Koči računar

Koči računar

offline
  • lisnik 
  • Novi MyCity građanin
  • Pridružio: 20 Jan 2012
  • Poruke: 11

Imam problem sa kocenjem racunara.Kad otvaram stranice na netu nekako iide,al kad igram neku igricu
zakoci pa minut.Tacnije upali se crvena lampica i stalno gori nekih 20 do 60 sekundi.Tad otkoci i opet malo igram i isto se ponavlja.Reinstalirao sam OS i nista se nije popravilo.Instalirao novi flash player i opet nista.Podesavao sam racunar po raznoraznim savjetima sa neta i opet nista.

ComboFix 12-01-19.02 - KEMOLISNIK 21.01.2012 0:05.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.771 [GMT 1:00]
Running from: c:\documents and settings\KEMOLISNIK\My Documents\Downloads\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\windows\system32\ijl11.dll
.
.
((((((((((((((((((((((((( Files Created from 2011-12-20 to 2012-01-20 )))))))))))))))))))))))))))))))
.
.
2012-01-19 19:51 . 2012-01-19 19:51 -------- d-----w- C:\NVIDIA
2012-01-19 19:46 . 2012-01-19 19:46 -------- d-----w- C:\Intel
2012-01-14 02:08 . 2012-01-14 02:09 -------- d-----w- C:\6c1f059c40fa9869981220110f
2012-01-14 02:00 . 2012-01-14 02:01 -------- d-----w- C:\47fa4bbcbddea9334ed816ef10012b1c
2012-01-14 02:00 . 2012-01-14 02:00 -------- d-----w- C:\01ce86d789d54dc568c3
2012-01-12 06:06 . 2012-01-19 19:58 -------- d-----r- C:\Program Files
2012-01-12 06:04 . 2012-01-19 19:53 -------- d-----w- C:\Documents and Settings
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
2012-01-19 15:05 1574240 ----a-w- c:\program files\AVG Secure Search\9.0.0.23\AVG Secure Search_toolbar.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files\AVG Secure Search\9.0.0.23\AVG Secure Search_toolbar.dll" [2012-01-19 1574240]
.
[HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
[HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2011-11-28 18:01 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Facebook Update"="c:\documents and settings\KEMOLISNIK\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe" [2012-01-14 137536]
"DriverMax"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" [2012-01-19 8563624]
"DriverMax_RESTART"="c:\program files\Innovative Solutions\DriverMax\drivermax.exe" [2012-01-19 8563624]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SMSERIAL"="c:\program files\Motorola\SMSERIAL\sm56hlpr.exe" [2007-01-29 638976]
"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-11-28 3744552]
"vProt"="c:\program files\AVG Secure Search\vprot.exe" [2012-01-19 892768]
"RTHDCPL"="RTHDCPL.EXE" [2011-12-05 20065384]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2011-10-08 16744256]
"NvMediaCenter"="NvMCTray.dll" [2011-10-08 203072]
"nwiz"="c:\program files\NVIDIA Corporation\nview\nwiz.exe" [2011-10-08 1632360]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Documents and Settings\\KEMOLISNIK\\Local Settings\\Application Data\\Facebook\\Video\\Skype\\FacebookVideoCalling.exe"=
"c:\\Program Files\\FinalTorrent\\FinalTorrent.EXE"=
"c:\\Program Files\\FinalTorrent\\FTCheckForUpdates.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\NVIDIA Corporation\\NVIDIA Updatus\\daemonu.exe"=
.
R1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [1/12/2012 8:05 PM 435032]
R1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [1/12/2012 8:05 PM 314456]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [1/12/2012 8:05 PM 20568]
R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [1/19/2012 8:53 PM 2253120]
R2 RtNdPt5x;Realtek NDIS Protocol Driver;c:\windows\system32\drivers\RtNdPt5x.sys [1/19/2012 8:47 PM 22016]
R2 vToolbarUpdater;vToolbarUpdater;c:\program files\Common Files\AVG Secure Search\vToolbarUpdater\9.0.1\ToolbarUpdater.exe [1/19/2012 4:05 PM 869216]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [1/10/2012 11:26 PM 1691480]
S3 RTLTEAMING;Realtek Intermediate Driver for Ethernet Extended Features;c:\windows\system32\drivers\RTLTEAMING.SYS [1/19/2012 8:47 PM 36384]
S3 RTLVLAN;Realtek VLAN Intermediate Driver;c:\windows\system32\drivers\RTLVLAN.SYS [1/19/2012 8:47 PM 17536]
.
Contents of the 'Scheduled Tasks' folder
.
2012-01-17 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-362288127-682003330-1003Core.job
- c:\documents and settings\KEMOLISNIK\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [2012-01-14 17:15]
.
2012-01-20 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1177238915-362288127-682003330-1003UA.job
- c:\documents and settings\KEMOLISNIK\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe [2012-01-14 17:15]
.
2012-01-20 c:\windows\Tasks\FinalTorrent Update Checker.job
- c:\program files\FinalTorrent\FTCheckForUpdates.exe [2012-01-19 13:24]
.
2012-01-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-362288127-682003330-1003Core.job
- c:\documents and settings\KEMOLISNIK\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-01-11 00:21]
.
2012-01-20 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1177238915-362288127-682003330-1003UA.job
- c:\documents and settings\KEMOLISNIK\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2012-01-11 00:21]
.
2012-01-20 c:\windows\Tasks\WGASetup.job
- c:\windows\system32\KB905474\wgasetup.exe [2012-01-13 21:18]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://isearch.avg.com/?cid={A2B52165-320E-4423-8BE5-4CE24B16B29B}&mid=2267860a74b547d1bed7d1530b17eabe-c5a5589f27746c94561ad8953a47081f90ae9b03&lang=en&ds=is015&pr=sa&d=2012-01-19 16:05&v=9.0.0.23&sap=hp
TCP: DhcpNameServer = 87.250.98.250 208.67.222.222
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\Common Files\AVG Secure Search\ViProtocolInstaller\9.0.1\ViProtocol.dll
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net
Rootkit scan 2012-01-21 00:11
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2012-01-21 00:15:29
ComboFix-quarantined-files.txt 2012-01-20 23:15
.
Pre-Run: 47.595.819.008 bytes free
Post-Run: 47.804.088.320 bytes free
.
WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect
.
- - End Of File - - 618D7FD400A764A89AD0E518319AC3AD

offline
  • lisnik 
  • Novi MyCity građanin
  • Pridružio: 20 Jan 2012
  • Poruke: 11

Imam problem sa kocenjem racunara.Kad otvaram stranice na netu nekako iide,al kad igram neku igricu
zakoci 10-20 sekundi.Tacnije upali se crvena lampica i stalno gori nekih 20 do 60 sekundi.Tad otkoci i opet malo igram i isto se ponavlja.Reinstalirao sam OS i nista se nije popravilo.Instalirao novi flash player i opet nista.Podesavao sam racunar po raznoraznim savjetima sa neta i opet nista.Oprostite u neznanju vec sam probao raditi sa Combofix-om.Koristim internet od Zona.ba Bjeljina EXTRA-M PAKET.


DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 6.0.2900.5512
Run by KEMOLISNIK at 1:47:37 on 2012-01-21
.
============== Running Processes ===============
.
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://isearch.avg.com/?cid={A2B52165-320E-4423-8BE5-4CE24B16B29B}&mid=2267860a74b547d1bed7d1530b17eabe-c5a5589f27746c94561ad8953a47081f90ae9b03&lang=en&ds=is015&pr=sa&d=2012-01-19 16:05:10&v=9.0.0.23&sap=hp
BHO: Java(tm) Plug-In SSV Helper: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live Pomoc za prijavu: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\9.0.0.23\AVG Secure Search_toolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: AVG Security Toolbar: {95b7759c-8c7f-4bf1-b163-73684a933233} - c:\program files\avg secure search\9.0.0.23\AVG Secure Search_toolbar.dll
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
uRun: [Facebook Update] "c:\documents and settings\kemolisnik\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
uRun: [DriverMax] "c:\program files\innovative solutions\drivermax\drivermax.exe" -agent
uRun: [DriverMax_RESTART] "c:\program files\innovative solutions\drivermax\drivermax.exe" -RESTART
mRun: [SMSERIAL] c:\program files\motorola\smserial\sm56hlpr.exe
mRun: [avast] "c:\program files\avast software\avast\avastUI.exe" /nogui
mRun: [vProt] "c:\program files\avg secure search\vprot.exe"
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0030-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_30-windows-i586.cab
TCP: DhcpNameServer = 87.250.98.250 208.67.222.222
TCP: Interfaces\{4072BE01-AFD8-41E9-B8DE-84C58CB8B9F3} : DhcpNameServer = 87.250.98.250 208.67.222.222
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\9.0.1\ViProtocol.dll
.
============= SERVICES / DRIVERS ===============
.
R? Ambfilt;Ambfilt
R? fsssvc;Usluga Windows Live Obiteljska sigurnost
R? RTLTEAMING;Realtek Intermediate Driver for Ethernet Extended Features
R? RTLVLAN;Realtek VLAN Intermediate Driver
S? aswFsBlk;aswFsBlk
S? aswSnx;aswSnx
S? aswSP;aswSP
S? avast! Antivirus;avast! Antivirus
S? fssfltr;fssfltr
S? nvUpdatusService;NVIDIA Update Service Daemon
S? RtNdPt5x;Realtek NDIS Protocol Driver
S? vToolbarUpdater;vToolbarUpdater
.
=============== Created Last 30 ================
.
2012-01-20 23:49:14 -------- d-----w- c:\documents and settings\kemolisnik\application data\Qualys
2012-01-20 23:03:59 -------- d-sha-r- C:\cmdcons
2012-01-20 23:02:38 98816 ----a-w- c:\windows\sed.exe
2012-01-20 23:02:38 518144 ----a-w- c:\windows\SWREG.exe
2012-01-20 23:02:38 256000 ----a-w- c:\windows\PEV.exe
2012-01-20 23:02:38 208896 ----a-w- c:\windows\MBR.exe
2012-01-20 22:11:12 -------- d-----w- c:\windows\system32\Adobe
2012-01-19 19:53:25 -------- d-----w- c:\documents and settings\all users\application data\NVIDIA Corporation
2012-01-19 19:53:15 602432 ----a-w- c:\windows\system32\easyupdatusapiu.dll
2012-01-19 19:51:47 -------- d-----w- C:\NVIDIA
2012-01-19 19:48:41 80488 ----a-w- c:\windows\system32\RtNicProp32.dll
2012-01-19 19:48:41 102416 ----a-w- c:\windows\system32\RTNUninst32.dll
2012-01-19 19:47:41 65824 ----a-w- c:\windows\system32\RTLTEAMING_NB.DLL
2012-01-19 19:47:41 36384 ----a-w- c:\windows\system32\drivers\RTLTEAMING.SYS
2012-01-19 19:47:41 22016 ----a-w- c:\windows\system32\drivers\RtNdPt5x.sys
2012-01-19 19:47:41 17536 ----a-w- c:\windows\system32\drivers\RTLVLAN.SYS
2012-01-19 19:46:49 221184 ----a-w- c:\windows\system32\wmpns.dll
2012-01-19 19:46:39 53248 ----a-w- c:\windows\system32\CSVer.dll
2012-01-19 19:22:29 73728 ----a-w- c:\windows\system32\javacpl.cpl
2012-01-19 19:22:29 472808 ----a-w- c:\windows\system32\deployJava1.dll
2012-01-19 18:14:38 19569 ----a-w- c:\windows\000001_.tmp
2012-01-19 17:31:26 -------- d-----w- c:\documents and settings\kemolisnik\application data\FinalTorrent
2012-01-19 16:57:43 -------- d-----w- c:\windows\system32\scripting
2012-01-19 16:57:42 -------- d-----w- c:\windows\system32\en
2012-01-19 16:57:42 -------- d-----w- c:\windows\l2schemas
2012-01-19 16:57:41 -------- d-----w- c:\windows\system32\bits
2012-01-19 16:52:03 -------- d-----w- c:\windows\network diagnostic
2012-01-19 16:41:07 -------- d-----w- c:\windows\system32\XPSViewer
2012-01-19 16:17:20 12791488 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
2012-01-19 16:14:01 21736 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
2012-01-19 16:14:00 11368 ----a-w- c:\windows\system32\RtkCoLDRXP.dll
2012-01-19 16:13:59 64616 ----a-w- c:\windows\system32\RtkCoInstIIXP.dll
2012-01-19 16:05:45 285176 ----a-w- c:\windows\system32\nvdrsdb1.bin
2012-01-19 16:05:45 285176 ----a-w- c:\windows\system32\nvdrsdb0.bin
2012-01-19 16:05:45 1 ----a-w- c:\windows\system32\nvdrssel.bin
2012-01-19 16:05:32 -------- d-----w- c:\program files\NVIDIA Corporation
2012-01-19 16:05:24 919872 ----a-w- c:\windows\system32\nvdispco32.dll
2012-01-19 16:05:22 17240064 ----a-w- c:\windows\system32\nvcompiler.dll
2012-01-19 16:05:21 65536 ----a-w- c:\windows\system32\OpenCL.dll
2012-01-19 16:05:17 877376 ----a-w- c:\windows\system32\nvgenco32.dll
2012-01-19 15:05:34 -------- d-----w- c:\documents and settings\kemolisnik\local settings\application data\Innovative Solutions
2012-01-19 15:05:31 -------- d-----w- c:\program files\Innovative Solutions
2012-01-19 15:05:11 -------- d-----w- c:\documents and settings\kemolisnik\application data\AVG Secure Search
2012-01-19 15:05:10 -------- d-----w- c:\documents and settings\all users\application data\AVG Secure Search
2012-01-19 15:05:06 -------- d-----w- c:\program files\common files\AVG Secure Search
2012-01-19 15:05:05 -------- d-----w- c:\program files\AVG Secure Search
2012-01-19 15:05:02 -------- d--h--w- c:\documents and settings\all users\application data\Common Files
2012-01-19 14:56:21 -------- d-----w- c:\documents and settings\kemolisnik\application data\com.w3i.FlipToast
2012-01-19 14:55:43 -------- d-----w- c:\program files\FinalTorrent
2012-01-19 14:55:30 -------- d-----w- c:\documents and settings\kemolisnik\local settings\application data\Adobe
2012-01-16 17:07:19 5632 ----a-w- c:\windows\system32\ptpusb.dll
2012-01-16 17:07:15 159232 ----a-w- c:\windows\system32\ptpusd.dll
2012-01-16 17:07:10 15104 ----a-w- c:\windows\system32\drivers\usbscan.sys
2012-01-16 14:07:58 -------- d-----w- c:\documents and settings\kemolisnik\local settings\application data\Identities
2012-01-14 17:15:39 -------- d-----w- c:\documents and settings\kemolisnik\local settings\application data\Temp
2012-01-14 17:15:32 -------- d-----w- c:\documents and settings\kemolisnik\local settings\application data\Facebook
2012-01-14 02:08:53 89088 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\filterpipelineprintproc.dll
2012-01-14 02:08:11 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2012-01-14 02:08:11 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2012-01-14 02:08:11 597504 ------w- c:\windows\system32\spool\prtprocs\w32x86\printfilterpipelinesvc.exe
2012-01-14 02:08:11 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2012-01-14 02:08:11 575488 ------w- c:\windows\system32\xpsshhdr.dll
2012-01-14 02:08:11 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2012-01-14 02:08:11 1676288 ------w- c:\windows\system32\xpssvcs.dll
2012-01-14 02:08:11 117760 ------w- c:\windows\system32\prntvpt.dll
2012-01-14 02:08:08 -------- d-----w- C:\6c1f059c40fa9869981220110f
2012-01-14 02:03:09 -------- d-----w- c:\program files\MSXML 6.0
2012-01-14 02:00:32 -------- d-----w- C:\01ce86d789d54dc568c3
2012-01-13 23:07:39 73216 ------w- c:\windows\system32\drivers\atintuxx.sys
2012-01-13 02:00:47 -------- d-----w- c:\windows\system32\KB905474
2012-01-12 20:38:40 -------- d-----w- c:\program files\Softoria Capture
2012-01-12 19:05:34 435032 ----a-w- c:\windows\system32\drivers\aswSnx.sys
2012-01-12 19:05:16 41184 ----a-w- c:\windows\avastSS.scr
2012-01-12 19:05:03 -------- d-----w- c:\program files\AVAST Software
2012-01-12 19:05:03 -------- d-----w- c:\documents and settings\all users\application data\AVAST Software
2012-01-12 09:47:11 353792 -c----w- c:\windows\system32\dllcache\srv.sys
2012-01-12 09:45:28 455680 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2012-01-12 09:45:01 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
2012-01-12 09:45:01 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
2012-01-12 09:44:48 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2012-01-12 09:44:48 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2012-01-12 09:44:48 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2012-01-12 09:44:48 284160 -c----w- c:\windows\system32\dllcache\pdh.dll
2012-01-12 09:44:48 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2012-01-12 09:44:48 110592 -c----w- c:\windows\system32\dllcache\services.exe
2012-01-12 09:44:47 730112 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2012-01-12 09:44:47 714752 -c----w- c:\windows\system32\dllcache\ntdll.dll
2012-01-12 09:44:47 617472 -c----w- c:\windows\system32\dllcache\advapi32.dll
2012-01-12 09:44:46 2189952 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2012-01-12 09:44:46 2146304 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2012-01-12 09:44:45 2024448 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2012-01-12 09:42:21 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2012-01-12 09:41:52 272128 -c----w- c:\windows\system32\dllcache\bthport.sys
2012-01-12 09:41:52 272128 ------w- c:\windows\system32\drivers\bthport.sys
2012-01-12 09:39:56 471552 -c----w- c:\windows\system32\dllcache\aclayers.dll
2012-01-12 09:30:20 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2012-01-12 09:29:28 2560 ------w- c:\windows\system32\xpsp4res.dll
2012-01-12 09:29:27 215552 -c----w- c:\windows\system32\dllcache\wordpad.exe
2012-01-12 09:29:18 744448 -c----w- c:\windows\system32\dllcache\helpsvc.exe
2012-01-12 06:09:05 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2012-01-12 06:08:24 57600 ----a-w- c:\windows\system32\drivers\redbook.sys
2012-01-12 06:04:41 13753 ----a-r- c:\windows\SET8.tmp
2012-01-12 06:04:39 1086058 ----a-r- c:\windows\SET4.tmp
2012-01-12 06:04:37 1042903 ----a-r- c:\windows\SET3.tmp
2012-01-12 06:04:33 -------- d-----w- c:\windows\system32\CatRoot2
2012-01-12 06:04:33 -------- d-----w- c:\windows\system32\CatRoot
2012-01-12 06:04:10 -------- d-----w- C:\Documents and Settings
.
==================== Find3M ====================
.
2011-12-13 17:27:30 7069288 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
2011-12-08 06:09:16 327400 ----a-w- c:\windows\system32\drivers\Rtenicxp.sys
2011-12-05 14:49:12 20065384 ----a-w- c:\windows\RTHDCPL.EXE
.
============= FINISH: 1:49:50,93 ===============


mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

mycity.rs/must-login.png

offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Pozdrav lisnik!





-----------------------------------------


ComboFix nije dijagnosticki alat kao ovi iz uputstva. To je jako mocan alat, koji nepravilnim rukovanjem, moze unistiti operativni sistem ili pak obrisati sve padatke sa hard diska. Pokrece se iskljucivo uz predlog, nadleznost i detaljno uputstvo helpera koji je expert u toj oblasti i zna sta radi.

Za ubuduce, ne pokreci ComboFix na svoju ruku!!!



-----------------------------------------





Na tvom sistemu ne postoji aktivan malware. Verovatno je problem hardware-ske prirode (takodje drajvere si trazio i instalirao verovatno uz pomoc Driver Max-a pa je mozda i to problem - te automatizovane alate treba maksimalno izbegavati). Otvori novu temu u odgovarajucem potforumu, objasni problem i dobices dalja uputstva.





Arrow

Prekopiraj fajl sa lokacije:

C:\Qoobox\Quarantine\C\WINDOWS\system32\ijl11.dll.vir


na ovu lokaciju C:\Windows\System32 i obrisi ekstenziju .vir fajlu tako da njegov naziv bude ijl11.dll


U pitanju je legitiman fajl koji je CF obrisao.



Arrow

Skini sledecu aplikaciju na Desktop i pokreni: http://download.bleepingcomputer.com/sUBs/CF_UNINST.EXE

Ona bi trebala da ukloni CF sa tvog sistema i sve sto je on uz put kreirao.

Proveri ako postoji CF na sledecoj lokaciji i obrisi ga: c:\documents and settings\KEMOLISNIK\My Documents\Downloads\ComboFix.exe







offline
  • lisnik 
  • Novi MyCity građanin
  • Pridružio: 20 Jan 2012
  • Poruke: 11

Hvala najljepsa na pomoci.

Ko je trenutno na forumu
 

Ukupno su 1068 korisnika na forumu :: 44 registrovanih, 6 sakrivenih i 1018 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: aramis s, Battlehammer, bojan_t, CrazyDiablo, Darko8, Djokislav, doom83, DPera, draganca, HrcAk47, Insan, ivan979, ivica976, kinez88, Koca Popovic, kolle.the.kid, Koridor 11, krkalon, Kubovac, Leonov, ljuba, MB120mm, Mi lao shu, Miki01, milenko crazy north, MiroslavD, nenad81, nick79, novator, Panter, pein, Povratak1912, procesor, raptorsi, Regrut Boskica, shone34, Sir Budimir, Srle993, stankolich, stegonosa, Stoilkovic, voja64, Wolfaim, zixmix