manji kapital -

Magazine
Go Back   Computer soka > Computer Software > Virus, Spyware i sigurnost
Reload this Page

Iexplore.exe virus ponovo!

Registracija Mapa Spy Member List Donacije Pretraživanje Today's Posts Označi Sve Forume Kao Pročitane Forum Rules

Register


 Default 

Iexplore.exe virus ponovo!




Reply
Stranica 1 od 2 1 2
 
Thread Tools
  #1  
Old 10. listopad 2008, 19:08
Novi član grupe
  
Default Iexplore.exe virus ponovo!

Pozdrav Mislim da sam također imati virus iexplore i imaju mnoge različite programe pokušao da biste dobili osloboditi od Internet ali nitko ne rade! Vidio sam da je vaš site pomaže puno ppl pa mi možda previše? Ovo je moja kidnapovati ovaj log:


Logfile of Trend Micro HijackThis v2.0.2
Scan spremljena u 1:01:32, na 11/10/2008
Platforma: Windows XP SP3 (Winnt 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal
Pokretanje procesa:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ Winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ Ati2evxx.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ WINDOWS \ System32 \ Svchost.exe
C: \ WINDOWS \ system32 \ Ati2evxx.exe
C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe
C: \ WINDOWS \ explorer.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ WINDOWS \ system32 \ acs.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe
C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ Windows \ System \ hpsysdrv.exe
C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe
C: \ WINDOWS \ ALCXMNTR.EXE
C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe
C: \ HP \ KBD \ KBD.EXE
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe
C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgcc.exe
C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe
C: \ WINDOWS \ system32 \ Ctfmon.exe
C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe
C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WLLoginProxy.exe
C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE
C: \ WINDOWS \ system32 \ taskmgr.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://www.limewire.com/inclient/?st...ows + XP & osv = 5,1
R1 - HKCU \ Software \ Microsoft \ Windows \ CurrentVersion \ Int ernet Postavke, ProxyOverride = *. lokalne
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Adobe \ Acrobat 7,0 \ ActiveX \ AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (file missing)
O2 - BHO: zlonamjernog Scripts Scanner - (55EA1964-F5E4-4D6A-B9B2-125B37655FCB) - C: \ Documents and Settings \ All Users \ Application Data \ Prevx \ pxbho.dll
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ program files \ google \ googletoolbar1.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL
O3 - Toolbar: & Google - (2318C2B1-4965-11d4-9B18-009027A5CD4F) - c: \ program files \ google \ googletoolbar1.dll
O3 - Toolbar: ZoneAlarm Spy Blocker - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL
O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / ukvariti / RemAdvDef / Migration32
O4 - HKLM \ .. \ Run: [MSPY2002] C: \ Windows \ System32 \ IME \ PINTLGNT \ ImScInst.exe / Sync
O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ Windows \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE / Sync
O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ Windows \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName
O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ windows \ system \ hpsysdrv.exe
O4 - HKLM \ .. \ Run: [ATIPTA] C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe
O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE
O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM \ .. \ Run: [TWCU] "C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe"-nogui
O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE
O4 - HKLM \ .. \ Run: [EPSON CX3700 gramofonska igla Series] C: \ WINDOWS \ System32 \ spool \ drivers \ W32X86 \ 3 \ E_FATIA CP.EXE / F "C: \ WINDOWS \ Temp \ E_SC4.tmp" / EF "HKLM"
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe
O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / StartUp
O4 - HKLM \ .. \ Run: [Zastava posjeduje Live mrgodan] C: \ Documents and Settings \ All Users \ Application Data \ Software pravilu flag posjeduje \ Prvo obj.exe
O4 - HKLM \ .. \ Run: [PrevxOne] "C: \ Program Files \ Prevx2 \ PXConsole.exe"
O4 - HKLM \ .. \ Run: [ZoneAlarm Client] "C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe"
O4 - HKCU \ .. \ Run: [MODE REAL] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe
O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe
O4 - HKUS \ S-1-5-19 \ .. \ Run: [AVG7_Run] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [AVG7_Run] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'NETWORK SERVICE')
O4 - HKUS \ S-1-5-18 \ .. \ Run: [AVG7_Run] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SYSTEM')
O4 - HKUS \. DEFAULT \ .. \ Run: [AVG7_Run] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C: \ Program Files \ Adobe \ Acrobat 7,0 \ Reader \ reader_sl.exe
O4 - Global Startup: NkbMonitor.exe.lnk = C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe
O8 - Extra kontekst meni stavka: Clean & Tragovi - C: \ Program Files \ pecati \ privatnosti Package \ dapcleanerie.htm
O8 - Extra kontekst meni stavka: & & s pecati Download - C: \ Program Files \ pecati \ dapextie.htm
O8 - Extra kontekst meni stavka: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html
O8 - Extra kontekst meni stavka: Povratni Links - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra kontekst meni stavka: Predmemorirano snimka Page - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html
O8 - Extra kontekst meni stavka: Download & all s pecati - C: \ Program Files \ pecati \ dapextie2.htm
O8 - Extra kontekst meni stavka: E & zvezi u Microsoft Excel - res: / / C: \ programa ~ 1 \ MICROS ~ 3 \ Office12 \ EXCEL.EXE/3000
O8 - Extra kontekst meni stavka: Similar Pages - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html
O8 - Extra kontekst meni stavka: Prevedi na engleski - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ programa ~ 1 \ MICROS ~ 3 \ Office12 \ REFIEBAR.DLL
O9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL
O9 - Extra button: Connection Pomoć - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Prodavateljima \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm
O9 - Extra 'Tools' MENUITEM: Connection Pomoć - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Prodavateljima \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Foto Uploader 5) -- http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab
O16 - DPF: (96EEC7FF-47F3-106A-90D6-B4BB754AA40E) (Poli Kodirani Online) -- https: / / autxn.paywithpoli.com / ewcust...iPayOnline.cab
O23 - Service: TP-LINK Configuration Service (ACS) - Unknown vlasnika - C: \ WINDOWS \ system32 \ acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: ati brza tipka Poller - ATI Technologies Inc - C: \ WINDOWS \ system32 \ Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, sro - C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, sro - C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: PREVXAgent - Prevx - C: \ Program Files \ Prevx2 \ PXAgent.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe
--
End of file - 10831 bytes
  #2  
Old 10. listopad 2008, 23:12
Moderator / ica grupe
  
Default Iexplore.exe virus ponovo!

Preuzimanje Landarati S & D po Eric_71 i spremite ju na radnu površinu.
Landarati S & D će se samo na Windows XP i Windows Vista

Onemogući protuvirusni programi, tako i antimalware ne ometati vođenje landarati S & D.
Da biste vidjeli kako to onesposobiti sigurnosni programi posjetite ovaj tutorial:
Kako privremeno onemogućiti Vaš protuvirusni programi, vatrozid i protivvazdušnu zlonamjerni softver Programi
  • Dvokliknite Landarati S & D.exe
  • Izaberite jezik utipkajući od odgovarajuće slovo i pritisnuti Enter
  • Kliknite U redu na informativni prozor
  • Vrsta 1, Izabrati Opcija 1 (Search) potom pritisnite Enter
  • Pričekajte do kraja skeniranje
  • Izvješće će biti generiran post sadržaj je na sljedeći odgovor.
Primjerak izvještaja možete pronaći na ovoj lokaciji: systemdrive%% \ lopR.txt, u većini slučajeva C: \lopR.txt
__________________
  #3  
Old 11. listopad 2008, 00:15
Novi član grupe
  
Default Iexplore.exe virus ponovo!

Evo rezultata iz landarati S & D pretraživanje:



-------------------- \ \ Landarati S & D 4.2.4-5 XP / Vista
Microsoft Windows XP Home Edition (v5.1.2600) Service Pack 3
X86-based PC (Uniprocessor Free: AMD Sempron (tm) Processor 3200 +)
BIOS: Phoenix - Award BIOS v6.00PG
Suradnik: Compaq_Owner (Administrator)
BOOT: Normalni boot
Antivirusi: AVG 7.5.524 7.5.524 (nije aktiviran)
Firewall: Firewall ZoneAlarm 7.0.483.000 (nije aktiviran)
C: \ (Local Disk) - NTFS - Ukupno: 68 Idi Free: 10 Idi
D: \ (Local Disk) - FAT32 - Ukupno: 5 Idi Free: 1 Idi
E: \ (CD ili DVD)
F: \ (CD ili DVD)
G: \ (USB)
H: \ (USB)
I: \ (USB)
J: \ (USB)
"C: \ landarati SD" (MAJ: 02/10/2008 | 23:42)
Opcija: [1] (subota 11/10/2008 | 18:11)

-------------------- \ \ Popis mapa u APPLIC ~ 1
[11/10/2008 | 04:05] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Adobe
[03/10/2007 | 01:28] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Apple
[12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Apple Computer
[28/08/2007 | 04:28] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Autodesk
[03/09/2008 | 10:46] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Avg7
[10/06/2008 | 12:37] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Avg8
[02/07/2006 | 01:52] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> DVD Stisni
[15/07/2006 | 12:35] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> EnterNHelp
[27/03/2007 | 10:25] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Google
[18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Grisoft
[23/10/2007 | 12:15] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Instalacije
[12/09/2005 | 09:21] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> InstallShield
[11/10/2008 | 12:29] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> MailFrontier
[18/08/2008 | 04:05] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Microsoft
[10/09/2008 | 07:07] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Microsoft <DIR> Pomoć
[10/09/2007 | 04:25] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Nero
[11/10/2008 | 03:51] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> NOS
[21/05/2008 | 12:55] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Drivers <DIR> PC Headquarters
[12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> QuickTime
[24/11/2007 | 02:56] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Real
[12/09/2005 | 09:04] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> SBSI
[02/02/2008 | 05:17] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> SEAGATE
[09/10/2008 | 11:53] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Software pravilu flag posjeduje
[01/11/2006 | 01:13] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Sophos
[14/09/2008 | 02:08] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Spybot - Search & Destroy
[19/05/2008 | 07:41] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Symantec
[11/10/2008 | 06:00] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Temp <DIR>
[15/02/2006 | 01:11] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> UDL
[15/07/2006 | 12:35] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Ultima_T15
[08/04/2006 | 02:27] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> Windows Genuine Advantage
[22/06/2008 | 11:01] C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ <DIR> WLInstaller
[17/03/2008 | 09:32] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Adobe
[11/10/2008 | 03:55] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> AdobeUM
[13/09/2007 | 05:26] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> ispred
[13/06/2008 | 07:29] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Apple Computer
[02/10/2007 | 12:55] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> ArcSoft
[18/06/2006 | 11:34] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Atari
[21.05.2007 | 07:47] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Autodesk
[11/10/2008 | 11:11] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> AVG7
[19/05/2008 | 02:40] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> AVGTOOLBAR
[08/10/2008 | 01:29] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> BitTorrent
[21.05.2007 | 12:09] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Command & osvojiti 3 Tiberium Wars
[01/09/2006 | 08:52] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Datalayer
[28/05/2007 | 02:25] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> dvdcss
[13/08/2007 | 03:00] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> EPSON
[03/05/2007 | 02:12] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Google
[07/09/2006 | 02:08] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Pomoć
[26/06/2008 | 12:16] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> HPQ
[16/12/2004 | 04:22] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ Identities <DIR>
[19/02/2006 | 05:44] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> InterVideo
[23/04/2008 | 11:49] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> iWin
[03/05/2008 | 03:20] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Joost
[28/01/2006 | 03:15] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Leadertech
[13/09/2008 | 08:45] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> LimeWire
[14/02/2006 | 05:22] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Macromedia
[24/11/2007 | 03:04] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Media Player Classic
[19/05/2008 | 06:44] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Microsoft
[09/04/2008 | 06:13] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Mozilla
[15/07/2006 | 12:31] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Nikon
[01/09/2006 | 08:52] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ Nokia <DIR>
[01/09/2006 | 08:54] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Nokia Multimedia Player
[01/09/2006 | 08:41] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> PC Suite
[19/05/2008 | 07:32] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Real
[12/09/2005 | 09:30] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> SampleView
[21.05.2007 | 12:07] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> SecuROM
[09/10/2008 | 11:54] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Sapun leži ljubav
[28/01/2006 | 03:16] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Sonic
[23/04/2008 | 11:45] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> SpinTop
[14/09/2008 | 06:04] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> spore
[15/04/2008 | 05:04] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Spybot - Search & Destroy
[14/02/2006 | 05:49] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> nedjelja
[12/09/2005 | 09:41] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> Symantec
[16/04/2008 | 06:42] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> U3
[26/05/2008 | 11:14] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> uTorrent
[27/05/2006 | 09:46] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> VLC
[20/05/2008 | 10:26] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ <DIR> WinBatch
[12/09/2005 | 09:27] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ <DIR> Apple Computer
[16/12/2004 | 04:22] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ Identities <DIR>
[12/09/2005 | 09:51] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ <DIR> Microsoft
[12/09/2005 | 09:21] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ <DIR> Real
[12/09/2005 | 09:30] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ <DIR> SampleView
[12/09/2005 | 09:41] C: \ DOCUME ~ 1 \ DEFAUL ~ 1 \ APPLIC ~ 1 \ <DIR> Symantec
[18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ Mještani ~ 1 \ APPLIC ~ 1 \ <DIR> AVG7
[18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ Mještani ~ 1 \ APPLIC ~ 1 \ <DIR> Microsoft
[18/08/2008 | 07:44] C: \ DOCUME ~ 1 \ NETWOR ~ 1 \ APPLIC ~ 1 \ <DIR> Microsoft

-------------------- \ \ Scheduled Tasks nalazi u C: \ WINDOWS \ Tasks
[11/10/2008 06:00] [- ah -----] C: \ WINDOWS \ zadaci \ A396018B9185B27B.job
[11/10/2008 06:11] [- a ------] C: \ WINDOWS \ zadaci \ Symantec NetDetect.job
[11/10/2008 05:00] [- a ------] C: \ WINDOWS \ zadaci \ RegCure Program Check.job
[28/08/2008 04:00 AM] [- a ------] C: \ WINDOWS \ zadaci \ RegCure.job
[11/10/2008 04:07] [- ah -----] C: \ WINDOWS \ zadaci \ SA.DAT
[05/08/2004 05:00] [-ura -----] C: \ WINDOWS \ zadaci \ desktop.ini
(A396018B9185B27B.job) = (c: \ docume ~ 1 \ Compaqa ~ 1 \ applic ~ 1 \ soapli ~ 1 \ Axisgreatex tra.exe)
-------------------- \ \ Popis mapa u C: \ Program Files
[27/07/2008 | 05:02] C: \ Program Files \ <DIR> Activision
[11/10/2008 | 04:05] C: \ Program Files \ Adobe <DIR>
[15/06/2008 | 12:20] C: \ Program Files \ <DIR> ispred
[20/05/2007 | 11:20] C: \ Program Files \ Alcohol Soft <DIR>
[03/06/2008 | 09:01] C: \ Program Files \ Apple Software Update <DIR>
[15/07/2006 | 12:27] C: \ Program Files \ <DIR> ArcSoft
[12/09/2005 | 09:13] C: \ Program Files \ ATI Technologies <DIR>
[21.05.2007 | 07:36] C: \ Program Files \ Autodesk <DIR>
[27/05/2008 | 04:42] C: \ Program Files \ AVG <DIR>
[20/06/2008 | 04:54] C: \ Program Files \ BitTorrent <DIR>
[11/10/2008 | 04:05] C: \ Program Files \ Common Files <DIR>
[24/11/2004 | 01:06] C: \ Program Files \ <DIR> ComPlus Programi
[21/05/2008 | 12:51] C: \ Program Files \ <DIR> pecati
[08/11/2006 | 02:07] C: \ Program Files \ <DIR> DivX
[30/09/2008 | 09:12] C: \ Program Files \ <DIR> DominateGame
[21.05.2007 | 10:35] C: \ Program Files \ <DIR> Drug Lord 2
[18/08/2008 | 03:56] C: \ Program Files \ D-Tools <DIR>
[08/11/2006 | 12:56] C: \ Program Files \ <DIR> DVD Stisni
[19/05/2008 | 07:12] C: \ Program Files \ Internet <DIR> Easy signup
[14/09/2008 | 06:02] C: \ Program Files \ Electronic Arts <DIR>
[15/02/2006 | 01:11] C: \ Program Files \ <DIR> Epson
[26/05/2008 | 11:15] C: \ Program Files \ <DIR> eToro
[30/09/2008 | 09:12] C: \ Program Files \ <DIR> EV Novoj
[13/11/2006 | 09:39] C: \ Program Files \ <DIR> FLVPlayer
[26/06/2008 | 12:13] C: \ Program Files \ GameSpy Arcade <DIR>
[12/09/2005 | 09:37] C: \ Program Files \ Google <DIR>
[27/11/2006 | 10:19] C: \ Program Files \ <DIR> Graf
[08/11/2007 | 06:44] C: \ Program Files \ <DIR> Griffin Technology
[18/08/2008 | 07:44] C: \ Program Files \ <DIR> Grisoft
[27/03/2006 | 09:17] C: \ Program Files \ <DIR> GustoSoft
[29/09/2008 | 04:41] C: \ Program Files \ <DIR> Hp
[05/12/2007 | 01:09] C: \ Program Files \ <DIR> Infogrames Interactive
[14/09/2008 | 06:03] C: \ Program Files \ InstallShield Installation Information <DIR>
[17/08/2008 | 09:45] C: \ Program Files \ Internet Explorer <DIR>
[12/09/2005 | 09:23] C: \ Program Files \ <DIR> InterVideo
[03/06/2008 | 09:04] C: \ Program Files \ iPod <DIR>
[14/02/2006 | 05:20] C: \ Program Files \ <DIR> iPrimus
[03/06/2008 | 09:05] C: \ Program Files \ iTunes <DIR>
[30/09/2008 | 08:51] C: \ Program Files \ Java <DIR>
[14/09/2008 | 05:43] C: \ Program Files \ <DIR> JOHN DEERE American Farmer Deluxe
[09/04/2008 | 06:13] C: \ Program Files \ <DIR> Joost
[24/11/2007 | 02:56] C: \ Program Files \ <DIR> K-Lite Codec Pack
[20/03/2008 | 05:13] C: \ Program Files \ <DIR> LimeWire
[31/08/2008 | 05:28] C: \ Program Files \ <DIR> Maxis
[18/08/2008 | 02:14] C: \ Program Files \ Messenger <DIR>
[15/05/2007 | 11:48] C: \ Program Files \ <DIR> Microsoft CAPICOM 2.1.0.2
[12/09/2005 | 09:19] C: \ Program Files \ Microsoft Encarta <DIR>
[16/12/2004 | 04:23] C: \ Program Files \ Microsoft FrontPage <DIR>
[26/06/2008 | 12:17] C: \ Program Files \ Microsoft Games <DIR>
[12/09/2005 | 09:25] C: \ Program Files \ <DIR> Microsoft Money 2005
[29/06/2008 | 10:10] C: \ Program Files \ Microsoft Office <DIR>
[15/02/2006 | 12:29] C: \ Program Files \ Microsoft Visual Studio <DIR>
[03/06/2008 | 03:51] C: \ Program Files \ Microsoft Works <DIR>
[14/02/2008 | 10:22] C: \ Program Files \ Microsoft.NET <DIR>
[14/03/2008 | 09:22] C: \ Program Files \ <DIR> MindArk
[18/08/2008 | 02:11] C: \ Program Files \ <DIR> Movie Maker
[11/10/2008 | 11:09] C: \ Program Files \ Mozilla Firefox <DIR>
[16/12/2004 | 04:23] C: \ Program Files \ MSN <DIR>
[16/12/2004 | 04:23] C: \ Program Files \ MSN <DIR> Gaming Zone
[18/10/2006 | 01:19] C: \ Program Files \ <DIR> MSXML 4.0
[02/02/2008 | 05:16] C: \ Program Files \ <DIR> MSXML 6.0
[10/09/2007 | 04:25] C: \ Program Files \ Nero <DIR>
[18/08/2008 | 02:10] C: \ Program Files \ <DIR> NetMeeting
[15/07/2006 | 12:30] C: \ Program Files \ <DIR> Nikon
[11/10/2008 | 03:51] C: \ Program Files \ <DIR> NOS
[15/02/2006 | 12:42] C: \ Program Files \ <DIR> OfficeUpdate11
[14/09/2008 | 02:59] C: \ Program Files \ <DIR> Online usluge
[18/08/2008 | 02:10] C: \ Program Files \ Outlook Express <DIR>
[26/06/2007 | 09:29] C: \ Program Files \ <DIR> PartyGaming
[12/09/2005 | 09:34] C: \ Program Files \ <DIR> PC-Doktor za DOS
[17/06/2007 | 08:43] C: \ Program Files \ <DIR> PokerRoom.com
[31/05/2007 | 01:55] C: \ Program Files \ <DIR> PokerStars
[03/06/2008 | 09:04] C: \ Program Files \ QuickTime <DIR>
[21/04/2008 | 08:30] C: \ Program Files \ <DIR> RegCure
[02/02/2008 | 05:17] C: \ Program Files \ <DIR> SEAGATE
[23/04/2008 | 01:20] C: \ Program Files \ <DIR> Sean O'Connor's Windows Igre
[24/07/2008 | 06:08] C: \ Program Files \ <DIR> SEGA
[18/08/2008 | 03:56] C: \ Program Files \ <DIR> Sierra Entertainment
[08/02/2007 | 11:24] C: \ Program Files \ <DIR> SLD Codec Pack
[09/10/2008 | 11:53] C: \ Program Files \ <DIR> Sapun leži ljubav
[14/03/2008 | 06:16] C: \ Program Files \ Sophos <DIR>
[15/04/2008 | 09:22] C: \ Program Files \ <DIR> Spybot - Search & Destroy
[24/11/2007 | 02:59] C: \ Program Files \ <DIR> StrongDC + +
[19/05/2008 | 07:41] C: \ Program Files \ Symantec <DIR>
[13/09/2008 | 10:03] C: \ Program Files \ <DIR> TeaTimer (Spybot - Search & Destroy)
[14/02/2006 | 05:39] C: \ Program Files \ <DIR> Telstra
[19/06/2007 | 09:45] C: \ Program Files \ <DIR> TexasCalculatem
[30/05/2008 | 01:43] C: \ Program Files \ <DIR> Theorica Divx codec ;-)
[29/02/2008 | 06:25] C: \ Program Files \ <DIR> TP-LINK
[11/10/2008 | 12:33] C: \ Program Files \ Trend Micro <DIR>
[03/04/2008 | 12:17] C: \ Program Files \ <DIR> Trymedia
[24/11/2004 | 01:07] C: \ Program Files \ Uninstall <DIR> Informacije
[27/05/2006 | 08:19] C: \ Program Files \ <DIR> VideoLAN
[10/09/2008 | 01:44] C: \ Program Files \ <DIR> VUGames
[11/10/2008 | 05:57] C: \ Program Files \ <DIR> Warcraft III
[05/06/2008 | 01:07] C: \ Program Files \ <DIR> Weatherzone Tracker
[13/09/2006 | 12:25] C: \ Program Files \ <DIR> WinAVI VideoConverter
[14/03/2008 | 06:35] C: \ Program Files \ <DIR> Windows Live
[10/10/2007 | 11:18] C: \ Program Files \ <DIR> Windows Media Connect 2
[25/08/2008 | 06:37] C: \ Program Files \ <DIR> Windows Media Player
[14/09/2008 | 02:59] C: \ Program Files \ Windows NT <DIR>
[03/10/2007 | 03:00] C: \ Program Files \ Windows XP <DIR> Fun Pack
[24/11/2004 | 01:07] C: \ Program Files \ <DIR> WindowsUpdate
[14/09/2008 | 05:41] C: \ Program Files \ <DIR> WinRAR
[16/12/2004 | 04:24] C: \ Program Files \ <DIR> fotokopirati
[11/10/2008 | 12:29] C: \ Program Files \ Zone Labs <DIR>
[11/10/2008 | 12:31] C: \ Program Files \ <DIR> ZoneAlarmSB
-------------------- \ \ Popis mapa u C: \ Program Files \ Common Files
[11/10/2008 | 04:05] C: \ Program Files \ Common Files \ Adobe <DIR>
[11/10/2008 | 04:05] C: \ Program Files \ Common Files \ <DIR> Adobe AIR
[10/09/2007 | 04:28] C: \ Program Files \ Common Files \ <DIR> ispred
[03/10/2007 | 01:28] C: \ Program Files \ Common Files \ Apple <DIR>
[28/08/2007 | 04:28] C: \ Program Files \ Common Files \ Autodesk Shared <DIR>
[03/06/2008 | 03:50] C: \ Program Files \ Common Files \ <DIR> Designer
[12/09/2005 | 09:27] C: \ Program Files \ Common Files \ <DIR> InstallShield
[12/09/2005 | 09:06] C: \ Program Files \ Common Files \ Java <DIR>
[19/05/2008 | 07:25] C: \ Program Files \ Common Files \ Microsoft Shared <DIR>
[16/12/2004 | 04:23] C: \ Program Files \ Common Files \ <DIR> MSSoap
[15/07/2006 | 12:30] C: \ Program Files \ Common Files \ <DIR> muvee Tehnologije
[15/07/2006 | 12:31] C: \ Program Files \ Common Files \ <DIR> Nikon
[16/12/2004 | 04:23] C: \ Program Files \ Common Files \ <DIR> ODBC
[19/05/2008 | 07:32] C: \ Program Files \ Common Files \ Real <DIR>
[20/05/2008 | 11:24] C: \ Program Files \ Common Files \ <DIR> Usluge
[16/12/2004 | 04:23] C: \ Program Files \ Common Files \ <DIR> SpeechEngines
[19/05/2008 | 07:41] C: \ Program Files \ Common Files \ Symantec Shared <DIR>
[18/08/2008 | 02:10] C: \ Program Files \ Common Files \ System <DIR>
[11/03/2007 | 11:10] C: \ Program Files \ Common Files \ <DIR> Thraex Software
[14/03/2008 | 06:34] C: \ Program Files \ Common Files \ <DIR> WindowsLiveInstaller
-------------------- \ \ Process
(41 Processes)
IEXPLORE.EXE ~ [PID: 2612]
IEXPLORE.EXE ~ [PID: 2640]
Iexplore.exe ~ [PID: 3160]
IEXPLORE.EXE ~ [PID: 2940]
-------------------- \ \ Searching s S_Lop
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Mještani ~ 1 \ Temp \ bis9A.exe
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ Axis veliki extra.exe
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ilouimpk.ex e
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ jvuyskje.ex e
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ lfbsabiw.ex e

-------------------- \ \ Traľenje landarati Files - Mape
C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Software pravilu flag posjeduje
C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Software pravilu flag posjeduje \ Prvo obj.exe
C: \ DOCUME ~ 1 \ ALLUSE ~ 1 \ APPLIC ~ 1 \ Software pravilu flag posjeduje \ Preskoči proc.exe
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ soapli ~ 1
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ ATOM DASH.exe
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ Axis veliki extra.exe
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ ilouimpk.ex e
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ jvuyskje.ex e
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ soapli ~ 1 \ lfbsabiw.ex e
C: \ Program Files \ soapli ~ 1
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Mještani ~ 1 \ Temp \ TorrentSpeeder. zip
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Cookies \ compaq_owner @ adultfri endfinder [1]. Txt
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Cookies \ compaq_owner @ advertis ing. [2]. Txt
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Cookies \ compaq_owner @ Ero-advertising [1]. Txt
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Cookies \ compaq_owner@adopt.eu roclick [2]. Txt
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Cookies \ compaq_owner @ partypok am [1]. Txt
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Cookies \ compaq_owner @ 888 [2]. Txt
C: \ WINDOWS \ Tasks \ A396018B9185B27B.job

-------------------- \ \ Pretraživanje unutar Registry
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Uninstall \ Hold WMA ref]
"DisplayName" = "CID Help"
"UninstallString" = "C: \ \ DOCUME ~ 1 \ \ Compaqa ~ 1 \ \ APPLIC ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe-uninstall"
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Run]
"MODE REAL" = "C: \ \ DOCUME ~ 1 \ \ Compaqa ~ 1 \ \ APPLIC ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe"
"MODE REAL" = "C: \ \ DOCUME ~ 1 \ \ Compaqa ~ 1 \ \ APPLIC ~ 1 \ \ SOAPLI ~ 1 \ \ ATOM DASH.exe"
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run]
"Obilježi posjeduje Live mrgodan" = "C: \ \ Documents and Settings \ \ All Users \ \ Application Data \ \ Software pravilu flag posjeduje \ \ Prvo obj.exe"
-------------------- \ \ Provjera datoteku Hosts
Hosts datoteka CLEAN

-------------------- \ \ Traženje skrivenih datoteka s Catchme

catchme 0.3.1353 W2K/XP/Vista - rootkit / potaja detector by Gmer zlonamjernih programa, http://www.gmer.net
Rootkit scan 2008-10-11 18:12:47
5/1/2600 Windows Service Pack 3 NTFS
skeniranja skrivenih procesa ...
skeniranja skrivenih datoteka ...
scan uspješno završena
skriveni procesi: 0
skrivenih datoteka: 0

-------------------- \ \ Traľenje druge infekcije
-------------------- \ \ Pukotine & Keygens ..
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack \ rld-spor.exe
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Local Settings \ Temp \ Rar $ EX02.922 \ Crack \ SporeApp.exe
C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Recent \ Spore.GENERIC_KEYGEN-FFF.lnk

[F: 343] [D: 29] -> C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Mještani ~ 1 \ Temp
[F: 200] [D: 0] -> C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Cookies
[F: 18285] [D: 24] -> C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ Mještani ~ 1 \ TEMPOR ~ 1 \ content.IE5
1 - "C: \ landarati SD \ LopR_1.txt" - Sub 11/10/2008 | 18:07 - Opcija: [1]
2 - "C: \ landarati SD \ LopR_2.txt" - Sub 11/10/2008 | 18:14 - Opcija: [1]
-------------------- \ \ Scan završio u 18:14:22
  #4  
Old 11. listopad 2008, 22:29
Moderator / ica grupe
  
Default Iexplore.exe virus ponovo!

Download NoLop na svoj Desktop. NoLop.exe
  • Zatvori imate bilo kakve programe prikazuju jer je potrebno ponovno pokrenuti
  • Dvaput kliknite na NoLop.exe da ga
  • Zatim kliknite na gumb s oznakom: Pretraživanje i uništiti
    • Vaše računalo sada će biti skenirani za zaražene datoteke
  • Kada se skeniranje završi, ako je zaraženo, od vas će se tražiti da ponovno pokrenete
  • Kliknite OK
  • Sada kliknite na: Reboot
  • Poruka trebali popup iz NoLop. Ako ne, Dvoklik program opet i ona će završiti.
  • Post sadržaj C: \ NoLop.log u sljedećem odgovoru.
Napomena: Ako primate pogrešku ", mscomctl.ocx ili jedan od njegovih zavisnosti nisu ispravno registrirani, molimo preuzmite mscomctl.ocx na svoj system32 mapu onda ponovi program.

Također pokrenuti novo HijackThis skeniranja i post zapisnik.
__________________
  #5  
Old 11. listopad 2008, 22:46
Novi član grupe
  
Default Iexplore.exe virus ponovo!

Ok ovdje su logs:

Nolop


NoLop! Prijavite by Skate_Punk_21

Škripac trčanje from: C: \ Documents and Settings \ Compaq_Owner \ Desktop
[12/10/2008]
[4:33:52]

--- Infekcija datoteka Found/Removed---
C: \ WINDOWS \ zadaci \ A396018B9185B27B.job

Počev Uklanjanje ...
Postupak ponovne inicijalizacije operacijskog sust ...
Uklanjanje landarati's Preostala Datoteke / mape ...
Uređivanje registra ...
** Fix Cijela! **

--- Popis AppData sub direktorije ---

C: \ Documents and Settings \ All Users \ Application Data \ Adobe
C: \ Documents and Settings \ All Users \ Application Data \ Apple
C: \ Documents and Settings \ All Users \ Application Data \ Apple Computer
C: \ Documents and Settings \ All Users \ Application Data \ Autodesk
C: \ Documents and Settings \ All Users \ Application Data \ Avg7
C: \ Documents and Settings \ All Users \ Application Data \ Avg8 - PRAZNA Directory
C: \ Documents and Settings \ All Users \ Application Data \ Dvd Stisni
C: \ Documents and Settings \ All Users \ Application Data \ Enternhelp
C: \ Documents and Settings \ All Users \ Application Data \ Google
C: \ Documents and Settings \ All Users \ Application Data \ Grisoft
C: \ Documents and Settings \ All Users \ Application Data \ Instalacije
C: \ Documents and Settings \ All Users \ Application Data \ Installshield
C: \ Documents and Settings \ All Users \ Application Data \ Mailfrontier - PRAZNA Directory
C: \ Documents and Settings \ All Users \ Application Data \ Microsoft
C: \ Documents and Settings \ All Users \ Application Data \ Microsoft Pomoć
C: \ Documents and Settings \ All Users \ Application Data \ Nero
C: \ Documents and Settings \ All Users \ Application Data \ Nos
C: \ Documents and Settings \ All Users \ Application Data \ Pc Driveri Sjedište
C: \ Documents and Settings \ All Users \ Application Data \ Quicktime
C: \ Documents and Settings \ All Users \ Application Data \ Real - PRAZNA Directory
C: \ Documents and Settings \ All Users \ Application Data \ Sbsi
C: \ Documents and Settings \ All Users \ Application Data \ SEAGATE
C: \ Documents and Settings \ All Users \ Application Data \ Software Pravilo Zastava posjeduje
C: \ Documents and Settings \ All Users \ Application Data \ Sophos
C: \ Documents and Settings \ All Users \ Application Data \ Spybot - Search & Destroy
C: \ Documents and Settings \ All Users \ Application Data \ Symantec
C: \ Documents and Settings \ All Users \ Application Data \ Temp - PRAZNA Directory
C: \ Documents and Settings \ All Users \ Application Data \ Udl
C: \ Documents and Settings \ All Users \ Application Data \ Ultima_t15
C: \ Documents and Settings \ All Users \ Application Data \ Windows Genuine Advantage
C: \ Documents and Settings \ All Users \ Application Data \ Wlinstaller
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Adobe
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Adobeum
C: \ Documents and Settings \ Compaq_owner \ Application Data \ ispred
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Apple Computer
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Arcsoft
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Atari
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Autodesk
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Avg7
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Avgtoolbar
C: \ Documents and Settings \ Compaq_owner \ Application Data \ BitTorrent
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Command & osvojiti 3 Tiberium Wars
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Datalayer
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Dvdcss
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Epson
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Google
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Pomoć - PRAZNA Directory
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Hpq
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Identities
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Intervideo
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Iwin
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Joost
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Leadertech
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Limewire
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Macromedia
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Media Player Classic
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Microsoft
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Mozilla
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nikon
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nokia
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Nokia Multimedia Player
C: \ Documents and Settings \ Compaq_owner \ Application Data \ PC Suite
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Real
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Sampleview - PRAZNA Directory
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Securom
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Sapun laži Ljubavi
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Sonic
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Spintop
C: \ Documents and Settings \ Compaq_owner \ Application Data \ spore
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Spybot - Search & Destroy
C: \ Documents and Settings \ Compaq_owner \ Application Data \ nedjelja
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Symantec - PRAZNA Directory
C: \ Documents and Settings \ Compaq_owner \ Application Data \ U3
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Utorrent
C: \ Documents and Settings \ Compaq_owner \ Application Data \ VLC
C: \ Documents and Settings \ Compaq_owner \ Application Data \ Winbatch
C: \ Documents and Settings \ Default User \ Application Data \ Apple Computer
C: \ Documents and Settings \ Default User \ Application Data \ Identities
C: \ Documents and Settings \ Default User \ Application Data \ Microsoft
C: \ Documents and Settings \ Default User \ Application Data \ Real
C: \ Documents and Settings \ Default User \ Application Data \ Sampleview - PRAZNA Directory
C: \ Documents and Settings \ Default User \ Application Data \ Symantec - PRAZNA Directory
C: \ Documents and Settings \ Localservice \ Application Data \ Avg7 - PRAZNA Directory
C: \ Documents and Settings \ Localservice \ Application Data \ Microsoft
C: \ Documents and Settings \ Networkservice \ Application Data \ Microsoft


Hijackthis:


Logfile of Trend Micro HijackThis v2.0.2
Scan spremljena u 4:44:14, na 12/10/2008
Platforma: Windows XP SP3 (Winnt 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16705)
Boot mode: Normal

Pokretanje procesa:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ Winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ Ati2evxx.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ WINDOWS \ System32 \ Svchost.exe
C: \ WINDOWS \ system32 \ Ati2evxx.exe
C: \ WINDOWS \ explorer.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ WINDOWS \ system32 \ acs.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe
C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ WINDOWS \ system32 \ wuauclt.exe
C: \ Windows \ System \ hpsysdrv.exe
C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe
C: \ WINDOWS \ ALCXMNTR.EXE
C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe
C: \ HP \ KBD \ KBD.EXE
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe
C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgcc.exe
C: \ Program Files \ Adobe \ Reader 9,0 \ Reader \ Reader_sl.exe
C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE
C: \ WINDOWS \ system32 \ Ctfmon.exe
C: \ Program Files \ Internet Explorer \ IEXPLORE.EXE
C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe

R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R0 - HKCU \ Software \ Microsoft \ Internet Explorer \ Main, Start Page =
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Bar = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Main, Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM \ Software \ Microsoft \ Internet Explorer \ Search, SearchAssistant = http://ie.redirect.hp.com/svs/rdr?TY...rio&pf=desktop
R1 - HKCU \ Software \ Microsoft \ Internet Connection Wizard, ShellNext = http://www.limewire.com/inclient/?st...ows + XP & osv = 5,1
O2 - BHO: AcroIEHelperStub - (18DF081C-E8AD-4283-A596-FA578C2EBDC3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelperShim.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - (3CA2F312-6F6E-4B53-A66E-4E65E497C8C0) - C: \ Program Files \ AVG \ AVG8 \ avgssie.dll (file missing)
O2 - BHO: SSVHelper Class - (761497BB-D6F0-462C-B6EB-D4DAF1D92D43) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O2 - BHO: Windows Live Sign-in Helper - (9030D464-4C02-4ABF-8ECC-5164760863C6) - C: \ Program Files \ Common Files \ Microsoft Shared \ Windows Live \ WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - (AA58ED58-01DD-4d91-8333-CF10577473F7) - c: \ program files \ google \ googletoolbar1.dll
O2 - BHO: ZoneAlarm Spy Blocker BHO - (F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL
O3 - Toolbar: & Google - (2318C2B1-4965-11d4-9B18-009027A5CD4F) - c: \ program files \ google \ googletoolbar1.dll
O3 - Toolbar: ZoneAlarm Spy Blocker - (F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA) - C: \ Program Files \ ZoneAlarmSB \ bar \ 1.bin \ SPYBLOCK.DLL
O4 - HKLM \ .. \ Run: [IMJPMIG8.1] "C: \ WINDOWS \ IME \ imjp8_1 \ IMJPMIG.EXE" / ukvariti / RemAdvDef / Migration32
O4 - HKLM \ .. \ Run: [MSPY2002] C: \ Windows \ System32 \ IME \ PINTLGNT \ ImScInst.exe / Sync
O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ Windows \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE / Sync
O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ Windows \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName
O4 - HKLM \ .. \ Run: [hpsysdrv] c: \ windows \ system \ hpsysdrv.exe
O4 - HKLM \ .. \ Run: [ATIPTA] C: \ Program Files \ ATI Technologies \ ATI Control Panel \ atiptaxx.exe
O4 - HKLM \ .. \ Run: [Recguard] C: \ WINDOWS \ SMINST \ RECGUARD.EXE
O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE
O4 - HKLM \ .. \ Run: [TWCU] "C: \ Program Files \ TP-LINK \ TWCU \ TWCU.exe"-nogui
O4 - HKLM \ .. \ Run: [KBD] C: \ HP \ KBD \ KBD.EXE
O4 - HKLM \ .. \ Run: [EPSON CX3700 gramofonska igla Series] C: \ WINDOWS \ System32 \ spool \ drivers \ W32X86 \ 3 \ E_FATIA CP.EXE / F "C: \ WINDOWS \ Temp \ E_SC4.tmp" / EF "HKLM"
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [NeroFilterCheck] C: \ WINDOWS \ system32 \ NeroCheck.exe
O4 - HKLM \ .. \ Run: [HP Software Update] C: \ Program Files \ Hp \ HP Software Update \ HPWuSchd2.exe
O4 - HKLM \ .. \ Run: [AVG7_CC] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgcc.exe / StartUp
O4 - HKLM \ .. \ Run: [Zastava posjeduje Live mrgodan] C: \ Documents and Settings \ All Users \ Application Data \ Software pravilu flag posjeduje \ Prvo obj.exe
O4 - HKLM \ .. \ Run: [ZoneAlarm Client] "C: \ Program Files \ Zone Labs \ ZoneAlarm \ zlclient.exe"
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 9,0 \ Reader \ Reader_sl.exe"
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
O4 - HKCU \ .. \ Run: [MODE REAL] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe
O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe
O4 - HKCU \ .. \ Run: [updateMgr] "C: \ Program Files \ Adobe \ Acrobat 7,0 \ Reader \ AdobeUpdateManager.exe" ponovno podizanje sustava AcRdB7_1_0-1
O4 - HKUS \ S-1-5-19 \ .. \ Run: [AVG7_Run] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [AVG7_Run] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'NETWORK SERVICE')
O4 - HKUS \ S-1-5-18 \ .. \ Run: [AVG7_Run] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'SYSTEM')
O4 - HKUS \. DEFAULT \ .. \ Run: [AVG7_Run] C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgw.exe / RunOnce (User 'Default user')
O4 - Global Startup: NkbMonitor.exe.lnk = C: \ Program Files \ Nikon \ PictureProject \ NkbMonitor.exe
O8 - Extra kontekst meni stavka: Clean & Tragovi - C: \ Program Files \ pecati \ privatnosti Package \ dapcleanerie.htm
O8 - Extra kontekst meni stavka: & & s pecati Download - C: \ Program Files \ pecati \ dapextie.htm
O8 - Extra kontekst meni stavka: & Google Search - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsearch.html
O8 - Extra kontekst meni stavka: Povratni Links - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra kontekst meni stavka: Predmemorirano snimka Page - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmcache.html
O8 - Extra kontekst meni stavka: Download & all s pecati - C: \ Program Files \ pecati \ dapextie2.htm
O8 - Extra kontekst meni stavka: E & zvezi u Microsoft Excel - res: / / C: \ programa ~ 1 \ MICROS ~ 3 \ Office12 \ EXCEL.EXE/3000
O8 - Extra kontekst meni stavka: Similar Pages - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmsimilar.html
O8 - Extra kontekst meni stavka: Prevedi na engleski - res: / / C: \ Program Files \ Google \ GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O9 - Extra 'Tools' MENUITEM: Sun Java Console - (08B0E5C0-4FCB-11CF-AAA5-00401C608501) - C: \ Program Files \ Java \ jre1.6.0_07 \ bin \ ssv.dll
O9 - Extra button: Research - (92780B25-18CC-41C8-B9BE-3C9C571A8263) - C: \ programa ~ 1 \ MICROS ~ 3 \ Office12 \ REFIEBAR.DLL
O9 - Extra button: (no name) - (B205A35E-1FC4-4CE3-818B-899DBBB3388C) - C: \ Program Files \ Common Files \ Microsoft Shared \ Encarta Search Bar \ ENCSBAR.DLL
O9 - Extra button: Connection Pomoć - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Prodavateljima \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm
O9 - Extra 'Tools' MENUITEM: Connection Pomoć - (E2D4D26B-0180-43a4-B05F-462D6D54C789) - C: \ WINDOWS \ PCHEALTH \ HELPCTR \ Prodavateljima \ CN = Hewlett-Packard, L = Cupertino, S = Ca, C = US \ IEButton \ support.htm
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Foto Uploader 5) -- http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: (4F1E5B1A-2A80-42CA-8532-2D05CB959537) (MSN Photo Upload Tool) -- http://gfx2.hotmail.com/mail/w3/pr01...s/MSNPUpld.cab
O16 - DPF: (96EEC7FF-47F3-106A-90D6-B4BB754AA40E) (Poli Kodirani Online) -- https: / / autxn.paywithpoli.com / ewcust...iPayOnline.cab
O16 - DPF: (CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7) (get_atlcom Class) -- http://wwwimages.adobe.com/www.adobe...bat/nos/gp.cab
O23 - Service: TP-LINK Configuration Service (ACS) - Unknown vlasnika - C: \ WINDOWS \ system32 \ acs.exe
O23 - Service: Apple Mobile Device - Apple, Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: ati brza tipka Poller - ATI Technologies Inc - C: \ WINDOWS \ system32 \ Ati2evxx.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, sro - C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, sro - C: \ programa ~ 1 \ Grisoft \ AVG7 \ avgupsvc.exe
O23 - Service: getPlus (R) Helper - NOS Microsystemsa Ltd - C: \ Program Files \ NOS \ bin \ getPlus_HelperSvc.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C: \ Program Files \ Common Files \ InstallShield \ Driver \ 11 \ Intel 32 \ IDriverT.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C: \ WINDOWS \ system32 \ ZoneLabs \ vsmon.exe

--
End of file - 10505 bytes
  #6  
Old 11. listopad 2008, 22:53
Moderator / ica grupe
  
Default Iexplore.exe virus ponovo!

Otvori HijackThis i odaberite Da li je sustav skenirati samo.

Stavite oznaku uz sljedeće stavke: (ako postoji)
  • O4 - HKLM \ .. \ Run: [AlcxMonitor] ALCXMNTR.EXE
  • O4 - HKLM \ .. \ Run: [Zastava posjeduje Live mrgodan] C: \ Documents and Settings \ All Users \ Application Data \ Software pravilu flag posjeduje \ Prvo obj.exe
  • O4 - HKCU \ .. \ Run: [MODE REAL] C: \ DOCUME ~ 1 \ Compaqa ~ 1 \ APPLIC ~ 1 \ SOAPLI ~ 1 \ ATOM DASH.exe
Važno: Zatvori sve prozore osim HijackThis, a zatim kliknite Fix checked.

Izlaz HijackThis.

----------

Napomena: se upute u nastavku su izrađene specijalno za ovog korisnika. Ukoliko niste u ovom, NE slijedite ove smjerove, jer bi mogao oštetiti djelovanju vašeg sustava

Idi na Start> Run i tip notepad.exe zatim pritisnite U redu

Kopirajte i zalijepite niže u Notepad i spremite kao fixme.reg da svoju Desktop

Code:
REGEDIT4 [HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ CurrentVersion \ Run] "AlcxMonitor" =- "Obilježi posjeduje Live mrgodan" =- [HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ CurrentVersion \ Policies \ Explorer \ Run] "MODE REAL" =-
Pronađite fixme.reg na desktopu i dvokliknite ga. Odgovor Da kada upitani za spajanje sa Registry.

Pobrinite se da ćete mi reći ako primite poruku o uspjehu dodavši gore u registar. Ako ne dobijete poruku uspjeh, on nije 'funkcionirati.

Brisanje fixme.reg iz Desktop.

Ponovo pokrenite računalo

----------

Preuzimanje CCleaner Slim i spremite je na svoj Desktop.
Kada je datoteka spremljena, odite na svoj Desktop i dvostrukim klikom na ccsetupxxx_slim.exe
Slijedite upute za instaliranje programa.
Kompletna instalacija onda:
  • Dvaput kliknite na CCleaner prečac na radnoj površini da biste pokrenuli program.
  • Kliknite na Opcije blok na lijevom, a zatim odaberite Cookies.
    • Pod Brisanje kolačića, Označite bilo koji cookies želite zadržati trajno
    • Kliknite strelicu desno > da ih premjestite na Cookieji zadržati prozor.
  • Idite u Opcije > Advanced Unprovjera Samo izbrišite datoteke i mape u sustavu Windows Temp stariji od 48 sata
  • Kliknite Čistija zatim na lijevoj strani Trčanje za čistiju na desnoj strani za pokretanje programa.
  • Važno: Uvjerite se da ALL prozore preglednika prije nego što su zatvorene odabirom Trčanje za čistiju
  • Oprez: To se ne preporučuje da koristite "Registry" značajka osim ako ste upoznati s vrlo registar.
  • Izlaz CCleaner nakon što je završila proces.

----------

Preuzimanje Malwarebytes' Anti-zaštita od zlonamjernih programa (MBAM)
  • Dvokliknite mbam-setup.exe i slijedite upute za instaliranje programa.
  • Na kraju, svakako jedan je postavljena kvačica pored sljedeće:
    • Update Malwarebytes' Anti-zaštita od zlonamjernih programa
    • Launch Malwarebytes' Anti-zaštita od zlonamjernih programa
  • Zatim kliknite na Završi.
  • Ako se ažuriranje je pronađen, on će preuzeti i instalirati najnoviju verziju.
  • Nakon što program učita, odaberite Obavi brzo pretraživanje, A zatim kliknite Scan.
  • Kada se skeniranje završi, kliknite na U redu, Zatim Prikaži rezultate za prikaz rezultata.
  • Budite sigurni da je sve provjeriti, a zatim kliknite Ukloni odabrano.
  • Kad je završio dezinfekcija, a zapisnik će se otvoriti u Notepad i vi svibanj biti zatraženo da Restart. (Vidi Extra bilješka)
  • U zapisnik se automatski sprema po MBAM i mogu biti pregledani klikom na tab Evidencije u MBAM.
  • Kopirajte i zalijepite cijeli izvještaj u vašem sljedeći odgovor.

Extra Napomena: Ako MBAM susrete datoteku koja je teško ukloniti, bit će predstavljen sa 1 of 2 upitom, kliknite U redu da biste bilo i nek MBAM nastaviti s procesom dezinfekcije, ako je zatraženo da ponovo pokrenete računalo, učinite to odmah.
__________________
  #7  
Old 11. listopad 2008, 23:26
Novi član grupe
  
Default Iexplore.exe virus ponovo!

Primio sam poruku uspjeh iz fixme.reg datoteku i ovdje je MBAM log:


Malwarebytes' Anti-zaštita od zlonamjernih programa 1,28
Database Version: 1259
5/1/2600 Windows Service Pack 3

12/10/2008 5:24:27 PM
mbam-log-2008-10-12 (17-24-27). txt

Scan type: Quick Scan
Objekti skenirane: 45849
Proteklo vrijeme: 2 minute (s), 43 Drugi (a / e)

Memory Processes zaraženih: 0
Memorijske module zaraženih: 0
Ključevi registra zaraženih: 0
Registry Values zaraženih: 0
Registry Data Items zaraženih: 0
Mape zaraženih: 0
Zaraženih datoteka: 0

Memory Processes zaraženih:
(Nema stavki otkrivenih zlonamjernih)

Memorijske module zaraženih:
(Nema stavki otkrivenih zlonamjernih)

Ključevi registra zaraženih:
(Nema stavki otkrivenih zlonamjernih)

Registry Values zaraženih:
(Nema stavki otkrivenih zlonamjernih)

Registry Data Items zaraženih:
(Nema stavki otkrivenih zlonamjernih)

Mape zaraženih:
(Nema stavki otkrivenih zlonamjernih)

Zaražene datoteke:
(Nema stavki otkrivenih zlonamjernih)
  #8  
Old 11. listopad 2008, 23:29
Moderator / ica grupe
  
Default Iexplore.exe virus ponovo!

Kako je sve što sada?
__________________
  #9  
Old 11. listopad 2008, 23:33
Novi član grupe
  
Default Iexplore.exe virus ponovo!

Running brže nego u zadatak manager u procesima Iexplore.exe je još uvijek tamo i kad sam kraj njega dolazi nazad. Za oko 5 minuta ona koristi približno 99% CENTRALNA PROCESORSKA JEDINICA pa ga neko vrijeme nakon pada dolje na 0, ali mem običaj ostaje oko 100,000 K.
  #10  
Old 12. listopad 2008, 11:41
Moderator / ica grupe
  
Default Iexplore.exe virus ponovo!

Download ComboFix by sUBs jedan od linkova ispod. Budite sigurni da ste na vrhu u Desktop.

Link # 1
Link # 2

** Napomena: Važno je da se sprema izravno na svoj Desktop

Zatvori otvoriti bilo koju web preglednicima. (Firefox, Internet Explorer, etc) prije početka ComboFix.

Privremeno onemogućiti tvoj AntiVirus, A svaka protušpijunskih Zaštita u stvarnom vremenu prije obavlja scan. Kliknite ovaj link da biste vidjeli popis sigurnosne programe, koji bi trebao biti onemogućen i kako onemogućiti ih.

Dvaput kliknite combofix.exe i slijedite upute.
Kada završite ComboFix će proizvesti prijava za vas.
Objaviti ComboFix log i novu HijackThis log u sljedećem odgovoru.

Važno: Ne mouseclick ComboFix's prozor dok je pokrenut. Svibanj uzrokovati da ga zatajiti.

Ne zaboravite ponovo uključili vaš protuvirusni i protušpijunski ComboFix zaštita kada je završeno.
__________________
Reply
Stranica 1 od 2 1 2

Register

Bookmarks

Slične teme
Nit Temu Započeo Forum Odgovori Zadnji Post
Iexplore.exe virus? Please help! tharp68 Virus, Spyware i sigurnost 8 7. siječanj 2009 16:33
Mogući Iexplore.exe virus .... sipper Virus, Spyware i sigurnost 7 3. prosinac 2008 22:23
Re: iexplore.exe virus mpenney Virus, Spyware i sigurnost 6 3. studeni 2008 14:11
Iexplore.exe virus .... molim pomoć! zm741 Virus, Spyware i sigurnost 29 24. Ruj 2008 21:57
Iexplore.exe virus kfarns00 Virus, Spyware i sigurnost 9 4. prosinac 2007 14:26
Thread Tools



Arabic Bulgarian Chinese (Simplified) Chinese (Traditional) Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Thai Turkish Ukrainian

Copyright © 2006 - 2009 Computer soka.
Kontakt -- Privatnost -- Sitemap -- Vrh

Powered by vBulletin ® Copyright © 2000 - 2009 Jelsoft Enterprises Ltd SEO by vBSEO © 2009, Crawlability, Inc