Ne mogu da aktiwiram Windows Update niti da instaliram AV

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Dobio sam ovaj laptop sa pomenutim problemima. Pokusavao sam na sve nacine da otklonim pomenute probleme bez reinstalacije OS ali nije uspelo. Stalno izbacuje nove greske.
Malwarebytes je uklonio neke maliciozne fajlove ali problem je i dalje isti.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18904
Run by mix at 12:27:21 on 2012-07-10
Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1250.381.1033.18.894.298 [GMT 2:00]
.
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\TeamViewer3\TeamViewer_Host.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSD.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\WButton.exe
C:\Program Files\Launch Manager\WisLMSvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page = hxxp://www.google.com
uStart Page = hxxp://www.google.com/
uSearch Bar = hxxp://www.google.com/ie
uInternet Settings,ProxyOverride = 127.0.0.1
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
uRun: [StartCCC] c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [LaunchAp] c:\program files\launch manager\LaunchAp.exe
mRun: [HotkeyApp] c:\program files\launch manager\HotkeyApp.exe
mRun: [LMgrVolOSD] c:\program files\launch manager\OSD.exe
mRun: [LMgrOSD] c:\program files\launch manager\OSDCtrl.exe
mRun: [Wbutton] "c:\program files\launch manager\Wbutton.exe"
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://download.microsoft.com/download/E/5/6/E5611B10-0D6D-4117-8430-A67417AA88CD/LegitCheckControl.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
TCP: DhcpNameServer = 192.168.0.2 188.93.120.2 188.93.120.3
TCP: Interfaces\{09CF84D8-FB30-4BA3-9133-1EE7448ABA0A} : DhcpNameServer = 192.168.0.2 188.93.120.2 188.93.120.3
TCP: Interfaces\{527DEBCC-910F-4768-80CC-620BF2D0CBEE} : NameServer = 188.93.120.2,188.93.120.3,192.168.0.11
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
mASetup: ccc-core-static - msiexec /fums {019749A1-F9BC-476C-2614-58D9ED0A6F40} /qb
.
============= SERVICES / DRIVERS ===============
.
R2 TeamViewer;TeamViewer 3;c:\program files\teamviewer3\TeamViewer_Host.exe [2008-3-12 181544]
R3 WisLMSvc;WisLMSvc;c:\program files\launch manager\WisLMSvc.exe [2012-7-6 118784]
S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;c:\windows\system32\drivers\sis163u.sys [2007-2-27 218112]
.
=============== File Associations ===============
.
vbefile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
vbsfile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
jsefile\shell\open2\command=c:\windows\system32\CScript.exe "%1" %*
.
=============== Created Last 30 ================
.
2012-07-10 09:46:16 -------- d-----w- c:\program files\Windows Resource Kits
2012-07-10 08:20:26 47560 ----a-w- c:\windows\system32\SPReview.exe
2012-07-10 08:20:26 152576 ----a-w- c:\windows\system32\SPWizUI.dll
2012-07-10 06:55:56 -------- d-----w- c:\windows\system32\EventProviders
2012-07-09 13:29:25 2565432 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{87afefa8-7594-4667-a487-e835d2df7c58}\mpengine.dll
2012-07-09 10:21:28 -------- d-----w- c:\users\mix\appdata\roaming\GlarySoft
2012-07-09 10:21:27 -------- d-----w- c:\program files\Glary Utilities
2012-07-09 09:31:55 -------- d-----w- C:\AVGTemp
2012-07-09 07:55:43 -------- d-----w- c:\program files\AVG
2012-07-06 12:44:23 9867 ----a-w- c:\windows\system32\drivers\HOTKEY.sys
2012-07-06 12:44:23 -------- d-----w- c:\program files\Launch Manager
.
==================== Find3M ====================
.
.
============= FINISH: 12:28:23,65 ===============


mycity.rs/must-login.png

p.s. Gmer3 nisam mogao da napravim jer ga nije odradio tj. posle pokretanja, prozor je ostao prazan.

mycity.rs/must-login.png

mycity.rs/must-login.png

• 1Ovo se svidja korisniku: mcrule
  
  Registruj se da bi pohvalio/la poruku!

Pozdrav



Potrebno je da vidimo šta je to MBAM detektovao i uklonio. Uradi sljedeće:

Start -> Run -> %AppData%\Malwarebytes\Malwarebytes' Anti-Malware\Logs -> Enter



i prikači uz poruku sve njegove izvještaje koje pronađeš u tom folderu.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Kao prvo da se izvinem za ono "w" u reci "aktiwiram". Greska u pisanju koju kasnije nisam mogao da ispravim.

A evo i svih logova.
mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

U toku riješavanja slučaja, zamolio bih te da se pridržavaš sljedećeg:
Detaljno čitati moja uputstva ( ili uputstva kolega koji će me zamjenjivati) i raditi isključivo po njima;
Ne tražiti istovremeno pomoć na drugom mjestu;
Nemoj koristiti druge programe za uklanjanje malware-a, osim onih za koje budeš dobio uputstvo;
U toku intervencije ne koristiti USB memorijske uređaje, dok to ne budem zatražio;
Ukoliko ne odgovorim u roku od 48h, osvježi temu novim post-om;
Ukoliko se ne javiš u roku od 5 dana, zatvorićemo slučaj.
Za više informacija o pravilima Ambulante MyCity foruma: LINK





Preuzmi sUBs-ov ComboFix sa sljedeće adrese na Desktop:


Bleeping Computer
Klikni desnim tasterom na link i odaberi opciju Save Target As... (Save Link As..., Save Linked Content As... ili sličnu);
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati fajl, odaberi Desktop i klikni Save.



Kada preuzimanje programa bude završeno:
deaktiviraj zaštitni softver (uputstvo);
zatvori pokrenute programe;
dvoklikom pokreni program ComboFix;
u prozoru koji se otvori klikni "I Agree".
U toku rada, ComboFix će:provjeriti postoji li novija verzija programa:
klikni Yes ako bude ponuđeno preuzimanje iste.ako Recovery Console nije instalirana, ponuditi instalaciju:
obavezno prihvati klikom na Yes i isprati postupak.postaviti/dati određeni broj upita/obaveštenja:
prihvati klikom na Yes ili OK.po potrebi, restartovati Windows (više puta);
na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Iskopiraj izvještaj koji je ComboFix napravio u temu na forumu:
klikni desnim tasterom miša u prozor Notepad-a i izaberi Select All;
klikni desnim tasterom miša na obilježeni tekst i izaberi Copy;
klikni desnim tasterom miša u polje za pisanje poruke i izaberi Paste.

Napomena:Izvještaj će biti sačuvan pod nazivom ComboFix.txt na sistemskoj particiji (tipična lokacija: C:\ComboFix.txt);
Ukoliko nakon slanja poruke primjetiš da izvještaj nije kompletan, iskoristi opciju Prikači fajl za prilaganje fajla C:\ComboFix.txt uz poruku.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Evo i ComboFix izvestaja.

ComboFix 12-07-10.01 - mix 10.07.2012 14:25:29.1.2 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1250.381.1033.18.894.274 [GMT 2:00]
Running from: c:\users\mix\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\DFRDDE6.tmp
c:\windows\system32\drivers\9a95ba92f4f69065.sys . . . . Failed to delete
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_usnjsvc
-------\Legacy_9a95ba92f4f69065
-------\Service_9a95ba92f4f69065
.
.
((((((((((((((((((((((((( Files Created from 2012-06-10 to 2012-07-10 )))))))))))))))))))))))))))))))
.
.
2012-07-10 12:33 . 2012-07-10 12:37 -------- d-----w- c:\users\mix\AppData\Local\temp
2012-07-10 11:49 . 2012-07-10 11:50 34816 ----a-w- c:\windows\system32\drivers\rootrepeal.sys
2012-07-10 09:46 . 2012-07-10 09:46 -------- d-----w- c:\program files\Windows Resource Kits
2012-07-10 08:20 . 2012-07-10 07:47 47560 ----a-w- c:\windows\system32\SPReview.exe
2012-07-10 08:20 . 2012-07-10 07:47 152576 ----a-w- c:\windows\system32\SPWizUI.dll
2012-07-10 06:55 . 2012-07-10 06:55 -------- d-----w- c:\windows\system32\EventProviders
2012-07-09 13:29 . 2006-11-02 12:33 2565432 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{87AFEFA8-7594-4667-A487-E835D2DF7C58}\mpengine.dll
2012-07-09 10:21 . 2012-07-09 10:27 -------- d-----w- c:\users\mix\AppData\Roaming\GlarySoft
2012-07-09 10:21 . 2012-07-09 23:28 -------- d-----w- c:\program files\Glary Utilities
2012-07-09 09:31 . 2012-07-09 09:31 -------- d-----w- C:\AVGTemp
2012-07-09 07:55 . 2012-07-09 07:55 -------- d-----w- c:\program files\AVG
2012-07-06 12:44 . 2012-07-06 12:44 -------- d-----w- c:\program files\Launch Manager
2012-07-06 12:44 . 2003-04-28 09:27 9867 ----a-w- c:\windows\system32\drivers\HOTKEY.sys
2012-07-06 12:43 . 2012-07-06 12:43 -------- d-----w- c:\users\mix\AppData\Roaming\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-10 12:36 . 2012-03-09 07:59 44928 ----a-w- c:\windows\system32\drivers\9a95ba92f4f69065.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2006-12-29 4317184]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2005-07-25 32768]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2006-12-14 192512]
"LMgrVolOSD"="c:\program files\Launch Manager\OSD.exe" [2006-12-26 180224]
"LMgrOSD"="c:\program files\Launch Manager\OSDCtrl.exe" [2006-08-29 241664]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2006-11-09 86016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - CFCATCHME
*NewlyCreated* - WS2IFSL
*Deregistered* - CFcatchme
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-10 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2012-07-09 20:16]
.
2012-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-02 06:58]
.
2012-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-02 06:58]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = 127.0.0.1
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.2 188.93.120.2 188.93.120.3
TCP: Interfaces\{527DEBCC-910F-4768-80CC-620BF2D0CBEE}: NameServer = 188.93.120.2,188.93.120.3,192.168.0.11
.
.
------- File Associations -------
.
vbefile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
vbsfile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
jsefile\shell\open2\command=c:\windows\System32\CScript.exe "%1" %*
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
HKLM_ActiveSetup-ccc-core-static - msiexec
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net
Rootkit scan 2012-07-10 14:37
Windows 6.0.6000 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
c:\windows\system32\msiexec.exe
c:\program files\TeamViewer3\TeamViewer_Host.exe
c:\windows\system32\conime.exe
c:\windows\RtHDVCpl.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
c:\program files\Launch Manager\WisLMSvc.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Completion time: 2012-07-10 14:44:11 - machine was rebooted
ComboFix-quarantined-files.txt 2012-07-10 12:44
.
Pre-Run: 87.531.913.216 bytes free
Post-Run: 87.572.762.624 bytes free
.
- - End Of File - - A5E56D89496DD06643F2E2314FB1EA72

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Korak 1

Otvori Notepad i kopiraj sljedeći tekst:

sc stop rootrepeal >> log.txt 2>&1
sc delete rootrepeal >> log.txt 2>&1
del /F /Q "c:\windows\system32\drivers\rootrepeal.sys" >> log.txt 2>&1
rmdir /S /Q "C:\AVGTemp" >> log.txt 2>&1
rmdir /S /Q "c:\program files\AVG" >> log.txt 2>&1
notepad log.txt


Snimi ga na Desktop pod imenom shellscript.bat
Obrati pažnju na ekstenziju .bat

Pokreni shellscript.bat i kopiraj u poruku tekst koji će ti se otvoriti u Notepad-u. Ako se u Notepad-u ne pojavi nikakav tekst to znači da je sve prošlo kako treba i potrebno je samo da to napomeneš u poruci.

Ukoliko ti se Notepad ne otvori, otvori ručno fajl log.txt i postavi njegov sadržaj na forum.



Korak 2

Otvoriti Notepad i iskopirati sljedeći tekst:

File::
c:\windows\system32\drivers\9a95ba92f4f69065.sys

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000000

RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5


Snimiti na Desktop fajl iz Notepada kao "CFScript"




Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici.
Postaviti u sljedećoj poruci log koji bude bio napravljen na kraju čišćenja/skeniranja.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Posle prvog koraka sam dobio sledeci log:


[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

c:\windows\system32\drivers\rootrepeal.sys
Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~1\banner - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~1\upgrade - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~2\upgrade - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~2 - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~3\banner - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~3 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~1\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~2\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~2 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~3\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~3 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~4\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~4 - Access is denied.
c:\program files\AVG\AVG2012\awacs\SPEEDT~1\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\SPEEDT~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\SPEEDT~2\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\SPEEDT~2 - Access is denied.
c:\program files\AVG\AVG2012\awacs - Access is denied.
c:\program files\AVG\AVG2012 - Access is denied.
Access is denied.


Da li da radim drugi korak ili da sacekam dalja uputstva?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ponovo uradi prvi korak, ali ovaj put kad napraviš shellscript.bat nemoj ga pokretati dvoklikom već idi desnim klikom na njega i izaberi Run as Administrator.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Evo novog log-a:

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

The system cannot find the file specified.
[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

Could Not Find c:\windows\system32\drivers\rootrepeal.sys
The system cannot find the file specified.
The system cannot find the file specified.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

U redu. Pređi na drugi korak.