MyCity » Ambulanta -> Arhiva Ambulante » Molim pomoc :(!!!

Molim pomoc :(!!!

Napisano na dan: 8.10.2007
4

Molim pomoc :(!!!
Pagination Prethodna strana

Idi na vrh

Poslao: 19 Okt 2007 13:04
Idi na vrh
offline
  • Pridružio: 08 Okt 2007
  • Poruke: 18

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:59:28, on 19.10.2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\system32\VTtrayp.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe
C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\CA\eTrustITM\realmon.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSQDMN.exe
C:\Program Files\CA\SharedComponents\iTechnology\igateway.exe
C:\Program Files\CA\eTrustITM\InoRpc.exe
C:\Program Files\CA\eTrustITM\InoRT.exe
C:\Program Files\CA\eTrustITM\InoTask.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSSAFMGR.exe
C:\Documents and Settings\HT\Desktop\New Folder\H_J_T.exe.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 10.16.4.3:8080
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [VTTrayp] VTtrayp.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\ASUSTeK\ASUSDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [Realtime Monitor] "C:\Program Files\CA\eTrustITM\realmon.exe" -s
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe AcRdB7_0_9
O4 - HKCU\..\Run: [Uniblue RegistryBooster 2] C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe /S
O4 - HKCU\..\Run: [eyeBeam SIP Client] "C:\Program Files\XtenNetworksInc\eyeBeam\eyeBeam.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: I&zvoz u Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra button: Istraživanje - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4C1A0414-4868-4060-9E64-29C0285F35E0}: NameServer = 212.39.98.161,212.39.98.162
O23 - Service: CA License Client (CA_LIC_CLNT) - Unknown owner - \lic98rmt.exe (file missing)
O23 - Service: DialWays - Master Soft - C:\Program Files\DialWays\dwserv.exe
O23 - Service: eTrust Common Services Log Daemon (ECSLOGD) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSLOGD.exe
O23 - Service: eTrust Common Services Store-And-Forward Manager (ECSSAFMGR) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSSAFMGR.exe
O23 - Service: eTrust Common Services (Transport) (eCS_Transport) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\ECSQDMN.exe
O23 - Service: eTFWService - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\eTrust Common Services\Bin\eTFWService.exe
O23 - Service: iTechnology iGateway 4.0 (iGateway) - Computer Associates International, Inc. - C:\Program Files\CA\SharedComponents\iTechnology\igateway.exe
O23 - Service: eTrust ITM RPC Service (InoRPC) - Computer Associates International, Inc. - C:\Program Files\CA\eTrustITM\InoRpc.exe
O23 - Service: eTrust ITM Realtime Service (InoRT) - Computer Associates International, Inc. - C:\Program Files\CA\eTrustITM\InoRT.exe
O23 - Service: eTrust ITM Job Service (InoTask) - Computer Associates International, Inc. - C:\Program Files\CA\eTrustITM\InoTask.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Distributed Application Client (MOVEESS) - Unknown owner - C:\WINDOWS\SYSTEM32\RUNDLLFOROUR.EXE (file missing)
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - Unknown owner - C:\Program Files\WinPcap\rpcapd.exe

--
End of file - 5829 bytes



Fajl sam poslala upravo



Poslao: 19 Okt 2007 13:29
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Otvori Control Panel > Administrative Tools > Services i u desnoj koloni nadji servis pod imenom Distributed Application Client.
Klikni na njega desnim dugmetom misa i odaberi opciju Stop.
Klikni opet na njega desnim dugmetom misa i odaberi Properties.
U dijalogu koji se bude otvorio postavi Startup type na Disabled.
Nakon toga pronadji i obrisi fajl C:\WINDOWS\SYSTEM32\RUNDLLFOROUR.EXE


Time bi trebala prica da bude gotova.



Poslao: 22 Okt 2007 13:59
Idi na vrh
offline
  • Pridružio: 08 Okt 2007
  • Poruke: 18

OK, odradila sam, hvala ti puno na svemu...

MyCity » Ambulanta -> Arhiva Ambulante » Molim pomoc :(!!!

Ko je trenutno na forumu
 

Ukupno su 1153 korisnika na forumu :: 105 registrovanih, 16 sakrivenih i 1032 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 015, 04bokibole, acov34, AK - 230, Areal84, Ares12356, Asteker, Avalon015, babaroga, Banovo Brdo, Betty25, bojan_t, boromir, Bosnjo, boxbole, Brabant, celik, Centauro, Cian, cyprus, d.arsenal321, daedal, dearg, debeli, Django777, Dogma21, Dorcolac, Dovla 1980, dozorni, dragan_mig31, Dragon Order, Dzigy, Feller, gacesam, gagidjuric, Gogi_avio, GveX, icemilos, Inner-Cell, interesujeme, ivan1973, janbo, jon istvan, JosipRi, Jozo74, Još malo pa deda, Kubovac, kunktator, kuntalo, Lucije Kvint, M74AB3, Mackomen, Mae, Malahit, markolopin, markoni.slo, Marky, marsovac 2, mačković, Mercury, miki kv, Milan A. Nikolic, milutin134, MiroslavD, mm1811, momcilob55, Mskok, Murko, neutrino, Novakomp, novator, Panter, Papadubi, Parker, pisac12, PlayerOne, Povratak1912, predragc, proka89, RAKITNICA, repac, Romibrat, royst33, Sagotolio, Saša1989, Seeker, Shadow soldier, shota91, Sirius, Smiljke, Srle993, stankolich, stokssone, Su 57, SympathyForTheDevil, tehnika, tomigun, Trivo, ujke, vathra, vidra1, Vladonius, voja64, x011, yiyi