manji kapital -

Magazine
Go Back   Computer soka > Computer Software > Virus, Spyware i sigurnost
Reload this Page

Virus: IEXPLORE.EXE sustav kao proces

Registracija Mapa Spy Member List Donacije Pretraživanje Today's Posts Označi Sve Forume Kao Pročitane Forum Rules

Register


 Default 

Virus: IEXPLORE.EXE sustav kao proces




Reply
Stranica 1 od 2 1 2
 
Thread Tools
  #1  
Old 6. studeni 2008, 02:16
Novi član grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

JA licemjerje 'činiti se to close Iexplore.exe čak i kada ne postoji Windows Explorer otvoriti. Oglasi uvijek poskočiti s vremena na vrijeme. JA isto tako čuti glasove oglas / zvukovi u pozadini. It's dosadne i osjećam kao sustava je usporilo. Please help. Ovo je moj HiJackThis log:

Logfile of HijackThis v1.99.1
Scan spremljena u 4:15:28 Na 11/6/2008
Platforma: Windows XP SP3 (Winnt 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Pokretanje procesa:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ Winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ WINDOWS \ System32 \ Svchost.exe
C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe
C: \ WINDOWS \ explorer.exe
C: \ Program Files \ ASUS \ Ai Suite \ AiNap \ AiNap.exe
C: \ Program Files \ Common Files \ Ulead Systems \ AutoDetector \ monitor.exe
C: \ WINDOWS \ RTHDCPL.EXE
C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Program Files \ ASUS \ AASP \ 1.00.61 \ aaCenter.exe
C: \ WINDOWS \ system32 \ RUNDLL32.EXE
C: \ programa ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe
C: \ WINDOWS \ system32 \ Ctfmon.exe
C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ PcSync2.exe
C: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ Nokia \ MPAPI \ MPAPI3s.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
C: \ WINDOWS \ system32 \ nvsvc32.exe
C: \ WINDOWS \ System32 \ PSIService.exe
C: \ Program Files \ glediąta \ Common \ ViewpointService.exe
C: \ Program Files \ Common Files \ PCSuite \ Services \ ServiceLayer.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe
C: \ WINDOWS \ System32 \ Svchost.exe
C: \ Program Files \ Winamp \ winamp.exe
C: \ Program Files \ Real \ RealPlayer \ RealPlay.exe
C: \ WINDOWS \ system32 \ s1S8Dh6X.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ Program Files \ HijackThis \ HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: IE2EMBHO Class - (0A0DDBD3-6641-40B9-873F-BBDD26D6C14E) - C: \ Program Files \ easyMule \ modules \ IE2EM.dll
O2 - BHO: RealPlayer Download i Record Plugin za Internet Explorer - (3049C3E9-B461-4BC5-8870-4C09146192CA) - C: \ Program Files \ Real \ RealPlayer \ rpbrowserrecordplugin.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE / Sync
O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName
O4 - HKLM \ .. \ Run: [Aj nap] "C: \ Program Files \ ASUS \ Ai Suite \ AiNap \ AiNap.exe"
O4 - HKLM \ .. \ Run: [CPU Power Monitor] "C: \ Program Files \ ASUS \ Ai Suite \ AiGear3 \ CpuPowerMonitor.exe"
O4 - HKLM \ .. \ Run: [Procesor Level Up help] C: \ Program Files \ ASUS \ Ai Suite \ CpuLevelUpHelp.exe
O4 - HKLM \ .. \ Run: [ASUS Energy Saving] "C: \ Program Files \ ASUS \ Ai Suite \ EnergySaving \ PwSave.exe"
O4 - HKLM \ .. \ Run: [Ulead AutoDetector v2] C: \ Program Files \ Common Files \ Ulead Systems \ AutoDetector \ monitor.exe
O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM \ .. \ Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe"
O4 - HKLM \ .. \ Run: [NSLauncher] C: \ Program Files \ Nokia \ Nokia Software Launcher \ NSLauncher.exe / pokretanja
O4 - HKLM \ .. \ Run: [avast!] C: \ programa ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe
O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe
O4 - HKCU \ .. \ Run: [\ \ MING3 \ EPSON gramofonska igla C120 Series] C: \ WINDOWS \ System32 \ spool \ drivers \ W32X86 \ 3 \ E_FATIC CA.EXE / FU "C: \ DOCUME ~ 1 \ MKJ \ Mještani ~ 1 \ Temp \ E_S13.tmp "/ EF" HKCU "
O4 - HKCU \ .. \ Run: [PcSync] C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ PcSync2.exe / NoDialog
O8 - Extra kontekst meni stavka: Add to Google Photos Screensa & ver - res: / / C: \ WINDOWS \ system32 \ GPhotos.scr/200
O8 - Extra kontekst meni stavka: Download by easyMule - C: \ Program Files \ easyMule \ IE2EM.htm
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file missing)
O9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) -% windir% \ Network Diagnostic \ xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O10 - Unknown file in Winsock LSP: c: \ program files \ bonjour \ mdnsnsp.dll
O11 - Options group: [INTERNATIONAL] International *
O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Foto Uploader 5 Control) -- http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsoft.com/wind...?1224821007296
O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1224825458984
O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O18 - Protocol: livecall - (828030A1-22C1-4009-854F-8E305202313F) - C: \ programa ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL
O18 - Protocol: msnim - (828030A1-22C1-4009-854F-8E305202313F) - C: \ programa ~ 1 \ MSNMES ~ 1 \ MSGRAP ~ 1.DLL
O20 - Winlogon Obavijesti: dimsntfy -% SystemRoot% \ System32 \ dimsntfy.dll (file missing)
O20 - Winlogon Obavijesti: WgaLogon - C: \ WINDOWS \ SYSTEM32 \ WgaLogon.dll
O21 - SSODL: WPDShServiceObj - (AAA288BA-9A4C-45B0-95D7-94D524869DB5) - C: \ WINDOWS \ system32 \ WPDShServiceObj.dll
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown vlasnika - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe "/ usluga (file missing)
O23 - Service: avast! Web Scanner - Unknown vlasnika - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe "/ usluga (file missing)
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown vlasnika - C: \ WINDOWS \ System32 \ PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C: \ Program Files \ Common Files \ PCSuite \ Services \ ServiceLayer.exe
O23 - Service: glediąta Manager Service - vidikovac Corporation - C: \ Program Files \ glediąta \ Common \ ViewpointService.exe
  #2  
Old 6. studeni 2008, 09:37
Moderator / ica grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

Preuzimanje CCleaner Slim i spremite je na svoj Desktop.
Kada je datoteka spremljena, odite na svoj Desktop i dvostrukim klikom na ccsetupxxx_slim.exe
Slijedite upute za instaliranje programa.
Kompletna instalacija onda:
  • Dvaput kliknite na CCleaner prečac na radnoj površini da biste pokrenuli program.
  • Kliknite na Opcije blok na lijevom, a zatim odaberite Cookies.
    • Pod Brisanje kolačića, Označite bilo koji cookies želite zadržati trajno
    • Kliknite strelicu desno > da ih premjestite na Cookieji zadržati prozor.
  • Idite u Opcije > Advanced Unprovjera Samo izbrišite datoteke i mape u sustavu Windows Temp stariji od 48 sata
  • Kliknite Čistija zatim na lijevoj strani Trčanje za čistiju na desnoj strani za pokretanje programa.
  • Važno: Uvjerite se da ALL prozore preglednika prije nego što su zatvorene odabirom Trčanje za čistiju
  • Oprez: To se ne preporučuje da koristite "Registry" značajka osim ako ste upoznati s vrlo registar.
  • Izlaz CCleaner nakon što je završila proces.

----------

Sada instalirati novu verziju i post HijackThis log iz njega.

Preuzimanje TrendMicro HijackThis.exe (HJT) na radnoj površini.
  • Dvaput kliknite na HJTInstall.
  • Kliknite na Instalacija gumb.
  • Bit će automatski HJT mjesto u C: \ Program Files \ TrendMicro \ HijackThis \ HijackThis.exe.
  • Nakon instaliranja, HijackThis trebali otvoriti za vas.
  • Kliknite na Da li je sustav skenirati i spremanje log datoteku button
  • HijackThis ce skenirati a zatim i prijava će se otvoriti u Notepad.
  • Kopirajte i zalijepite onda cijeli sadržaj se prijaviti u vaš post.
  • Ne HijackThis su riješili ništa još. Većina onoga što će se pronađe bezopasni ili čak obavezna.
__________________
  #3  
Old 6. studeni 2008, 16:19
Novi član grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

I ran CCleaner i reinstalled novu verziju HiJackThis.

Logfile of Trend Micro HijackThis v2.0.2
Scan spremljena u 6:18:15 Na 11/6/2008
Platforma: Windows XP SP3 (Winnt 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Pokretanje procesa:
C: \ WINDOWS \ System32 \ smss.exe
C: \ WINDOWS \ system32 \ Winlogon.exe
C: \ WINDOWS \ system32 \ services.exe
C: \ WINDOWS \ system32 \ lsass.exe
C: \ WINDOWS \ system32 \ Svchost.exe
C: \ WINDOWS \ System32 \ Svchost.exe
C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe
C: \ WINDOWS \ explorer.exe
C: \ Program Files \ ASUS \ Ai Suite \ AiNap \ AiNap.exe
C: \ Program Files \ Common Files \ Ulead Systems \ AutoDetector \ monitor.exe
C: \ WINDOWS \ RTHDCPL.EXE
C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe
C: \ Program Files \ iTunes \ iTunesHelper.exe
C: \ Program Files \ ASUS \ AASP \ 1.00.61 \ aaCenter.exe
C: \ WINDOWS \ system32 \ RUNDLL32.EXE
C: \ programa ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe
C: \ WINDOWS \ system32 \ Ctfmon.exe
C: \ WINDOWS \ system32 \ spoolsv.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
C: \ WINDOWS \ system32 \ nvsvc32.exe
C: \ WINDOWS \ System32 \ PSIService.exe
C: \ Program Files \ glediąta \ Common \ ViewpointService.exe
C: \ Program Files \ Common Files \ PCSuite \ Services \ ServiceLayer.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe
C: \ WINDOWS \ System32 \ Svchost.exe
C: \ WINDOWS \ system32 \ s1S8Dh6X.exe
C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ AcroRd32.exe
C: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ PCSuite \ DATALA ~ 1 \ DATALA ~ 1.EXE
C: \ WINDOWS \ system32 \ conime.exe
C: \ Program Files \ CCleaner \ CCleaner.exe
C: \ Program Files \ Internet Explorer \ iexplore.exe
C: \ WINDOWS \ system32 \ wuauclt.exe
C: \ Program Files \ Trend Micro \ HijackThis \ HijackThis.exe
O2 - BHO: Adobe PDF Reader Link Helper - (06849E9F-C8D7-4D59-B87D-784B7D6BE0B3) - C: \ Program Files \ Common Files \ Adobe \ Acrobat \ ActiveX \ AcroIEHelper.dll
O2 - BHO: IE2EMBHO Class - (0A0DDBD3-6641-40B9-873F-BBDD26D6C14E) - C: \ Program Files \ easyMule \ modules \ IE2EM.dll
O2 - BHO: RealPlayer Download i Record Plugin za Internet Explorer - (3049C3E9-B461-4BC5-8870-4C09146192CA) - C: \ Program Files \ Real \ RealPlayer \ rpbrowserrecordplugin.dll
O2 - BHO: (no name) - (7E853D72-626A-48EC-A868-BA8D5E23E045) - (no file)
O4 - HKLM \ .. \ Run: [PHIME2002ASync] C: \ WINDOWS \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE / Sync
O4 - HKLM \ .. \ Run: [PHIME2002A] C: \ WINDOWS \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE / IMEName
O4 - HKLM \ .. \ Run: [Aj nap] "C: \ Program Files \ ASUS \ Ai Suite \ AiNap \ AiNap.exe"
O4 - HKLM \ .. \ Run: [CPU Power Monitor] "C: \ Program Files \ ASUS \ Ai Suite \ AiGear3 \ CpuPowerMonitor.exe"
O4 - HKLM \ .. \ Run: [Procesor Level Up help] C: \ Program Files \ ASUS \ Ai Suite \ CpuLevelUpHelp.exe
O4 - HKLM \ .. \ Run: [ASUS Energy Saving] "C: \ Program Files \ ASUS \ Ai Suite \ EnergySaving \ PwSave.exe"
O4 - HKLM \ .. \ Run: [Ulead AutoDetector v2] C: \ Program Files \ Common Files \ Ulead Systems \ AutoDetector \ monitor.exe
O4 - HKLM \ .. \ Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM \ .. \ Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM \ .. \ Run: [TkBellExe] "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe"-osboot
O4 - HKLM \ .. \ Run: [QuickTime Task] "C: \ Program Files \ QuickTime \ qttask.exe"-atboottime
O4 - HKLM \ .. \ Run: [iTunesHelper] "C: \ Program Files \ iTunes \ iTunesHelper.exe"
O4 - HKLM \ .. \ Run: [NvCplDaemon] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvCpl.dll, NvStartup
O4 - HKLM \ .. \ Run: [nwiz] nwiz.exe / install
O4 - HKLM \ .. \ Run: [NvMediaCenter] RUNDLL32.EXE C: \ WINDOWS \ system32 \ NvMcTray.dll, NvTaskbarInit
O4 - HKLM \ .. \ Run: [Adobe Reader Speed Launcher] "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe"
O4 - HKLM \ .. \ Run: [NSLauncher] C: \ Program Files \ Nokia \ Nokia Software Launcher \ NSLauncher.exe / pokretanja
O4 - HKLM \ .. \ Run: [avast!] C: \ programa ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp.exe
O4 - HKCU \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ system32 \ Ctfmon.exe
O4 - HKCU \ .. \ Run: [\ \ MING3 \ EPSON gramofonska igla C120 Series] C: \ WINDOWS \ System32 \ spool \ drivers \ W32X86 \ 3 \ E_FATIC CA.EXE / FU "C: \ DOCUME ~ 1 \ MKJ \ Mještani ~ 1 \ Temp \ E_S13.tmp "/ EF" HKCU "
O4 - HKCU \ .. \ Run: [PcSync] C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ PcSync2.exe / NoDialog
O4 - HKCU \ .. \ Run: [Uniblue RegistryBooster 2009] C: \ Program Files \ Uniblue \ RegistryBooster \ RegistryBooster.exe / S
O4 - HKUS \ S-1-5-19 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ System32 \ Ctfmon.exe (User 'LOCAL SERVICE')
O4 - HKUS \ S-1-5-20 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ System32 \ Ctfmon.exe (User 'NETWORK SERVICE')
O4 - HKUS \ S-1-5-18 \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ System32 \ Ctfmon.exe (User 'SYSTEM')
O4 - HKUS \. DEFAULT \ .. \ Run: [Ctfmon.exe] C: \ WINDOWS \ System32 \ Ctfmon.exe (User 'Default user')
O8 - Extra kontekst meni stavka: Add to Google Photos Screensa & ver - res: / / C: \ WINDOWS \ system32 \ GPhotos.scr/200
O8 - Extra kontekst meni stavka: Download by easyMule - C: \ Program Files \ easyMule \ IE2EM.htm
O9 - Extra button: (no name) - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra 'Tools' MENUITEM: @ xpsp3res.dll, -20001 - (e2e2dd38-d088-4134-82b7-f2ba38496583) - C: \ WINDOWS \ Network Diagnostic \ xpnetdiag.exe
O9 - Extra button: Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O9 - Extra 'Tools' MENUITEM: Windows Messenger - (FB5F1910-F110-11D2-BB9E-00C04F795683) - C: \ Program Files \ Messenger \ msmsgs.exe
O15 - Trusted Zone ESC: http:// *. update.microsoft.com
O16 - DPF: (0CCA191D-13A6-4E29-B746-314DEE697D83) (Facebook Foto Uploader 5 Control) -- http://upload.facebook.com/controls/...oUploader5.cab
O16 - DPF: (6414512B-B978-451D-A0D8-FCFDF33E833C) (WUWebControl Class) -- http://www.update.microsoft.com/wind...?1224821007296
O16 - DPF: (6E32070A-766D-4EE6-879C-DC1FA91D2FC3) (MUWebControl Class) -- http://www.update.microsoft.com/micr...?1224825458984
O16 - DPF: (D27CDB6E-AE6D-11CF-96B8-444553540000) (Shockwave Flash Object) -- http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O23 - Service: Apple Mobile Device - Apple Inc - C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe
O23 - Service: Bonjour Service - Apple Inc - C: \ Program Files \ Bonjour \ mDNSResponder.exe
O23 - Service: Google Updater Service (gusvc) - Google - C: \ Program Files \ Google \ Common \ Google Updater \ GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc - C: \ Program Files \ iPod \ bin \ iPodService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C: \ WINDOWS \ system32 \ nvsvc32.exe
O23 - Service: ProtexisLicensing - Unknown vlasnika - C: \ WINDOWS \ System32 \ PSIService.exe
O23 - Service: ServiceLayer - Nokia. - C: \ Program Files \ Common Files \ PCSuite \ Services \ ServiceLayer.exe
O23 - Service: glediąta Manager Service - vidikovac Corporation - C: \ Program Files \ glediąta \ Common \ ViewpointService.exe
--
End of file - 7422 bytes



Koji je slijedeći korak?

Thanks for your help.
  #4  
Old 6. studeni 2008, 16:53
Moderator / ica grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

Sumnjive datoteke za skeniranje

Molimo otiđite na VirSCAN.org SLOBODNA on-line uslugu skeniranja
(Ako više od jedne datoteke treba skenirati moraju biti gotovi i odvojeno za svaku logove posted jedan)

1. Kopirajte i zalijepite sljedeći put u datoteku Sumnjive datoteke za skeniranje okvir na vrhu stranice.
Code:
C: \ WINDOWS \ system32 \ s1S8Dh6X.exe
2. Na učitavanje stranice, kliknite unutar prozora odjednom uz Browse.
3. Press Ctrl + V na tipkovnici (oba u isto vrijeme) za lijepljenje put datoteke u prozoru.
4. Kliknite na Upload gumb.
Time će se izvesti na više različitih scan virus skeniranje motora.
Vaša datoteka će možda biti unesen u red čekanja na koji normalno traje manje od minute za brisanje.
Važno: Pričekajte za sve od motora do skeniranje završi.
5. Nakon što je završio Scan pomaknite se dolje i kliknite na Kopiraj u međuspremnik gumb. To će kopirati link u izvješću u međuspremnik.
6. Lijepljenje sadržaja međuspremnika u sljedeći odgovor.
__________________
  #5  
Old 6. studeni 2008, 17:19
Novi član grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

Ovdje je međumemoriju info za datoteku s1S8Dh6X.exe.

Informacije o datoteci Naziv datoteke: s1S8Dh6X.exeFile Veličina: 62464 byteFile Vrsta: PE32 izvršnu za MS Windows (GUI) Intel 80386 32-bitMD5: 895f4e2eed5a30e317460e66989042d0SHA1: 8d133ba222ce2d511ff28d900586e79041a8b4cfScanner rezultate Scanner rezultata: 8% Scanner (3 / 39) pronašao zlonamjernih programa! Vrijeme: 2008 / 11/06 19:15:08 (EST)ScannerEngine VerSig VerSig DatumScan rezultatVrijemea-squared4.0.0.232008.11.032008-11-03--
1.832AhnLab V32008.11.07.012008.11.072008-11-07--
0.987AntiVir7.9.0.267.1.0.492008-11-06--
1.503Antiy2.0.1820081106.15602992008-11-06--
0.122Arcavir1.0.52008110611442008-11-06--
1.227Authentium5.1.12008110611422008-11-06--
1.367AVAST! 3.0.1081106-02008-11-06--
0.725AVG7.5.52.442270.9.0/17722008-11-06Clicker.TXO
1.691BitDefender7.60825.20709477.217192008-11-07--
3.401CA (VET) 9.0.0.14331.6.61952008-11-06--
7.230ClamAV0.9485842008-11-07--
0.021Comodo2.112.0.0.6992008-11-06--
0.422CP Secure1.1.0.7152008.11.062008-11-06--
6.447Dr.Web4.44.0.91702008.11.062008-11-06--
3.465ewido4.0.0.22008.11.062008-11-06--
3.024F-Prot4.4.4.56200811062008-11-06--
1.293F-Secure5.51.61002008.11.06.112008-11-06--
3.681Fortinet2.81-3.1179.6922008-11-06--
0.215GData19.1393/19.94200811072008-11-07--
2.739IkarusT3.1.01.452008.11.06.718072008-11-06--
3.517JiangMin11.0.7062008.11.062008-11-06--
1.312Kaspersky5.5.102008.11.062008-11-06--
0.034KingSoft2008.9.8.182008.11.6.202008-11-06--
0.690McAfee5.3.0054262008-11-06--
2.352Microsoft1.41042008.11.072008-11-07--
8.785mks_vir2.012008.11.062008-11-06--
2.720Norman5.93.015.93.002008-11-06--
5.480nProtect2008-11-06,0023828662008-11-06--
5.379Panda9.05.012008.11.062008-11-06--
3.744Quick Heal9.502008.09.122008-09-12--
2.520Rising20.021.02.32.002008-11-06--
3.054Sophos2.80.04.352008-11-07Nepravedan / EncPk-CZ
1.881Sunbelt3.1.1783.223742008-11-04--
1.058Symantec1.3.0.2420081106.0042008-11-06Infostealer
0.046The Hacker6.3.1.1v001432008-11-06--
0.445Trend Micro8.700-10045.642.172008-11-06--
0.028VBA323.12.8.920081106.17172008-11-06--
1.390ViRobot200811052008.11.052008-11-05--
0.398VirusBuster4.5.11.1010.90.27/6712492008-11-06--
0.876Thanks
  #6  
Old 6. studeni 2008, 17:30
Novi član grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

http://virscan.org/report/3510c11282...b9674c0c1.html

taj link na skenirane datoteke.
  #7  
Old 6. studeni 2008, 17:39
Moderator / ica grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

Download ComboFix by sUBs jedan od linkova ispod. Budite sigurni da ste na vrhu u Desktop.

Link # 1
Link # 2

** Napomena: Važno je da se sprema izravno na svoj Desktop

Zatvori otvoriti bilo koju web preglednicima. (Firefox, Internet Explorer, etc) prije početka ComboFix.

Privremeno onemogućiti tvoj AntiVirus, A svaka protušpijunskih Zaštita u stvarnom vremenu prije obavlja scan. Kliknite ovaj link da biste vidjeli popis sigurnosne programe, koji bi trebao biti onemogućen i kako onemogućiti ih.

Dvaput kliknite combofix.exe i slijedite upute.

Za instalaciju sustava Windows XP Recovery Console:

- Ako koristite sustav Windows XP i već nemate instaliranu konzolu za oporavak, provjerite Vašu internetsku vezu je aktivna (ako je moguće) i kliknite na Da.
- Ako za neki razlog Internet nije rad klik Ne.
-- Ako ne koristite Windows XP, nećete biti upozoreni.
- Kada se od vas zatraži da prihvatite LUKK-klikni U redu.
- Prihvatiti Microsoft EULA (Klikni Da).
- Kada su rekli da RC je ispravno instaliran kliknite DA da nastavi skeniranje za štetne sadržaje.

Kada završite ComboFix će proizvesti prijava za vas.
Objaviti ComboFix log u sljedećem odgovoru.

Važno: Ne mouseclick ComboFix's prozor dok je pokrenut. Svibanj uzrokovati da ga zatajiti.

Ne zaboravite ponovo uključili vaš protuvirusni i protušpijunski ComboFix zaštita kada je završeno.
__________________
  #8  
Old 6. studeni 2008, 17:57
Novi član grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

Prijavite ComboFix

ComboFix 08-11-05.02 - MKJ 2008-11-06 19:51:34.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3144 [GMT -5:00]
Running from: C: \ Documents and Settings \ MKJ \ Desktop \ ComboFix.exe
.
((((((((((((((((((((((((( Files Created from 2008/10/07 da 2008/11/07 ))))))))))) ))))))))))))))))))))
.
2008-11-06 18:15. 2008-11-06 18:15 <DIR> d -------- C: \ Program Files \ CCleaner
2008-11-06 03:51. 2008-11-06 03:51 <DIR> d -------- C: \ Program Files \ Trend Micro
2008-11-06 03:22. 2008-11-06 03:22 <DIR> d -------- C: \ Program Files \ Alwil Software
2008-11-06 02:10. 2008-11-06 02:10 <DIR> d -------- C: \ Program Files \ Reference Skupštinama
2008-11-06 02:07. 2008-11-06 02:07 <DIR> dr.-h ----- C: \ AHCache
2008-11-05 23:11. 2008-11-06 02:12 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Uniblue
2008-11-05 22:05. 2008-11-05 22:05 <DIR> d -------- C: \ Documents and Settings \ Administrator \ Application Data \ Malwarebytes
2008-11-05 22:04. 2008-11-05 22:04 <DIR> d -------- C: \ Documents and Settings \ Administrator
2008-11-05 16:34. 2008-11-05 16:34 <DIR> d -------- C: \ Program Files \ Xanga Uploader
2008-11-05 16:34. 2008-11-05 16:34 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \. Xuploader
2008-11-05 16:08. 2008-11-05 16:08 <DIR> d -------- C: \ Program Files \ Malwarebytes' Anti-zaštita od zlonamjernih programa
2008-11-05 16:08. 2008-11-05 16:08 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Malwarebytes
2008-11-05 16:08. 2008-11-05 16:08 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Malwarebytes
2008-11-05 16:08. 2008-10-22 16:10 38.496 - a ------ C: \ Windows \ System32 \ Drivers \ mbamswissarmy.sys
2008-11-05 16:08. 2008-10-22 16:10 15.504 - a ------ C: \ Windows \ System32 \ Drivers \ mbam.sys
2008-11-05 15:38. 2008-11-05 15:38 62.464 - a ------ C: \ Windows \ system32 \ s1S8Dh6X.exe
2008-11-01 16:18. 2008-11-01 16:18 <DIR> d -------- C: \ Windows \ system32 \ IOSUBSYS
2008-11-01 16:18. 2008-11-01 16:18 <DIR> d -------- C: \ Program Files \ Google
2008-10-28 02:00. 2008-10-28 02:00 <DIR> d -------- C: \ Program Files \ MSXML 4.0
2008-10-28 01:19. 2008-10-28 01:19 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Nokia
2008-10-28 01:19. 2008-10-28 01:19 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Datalayer
2008-10-28 01:18. 2008-10-30 05:43 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Phone Browser
2008-10-28 00:55. 2008-10-28 00:55 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ DivX
2008-10-28 00:54. 2008-10-28 00:54 <DIR> d -------- C: \ Program Files \ Windows Media Komponente
2008-10-28 00:54. 2005-06-10 09:43 73.728 - a ------ C: \ Windows \ system32 \ ISUSPM.cpl
2008-10-28 00:50. 2008-10-28 00:50 <DIR> d -------- C: \ Program Files \ DIFX
2008-10-28 00:50. 2008-10-28 00:50 <DIR> d -------- C: \ Program Files \ Common Files \ Nokia
2008-10-28 00:50. 2008-10-28 00:58 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ PC Suite
2008-10-28 00:50. 2008-10-28 00:58 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ PC Suite
2008-10-28 00:50. 2008-10-28 00:50 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Downloaded Instalacije
2008-10-28 00:50. 2006-05-29 07:26 127.488 - a ------ C: \ Windows \ System32 \ Drivers \ nmwcd.sys
2008-10-28 00:50. 2006-05-29 07:26 50.688 - a ------ C: \ Windows \ system32 \ nmwcdcls.dll
2008-10-28 00:50. 2006-05-29 07:26 30.720 - a ------ C: \ Windows \ system32 \ nmwcdcocls.dll
2008-10-28 00:50. 2006-05-29 07:26 13.312 - a ------ C: \ Windows \ System32 \ Drivers \ nmwcdcm.sys
2008-10-28 00:50. 2006-05-29 07:26 13.312 - a ------ C: \ Windows \ System32 \ Drivers \ nmwcdcj.sys
2008-10-28 00:50. 2006-05-29 07:26 8.704 - a ------ C: \ Windows \ System32 \ Drivers \ nmwcdc.sys
2008-10-28 00:50. 2006-05-29 07:26 4.608 - a ------ C: \ Windows \ system32 \ nmwcdlog.dll
2008-10-28 00:49. 2008-10-28 00:49 <DIR> d -------- C: \ Windows \ Downloaded Instalacije
2008-10-28 00:49. 2008-10-28 00:51 <DIR> d -------- C: \ Program Files \ Nokia
2008-10-28 00:49. 2008-10-28 00:50 <DIR> d -------- C: \ Program Files \ Common Files \ PCSuite
2008-10-27 23:54. 2008-10-27 23:54 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ EPSON
2008-10-27 21:55. 2008-10-27 21:55 <DIR> d -------- C: \ Program Files \ Ventrilo
2008-10-27 21:55. 2008-10-27 21:55 <DIR> d -------- C: \ Program Files \ Common Files \ Wise Installation Wizard
2008-10-27 21:55. 2008-10-27 21:56 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Ventrilo
2008-10-27 21:13. 2008-11-06 19:50 160.100 - a ------ C: \ Windows \ system32 \ nvapps.xml
2008-10-27 21:05. 2008-11-05 16:09 <DIR> da ------ C: \ Documents and Settings \ All Users \ Application Data \ Temp
2008-10-26 23:48. 2008-11-06 05:29 <DIR> d -------- C: \ Program Files \ easyMule
2008-10-26 13:53. 2008-10-26 13:53 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ glediąta
2008-10-25 19:37. 2008-10-25 19:37 <DIR> d -------- C: \ Program Files \ iPod
2008-10-25 19:37. 2008-10-25 19:37 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Apple Computer
2008-10-25 19:37. 2008-04-17 12:12 107.368 - a ------ C: \ Windows \ system32 \ GEARAspi.dll
2008-10-25 19:37. 2008-04-17 12:12 15.464 - a ------ C: \ Windows \ System32 \ Drivers \ GEARAspiWDM.sys
2008-10-25 19:36. 2008-10-25 19:36 <DIR> d -------- C: \ Program Files \ QuickTime
2008-10-25 19:36. 2008-10-25 19:37 <DIR> d -------- C: \ Program Files \ iTunes
2008-10-25 19:36. 2008-10-25 19:36 <DIR> d -------- C: \ Program Files \ Bonjour
2008-10-25 19:36. 2008-10-25 19:36 <DIR> d -------- C: \ Program Files \ Apple Software Update
2008-10-25 19:36. 2008-10-25 19:36 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Apple Computer
2008-10-25 19:36. 2008-10-25 19:37 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ (3276BE95_AF08_429F_A64F_CA64CB79BCF6)
2008-10-25 19:35. 2008-10-25 19:36 <DIR> d -------- C: \ Program Files \ Common Files \ Apple
2008-10-25 19:35. 2008-10-25 19:35 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Apple
2008-10-24 18:11. 2007-07-30 18:19 271.224 - a ------ C: \ Windows \ system32 \ mucltui.dll
2008-10-24 18:11. 2007-07-30 18:19 30.072 - a ------ C: \ Windows \ system32 \ mucltui.dll.mui
2008-10-24 15:39. 2008-10-24 15:39 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Mećava
2008-10-24 14:24. 2008-10-24 14:24 <DIR> d -------- C: \ Program Files \ Real
2008-10-24 14:24. 2008-10-24 14:24 <DIR> d -------- C: \ Program Files \ Common Files \ zajedničko križanje
2008-10-24 14:24. 2008-10-24 14:24 <DIR> d -------- C: \ Program Files \ Common Files \ Real
2008-10-24 14:07. 2008-10-24 14:07 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Evidencije
2008-10-24 13:59. 2008-10-24 13:59 <DIR> d -------- C: \ Evidencije
2008-10-24 10:05. 2008-10-27 21:15 <DIR> d -------- C: \ Windows \ nview
2008-10-24 10:05. 2008-01-10 01:30 442.368-RA ------ C: \ Windows \ system32 \ nvusmb.exe
2008-10-24 10:05. 2008-03-06 15:23 442.368 - a ------ C: \ Windows \ system32 \ NVUNINST.EXE
2008-10-24 10:05. 2008-03-19 04:04 442.368 - a ------ C: \ Windows \ system32 \ nvudisp.exe
2008-10-24 10:05. 2007-09-27 22:32 356.352-RA ------ C: \ Windows \ system32 \ nvusmu.exe
2008-10-24 10:05. 2008-01-03 17:26 17.737 - a ------ C: \ Windows \ system32 \ nvdisp.nvu
2008-10-24 10:05. 2007-10-12 03:53 13.312-RA ------ C: \ Windows \ System32 \ Drivers \ nvsmu.sys
2008-10-24 10:05. 2007-12-07 03:12 5.836 - a ------ C: \ Windows \ system32 \ nvnrm.nvu
2008-10-24 10:05. 2008-01-16 17:17 3.948-RA ------ C: \ Windows \ System32 \ Drivers \ nvphy.bin
2008-10-24 10:05. 2007-12-07 01:34 2.016-RA ------ C: \ Windows \ system32 \ nvsmb.nvu
2008-10-24 10:05. 2007-09-12 01:14 659-RA ------ C: \ Windows \ system32 \ nvsmu.nvu
2008-10-24 10:04. 2008-10-23 22:44 35.647 - a ------ C: \ Windows \ Ascd_log.ini
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))) ))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-06 10:37 --------- d ----- wc: \ Program Files \ AIMTunes
2008-11-04 21:36 --------- d ----- wc: \ Program Files \ World of Warcraft
2008-10-28 05:55 --------- d ----- wc: \ Program Files \ Common Files \ Ulead Systems
2008-10-28 05:55 --------- d ----- wc: \ Documents and Settings \ MKJ \ Application Data \ Ulead Systems
2008-10-28 05:54 --------- d ----- wc: \ Program Files \ Ulead Systems
2008-10-28 05:54 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ Ulead Systems
2008-10-28 05:53 --------- d - h - wc: \ Program Files \ InstallShield Installation Information
2008-10-28 05:02 --------- d ----- wc: \ Program Files \ Common Files \ Adobe
2008-10-24 19:24 499.712 AW ---- c: \ windows \ system32 \ msvcp71.dll
2008-10-24 19:24 348.160 AW ---- c: \ windows \ system32 \ msvcr71.dll
2008-10-24 14:51 --------- d ----- wc: \ Program Files \ Microsoft FrontPage
2008-10-24 07:55 --------- d ----- wc: \ Program Files \ MSN Messenger
2008-10-24 06:09 --------- d ----- wc: \ Program Files \ Microsoft CAPICOM 2.1.0.2
2008-10-24 05:44 --------- d ----- wc: \ Program Files \ Winamp
2008-10-24 05:44 --------- d ----- wc: \ Documents and Settings \ MKJ \ Application Data \ Winamp
2008-10-24 05:40 --------- d ----- wc: \ Documents and Settings \ MKJ \ Application Data \ acccore
2008-10-24 05:39 --------- d ----- wc: \ Program Files \ AIM6
2008-10-24 05:39 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ AOL Preuzimanja
2008-10-24 05:38 --------- d ----- wc: \ Program Files \ glediąta
2008-10-24 05:38 --------- d ----- wc: \ Program Files \ Common Files \ AOL
2008-10-24 05:38 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ glediąta
2008-10-24 05:38 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ AOL OCP
2008-10-24 05:38 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ AOL
2008-10-24 05:38 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ acccore
2008-10-24 05:32 --------- d ----- wc: \ Program Files \ Common Files \ Mećava Zabava
2008-10-24 05:20 --------- d ----- wc: \ Program Files \ Windows Media Connect 2
2008-10-24 05:10 --------- d ----- wc: \ Program Files \ DivX
2008-10-24 05:08 --------- d ----- wc: \ Program Files \ DefilerPak
2008-10-24 04:37 --------- d ----- wc: \ Program Files \ Realtek
2008-10-24 04:33 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ Symantec
2008-10-24 04:18 --------- d ----- wc: \ Program Files \ Common Files \ Symantec Shared
2008-10-24 03:58 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ InstallShield
2008-10-24 03:57 --------- d ----- wc: \ Program Files \ Common Files \ InstallShield
2008-10-24 03:54 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ Corel
2008-10-24 03:33 --------- d ----- wc: \ Program Files \ ASUS
2008-10-24 03:08 315.392 AW ---- C: \ Windows \ HideWin.exe
2008-10-24 03:08 --------- d ----- wc: \ Program Files \ profile
2008-10-24 00:18 2.302.017 ---- AW c: \ windows \ system32 \ GPhotos.scr
2008-09-23 22:46 245.408 AW ---- c: \ windows \ system32 \ unicows.dll
2008-09-15 12:12 1.846.400 ---- AW c: \ windows \ system32 \ Win32k.sys
2008-09-08 10:41 333.824 AW ---- C: \ Windows \ System32 \ Drivers \ srv.sys
2008-08-29 14:18 87.336 ---- AW c: \ windows \ system32 \ DNS-sd.exe
2008-08-29 13:53 61.440 ---- AW c: \ windows \ system32 \ dnssd.dll
2008-08-26 07:24 826.368 AW ---- c: \ windows \ system32 \ Wininet.dll
2008-08-14 10:09 2.145.280 ---- AW c: \ windows \ system32 \ ntoskrnl.exe
2008-08-14 09:33 2.023.936 ---- AW c: \ windows \ system32 \ Ntkrnlpa.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))) ))))))))))))))))))))))))))))))))))))))))
.
.
* Note * empty entries & čitljiv default unose se ne prikazuju
REGEDIT4
[HKEY_LOCAL_MACHINE \ ~ \ Browser Helper Objects \ (0A0DDBD3-6641-40B9-873F-BBDD26D6C14E)]
2008-10-23 02:37 147928 - a ------ C: \ Program Files \ easyMule \ modules \ IE2EM.dll
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Run]
"Ctfmon.exe" = "c: \ windows \ system32 \ Ctfmon.exe" [2008-04-13 15360]
"\ \ MING3 \ EPSON Gramofonska igla C120 Series "=" C: \ Windows \ System32 \ spool \ drivers \ W32X86 \ 3 \ E_FATICCA.EXE "[2007-03-12 182272]
"PcSync" = "C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ PcSync2.exe" [2006-06-27 1449984]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run]
"PHIME2002ASync" = "C: \ Windows \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE" [2004-08-04 455168]
"PHIME2002A" = "C: \ Windows \ System32 \ IME \ TINTLGNT \ TIN TSETP.EXE" [2004-08-04 455168]
"Aj nap" = "C: \ Program Files \ ASUS \ Ai Suite \ AiNap \ AiNap.exe" [2008-01-28 1413120]
"CPU Power Monitor" = "C: \ Program Files \ ASUS \ Ai Suite \ AiGear3 \ CpuPowerMonitor.exe" [2008-01-09 627200]
"Procesor Level Up help" = "C: \ Program Files \ ASUS \ Ai Suite \ CpuLevelUpHelp.exe" [2007-11-30 881152]
"ASUS Energy Saving" = "C: \ Program Files \ ASUS \ Ai Suite \ EnergySaving \ PwSave.exe" [2008-01-28 1352704]
"Ulead AutoDetector v2" = "C: \ Program Files \ Common Files \ Ulead Systems \ AutoDetector \ monitor.exe" [2006-11-29 90112]
"TkBellExe" = "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe" [2008-10-24 185872]
"QuickTime Task" = "C: \ Program Files \ QuickTime \ qttask.exe" [2008-09-06 413696]
"iTunesHelper" = "C: \ Program Files \ iTunes \ iTunesHelper.exe" [2008-10-01 289576]
"NvCplDaemon" = "c: \ windows \ system32 \ NvCpl.dll" [2008-01-03 13508608]
"NvMediaCenter" = "c: \ windows \ system32 \ NvMcTray. Dll" [2008-01-03 86016]
"Adobe Reader Speed Launcher" = "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe" [2008-01-11 39792]
"NSLauncher" = "C: \ Program Files \ Nokia \ Nokia Software Launcher \ NSLauncher.exe" [2006-11-28 2658304]
"avast!" = "c: \ programa ~ 1 \ ALWILS ~ 1 \ Avast4 \ ashDisp. exe" [2008-07-19 78008]
"RTHDCPL" = "RTHDCPL.EXE" [2008/05/07 c: \ windows \ RTHDCPL.exe]
"nwiz" = "nwiz.exe" [2008/01/03 c: \ windows \ system32 \ nwiz.exe]
[HKEY_USERS \. DEFAULT \ Software \ Microsoft \ Windows \ Cur rentVersion \ Run]
"Ctfmon.exe" = "C: \ Windows \ System32 \ Ctfmon.exe" [2008-04-13 15360]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ drivers32]
"msacm.dvacm" = C: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ ULEADS ~ 1 \ Vio \ Dvacm.acm
"msacm.divxa32" = DivXa32.acm
"msacm.ulmp3acm" = C: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ ULEADS ~ 1 \ MPEG \ ulmp3acm.acm
"msacm.mpegacm" = C: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ ULEADS ~ 1 \ MPEG \ mpegacm.acm
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnet3.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnet3 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnet3 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx30SP1setup.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx30SP1setup [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx30SP1setup [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35setup.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35setup [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35setup [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3setup.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3setup [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3setup [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_ia64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_ia64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_ia64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_ia64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_ia64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_ia64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x86.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x86 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x86 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_ia64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_ia64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_ia64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x86.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x86 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x86 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x86.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x86 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x86 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_ia64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_ia64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_ia64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x86.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x86 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x86 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKLM \ ~ \ Services \ sharedaccess \ Parameters \ firewallpo licy \ standardprofile \ AuthorizedApplications \ List]
"% windir% \ \ system32 \ \ sessmgr.exe" =
"% windir% \ \ Network Diagnostic \ \ xpnetdiag.exe" =
"c: \ \ Program Files \ \ Common Files \ \ AOL \ \ Loader \ \ aolload.exe" =
"c: \ \ Program Files \ \ AIM6 \ \ aim6.exe" =
"c: \ \ Program Files \ \ World of Warcraft \ \ WOW-2.3.0-enUS-downloader.exe" =
"c: \ \ Program Files \ \ Messenger \ \ msnmsgr.exe" =
"c: \ \ Program Files \ \ Messenger \ \ livecall.exe" =
"c: \ \ Program Files \ \ Bonjour \ \ mDNSResponder.exe" =
"c: \ \ Program Files \ \ iTunes \ \ iTunes.exe" =
"c: \ \ Program Files \ \ easyMule \ \ emule.exe" =
[HKLM \ ~ \ Services \ sharedaccess \ Parameters \ firewallpo licy \ standardprofile \ GloballyOpenPorts \ List]
"3724: TCP" = 3724: TCP: Mećava Downloader: 3724
"12178: TCP" = 12178: TCP: BitComet 12178 TCP
"12178: UDP" = 12178: UDP: 12178 UDP BitComet
R1 aswSP; avast! Self Protection; c: \ windows \ system32 \ drivers \ aswSP.sys [2008-07-19 78416]
R2 aswFsBlk; aswFsBlk; c: \ Windows \ System32 \ Drivers \ aswF sBlk.sys [2008-07-19 20560]
R2 glediąta Manager Service; glediąta Manager Service; c: \ program files \ glediąta \ Common \ ViewpointService.exe [2007-01-04 24652]
R3 NVHDA; Servis za NVIDIA High Definition Audio Driver, c: \ windows \ system32 \ drivers \ nvhda32.sys [2008-05-04 38560]
.
Sadržaj je 'Scheduled Tasks' folder
2008/11/01 C: \ Windows \ Tasks \ AppleSoftwareUpdate.job
- C: \ Program Files \ Apple Software Update \ SoftwareUpdate.exe [2008-07-30 11:34]
2008/11/06 C: \ Windows \ Tasks \ At1.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At10.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At11.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At12.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At13.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At14.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At15.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At16.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At17.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At18.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At19.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At2.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/07 C: \ Windows \ Tasks \ At20.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At21.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At22.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At23.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At24.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At3.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At4.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At5.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At6.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At7.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At8.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
2008/11/06 C: \ Windows \ Tasks \ At9.job
- C: \ windows \ system32 \ s1S8Dh6X.exe [2008-11-05 15:38]
.
- - - - Orphans Odstranjena - - - --
HKCU-Run-Uniblue RegistryBooster 2009 - C: \ Program Files \ Uniblue \ RegistryBooster \ RegistryBooster.exe
MSConfigStartUp-Uniblue RegistryBooster 2009 - C: \ Program Files \ Uniblue \ RegistryBooster \ RegistryBooster.exe

.
------- Supplementary Scan -------
.
R0 -: HKCU-Main, Start Page = o: blank
R1 -: HKCU-Internet Settings, ProxyOverride = *. lokalne
O8 -: Add to Google Photos & ver Screensa - c: \ windows \ system32 \ GPhotos.scr/200
O8 -: Download by easyMule - C: \ Program Files \ easyMule \ IE2EM.htm
.
************************************************** ************************
catchme 0.3.1367 W2K/XP/Vista - rootkit / potaja detector by Gmer zlonamjernih programa, http://www.gmer.net
Rootkit scan 2008-11-06 19:54:20
5/1/2600 Windows Service Pack 3 NTFS
skeniranja skrivenih procesa ...
skeniranja skrivenih autostart entries ...
skeniranja skrivenih datoteka ...
scan uspješno završena
skrivenih datoteka: 0
************************************************** ************************
.
Completion time: 2008-11-06 19:54:45
ComboFix-u karanteni-files.txt 2008-11-07 00:54:42
Pre-Run: 41621639168 bytes free
Post-Run: 41699291136 bytes free
396 --- EOF --- 2008-10-28 07:00:21
  #9  
Old 6. studeni 2008, 18:28
Moderator / ica grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

Napomena: se upute u nastavku su izrađene specijalno za ovog korisnika. Ukoliko niste u ovom, NE slijedite ove smjerove, jer bi mogao oštetiti djelovanju vašeg sustava

Izbriši ove datoteke / mape, kako slijedi:

1. Idi na Početak > Pokrenuti > Tip Notepad.exe i kliknite U redu otvoriti Notepad.
To morati biti Notepad, WordPad ne.
2. Kopiraj tekst ispod u okvir code by označavanje svih tekstualnih i pritiskom na Ctrl + C

Code:
KillAll:: File:: C: \ Windows \ system32 \ s1S8Dh6X.exe C: \ Windows \ Tasks \ At1.job C: \ Windows \ Tasks \ At10.job C: \ Windows \ Tasks \ At11.job c: \ windows \ Tasks \ At12.job C: \ Windows \ Tasks \ At13.job C: \ Windows \ Tasks \ At14.job C: \ Windows \ Tasks \ At15.job C: \ Windows \ Tasks \ At16.job c: \ windows \ Tasks \ At17.job C: \ Windows \ Tasks \ At18.job C: \ Windows \ Tasks \ At19.job C: \ Windows \ Tasks \ At2.job C: \ Windows \ Tasks \ At20.job c: \ windows \ Tasks \ At21.job C: \ Windows \ Tasks \ At22.job C: \ Windows \ Tasks \ At23.job C: \ Windows \ Tasks \ At24.job C: \ Windows \ Tasks \ At3.job c: \ windows \ Tasks \ At4.job C: \ Windows \ Tasks \ At5.job C: \ Windows \ Tasks \ At6.job C: \ Windows \ Tasks \ At7.job C: \ Windows \ Tasks \ At8.job c: \ windows \ Tasks \ At9.job
3. Idi na Notepad prozor i kliknite na Uredi > Zalijepi
4. Zatim kliknite na Datoteka > Spremiti
5. Ime datoteke CFScript.txt - Spremi datoteku na svoj Desktop
6. Zatim povucite CFScript (držite lijevu tipku miša dok povučete datoteku), a pad je (otpustite lijevu tipku miša) u ComboFix.exe kao što vidite na sliki ispod. Važno: Obavi ovo uputstvo pažljivo!



ComboFix će se početi izvršavati, samo slijedite upute.
Nakon što ponovno podizanje sustava (u slučaju da ga zatraži ponovno podizanje sustava), on će proizvesti prijava za vas.
Pošta koja log (Combofix.txt) u sljedeći odgovor.

Napomena: Ne mouseclick ComboFix's prozor dok je pokrenut. To svibanj nanijeti tvoj sistem za zamrzavanje
__________________
  #10  
Old 6. studeni 2008, 18:37
Novi član grupe
  
Default Virus: IEXPLORE.EXE sustav kao proces

Prijavite ComboFix

ComboFix 08-11-05.02 - MKJ 2008-11-06 20:31:01.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2458 [GMT -5:00]
Running from: C: \ Documents and Settings \ MKJ \ Desktop \ ComboFix.exe
Naredba prekidači koji se koriste:: C: \ Documents and Settings \ MKJ \ Desktop \ CFScript.txt
* Created novu točku vraćanja
SLIKA:
c: \ windows \ system32 \ s1S8Dh6X.exe
C: \ Windows \ Tasks \ At1.job
C: \ Windows \ Tasks \ At10.job
C: \ Windows \ Tasks \ At11.job
C: \ Windows \ Tasks \ At12.job
C: \ Windows \ Tasks \ At13.job
C: \ Windows \ Tasks \ At14.job
C: \ Windows \ Tasks \ At15.job
C: \ Windows \ Tasks \ At16.job
C: \ Windows \ Tasks \ At17.job
C: \ Windows \ Tasks \ At18.job
C: \ Windows \ Tasks \ At19.job
C: \ Windows \ Tasks \ At2.job
C: \ Windows \ Tasks \ At20.job
C: \ Windows \ Tasks \ At21.job
C: \ Windows \ Tasks \ At22.job
C: \ Windows \ Tasks \ At23.job
C: \ Windows \ Tasks \ At24.job
C: \ Windows \ Tasks \ At3.job
C: \ Windows \ Tasks \ At4.job
C: \ Windows \ Tasks \ At5.job
C: \ Windows \ Tasks \ At6.job
C: \ Windows \ Tasks \ At7.job
C: \ Windows \ Tasks \ At8.job
C: \ Windows \ Tasks \ At9.job
.
Ostali ((((((((((((((((((((((((((((((((((((((( brisanja ))))))))) ))))))))))))))))))))))))))))))))))))))))
.
c: \ windows \ system32 \ s1S8Dh6X.exe
C: \ Windows \ Tasks \ At1.job
C: \ Windows \ Tasks \ At10.job
C: \ Windows \ Tasks \ At11.job
C: \ Windows \ Tasks \ At12.job
C: \ Windows \ Tasks \ At13.job
C: \ Windows \ Tasks \ At14.job
C: \ Windows \ Tasks \ At15.job
C: \ Windows \ Tasks \ At16.job
C: \ Windows \ Tasks \ At17.job
C: \ Windows \ Tasks \ At18.job
C: \ Windows \ Tasks \ At19.job
C: \ Windows \ Tasks \ At2.job
C: \ Windows \ Tasks \ At20.job
C: \ Windows \ Tasks \ At21.job
C: \ Windows \ Tasks \ At22.job
C: \ Windows \ Tasks \ At23.job
C: \ Windows \ Tasks \ At24.job
C: \ Windows \ Tasks \ At3.job
C: \ Windows \ Tasks \ At4.job
C: \ Windows \ Tasks \ At5.job
C: \ Windows \ Tasks \ At6.job
C: \ Windows \ Tasks \ At7.job
C: \ Windows \ Tasks \ At8.job
C: \ Windows \ Tasks \ At9.job
.
((((((((((((((((((((((((( Files Created from 2008/10/07 da 2008/11/07 ))))))))))) ))))))))))))))))))))
.
2008-11-06 18:15. 2008-11-06 18:15 <DIR> d -------- C: \ Program Files \ CCleaner
2008-11-06 03:51. 2008-11-06 03:51 <DIR> d -------- C: \ Program Files \ Trend Micro
2008-11-06 03:22. 2008-11-06 03:22 <DIR> d -------- C: \ Program Files \ Alwil Software
2008-11-06 02:10. 2008-11-06 02:10 <DIR> d -------- C: \ Program Files \ Reference Skupštinama
2008-11-06 02:07. 2008-11-06 02:07 <DIR> dr.-h ----- C: \ AHCache
2008-11-05 23:11. 2008-11-06 02:12 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Uniblue
2008-11-05 22:05. 2008-11-05 22:05 <DIR> d -------- C: \ Documents and Settings \ Administrator \ Application Data \ Malwarebytes
2008-11-05 22:04. 2008-11-05 22:04 <DIR> d -------- C: \ Documents and Settings \ Administrator
2008-11-05 16:34. 2008-11-05 16:34 <DIR> d -------- C: \ Program Files \ Xanga Uploader
2008-11-05 16:34. 2008-11-05 16:34 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \. Xuploader
2008-11-05 16:08. 2008-11-05 16:08 <DIR> d -------- C: \ Program Files \ Malwarebytes' Anti-zaštita od zlonamjernih programa
2008-11-05 16:08. 2008-11-05 16:08 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Malwarebytes
2008-11-05 16:08. 2008-11-05 16:08 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Malwarebytes
2008-11-05 16:08. 2008-10-22 16:10 38.496 - a ------ C: \ Windows \ System32 \ Drivers \ mbamswissarmy.sys
2008-11-05 16:08. 2008-10-22 16:10 15.504 - a ------ C: \ Windows \ System32 \ Drivers \ mbam.sys
2008-11-01 16:18. 2008-11-01 16:18 <DIR> d -------- C: \ Windows \ system32 \ IOSUBSYS
2008-11-01 16:18. 2008-11-01 16:18 <DIR> d -------- C: \ Program Files \ Google
2008-10-28 02:00. 2008-10-28 02:00 <DIR> d -------- C: \ Program Files \ MSXML 4.0
2008-10-28 01:19. 2008-10-28 01:19 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Nokia
2008-10-28 01:19. 2008-10-28 01:19 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Datalayer
2008-10-28 01:18. 2008-10-30 05:43 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Phone Browser
2008-10-28 00:55. 2008-10-28 00:55 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ DivX
2008-10-28 00:54. 2008-10-28 00:54 <DIR> d -------- C: \ Program Files \ Windows Media Komponente
2008-10-28 00:54. 2005-06-10 09:43 73.728 - a ------ C: \ Windows \ system32 \ ISUSPM.cpl
2008-10-28 00:50. 2008-10-28 00:50 <DIR> d -------- C: \ Program Files \ DIFX
2008-10-28 00:50. 2008-10-28 00:50 <DIR> d -------- C: \ Program Files \ Common Files \ Nokia
2008-10-28 00:50. 2008-10-28 00:58 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ PC Suite
2008-10-28 00:50. 2008-10-28 00:58 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ PC Suite
2008-10-28 00:50. 2008-10-28 00:50 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Downloaded Instalacije
2008-10-28 00:50. 2006-05-29 07:26 127.488 - a ------ C: \ Windows \ System32 \ Drivers \ nmwcd.sys
2008-10-28 00:50. 2006-05-29 07:26 50.688 - a ------ C: \ Windows \ system32 \ nmwcdcls.dll
2008-10-28 00:50. 2006-05-29 07:26 30.720 - a ------ C: \ Windows \ system32 \ nmwcdcocls.dll
2008-10-28 00:50. 2006-05-29 07:26 13.312 - a ------ C: \ Windows \ System32 \ Drivers \ nmwcdcm.sys
2008-10-28 00:50. 2006-05-29 07:26 13.312 - a ------ C: \ Windows \ System32 \ Drivers \ nmwcdcj.sys
2008-10-28 00:50. 2006-05-29 07:26 8.704 - a ------ C: \ Windows \ System32 \ Drivers \ nmwcdc.sys
2008-10-28 00:50. 2006-05-29 07:26 4.608 - a ------ C: \ Windows \ system32 \ nmwcdlog.dll
2008-10-28 00:49. 2008-10-28 00:49 <DIR> d -------- C: \ Windows \ Downloaded Instalacije
2008-10-28 00:49. 2008-10-28 00:51 <DIR> d -------- C: \ Program Files \ Nokia
2008-10-28 00:49. 2008-10-28 00:50 <DIR> d -------- C: \ Program Files \ Common Files \ PCSuite
2008-10-27 23:54. 2008-10-27 23:54 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ EPSON
2008-10-27 21:55. 2008-10-27 21:55 <DIR> d -------- C: \ Program Files \ Ventrilo
2008-10-27 21:55. 2008-10-27 21:55 <DIR> d -------- C: \ Program Files \ Common Files \ Wise Installation Wizard
2008-10-27 21:55. 2008-10-27 21:56 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Ventrilo
2008-10-27 21:13. 2008-11-06 20:34 160.100 - a ------ C: \ Windows \ system32 \ nvapps.xml
2008-10-27 21:05. 2008-11-05 16:09 <DIR> da ------ C: \ Documents and Settings \ All Users \ Application Data \ Temp
2008-10-26 23:48. 2008-11-06 05:29 <DIR> d -------- C: \ Program Files \ easyMule
2008-10-26 13:53. 2008-10-26 13:53 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ glediąta
2008-10-25 19:37. 2008-10-25 19:37 <DIR> d -------- C: \ Program Files \ iPod
2008-10-25 19:37. 2008-10-25 19:37 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Application Data \ Apple Computer
2008-10-25 19:37. 2008-04-17 12:12 107.368 - a ------ C: \ Windows \ system32 \ GEARAspi.dll
2008-10-25 19:37. 2008-04-17 12:12 15.464 - a ------ C: \ Windows \ System32 \ Drivers \ GEARAspiWDM.sys
2008-10-25 19:36. 2008-10-25 19:36 <DIR> d -------- C: \ Program Files \ QuickTime
2008-10-25 19:36. 2008-10-25 19:37 <DIR> d -------- C: \ Program Files \ iTunes
2008-10-25 19:36. 2008-10-25 19:36 <DIR> d -------- C: \ Program Files \ Bonjour
2008-10-25 19:36. 2008-10-25 19:36 <DIR> d -------- C: \ Program Files \ Apple Software Update
2008-10-25 19:36. 2008-10-25 19:36 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Apple Computer
2008-10-25 19:36. 2008-10-25 19:37 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ (3276BE95_AF08_429F_A64F_CA64CB79BCF6)
2008-10-25 19:35. 2008-10-25 19:36 <DIR> d -------- C: \ Program Files \ Common Files \ Apple
2008-10-25 19:35. 2008-10-25 19:35 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Apple
2008-10-24 18:11. 2007-07-30 18:19 271.224 - a ------ C: \ Windows \ system32 \ mucltui.dll
2008-10-24 18:11. 2007-07-30 18:19 30.072 - a ------ C: \ Windows \ system32 \ mucltui.dll.mui
2008-10-24 15:39. 2008-10-24 15:39 <DIR> d -------- C: \ Documents and Settings \ All Users \ Application Data \ Mećava
2008-10-24 14:24. 2008-10-24 14:24 <DIR> d -------- C: \ Program Files \ Real
2008-10-24 14:24. 2008-10-24 14:24 <DIR> d -------- C: \ Program Files \ Common Files \ zajedničko križanje
2008-10-24 14:24. 2008-10-24 14:24 <DIR> d -------- C: \ Program Files \ Common Files \ Real
2008-10-24 14:07. 2008-10-24 14:07 <DIR> d -------- C: \ Documents and Settings \ MKJ \ Evidencije
2008-10-24 13:59. 2008-10-24 13:59 <DIR> d -------- C: \ Evidencije
2008-10-24 10:05. 2008-10-27 21:15 <DIR> d -------- C: \ Windows \ nview
2008-10-24 10:05. 2008-01-10 01:30 442.368-RA ------ C: \ Windows \ system32 \ nvusmb.exe
2008-10-24 10:05. 2008-03-06 15:23 442.368 - a ------ C: \ Windows \ system32 \ NVUNINST.EXE
2008-10-24 10:05. 2008-03-19 04:04 442.368 - a ------ C: \ Windows \ system32 \ nvudisp.exe
2008-10-24 10:05. 2007-09-27 22:32 356.352-RA ------ C: \ Windows \ system32 \ nvusmu.exe
2008-10-24 10:05. 2008-01-03 17:26 17.737 - a ------ C: \ Windows \ system32 \ nvdisp.nvu
2008-10-24 10:05. 2007-10-12 03:53 13.312-RA ------ C: \ Windows \ System32 \ Drivers \ nvsmu.sys
2008-10-24 10:05. 2007-12-07 03:12 5.836 - a ------ C: \ Windows \ system32 \ nvnrm.nvu
2008-10-24 10:05. 2008-01-16 17:17 3.948-RA ------ C: \ Windows \ System32 \ Drivers \ nvphy.bin
2008-10-24 10:05. 2007-12-07 01:34 2.016-RA ------ C: \ Windows \ system32 \ nvsmb.nvu
2008-10-24 10:05. 2007-09-12 01:14 659-RA ------ C: \ Windows \ system32 \ nvsmu.nvu
2008-10-24 10:04. 2008-10-23 22:44 35.647 - a ------ C: \ Windows \ Ascd_log.ini
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))) ))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-06 10:37 --------- d ----- wc: \ Program Files \ AIMTunes
2008-11-04 21:36 --------- d ----- wc: \ Program Files \ World of Warcraft
2008-10-28 05:55 --------- d ----- wc: \ Program Files \ Common Files \ Ulead Systems
2008-10-28 05:55 --------- d ----- wc: \ Documents and Settings \ MKJ \ Application Data \ Ulead Systems
2008-10-28 05:54 --------- d ----- wc: \ Program Files \ Ulead Systems
2008-10-28 05:54 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ Ulead Systems
2008-10-28 05:53 --------- d - h - wc: \ Program Files \ InstallShield Installation Information
2008-10-28 05:02 --------- d ----- wc: \ Program Files \ Common Files \ Adobe
2008-10-24 19:24 499.712 AW ---- c: \ windows \ system32 \ msvcp71.dll
2008-10-24 19:24 348.160 AW ---- c: \ windows \ system32 \ msvcr71.dll
2008-10-24 14:51 --------- d ----- wc: \ Program Files \ Microsoft FrontPage
2008-10-24 07:55 --------- d ----- wc: \ Program Files \ MSN Messenger
2008-10-24 06:09 --------- d ----- wc: \ Program Files \ Microsoft CAPICOM 2.1.0.2
2008-10-24 05:44 --------- d ----- wc: \ Program Files \ Winamp
2008-10-24 05:44 --------- d ----- wc: \ Documents and Settings \ MKJ \ Application Data \ Winamp
2008-10-24 05:40 --------- d ----- wc: \ Documents and Settings \ MKJ \ Application Data \ acccore
2008-10-24 05:39 --------- d ----- wc: \ Program Files \ AIM6
2008-10-24 05:39 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ AOL Preuzimanja
2008-10-24 05:38 --------- d ----- wc: \ Program Files \ glediąta
2008-10-24 05:38 --------- d ----- wc: \ Program Files \ Common Files \ AOL
2008-10-24 05:38 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ glediąta
2008-10-24 05:38 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ AOL OCP
2008-10-24 05:38 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ AOL
2008-10-24 05:38 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ acccore
2008-10-24 05:32 --------- d ----- wc: \ Program Files \ Common Files \ Mećava Zabava
2008-10-24 05:20 --------- d ----- wc: \ Program Files \ Windows Media Connect 2
2008-10-24 05:10 --------- d ----- wc: \ Program Files \ DivX
2008-10-24 05:08 --------- d ----- wc: \ Program Files \ DefilerPak
2008-10-24 04:37 --------- d ----- wc: \ Program Files \ Realtek
2008-10-24 04:33 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ Symantec
2008-10-24 04:18 --------- d ----- wc: \ Program Files \ Common Files \ Symantec Shared
2008-10-24 03:58 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ InstallShield
2008-10-24 03:57 --------- d ----- wc: \ Program Files \ Common Files \ InstallShield
2008-10-24 03:54 --------- d ----- wc: \ Documents and Settings \ All Users \ Application Data \ Corel
2008-10-24 03:33 --------- d ----- wc: \ Program Files \ ASUS
2008-10-24 03:08 315.392 AW ---- C: \ Windows \ HideWin.exe
2008-10-24 03:08 --------- d ----- wc: \ Program Files \ profile
2008-10-24 00:18 2.302.017 ---- AW c: \ windows \ system32 \ GPhotos.scr
2008-09-23 22:46 245.408 AW ---- c: \ windows \ system32 \ unicows.dll
2008-09-15 12:12 1.846.400 ---- AW c: \ windows \ system32 \ Win32k.sys
2008-09-08 10:41 333.824 AW ---- C: \ Windows \ System32 \ Drivers \ srv.sys
2008-08-29 14:18 87.336 ---- AW c: \ windows \ system32 \ DNS-sd.exe
2008-08-29 13:53 61.440 ---- AW c: \ windows \ system32 \ dnssd.dll
2008-08-26 07:24 826.368 AW ---- c: \ windows \ system32 \ Wininet.dll
2008-08-14 10:09 2.145.280 ---- AW c: \ windows \ system32 \ ntoskrnl.exe
2008-08-14 09:33 2.023.936 ---- AW c: \ windows \ system32 \ Ntkrnlpa.exe
.
((((((((((((((((((((((((((((( Snapshot@2008-11-06_19.54.31.75 )))))))))) )))))))))))))))))))))))))))))))
.
- 2008-11-06 23:26:54 49.198 ---- AW c: \ windows \ system32 \ perfc009.dat
+ 2008-11-07 00:54:48 49.198 ---- AW c: \ windows \ system32 \ perfc009.dat
- 2008-11-06 23:26:54 390.094 AW ---- c: \ windows \ system32 \ perfh009.dat
+ 2008-11-07 00:54:48 390.094 AW ---- c: \ windows \ system32 \ perfh009.dat
+ 2008-11-07 01:33:47 16.384 ---- atw C: \ Windows \ Temp \ Perflib_Perfdata_584.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))) ))))))))))))))))))))))))))))))))))))))))
.
.
* Note * empty entries & čitljiv default unose se ne prikazuju
REGEDIT4
[HKEY_LOCAL_MACHINE \ ~ \ Browser Helper Objects \ (0A0DDBD3-6641-40B9-873F-BBDD26D6C14E)]
2008-10-23 02:37 147928 - a ------ C: \ Program Files \ easyMule \ modules \ IE2EM.dll
[HKEY_CURRENT_USER \ Software \ Microsoft \ Windows \ Curre ntVersion \ Run]
"Ctfmon.exe" = "c: \ windows \ system32 \ Ctfmon.exe" [2008-04-13 15360]
"\ \ MING3 \ EPSON Gramofonska igla C120 Series "=" C: \ Windows \ System32 \ spool \ drivers \ W32X86 \ 3 \ E_FATICCA.EXE "[2007-03-12 182272]
"PcSync" = "C: \ Program Files \ Nokia \ Nokia PC Suite 6 \ PcSync2.exe" [2006-06-27 1449984]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows \ Curr entVersion \ Run]
"PHIME2002ASync" = "C: \ Windows \ System32 \ IME \ TINTLGNT \ TINTSETP.EXE" [2004-08-04 455168]
"PHIME2002A" = "C: \ Windows \ System32 \ IME \ TINTLGNT \ TIN TSETP.EXE" [2004-08-04 455168]
"Aj nap" = "C: \ Program Files \ ASUS \ Ai Suite \ AiNap \ AiNap.exe" [2008-01-28 1413120]
"CPU Power Monitor" = "C: \ Program Files \ ASUS \ Ai Suite \ AiGear3 \ CpuPowerMonitor.exe" [2008-01-09 627200]
"Procesor Level Up help" = "C: \ Program Files \ ASUS \ Ai Suite \ CpuLevelUpHelp.exe" [2007-11-30 881152]
"ASUS Energy Saving" = "C: \ Program Files \ ASUS \ Ai Suite \ EnergySaving \ PwSave.exe" [2008-01-28 1352704]
"Ulead AutoDetector v2" = "C: \ Program Files \ Common Files \ Ulead Systems \ AutoDetector \ monitor.exe" [2006-11-29 90112]
"TkBellExe" = "C: \ Program Files \ Common Files \ Real \ Update_OB \ realsched.exe" [2008-10-24 185872]
"QuickTime Task" = "C: \ Program Files \ QuickTime \ qttask.exe" [2008-09-06 413696]
"iTunesHelper" = "C: \ Program Files \ iTunes \ iTunesHelper.exe" [2008-10-01 289576]
"NvCplDaemon" = "c: \ windows \ system32 \ NvCpl.dll" [2008-01-03 13508608]
"NvMediaCenter" = "c: \ windows \ system32 \ NvMcTray. Dll" [2008-01-03 86016]
"Adobe Reader Speed Launcher" = "C: \ Program Files \ Adobe \ Reader 8,0 \ Reader \ Reader_sl.exe" [2008-01-11 39792]
"NSLauncher" = "C: \ Program Files \ Nokia \ Nokia Software Launcher \ NSLauncher.exe" [2006-11-28 2658304]
"RTHDCPL" = "RTHDCPL.EXE" [2008/05/07 c: \ windows \ RTHDCPL.exe]
"nwiz" = "nwiz.exe" [2008/01/03 c: \ windows \ system32 \ nwiz.exe]
[HKEY_USERS \. DEFAULT \ Software \ Microsoft \ Windows \ Cur rentVersion \ Run]
"Ctfmon.exe" = "C: \ Windows \ System32 \ Ctfmon.exe" [2008-04-13 15360]
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ drivers32]
"msacm.dvacm" = C: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ ULEADS ~ 1 \ Vio \ Dvacm.acm
"msacm.divxa32" = DivXa32.acm
"msacm.ulmp3acm" = C: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ ULEADS ~ 1 \ MPEG \ ulmp3acm.acm
"msacm.mpegacm" = C: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ ULEADS ~ 1 \ MPEG \ mpegacm.acm
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnet3.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnet3 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnet3 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx30SP1setup.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx30SP1setup [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx30SP1setup [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35setup.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35setup [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35setup [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx35 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3setup.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3setup [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3setup [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_ia64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_ia64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_ia64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx3_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ dotnetfx [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_ia64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_ia64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_ia64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x86.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x86 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP1_x86 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_ia64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_ia64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_ia64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x86.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x86 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx20SP2_x86 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x86.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x86 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx30SP1_x86 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_ia64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_ia64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_ia64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x86.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x86 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx35_x86 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx64.exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx64 [1]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKEY_LOCAL_MACHINE \ SOFTWARE \ Microsoft \ Windows NT \ CurrentVersion \ image file izvršenje options \ NetFx64 [2]. Exe]
"Razbubnik" = C: \ WINDOWS \ Microsoft.NET \ Framework \ v2.0 ,50727 \ DotNetFxInstallBlock.exe
[HKLM \ ~ \ Services \ sharedaccess \ Parameters \ firewallpo licy \ standardprofile \ AuthorizedApplications \ List]
"% windir% \ \ system32 \ \ sessmgr.exe" =
"% windir% \ \ Network Diagnostic \ \ xpnetdiag.exe" =
"c: \ \ Program Files \ \ Common Files \ \ AOL \ \ Loader \ \ aolload.exe" =
"c: \ \ Program Files \ \ AIM6 \ \ aim6.exe" =
"c: \ \ Program Files \ \ World of Warcraft \ \ WOW-2.3.0-enUS-downloader.exe" =
"c: \ \ Program Files \ \ Messenger \ \ msnmsgr.exe" =
"c: \ \ Program Files \ \ Messenger \ \ livecall.exe" =
"c: \ \ Program Files \ \ Bonjour \ \ mDNSResponder.exe" =
"c: \ \ Program Files \ \ iTunes \ \ iTunes.exe" =
"c: \ \ Program Files \ \ easyMule \ \ emule.exe" =
[HKLM \ ~ \ Services \ sharedaccess \ Parameters \ firewallpo licy \ standardprofile \ GloballyOpenPorts \ List]
"3724: TCP" = 3724: TCP: Mećava Downloader: 3724
"12178: TCP" = 12178: TCP: BitComet 12178 TCP
"12178: UDP" = 12178: UDP: 12178 UDP BitComet
R1 aswSP; avast! Self Protection; c: \ windows \ system32 \ drivers \ aswSP.sys [2008-07-19 78416]
R2 aswFsBlk; aswFsBlk; c: \ Windows \ System32 \ Drivers \ aswF sBlk.sys [2008-07-19 20560]
R2 glediąta Manager Service; glediąta Manager Service; c: \ program files \ glediąta \ Common \ ViewpointService.exe [2007-01-04 24652]
R3 NVHDA; Servis za NVIDIA High Definition Audio Driver, c: \ windows \ system32 \ drivers \ nvhda32.sys [2008-05-04 38560]
.
Sadržaj je 'Scheduled Tasks' folder
2008/11/01 C: \ Windows \ Tasks \ AppleSoftwareUpdate.job
- C: \ Program Files \ Apple Software Update \ SoftwareUpdate.exe [2008-07-30 11:34]
.
************************************************** ************************
catchme 0.3.1367 W2K/XP/Vista - rootkit / potaja detector by Gmer zlonamjernih programa, http://www.gmer.net
Rootkit scan 2008-11-06 20:34:11
5/1/2600 Windows Service Pack 3 NTFS
skeniranja skrivenih procesa ...
skeniranja skrivenih autostart entries ...
skeniranja skrivenih datoteka ...
scan uspješno završena
skrivenih datoteka: 0
************************************************** ************************
.
------------------------ Other Running Processes ----------------------- --
.
C: \ Program Files \ Alwil Software \ Avast4 \ aswUpdSv.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashServ.exe
C: \ Program Files \ Common Files \ Apple \ Mobile Device Support \ bin \ AppleMobileDeviceService.exe
C: \ Program Files \ Bonjour \ mDNSResponder.exe
c: \ windows \ system32 \ nvsvc32.exe
c: \ windows \ system32 \ PSIService.exe
C: \ Program Files \ ASUS \ AASP \ 1.00.61 \ aaCenter.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashMaiSv.exe
C: \ Program Files \ Alwil Software \ Avast4 \ ashWebSv.exe
c: \ windows \ system32 \ rundll32.exe
C: \ Program Files \ iPod \ bin \ iPodService.exe
C: \ Program Files \ Common Files \ PCSuite \ Services \ ServiceLayer.exe
c: \ programa ~ 1 \ UOBIČAJENA ~ 1 \ Nokia \ MPAPI \ MPAPI3s.exe
.
************************************************** ************************
.
Completion time: 2008-11-06 20:36:06 - machine je ponovno podizanje sustava
ComboFix-u karanteni-files.txt 2008-11-07 01:36:02
ComboFix2.txt 2008-11-07 00:54:46
Pre-Run: 41668276224 bytes free
Post-Run: 41678303232 bytes free
418 --- EOF --- 2008-10-28 07:00:21

Hvala
Reply
Stranica 1 od 2 1 2

Register

Bookmarks

Slične teme
Nit Temu Započeo Forum Odgovori Zadnji Post
Sustav neaktivan Process manja od ili jednaka 99 Procesor sgonzalez90 Windows Operating Systems 4 6. travanj 2009 14:50
Sustav neprisutan proces - Windows Upravitelj zadataka pest79456 Windows Operating Systems 3 8. veljača 2009 09:20
Klik, beeping iexplore.exe i skrivenih procesa adhoc Virus, Spyware i sigurnost 5 7. listopad 2008 18:44
IEXPLORE.EXE sustav virus? HijackThis log, molimo pogledajte. samDd Virus, Spyware i sigurnost 4 29. Ruj 2008 17:13
Problemi s' popups iexplore i izvodi postupak 1carly1 Virus, Spyware i sigurnost 3 15. veljača 2008 10:36
Thread Tools



Arabic Bulgarian Chinese (Simplified) Chinese (Traditional) Croatian Czech Danish Dutch English Finnish French German Greek Hebrew Hungarian Italian Japanese Korean Latvian Lithuanian Norwegian Polish Portuguese Romanian Russian Serbian Slovak Spanish Swedish Thai Turkish Ukrainian

Copyright © 2006 - 2009 Computer soka.
Kontakt -- Privatnost -- Sitemap -- Vrh

Powered by vBulletin ® Copyright © 2000 - 2009 Jelsoft Enterprises Ltd SEO by vBSEO © 2009, Crawlability, Inc