spor internet

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

internet mi je spor kada otvorim neku stranicu treba mu dosta vremena da ucita,desi se nekad da uopstene moze ucitati stranicu.Kada ocu da pogledam klipna youtube prvo moram da smanjim na 240p i onda sacekam od 3 do 7 minuta da ucita ponekad cak i kad ucita ceo klip odjednom stane i nemoze ponovo da se pusti.Malopre sam hteo da skinem antivirus dosao je do 13% downloada i odjednom stao i pisalo je nesto neuspeo pokusaj il tako nesto.Brzina je 100.0 Mbps.I kada ocu da u control panelu kliknem disable na local area connect pojavi se ovo





.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 10.1.0
Run by PC at 8:00:01 on 2011-12-27
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1535.338 [GMT 1:00]
.
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\713xRMTMon.exe
C:\ADVANC~1\wh_exec.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\McAfee Security Scan\2.0.189\SSScheduler.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\PC\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\PC\My Documents\Downloads\h5bkb066.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://search.babylon.com/?babsrc=HP_ss&affID=8346&mntrId=389ef07b00000000000000e01c3c1f64
mStart Page = hxxp://home.sweetim.com
mSearchAssistant = hxxp://search.babylon.com/?babsrc=SP_ss&q={searchTerms}&mntrId=389ef07b000000000000001e8cd25687&tlver=1.4.19.19&ss=1&affID=17981
uURLSearchHooks: H - No File
uURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\GenericAskToolbar.dll
mWinlogon: Userinit=c:\windows\system32\userinit.exe
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
TB: {8dcb7100-df86-4384-8842-8fa844297b3f} - No File
TB: Babylon Toolbar: {98889811-442d-49dd-99d7-dc866be87dbc} -
TB: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - No File
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
TB: {46897C77-E7A6-4C33-BFFB-E9C2E2718942} - No File
EB: {bdea95cf-f0e6-41e0-bd3d-b00f39a4e939} - ShopperReports
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [TV Card Remote Control Device Monitor] c:\windows\713xRMTMon.exe
mRun: [WheelMouse] c:\advanc~1\wh_exec.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [MSConfig] c:\windows\pchealth\helpctr\binaries\MSConfig.exe /auto
mExplorerRun: [Microsoft Driver Setup] c:\windows\ggdrive32.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\2.0.189\SSScheduler.exe
IE: Download all by YouTube Robot - c:\program files\youtuberobot\downall.htm
IE: Download by YouTube Robot - c:\program files\youtuberobot\downlink.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_70C5B381380DB17F.dll/cmsidewiki.html
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
IE: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - {3E2DFD6A-4E20-4d4c-AA8B-E1F9DBEF3C80}
IE: {EB620C54-E229-4942-87CE-E717109FC8C6} - {714E0876-FCEE-49ce-A429-B9AD8AEFCB56}
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_29-windows-i586.cab
DPF: {CAFEEFAC-0017-0000-0001-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.7.0/jinstall-1_7_0_01-windows-i586.cab
TCP: DhcpNameServer = 89.216.1.40 89.216.1.50
TCP: Interfaces\{6A6DE601-D40D-468B-B854-E1B9AA3188AA} : DhcpNameServer = 89.216.1.40 89.216.1.50
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 nwprovau
LSA: Notification Packages = scecli scecli scecli scecli
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\pc\application data\mozilla\firefox\profiles\l9wkehov.default\
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=937811&p=
FF - plugin: c:\documents and settings\pc\local settings\application data\google\update\1.3.21.81\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.79\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\program files\java\jre7\bin\new_plugin\npjp2.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npdeployJava1.dll
FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
.
============= SERVICES / DRIVERS ===============
.
R0 ViBus;ViBus;c:\windows\system32\drivers\ViBus.sys [2011-3-25 16896]
R0 ViPrt;VIA SATA IDE Device Driver;c:\windows\system32\drivers\ViPrt.sys [2011-3-25 52224]
R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\drivers\xfilt.sys [2011-11-16 21144]
R2 713xTVCard;SAA7130 TV Card;c:\windows\system32\drivers\SAA713x.sys [2011-3-6 279552]
R2 WDMTVTuner;Universal WDM TV Tuner;c:\windows\system32\drivers\WDMTuner.sys [2011-3-6 25984]
R3 whmice2k;Advanced Wheel Mouse Upper Filter Driver;c:\windows\system32\drivers\whmice2k.sys [2011-11-20 6885]
S3 jfdcd;jfdcd;\??\c:\docume~1\pc\locals~1\temp\jfdcd.sys --> c:\docume~1\pc\locals~1\temp\jfdcd.sys [?]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\2.0.189\McCHSvc.exe [2010-9-2 227232]
S4 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-7-29 136176]
S4 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-7-29 136176]
.
=============== Created Last 30 ================
.
2011-12-26 22:46:45 -------- d-----w- c:\program files\CCleaner
2011-12-26 22:31:22 -------- d-----w- c:\windows\pss
2011-12-26 21:11:48 729088 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iKernel.dll
2011-12-26 21:11:48 69715 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\ctor.dll
2011-12-26 21:11:48 5632 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\DotNetInstaller.exe
2011-12-26 21:11:48 311428 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\setup.dll
2011-12-26 21:11:48 266240 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iscript.dll
2011-12-26 21:11:48 192512 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iuser.dll
2011-12-26 21:11:48 188548 ----a-w- c:\program files\common files\installshield\professional\runtime\09\01\intel32\iGdi.dll
2011-12-26 21:11:39 593920 ------w- c:\windows\system32\ati2sgag.exe
2011-12-24 09:32:15 -------- d-----w- c:\documents and settings\pc\application data\ElevatedDiagnostics
2011-12-17 21:23:51 -------- d-sh--w- c:\documents and settings\all users\application data\DSS
2011-12-17 21:21:32 138056 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys
2011-12-17 21:21:03 189248 ----a-w- c:\windows\system32\PnkBstrB.exe
2011-12-17 21:21:02 75064 ----a-w- c:\windows\system32\PnkBstrA.exe
2011-12-17 21:21:00 2601752 ----a-w- c:\windows\system32\pbsvc_moh.exe
2011-12-17 20:58:26 -------- d-----w- c:\windows\system32\AGEIA
.
==================== Find3M ====================
.
2011-12-27 01:03:46 414368 -c--a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-12-17 21:21:31 138056 -c--a-w- c:\documents and settings\pc\application data\PnkBstrK.sys
2011-11-23 13:25:32 1859584 ----a-w- c:\windows\system32\win32k.sys
2011-11-13 15:16:13 499712 ----a-w- c:\windows\system32\msvcp71.dll
2011-11-13 15:16:13 348160 ----a-w- c:\windows\system32\msvcr71.dll
2011-11-05 00:36:19 544656 -c--a-w- c:\windows\system32\deployJava1.dll
2011-11-05 00:36:19 128000 ----a-w- c:\windows\system32\javacpl.cpl
2011-11-04 23:23:45 0 ----a-w- c:\windows\system32\REN3B2.tmp
2011-11-04 23:23:45 0 ----a-w- c:\windows\system32\REN3B1.tmp
2011-11-04 23:23:45 0 ----a-w- c:\windows\system32\REN3B0.tmp
2011-11-04 19:20:51 916992 ----a-w- c:\windows\system32\wininet.dll
2011-11-04 19:20:51 43520 ----a-w- c:\windows\system32\licmgr10.dll
2011-11-04 19:20:51 1469440 ------w- c:\windows\system32\inetcpl.cpl
2011-11-04 11:23:59 385024 ----a-w- c:\windows\system32\html.iec
2011-11-01 16:07:10 1288704 ----a-w- c:\windows\system32\ole32.dll
2011-10-31 17:01:44 0 ----a-w- c:\windows\system32\REN3F.tmp
2011-10-31 17:01:44 0 ----a-w- c:\windows\system32\REN3E.tmp
2011-10-31 17:01:44 0 ----a-w- c:\windows\system32\REN3D.tmp
2011-10-28 05:31:48 33280 ----a-w- c:\windows\system32\csrsrv.dll
2011-10-27 20:10:17 0 -c--a-w- c:\windows\system32\REN1F2.tmp
2011-10-27 20:10:17 0 -c--a-w- c:\windows\system32\REN1F1.tmp
2011-10-27 20:10:17 0 -c--a-w- c:\windows\system32\REN1F0.tmp
2011-10-25 13:37:08 2148864 ----a-w- c:\windows\system32\ntoskrnl.exe
2011-10-25 12:52:02 2027008 ----a-w- c:\windows\system32\ntkrnlpa.exe
2011-10-18 11:13:22 186880 ----a-w- c:\windows\system32\encdec.dll
2011-10-13 09:09:05 0 -c--a-w- c:\windows\system32\REN276.tmp
2011-10-13 09:09:05 0 -c--a-w- c:\windows\system32\REN275.tmp
2011-10-13 09:09:05 0 -c--a-w- c:\windows\system32\REN274.tmp
2011-10-13 08:21:47 0 -c--a-w- c:\windows\system32\REN1B6.tmp
2011-10-13 08:21:47 0 -c--a-w- c:\windows\system32\REN1B5.tmp
2011-10-13 08:21:47 0 -c--a-w- c:\windows\system32\REN1B4.tmp
2011-10-13 08:21:08 0 -c--a-w- c:\windows\system32\REN193.tmp
2011-10-13 08:21:08 0 -c--a-w- c:\windows\system32\REN192.tmp
2011-10-13 08:21:08 0 -c--a-w- c:\windows\system32\REN191.tmp
2011-10-13 06:15:49 0 -c--a-w- c:\windows\system32\RENFB.tmp
2011-10-13 06:15:49 0 -c--a-w- c:\windows\system32\RENFA.tmp
2011-10-13 06:15:49 0 -c--a-w- c:\windows\system32\RENF9.tmp
2011-10-10 14:22:41 692736 ----a-w- c:\windows\system32\inetcomm.dll
2011-09-28 07:06:50 599040 ----a-w- c:\windows\system32\crypt32.dll
2011-03-30 09:40:32 95576 -c--a-w- c:\program files\DSETUP.dll
2011-03-30 09:40:32 1566040 -c--a-w- c:\program files\dsetup32.dll
.
============= FINISH: 8:00:33.43 ===============







gmerovi
1.

mycity.rs/must-login.png
2.

mycity.rs/must-login.png

3.

mycity.rs/must-login.png

onaj root

mycity.rs/must-login.png

dds

mycity.rs/must-login.png



mycity.rs/must-login.png

Hvala,spartanacSRB

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav spartanacSRB!








U toku resavanja slucaja, zamolio bih te da se pridrzavas sledeceg:
Detaljno citati moja uputstva ( ili uputstva kolega koji ce me zamenjivati) i raditi iskljucivo po njima;
Ne traziti istovremeno pomoc na drugom mestu;
Nemoj koristiti druge programe za uklanjanje malware-a, osim onih za koje budes dobio uputstvo;
U toku intervencije ne koristiti USB memorijske uredjaje, dok to ne budem zatrazio;
Ukoliko ne odgovorim u roku od 48h, osvezi temu novim post-om;
Ukoliko se ne javis u roku od 5 dana, zatvoricemo slucaj.
Za vise informacija o pravilima Ambulante MyCity foruma: LINK

-------------------------------------------------------------------------------------





Preuzmi sUBs-ov ComboFix sa sledeće adrese na Desktop:


Bleeping Computer
Klikni desnim tasterom na link i odaberi opciju Save Target As... (Save Link As..., Save Linked Content As... ili sličnu);
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberi Desktop i klikni Save.



Kada preuzimanje programa bude završeno:
deaktiviraj zaštitni softver (uputstvo);
zatvori pokrenute programe;
dvoklikom pokreni program ComboFix;
u prozoru koji se otvori klikni "I Agree".
U toku rada, ComboFix će:proveriti postoji li novija verzija programa:
klikni Yes ako bude ponuđeno preuzimanje iste.ako Recovery Console nije instalirana, ponuditi instalaciju:
obavezno prihvati klikom na Yes i isprati postupak.postaviti/dati određeni broj upita/obaveštenja:
prihvati klikom na Yes ili OK.po potrebi, restartovati Windows (više puta);
na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Iskopiraj izveštaj koji je ComboFix napravio u temu na forumu:
klikni desnim tasterom miša u prozor Notepad-a i izaberi Select All;
klikni desnim tasterom miša na obeleženi tekst i izaberi Copy;
klikni desnim tasterom miša u polje za pisanje poruke i izaberi Paste.

Napomena:Izveštaj će biti sačuvan pod nazivom ComboFix.txt na sistemskoj particiji (tipična lokacija: C:\ComboFix.txt);
Ukoliko nakon slanja poruke primetiš da izveštaj nije kompletan, iskoristi opciju Prikači fajl za prilaganje file-a C:\ComboFix.txt uz poruku.








goran9888 (AMF Tim)

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Zvao sam operatera inteneta resio mi je problem nisu mi nesto ukljucili hvala na pomoci moze lock

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

spartanacSRB ::Zvao sam operatera inteneta resio mi je problem nisu mi nesto ukljucili hvala na pomoci moze lock



Bilo bi dobro da ispratis moju prethodnu poruku s'obzirom da na tvom sistemu verovatno postoji aktivan malware.








goran9888 (AMF Tim)