MyCity » Ambulanta -> Arhiva Ambulante » Molim za pomoc - komp blokira

Molim za pomoc - komp blokira

Napisano na dan: 16.3.2009

Molim za pomoc - komp blokira
Sledeća strana Pagination

Idi na vrh

Poslao: 16 Mar 2009 14:36
Idi na vrh
offline
  • Pridružio: 19 Jan 2008
  • Poruke: 42

Molim da pogledate log fajl hijackthese. Komp mi stalno blokira i moram da ga resetujem. Molim nekog ko se razume da obrati paznju na kraj:

O23 - Service: WPS Scanner Service (WPSScannerSvc) - Unknown owner - D:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe (file missing)


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:17:05, on 16.3.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Program Files\Eset\nod32krn.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\WFXSVC.EXE
D:\Program Files\Symantec\WinFax\WFXMOD32.EXE
D:\WINDOWS\system32\wscntfy.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Skype\Phone\Skype.exe
D:\Documents and Settings\kole\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
D:\Program Files\Skype\Plugin Manager\skypePM.exe
D:\Documents and Settings\kole\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\kole\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\kole\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\kole\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\kole\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\kole\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
D:\Documents and Settings\kole\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
D:\Program Files\Opera 9\Opera.exe
D:\Documents and Settings\kole\Desktop\HiJackThis.exe

O4 - HKCU\..\Run: [HijackThis startup scan] D:\Documents and Settings\kole\Desktop\HijackThis.exe /startupscan
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - D:\Program Files\Eset\nod32krn.exe
O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - D:\WINDOWS\system32\WFXSVC.EXE
O23 - Service: WPS Scanner Service (WPSScannerSvc) - Unknown owner - D:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe (file missing)

--
End of file - 2317 bytes

Dopuna: 16 Mar 2009 14:36

evo jos log file od haxFix
[Link mogu videti samo ulogovani korisnici]



Poslao: 16 Mar 2009 15:23
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

A, ja bih tebe molio da obratis paznju, da radis kako uputstvo kaze.

Nisi preimenovao HiJack This.

Ovako ne valja:


Klikni desno dugme misa na ikonicu programa i odaberi opciju Rename:


Zadaj mu neko bezvezno ime, recimo GH5.EXE ili TR3.EXE, ili bilo sta drugo samo da se ne spominje HijackThis:



Preimenuj, pa postavi novi log.



Poslao: 16 Mar 2009 21:00
Idi na vrh
offline
  • Pridružio: 19 Jan 2008
  • Poruke: 42

Мислим да је сад све ок. Молим погледај
[Link mogu videti samo ulogovani korisnici]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:55:39, on 16.3.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\system32\ctfmon.exe
D:\WINDOWS\system32\spoolsv.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Program Files\Eset\nod32krn.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\system32\WFXSVC.EXE
D:\Program Files\Symantec\WinFax\WFXMOD32.EXE
D:\WINDOWS\system32\wscntfy.exe
D:\Program Files\Skype\Phone\Skype.exe
D:\WINDOWS\system32\wuauclt.exe
D:\Program Files\Skype\Plugin Manager\skypePM.exe
D:\WINDOWS\System32\svchost.exe
D:\Program Files\Opera 9\Opera.exe
D:\Documents and Settings\kole\Desktop\rr.exe.exe

O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [HijackThis startup scan] D:\Documents and Settings\kole\Desktop\HijackThis.exe /startupscan
O4 - HKCU\..\Run: [ctfmon.exe] D:\WINDOWS\system32\ctfmon.exe
O23 - Service: Google Software Updater (gusvc) - Google - D:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - D:\Program Files\Eset\nod32krn.exe
O23 - Service: WinFax PRO (wfxsvc) - Symantec Corporation - D:\WINDOWS\system32\WFXSVC.EXE
O23 - Service: WPS Scanner Service (WPSScannerSvc) - Unknown owner - D:\Program Files\Skyhook Wireless\Wi-Fi Service\WPSScannerSvc.exe (file missing)

--
End of file - 1704 bytes

Poslao: 16 Mar 2009 21:08
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Iskljuci privremeno Nod.

Skini ComboFix sa jedne od sledecih adresa na Desktop:
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.

MyCity » Ambulanta -> Arhiva Ambulante » Molim za pomoc - komp blokira

Ko je trenutno na forumu
 

Ukupno su 1248 korisnika na forumu :: 106 registrovanih, 13 sakrivenih i 1129 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 8u47, A.R.Chafee.Jr., aca018, ajo baba, amaterSRB, anbeast, Andrija 1993, Ben Roj, bolimejoli, Bombona, Boris BM, Boris90, bozzo27, bpvl, Brabant, celt, Chainsaw, cifra, CORDEIRO, crnogorac, Daba75, Dannyboy, darko_c, DeerHunter, Devil city 1989, djboj, dok80, Dr Lobotom, DrMrPr, dskrlec33, Duk011, dule10savic, feanor, Fog of War, Gagi193, Giskard, Igritelj, Jakonjveliki, Jan, Joja, Jomini, jovanam99, Još malo pa deda, Kajzer Soze, Kajzer_Soze, kaput21, kenny74, Kepinger, kibihrchak, KimiMR, komsija1, kondenzator, Kruger, Leonov, LjutaGuja, luka35, max power, Mig 29, MILJEVINAC, milos.cbr, Milun24, mino bosanac, mist-mist, MK10, Moldovan, Morava71, MR Z, narandzasti, Nemanja.M, oblivion, Papadubi, peradetlić, PlayerOne, posmatrac300, Raso75, royst33, Seeker, shlauf, Siti2, sova72, Srb1346, ssekir75, stegonosa, stingD, Stoilkovic, tecataki, tomigun, Tribal, TRZH92, ulogovan, Underwood, varda, vathra, Velizar Laro, VJ, Vlado82, Vucko11, vuksa72, wizzardone, xanadu, Zastava, ZetaMan, zil10, zlaya011, zombicar153, zoran77