MyCity » Ambulanta -> Arhiva Ambulante » Ne mogu da aktiwiram Windows Update niti da instaliram AV

Ne mogu da aktiwiram Windows Update niti da instaliram AV

Napisano na dan: 10.7.2012
1

Ne mogu da aktiwiram Windows Update niti da instaliram AV
Sledeća strana Pagination

Idi na vrh

Poslao: 10 Jul 2012 13:55
Idi na vrh
offline
  • Pridružio: 23 Jan 2008
  • Poruke: 65
  • Gde živiš: Beograd

Dobio sam ovaj laptop sa pomenutim problemima. Pokusavao sam na sve nacine da otklonim pomenute probleme bez reinstalacije OS ali nije uspelo. Stalno izbacuje nove greske.
Malwarebytes je uklonio neke maliciozne fajlove ali problem je i dalje isti.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18904
Run by mix at 12:27:21 on 2012-07-10
Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1250.381.1033.18.894.298 [GMT 2:00]
.
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\Ati2evxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\Ati2evxx.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\taskeng.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k imgsvc
C:\Program Files\TeamViewer3\TeamViewer_Host.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSD.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\WButton.exe
C:\Program Files\Launch Manager\WisLMSvc.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Program Files\Google\Chrome\Application\chrome.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\DllHost.exe
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe
.
============== Pseudo HJT Report ===============
.
uSearch Page = [Link mogu videti samo ulogovani korisnici]
uStart Page = [Link mogu videti samo ulogovani korisnici]
uSearch Bar = [Link mogu videti samo ulogovani korisnici]
uInternet Settings,ProxyOverride = 127.0.0.1
uSearchURL,(Default) = [Link mogu videti samo ulogovani korisnici]
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
uRun: [StartCCC] c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [NeroFilterCheck] c:\program files\common files\ahead\lib\NeroCheck.exe
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 8.0\reader\Reader_sl.exe"
mRun: [LaunchAp] c:\program files\launch manager\LaunchAp.exe
mRun: [HotkeyApp] c:\program files\launch manager\HotkeyApp.exe
mRun: [LMgrVolOSD] c:\program files\launch manager\OSD.exe
mRun: [LMgrOSD] c:\program files\launch manager\OSDCtrl.exe
mRun: [Wbutton] "c:\program files\launch manager\Wbutton.exe"
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - [Link mogu videti samo ulogovani korisnici]
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - [Link mogu videti samo ulogovani korisnici]
TCP: DhcpNameServer = 192.168.0.2 188.93.120.2 188.93.120.3
TCP: Interfaces\{09CF84D8-FB30-4BA3-9133-1EE7448ABA0A} : DhcpNameServer = 192.168.0.2 188.93.120.2 188.93.120.3
TCP: Interfaces\{527DEBCC-910F-4768-80CC-620BF2D0CBEE} : NameServer = 188.93.120.2,188.93.120.3,192.168.0.11
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
mASetup: ccc-core-static - msiexec /fums {019749A1-F9BC-476C-2614-58D9ED0A6F40} /qb
.
============= SERVICES / DRIVERS ===============
.
R2 TeamViewer;TeamViewer 3;c:\program files\teamviewer3\TeamViewer_Host.exe [2008-3-12 181544]
R3 WisLMSvc;WisLMSvc;c:\program files\launch manager\WisLMSvc.exe [2012-7-6 118784]
S3 SIS163u;SiS163 USB Wireless LAN Adapter Driver;c:\windows\system32\drivers\sis163u.sys [2007-2-27 218112]
.
=============== File Associations ===============
.
vbefile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
vbsfile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
jsefile\shell\open2\command=c:\windows\system32\CScript.exe "%1" %*
.
=============== Created Last 30 ================
.
2012-07-10 09:46:16 -------- d-----w- c:\program files\Windows Resource Kits
2012-07-10 08:20:26 47560 ----a-w- c:\windows\system32\SPReview.exe
2012-07-10 08:20:26 152576 ----a-w- c:\windows\system32\SPWizUI.dll
2012-07-10 06:55:56 -------- d-----w- c:\windows\system32\EventProviders
2012-07-09 13:29:25 2565432 ----a-w- c:\programdata\microsoft\windows defender\definition updates\{87afefa8-7594-4667-a487-e835d2df7c58}\mpengine.dll
2012-07-09 10:21:28 -------- d-----w- c:\users\mix\appdata\roaming\GlarySoft
2012-07-09 10:21:27 -------- d-----w- c:\program files\Glary Utilities
2012-07-09 09:31:55 -------- d-----w- C:\AVGTemp
2012-07-09 07:55:43 -------- d-----w- c:\program files\AVG
2012-07-06 12:44:23 9867 ----a-w- c:\windows\system32\drivers\HOTKEY.sys
2012-07-06 12:44:23 -------- d-----w- c:\program files\Launch Manager
.
==================== Find3M ====================
.
.
============= FINISH: 12:28:23,65 ===============


[Link mogu videti samo ulogovani korisnici]

p.s. Gmer3 nisam mogao da napravim jer ga nije odradio tj. posle pokretanja, prozor je ostao prazan.

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]



Poslao: 10 Jul 2012 14:09
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Pozdrav

Arrow

Potrebno je da vidimo šta je to MBAM detektovao i uklonio. Uradi sljedeće:

Start -> Run -> %AppData%\Malwarebytes\Malwarebytes' Anti-Malware\Logs -> Enter



i prikači uz poruku sve njegove izvještaje koje pronađeš u tom folderu.



Poslao: 10 Jul 2012 14:13
Idi na vrh
offline
  • Pridružio: 23 Jan 2008
  • Poruke: 65
  • Gde živiš: Beograd

Kao prvo da se izvinem za ono "w" u reci "aktiwiram". Greska u pisanju koju kasnije nisam mogao da ispravim.

A evo i svih logova.
[Link mogu videti samo ulogovani korisnici]

Poslao: 10 Jul 2012 14:19
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

U toku riješavanja slučaja, zamolio bih te da se pridržavaš sljedećeg:
Detaljno čitati moja uputstva ( ili uputstva kolega koji će me zamjenjivati) i raditi isključivo po njima;
Ne tražiti istovremeno pomoć na drugom mjestu;
Nemoj koristiti druge programe za uklanjanje malware-a, osim onih za koje budeš dobio uputstvo;
U toku intervencije ne koristiti USB memorijske uređaje, dok to ne budem zatražio;
Ukoliko ne odgovorim u roku od 48h, osvježi temu novim post-om;
Ukoliko se ne javiš u roku od 5 dana, zatvorićemo slučaj.
Za više informacija o pravilima Ambulante MyCity foruma: LINK



Arrow

Preuzmi sUBs-ov ComboFix sa sljedeće adrese na Desktop:


Bleeping Computer
Klikni desnim tasterom na link i odaberi opciju Save Target As... (Save Link As..., Save Linked Content As... ili sličnu);
Kada se otvori dijalog za izbor lokacije na kojoj treba sačuvati fajl, odaberi Desktop i klikni Save.



Kada preuzimanje programa bude završeno:
deaktiviraj zaštitni softver (uputstvo);
zatvori pokrenute programe;
dvoklikom pokreni program ComboFix;
u prozoru koji se otvori klikni "I Agree".
U toku rada, ComboFix će:provjeriti postoji li novija verzija programa:
klikni Yes ako bude ponuđeno preuzimanje iste.ako Recovery Console nije instalirana, ponuditi instalaciju:
obavezno prihvati klikom na Yes i isprati postupak.postaviti/dati određeni broj upita/obaveštenja:
prihvati klikom na Yes ili OK.po potrebi, restartovati Windows (više puta);
na kraju rada, otvoriti Notepad sa izveštajem o skeniranju.

Iskopiraj izvještaj koji je ComboFix napravio u temu na forumu:
klikni desnim tasterom miša u prozor Notepad-a i izaberi Select All;
klikni desnim tasterom miša na obilježeni tekst i izaberi Copy;
klikni desnim tasterom miša u polje za pisanje poruke i izaberi Paste.

Napomena:Izvještaj će biti sačuvan pod nazivom ComboFix.txt na sistemskoj particiji (tipična lokacija: C:\ComboFix.txt);
Ukoliko nakon slanja poruke primjetiš da izvještaj nije kompletan, iskoristi opciju Prikači fajl za prilaganje fajla C:\ComboFix.txt uz poruku.

Poslao: 10 Jul 2012 14:51
Idi na vrh
offline
  • Pridružio: 23 Jan 2008
  • Poruke: 65
  • Gde živiš: Beograd

Evo i ComboFix izvestaja.

ComboFix 12-07-10.01 - mix 10.07.2012 14:25:29.1.2 - x86
Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1250.381.1033.18.894.274 [GMT 2:00]
Running from: c:\users\mix\Desktop\ComboFix.exe
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
C:\DFRDDE6.tmp
c:\windows\system32\drivers\9a95ba92f4f69065.sys . . . . Failed to delete
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
-------\Service_usnjsvc
-------\Legacy_9a95ba92f4f69065
-------\Service_9a95ba92f4f69065
.
.
((((((((((((((((((((((((( Files Created from 2012-06-10 to 2012-07-10 )))))))))))))))))))))))))))))))
.
.
2012-07-10 12:33 . 2012-07-10 12:37 -------- d-----w- c:\users\mix\AppData\Local\temp
2012-07-10 11:49 . 2012-07-10 11:50 34816 ----a-w- c:\windows\system32\drivers\rootrepeal.sys
2012-07-10 09:46 . 2012-07-10 09:46 -------- d-----w- c:\program files\Windows Resource Kits
2012-07-10 08:20 . 2012-07-10 07:47 47560 ----a-w- c:\windows\system32\SPReview.exe
2012-07-10 08:20 . 2012-07-10 07:47 152576 ----a-w- c:\windows\system32\SPWizUI.dll
2012-07-10 06:55 . 2012-07-10 06:55 -------- d-----w- c:\windows\system32\EventProviders
2012-07-09 13:29 . 2006-11-02 12:33 2565432 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{87AFEFA8-7594-4667-A487-E835D2DF7C58}\mpengine.dll
2012-07-09 10:21 . 2012-07-09 10:27 -------- d-----w- c:\users\mix\AppData\Roaming\GlarySoft
2012-07-09 10:21 . 2012-07-09 23:28 -------- d-----w- c:\program files\Glary Utilities
2012-07-09 09:31 . 2012-07-09 09:31 -------- d-----w- C:\AVGTemp
2012-07-09 07:55 . 2012-07-09 07:55 -------- d-----w- c:\program files\AVG
2012-07-06 12:44 . 2012-07-06 12:44 -------- d-----w- c:\program files\Launch Manager
2012-07-06 12:44 . 2003-04-28 09:27 9867 ----a-w- c:\windows\system32\drivers\HOTKEY.sys
2012-07-06 12:43 . 2012-07-06 12:43 -------- d-----w- c:\users\mix\AppData\Roaming\InstallShield
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2012-07-10 12:36 . 2012-03-09 07:59 44928 ----a-w- c:\windows\system32\drivers\9a95ba92f4f69065.sys
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"StartCCC"="c:\program files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RtHDVCpl"="RtHDVCpl.exe" [2006-12-29 4317184]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2006-01-12 155648]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-10-14 39792]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2005-07-25 32768]
"HotkeyApp"="c:\program files\Launch Manager\HotkeyApp.exe" [2006-12-14 192512]
"LMgrVolOSD"="c:\program files\Launch Manager\OSD.exe" [2006-12-26 180224]
"LMgrOSD"="c:\program files\Launch Manager\OSDCtrl.exe" [2006-08-29 241664]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2006-11-09 86016]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
.
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - CFCATCHME
*NewlyCreated* - WS2IFSL
*Deregistered* - CFcatchme
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc
.
Contents of the 'Scheduled Tasks' folder
.
2012-07-10 c:\windows\Tasks\GlaryInitialize.job
- c:\program files\Glary Utilities\initialize.exe [2012-07-09 20:16]
.
2012-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-02 06:58]
.
2012-07-10 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-07-02 06:58]
.
.
------- Supplementary Scan -------
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
uInternet Settings,ProxyOverride = 127.0.0.1
uSearchURL,(Default) = [Link mogu videti samo ulogovani korisnici]
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: DhcpNameServer = 192.168.0.2 188.93.120.2 188.93.120.3
TCP: Interfaces\{527DEBCC-910F-4768-80CC-620BF2D0CBEE}: NameServer = 188.93.120.2,188.93.120.3,192.168.0.11
.
.
------- File Associations -------
.
vbefile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
vbsfile\shell\open2\command="%SystemRoot%\System32\CScript.exe" "%1" %*
jsefile\shell\open2\command=c:\windows\System32\CScript.exe "%1" %*
.
- - - - ORPHANS REMOVED - - - -
.
WebBrowser-{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - (no file)
HKLM_ActiveSetup-ccc-core-static - msiexec
.
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici]
Rootkit scan 2012-07-10 14:37
Windows 6.0.6000 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\Ati2evxx.exe
c:\program files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
c:\windows\system32\msiexec.exe
c:\program files\TeamViewer3\TeamViewer_Host.exe
c:\windows\system32\conime.exe
c:\windows\RtHDVCpl.exe
c:\program files\ATI Technologies\ATI.ACE\Core-Static\MOM.EXE
c:\program files\Launch Manager\WisLMSvc.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\Windows Media Player\wmpnetwk.exe
.
**************************************************************************
.
Completion time: 2012-07-10 14:44:11 - machine was rebooted
ComboFix-quarantined-files.txt 2012-07-10 12:44
.
Pre-Run: 87.531.913.216 bytes free
Post-Run: 87.572.762.624 bytes free
.
- - End Of File - - A5E56D89496DD06643F2E2314FB1EA72

Poslao: 10 Jul 2012 15:40
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Arrow Korak 1

Otvori Notepad i kopiraj sljedeći tekst:

sc stop rootrepeal >> log.txt 2>&1
sc delete rootrepeal >> log.txt 2>&1
del /F /Q "c:\windows\system32\drivers\rootrepeal.sys" >> log.txt 2>&1
rmdir /S /Q "C:\AVGTemp" >> log.txt 2>&1
rmdir /S /Q "c:\program files\AVG" >> log.txt 2>&1
notepad log.txt


Snimi ga na Desktop pod imenom shellscript.bat
Obrati pažnju na ekstenziju .bat

Pokreni shellscript.bat i kopiraj u poruku tekst koji će ti se otvoriti u Notepad-u. Ako se u Notepad-u ne pojavi nikakav tekst to znači da je sve prošlo kako treba i potrebno je samo da to napomeneš u poruci.

Ukoliko ti se Notepad ne otvori, otvori ručno fajl log.txt i postavi njegov sadržaj na forum.



Arrow Korak 2

Otvoriti Notepad i iskopirati sljedeći tekst:

File::
c:\windows\system32\drivers\9a95ba92f4f69065.sys

Registry::
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000000
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000000

RegLock::
[HKEY_LOCAL_MACHINE\system\ControlSet001\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5


Snimiti na Desktop fajl iz Notepada kao "CFScript"




Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici.
Postaviti u sljedećoj poruci log koji bude bio napravljen na kraju čišćenja/skeniranja.

Poslao: 10 Jul 2012 15:49
Idi na vrh
offline
  • Pridružio: 23 Jan 2008
  • Poruke: 65
  • Gde živiš: Beograd

Posle prvog koraka sam dobio sledeci log:


[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

c:\windows\system32\drivers\rootrepeal.sys
Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~1\banner - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~1\upgrade - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~2\upgrade - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~2 - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~3\banner - Access is denied.
c:\program files\AVG\AVG2012\awacs\INCLIE~3 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~1\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~2\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~2 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~3\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~3 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~4\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\MOBILA~4 - Access is denied.
c:\program files\AVG\AVG2012\awacs\SPEEDT~1\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\SPEEDT~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\SPEEDT~2\COMPON~1 - Access is denied.
c:\program files\AVG\AVG2012\awacs\SPEEDT~2 - Access is denied.
c:\program files\AVG\AVG2012\awacs - Access is denied.
c:\program files\AVG\AVG2012 - Access is denied.
Access is denied.


Da li da radim drugi korak ili da sacekam dalja uputstva?

Poslao: 10 Jul 2012 15:53
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Ponovo uradi prvi korak, ali ovaj put kad napraviš shellscript.bat nemoj ga pokretati dvoklikom već idi desnim klikom na njega i izaberi Run as Administrator.

Poslao: 10 Jul 2012 15:55
Idi na vrh
offline
  • Pridružio: 23 Jan 2008
  • Poruke: 65
  • Gde živiš: Beograd

Evo novog log-a:

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

The system cannot find the file specified.
[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

[SC] OpenService FAILED 1060:

The specified service does not exist as an installed service.

Could Not Find c:\windows\system32\drivers\rootrepeal.sys
The system cannot find the file specified.
The system cannot find the file specified.

Poslao: 10 Jul 2012 15:59
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

U redu. Pređi na drugi korak.

MyCity » Ambulanta -> Arhiva Ambulante » Ne mogu da aktiwiram Windows Update niti da instaliram AV

Ko je trenutno na forumu
 

Ukupno su 779 korisnika na forumu :: 110 registrovanih, 10 sakrivenih i 659 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: Adaminho1985, Ahilius, Alen-Delon-u-boji, ALEXV, Andy, ast13, Bahuss, Bobrock1, bojanM84, Boris.A, boromir, Boroš, borya90, cenejac111, chichabg, Cicumile, cifra, CikaKURE, Citalac, Coabelgrade, cvrle312, darionis, DavidA, dekiz, djboj, djonsule, DJUNTA, DonRumataEstorski, Dusko_Dugousko, Feller, flash12, Georgius, goran.vvv, goxin, GrammaticalAnalysis, Hans Gajger, Hemi, HrcAk47, Hyde, ILGromovnik, istina, Ivica1102, Jecmendo, kaput21, Kazablankasrb, king011, kirucar, Lieutenant, Manjane, markoskjk, marsi, max power, mercedesamg, mgolub, mikki jons, milos1231, Milun24, mist-mist, mrgud2025, nazgul75, neko_drugi, neutrino, Nikola333, nnovakis, ObelixSRB, OtacMakarije, Otto Grunf, panonski mornar, Panter, pein, Petjan, Pewac21, Phaeton, PitterBg, Plavi Jadran, proljece, PuškeiPlavuše, raf87, rodoljub, royst33, Salence74, samocitam, saputnik plavetnila, sasics, Sass Drake, Semberija, Sharpshooter, Sir Budimir, Smiljkovich, Solunac na steroidima, Srki98, Stod, strelac07, tachinni, TheBeastOfMG, tm, travisrise, TRAVUNIJA, Tribal, ulogovan, uruk, vaci, VJ, Vl veliki, VOŽD, VPV, vuksa72, zemljanin, Zgembo78, Zukov