Komp mi se baguje se........

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Do skoro nisam imao ovaj problem:znaci prvo kad dizem sistem cekam pola sata,mozda je zato sto je pun svega i svacega a mozda zato sto ima viruse,kada ulazi u Windows pise WELCOME tu cesto zaglavi,zatim desava se na primer:kada ocu da otovrim NOTEPAD cekam 10 min ili nekad uopste ne reaguje??Ima jos mnogo problema!!!!!!!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:18:08 PM, on 2/3/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
C:\Program Files\ClocX\ClocX.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Valve\hl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\MIHAJLO & MARKO\Desktop\MC\TR3.exe.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
O2 - BHO: GigagetIEHelper - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\system32\gigagetbho_v10.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Six Engine] "C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe" -r
O4 - HKLM\..\Run: [ClocX] C:\Program Files\ClocX\ClocX.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Steam] C:\Program Files\Steam\Steam.exe -silent
O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - [Link mogu videti samo ulogovani korisnici]
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - [Link mogu videti samo ulogovani korisnici]
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - [Link mogu videti samo ulogovani korisnici]\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - [Link mogu videti samo ulogovani korisnici]\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - [Link mogu videti samo ulogovani korisnici]\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [Link mogu videti samo ulogovani korisnici]
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - [Link mogu videti samo ulogovani korisnici]\Program Files\AutoCAD 2002\AcPreview.ocx
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: khfGwTjK - khfGwTjK.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: ThreatFire - Unknown owner - C:\Program Files\ThreatFire\TFService.exe (file missing)

--
End of file - 7710 bytes

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Klikni desnim tasterom miša na avast! ikonicu ( ) u donjem, desnom uglu ekrana i izaberi Stop OnAccess Protection.

Napomena: Ne zaboravi da uključiš ovu opciju po završetku čišćenja.


Skini ComboFix sa jedne od sledecih adresa na Desktop:
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:18:08 PM, on 2/3/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe
C:\Program Files\ClocX\ClocX.exe
C:\Program Files\Winamp\winampa.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Valve\hl.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\MIHAJLO & MARKO\Desktop\MC\TR3.exe.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
O2 - BHO: GigagetIEHelper - {111CAA23-6F4F-42AC-8555-B48C1D87BBAB} - C:\WINDOWS\system32\gigagetbho_v10.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Six Engine] "C:\Program Files\ASUS\EPU-4 Engine\FourEngine.exe" -r
O4 - HKLM\..\Run: [ClocX] C:\Program Files\ClocX\ClocX.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [00PCTFW] "C:\Program Files\PC Tools Firewall Plus\FirewallGUI.exe" -s
O4 - HKLM\..\Run: [Ad-Watch] C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [AtiPTA] atiptaxx.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
O4 - HKCU\..\Run: [Steam] C:\Program Files\Steam\Steam.exe -silent
O8 - Extra context menu item: &Download All by Gigaget - C:\Program Files\Giganology\Gigaget\getallurl.htm
O8 - Extra context menu item: &Download by Gigaget - C:\Program Files\Giganology\Gigaget\geturl.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} (QuickTime Object) - [Link mogu videti samo ulogovani korisnici]
O16 - DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} (DLM Control) - [Link mogu videti samo ulogovani korisnici]
O16 - DPF: {78AF2F24-A9C3-11D3-BF8C-0060B0FCC122} (AcDcToday Control) - [Link mogu videti samo ulogovani korisnici]\Program Files\AutoCAD 2002\AcDcToday.ocx
O16 - DPF: {AE563720-B4F5-11D4-A415-00108302FDFD} (NOXLATE-BANR) - [Link mogu videti samo ulogovani korisnici]\Program Files\AutoCAD 2002\InstBanr.ocx
O16 - DPF: {C6637286-300D-11D4-AE0A-0010830243BD} (InstaFred) - [Link mogu videti samo ulogovani korisnici]\Program Files\AutoCAD 2002\InstFred.ocx
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [Link mogu videti samo ulogovani korisnici]
O16 - DPF: {F281A59C-7B65-11D3-8617-0010830243BD} (AcPreview Control) - [Link mogu videti samo ulogovani korisnici]\Program Files\AutoCAD 2002\AcPreview.ocx
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: khfGwTjK - khfGwTjK.dll (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
O23 - Service: ThreatFire - Unknown owner - C:\Program Files\ThreatFire\TFService.exe (file missing)

--
End of file - 7710 bytes

• 1Ovo se svidja korisniku: ThePhilosopher
  
  Registruj se da bi pohvalio/la poruku!

Ja nigde u svojoj prethodnoj poruci nisam pominjao postavljanje HJT loga...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

ComboFix 09-02-02.04 - MIHAJLO & MARKO 2009-02-03 21:28:50.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1289 [GMT 1:00]
Running from: c:\documents and settings\MIHAJLO & MARKO\Desktop\MC\ComboFix.exe
AV: avast! antivirus 4.8.1296 [VPS 090203-0] *On-access scanning disabled* (Updated)
FW: PC Tools Firewall Plus *disabled*
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\recycler\S-1-5-21-1482476501-1644491937-682003330-1013
c:\recycler\S-1-5-21-1482476501-1644491937-682003330-1013\Desktop.ini
c:\windows\system32\av.dat

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_TDSSSERV.SYS


((((((((((((((((((((((((( Files Created from 2009-01-03 to 2009-02-03 )))))))))))))))))))))))))))))))
.

2009-01-31 23:13 . 2009-02-03 21:32 <DIR> d-------- c:\program files\Steam
2009-01-31 22:28 . 2009-01-31 22:37 <DIR> d-------- c:\windows\system32\rserver30
2009-01-31 21:44 . 2009-01-31 21:44 <DIR> d-------- c:\program files\MultiRes
2009-01-31 21:43 . 2009-01-31 21:43 <DIR> d-------- c:\program files\Radeon Omega Drivers
2009-01-31 15:17 . 2009-02-02 20:36 <DIR> d-------- c:\program files\Valve
2009-01-31 13:23 . 2009-01-31 15:42 15,688 --a------ c:\windows\system32\lsdelete.exe
2009-01-30 23:28 . 2009-01-30 23:29 664 --a------ c:\windows\system32\d3d9caps.dat
2009-01-30 23:14 . 2009-01-31 15:37 <DIR> d-------- c:\program files\Cheating-Death
2009-01-29 20:10 . 2009-01-29 20:10 <DIR> d-------- c:\windows\Downloaded Installations
2009-01-29 20:00 . 2009-01-29 20:00 <DIR> d-------- c:\program files\TitanTV
2009-01-29 19:59 . 2009-01-29 19:59 <DIR> d-------- c:\windows\system32\windows media
2009-01-29 19:59 . 2009-01-29 19:59 <DIR> d--h----- c:\windows\msdownld.tmp
2009-01-29 19:56 . 2009-01-31 13:07 <DIR> d-------- c:\program files\Windows Media Components
2009-01-29 19:04 . 2009-01-29 19:04 <DIR> d-------- c:\documents and settings\All Users\Application Data\ATI
2009-01-29 18:56 . 2007-09-28 21:05 593,920 --------- c:\windows\system32\ati2sgag.exe
2009-01-29 18:55 . 2009-01-29 18:55 <DIR> d-------- C:\ATI
2009-01-29 17:22 . 2009-01-29 17:22 <DIR> d-------- c:\windows\system32\drivers\umdf
2009-01-29 17:20 . 2009-01-29 17:50 <DIR> d-------- c:\program files\Microsoft Games for Windows - LIVE
2009-01-29 16:57 . 2009-01-29 20:49 <DIR> d-------- c:\program files\Rockstar Games
2009-01-29 16:17 . 2009-01-29 16:17 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\DAEMON Tools Pro
2009-01-29 16:17 . 2009-01-29 16:17 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\DAEMON Tools
2009-01-29 16:16 . 2009-01-29 16:16 <DIR> d-------- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2009-01-29 16:12 . 2009-01-29 16:12 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\DAEMON Tools Lite
2009-01-29 16:12 . 2009-01-29 16:12 717,296 --a------ c:\windows\system32\drivers\sptd.sys
2009-01-28 16:25 . 2009-01-28 16:25 <DIR> d-------- c:\program files\Lindersoft
2009-01-28 16:25 . 2009-01-28 16:25 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\Lindersoft
2009-01-24 14:00 . 2009-01-25 01:01 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\Any Video Converter
2009-01-24 13:29 . 2009-01-24 13:29 <DIR> d-------- c:\program files\GlobalSCAPE
2009-01-24 13:21 . 2009-01-24 13:28 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\FileZilla
2009-01-24 01:41 . 2009-01-24 01:41 <DIR> d-------- c:\program files\Axialis
2009-01-24 01:41 . 2009-01-24 01:41 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\Axialis
2009-01-22 09:59 . 2009-01-22 09:59 <DIR> d-------- c:\program files\Innovative Solutions
2009-01-22 01:29 . 2009-01-22 01:29 64,160 --a------ c:\windows\system32\drivers\Lbd.sys
2009-01-22 01:28 . 2009-01-22 01:28 <DIR> d-------- c:\program files\Lavasoft
2009-01-22 01:28 . 2009-01-22 01:28 <DIR> d--h-c--- c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-01-21 04:27 . 2009-01-21 04:27 <DIR> d--hs---- C:\Boot
2009-01-21 04:27 . 2008-12-13 08:03 377,151 -rahs---- C:\bootmgr
2009-01-21 04:27 . 2009-01-21 04:27 8,192 -rahs---- C:\BOOTSECT.BAK
2009-01-20 12:21 . 2009-01-20 12:21 <DIR> d-------- C:\cc237b20efb32377876ae997e8
2009-01-19 22:37 . 2009-01-19 22:40 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\Eltima Software
2009-01-17 23:20 . 2009-01-17 23:20 175,616 --a------ c:\windows\system32\wmp.oca
2009-01-14 06:46 . 2007-12-05 03:19 5,435,392 --a------ c:\windows\system32\atioglxx.dll
2009-01-14 05:05 . 2009-01-14 05:05 79,008 --a------ c:\windows\system32\ativvaxx.cap
2009-01-14 03:36 . 2009-01-14 03:36 45,056 --a------ c:\windows\system32\amdcalrt.dll
2009-01-14 03:36 . 2009-01-14 03:36 45,056 --a------ c:\windows\system32\amdcalcl.dll
2009-01-14 03:34 . 2009-01-14 03:34 3,227,648 --a------ c:\windows\system32\Amdcaldd.dll
2009-01-06 14:44 . 2009-01-06 14:44 <DIR> d-------- c:\documents and settings\MIHAJLO & MARKO\Application Data\PCToolsFirewallPlus
2009-01-06 14:37 . 2008-12-11 08:38 159,600 --a------ c:\windows\system32\drivers\pctgntdi.sys
2009-01-06 14:37 . 2008-12-11 12:32 132,976 --a------ c:\windows\system32\drivers\PCTCore.sys
2009-01-06 14:37 . 2008-12-11 12:32 73,840 --a------ c:\windows\system32\drivers\PCTAppEvent.sys
2009-01-06 14:36 . 2009-01-28 14:09 <DIR> d-------- c:\program files\PC Tools Firewall Plus
2009-01-06 14:36 . 2009-01-06 14:37 <DIR> d-------- c:\program files\Common Files\PC Tools
2009-01-06 14:36 . 2008-09-22 12:29 97,408 --a------ c:\windows\system32\drivers\pctfw.sys
2009-01-06 14:36 . 2008-12-11 17:01 95,640 --a------ c:\windows\system32\drivers\pctplfw.sys
2009-01-06 14:23 . 2009-01-06 14:23 <DIR> d-------- c:\documents and settings\All Users\Application Data\PC Tools
2009-01-06 14:23 . 2008-11-17 13:05 12,576 --a------ c:\windows\system32\drivers\TfKbMon.sys
2009-01-06 12:51 . 2009-01-22 01:28 <DIR> d-------- c:\documents and settings\All Users\Application Data\Lavasoft
2009-01-06 00:40 . 2009-01-22 09:53 <DIR> d-------- c:\documents and settings\All Users\Application Data\SecTaskMan
2009-01-05 15:19 . 2009-01-05 15:19 <DIR> d-------- c:\program files\OO Software
2009-01-04 19:07 . 2009-01-04 19:07 <DIR> d-------- c:\windows\system32\xlive
2009-01-04 19:05 . 2009-01-04 19:05 <DIR> d-------- c:\program files\Microsoft XNA

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-02-03 20:32 --------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-01-31 20:43 472,576 ----a-w c:\windows\Radeon Omega Drivers v4.8.442 Uninstall.exe
2009-01-31 14:17 --------- d--h--w c:\program files\InstallShield Installation Information
2009-01-29 18:00 --------- d-----w c:\program files\ATI Technologies
2009-01-23 23:26 --------- d-----w c:\program files\IconForge7
2009-01-22 00:38 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\uTorrent
2009-01-22 00:28 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-01-21 23:24 --------- d-----w c:\program files\SUPERAntiSpyware
2009-01-21 23:24 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\SUPERAntiSpyware.com
2009-01-20 10:08 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\Download Manager
2009-01-04 18:12 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-01-01 14:22 --------- d-----w c:\documents and settings\All Users\Application Data\TVU Networks
2008-12-30 14:41 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\Winamp
2008-12-29 21:39 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\Media Player Classic
2008-12-29 21:38 --------- d-----w c:\program files\Real Alternative
2008-12-29 21:38 --------- d-----w c:\program files\Common Files\Real
2008-12-29 20:20 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\CursorArts
2008-12-29 17:47 --------- d-----w c:\program files\GRETECH
2008-12-29 17:47 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\GRETECH
2008-12-29 17:47 --------- d-----w c:\documents and settings\All Users\Application Data\GRETECH
2008-12-27 16:38 --------- d-----w c:\documents and settings\All Users\Application Data\InstallShield
2008-12-27 13:19 --------- d--h--w c:\program files\Zero G Registry
2008-12-27 13:19 --------- d-----w c:\program files\Macrovision
2008-12-26 18:37 --------- d-----w c:\program files\Zeallsoft
2008-12-26 12:26 5,632 ----a-w c:\windows\system32\drivers\StarOpen.sys
2008-12-26 11:06 --------- d-----w c:\program files\Common Files\Adobe
2008-12-25 20:05 --------- d-----w c:\documents and settings\All Users\Application Data\SUPERAntiSpyware.com
2008-12-17 21:57 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\ImTOO Software Studio
2008-12-16 19:52 --------- d-----w c:\program files\QuickTime
2008-12-16 19:52 --------- d-----w c:\program files\Common Files\Apple
2008-12-16 19:52 --------- d-----w c:\program files\Apple Software Update
2008-12-16 19:52 --------- d-----w c:\documents and settings\All Users\Application Data\Apple Computer
2008-12-16 19:52 --------- d-----w c:\documents and settings\All Users\Application Data\Apple
2008-12-13 19:36 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\BearShare
2008-12-12 10:26 --------- d-----w c:\documents and settings\MIHAJLO & MARKO\Application Data\Samsung
2008-12-04 17:35 --------- d-----w c:\program files\Microsoft Silverlight
2008-12-04 15:25 --------- d-----w c:\program files\Microsoft Visual Studio 9.0
2008-12-03 21:02 --------- d-----w c:\program files\Microsoft SQL Server
2008-12-03 21:01 --------- d-----w c:\program files\Microsoft Synchronization Services
2008-12-03 21:01 --------- d-----w c:\program files\Microsoft SQL Server Compact Edition
2008-12-03 20:59 --------- d-----w c:\program files\Microsoft SDKs
2008-12-03 15:11 --------- d-----w c:\program files\Java
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"SUPERAntiSpyware"="c:\program files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2009-01-15 1830128]
"Steam"="c:\program files\Steam\Steam.exe" [2003-09-11 958464]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Six Engine"="c:\program files\ASUS\EPU-4 Engine\FourEngine.exe" [2008-05-28 6664192]
"ClocX"="c:\program files\ClocX\ClocX.exe" [2004-01-21 103936]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-04 36352]
"avast!"="c:\progra~1\ALWILS~1\Avast4\ashDisp.exe" [2008-11-26 81000]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2008-11-10 136600]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-12-16 413696]
"00PCTFW"="c:\program files\PC Tools Firewall Plus\FirewallGUI.exe" [2009-01-28 2652056]
"Ad-Watch"="c:\program files\Lavasoft\Ad-Aware\AAWTray.exe" [2009-01-31 509784]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2008-08-29 61440]
"RTHDCPL"="RTHDCPL.EXE" [2008-05-16 c:\windows\RTHDCPL.EXE]
"AtiPTA"="atiptaxx.exe" [2006-02-22 c:\windows\system32\atiptaxx.exe]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSecurityTab"= 1 (0x1)

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\program files\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2008-12-22 11:05 356352 c:\program files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Giganology\\Gigaget\\Gigaget.exe"=
"c:\\Program Files\\Java\\jre6\\bin\\java.exe"=
"c:\\totalcmd\\TOTALCMD.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Common Files\\Adobe\\CS4ServiceManager\\CS4ServiceManager.exe"=
"c:\\WINDOWS\\system32\\ftp.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\BearShare Applications\\BearShare\\BearShare.exe"=
"c:\\Program Files\\Adobe\\Adobe Dreamweaver CS4\\Dreamweaver.exe"=
"c:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"c:\\Program Files\\Rockstar Games\\Rockstar Games Social Club\\RGSCLauncher.exe"=
"c:\\Program Files\\Rockstar Games\\Grand Theft Auto IV\\LaunchGTAIV.exe"=
"c:\\Program Files\\Valve\\hl.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-01-22 64160]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2008-11-21 111184]
R1 pctgntdi;pctgntdi;c:\windows\system32\drivers\pctgntdi.sys [2009-01-06 159600]
R1 SASDIFSV;SASDIFSV;c:\program files\SUPERAntiSpyware\sasdifsv.sys [2009-01-15 8944]
R1 SASKUTIL;SASKUTIL;c:\program files\SUPERAntiSpyware\SASKUTIL.SYS [2009-01-15 55024]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2008-11-21 20560]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [2009-01-18 950096]
R2 PCTAppEvent;PCTAppEvent Driver;c:\windows\system32\drivers\PCTAppEvent.sys [2009-01-06 73840]
R3 AtiHdmiService;ATI Function Driver for HDMI Service;c:\windows\system32\drivers\AtiHdmi.sys [2008-10-26 93696]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1e51x86.sys [2008-10-26 36864]
R3 pctplfw;pctplfw;c:\windows\system32\drivers\pctplfw.sys [2009-01-06 95640]
R3 SASENUM;SASENUM;c:\program files\SUPERAntiSpyware\SASENUM.SYS [2009-01-15 7408]
S0 TfFsMon;TfFsMon;c:\windows\system32\drivers\TfFsMon.sys --> c:\windows\system32\drivers\TfFsMon.sys [?]
S0 TfSysMon;TfSysMon;c:\windows\system32\drivers\TfSysMon.sys --> c:\windows\system32\drivers\TfSysMon.sys [?]
S2 ThreatFire;ThreatFire;c:\program files\ThreatFire\TFService.exe service --> c:\program files\ThreatFire\TFService.exe service [?]
S3 mirrorv3;mirrorv3;c:\windows\system32\drivers\rminiv3.sys [2006-11-01 3328]
S3 TfNetMon;TfNetMon;\??\c:\windows\system32\drivers\TfNetMon.sys --> c:\windows\system32\drivers\TfNetMon.sys [?]
.
Contents of the 'Scheduled Tasks' folder

2009-01-22 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-31 15:42]

2009-02-01 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 12:34]
.
- - - - ORPHANS REMOVED - - - -

Notify-khfGwTjK - khfGwTjK.dll
MSConfigStartUp-TkBellExe - c:\program files\Common Files\Real\Update_OB\realsched.exe


.
------- Supplementary Scan -------
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
uSearchMigratedDefaultURL = [Link mogu videti samo ulogovani korisnici]{searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = iexplore
IE: &Download All by Gigaget - c:\program files\Giganology\Gigaget\getallurl.htm
IE: &Download by Gigaget - c:\program files\Giganology\Gigaget\geturl.htm
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
DPF: {4871A87A-BFDD-4106-8153-FFDE2BAC2967} - [Link mogu videti samo ulogovani korisnici]
FF - ProfilePath - c:\documents and settings\MIHAJLO & MARKO\Application Data\Mozilla\Firefox\Profiles\qsasppbe.default\
FF - prefs.js: browser.startup.homepage - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: network.proxy.type - 4
FF - component: c:\documents and settings\MIHAJLO & MARKO\Application Data\Mozilla\Firefox\Profiles\qsasppbe.default\extensions\piclens@cooliris.com\components\coolirisstub.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici]
Rootkit scan 2009-02-03 21:33:11
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-527237240-1580436667-682003330-1003\Software\SecuROM\License information*]
"datasecu"=hex:a4,af,85,36,9e,c7,5f,0f,a9,b0,b1,cb,c2,a3,c2,fa,12,20,e3,a3,d6,
22,3b,09,d0,b6,f6,85,cc,a1,d0,08,bf,c5,c5,a6,cc,d9,64,65,b5,44,5b,72,77,58,\
"rkeysecu"=hex:f2,82,08,c3,db,2a,27,66,39,7e,27,b4,a1,8a,73,c0
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1036)
c:\program files\SUPERAntiSpyware\SASWINLO.dll
c:\windows\system32\Ati2evxx.dll
c:\program files\Common Files\Adobe\Adobe Drive CS4\AdobeDriveCS4_NP.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\ati2evxx.exe
c:\program files\Alwil Software\Avast4\aswUpdSv.exe
c:\program files\Alwil Software\Avast4\ashServ.exe
c:\windows\system32\ati2evxx.exe
c:\program files\Java\jre6\bin\jqs.exe
c:\program files\PC Tools Firewall Plus\FWService.exe
c:\windows\system32\wbem\unsecapp.exe
c:\windows\system32\wscntfy.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
c:\program files\Windows Live\Messenger\usnsvc.exe
.
**************************************************************************
.
Completion time: 2009-02-03 21:35:35 - machine was rebooted [MIHAJLO & MARKO]
ComboFix-quarantined-files.txt 2009-02-03 20:35:33

Pre-Run: 137,966,886,912 bytes free
Post-Run: 137,878,269,952 bytes free

261 --- E O F --- 2008-12-22 23:22:37

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ne vidim sta bi ovde moglo biti uzrok "bagovanju"


Hajde da proverimo nesto:


Otvoriti Notepad i iskopirati sledeci tekst:

DirLook::
C:\cc237b20efb32377876ae997e8


Snimiti na Desktop fajl iz Notepada kao "CFScript"




Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici.
Postaviti u sledecoj poruci log koji bude bio napravljen na kraju ciscenja/skeniranja.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

OK,mnogo ti hvala

Dopuna: 04 Feb 2009 22:44

problem je resen

Dopuna: 04 Feb 2009 22:47

Samo mi kazi ove foldere sto je pravio na C: da li sada posto mi se komp ne baguje,mogu da izbrisem??

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Zasto ne pratis moja uputstva...? Sta da je u pitanju neka ozbiljna infekcija...???
Kazi mi kako je problem resen....

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Kada iskljucim firewall dizanje windowsa ide sasvim normalno tako da mislim da ga firewall koci ili ponekad zablokira,nije jedini slucaj,zbog firewall
mi zaglavljivali pojedini programi,tako da sam jedino mogao da ih starutjem kada je firewall ukljucne,u ostalom i sam vidis koliko imam zastitnih programa(ad-Aware,SUPERAntiSpyware,Avast)neverujem da neke velike infekcije postoje!

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

1.Ovde moras da pratis ona uputstva koje ti helper postuje.
2.Na koje foldere na rootu C particije mislis?
3.Pogledaj sta ti se nalazi u sledecem folderu C:\cc237b20efb32377876ae997e8 i kazi mi koji fajlovi ili okaci screenshot.