MyCity » Ambulanta -> Arhiva Ambulante » Nepoznati program me izbacuje iz igrica i drugih programa

Nepoznati program me izbacuje iz igrica i drugih programa

Napisano na dan: 2.8.2013
3

Nepoznati program me izbacuje iz igrica i drugih programa
Pagination Prethodna strana

Idi na vrh

Poslao: 04 Avg 2013 20:25
Idi na vrh
offline
  • Pridružio: 19 Jul 2012
  • Poruke: 55
  • Gde živiš: Naissus

Nisam naso avast na listi u Add or Remove Programs , pokrenuo sam avast uninstall utility iz safe mode i uklonio avast , al imam problema sa safe modom jer mi poremeti rezoluciju , sa avast uninstall utility sam usepo jer je prozor manji ali AppRemover ima izduzen prozor i nikako da dodjem do start dugmeta , probao sam da pomerama levo desno , gore dole , da sklanjam task bar al jok.

Poslao: 04 Avg 2013 20:41
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

avast uninstall alat si uspeo pokrenuti iz safe moda a AppRemover nemozes? Pokreni App Remover onda iz normal moda.

Poslao: 04 Avg 2013 20:56
Idi na vrh
offline
  • Pridružio: 19 Jul 2012
  • Poruke: 55
  • Gde živiš: Naissus

Pokrenuo sam , ali kad je trazilo instalirane aplikacije nije naslo avast. Valjda to znaci da je u potpunosti izbirsan. evo log.
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 10.11.2
Run by Korisnik 1 at 20:52:45 on 2013-08-04
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.155 [GMT 2:00]
.
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
D:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k netsvcs
.
============== Pseudo HJT Report ===============
.
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [PinnacleDriverCheck] c:\windows\system32\\PSDrvCheck.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
uPolicies-Explorer: NoDriveTypeAutoRun = dword:323
uPolicies-Explorer: NoDriveAutoRun = dword:67108863
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{10102F03-16E6-403E-85F3-B1B54F19C469} : DHCPNameServer = 10.11.12.254 212.200.45.11
TCP: Interfaces\{55ECE6A9-B7B8-419E-BBE7-EA64801A6D43} : DHCPNameServer = 192.168.1.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\9.0.1\ViProtocol.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\korisnik 1\application data\mozilla\firefox\profiles\jicp0oxt.default\
FF - prefs.js: browser.search.defaulturl - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: keyword.URL - [Link mogu videti samo ulogovani korisnici]
FF - plugin: c:\documents and settings\korisnik 1\local settings\application data\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\adobe\director\np32dsw_1202122.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_224.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
.
---- FIREFOX POLICIES ----
FF - user.js: browser.startup.page - 1
.
============= SERVICES / DRIVERS ===============
.
R2 TeamViewer8;TeamViewer 8;c:\program files\teamviewer\version8\TeamViewer_Service.exe [2013-3-24 3560288]
R3 gttap1;GoTrusted TAP Adapter;c:\windows\system32\drivers\gttap1.sys [2008-3-18 20480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [2011-5-26 1714176]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\drivers\s1018bus.sys [2011-10-8 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\drivers\s1018mdfl.sys [2011-10-8 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\drivers\s1018mdm.sys [2011-10-8 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1018mgmt.sys [2011-10-8 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1018nd5.sys [2011-10-8 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\drivers\s1018obex.sys [2011-10-8 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1018unic.sys [2011-10-8 109864]
S3 WinRing0_1_2_0;WinRing0_1_2_0;\??\d:\program files\iobit\game booster 3\driver\winring0.sys --> d:\program files\iobit\game booster 3\driver\WinRing0.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
.
=============== Created Last 30 ================
.
2013-08-03 20:51:20 -------- d-----w- c:\program files\AVAST Software
2013-08-03 19:24:23 -------- d-----w- c:\program files\Gophoto.it
2013-08-03 19:24:08 -------- d-----w- c:\documents and settings\korisnik 1\local settings\application data\Cool_Mirage
2013-08-03 18:36:37 24064 ----a-w- c:\windows\zoek-delete.exe
2013-08-02 17:44:17 -------- d-sha-r- C:\cmdcons
2013-08-02 17:42:29 98816 ----a-w- c:\windows\sed.exe
2013-08-02 17:42:29 256000 ----a-w- c:\windows\PEV.exe
2013-08-02 17:42:29 208896 ----a-w- c:\windows\MBR.exe
2013-07-11 21:21:07 -------- d--h--w- c:\program files\common files\EAInstaller
2013-07-11 20:35:43 -------- d-----w- c:\documents and settings\korisnik 1\application data\Origin
2013-07-11 20:35:37 -------- d-----w- c:\program files\Origin Games
2013-07-11 20:35:30 -------- d-----w- c:\documents and settings\korisnik 1\local settings\application data\Origin
2013-07-11 20:31:49 -------- d-----w- c:\documents and settings\all users\application data\Origin
2013-07-11 20:31:44 -------- d-----w- c:\documents and settings\all users\application data\Electronic Arts
2013-07-09 11:57:40 -------- d-----w- c:\program files\Mozilla Maintenance Service
.
==================== Find3M ====================
.
2013-06-17 08:45:18 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-06-17 08:45:17 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
============= FINISH: 20:53:19,70 ===============

Poslao: 04 Avg 2013 21:42
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Ovo izgleda super a i ne vidim tragove avasta u logovima.

Arrow Obrisi samo njegov zaostali folder i to je to.
c:\program files\AVAST Software

Arrow Prateci sliku u spojleru, napravi novu system restore tacku ( napravi vise tacaka za svaki slucaj ) ;
+ Klikni Me

Znaci:
Start > All Programs > Accessories > System Tools > System Restore.
U novootvorenom prozoru System Restore izaberes opciju Create a restore point, a zatim klik na Next. Imenuj novu tacku kako zelis i kreiraj je. Ponovi postupak jos par puta ( za svaki slucaj )

Arrow Preuzmi svezu instalaciju i inslaliraj avast antivirus.

Poslao: 05 Avg 2013 00:35
Idi na vrh
offline
  • Pridružio: 19 Jul 2012
  • Poruke: 55
  • Gde živiš: Naissus

Odlicno , radi ko sat avast.
Hvala magna , jel smo zavrsili ? Smile

Poslao: 05 Avg 2013 00:42
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Nemoj mi reci da si sumnjao u mene. Cool Al da znas da si djavolski bio inficiran...

Imao si na racunaru razne vrte malware-a i aktivan keylogger te je od vaznosti da sve svoje bitne sifre na drustvenim mrezama i slicno promenis.



Potrebno je deinstalirati ComboFix:
klikni start (ili ), a zatim RUN.

Na Visti koristiti Start Search polje ukoliko Run nije dostupan.

U liniju za unos teksta ukucaj (iskopiraj) sledeće:

ComboFix /Uninstall

Primeti da postoji razmak između "ComboFix" i "/Uninstall".



a zatim klikni OK (ili pritisni Enter).

Sačekaj da se proces deinstalacije završi.



Uklonimo sve ostale koriscene alate i njihove vezane fajlove DelFix alatom.

Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop

Dvoklikom pokreni program.

Štikliraj sledeću opcije:
Remove disinfection tools
[ostale ostavi decekirane]

Klikni na dugme "Run" i pričekaj da program završi rad.
Kada alat završi, otvoriće izvestaj u notepadu.
Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt




Idea Preporučujem ti da koristiš program MCShield za zaštitu USB memorijskih uređaja.

Program možeš preuzeti sa OVOG linka. Nakon instalacije programa, priključi USB memorijske uređaje, i oni će biti skenirani. Na kraju skeniranja ćeš dobiti izveštaj da je uređaj čist ili obaveštenje o uklonjenom malware-u.


Idea Takođe, poseti ovu temu da vidiš da li ti je pretraživač ranjiv i instaliraš ažurirane komponente
[Link mogu videti samo ulogovani korisnici]

MyCity » Ambulanta -> Arhiva Ambulante » Nepoznati program me izbacuje iz igrica i drugih programa

Ko je trenutno na forumu
 

Ukupno su 1016 korisnika na forumu :: 40 registrovanih, 0 sakrivenih i 976 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, Battlehammer, Belac91, Bickoooo, black sabah, bokisha253, Chainsaw, Dr.Strangelove, dule10savic, flash12, gorankuba, HogarStrashni, Ivica1102, JOntra, krkalon, kybonacci, Lazarus, Leonov, m0nstrum_, M74AB3, Miki01, mikki jons, moldway, MrNo, mustangkg, nsharambasa, oldtimer, raykan, rikirubio, rovac, shlauf, SOVO515, tanakadzo, trutcina, tubular, Tvrtko I, Username1000, Valter071, Vlad000, Žrnov