Dva problema

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 06 Avg 2013 19:44

Prvi problem je sto sam instalirao neki program za skidanje youtube snimaka i on mi je bez mog odobrenja instalirao neko sranje, pobrisao sam te gluposti ali me i dalje redirektuje na ovaj sad kad god otvorim nov tab iskljucivo u google chrome-u www1.delta-search.com/?babsrc=NT_ss_SU&mntr.....4&tsp=4966 kako to da obrisem?
drugi problem imam sa lapotopm to cu edit..

Dopuna: 06 Avg 2013 19:52

drugi problem je sto mi laptop jakoooooo sporo radi, pre par dana je bio na redovnoj kontroli radi garancije i hardverski je sve okej.. tako da mogu samo da pretpostavim da je u pitanju virus.. skenirao sam, ali antivirus ne pronalazi nista, sta da radim?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav Lazare,

Isprati sledece uputstvo:

http://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 06 Avg 2013 20:33

okej.. laptop se prvenstveno jakoo sporo pali i to je najveci problem, sto se tice rada i nije toliko spor.. sad cu postaviti logove

Dopuna: 06 Avg 2013 20:36

kad krene lose krenulo je ;/ ne mogu da skinem taj dos program.. kao da je sajt offline :O jel vama okej link?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Probaj sa jednog od ova dva linka

http://download.bleepingcomputer.com/sUBs/dds.com
http://download.bleepingcomputer.com/sUBs/dds.pif

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Napisano: 06 Avg 2013 20:51

uspeo sam evo ga log..
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 10.0.9200.16635 BrowserJavaVersion: 10.25.2
Run by Marijana at 20:48:48 on 2013-08-06
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.2806.1644 [GMT 2:00]
.
AV: avast! Antivirus *Enabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}
SP: avast! Antivirus *Enabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
E:\Windows\system32\wininit.exe
E:\Windows\system32\lsm.exe
E:\Windows\system32\nvvsvc.exe
E:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
E:\Program Files\AVAST Software\Avast\AvastSvc.exe
E:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
E:\Windows\system32\nvvsvc.exe
E:\Windows\system32\WLANExt.exe
E:\Windows\system32\conhost.exe
E:\Windows\system32\Dwm.exe
E:\Windows\Explorer.EXE
E:\Windows\system32\taskhost.exe
E:\Windows\System32\spoolsv.exe
E:\Windows\System32\rundll32.exe
E:\Program Files\AVAST Software\Avast\AvastUI.exe
E:\Windows\system32\SearchIndexer.exe
E:\Program Files\Windows Media Player\wmpnetwk.exe
E:\Program Files\Common Files\Java\Java Update\jusched.exe
E:\Program Files\Skype\Phone\Skype.exe
E:\Program Files\NVIDIA Corporation\Display\nvtray.exe
E:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
E:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
E:\Users\Marijana\AppData\Local\Google\Chrome\Application\chrome.exe
E:\Users\Marijana\AppData\Local\Google\Chrome\Application\chrome.exe
E:\Users\Marijana\AppData\Local\Google\Chrome\Application\chrome.exe
E:\Users\Marijana\AppData\Local\Google\Chrome\Application\chrome.exe
E:\Windows\system32\wbem\wmiprvse.exe
E:\Windows\system32\taskeng.exe
E:\Windows\system32\SearchProtocolHost.exe
E:\Windows\system32\SearchFilterHost.exe
E:\Users\Marijana\AppData\Local\Google\Chrome\Application\chrome.exe
E:\Windows\system32\conhost.exe
E:\Windows\system32\wbem\wmiprvse.exe
E:\Windows\system32\svchost.exe -k DcomLaunch
E:\Windows\system32\svchost.exe -k RPCSS
E:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
E:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
E:\Windows\system32\svchost.exe -k LocalService
E:\Windows\system32\svchost.exe -k netsvcs
E:\Windows\system32\svchost.exe -k GPSvcGroup
E:\Windows\system32\svchost.exe -k NetworkService
E:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
E:\Windows\system32\svchost.exe -k imgsvc
E:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
E:\Windows\System32\svchost.exe -k secsvcs
E:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - e:\program files\java\jre7\bin\ssv.dll
BHO: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - e:\program files\avast software\avast\aswWebRepIE.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - e:\program files\java\jre7\bin\jp2ssv.dll
TB: avast! Online Security: {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - e:\program files\avast software\avast\aswWebRepIE.dll
uRun: [Google Update] "e:\users\marijana\appdata\local\google\update\GoogleUpdate.exe" /c
uRun: [Skype] "e:\program files\skype\phone\Skype.exe" /minimized /regrun
mRun: [avast] "e:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [SunJavaUpdateSched] "e:\program files\common files\java\java update\jusched.exe"
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{166B6045-D4E3-4596-AF2C-519BEA882F75} : DHCPNameServer = 172.16.40.242
TCP: Interfaces\{F801ED75-3540-49F2-8483-6AF023B3F0F3} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{F801ED75-3540-49F2-8483-6AF023B3F0F3}\D6F6A616F5D62756A716 : DHCPNameServer = 192.168.1.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - e:\program files\common files\skype\Skype4COM.dll
SSODL: WebCheck - <orphaned>
.
================= FIREFOX ===================
.
FF - ProfilePath - e:\users\marijana\appdata\roaming\mozilla\firefox\profiles\npia1vxe.default\
FF - plugin: e:\program files\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: e:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: e:\program files\microsoft silverlight\5.1.20513.0\npctrlui.dll
FF - plugin: e:\program files\nvidia corporation\3d vision\npnv3dv.dll
FF - plugin: e:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll
FF - plugin: e:\users\marijana\appdata\local\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: e:\windows\system32\macromed\flash\NPSWF32_11_7_700_224.dll
FF - plugin: e:\windows\system32\npDeployJava1.dll
FF - plugin: e:\windows\system32\npmproxy.dll
FF - ExtSQL: 2013-07-06 11:39; webbooster@iminent.com; e:\users\marijana\appdata\roaming\mozilla\firefox\profiles\npia1vxe.default\extensions\webbooster@iminent.com.xpi
.
============= SERVICES / DRIVERS ===============
.
R0 aswRvrt;aswRvrt;e:\windows\system32\drivers\aswRvrt.sys [2013-2-28 49376]
R0 aswVmm;aswVmm;e:\windows\system32\drivers\aswVmm.sys [2013-2-28 175176]
R1 aswSnx;aswSnx;e:\windows\system32\drivers\aswSnx.sys [2012-7-9 770344]
R1 aswSP;aswSP;e:\windows\system32\drivers\aswSP.sys [2012-7-9 369584]
R2 aswFsBlk;aswFsBlk;e:\windows\system32\drivers\aswFsBlk.sys [2012-7-9 29816]
R2 aswMonFlt;aswMonFlt;e:\windows\system32\drivers\aswMonFlt.sys [2012-7-9 66336]
R2 avast! Antivirus;avast! Antivirus;e:\program files\avast software\avast\AvastSvc.exe [2013-6-23 46808]
R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;e:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;e:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2013-1-18 383264]
R3 bbcap;bbcap;e:\windows\system32\drivers\bbcap.sys [2013-6-22 4096]
R3 L1C;NDIS Miniport Driver for Atheros AR813x/AR815x PCI-E Ethernet Controller;e:\windows\system32\drivers\L1C62x86.sys [2010-11-8 68208]
R3 MEI;Intel(R) Management Engine Interface ;e:\windows\system32\drivers\HECI.sys [2010-10-20 41088]
S2 SkypeUpdate;Skype Updater;e:\program files\skype\updater\Updater.exe [2013-2-28 161384]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;e:\windows\system32\drivers\b57nd60x.sys [2009-7-14 229888]
S3 dmvsc;dmvsc;e:\windows\system32\drivers\dmvsc.sys [2010-11-21 62464]
S3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;e:\windows\system32\drivers\rdpvideominiport.sys [2013-5-2 14848]
S3 RSUSBSTOR;RtsUStor.Sys Realtek USB Card Reader;e:\windows\system32\drivers\RtsUStor.sys [2012-7-10 197224]
S3 RSUSBVSTOR;RTSUVSTOR.Sys Realtek USB Card Reader;e:\windows\system32\drivers\RtsUVStor.sys [2012-7-10 226408]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);e:\windows\system32\drivers\ss_bbus.sys [2009-9-19 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);e:\windows\system32\drivers\ss_bmdfl.sys [2009-9-19 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;e:\windows\system32\drivers\ss_bmdm.sys [2009-9-19 123648]
S3 Synth3dVsc;Synth3dVsc;e:\windows\system32\drivers\Synth3dVsc.sys [2010-11-21 77184]
S3 terminpt;Microsoft Remote Desktop Input Driver;e:\windows\system32\drivers\terminpt.sys [2013-5-2 24064]
S3 TsUsbFlt;TsUsbFlt;e:\windows\system32\drivers\TsUsbFlt.sys [2013-5-2 49664]
S3 TsUsbGD;Remote Desktop Generic USB Device;e:\windows\system32\drivers\TsUsbGD.sys [2013-5-2 27136]
S3 tsusbhub;tsusbhub;e:\windows\system32\drivers\tsusbhub.sys [2010-11-21 112640]
.
=============== Created Last 30 ================
.
2013-08-06 09:50:50 7143960 ----a-w- e:\programdata\microsoft\windows defender\definition updates\{bf7cdbaa-7414-42d6-98e6-c2ae5e8a11a8}\mpengine.dll
2013-07-10 11:02:49 1247744 ----a-w- e:\windows\system32\DWrite.dll
2013-07-10 11:02:47 1620480 ----a-w- e:\windows\system32\WMVDECOD.DLL
2013-07-10 11:02:45 509440 ----a-w- e:\windows\system32\qedit.dll
2013-07-10 11:02:42 2347520 ----a-w- e:\windows\system32\win32k.sys
2013-07-10 11:02:35 988672 ----a-w- e:\program files\windows journal\JNTFiltr.dll
2013-07-10 11:02:35 936448 ----a-w- e:\program files\common files\microsoft shared\ink\journal.dll
2013-07-10 11:02:34 969216 ----a-w- e:\program files\windows journal\JNWDRV.dll
2013-07-10 11:02:33 1221632 ----a-w- e:\program files\windows journal\NBDoc.DLL
2013-07-10 11:02:11 680960 ----a-w- e:\program files\windows defender\MpSvc.dll
2013-07-10 11:02:10 392704 ----a-w- e:\program files\windows defender\MpClient.dll
2013-07-10 11:02:10 224768 ----a-w- e:\program files\windows defender\MpCommu.dll
.
==================== Find3M ====================
.
2013-07-07 15:03:05 94632 ----a-w- e:\windows\system32\WindowsAccessBridge.dll
2013-07-07 15:03:01 867240 ----a-w- e:\windows\system32\npDeployJava1.dll
2013-07-07 15:03:01 789416 ----a-w- e:\windows\system32\deployJava1.dll
2013-06-28 00:09:08 770344 ----a-w- e:\windows\system32\drivers\aswSnx.sys
2013-06-28 00:09:08 175176 ----a-w- e:\windows\system32\drivers\aswVmm.sys
2013-06-22 14:57:19 4608 ----a-w- e:\windows\system32\bbchlp.dll
2013-06-22 14:57:19 4096 ----a-w- e:\windows\system32\drivers\bbcap.sys
2013-06-22 14:57:19 30720 ----a-w- e:\windows\system32\bbcap.dll
2013-06-12 09:49:24 71048 ----a-w- e:\windows\system32\FlashPlayerCPLApp.cpl
2013-06-12 09:49:24 692104 ----a-w- e:\windows\system32\FlashPlayerApp.exe
2013-06-11 23:43:37 1767936 ----a-w- e:\windows\system32\wininet.dll
2013-06-11 23:43:00 2877440 ----a-w- e:\windows\system32\jscript9.dll
2013-06-11 23:42:58 61440 ----a-w- e:\windows\system32\iesetup.dll
2013-06-11 23:42:58 109056 ----a-w- e:\windows\system32\iesysprep.dll
2013-06-11 22:51:45 71680 ----a-w- e:\windows\system32\RegisterIEPKEYs.exe
2013-06-07 02:37:52 2706432 ----a-w- e:\windows\system32\mshtml.tlb
2013-05-13 04:45:55 140288 ----a-w- e:\windows\system32\cryptsvc.dll
2013-05-13 04:45:55 1160192 ----a-w- e:\windows\system32\crypt32.dll
2013-05-13 04:45:55 103936 ----a-w- e:\windows\system32\cryptnet.dll
2013-05-13 03:08:10 903168 ----a-w- e:\windows\system32\certutil.exe
2013-05-13 03:08:06 43008 ----a-w- e:\windows\system32\certenc.dll
2013-05-10 03:20:54 24576 ----a-w- e:\windows\system32\cryptdlg.dll
2013-05-09 08:59:10 61680 ----a-w- e:\windows\system32\drivers\aswRdr2.sys
2013-05-09 08:59:10 49376 ----a-w- e:\windows\system32\drivers\aswRvrt.sys
2013-05-09 08:59:09 66336 ----a-w- e:\windows\system32\drivers\aswMonFlt.sys
2013-05-09 08:58:37 41664 ----a-w- e:\windows\avastSS.scr
.
============= FINISH: 20:49:45.96 ===============

Dopuna: 06 Avg 2013 20:52

mycity.rs/must-login.png

• 1Ovo se svidja korisniku: Voja1978
  
  Registruj se da bi pohvalio/la poruku!

Preuzmi "Xplode"-ov AdwCleaner () i sacuvaj ga na Desktop

Dvoklikom pokreni program.
Klikni na dugme [Delete] i pricekaj da program zavrsi.
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok

Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"
Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt






Preuzmite program GMER sa donjeg linka na Desktop:


GMER download
Kliknite dati link;
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberite Desktop i kliknite Save.


Dvoklikom pokrenite GMER.
Sačekajte da se završi uvodno skeniranje - ukoliko se pojavi bilo kakav upit, kliknite No;

kliknite Scan i sačekajte da skeniranje bude završeno;

kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom Gmer1);

kliknite desnim tasterom u prozor programa Gmer i odaberite Options > 3rd party - kliknite Scan;

po završetku skeniranja kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom Gmer2);

kliknite taster >>> i odaberite Autostart karticu;

po završetku kratkotrajnog skeniranja, kliknite Copy;

otvorite Notepad i u njega postavite kopirani tekst - izveštaj sačuvajte na Desktop (pod nazivom Gmer3);

Slikoviti prikaz postupka

Priložite sva tri izveštaja uz poruku korišćenjem opcije Prikači fajl.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Sta je sa Gmer logovima?

Imas li jos uvek delta search kao pocetnu?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Napisano: 06 Avg 2013 22:05

argus ::Sta je sa Gmer logovima?

Imas li jos uvek delta search kao pocetnu?
vise nemam delta search, sad cu da okacim i gmer logove.. prvi je potrajao poprilicno :/

Dopuna: 06 Avg 2013 22:26

mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Cist je sistem, nemas malware.

Samo da proverim jos nesto.



Preuzmi zoek.exe sa ovog ili ovog linka i sačuvaj ga na Desktop.


zatvori browser i ostale pokrenute programe;
deaktiviraj zaštitni softver ( po potrebi ) Uputstvo ;
dvoklikom pokreni zoek.exe;
pričekaj da se alat startuje ...


U beli okvir prozora iskopiraj sledeći tekst:


filesrcm;
startupall;
skipfix-iedefaults;
firefoxlook;
chromelook;


Klikni na dugme i pričekaj da se skeniranje završi.


zoek ce po potrebi, restartovati Windows a na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Napomena:Izveštaj će biti sačuvan pod nazivom zoek-results.log na sistemskoj particiji (tipična lokacija: C:\zoek-results.log)


Kopiraj sadrzaj tog loga u poruku.