komp se koci

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

kompjuter radi sporo ne moze da se gleda ni youtube jer koci,facebook otvara sporo kao i ostale programe takodje,igrice i da ne pricam zabada,ovo se desava vec neko vreme nema virusa u komp imam instaliran cleaner i glary utilites i sve greske sam izrbrisao i fix sam ih.Ijos nesto imam problem sa task manager slikacu i postaviti ovde a vi mi recite koji su programi nepotrebni i recite mi koje treba da izbrisem.

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.2180
Run by b at 13:20:11 on 2013-12-07
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1022.387 [GMT 1:00]
.
AV: AVG Internet Security 2014 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
FW: AVG Internet Security 2014 *Enabled*
.
============== Running Processes ================
.
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\wdfmgr.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\system32\rundll32.exe
C:\DOCUME~1\b\LOCALS~1\Temp\~nsu.tmp\Au_.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uSearch Bar = hxxp://www.google.com
uInternet Connection Wizard,ShellNext = iexplore
uSearchAssistant = hxxp://www.google.com
mSearchAssistant = hxxp://www.google.com
BHO: AcroIEHlprObj Class: {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: {2977C29A-6723-4436-90BB-F7C5FDEF88A1} - <orphaned>
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
mRun: [nwiz] c:\program files\nvidia corporation\nview\nwiz.exe /installquiet
mRun: [PVR Agent] c:\program files\kworld multimedia\pvr plus\tvr\Scheduled.exe
mRun: [AVG_UI] "c:\program files\avg\avg2014\avgui.exe" /TRAYONLY
mRun: [RTHDCPL] RTHDCPL.EXE
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{323641ED-F561-4C68-8E31-20423571F019} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{6BC99F54-3FB2-495E-9FB7-8EF918665195} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{6D6D170D-6796-43A1-86EE-634BDFC5F9ED} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{BDA33561-274A-46B2-A59D-10566D9D6ED5} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{CF49C0B9-9D66-4A2D-97BC-12D5772CC6DE} : DHCPNameServer = 192.168.1.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
AppInit_DLLs=
mASetup: {8A69D345-D564-463c-AFF1-A69D9E530F96} - "c:\program files\google\chrome\application\31.0.1650.63\installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
.
============= SERVICES / DRIVERS ===============
.
R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [2013-10-24 147768]
R0 Avglogx;AVG Logging Driver;c:\windows\system32\drivers\avglogx.sys [2013-10-31 222520]
R0 Avgmfx86;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\drivers\avgmfx86.sys [2013-10-1 102712]
R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [2013-9-10 27448]
R0 BootDefragDriver;BootDefragDriver;c:\windows\system32\drivers\BootDefragDriver.sys [2013-11-25 13504]
R1 Avgdiskx;AVG Disk Driver;c:\windows\system32\drivers\avgdiskx.sys [2013-11-5 120600]
R1 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [2013-11-4 209176]
R1 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [2013-9-17 22840]
R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [2013-10-31 176952]
R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [2013-8-1 193848]
R2 avgfws;AVG zaštitni zid;c:\program files\avg\avg2014\avgfws.exe [2013-9-24 1358944]
R2 AVGIDSAgent;AVGIDSAgent;c:\program files\avg\avg2014\avgidsagent.exe [2013-11-11 3478544]
R2 avgwd;AVG WatchDog;c:\program files\avg\avg2014\avgwdsvc.exe [2013-9-24 348008]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\all users\application data\skype\toolbars\skype c2c service\c2c_service.exe [2013-10-9 3275136]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2012-1-12 30944]
R3 L1c;NDIS Miniport Driver for Atheros AR8131/AR8132 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1c51x86.sys [2010-10-14 44032]
S2 NOD32FiXTemDono;Eset Nod32 Boot;c:\windows\system32\regedt32.exe [2001-8-23 3584]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-6-21 162408]
S3 3xHybrid;3xHybrid service;c:\windows\system32\drivers\3xhybrid.sys --> c:\windows\system32\drivers\3xHybrid.sys [?]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2013-12-7 1691480]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2012-1-12 30944]
.
=============== Created Last 30 ================
.
2013-12-07 12:02:21 -------- d-----w- c:\windows\system32\RTCOM
2013-12-07 12:02:01 891976 ----a-w- c:\windows\system32\RTSndMgr.CPL
2013-12-07 12:02:01 84584 ----a-w- c:\windows\SOUNDMAN.EXE
2013-12-07 12:02:01 359016 ----a-w- c:\windows\vncutil.exe
2013-12-07 12:02:00 1523416 ----a-w- c:\windows\RtlUpd.exe
2013-12-07 12:00:12 -------- d-----w- c:\program files\MyPC Backup
2013-11-25 21:57:56 -------- d-----w- c:\documents and settings\b\application data\AVG2014
2013-11-25 21:55:27 -------- d--h--w- C:\$AVG
2013-11-25 21:55:27 -------- d-----w- c:\documents and settings\all users\application data\AVG2014
2013-11-25 21:53:58 -------- d-----w- c:\program files\AVG
2013-11-25 21:50:09 -------- d-----w- c:\documents and settings\b\local settings\application data\MFAData
2013-11-25 21:50:09 -------- d-----w- c:\documents and settings\b\local settings\application data\Avg2014
2013-11-25 21:50:09 -------- d-----w- c:\documents and settings\all users\application data\MFAData
2013-11-25 21:36:32 -------- d-----w- C:\AdwCleaner
2013-11-25 21:10:35 -------- d-----w- c:\program files\CCleaner
2013-11-25 21:04:57 -------- d-----w- c:\documents and settings\b\application data\GlarySoft
2013-11-25 21:04:53 13504 ----a-w- c:\windows\system32\drivers\BootDefragDriver.sys
2013-11-25 21:04:53 101664 ----a-w- c:\windows\system32\BootDefrag.exe
2013-11-25 21:04:15 -------- d-----w- c:\program files\Glary Utilities 4
2013-11-24 15:27:29 -------- d-----w- c:\documents and settings\b\SyncFolder
.
==================== Find3M ====================
.
2013-11-25 21:33:51 71048 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-11-25 21:33:51 692616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2013-11-05 20:50:48 120600 ----a-w- c:\windows\system32\drivers\avgdiskx.sys
2013-11-05 18:47:54 5589720 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
2013-11-04 20:57:30 209176 ----a-w- c:\windows\system32\drivers\avgidsdriverx.sys
2013-10-31 22:00:28 176952 ----a-w- c:\windows\system32\drivers\avgldx86.sys
2013-10-31 21:30:08 222520 ----a-w- c:\windows\system32\drivers\avglogx.sys
2013-10-24 21:28:32 147768 ----a-w- c:\windows\system32\drivers\avgidshx.sys
2013-10-04 11:29:32 20145368 ----a-w- c:\windows\RTHDCPL.EXE
2013-09-24 17:59:34 86232 ----a-w- c:\windows\system32\RtkCoInstIIXP.dll
2013-09-16 23:57:26 22840 ----a-w- c:\windows\system32\drivers\avgidsshimx.sys
2013-09-13 17:44:26 2080472 ----a-w- c:\windows\RtlExUpd.dll
2013-09-09 23:43:20 27448 ----a-w- c:\windows\system32\drivers\avgrkx86.sys
.
============= FINISH: 13:20:56.34 ===============

mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav, i dobrodosao u Ambulantu. Idemo da zavirimo to malo dublje.



Preuzmi Farbar-ov Farbar Recovery Scan Tool () sa ove adrese na Desktop:
Postoji 32bit. i 64bit.-na verzija. Potrebno je preuzeti verziju koja je kompatibilna sa tvojim sistemom.
Ako nisi siguran koja verzija se odnosi na tvoj sistem, preuzmi ih obe i pokreni. Samo jedan od njih će raditi na tvom sistemu, to će biti prava verzija.

dvoklikom pokreni program, kada se alat pokrene klikni Yes na disclaimer prozor;
klikni na dugme Scan;
po završetku skeniranja, alat će formirati izveštaj (FRST.txt) u isti direktorijum gde je FRST alat sačuvan;
iskopiraj sadržaj FRST.txt izveštaja u poruku;
po prvom pokretanju, alat bi trebao formirati i dodatni izveštaj (Addition.txt);
okači Addition.txt izveštaj uz poruku koristeći opciju Prikači fajl






Potom ...






Preuzmite program GMER sa donjeg linka na Desktop:


GMER download
Kliknite dati link;
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati file, odaberite Desktop i kliknite Save.


Dvoklikom pokrenite GMER.
Sačekajte da se završi uvodno skeniranje - ukoliko se pojavi bilo kakav upit, kliknite No;
kliknite Scan i sačekajte da skeniranje bude završeno;
kliknite Save ... - izveštaj sačuvajte na Desktop (pod nazivom ARK);

kliknite taster >>> i odaberite Autostart karticu;
po završetku kratkotrajnog skeniranja, kliknite Copy;
otvorite Notepad i u njega postavite kopirani tekst - izveštaj sačuvajte na Desktop (pod nazivom autostart);

Priložite oba Gmer izveštaja uz poruku korišćenjem opcije Prikači fajl.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 07-12-2013 02
Ran by b (administrator) on B on 07-12-2013 19:09:03
Running from C:\Documents and Settings\b\My Documents\Downloads
Microsoft Windows XP Professional Service Pack 2 (X86) OS Language: English(US)
Internet Explorer Version 6
Boot Mode: Normal

==================== Processes (Whitelisted) ===================

(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgrsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgui.exe
(Realtek Semiconductor Corp.) C:\WINDOWS\RTHDCPL.EXE
(Skype Technologies S.A.) C:\Program Files\Skype\Phone\Skype.exe
(Microsoft Corporation) C:\Program Files\Messenger\msmsgs.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgfws.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgidsagent.exe
(Glarysoft Ltd) C:\Program Files\Glary Utilities 4\Integrator.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgwdsvc.exe
(NVIDIA Corporation) C:\WINDOWS\system32\nvsvc32.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
(Skype Technologies S.A.) C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgnsx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgemcx.exe
(AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\AVG2014\avgcsrvx.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files\Google\Chrome\Application\chrome.exe

==================== Registry (Whitelisted) ==================

HKLM\...\Run: [NvCplDaemon] - RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
HKLM\...\Run: [NvMediaCenter] - RunDLL32.exe NvMCTray.dll,NvTaskbarInit -login
HKLM\...\Run: [nwiz] - C:\Program Files\NVIDIA Corporation\nview\nwiz.exe [1634112 2012-08-30] ()
HKLM\...\Run: [PVR Agent] - C:\Program Files\KWorld Multimedia\PVR Plus\TVR\Scheduled.exe
HKLM\...\Run: [AVG_UI] - C:\Program Files\AVG\AVG2014\avgui.exe [4956176 2013-11-07] (AVG Technologies CZ, s.r.o.)
HKLM\...\Run: [RTHDCPL] - C:\WINDOWS\RTHDCPL.EXE [20145368 2013-10-04] (Realtek Semiconductor Corp.)
HKCU\...\Run: [Skype] - C:\Program Files\Skype\Phone\Skype.exe [19875432 2013-06-21] (Skype Technologies S.A.)
HKCU\...\Run: [MSMSGS] - C:\Program Files\Messenger\msmsgs.exe [1667584 2004-08-04] (Microsoft Corporation)
HKCU\...\Winlogon: [Shell] explorer.exe [1032192 2004-08-03] (Microsoft Corporation) <==== ATTENTION
MountPoints2: {ef058203-daf5-11dc-97ff-806d6172696f} - F:\bootcd\wintools\autorun.exe
AppInit_DLLs: [ ] ()
BootExecute: autocheck autochk * C:\PROGRA~1\AVG\AVG2014\avgrsx.exe /sync /restart

==================== Internet (Whitelisted) ====================

HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = msn.com/?pc=UP97&ocid=UP97DHP&dt=071113
HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKCU\Software\Microsoft\Internet Explorer\Main,First Home Page = g.msn.com/1ewenusDefaultPack/UP97_FRPage
HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = microsoft.com/isapi/redir.dll?prd=ie&pver=6&ar=msnhome
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = microsoft.com/isapi/redir.dll?prd={SUB_PRD}&clcid={SUB_CLSID}&pver={SUB_PVER}&ar=home
SearchScopes: HKLM - DefaultScope value is missing.
BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
BHO: No Name - {2977C29A-6723-4436-90BB-F7C5FDEF88A1} - No File
Toolbar: HKCU - &Address - {01E04581-4EEE-11D0-BFE9-00AA005B4383} - C:\WINDOWS\system32\browseui.dll (Microsoft Corporation)
Toolbar: HKCU - &Links - {0E5CBF21-D15F-11D0-8301-00AA005B4383} - C:\WINDOWS\system32\shell32.dll (Microsoft Corporation)
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\Skype4COM.dll (Skype Technologies)
Tcpip\Parameters: [DhcpNameServer] 192.168.1.1

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer - C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_9_900_152.dll ()
FF Plugin: @java.com/DTPlugin,version=10.25.2 - C:\WINDOWS\system32\npDeployJava1.dll (Oracle Corporation)
FF Plugin: @tools.google.com/Google Update;version=3 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Plugin: @tools.google.com/Google Update;version=9 - C:\Program Files\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
FF Extension: Skype Click to Call - C:\Program Files\Mozilla Firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
FF Extension: No Name - C:\Program Files\Mozilla Firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF HKLM\...\Firefox\Extensions: [speedtest4354@BestOffers] - C:\Documents and Settings\b\Application Data\Mozilla\Extensions\speedtest4354@BestOffers
FF Extension: Speed Test (4354) - C:\Documents and Settings\b\Application Data\Mozilla\Extensions\speedtest4354@BestOffers
FF HKLM\...\Firefox\Extensions: [freegames4357@BestOffers] - C:\Documents and Settings\b\Application Data\Mozilla\Extensions\freegames4357@BestOffers
FF Extension: Free Games (4357) - C:\Documents and Settings\b\Application Data\Mozilla\Extensions\freegames4357@BestOffers
FF HKCU\...\Firefox\Extensions: [speedtest4354@BestOffers] - C:\Documents and Settings\b\Application Data\Mozilla\Extensions\speedtest4354@BestOffers
FF Extension: Speed Test (4354) - C:\Documents and Settings\b\Application Data\Mozilla\Extensions\speedtest4354@BestOffers
FF HKCU\...\Firefox\Extensions: [freegames4357@BestOffers] - C:\Documents and Settings\b\Application Data\Mozilla\Extensions\freegames4357@BestOffers
FF Extension: Free Games (4357) - C:\Documents and Settings\b\Application Data\Mozilla\Extensions\freegames4357@BestOffers

Chrome:
=======

mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Dusane, ja ne mogu da ocistim tvoj racunar od malware jer koristis neazuriranu verziju XP-a SP2.

Trenutna verzija XP-a jeste Service Pack 3 koja je i po danasnjim standardnima stara tehnologija softvera i Microsoft ukida podrsku za XP sredinom sledece godine. Ako zelis da nastavis, onda prvo moras da imas SP3.


U svakom slucaju je potrebno instalirati Service Pack 3 za Windows XP jer na taj način ćeš ažurirati operativni sistem i zakrpiti odgovarajuće bezbednosne propuste na računaru. Prednosti su brojne, u odnosu na Service Pack 2, koji trenutno poseduješ.


Ako resis da azuriras sistem na SP3, kada to uradis, postavi mi svez DDS log.
Takodje, postavi mi i svez FRST log.