MyCity » Ambulanta -> Arhiva Ambulante » provera kompijutera od virusa

provera kompijutera od virusa

Napisano na dan: 29.9.2013
2

provera kompijutera od virusa
Pagination Prethodna strana

Idi na vrh

Poslao: 30 Sep 2013 01:30
Idi na vrh
offline
  • Nemanja Djukanovic
  • Pridružio: 18 Dec 2012
  • Poruke: 1761
  • Gde živiš: Niksic - Crna Gora

uradim tako ucitava , ucitava zavrsi al ne dava log ...

Poslao: 30 Sep 2013 11:50
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

Privremeno deaktiviraj Zastitni Software dok ovo radis. Koristicu FRST za ono sto je CF omanuo.



Start > Control Panel > Programs and Features. Deinstaliraj sledece ako je tamo:
BrowseFox



----- Potom -----



Otvori Notepad i iskopiraj sledeći tekst koji se nalazi unutar osenčenog prostora.


START
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_mediu.....1378305615
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_mediu.....1378305615
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
Toolbar: HKLM-x32 - No Name - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml
FF Extension: 51090d718df4c - C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi
C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi
FF Extension: ftd - C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\ftd@ftd.com.xpi
Task: {9AE61CD8-6630-430F-8F70-F357415AFA62} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe
C:\Program Files (x86)\Desk 365
CMD: ipconfig /flushdns
CMD: move "C:\Qoobox\Quarantine\C\Program Files (x86)\Acer\Acer Bio Protection\PwdFilter.dll.vir" "c:\program files (x86)\Acer\Acer Bio Protection\PwdFilter.dll"
END


U okviru Notepad-a klikni na File --> Save As
Fajl nazovi Fixlist i sačuvaj na Desktop
Dvoklikom ponovo pokreni FRST.exe
Klikni na Fix i sačekaj dok program ne završi.
Ukoliko program zatraži restart računara, omogući mu da to nesmetano obavi.
Nakon završetka rada, otvoriće se Notepad, sa sadržajem koji treba da kopiraš u temu.
Takođe, na Desktop-u će se nalaziti (fixlog.txt).

Potrebno je da fixlog.txt kopiras na forum

Poslao: 30 Sep 2013 12:38
Idi na vrh
offline
  • Nemanja Djukanovic
  • Pridružio: 18 Dec 2012
  • Poruke: 1761
  • Gde živiš: Niksic - Crna Gora

Napisano: 30 Sep 2013 12:38

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-09-2013 02
Ran by Korisnik at 2013-09-30 12:36:44 Run:1
Running from C:\Users\Korisnik\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
START
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_mediu.....1378305615
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_mediu.....1378305615
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
Toolbar: HKLM-x32 - No Name - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml
FF Extension: 51090d718df4c - C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi
C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi
FF Extension: ftd - C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\ftd@ftd.com.xpi
Task: {9AE61CD8-6630-430F-8F70-F357415AFA62} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe
C:\Program Files (x86)\Desk 365
CMD: ipconfig /flushdns
CMD: move "C:\Qoobox\Quarantine\C\Program Files (x86)\Acer\Acer Bio Protection\PwdFilter.dll.vir" "c:\program files (x86)\Acer\Acer Bio Protection\PwdFilter.dll"
END
*****************

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully.
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => Key not found.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml => Moved successfully.
"C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml " => File/Directory not found.
C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi => Moved successfully.
"C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi " => File/Directory not found.
C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\ftd@ftd.com.xpi => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9AE61CD8-6630-430F-8F70-F357415AFA62} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9AE61CD8-6630-430F-8F70-F357415AFA62} => Key deleted successfully.
C:\Windows\System32\Tasks\Desk 365 RunAsStdUser => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser => Key deleted successfully.
"C:\Program Files (x86)\Desk 365 " => File/Directory not found.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


========= move "C:\Qoobox\Quarantine\C\Program Files (x86)\Acer\Acer Bio Protection\PwdFilter.dll.vir" "c:\program files (x86)\Acer\Acer Bio Protection\PwdFilter.dll" =========

1 file(s) moved.

========= End of CMD: =========


==== End of Fixlog ====

Dopuna: 30 Sep 2013 12:38

Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 27-09-2013 02
Ran by Korisnik at 2013-09-30 12:36:44 Run:1
Running from C:\Users\Korisnik\Desktop
Boot Mode: Normal
==============================================

Content of fixlist:
*****************
START
SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_mediu.....1378305615
SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_mediu.....1378305615
SearchScopes: HKLM-x32 - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL =
BHO-x32: No Name - {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
Toolbar: HKLM-x32 - No Name - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml
FF Extension: 51090d718df4c - C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi
C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi
FF Extension: ftd - C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\ftd@ftd.com.xpi
Task: {9AE61CD8-6630-430F-8F70-F357415AFA62} - System32\Tasks\Desk 365 RunAsStdUser => C:\Program Files (x86)\Desk 365\desk365.exe
C:\Program Files (x86)\Desk 365
CMD: ipconfig /flushdns
CMD: move "C:\Qoobox\Quarantine\C\Program Files (x86)\Acer\Acer Bio Protection\PwdFilter.dll.vir" "c:\program files (x86)\Acer\Acer Bio Protection\PwdFilter.dll"
END
*****************

HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully.
HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key deleted successfully.
HKCR\Wow6432Node\CLSID\{5C255C8A-E604-49b4-9D64-90988571CECB} => Key not found.
HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => Value deleted successfully.
HKCR\Wow6432Node\CLSID\{EF99BD32-C1FB-11D2-892F-0090271D4F88} => Key not found.
C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml => Moved successfully.
"C:\Program Files (x86)\mozilla firefox\browser\searchplugins\qvo6.xml " => File/Directory not found.
C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi => Moved successfully.
"C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\51090d718df4c@51090d718df86.com.xpi " => File/Directory not found.
C:\Users\Korisnik\AppData\Roaming\Mozilla\Firefox\Profiles\qqktyqo7.default\Extensions\ftd@ftd.com.xpi => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{9AE61CD8-6630-430F-8F70-F357415AFA62} => Key deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{9AE61CD8-6630-430F-8F70-F357415AFA62} => Key deleted successfully.
C:\Windows\System32\Tasks\Desk 365 RunAsStdUser => Moved successfully.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Desk 365 RunAsStdUser => Key deleted successfully.
"C:\Program Files (x86)\Desk 365 " => File/Directory not found.

========= ipconfig /flushdns =========


Windows IP Configuration

Successfully flushed the DNS Resolver Cache.

========= End of CMD: =========


========= move "C:\Qoobox\Quarantine\C\Program Files (x86)\Acer\Acer Bio Protection\PwdFilter.dll.vir" "c:\program files (x86)\Acer\Acer Bio Protection\PwdFilter.dll" =========

1 file(s) moved.

========= End of CMD: =========


==== End of Fixlog ====

Poslao: 30 Sep 2013 14:16
Idi na vrh
offline
  • magna86  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 21 Jun 2008
  • Poruke: 6104

To je to.


Potrebno je deinstalirati ComboFix:
klikni start (ili ), a zatim RUN.

Na Visti koristiti Start Search polje ukoliko Run nije dostupan.

U liniju za unos teksta ukucaj (iskopiraj) sledeće:

ComboFix /Uninstall

Primeti da postoji razmak između "ComboFix" i "/Uninstall".



a zatim klikni OK (ili pritisni Enter).

Sačekaj da se proces deinstalacije završi.


============================



Preuzmi "Xplode"-ov DelFix i sačuvaj ga na Desktop

Dvoklikom pokreni program.

Štikliraj sledeće opcije:
Remove disinfection tools
Purge System Restore
Reset system settings

Klikni na dugme "Run" i pričekaj da program završi rad.
Alat ce ukloniti sve koriscene alate u ovoj temi...
Kada alat završi, otvoriće izvestaj u notepadu.
Napomena: Izvestaj ce takodje biti sacuvan na C:\DelFix.txt

Nije potrebno dostavljati izvestaj.


============================


Arrow Proveri da li su tvoje aplikacije ažurirane, preko Secunia Online Scannera:


Poseti ovaj sajt: Online Software Inspector (OSI)

Klikni na dugme Start Scanner.
Dozvoli pokretanje Jave i po potrebi pričekaj Status/Currently proces.

Klikni na dugme Start da bi započeo analizu.
Vreme skeniranja ne bi trebalo da traje duže od jedne minute.

Kada se završi analiza, ispod sekcije Programs / Result: izlistaće se neažurirane aplikacije kao i download linkovi za preuzimanje ažurnih verzija.

Preuzmi i instaliraj navedena ažuriranja/aplikacije.



============================


Idea Preporučujem ti da koristiš program MCShield za zaštitu USB memorijskih uređaja.

Program možeš preuzeti sa OVOG linka. Nakon instalacije programa, priključi USB memorijske uređaje, i oni će biti skenirani. Na kraju skeniranja ćeš dobiti izveštaj da je uređaj čist ili obaveštenje o uklonjenom malware-u.


Idea Takođe, poseti ovu temu da vidiš da li ti je pretraživač ranjiv i instaliraš ažurirane komponente
http://www.mycity.rs/Propusti-i-azuriranja/Testira.....anjiv.html

Poslao: 30 Sep 2013 20:08
Idi na vrh
offline
  • Nemanja Djukanovic
  • Pridružio: 18 Dec 2012
  • Poruke: 1761
  • Gde živiš: Niksic - Crna Gora

hvala puno ...

MyCity » Ambulanta -> Arhiva Ambulante » provera kompijutera od virusa

Ko je trenutno na forumu
 

Ukupno su 1051 korisnika na forumu :: 33 registrovanih, 8 sakrivenih i 1010 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, AleksSE, babaroga, Ben Roj, Bobrock1, bufanje, Georgius, goxin, havoc995, HrcAk47, Komentator, Koridor, Krusarac, Kubovac, Lieutenant, ljuba, Metanoja, milutin134, Povratak1912, procesor, rovac, Sirius, sovanova95, stegonosa, Stoilkovic, t.mile, Tragač, VanHelsing, vaso1, vathra, Vlad000, šumar bk2, Čivi