Nepoznati program me izbacuje iz igrica i drugih programa

3

Nepoznati program me izbacuje iz igrica i drugih programa

offline
  • Pridružio: 19 Jul 2012
  • Poruke: 55
  • Gde živiš: Naissus

Nisam naso avast na listi u Add or Remove Programs , pokrenuo sam avast uninstall utility iz safe mode i uklonio avast , al imam problema sa safe modom jer mi poremeti rezoluciju , sa avast uninstall utility sam usepo jer je prozor manji ali AppRemover ima izduzen prozor i nikako da dodjem do start dugmeta , probao sam da pomerama levo desno , gore dole , da sklanjam task bar al jok.

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

avast uninstall alat si uspeo pokrenuti iz safe moda a AppRemover nemozes? Pokreni App Remover onda iz normal moda.

offline
  • Pridružio: 19 Jul 2012
  • Poruke: 55
  • Gde živiš: Naissus

Pokrenuo sam , ali kad je trazilo instalirane aplikacije nije naslo avast. Valjda to znaci da je u potpunosti izbirsan. evo log.
DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 10.11.2
Run by Korisnik 1 at 20:52:45 on 2013-08-04
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.511.155 [GMT 2:00]
.
.
============== Running Processes ================
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\TeamViewer\Version8\TeamViewer_Service.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
D:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
C:\WINDOWS\system32\svchost.exe -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\svchost.exe -k netsvcs
.
============== Pseudo HJT Report ===============
.
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [PinnacleDriverCheck] c:\windows\system32\\PSDrvCheck.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
uPolicies-Explorer: NoDriveTypeAutoRun = dword:323
uPolicies-Explorer: NoDriveAutoRun = dword:67108863
uPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDrives = dword:0
mPolicies-Explorer: NoDriveTypeAutoRun = dword:323
mPolicies-Explorer: NoDriveAutoRun = dword:67108863
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{10102F03-16E6-403E-85F3-B1B54F19C469} : DHCPNameServer = 10.11.12.254 212.200.45.11
TCP: Interfaces\{55ECE6A9-B7B8-419E-BBE7-EA64801A6D43} : DHCPNameServer = 192.168.1.1
Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files\common files\avg secure search\viprotocolinstaller\9.0.1\ViProtocol.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\korisnik 1\application data\mozilla\firefox\profiles\jicp0oxt.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?btnG=Google+Search&q=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - about:home
FF - prefs.js: keyword.URL - hxxp://www.google.com/search?btnG=Google+Search&q=
FF - plugin: c:\documents and settings\korisnik 1\local settings\application data\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\windows\system32\adobe\director\np32dsw_1202122.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_7_700_224.dll
FF - plugin: c:\windows\system32\npDeployJava1.dll
FF - plugin: c:\windows\system32\npptools.dll
.
---- FIREFOX POLICIES ----
FF - user.js: browser.startup.page - 1
.
============= SERVICES / DRIVERS ===============
.
R2 TeamViewer8;TeamViewer 8;c:\program files\teamviewer\version8\TeamViewer_Service.exe [2013-3-24 3560288]
R3 gttap1;GoTrusted TAP Adapter;c:\windows\system32\drivers\gttap1.sys [2008-3-18 20480]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S3 AR9271;Wireless Network Adapter Service;c:\windows\system32\drivers\athuw.sys [2011-5-26 1714176]
S3 s1018bus;Sony Ericsson Device 1018 driver (WDM);c:\windows\system32\drivers\s1018bus.sys [2011-10-8 86824]
S3 s1018mdfl;Sony Ericsson Device 1018 USB WMC Modem Filter;c:\windows\system32\drivers\s1018mdfl.sys [2011-10-8 15016]
S3 s1018mdm;Sony Ericsson Device 1018 USB WMC Modem Driver;c:\windows\system32\drivers\s1018mdm.sys [2011-10-8 114728]
S3 s1018mgmt;Sony Ericsson Device 1018 USB WMC Device Management Drivers (WDM);c:\windows\system32\drivers\s1018mgmt.sys [2011-10-8 106208]
S3 s1018nd5;Sony Ericsson Device 1018 USB Ethernet Emulation (NDIS);c:\windows\system32\drivers\s1018nd5.sys [2011-10-8 26024]
S3 s1018obex;Sony Ericsson Device 1018 USB WMC OBEX Interface;c:\windows\system32\drivers\s1018obex.sys [2011-10-8 104744]
S3 s1018unic;Sony Ericsson Device 1018 USB Ethernet Emulation (WDM);c:\windows\system32\drivers\s1018unic.sys [2011-10-8 109864]
S3 WinRing0_1_2_0;WinRing0_1_2_0;\??\d:\program files\iobit\game booster 3\driver\winring0.sys --> d:\program files\iobit\game booster 3\driver\WinRing0.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\microsoft.net\framework\v4.0.30319\wpf\WPFFontCache_v0400.exe [2010-3-18 753504]
S4 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
.
=============== Created Last 30 ================
.
2013-08-03 20:51:20 -------- d-----w- c:\program files\AVAST Software
2013-08-03 19:24:23 -------- d-----w- c:\program files\Gophoto.it
2013-08-03 19:24:08 -------- d-----w- c:\documents and settings\korisnik 1\local settings\application data\Cool_Mirage
2013-08-03 18:36:37 24064 ----a-w- c:\windows\zoek-delete.exe
2013-08-02 17:44:17 -------- d-sha-r- C:\cmdcons
2013-08-02 17:42:29 98816 ----a-w- c:\windows\sed.exe
2013-08-02 17:42:29 256000 ----a-w- c:\windows\PEV.exe
2013-08-02 17:42:29 208896 ----a-w- c:\windows\MBR.exe
2013-07-11 21:21:07 -------- d--h--w- c:\program files\common files\EAInstaller
2013-07-11 20:35:43 -------- d-----w- c:\documents and settings\korisnik 1\application data\Origin
2013-07-11 20:35:37 -------- d-----w- c:\program files\Origin Games
2013-07-11 20:35:30 -------- d-----w- c:\documents and settings\korisnik 1\local settings\application data\Origin
2013-07-11 20:31:49 -------- d-----w- c:\documents and settings\all users\application data\Origin
2013-07-11 20:31:44 -------- d-----w- c:\documents and settings\all users\application data\Electronic Arts
2013-07-09 11:57:40 -------- d-----w- c:\program files\Mozilla Maintenance Service
.
==================== Find3M ====================
.
2013-06-17 08:45:18 692104 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-06-17 08:45:17 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
.
============= FINISH: 20:53:19,70 ===============

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Ovo izgleda super a i ne vidim tragove avasta u logovima.

Arrow Obrisi samo njegov zaostali folder i to je to.
c:\program files\AVAST Software

Arrow Prateci sliku u spojleru, napravi novu system restore tacku ( napravi vise tacaka za svaki slucaj ) ;
+ Klikni Me

Znaci:
Start > All Programs > Accessories > System Tools > System Restore.
U novootvorenom prozoru System Restore izaberes opciju Create a restore point, a zatim klik na Next. Imenuj novu tacku kako zelis i kreiraj je. Ponovi postupak jos par puta ( za svaki slucaj )

Arrow Preuzmi svezu instalaciju i inslaliraj avast antivirus.

offline
  • Pridružio: 19 Jul 2012
  • Poruke: 55
  • Gde živiš: Naissus

Odlicno , radi ko sat avast.
Hvala magna , jel smo zavrsili ? Smile

offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Nemoj mi reci da si sumnjao u mene. Cool Al da znas da si djavolski bio inficiran...

Imao si na racunaru razne vrte malware-a i aktivan keylogger te je od vaznosti da sve svoje bitne sifre na drustvenim mrezama i slicno promenis.



Potrebno je deinstalirati ComboFix:
klikni start (ili ), a zatim RUN.

Na Visti koristiti Start Search polje ukoliko Run nije dostupan.

U liniju za unos teksta ukucaj (iskopiraj) sledeće:

ComboFix /Uninstall

Primeti da postoji razmak između "ComboFix" i "/Uninstall".



a zatim klikni OK (ili pritisni Enter).


Sačekaj da se proces deinstalacije završi.



Uklonimo sve ostale koriscene alate i njihove vezane fajlove DelFix alatom.

Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop

Dvoklikom pokreni program.

Štikliraj sledeću opcije:
Remove disinfection tools
[ostale ostavi decekirane]

Klikni na dugme "Run" i pričekaj da program završi rad.
Kada alat završi, otvoriće izvestaj u notepadu.

Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt




Idea Preporučujem ti da koristiš program MCShield za zaštitu USB memorijskih uređaja.

Program možeš preuzeti sa OVOG linka. Nakon instalacije programa, priključi USB memorijske uređaje, i oni će biti skenirani. Na kraju skeniranja ćeš dobiti izveštaj da je uređaj čist ili obaveštenje o uklonjenom malware-u.


Idea Takođe, poseti ovu temu da vidiš da li ti je pretraživač ranjiv i instaliraš ažurirane komponente
http://www.mycity.rs/Propusti-i-azuriranja/Testira.....anjiv.html

Ko je trenutno na forumu
 

Ukupno su 1059 korisnika na forumu :: 33 registrovanih, 8 sakrivenih i 1018 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: Bubimir, cikadeda, djboj, Dogma21, doloress, draganca, ivan1973, Još malo pa deda, kolle.the.kid, Koridor, kybonacci, Lieutenant, ljuba, Lošmi, mgolub, Mihajlo, Milan A. Nikolic, milenko crazy north, Mille Qravela, Milos ZA, mkukoleca, Povratak1912, procesor, RiV, Sirius, stegonosa, Stoilkovic, User98, vathra, wizzardone, wolf431, Wrangler, 79693