Problem

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

je'l ovo
DDS (Ver_09-07-30.01) - NTFSx86
Run by Korisnik at 23:22:30,95 on uto 15.09.2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1310 [GMT 2:00]

AV: ESET Smart Security 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Hamachi\hamachi.exe
C:\Program Files\iWin Games\iWinTrusted.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
C:\Program Files\Super_DVD_Creator_9.8\NMSAccessU.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\713xRMT.exe
C:\Program Files\Cyberlink\Shared Files\brs.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\tsnpstd3.exe
C:\WINDOWS\vsnpstd3.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\documents and settings\korisnik\local settings\application data\sgjvbmy.exe
C:\Program Files\PixelView\ADTVScheduleAgent.exe
C:\Program Files\honestech\honestech TVR\scheduleTV.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Korisnik\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.rs/
mDefault_Page_URL = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
uInternet Connection Wizard,ShellNext = iexplore
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uURLSearchHooks: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog1.dll
uURLSearchHooks: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFre1.dll
uURLSearchHooks: iWin Toolbar: {ce0c2586-da36-452b-acdb-320d9bcb19bf} - c:\program files\iwin\tbiWi1.dll
uURLSearchHooks: Local Strike Toolbar: {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - c:\program files\local_strike\tbLoc1.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog1.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: Local Strike Toolbar: {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - c:\program files\local_strike\tbLoc1.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFre1.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: IEHlprObj Class: {8ca5ed52-f3fb-4414-a105-2e3491156990} - c:\program files\iwin games\iWinGamesHookIE.dll
BHO: Windows Live pomagac za prijavljivanje: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.15642\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
BHO: iWin Toolbar: {ce0c2586-da36-452b-acdb-320d9bcb19bf} - c:\program files\iwin\tbiWi1.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: EpsonToolBandKicker Class: {e99421fb-68dd-40f0-b4ac-b7027cae2f1a} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll
BHO: Ask Toolbar BHO: {f0d4b231-da4b-4daf-81e4-dfee4931a4aa} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL
TB: EPSON Web-To-Page: {ee5d279f-081b-4404-994d-c6b60aaeba6d} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: Ask Toolbar: {f0d4b239-da4b-4daf-81e4-dfee4931a4aa} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL
TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog1.dll
TB: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFre1.dll
TB: iWin Toolbar: {ce0c2586-da36-452b-acdb-320d9bcb19bf} - c:\program files\iwin\tbiWi1.dll
TB: Local Strike Toolbar: {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - c:\program files\local_strike\tbLoc1.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [EA Core] c:\program files\electronic arts\eadm\Core.exe -silent
uRun: [nodenable] c:\program files\eset\nodenable.exe /s
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [AnumanLive] c:\documents and settings\korisnik\application data\anuman interactive\anumanlive\AnumanLive.exe
uRun: [AutoStartNPSAgent] c:\program files\samsung\samsung new pc studio\NPSAgent.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [sgjvbmy] "c:\documents and settings\korisnik\local settings\application data\sgjvbmy.exe" sgjvbmy
uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockw~1\SWHELP~1.EXE -Update -1103472 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; Embedded Web Browser from: http://bsalsa.com/; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)" -"http://igreonline.info/view/1123/Vanzemaljske-otmice/Alien-Abduction"
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [TV Card Remote Control Device Monitor] c:\windows\713xRMT.exe
mRun: [BDRegion] c:\program files\cyberlink\shared files\brs.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
mRun: [TrueImageMonitor.exe] c:\program files\acronis\trueimagehome\TrueImageMonitor.exe
mRun: [AcronisTimounterMonitor] c:\program files\acronis\trueimagehome\TimounterMonitor.exe
mRun: [Acronis Scheduler2 Service] "c:\program files\common files\acronis\schedule2\schedhlp.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [AtiPTA] atiptaxx.exe
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [NPSStartup]
mRun: [tsnpstd3] c:\windows\tsnpstd3.exe
mRun: [snpstd3] c:\windows\vsnpstd3.exe
dRunOnce: [nltide_2] regsvr32 /s /n /i:U shell32
dRunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\korisnik\startm~1\programs\startup\hamachi.lnk - c:\program files\hamachi\hamachi.exe
StartupFolder: c:\docume~1\korisnik\startm~1\programs\startup\xfire.lnk - c:\program files\xfire\Xfire.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\pixelv~1.lnk - c:\program files\pixelview\ADTVScheduleAgent.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\schedu~1.lnk - c:\program files\honestech\honestech tvr\scheduleTV.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\tvexpe~1.lnk - c:\program files\pixelview\ADTVScheduleAgent.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1252872479906
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 relog_ap

================= FIREFOX ===================

FF - ProfilePath -
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

============= SERVICES / DRIVERS ===============

R0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys [2008-7-4 143360]
R2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B};c:\program files\cyberlink\powerdvd\000.fcl [2007-11-3 41456]
R2 ekrn;Eset Service;c:\program files\eset\eset smart security\ekrn.exe [2007-12-21 468224]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-8-29 54752]
R2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-8-11 233472]
R2 HamachiService;Hamachi Service;c:\program files\hamachi\hamachi.exe [2009-8-28 625952]
R2 iWinTrusted;iWinTrusted;c:\program files\iwin games\iWinTrusted.exe [2009-6-4 78104]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-1-14 226656]
R3 3xHybrid;SAA713x TV Card Service;c:\windows\system32\drivers\3xHybrid.sys [2008-9-8 907520]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [2008-9-1 36864]
R3 bbcap;bbcap;c:\windows\system32\drivers\bbcap.sys [2009-8-23 4096]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2009-8-11 36608]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\drivers\vcsvad.sys [2009-6-30 17792]
S2 713xTVCard;SAA7130 TV Card;c:\windows\system32\drivers\SAA713x.sys [2008-8-13 289280]
S2 WDMTVTuner;Universal WDM TV Tuner;c:\windows\system32\drivers\WDMTuner.sys [2008-8-13 26880]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;\??\d:\everestultimateedition4.50.1436\kerneld.wnt --> d:\everestultimateedition4.50.1436\kerneld.wnt [?]
S3 fsssvc;Usluga Windows Live Porodicna bezbednost;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]
S3 PIXMCV;JVC Communication PIX-MCV Driver;c:\windows\system32\drivers\pixmcvc.sys [2008-9-20 32000]
S3 PIXMCVA;JVC PIX-MCV Audio Capture;c:\windows\system32\drivers\pixmcva.sys [2008-9-20 28057]
S3 PIXMCVV;JVC PIX-MCV Video Capture;c:\windows\system32\drivers\pixmcvv.sys [2008-9-20 21081]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [2009-8-11 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [2009-8-11 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [2009-8-11 121856]

=============== Created Last 30 ================

2009-09-15 00:05 229,888 a------- c:\windows\PEV.exe
2009-09-15 00:05 161,792 a------- c:\windows\SWREG.exe
2009-09-15 00:05 98,816 a------- c:\windows\sed.exe
2009-09-15 00:05 <DIR> --ds---- C:\ComboFix
2009-09-15 00:05 389,120 a------- c:\windows\system32\CF3391.exe
2009-09-14 23:57 389,120 a------- c:\windows\system32\CF12842.exe
2009-09-14 23:25 <DIR> --d----- c:\program files\ReaSoft
2009-09-14 23:25 <DIR> --d----- c:\docume~1\korisnik\applic~1\ReaSoft
2009-09-14 22:52 389,120 a------- c:\windows\system32\CF11126.exe
2009-09-14 22:49 389,120 a------- c:\windows\system32\CF15538.exe
2009-09-14 22:49 389,120 a------- c:\windows\system32\CF23902.exe
2009-09-14 20:00 <DIR> --d----- c:\program files\MSXML 4.0
2009-09-14 10:46 272,128 -c------ c:\windows\system32\dllcache\bthport.sys
2009-09-14 10:46 272,128 -------- c:\windows\system32\drivers\bthport.sys
2009-09-14 10:44 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2009-09-14 10:39 2,189,056 -c------ c:\windows\system32\dllcache\ntoskrnl.exe
2009-09-14 10:39 2,145,280 -c------ c:\windows\system32\dllcache\ntkrnlmp.exe
2009-09-14 10:39 2,023,936 -c------ c:\windows\system32\dllcache\ntkrpamp.exe
2009-09-14 10:34 2,560 -------- c:\windows\system32\xpsp4res.dll
2009-09-13 22:09 23,576 a------- c:\windows\system32\wuapi.dll.mui
2009-09-13 22:08 <DIR> --d----- c:\windows\system32\SoftwareDistribution
2009-09-13 20:53 <DIR> a-dshr-- C:\cmdcons
2009-09-13 20:52 389,120 a------- c:\windows\system32\CF16556.exe
2009-09-13 20:50 389,120 a------- c:\windows\system32\CF20445.exe
2009-09-13 20:50 389,120 a------- c:\windows\system32\CF29333.exe
2009-09-13 20:39 389,120 a------- c:\windows\system32\CF17748.exe
2009-09-13 20:30 389,120 a------- c:\windows\system32\CF4887.exe
2009-09-09 15:19 54,156 a---h--- c:\windows\QTFont.qfn
2009-09-09 15:19 1,409 a------- c:\windows\QTFont.for
2009-09-09 15:14 <DIR> --d----- c:\program files\common files\Autodesk Shared
2009-09-09 15:14 <DIR> --d----- c:\program files\Autodesk
2009-09-09 13:48 1,846,632 a------- c:\windows\system32\D3DCompiler_41.dll
2009-09-09 13:48 453,456 a------- c:\windows\system32\d3dx10_41.dll
2009-09-09 13:48 4,178,264 a------- c:\windows\system32\D3DX9_41.dll
2009-09-09 13:48 517,448 a------- c:\windows\system32\XAudio2_4.dll
2009-09-09 13:48 69,448 a------- c:\windows\system32\XAPOFX1_3.dll
2009-09-09 13:48 235,352 a------- c:\windows\system32\xactengine3_4.dll
2009-09-09 13:48 22,360 a------- c:\windows\system32\X3DAudio1_6.dll
2009-09-06 15:19 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Test Drive Unlimited
2009-09-06 14:49 <DIR> --d----- c:\windows\Cache
2009-09-04 22:26 <DIR> --d----- c:\windows\system32\NtmsData
2009-09-01 10:42 <DIR> --d----- c:\docume~1\korisnik\applic~1\GOL_byHasbro
2009-09-01 10:41 <DIR> --d----- c:\program files\Yahoo! Games
2009-08-31 22:24 <DIR> --d----- c:\docume~1\korisnik\applic~1\Xfire
2009-08-31 22:24 <DIR> --d----- c:\program files\Xfire
2009-08-29 21:37 12,160 ac------ c:\windows\system32\dllcache\mouhid.sys
2009-08-29 21:37 12,160 a------- c:\windows\system32\drivers\mouhid.sys
2009-08-29 18:24 <DIR> --d----- c:\program files\SCREEN2EXE
2009-08-29 02:03 <DIR> --d----- c:\documents and settings\korisnik\Tracing
2009-08-29 02:02 54,752 a------- c:\windows\system32\drivers\fssfltr_tdi.sys
2009-08-29 02:01 <DIR> --d----- c:\program files\Microsoft SQL Server Compact Edition
2009-08-29 02:00 <DIR> --d----- c:\program files\Microsoft
2009-08-29 02:00 <DIR> --d----- c:\program files\Windows Live SkyDrive
2009-08-29 01:58 <DIR> --d----- c:\program files\common files\Windows Live
2009-08-28 02:58 25,280 a------- c:\windows\system32\drivers\hamachi.sys
2009-08-28 02:58 <DIR> --d----- c:\program files\Hamachi
2009-08-23 23:07 31 a------- c:\windows\system32\bbcap.err
2009-08-23 23:02 <DIR> --d----- c:\docume~1\korisnik\applic~1\Blueberry
2009-08-23 23:02 30,720 a------- c:\windows\system32\bbcap.dll
2009-08-23 23:02 4,608 a------- c:\windows\system32\bbchlp.dll
2009-08-23 23:02 4,096 a------- c:\windows\system32\drivers\bbcap.sys
2009-08-23 23:02 <DIR> --d----- c:\docume~1\korisnik\applic~1\LogSys
2009-08-23 23:02 <DIR> --d----- c:\docume~1\alluse~1\applic~1\LogSys
2009-08-23 23:02 <DIR> --d----- c:\program files\common files\Blueberry Software
2009-08-23 23:02 <DIR> --d----- c:\program files\Blueberry Software
2009-08-22 23:20 <DIR> --d----- c:\docume~1\korisnik\applic~1\SPORE
2009-08-21 11:54 <DIR> --d----- c:\docume~1\korisnik\applic~1\Activision
2009-08-21 11:54 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Activision
2009-08-21 11:48 <DIR> --d----- c:\program files\Activision

==================== Find3M ====================

2009-08-29 18:23 104 a------- c:\program files\Gestionnaire de fichiers Sony Ericsson.lnk
2009-08-13 21:54 41,872 a------- c:\windows\system32\xfcodec.dll
2009-08-05 11:01 204,800 a------- c:\windows\system32\mswebdvd.dll
2009-07-29 06:37 119,808 a------- c:\windows\system32\t2embed.dll
2009-07-29 06:37 81,920 a------- c:\windows\system32\fontsub.dll
2009-07-26 16:44 48,448 a------- c:\windows\system32\sirenacm.dll
2009-07-17 21:01 58,880 a------- c:\windows\system32\atl.dll
2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll
2009-07-10 12:35 307,048 a------- c:\windows\WLXPGSS.SCR
2009-06-29 18:12 827,392 a------- c:\windows\system32\wininet.dll
2009-06-29 18:12 78,336 a------- c:\windows\system32\ieencode.dll
2009-06-29 18:12 17,408 a------- c:\windows\system32\corpol.dll
2009-02-23 19:21 15,206 a------- c:\program files\typingmaster.htm
2008-10-11 07:08 22,328 a------- c:\docume~1\korisnik\applic~1\PnkBstrK.sys
2008-09-01 17:52 16,384 a--sh--- c:\windows\system32\config\systemprofile\cookies\index.dat
2008-09-01 17:52 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\index.dat
2008-09-01 17:52 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008090120080902\index.dat
2008-09-01 17:52 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\temporary internet files\content.ie5\index.dat

============= FINISH: 23:22:46,64 ===============

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Preuzmi The Avenger na Desktop.
Raspakuj arhivu u neki folder

Dvoklikom pokreni avenger.exe

Iskopiraj tekst koji se nalazi unutar Kod polja u (beli) prozor programa:


Files to delete:
C:\documents and settings\korisnik\local settings\application data\sgjvbmy.exe



Klikni Execute, a zatim Yes u sledeća dva prozora koji će se otvoriti

Kompjuter će se restartovati (u određenim slučajevima: dva puta) i započeti će proces čišćenja/skeniranja

Kada proces bude završen, logfile C:\avenger.txt će se otvoriti u Notepad-u
Iskopiraj sadržaj dobijenog loga u temu na forumu.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

to sam uradio i dobio notepad ali onda mi je zabagovao komp morao sam restart ali je pisalo sucessfully deleted i ovo sto si napisao mislim da je to najvaznije bilo je l' da ga radim ponovo... pretpostavljam da si to sto sam obrisao pisalo u DDS evo kacim ga ponovo da vidis je li se obrisalo
DDS (Ver_09-07-30.01) - NTFSx86
Run by Korisnik at 18:26:56,28 on sre 16.09.2009
Internet Explorer: 7.0.5730.13 BrowserJavaVersion: 1.6.0_13
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1336 [GMT 2:00]

AV: ESET Smart Security 3.0 *On-access scanning enabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\WINDOWS\713xRMT.exe
C:\Program Files\Cyberlink\Shared Files\brs.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Acronis\TrueImageHome\TrueImageMonitor.exe
C:\Program Files\Acronis\TrueImageHome\TimounterMonitor.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedhlp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\tsnpstd3.exe
C:\WINDOWS\vsnpstd3.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\DAEMON Tools Lite\daemon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
svchost.exe
C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40ST7.EXE
C:\Documents and Settings\All Users\Application Data\EPSON\EPW!3 SSRP\E_S40RP7.EXE
C:\WINDOWS\system32\FsUsbExService.Exe
C:\Program Files\Hamachi\hamachi.exe
C:\Program Files\iWin Games\iWinTrusted.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Autodesk\3ds Max 9\mentalray\satellite\raysat_3dsmax9_32server.exe
C:\Program Files\Super_DVD_Creator_9.8\NMSAccessU.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Program Files\Common Files\Acronis\Fomatik\TrueImageTryStartService.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\WgaTray.exe
C:\Program Files\honestech\honestech TVR\scheduleTV.exe
C:\Program Files\PixelView\ADTVScheduleAgent.exe
C:\Program Files\Xfire\Xfire.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Documents and Settings\Korisnik\Desktop\dds.scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.rs/
mDefault_Page_URL = hxxp://www.yahoo.com
mStart Page = hxxp://www.yahoo.com
uInternet Connection Wizard,ShellNext = iexplore
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uURLSearchHooks: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog1.dll
uURLSearchHooks: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFre1.dll
uURLSearchHooks: iWin Toolbar: {ce0c2586-da36-452b-acdb-320d9bcb19bf} - c:\program files\iwin\tbiWi1.dll
uURLSearchHooks: Local Strike Toolbar: {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - c:\program files\local_strike\tbLoc1.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog1.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: AskBar BHO: {201f27d4-3704-41d6-89c1-aa35e39143ed} - c:\program files\askbardis\bar\bin\askBar.dll
BHO: Local Strike Toolbar: {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - c:\program files\local_strike\tbLoc1.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
BHO: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFre1.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SearchHelper.dll
BHO: IEHlprObj Class: {8ca5ed52-f3fb-4414-a105-2e3491156990} - c:\program files\iwin games\iWinGamesHookIE.dll
BHO: Windows Live pomagac za prijavljivanje: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.1.1309.15642\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_219B3E1547538286.dll
BHO: iWin Toolbar: {ce0c2586-da36-452b-acdb-320d9bcb19bf} - c:\program files\iwin\tbiWi1.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: EpsonToolBandKicker Class: {e99421fb-68dd-40f0-b4ac-b7027cae2f1a} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll
BHO: Ask Toolbar BHO: {f0d4b231-da4b-4daf-81e4-dfee4931a4aa} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL
TB: EPSON Web-To-Page: {ee5d279f-081b-4404-994d-c6b60aaeba6d} - c:\program files\epson\epson web-to-page\EPSON Web-To-Page.dll
TB: Ask Toolbar: {3041d03e-fd4b-44e0-b742-2d9b88305f98} - c:\program files\askbardis\bar\bin\askBar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: Ask Toolbar: {f0d4b239-da4b-4daf-81e4-dfee4931a4aa} - c:\program files\asksbar\bar\1.bin\ASKSBAR.DLL
TB: &Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: ToggleEN Toolbar: {038cb5c7-48ea-4af9-94e0-a1646542e62b} - c:\program files\toggleen\tbTog1.dll
TB: Free Lunch Design Toolbar: {57cc715d-37ca-44e4-9ec2-8c2cbddb25ec} - c:\program files\free_lunch_design\tbFre1.dll
TB: iWin Toolbar: {ce0c2586-da36-452b-acdb-320d9bcb19bf} - c:\program files\iwin\tbiWi1.dll
TB: Local Strike Toolbar: {2c650b7d-aa32-4798-af1a-fd8ef806d89f} - c:\program files\local_strike\tbLoc1.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: {32099AAC-C132-4136-9E9A-4E364A424E17} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [DAEMON Tools Lite] "c:\program files\daemon tools lite\daemon.exe" -autorun
uRun: [EA Core] c:\program files\electronic arts\eadm\Core.exe -silent
uRun: [nodenable] c:\program files\eset\nodenable.exe /s
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [AnumanLive] c:\documents and settings\korisnik\application data\anuman interactive\anumanlive\AnumanLive.exe
uRun: [AutoStartNPSAgent] c:\program files\samsung\samsung new pc studio\NPSAgent.exe
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [sgjvbmy] "c:\documents and settings\korisnik\local settings\application data\sgjvbmy.exe" sgjvbmy
uRunOnce: [Shockwave Updater] c:\windows\system32\adobe\shockw~1\SWHELP~1.EXE -Update -1103472 -"Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; GTB5; Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1) ; Embedded Web Browser from: http://bsalsa.com/; .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.04506.30)" -"http://igreonline.info/view/1123/Vanzemaljske-otmice/Alien-Abduction"
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [TV Card Remote Control Device Monitor] c:\windows\713xRMT.exe
mRun: [BDRegion] c:\program files\cyberlink\shared files\brs.exe
mRun: [RemoteControl] "c:\program files\cyberlink\powerdvd\PDVDServ.exe"
mRun: [LanguageShortcut] "c:\program files\cyberlink\powerdvd\language\Language.exe"
mRun: [TrueImageMonitor.exe] c:\program files\acronis\trueimagehome\TrueImageMonitor.exe
mRun: [AcronisTimounterMonitor] c:\program files\acronis\trueimagehome\TimounterMonitor.exe
mRun: [Acronis Scheduler2 Service] "c:\program files\common files\acronis\schedule2\schedhlp.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [AtiPTA] atiptaxx.exe
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe"
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [NPSStartup]
mRun: [tsnpstd3] c:\windows\tsnpstd3.exe
mRun: [snpstd3] c:\windows\vsnpstd3.exe
dRunOnce: [nltide_2] regsvr32 /s /n /i:U shell32
dRunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\korisnik\startm~1\programs\startup\hamachi.lnk - c:\program files\hamachi\hamachi.exe
StartupFolder: c:\docume~1\korisnik\startm~1\programs\startup\xfire.lnk - c:\program files\xfire\Xfire.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\pixelv~1.lnk - c:\program files\pixelview\ADTVScheduleAgent.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\schedu~1.lnk - c:\program files\honestech\honestech tvr\scheduleTV.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\tvexpe~1.lnk - c:\program files\pixelview\ADTVScheduleAgent.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx2.hotmail.com/mail/w3/resources/MSNPUpld.cab
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - hxxp://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1252872479906
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
LSA: Authentication Packages = msv1_0 relog_ap

================= FIREFOX ===================

FF - ProfilePath -
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}

============= SERVICES / DRIVERS ===============

R0 mv61xx;mv61xx;c:\windows\system32\drivers\mv61xx.sys [2008-7-4 143360]
R2 {95808DC4-FA4A-4C74-92FE-5B863F82066B};{95808DC4-FA4A-4C74-92FE-5B863F82066B};c:\program files\cyberlink\powerdvd\000.fcl [2007-11-3 41456]
R2 ekrn;Eset Service;c:\program files\eset\eset smart security\ekrn.exe [2007-12-21 468224]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [2009-8-29 54752]
R2 FsUsbExService;FsUsbExService;c:\windows\system32\FsUsbExService.Exe [2009-8-11 233472]
R2 HamachiService;Hamachi Service;c:\program files\hamachi\hamachi.exe [2009-8-28 625952]
R2 iWinTrusted;iWinTrusted;c:\program files\iwin games\iWinTrusted.exe [2009-6-4 78104]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-1-14 226656]
R3 3xHybrid;SAA713x TV Card Service;c:\windows\system32\drivers\3xHybrid.sys [2008-9-8 907520]
R3 AtcL001;NDIS Miniport Driver for Atheros L1 Gigabit Ethernet Controller;c:\windows\system32\drivers\l151x86.sys [2008-9-1 36864]
R3 bbcap;bbcap;c:\windows\system32\drivers\bbcap.sys [2009-8-23 4096]
R3 FsUsbExDisk;FsUsbExDisk;c:\windows\system32\FsUsbExDisk.Sys [2009-8-11 36608]
R3 VCSVADHWSer;Avnex Virtual Audio Device (WDM);c:\windows\system32\drivers\vcsvad.sys [2009-6-30 17792]
S2 713xTVCard;SAA7130 TV Card;c:\windows\system32\drivers\SAA713x.sys [2008-8-13 289280]
S2 WDMTVTuner;Universal WDM TV Tuner;c:\windows\system32\drivers\WDMTuner.sys [2008-8-13 26880]
S3 EverestDriver;Lavalys EVEREST Kernel Driver;\??\d:\everestultimateedition4.50.1436\kerneld.wnt --> d:\everestultimateedition4.50.1436\kerneld.wnt [?]
S3 fsssvc;Usluga Windows Live Porodicna bezbednost;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]
S3 PIXMCV;JVC Communication PIX-MCV Driver;c:\windows\system32\drivers\pixmcvc.sys [2008-9-20 32000]
S3 PIXMCVA;JVC PIX-MCV Audio Capture;c:\windows\system32\drivers\pixmcva.sys [2008-9-20 28057]
S3 PIXMCVV;JVC PIX-MCV Video Capture;c:\windows\system32\drivers\pixmcvv.sys [2008-9-20 21081]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [2009-8-11 90112]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [2009-8-11 14976]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [2009-8-11 121856]

=============== Created Last 30 ================

2009-09-15 00:05 229,888 a------- c:\windows\PEV.exe
2009-09-15 00:05 161,792 a------- c:\windows\SWREG.exe
2009-09-15 00:05 98,816 a------- c:\windows\sed.exe
2009-09-15 00:05 <DIR> --ds---- C:\ComboFix
2009-09-15 00:05 389,120 a------- c:\windows\system32\CF3391.exe
2009-09-14 23:57 389,120 a------- c:\windows\system32\CF12842.exe
2009-09-14 23:25 <DIR> --d----- c:\program files\ReaSoft
2009-09-14 23:25 <DIR> --d----- c:\docume~1\korisnik\applic~1\ReaSoft
2009-09-14 22:52 389,120 a------- c:\windows\system32\CF11126.exe
2009-09-14 22:49 389,120 a------- c:\windows\system32\CF15538.exe
2009-09-14 22:49 389,120 a------- c:\windows\system32\CF23902.exe
2009-09-14 20:00 <DIR> --d----- c:\program files\MSXML 4.0
2009-09-14 10:46 272,128 -c------ c:\windows\system32\dllcache\bthport.sys
2009-09-14 10:46 272,128 -------- c:\windows\system32\drivers\bthport.sys
2009-09-14 10:44 455,296 -c------ c:\windows\system32\dllcache\mrxsmb.sys
2009-09-14 10:39 2,189,056 -c------ c:\windows\system32\dllcache\ntoskrnl.exe
2009-09-14 10:39 2,145,280 -c------ c:\windows\system32\dllcache\ntkrnlmp.exe
2009-09-14 10:39 2,023,936 -c------ c:\windows\system32\dllcache\ntkrpamp.exe
2009-09-14 10:34 2,560 -------- c:\windows\system32\xpsp4res.dll
2009-09-13 22:09 23,576 a------- c:\windows\system32\wuapi.dll.mui
2009-09-13 22:08 <DIR> --d----- c:\windows\system32\SoftwareDistribution
2009-09-13 20:53 <DIR> a-dshr-- C:\cmdcons
2009-09-13 20:52 389,120 a------- c:\windows\system32\CF16556.exe
2009-09-13 20:50 389,120 a------- c:\windows\system32\CF20445.exe
2009-09-13 20:50 389,120 a------- c:\windows\system32\CF29333.exe
2009-09-13 20:39 389,120 a------- c:\windows\system32\CF17748.exe
2009-09-13 20:30 389,120 a------- c:\windows\system32\CF4887.exe
2009-09-09 15:19 54,156 a---h--- c:\windows\QTFont.qfn
2009-09-09 15:19 1,409 a------- c:\windows\QTFont.for
2009-09-09 15:14 <DIR> --d----- c:\program files\common files\Autodesk Shared
2009-09-09 15:14 <DIR> --d----- c:\program files\Autodesk
2009-09-09 13:48 1,846,632 a------- c:\windows\system32\D3DCompiler_41.dll
2009-09-09 13:48 453,456 a------- c:\windows\system32\d3dx10_41.dll
2009-09-09 13:48 4,178,264 a------- c:\windows\system32\D3DX9_41.dll
2009-09-09 13:48 517,448 a------- c:\windows\system32\XAudio2_4.dll
2009-09-09 13:48 69,448 a------- c:\windows\system32\XAPOFX1_3.dll
2009-09-09 13:48 235,352 a------- c:\windows\system32\xactengine3_4.dll
2009-09-09 13:48 22,360 a------- c:\windows\system32\X3DAudio1_6.dll
2009-09-06 15:19 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Test Drive Unlimited
2009-09-06 14:49 <DIR> --d----- c:\windows\Cache
2009-09-04 22:26 <DIR> --d----- c:\windows\system32\NtmsData
2009-09-01 10:42 <DIR> --d----- c:\docume~1\korisnik\applic~1\GOL_byHasbro
2009-09-01 10:41 <DIR> --d----- c:\program files\Yahoo! Games
2009-08-31 22:24 <DIR> --d----- c:\docume~1\korisnik\applic~1\Xfire
2009-08-31 22:24 <DIR> --d----- c:\program files\Xfire
2009-08-29 21:37 12,160 ac------ c:\windows\system32\dllcache\mouhid.sys
2009-08-29 21:37 12,160 a------- c:\windows\system32\drivers\mouhid.sys
2009-08-29 18:24 <DIR> --d----- c:\program files\SCREEN2EXE
2009-08-29 02:03 <DIR> --d----- c:\documents and settings\korisnik\Tracing
2009-08-29 02:02 54,752 a------- c:\windows\system32\drivers\fssfltr_tdi.sys
2009-08-29 02:01 <DIR> --d----- c:\program files\Microsoft SQL Server Compact Edition
2009-08-29 02:00 <DIR> --d----- c:\program files\Microsoft
2009-08-29 02:00 <DIR> --d----- c:\program files\Windows Live SkyDrive
2009-08-29 01:58 <DIR> --d----- c:\program files\common files\Windows Live
2009-08-28 02:58 25,280 a------- c:\windows\system32\drivers\hamachi.sys
2009-08-28 02:58 <DIR> --d----- c:\program files\Hamachi
2009-08-23 23:07 31 a------- c:\windows\system32\bbcap.err
2009-08-23 23:02 <DIR> --d----- c:\docume~1\korisnik\applic~1\Blueberry
2009-08-23 23:02 30,720 a------- c:\windows\system32\bbcap.dll
2009-08-23 23:02 4,608 a------- c:\windows\system32\bbchlp.dll
2009-08-23 23:02 4,096 a------- c:\windows\system32\drivers\bbcap.sys
2009-08-23 23:02 <DIR> --d----- c:\docume~1\korisnik\applic~1\LogSys
2009-08-23 23:02 <DIR> --d----- c:\docume~1\alluse~1\applic~1\LogSys
2009-08-23 23:02 <DIR> --d----- c:\program files\common files\Blueberry Software
2009-08-23 23:02 <DIR> --d----- c:\program files\Blueberry Software
2009-08-22 23:20 <DIR> --d----- c:\docume~1\korisnik\applic~1\SPORE
2009-08-21 11:54 <DIR> --d----- c:\docume~1\korisnik\applic~1\Activision
2009-08-21 11:54 <DIR> --d----- c:\docume~1\alluse~1\applic~1\Activision
2009-08-21 11:48 <DIR> --d----- c:\program files\Activision

==================== Find3M ====================

2009-08-29 18:23 104 a------- c:\program files\Gestionnaire de fichiers Sony Ericsson.lnk
2009-08-13 21:54 41,872 a------- c:\windows\system32\xfcodec.dll
2009-08-05 11:01 204,800 a------- c:\windows\system32\mswebdvd.dll
2009-07-29 06:37 119,808 a------- c:\windows\system32\t2embed.dll
2009-07-29 06:37 81,920 a------- c:\windows\system32\fontsub.dll
2009-07-26 16:44 48,448 a------- c:\windows\system32\sirenacm.dll
2009-07-17 21:01 58,880 a------- c:\windows\system32\atl.dll
2009-07-13 23:43 286,208 a------- c:\windows\system32\wmpdxm.dll
2009-07-10 12:35 307,048 a------- c:\windows\WLXPGSS.SCR
2009-06-29 18:12 827,392 a------- c:\windows\system32\wininet.dll
2009-06-29 18:12 78,336 a------- c:\windows\system32\ieencode.dll
2009-06-29 18:12 17,408 a------- c:\windows\system32\corpol.dll
2009-02-23 19:21 15,206 a------- c:\program files\typingmaster.htm
2008-10-11 07:08 22,328 a------- c:\docume~1\korisnik\applic~1\PnkBstrK.sys
2008-09-01 17:52 16,384 a--sh--- c:\windows\system32\config\systemprofile\cookies\index.dat
2008-09-01 17:52 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\index.dat
2008-09-01 17:52 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008090120080902\index.dat
2008-09-01 17:52 32,768 a--sh--- c:\windows\system32\config\systemprofile\local settings\temporary internet files\content.ie5\index.dat

============= FINISH: 18:27:14,04 ===============

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Skini na Desktop: https://www.mycity.rs/must-login.png

Dvoklikni na file - kada se pojavi upit, klikni Yes.



Avenger-ov log je C:\avenger.txt - iskopiraj njegov sadržaj u poruku.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 16 Sep 2009 19:42

Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "C:\documents and settings\korisnik\local settings\application data\sgjvbmy.exe" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.



Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Error: Script file not found!
Could not open script file! Status: 0xc0000034 (STATUS_OBJECT_NAME_NOT_FOUND)
--> the object does not exist

Abort!

evo ovo javljam se jos malo sa ovim drugim

Dopuna: 16 Sep 2009 19:43

e uradio sam i ovo drugo pisalo je succesfully sta god...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ok.


Obriši folder: C:\Avenger


Klikni start, Run i ukucaj:

combofix /u



Ovde više nema malware-a, tako da... Za preostale probleme se obrati u forum Windows.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Hvala ti puno dr Boro puno... moramo otici na (ako ikada budem dolazio to Sweden... hvala jos jednom


P.S. sve sam obrisao sto si rekao

Pozdrav