Vesti

Jedi.Clone · Turista

Otvorih temu juce jer imam dosta procesa koji mi usporavaju racunar.

http://www.mycity.rs/Windows/Previse-procesa-2.html

Oni mi rekose da se imam Malware i da se javim ovde, pa evo:

Sta je od ovoga Malware i sta da radim?

diarno · Anti Malware Fighter Rank 1

Ehm.. obrati paznju na link sa uzvicnicima

http://www.mycity.rs/Windows/Previse-procesa-2.html#994746

Jedi.Clone · Turista

----------- Napisano: 05 Jan 2010 23:00 ---------

* Racunar je usporio i rekose mi da imam Malware

* Meni je stalno tako, jedino mi je dobro mozda 2-3 dana posle obaranja sistema

* Koristim avast i comodo firewall

* Nisam pokusao resiti jer sam pre 5 minuta saznao da imam Malware

* Telekom ADSL 1Mbps

http://www.mycity.rs/Uploads/152873_1635494328_Attach.txt

http://www.mycity.rs/Uploads/152873_1692631026_Gmer1.log

http://www.mycity.rs/Uploads/152873_633882503_Gmer2.log

http://www.mycity.rs/Uploads/152873_1653641499_Gmer3.txt

----------- Dopuna: 05 Jan 2010 23:01 ---------

zaboravih da kazem da mi internet konekcija puca na svakih 2 minuta od kad sam uzeo adsl pre nekih godinu i po

diarno · Anti Malware Fighter Rank 1

Treba mi DDS.log fajl

Jedi.Clone · Turista

http://www.mycity.rs/Uploads/152873_576369749_DDS.txt

diarno · Anti Malware Fighter Rank 1

Uploaduj mi sledeci fajl

c:\windows\system32\Meebey.SmartIrc4net.dll

Preko sledece forme :

http://www.mycity.rs/ambulanta-upload.php

Jedi.Clone · Turista

upload-ovao sam

diarno · Anti Malware Fighter Rank 1

Preuzmi The Avenger na Desktop.

Raspakuj arhivu u neki folder
Dvoklikom pokreni avenger.exe

Iskopiraj tekst koji se nalazi unutar Kod polja u (beli) prozor programa:

Kod:

Files to delete:
c:\windows\system32\Meebey.SmartIrc4net.dll
c:\windows\system32\shell32.exe
c:\windows\init.exe
c:\windows\dll.vbs
c:\windows\system32\lsasc.exe

Registry values to delete:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run | CTXFIP

Klikni Execute, a zatim Yes u sledeća dva prozora koji će se otvoriti
Kompjuter će se restartovati (u određenim slučajevima: dva puta) i započeti će proces čišćenja/skeniranja
Kada proces bude završen, logfile C:\avenger.txt će se otvoriti u Notepad-u

Iskopiraj sadržaj dobijenog loga u temu na forumu.

Jedi.Clone · Turista

evo
Logfile of The Avenger Version 2.0, (c) by Swandog46
http://swandog46.geekstogo.com

Platform: Windows XP

*******************

Script file opened successfully.
Script file read successfully.

Backups directory opened successfully at C:\Avenger

*******************

Beginning to process script file:

Rootkit scan active.
No rootkits found!

File "c:\windows\system32\Meebey.SmartIrc4net.dll" deleted successfully.
File "c:\windows\system32\shell32.exe" deleted successfully.
File "c:\windows\init.exe" deleted successfully.
File "c:\windows\dll.vbs" deleted successfully.
File "c:\windows\system32\lsasc.exe" deleted successfully.
Registry value "HKLM\Software\Microsoft\Windows\CurrentVersion\Run|CTXFIP" deleted successfully.

Completed script processing.

*******************

Finished! Terminate.

E, hvala ti puno!!!

diarno · Anti Malware Fighter Rank 1

Pretpostavljam da je sada stanje racunara poboljsano Smile

Jedi.Clone · Turista

i tek kako. hvala jos jednom Very Happy

diarno · Anti Malware Fighter Rank 1

Drago mi je:)

E sad bih ja tebe zamolio za jednu malu uslugu.

Elem, ako ti nije problem da zipujes/rarujes sledeci folder :

C:\Avenger

i uploadujes preko sledece forme :

http://www.mycity.co.yu/ambulanta-upload.php

Jedi.Clone · Turista

uplodovano

diarno · Anti Malware Fighter Rank 1

Hvala.. To bi bilo to..Mozes obrisati koriscene programe.

Pozdrav

Vesti

Malware problem