|
| |||||||
| Registracija | Mapa Spy | Member List | Donacije | Pretraživanje | Today's Posts | Označi Sve Forume Kao Pročitane | Forum Rules |
 |
 |
| | Thread Tools |
|
#1
4. prosinac 2007, 11:10
| |||
| |||
| Hi momački, Ja sam pogledao oko ovog foruma i mnogih drugih mjesta, koji traže rješenje za moj problem. Sam naići na nekoliko različitih tema o tom virusu, pa ja se ispričavam za stvaranje novog, nego ja pokušao ispravci opisani u tim, i nije se bilo koji bliže uzimajući osloboditi od ovaj predmet. Našto JA OpenBSD zadaća voditelj, postoje 2 "iexplore.exe" procesi prikazuju, jedno obično koristi oko 10.000 K za mem, a druga je obično oko 40.000 K. Ovi procesi su tamo, iako sam ne koristeći Internet Explorer. Ako JA pokušati zaključno s ovim procesima, oni se automatski vratiti. Ja sam također uzimajući Internet Explorer popups svakih par minuta, koje sam pretpostavljiv ovo je nanošenje. U svakom slučaju, ovdje je moj hijackthis log. Logfile of HijackThis v1.99.1 Scan spremljena u 2:08:19 Na 12/4/2007 Platforma: Windows XP SP2 (Winnt 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Pokretanje procesa: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7,5 \ guard.exe C: \ WINDOWS \ system32 \ CTsvcCDA.exe C: \ WINDOWS \ system32 \ nvsvc32.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ WINDOWS \ system32 \ UAService7.exe C: \ WINDOWS \ explorer.exe C: \ WINDOWS \ system32 \ RUNDLL32.EXE C: \ WINDOWS \ RTHDCPL.EXE C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ ISUSPM.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ Program Files \ Creative \ MediaSource \ Detektor \ CTDetect.exe C: \ Program Files \ Internet Explorer \ iexplore.exe C: \ WINDOWS \ system32 \ wscntfy.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ Program Files \ Microsoft Office \ OFFICE11 \ WINWORD.EXE C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ Program Files \ MSN Messenger \ msnmsgr.exe C: \ Program Files \ MSN Messenger \ livecall.exe C: \ Program Files \ MSN Messenger \ usnsvc.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ Program Files \ hijackthis \ HijackThis.exe O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7,0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - (39F7E362-828A-4B5A-BCAF-5B79BFDFEA60) - C: \ Program Files \ BitComet \ tools \ BitCometBHO_1.1.7.4.dll O2 - BHO: (no name) - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [SkyTel] SkyTel.EXE O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [LogonStudio] "C: \ Program Files \ WinCustomize \ LogonStudio \ logonstudio.exe" / slučajni O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot O4 - HKLM \ .. \ Run: [tijelo siguran alat drv] C: \ Documents and Settings \ All Users \ Application Data \ aktivno pomicati tijelo sigurno \ medija bone.exe O4 - HKLM \ .. \ Run: [! AVG Anti-Spyware] "C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7,5 \ avgas.exe" / minimizirane O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ MSN Messenger \ MsnMsgr.Exe" / background O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-quiet O4 - HKCU \ .. \ Run: [JoyAxis] C: \ DOCUME ~ 1 \ KENFAR ~ 1 \ APPLIC ~ 1 \ USERFL ~ 1 \ Vc cool.exe O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [ISUSPM] "C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ ISUSPM.exe"-planer O4 - HKCU \ .. \ Run: [Creative Detektor] "C: \ Program Files \ Creative \ MediaSource \ Detektor \ CTDetect.exe" / R O4 - HKCU \ .. \ Run: [Uniblue RegistryBooster 2] C: \ Program Files \ Uniblue \ RegistryBooster 2 \ RegistryBooster.exe / S O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7,0 \ Reader \ reader_sl.exe O8 - Extra kontekst meni stavka: & D & ownload i sa BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddLink.htm O8 - Extra kontekst meni stavka: & D & ownload sve video sa BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddVideo.htm O8 - Extra kontekst meni stavka: & D & ownload sve sa BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddAllLink.htm O8 - Extra kontekst meni stavka: E & zvezi u Microsoft Excel - res: / / C: \ programa ~ 1 \ MICROS ~ 2 \ OFFICE11 \ EXCEL.EXE/3000 O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra button: BitComet Search - (461CC20B-FB6E-4f16-8FE8-C29359DB100E) - C: \ Program Files \ BitComet \ tools \ BitCometBHO_1.1.7.4.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ programa ~ 1 \ MICROS ~ 2 \ OFFICE11 \ REFIEBAR.DLL O9 - Extra button: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe O9 - Extra 'Tools' MENUITEM: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (00B71CFB-6864-4346-A978-C0A14556272C) (dame Class) -- http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: (20A60F0D-9AFA-4515-A0FD-83BD84642501) (dame Class) -- http://messenger.zone.msn.com/binary...r.cab56986.cab O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx1.mail.live.com/mail/w1/re...s/MSNPUpld.cab O16 - DPF: (5F8469B4-B055-49DD-83F7-62B522420ECC) (Facebook Foto Uploader Control) -- http://upload.facebook.com/controls/...toUploader.cab O16 - DPF: (8E0D4DE5-3180-4024-A327-4DFAD1796A8D) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: (BAE1D8DF-47E3-0B35-A1E7-EEB3FF2ECD19) (CPlayFirstddfotgControl Object) -- http://www.shockwave.com/content/din...g.1.0.0.33.cab O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab56907.cab O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab O16 - DPF: (DF780F87-FF2B-4DF8-92D0-73DB16A1543A) (PopCapLoader Object) -- http://www.shockwave.com/content/bej...loader_v10.cab O16 - DPF: (F04A8AE2-A59D-11D2-8792-00C04F8EF29D) (Hotmaila Privici Control) -- http://by111fd.bay111.hotmail.msn.co...x/HMAtchmt.ocx O18 - Protocol: livecall - (828030A1-22C1-4009-854F-8E305202313F) - C: \ programa ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL O18 - Protocol: msnim - (828030A1-22C1-4009-854F-8E305202313F) - C: \ programa ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL O20 - Winlogon Obavijesti: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll O23 - Service: AVG Anti-Spyware Guard - GRISOFT sro - C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7,5 \ guard.exe O23 - Service: Creative Servis za CDROM Access - Creative Technology Ltd - C: \ WINDOWS \ system32 \ CTsvcCDA.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe O23 - Service: Remote Packet bilježenja Protokol v.0 (eksperimentalno) (rpcapd) - Unknown vlasnika -% ProgramFiles% \ WinPcap \ rpcapd.exe "-d-f"% ProgramFiles% \ WinPcap \ rpcapd.ini (file missing) O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown vlasnika - C: \ WINDOWS \ system32 \ UAService7.exe |
|
#2
4. prosinca 2007, 12:22
| |||
| |||
| Dobrodošli na TCF. Dva pitanja, prije nego što nastavite. 1. Zašto postoji nijedan AntiVirus koristite? 2. Imate Windows firewall uključen?
__________________  |
|
#3
4. prosinca 2007, 12:45
| |||
| |||
| Vatrozid za Windows je on, a ja dont imati anti-virus na ovdje odmah (loše, znam:) |
|
#5
4. prosinca 2007, 13:19
| |||
| |||
| ok, to je instaliran. |
|
#6
4. prosinca 2007, 13:27
| |||
| |||
| Enable Prikazivanje skrivenih sistemskih datoteka i mapa 1. Desni klik Početak. 2. Odaberi Control Panel. 3. Odaberite Alati izbornika i kliknite Folder Options. 4. Odaberite View Tab. 5. Pod Skrivene datoteke i mape odaberite zaglavlje Prikaži skrivene datoteke i mape. 6. Isključi Sakrij proširenja za poznate vrste datoteka za izbor. 7. Isključi u zaštićenom Sakrij datoteke operacijskog sustava (preporučeno) opciju. 8. Kliknite Primijeniti. 9. Kliknite U redu. -------------------- 1. Ponovno pokrenuti u sigurnom načinu rada * Da biste dobili u sigurnom načinu rada. Ponovo pokrenite računalo, a kao što je računalo booting započeti kuckanje je "F8 Key". * Koristite tipke sa strelicama za pomicanje u "Safe Mode" i pritisnite tipku Enter. 2. Otvori HijackThis i odaberite Da li je sustav samo skenirati i zatim staviti kvačica pored: O4 - HKLM \ .. \ Run: [tijelo siguran alat drv] C: \ Documents and Settings \ All Users \ Application Data \ aktivno pomicati tijelo sigurno \ medija bone.exe O4 - HKCU \ .. \ Run: [JoyAxis] C: \ DOCUME ~ 1 \ KENFAR ~ 1 \ APPLIC ~ 1 \ USERFL ~ 1 \ Vc cool.exe Sada kliknite na Fix checked. 3. Dvaput kliknite na My Computer na desktopu i smjestiti slijedeće kartoteka / savijač i izbrisati njima (ako postoji) C: \ WINDOWS \ system32 \ cool.exe C: \ Documents and Settings \ KENFAR ~ 1 \ Application Data \ USERFL ~ 1 \ Vc cool.exe (u ~ 1 je put skraćeno) C: \ Documents and Settings \ All Users \ Application Data \ aktivno pomicati tijelo sigurno \ medija bone.exe C: \ WINDOWS \ system32 \ medija bone.exe Boot Reboot u normalnom načinu rada. -------------------- Deinstaliraj kopiju HijackThis imate i instalirati novu verziju s Ovaj Link Tada novi post HijackThis log.
__________________ |
|
#7
4. prosinca 2007, 13:40
| |||
| |||
| Logfile of Trend Micro HijackThis v2.0.2 Scan spremljena u 4:40:27 Na 12/4/2007 Platforma: Windows XP SP2 (Winnt 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Pokretanje procesa: C: \ WINDOWS \ System32 \ smss.exe C: \ WINDOWS \ system32 \ Winlogon.exe C: \ WINDOWS \ system32 \ services.exe C: \ WINDOWS \ system32 \ lsass.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe C: \ WINDOWS \ explorer.exe C: \ WINDOWS \ system32 \ spoolsv.exe C: \ WINDOWS \ system32 \ RUNDLL32.EXE C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7,5 \ guard.exe C: \ WINDOWS \ RTHDCPL.EXE C: \ WINDOWS \ system32 \ CTsvcCDA.exe C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe C: \ WINDOWS \ system32 \ nvsvc32.exe C: \ WINDOWS \ system32 \ Svchost.exe C: \ programa ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe C: \ WINDOWS \ system32 \ UAService7.exe C: \ WINDOWS \ system32 \ Ctfmon.exe C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ ISUSPM.exe C: \ Program Files \ Creative \ MediaSource \ Detektor \ CTDetect.exe C: \ Program Files \ Adobe \ Acrobat 7,0 \ Reader \ reader_sl.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe C: \ WINDOWS \ System32 \ Svchost.exe C: \ Program Files \ Mozilla Firefox \ firefox.exe C: \ WINDOWS \ system32 \ wuauclt.exe C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7,0 \ ActiveX \ AcroIEHelper.dll O2 - BHO: BitComet ClickCapture - (39F7E362-828A-4B5A-BCAF-5B79BFDFEA60) - C: \ Program Files \ BitComet \ tools \ BitCometBHO_1.1.7.4.dll O2 - BHO: (no name) - (53707962-6F74-2D53-2644-206D7942484F) - C: \ Program Files \ Spybot - Search & Destroy \ SDHelper.dll O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE O4 - HKLM \ .. \ Run: [SkyTel] SkyTel.EXE O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install O4 - HKLM \ .. \ Run: [LogonStudio] "C: \ Program Files \ WinCustomize \ LogonStudio \ logonstudio.exe" / slučajni O4 - HKLM \ .. \ Run: [SunJavaUpdateSched] "C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ jusched.exe" O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot O4 - HKLM \ .. \ Run: [! AVG Anti-Spyware] "C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7,5 \ avgas.exe" / minimizirane O4 - HKLM \ .. \ Run: [avast!] C: \ programa ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe O4 - HKCU \ .. \ Run: [MsnMsgr] "C: \ Program Files \ MSN Messenger \ MsnMsgr.Exe" / background O4 - HKCU \ .. \ Run: [Yahoo! Pager] "C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe"-quiet O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe O4 - HKCU \ .. \ Run: [ISUSPM] "C: \ Program Files \ Common Files \ InstallShield \ UpdateService \ ISUSPM.exe"-planer O4 - HKCU \ .. \ Run: [Creative Detektor] "C: \ Program Files \ Creative \ MediaSource \ Detektor \ CTDetect.exe" / R O4 - HKCU \ .. \ Run: [Uniblue RegistryBooster 2] C: \ Program Files \ Uniblue \ RegistryBooster 2 \ RegistryBooster.exe / S O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7,0 \ Reader \ reader_sl.exe O8 - Extra kontekst meni stavka: & D & ownload i sa BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddLink.htm O8 - Extra kontekst meni stavka: & D & ownload sve video sa BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddVideo.htm O8 - Extra kontekst meni stavka: & D & ownload sve sa BitComet - res: / / C: \ Program Files \ BitComet \ BitComet.exe / AddAllLink.htm O8 - Extra kontekst meni stavka: E & zvezi u Microsoft Excel - res: / / C: \ programa ~ 1 \ MICROS ~ 2 \ OFFICE11 \ EXCEL.EXE/3000 O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_03 \ bin \ ssv.dll O9 - Extra button: BitComet Search - (461CC20B-FB6E-4f16-8FE8-C29359DB100E) - C: \ Program Files \ BitComet \ tools \ BitCometBHO_1.1.7.4.dll O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ programa ~ 1 \ MICROS ~ 2 \ OFFICE11 \ REFIEBAR.DLL O9 - Extra button: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe O9 - Extra 'Tools' MENUITEM: Yahoo! Messenger - (E5D12C4E-7B4F-11D3-B5C9-0050045C3C96) - C: \ Program Files \ Yahoo! \ Messenger \ YahooMessenger.exe O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe O16 - DPF: (00B71CFB-6864-4346-A978-C0A14556272C) (dame Class) -- http://messenger.zone.msn.com/binary...r.cab31267.cab O16 - DPF: (20A60F0D-9AFA-4515-A0FD-83BD84642501) (dame Class) -- http://messenger.zone.msn.com/binary...r.cab56986.cab O16 - DPF: (30528230-99f7-4bb4-88d8-fa1d4f56a2ab) (YInstStarter Class) - C: \ Program Files \ Yahoo! \ Common \ yinsthelper.dll O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx1.mail.live.com/mail/w1/re...s/MSNPUpld.cab O16 - DPF: (5F8469B4-B055-49DD-83F7-62B522420ECC) (Facebook Foto Uploader Control) -- http://upload.facebook.com/controls/...toUploader.cab O16 - DPF: (8E0D4DE5-3180-4024-A327-4DFAD1796A8D) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab31267.cab O16 - DPF: (BAE1D8DF-47E3-0B35-A1E7-EEB3FF2ECD19) (CPlayFirstddfotgControl Object) -- http://www.shockwave.com/content/din...g.1.0.0.33.cab O16 - DPF: (C3F79A2B-B9B4-4A66-B012-3EE46475B072) (MessengerStatsClient Class) -- http://messenger.zone.msn.com/binary...t.cab56907.cab O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab O16 - DPF: (DF780F87-FF2B-4DF8-92D0-73DB16A1543A) (PopCapLoader Object) -- http://www.shockwave.com/content/bej...loader_v10.cab O16 - DPF: (F04A8AE2-A59D-11D2-8792-00C04F8EF29D) (Hotmaila Privici Control) -- http://by111fd.bay111.hotmail.msn.co...x/HMAtchmt.ocx O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe O23 - Service: avast! Mail Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe O23 - Service: avast! Web Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe O23 - Service: AVG Anti-Spyware Guard - GRISOFT sro - C: \ Program Files \ Grisoft \ AVG Anti-Spyware 7,5 \ guard.exe O23 - Service: Creative Servis za CDROM Access - Creative Technology Ltd - C: \ WINDOWS \ system32 \ CTsvcCDA.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 1050 \ Intel 32 \ IDriverT.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe O23 - Service: Remote Packet bilježenja Protokol v.0 (eksperimentalno) (rpcapd) - CACE Technologies - C: \ Program Files \ WinPcap \ rpcapd.exe O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown vlasnika - C: \ WINDOWS \ system32 \ UAService7.exe -- End of file - 7759 bytes |
|
#8
4. prosinca 2007, 13:53
| |||
| |||
| Zapisnička izgleda dobro, koliko je računalo sada?
__________________ |
|
#9
4. prosinca 2007, 14:15
| |||
| |||
| To je velika radna sada. iexplore.exe i zadaci nisu se vratim, nisam imao bilo koji pop-upove, i čini se da se izvode brže sada malo previše. puno hvala za pomoć! Nakon obličje okolo za dana da saznate kako da biste dobili osloboditi od ovaj, je li riješeno ni u kojem trenutku haha, hvala opet |
|
#10
4. prosinca 2007, 14:26
| |||
| |||
| Nema problema. Trebate trčanje virus skandirati sada Avast koji je instaliran. Također preuzeti i pokrenuti Superantispyware (SAS) SUPERAntispyware Free Edition kako bi bili sigurni da se tamo ništa drugo da HijackThis nije mogla pronaći. Check out the free alata u ovaj post Safe surf ........
__________________ |
