:\documents and settings\karavida\application data\inst.exe
2012-08-05 04:47:42 47360 ----a-w- c:\windows\system32\drivers\pcouffin.sys
2012-08-05 04:47:42 47360 ----a-w- c:\documents and settings\karavida\application data\pcouffin.sys
2011-10-10 14:21:17 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-09-28 07:05:47 599552 ----a-w- c:\windows\system32\crypt32.dll
2011-09-26 19:41:20 611328 ----a-w- c:\windows\system32\uiautomationcore.dll
2011-09-26 19:41:20 220160 ----a-w- c:\windows\system32\oleacc.dll
2011-09-26 19:41:14 20480 ----a-w- c:\windows\system32\oleaccrc.dll
.
============= FINISH: 7:28:15.62 ===============

https://www.mycity.rs/must-login.png


https://www.mycity.rs/must-login.png


https://www.mycity.rs/must-login.png


https://www.mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav Verbatim1997.


Ovaj racunar je cist sto se malware-a tice.

- Preporucujem da za zastitu USB memorijskih uredjaja koristis MCShield. Nema nikakve veze sa AntiVirus-om tj. nece ometati njegov rad a pokazao se kao jedan od najboljih vida zastite od malware-a koji se prenosi putem USB mem. uredjaja.

Skines, instaliras, ubodes USB mem. uredjaj, izvrsi se skeniranje nakon cega dobijes obavestenje da je uredjaj cist (ukoliko je stvarno tako); ili dobijes log u kome vidis informacije o malware-u koji je nadjen i obrisan.


Home Page MCShield-a: http://amf.mycity.rs/programs/mc/mcshield/

Vise o MCShield-u mozes saznati u ovoj temi: http://www.mycity.rs/Antispyware-programi/MCShield.html

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Vazi. Hvala ti puno.