MyCity » Ambulanta -> Arhiva Ambulante » pomoć

pomoć

Napisano na dan: 28.11.2007

Strana:
1
2

pomoć

Pagination

Prethodna strana

Odgovori

Strana:
1
2

trajand Poslao: 29 Nov 2007 19:03 Idi na vrh
offline trajand Građanin Pridružio: 14 Feb 2007 Poruke: 62	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! ComboFix 07-11-19.4C - Srki 2007-11-28 18:34:38.2 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.48 [GMT 1:00] Running from: C:\Documents and Settings\Srki\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Srki\Desktop\CFScript.txt * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2007-10-28 to 2007-11-28 ))))))))))))))))))))))))))))))) . 2007-11-28 15:16 815,480 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-11-28 15:16 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2007-11-28 15:16 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2007-11-28 15:16 94,416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-11-28 15:16 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-11-28 15:16 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-11-28 15:16 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-11-28 15:16 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-11-27 23:18 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2007-11-27 23:17 <DIR> d-------- C:\kav 2007-11-27 22:41 <DIR> d-------- C:\Program Files\Kaspersky Lab 2007-11-27 22:41 <DIR> d-------- C:\Program Files\Common Files\KAV Shared Files 2007-11-27 14:38 <DIR> d-------- C:\Program Files\IObit 2007-11-27 14:16 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-11-27 14:14 145,984 --a------ C:\WINDOWS\system32\plwanjey.dll 2007-11-27 14:11 71,232 --a------ C:\WINDOWS\system32\lwpgyxyn.exe 2007-11-27 13:59 <DIR> d-------- C:\Program Files\Lavasoft 2007-11-27 13:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2007-11-26 20:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll 2007-11-26 20:19 <DIR> d-------- C:\Program Files\Alwil Software 2007-11-26 15:33 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared 2007-11-26 15:33 <DIR> d-------- C:\Documents and Settings\Srki\Application Data\Symantec 2007-11-26 15:32 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Symantec 2007-11-26 11:55 783,809 ---hs---- C:\WINDOWS\system32\jlkemnjc.ini 2007-11-26 11:54 85,056 --a------ C:\WINDOWS\system32\cjnmeklj.dll 2007-11-26 11:48 78,912 --a------ C:\WINDOWS\system32\occeunbb.dll 2007-11-26 11:40 145,984 --ah----- C:\WINDOWS\system32\yttfnowl.dll 2007-11-26 11:40 145,984 --a------ C:\WINDOWS\system32\rkqayjte.dll 2007-11-25 19:46 <DIR> d-------- C:\Program Files\vanBasco's Karaoke Player 2007-11-25 15:30 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2007-11-25 15:29 37,376 --a------ C:\WINDOWS\system32\xxyabca.dll 2007-11-21 18:09 <DIR> d-------- C:\XTCS Counter-Strike 1.6 Final Release 2007-11-20 15:42 <DIR> d-------- C:\Program Files\YouTube Downloader . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-28 15:44 --------- d-----w C:\Program Files\Yahoo! 2007-11-28 15:44 --------- d-----w C:\Program Files\CCleaner 2007-11-28 14:00 --------- d-----w C:\Program Files\Lx_cats 2007-11-27 12:58 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2007-11-27 12:57 --------- d-----w C:\Program Files\MSN Messenger 2007-11-26 22:21 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-26 22:08 --------- d-----w C:\Program Files\Add Remove Pro 2007-11-26 20:38 --------- d-----w C:\Program Files\Winamp 2007-11-14 15:59 --------- d-----w C:\Documents and Settings\Srki\Application Data\LimeWire 2007-11-12 11:30 --------- d-----w C:\Program Files\mIRC 2007-10-05 14:35 --------- d-----w C:\Documents and Settings\Srki\Application Data\mIRC 2007-09-30 18:34 --------- d-----w C:\Documents and Settings\Srki\Application Data\Skype 2007-09-30 18:10 --------- d-----w C:\Program Files\iolo 2007-09-28 09:24 --------- d-----w C:\Documents and Settings\Srki\Application Data\Ahead 2007-09-28 09:23 --------- d-----w C:\Program Files\Common Files\Ahead 2007-09-28 09:21 --------- d-----w C:\Program Files\Nero 2007-09-28 09:10 --------- d-----w C:\Program Files\CyberLink 2007-09-28 09:09 --------- d-----w C:\Documents and Settings\Srki\Application Data\InterVideo 2007-09-28 09:08 --------- d-----w C:\Program Files\InterVideo 2007-09-28 09:02 --------- d-----w C:\Program Files\K-Lite Codec Pack 2007-09-14 15:43 512 ----a-w C:\ScanSectorLog.dat . ((((((((((((((((((((((((((((( snapshot@2007-11-27_22.29.59.67 ))))))))))))))))))))))))))))))))))))))))) . - 2006-06-21 17:57:51 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2007-11-28 14:07:38 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2006-06-21 17:57:51 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2007-11-28 14:07:38 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat - 2006-06-21 17:57:51 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-11-28 14:07:38 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-11-27 21:35:44 262,144 ----a-w C:\WINDOWS\system32\config\systemprofile\NtUser.dat + 2007-11-28 15:37:33 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_5e4.dat + 2007-11-28 14:45:55 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_624.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown [HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{972e46ca-8a96-4411-a4e5-7498c0091ed3}] 2007-11-26 11:48 78912 --a------ C:\WINDOWS\system32\occeunbb.dll [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2006-11-17 04:42 C:\WINDOWS\soundman.exe] "VirtualDrive"="C:\Program Files\FarStone\VirtualDrive\vdtask.exe" [2004-01-27 18:12] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00] "Advanced WindowsCare V2 Personal"="C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe" [2007-09-19 21:33] "NvCplDaemon"="RUNDLL32.exe" [2004-08-03 23:56 C:\WINDOWS\system32\rundll32.exe] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-09-06 12:06] "LXCCCATS"="C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\LXCCtime.dll" [2005-01-10 04:21] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:56] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ptjpfddl] ptjpfddl.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tuvwxya] tuvwxya.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^InterVideo WinCinema Manager.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk backup=C:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Srki^Start Menu^Programs^Startup^The Matrix_ Path of Neo Registration.lnk] path=C:\Documents and Settings\Srki\Start Menu\Programs\Startup\The Matrix_ Path of Neo Registration.lnk backup=C:\WINDOWS\pss\The Matrix_ Path of Neo Registration.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Srki^Start Menu^Programs^Startup^Y'z ToolBar.lnk] path=C:\Documents and Settings\Srki\Start Menu\Programs\Startup\Y'z ToolBar.lnk backup=C:\WINDOWS\pss\Y'z ToolBar.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] 2006-10-09 10:28 139264 --a------ C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] C:\Program Files\DAEMON Tools\daemon.exe -lang 1033 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Program Files\Messenger\msmsgs.exe /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2006-01-12 15:40 155648 --a------ C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sXe Injected] C:\Program Files\sXe Injected\sXe Injected.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys R3 FVDSCSI;FVDSCSI;C:\WINDOWS\system32\DRIVERS\fvdscsi.sys R3 usnjsvc;Usluga Messenger Sharing Folders USN Journal Reader;"C:\Program Files\MSN Messenger\usnsvc.exe" S1 tvtool;tvtool;\??\C:\Program Files\TVTool 9.5\tvtool.sys S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys Newly Created Service - ASWUPDSV Newly Created Service - AVAST!_ANTIVIRUS Newly Created Service - AVAST!_MAIL_SCANNER Newly Created Service - AVAST!_WEB_SCANNER . ************************************************************************ catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net Rootkit scan 2007-11-28 18:36:27 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run LXCCCATS = rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************ . Completion time: 2007-11-28 18:37:34 C:\ComboFix2.txt ... 2007-11-27 22:33 . --- E O F --- Logfile of HijackThis v1.99.1 Scan saved at 18:38:50, on 28.11.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\FarStone\VirtualDrive\vdtask.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\WINDOWS\explorer.exe I:\hjd.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O2 - BHO: (no name) - {972e46ca-8a96-4411-a4e5-7498c0091ed3} - C:\WINDOWS\system32\occeunbb.dll O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [VirtualDrive] C:\Program Files\FarStone\VirtualDrive\vdtask.exe /AutoRestore O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [Advanced WindowsCare V2 Personal] "C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe" /startup O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\system32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16 O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O8 - Extra context menu item: &ICQ Toolbar Search - res://D:\ICQ\ICQToolbar\toolbaru.dll/SEARCH.HTML O8 - Extra context menu item: &Search - edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk142YYYU O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - ak.exe.imgfarm.com/images/nocache/funwebpro.....0.15-3.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{61C1C48F-1B3C-4575-8D48-A87F7A00F88D}: NameServer = 10.10.2.69,10.10.2.79 O17 - HKLM\System\CCS\Services\Tcpip\..\{FECBF21B-C7AD-4BCD-866B-F716C5D5D65F}: NameServer = 10.10.2.69,10.10.2.79 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: ptjpfddl - ptjpfddl.dll (file missing) O20 - Winlogon Notify: tuvwxya - tuvwxya.dll (file missing) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe Dopuna: 29 Nov 2007 19:03 da li trebam jos nesto ili je gotovo?

Profil

bobby Poslao: 29 Nov 2007 19:33 Idi na vrh
offline bobby Administrator Pridružio: 04 Sep 2003 Poruke: 24135 Gde živiš: Wien	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Nesto nije u redu. Jesi li sigurno u fajl CFScript.txt ubacio onaj tekst kako sam ti gore napisao? Fajlovi nisu obrisani, tako da mi je potrebno da znam zbog cega.

Profil

trajand Poslao: 29 Nov 2007 19:52 Idi na vrh
offline trajand Građanin Pridružio: 14 Feb 2007 Poruke: 62	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! ComboFix 07-11-19.4C - Srki 2007-11-28 19:32:29.3 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.79 [GMT 1:00] Running from: C:\Documents and Settings\Srki\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Srki\Desktop\CFScript.txt * Created a new restore point FILE C:\WINDOWS\system32\occeunbb.dll C:\WINDOWS\system32\plwanjey.dll C:\WINDOWS\system32\rkqayjte.dll C:\WINDOWS\system32\xxyabca.dll C:\WINDOWS\system32\yttfnowl.dll . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\occeunbb.dll C:\WINDOWS\system32\plwanjey.dll C:\WINDOWS\system32\rkqayjte.dll C:\WINDOWS\system32\xxyabca.dll C:\WINDOWS\system32\yttfnowl.dll . ((((((((((((((((((((((((( Files Created from 2007-10-28 to 2007-11-28 ))))))))))))))))))))))))))))))) . 2007-11-28 15:16 815,480 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-11-28 15:16 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2007-11-28 15:16 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2007-11-28 15:16 94,416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-11-28 15:16 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-11-28 15:16 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-11-28 15:16 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-11-28 15:16 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-11-27 23:18 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2007-11-27 23:17 <DIR> d-------- C:\kav 2007-11-27 22:41 <DIR> d-------- C:\Program Files\Kaspersky Lab 2007-11-27 22:41 <DIR> d-------- C:\Program Files\Common Files\KAV Shared Files 2007-11-27 14:38 <DIR> d-------- C:\Program Files\IObit 2007-11-27 14:16 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-11-27 14:11 71,232 --a------ C:\WINDOWS\system32\lwpgyxyn.exe 2007-11-27 13:59 <DIR> d-------- C:\Program Files\Lavasoft 2007-11-27 13:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2007-11-26 20:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll 2007-11-26 20:19 <DIR> d-------- C:\Program Files\Alwil Software 2007-11-26 15:33 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared 2007-11-26 15:33 <DIR> d-------- C:\Documents and Settings\Srki\Application Data\Symantec 2007-11-26 15:32 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Symantec 2007-11-26 11:55 783,809 ---hs---- C:\WINDOWS\system32\jlkemnjc.ini 2007-11-26 11:54 85,056 --a------ C:\WINDOWS\system32\cjnmeklj.dll 2007-11-25 19:46 <DIR> d-------- C:\Program Files\vanBasco's Karaoke Player 2007-11-25 15:30 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2007-11-21 18:09 <DIR> d-------- C:\XTCS Counter-Strike 1.6 Final Release 2007-11-20 15:42 <DIR> d-------- C:\Program Files\YouTube Downloader . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-28 15:44 --------- d-----w C:\Program Files\Yahoo! 2007-11-28 15:44 --------- d-----w C:\Program Files\CCleaner 2007-11-28 14:00 --------- d-----w C:\Program Files\Lx_cats 2007-11-27 12:58 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2007-11-27 12:57 --------- d-----w C:\Program Files\MSN Messenger 2007-11-26 22:21 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-26 22:08 --------- d-----w C:\Program Files\Add Remove Pro 2007-11-26 20:38 --------- d-----w C:\Program Files\Winamp 2007-11-14 15:59 --------- d-----w C:\Documents and Settings\Srki\Application Data\LimeWire 2007-11-12 11:30 --------- d-----w C:\Program Files\mIRC 2007-10-05 14:35 --------- d-----w C:\Documents and Settings\Srki\Application Data\mIRC 2007-09-30 18:34 --------- d-----w C:\Documents and Settings\Srki\Application Data\Skype 2007-09-30 18:10 --------- d-----w C:\Program Files\iolo 2007-09-28 09:24 --------- d-----w C:\Documents and Settings\Srki\Application Data\Ahead 2007-09-28 09:23 --------- d-----w C:\Program Files\Common Files\Ahead 2007-09-28 09:21 --------- d-----w C:\Program Files\Nero 2007-09-28 09:10 --------- d-----w C:\Program Files\CyberLink 2007-09-28 09:09 --------- d-----w C:\Documents and Settings\Srki\Application Data\InterVideo 2007-09-28 09:08 --------- d-----w C:\Program Files\InterVideo 2007-09-28 09:02 --------- d-----w C:\Program Files\K-Lite Codec Pack 2007-09-14 15:43 512 ----a-w C:\ScanSectorLog.dat . ((((((((((((((((((((((((((((( snapshot@2007-11-27_22.29.59.67 ))))))))))))))))))))))))))))))))))))))))) . - 2006-06-21 17:57:51 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2007-11-28 14:07:38 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2006-06-21 17:57:51 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2007-11-28 14:07:38 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat - 2006-06-21 17:57:51 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-11-28 14:07:38 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-11-27 21:35:44 262,144 ----a-w C:\WINDOWS\system32\config\systemprofile\NtUser.dat + 2007-11-28 18:35:56 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_634.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2006-11-17 04:42 C:\WINDOWS\soundman.exe] "VirtualDrive"="C:\Program Files\FarStone\VirtualDrive\vdtask.exe" [2004-01-27 18:12] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00] "Advanced WindowsCare V2 Personal"="C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe" [2007-09-19 21:33] "NvCplDaemon"="RUNDLL32.exe" [2004-08-03 23:56 C:\WINDOWS\system32\rundll32.exe] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-10-25 17:20] "LXCCCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll" [2005-01-10 04:21] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:56] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ptjpfddl] ptjpfddl.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tuvwxya] tuvwxya.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^InterVideo WinCinema Manager.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk backup=C:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Srki^Start Menu^Programs^Startup^The Matrix_ Path of Neo Registration.lnk] path=C:\Documents and Settings\Srki\Start Menu\Programs\Startup\The Matrix_ Path of Neo Registration.lnk backup=C:\WINDOWS\pss\The Matrix_ Path of Neo Registration.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Srki^Start Menu^Programs^Startup^Y'z ToolBar.lnk] path=C:\Documents and Settings\Srki\Start Menu\Programs\Startup\Y'z ToolBar.lnk backup=C:\WINDOWS\pss\Y'z ToolBar.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] 2006-10-09 10:28 139264 --a------ C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] C:\Program Files\DAEMON Tools\daemon.exe -lang 1033 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Program Files\Messenger\msmsgs.exe /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2006-01-12 15:40 155648 --a------ C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sXe Injected] C:\Program Files\sXe Injected\sXe Injected.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys R3 FVDSCSI;FVDSCSI;C:\WINDOWS\system32\DRIVERS\fvdscsi.sys S1 tvtool;tvtool;\??\C:\Program Files\TVTool 9.5\tvtool.sys S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys . ************************************************************************ catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net Rootkit scan 2007-11-28 19:38:05 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... HKLM\Software\Microsoft\Windows\CurrentVersion\Run LXCCCATS = rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************ . Completion time: 2007-11-28 19:39:58 - machine was rebooted C:\ComboFix2.txt ... 2007-11-28 18:37 C:\ComboFix3.txt ... 2007-11-27 22:33 . --- E O F --- Logfile of HijackThis v1.99.1 Scan saved at 19:42:50, on 28.11.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\FarStone\VirtualDrive\vdtask.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\WINDOWS\system32\notepad.exe C:\Program Files\Mozilla Firefox\firefox.exe I:\hjd.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [VirtualDrive] C:\Program Files\FarStone\VirtualDrive\vdtask.exe /AutoRestore O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [Advanced WindowsCare V2 Personal] "C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe" /startup O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16 O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O8 - Extra context menu item: &ICQ Toolbar Search - res://D:\ICQ\ICQToolbar\toolbaru.dll/SEARCH.HTML O8 - Extra context menu item: &Search - edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk142YYYU O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - ak.exe.imgfarm.com/images/nocache/funwebpro.....0.15-3.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{61C1C48F-1B3C-4575-8D48-A87F7A00F88D}: NameServer = 10.10.2.69,10.10.2.79 O17 - HKLM\System\CCS\Services\Tcpip\..\{FECBF21B-C7AD-4BCD-866B-F716C5D5D65F}: NameServer = 10.10.2.69,10.10.2.79 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O20 - Winlogon Notify: ptjpfddl - ptjpfddl.dll (file missing) O20 - Winlogon Notify: tuvwxya - tuvwxya.dll (file missing) O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe da li je sad dobro Dopuna: 29 Nov 2007 19:52 prvi put mi nije restartovao komp.sad je (nadam se)uradio kako treba.

Profil

bobby Poslao: 29 Nov 2007 20:40 Idi na vrh
offline bobby Administrator Pridružio: 04 Sep 2003 Poruke: 24135 Gde živiš: Wien	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Sada je OK, ali ima jos... Otvoriti Notepad i iskopirati sledeci tekst: `File:: C:\WINDOWS\system32\lwpgyxyn.exe C:\WINDOWS\system32\jlkemnjc.ini C:\WINDOWS\system32\cjnmeklj.dll` Snimiti na Desktop fajl iz Notepada kao "CFScript" Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici. Postaviti u sledecoj poruci log koji bude bio napravaljen na kraju ciscenja/skeniranja. Skeniraj ponovo HijackThisom i stikliraj polja ispred sledecih linija: O20 - Winlogon Notify: ptjpfddl - ptjpfddl.dll (file missing) O20 - Winlogon Notify: tuvwxya - tuvwxya.dll (file missing) Klikni Fix Checked Ukoliko si vec postavio na forum ComboFix log, sada restartuj komp. Nakon restarta napravi novi HijackThis log i postavi ga u poruku na forumu.

Profil

trajand Poslao: 29 Nov 2007 21:11 Idi na vrh
offline trajand Građanin Pridružio: 14 Feb 2007 Poruke: 62	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! ComboFix 07-11-19.4C - Srki 2007-11-28 20:50:11.4 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.91 [GMT 1:00] Running from: C:\Documents and Settings\Srki\Desktop\ComboFix.exe Command switches used :: C:\Documents and Settings\Srki\Desktop\CFScript.txt * Created a new restore point FILE C:\WINDOWS\system32\cjnmeklj.dll C:\WINDOWS\system32\jlkemnjc.ini C:\WINDOWS\system32\lwpgyxyn.exe . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\cjnmeklj.dll C:\WINDOWS\system32\jlkemnjc.ini C:\WINDOWS\system32\lwpgyxyn.exe . ((((((((((((((((((((((((( Files Created from 2007-10-28 to 2007-11-28 ))))))))))))))))))))))))))))))) . 2007-11-28 15:16 815,480 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-11-28 15:16 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2007-11-28 15:16 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2007-11-28 15:16 94,416 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-11-28 15:16 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-11-28 15:16 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-11-28 15:16 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-11-28 15:16 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-11-27 23:18 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Kaspersky Lab 2007-11-27 23:17 <DIR> d-------- C:\kav 2007-11-27 22:41 <DIR> d-------- C:\Program Files\Kaspersky Lab 2007-11-27 22:41 <DIR> d-------- C:\Program Files\Common Files\KAV Shared Files 2007-11-27 14:38 <DIR> d-------- C:\Program Files\IObit 2007-11-27 14:16 <DIR> d-------- C:\Program Files\SpywareBlaster 2007-11-27 13:59 <DIR> d-------- C:\Program Files\Lavasoft 2007-11-27 13:59 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft 2007-11-26 20:20 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll 2007-11-26 20:19 <DIR> d-------- C:\Program Files\Alwil Software 2007-11-26 15:33 <DIR> d-------- C:\Program Files\Common Files\Symantec Shared 2007-11-26 15:33 <DIR> d-------- C:\Documents and Settings\Srki\Application Data\Symantec 2007-11-26 15:32 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Symantec 2007-11-25 19:46 <DIR> d-------- C:\Program Files\vanBasco's Karaoke Player 2007-11-25 15:30 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2007-11-21 18:09 <DIR> d-------- C:\XTCS Counter-Strike 1.6 Final Release 2007-11-20 15:42 <DIR> d-------- C:\Program Files\YouTube Downloader . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-28 15:44 --------- d-----w C:\Program Files\Yahoo! 2007-11-28 15:44 --------- d-----w C:\Program Files\CCleaner 2007-11-28 14:00 --------- d-----w C:\Program Files\Lx_cats 2007-11-27 12:58 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2007-11-27 12:57 --------- d-----w C:\Program Files\MSN Messenger 2007-11-26 22:21 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-11-26 22:08 --------- d-----w C:\Program Files\Add Remove Pro 2007-11-26 20:38 --------- d-----w C:\Program Files\Winamp 2007-11-14 15:59 --------- d-----w C:\Documents and Settings\Srki\Application Data\LimeWire 2007-11-12 11:30 --------- d-----w C:\Program Files\mIRC 2007-10-05 14:35 --------- d-----w C:\Documents and Settings\Srki\Application Data\mIRC 2007-09-30 18:34 --------- d-----w C:\Documents and Settings\Srki\Application Data\Skype 2007-09-30 18:10 --------- d-----w C:\Program Files\iolo 2007-09-28 09:24 --------- d-----w C:\Documents and Settings\Srki\Application Data\Ahead 2007-09-28 09:23 --------- d-----w C:\Program Files\Common Files\Ahead 2007-09-28 09:21 --------- d-----w C:\Program Files\Nero 2007-09-28 09:10 --------- d-----w C:\Program Files\CyberLink 2007-09-28 09:09 --------- d-----w C:\Documents and Settings\Srki\Application Data\InterVideo 2007-09-28 09:08 --------- d-----w C:\Program Files\InterVideo 2007-09-28 09:02 --------- d-----w C:\Program Files\K-Lite Codec Pack 2007-09-14 15:43 512 ----a-w C:\ScanSectorLog.dat . ((((((((((((((((((((((((((((( snapshot@2007-11-27_22.29.59.67 ))))))))))))))))))))))))))))))))))))))))) . - 2006-06-21 17:57:51 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat + 2007-11-28 14:07:38 16,384 -c--a-w C:\WINDOWS\system32\config\systemprofile\Cookies\index.dat - 2006-06-21 17:57:51 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat + 2007-11-28 14:07:38 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\History\History.IE5\index.dat - 2006-06-21 17:57:51 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-11-28 14:07:38 32,768 -c--a-w C:\WINDOWS\system32\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\index.dat + 2007-11-27 21:35:44 262,144 ----a-w C:\WINDOWS\system32\config\systemprofile\NtUser.dat + 2007-11-28 19:53:20 16,384 ----atw C:\WINDOWS\TEMP\Perflib_Perfdata_624.dat . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "MsnMsgr"="C:\Program Files\MSN Messenger\MsnMsgr.exe" [2007-01-19 11:55] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2006-11-17 04:42 C:\WINDOWS\soundman.exe] "VirtualDrive"="C:\Program Files\FarStone\VirtualDrive\vdtask.exe" [2004-01-27 18:12] "SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" [2007-07-12 03:00] "Advanced WindowsCare V2 Personal"="C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe" [2007-09-19 21:33] "NvCplDaemon"="RUNDLL32.exe" [2004-08-03 23:56 C:\WINDOWS\system32\rundll32.exe] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-10-25 17:20] "LXCCCATS"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll" [2005-01-10 04:21] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-03 23:56] [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer] "NoResolveSearch"= 1 (0x1) [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ptjpfddl] ptjpfddl.dll [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\tuvwxya] tuvwxya.dll [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^InterVideo WinCinema Manager.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\InterVideo WinCinema Manager.lnk backup=C:\WINDOWS\pss\InterVideo WinCinema Manager.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Srki^Start Menu^Programs^Startup^The Matrix_ Path of Neo Registration.lnk] path=C:\Documents and Settings\Srki\Start Menu\Programs\Startup\The Matrix_ Path of Neo Registration.lnk backup=C:\WINDOWS\pss\The Matrix_ Path of Neo Registration.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^Srki^Start Menu^Programs^Startup^Y'z ToolBar.lnk] path=C:\Documents and Settings\Srki\Start Menu\Programs\Startup\Y'z ToolBar.lnk backup=C:\WINDOWS\pss\Y'z ToolBar.lnkStartup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] 2006-10-09 10:28 139264 --a------ C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] C:\Program Files\DAEMON Tools\daemon.exe -lang 1033 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] C:\Program Files\Messenger\msmsgs.exe /background [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck] 2006-01-12 15:40 155648 --a------ C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype] C:\Program Files\Skype\Phone\Skype.exe /nosplash /minimized [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\sXe Injected] C:\Program Files\sXe Injected\sXe Injected.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] C:\Program Files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ZoneAlarm Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe R0 videX32;videX32;C:\WINDOWS\system32\DRIVERS\videX32.sys R3 FVDSCSI;FVDSCSI;C:\WINDOWS\system32\DRIVERS\fvdscsi.sys R3 usnjsvc;Usluga Messenger Sharing Folders USN Journal Reader;"C:\Program Files\MSN Messenger\usnsvc.exe" S1 tvtool;tvtool;\??\C:\Program Files\TVTool 9.5\tvtool.sys S3 ss_bus;SAMSUNG Mobile USB Device 1.0 driver (WDM);C:\WINDOWS\system32\DRIVERS\ss_bus.sys S3 ss_mdfl;SAMSUNG Mobile USB Modem 1.0 Filter;C:\WINDOWS\system32\DRIVERS\ss_mdfl.sys S3 ss_mdm;SAMSUNG Mobile USB Modem 1.0 Drivers;C:\WINDOWS\system32\DRIVERS\ss_mdm.sys . ************************************************************************ catchme 0.3.1262 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net Rootkit scan 2007-11-28 20:54:24 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************ . Completion time: 2007-11-28 20:57:33 - machine was rebooted C:\ComboFix2.txt ... 2007-11-28 19:39 C:\ComboFix3.txt ... 2007-11-28 18:37 . --- E O F --- Dopuna: 29 Nov 2007 21:11 Logfile of HijackThis v1.99.1 Scan saved at 21:05:58, on 28.11.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\FarStone\VirtualDrive\vdtask.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\MSN Messenger\MsnMsgr.Exe C:\Program Files\Messenger\msmsgs.exe C:\Documents and Settings\Srki\Desktop\hjd.exe C:\WINDOWS\system32\wuauclt.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\MSN Messenger\usnsvc.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [VirtualDrive] C:\Program Files\FarStone\VirtualDrive\vdtask.exe /AutoRestore O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [Advanced WindowsCare V2 Personal] "C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe" /startup O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16 O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O8 - Extra context menu item: &ICQ Toolbar Search - res://D:\ICQ\ICQToolbar\toolbaru.dll/SEARCH.HTML O8 - Extra context menu item: &Search - edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk142YYYU O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - ak.exe.imgfarm.com/images/nocache/funwebpro.....0.15-3.cab O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{61C1C48F-1B3C-4575-8D48-A87F7A00F88D}: NameServer = 10.10.2.69,10.10.2.79 O17 - HKLM\System\CCS\Services\Tcpip\..\{FECBF21B-C7AD-4BCD-866B-F716C5D5D65F}: NameServer = 10.10.2.69,10.10.2.79 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Profil

bobby Poslao: 29 Nov 2007 21:22 Idi na vrh
offline bobby Administrator Pridružio: 04 Sep 2003 Poruke: 24135 Gde živiš: Wien	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Sredi jos samo ovo: Skeniraj ponovo HijackThisom i stikliraj polja ispred sledecih linija: O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZNxmk142YYYU O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} - http://ak.exe.imgfarm.com/images/nocache/funwebpro.....0.15-3.cab Klikni Fix Checked Vidi da li u Program Files imas neki folder MyWebSearch, ako ima - brisi. To je to. Kako se tebi cini?

Profil

trajand Poslao: 29 Nov 2007 21:27 Idi na vrh
offline trajand Građanin Pridružio: 14 Feb 2007 Poruke: 62	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Logfile of HijackThis v1.99.1 Scan saved at 21:22:06, on 28.11.2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\nvsvc32.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\FarStone\VirtualDrive\vdtask.exe C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\wuauclt.exe C:\Program Files\MSN Messenger\usnsvc.exe C:\Program Files\Mozilla Firefox\firefox.exe C:\Documents and Settings\Srki\Desktop\hjd.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = R3 - URLSearchHook: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll O3 - Toolbar: (no name) - {855F3B16-6D32-4fe6-8A56-BBB695989046} - (no file) O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [VirtualDrive] C:\Program Files\FarStone\VirtualDrive\vdtask.exe /AutoRestore O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe" O4 - HKLM\..\Run: [Advanced WindowsCare V2 Personal] "C:\Program Files\IObit\Advanced WindowsCare V2\Awcl.exe" /startup O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [LXCCCATS] rundll32 C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\LXCCtime.dll,_RunDLLEntry@16 O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O8 - Extra context menu item: &ICQ Toolbar Search - res://D:\ICQ\ICQToolbar\toolbaru.dll/SEARCH.HTML O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll O17 - HKLM\System\CCS\Services\Tcpip\..\{61C1C48F-1B3C-4575-8D48-A87F7A00F88D}: NameServer = 10.10.2.69,10.10.2.79 O17 - HKLM\System\CCS\Services\Tcpip\..\{FECBF21B-C7AD-4BCD-866B-F716C5D5D65F}: NameServer = 10.10.2.69,10.10.2.79 O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: lxcc_device - Lexmark International, Inc. - C:\WINDOWS\system32\lxcccoms.exe O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe Dopuna: 29 Nov 2007 21:27 Sada radi normalno.Hvala

Profil

MyCity » Ambulanta -> Arhiva Ambulante » pomoć

Ko je trenutno na forumu

Ukupno su 944 korisnika na forumu :: 4 registrovanih, 1 sakriven i 939 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: amaterSRB, Avalon015, vladetije, zlaya011

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by