MyCity » Ambulanta -> Arhiva Ambulante » Ne mogu da pristupim nekim sajtovima

Ne mogu da pristupim nekim sajtovima

Napisano na dan: 9.3.2009

Ne mogu da pristupim nekim sajtovima
Sledeća strana Pagination

Idi na vrh

Poslao: 09 Mar 2009 21:11
Idi na vrh
offline
  • Pridružio: 07 Sep 2008
  • Poruke: 49

Preusmerili su me ovde...


Dobila sam nov komp, i sad nece da pristupi nekim sajtovima, prvo sam milila da je samo microsoft.com u pitanju medjutim nece da pristupi avg-ovom, niti nodovom i jos nekim koji su nebitni, al avg mi je bitan da bih updejtovala antivirus. A posto nece da dozvoli pristup microsoftu nece da mi instalira msn (kad pokusam kaze mi da nisam konektovana na net...)probala sam ono podesavanje MTU - i to nije uspelo...

Poreverila sam firewall nista ne blokira.

Pomagajte!

Irena

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:03:48 PM, on 3/9/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\LClock\LClock.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgfws8.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\oodag.exe
C:\PROGRA~1\AVG\AVG8\avgam.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgnsx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Skype\Plugin Manager\skypePM.exe
C:\Documents and Settings\Administrator\Desktop\New Folder\tr3.exe.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~1\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [LClock] C:\Program Files\LClock\LClock.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - Startup: OneNote 2007 Screen Clipper and Launcher.lnk = C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
O8 - Extra context menu item: &Google Search - [Link mogu videti samo ulogovani korisnici]\Program Files\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - [Link mogu videti samo ulogovani korisnici]\Program Files\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - [Link mogu videti samo ulogovani korisnici]\Program Files\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - [Link mogu videti samo ulogovani korisnici]\Program Files\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - [Link mogu videti samo ulogovani korisnici]\Program Files\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - [Link mogu videti samo ulogovani korisnici]\Program Files\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~1\Office12\GR99D3~1.DLL
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: wbsys.dll,avgrsstx.dll
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: AVG8 Firewall (avgfws8-) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgfws8.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: O&O Defrag - O&O Software GmbH - C:\WINDOWS\system32\oodag.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe

--
End of file - 5626 bytes



Poslao: 09 Mar 2009 22:34
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Zdravo,

* Klikni desnim tasterom miša na AVG ikonicu ( ) u donjem, desnom uglu ekrana.
* Kada se pokrene AVG Control Center, dvoklikni na AVG Resident Shield komponentu.
* U prozoru koji se otvori, deštikliraj opciju Turn on AVG Resident Shield i klikni OK.

Napomena: Ne zaboravi da uključiš ovu opciju po završetku čišćenja.

---------------------

Skini ComboFix sa jedne od sledecih adresa na Desktop:
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.



Poslao: 09 Mar 2009 22:41
Idi na vrh
offline
  • Pridružio: 07 Sep 2008
  • Poruke: 49

Evo ga...

ComboFix 09-03-06.02 - Administrator 2009-03-09 22:34:10.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.44.1033.18.3327.2543 [GMT 1:00]
Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe
AV: AVG Internet Security *On-access scanning disabled* (Outdated)
FW: AVG Firewall *disabled*
* Created a new restore point
.

((((((((((((((((((((((((( Files Created from 2009-02-09 to 2009-03-09 )))))))))))))))))))))))))))))))
.

2009-03-09 20:10 . 2009-03-09 20:10 268 --ah----- C:\sqmdata02.sqm
2009-03-09 20:10 . 2009-03-09 20:10 244 --ah----- C:\sqmnoopt02.sqm
2009-03-09 00:46 . 2009-03-09 00:46 268 --ah----- C:\sqmdata01.sqm
2009-03-09 00:46 . 2009-03-09 00:46 244 --ah----- C:\sqmnoopt01.sqm
2009-03-08 20:07 . 2009-03-08 20:07 <DIR> d-------- c:\windows\system32\drivers\Avg
2009-03-08 20:07 . 2009-03-08 20:07 96,520 --a------ c:\windows\system32\drivers\avgldx86.sys
2009-03-08 20:07 . 2009-03-08 20:07 74,376 --a------ c:\windows\system32\drivers\avgtdix.sys
2009-03-08 20:07 . 2009-03-08 20:07 12,424 --a------ c:\windows\system32\drivers\avgrkx86.sys
2009-03-08 20:07 . 2009-03-08 20:07 10,520 --a------ c:\windows\system32\avgrsstx.dll
2009-03-08 20:03 . 2009-03-08 20:03 <DIR> d-------- c:\program files\AVG
2009-03-08 20:03 . 2009-03-08 20:03 <DIR> d-------- c:\documents and settings\All Users\Application Data\avg8
2009-03-08 20:03 . 2009-03-08 20:03 45,568 --a------ c:\windows\system32\avgfwdx.dll
2009-03-08 20:03 . 2009-03-08 20:03 22,528 --a------ c:\windows\system32\drivers\avgfwdx.sys
2009-03-07 15:32 . 2009-03-07 15:32 <DIR> d-------- c:\documents and settings\All Users\Application Data\TEMP
2009-03-07 15:31 . 2009-03-07 15:31 <DIR> d-------- c:\documents and settings\All Users\Application Data\Sony
2009-03-07 15:20 . 2009-03-07 15:20 <DIR> d-------- c:\windows\system32\XPSViewer
2009-03-07 15:20 . 2009-03-07 15:20 <DIR> d-------- c:\program files\Reference Assemblies
2009-03-07 15:19 . 2006-06-29 14:07 14,048 --------- c:\windows\system32\spmsg2.dll
2009-03-07 04:36 . 2009-03-07 04:36 <DIR> d-------- c:\program files\Hewlett-Packard
2009-03-07 04:36 . 2007-12-10 09:00 430,080 --a------ c:\windows\system32\ZSHP1018.EXE
2009-03-07 04:36 . 2007-12-10 09:00 128,380 --a------ c:\windows\system32\hp1018.img
2009-03-07 04:36 . 2007-12-10 09:00 106,496 --a------ c:\windows\system32\ZSPOOL.DLL
2009-03-07 04:36 . 2007-12-10 09:00 102,400 --a------ c:\windows\system32\ZLhp1018.DLL
2009-03-07 04:36 . 2007-12-10 09:00 61,440 --a------ c:\windows\system32\ZIMF.DLL
2009-03-07 04:36 . 2007-12-10 09:00 53,248 --a------ c:\windows\system32\ZTAG.DLL
2009-03-07 04:36 . 2007-12-10 09:00 10,632 --a------ c:\windows\system32\ZSHP1018.CHM
2009-03-07 03:54 . 2009-03-08 17:00 69 --a------ c:\windows\NeroDigital.ini

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-09 21:06 --------- d-----w c:\documents and settings\Administrator\Application Data\Skype
2009-03-09 19:51 --------- d-----w c:\documents and settings\Administrator\Application Data\skypePM
2009-03-08 18:30 --------- d-----w c:\program files\Windows Live
2009-03-07 14:32 --------- d-----w c:\documents and settings\Administrator\Application Data\Sony
2009-03-07 14:31 --------- d-----w c:\program files\Sony
2009-03-07 14:22 --------- d-----w c:\program files\MSBuild
2009-03-07 00:51 --------- d-----w c:\documents and settings\Administrator\Application Data\uTorrent
2009-03-06 23:53 --------- d-----w c:\program files\uTorrent
2009-03-06 23:27 --------- d-----w c:\program files\Sony Setup
2009-03-06 21:21 --------- d-----w c:\documents and settings\Administrator\Application Data\Publish Providers
2009-03-06 21:13 --------- d-----w c:\program files\Vstplugins
2009-03-06 21:09 --------- d-----w c:\documents and settings\Administrator\Application Data\Desktopicon
2009-03-06 21:08 --------- d-----w c:\program files\FormatFactory
2009-03-06 21:06 --------- d-----w c:\program files\Skype
2009-03-06 21:06 --------- d-----w c:\program files\Common Files\Skype
2009-03-06 21:06 --------- d-----w c:\documents and settings\All Users\Application Data\Skype
2009-03-06 21:03 --------- d-----w c:\documents and settings\Administrator\Application Data\Sony Setup
2009-03-06 21:01 --------- d-----w c:\program files\Fanfiction Downloader
2009-03-06 21:00 --------- d-----w c:\program files\GIMP-2.0
2009-03-06 20:49 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-03-06 20:45 --------- d-----w c:\program files\Microsoft.NET
2009-03-06 20:45 --------- d-----w c:\program files\Microsoft Works
2009-03-06 20:42 --------- d-----w c:\program files\Microsoft Visual Studio 8
2009-03-06 20:26 --------- d-----w c:\program files\Stardock
2009-03-06 20:24 --------- d-----w c:\program files\Winamp
2009-03-06 19:48 --------- d-----w c:\documents and settings\Administrator\Application Data\GRETECH
2009-03-06 19:47 --------- d-----w c:\program files\GRETECH
2009-03-06 19:04 --------- d-----w c:\documents and settings\Administrator\Application Data\PC Suite
2009-03-06 19:04 --------- d-----w c:\documents and settings\Administrator\Application Data\Nokia
2009-03-06 19:03 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2009-03-06 19:03 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2009-03-06 19:02 --------- d-----w c:\documents and settings\All Users\Application Data\PC Suite
2009-03-06 19:01 --------- d-----w c:\program files\PC Connectivity Solution
2009-03-06 19:01 --------- d-----w c:\program files\Nokia
2009-03-06 19:01 --------- d-----w c:\program files\DIFX
2009-03-06 19:01 --------- d-----w c:\program files\Common Files\PCSuite
2009-03-06 19:01 --------- d-----w c:\program files\Common Files\Nokia
2009-03-06 19:00 --------- d-----w c:\documents and settings\All Users\Application Data\Installations
2009-03-06 05:01 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-03-06 05:01 --------- d-----w c:\program files\AGEIA Technologies
2009-03-06 05:00 --------- d-----w c:\program files\My Company Name
2009-03-06 04:58 --------- d-----w c:\program files\Common Files\InstallShield
2009-03-06 04:54 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-06 04:52 --------- d-----w c:\program files\Intel
2009-03-06 04:51 --------- d-----w c:\program files\Realtek
2009-03-06 04:32 --------- d-----w c:\program files\OO Software
2009-03-06 04:32 --------- d-----w c:\program files\MagicISO
2009-03-06 04:32 --------- d-----w c:\program files\CyberLink
2009-03-06 04:32 --------- d-----w c:\program files\Common Files\Ahead
2009-03-06 04:32 --------- d-----w c:\program files\Ahead
2009-03-06 04:31 --------- d-----w c:\program files\Real Alternative
2009-03-06 04:31 --------- d-----w c:\program files\QuickTime Alternative
2009-03-06 04:31 --------- d-----w c:\program files\Media Player Classic
2009-03-06 04:31 --------- d-----w c:\program files\K-Lite Codec Pack
2009-03-06 04:31 --------- d-----w c:\program files\Google
2009-03-06 04:31 --------- d-----w c:\program files\Common Files\Adobe
2009-03-06 04:31 --------- d-----w c:\documents and settings\All Users\Application Data\Apple Computer
2009-03-06 04:30 155,995 ----a-w c:\windows\java\Packages\37LZNN79.ZIP
2009-03-06 04:30 --------- d-----w c:\program files\Java
2009-03-06 04:30 --------- d-----w c:\program files\Common Files\Java
2009-03-06 04:19 --------- d-----w c:\program files\Unlocker
2009-03-06 04:19 --------- d-----w c:\program files\LClock
2006-06-25 14:48 32,768 ----a-r c:\windows\inf\UpdateUSB.exe
2002-12-31 12:00 156,520 --sha-r c:\windows\system32\bwzokb.dll
.

------- Sigcheck -------

2002-12-31 13:00 360448 0601f83f6784c220ee302f03f702316e c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2002-12-31 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LClock"="c:\program files\LClock\LClock.exe" [2004-09-19 65536]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-03-08 1171712]
"RTHDCPL"="RTHDCPL.EXE" [2008-11-17 c:\windows\RTHDCPL.EXE]
"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]

c:\documents and settings\Administrator\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2009-03-06 21:29 210168 c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=wbsys.dll avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.3iv2"= 3ivxVfWCodec.dll
"VIDC.VP31"= vp31vfw.dll
"msacm.l3fhg"= mp3fhg.acm
"msacm.divxa32"= msaud32_divx.acm

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Documents and Settings\\Administrator\\Desktop\\windowslivemessenger2009(14.0.8064).exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3711:TCP"= 3711:TCP:vbznas

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2009-03-08 12424]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-03-08 96520]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-03-08 282904]
R2 avgfws8;AVG8 Firewall;c:\progra~1\AVG\AVG8\avgfws8.exe [2009-03-08 930584]
R2 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-03-08 74376]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2009-03-08 22528]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1e51x86.sys [2009-03-06 38400]
S2 jjzyay;Universal Manager;c:\windows\system32\svchost.exe -k netsvcs [2002-12-31 14336]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2009-03-08 22528]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
jjzyay
.
.
------- Supplementary Scan -------
.
IE: &Google Search - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html
IE: &Translate English Word - c:\program files\Google\GoogleToolbar1.dll/cmwordtrans.html
IE: Backward Links - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\Google\GoogleToolbar1.dll/cmcache.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Similar Pages - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate Page into English - c:\program files\Google\GoogleToolbar1.dll/cmtrans.html
DPF: Microsoft XML Parser for Java - [Link mogu videti samo ulogovani korisnici]\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pxdgk9ry.default\
FF - prefs.js: browser.startup.homepage - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: keyword.URL - about:neterror?e=query&u=
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - component: c:\program files\Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici]
Rootkit scan 2009-03-09 22:34:57
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\jjzyay]
"ServiceDll"="c:\windows\system32\bwzokb.dll"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(988-)
c:\windows\system32\avgrsstx.dll
c:\program files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll
.
Completion time: 2009-03-09 22:35:40
ComboFix-quarantined-files.txt 2009-03-09 21:35:38

Pre-Run: 95,407,235,072 bytes free
Post-Run: 95,424,212,992 bytes free

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect /noexecute=alwaysoff

224

Poslao: 09 Mar 2009 22:55
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Iskljuci ponovo Antivirus.

Otvoriti Notepad i iskopirati sledeci tekst:

File::
c:\windows\system32\bwzokb.dll

NetSvc::
jjzyay

Driver::
jjzyay

Registry::
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3711:TCP"=-


Snimiti na Desktop fajl iz Notepada kao "CFScript"




Prevuci snimljeni skript/tekst na ComboFix ikonicu kao na slici.
Postaviti u sledecoj poruci log koji bude bio napravljen na kraju ciscenja/skeniranja.

Poslao: 09 Mar 2009 23:07
Idi na vrh
offline
  • Pridružio: 07 Sep 2008
  • Poruke: 49

ComboFix 09-03-06.02 - Administrator 2009-03-09 22:59:02.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.44.1033.18.3327.2726 [GMT 1:00]
Running from: c:\documents and settings\Administrator\Desktop\ComboFix.exe
Command switches used :: c:\documents and settings\Administrator\Desktop\CFScript.txt
AV: AVG Internet Security *On-access scanning enabled* (Outdated)
FW: AVG Firewall *disabled*
* Created a new restore point

FILE ::
c:\windows\system32\bwzokb.dll
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\bwzokb.dll

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_JJZYAY
-------\Service_jjzyay


((((((((((((((((((((((((( Files Created from 2009-02-09 to 2009-03-09 )))))))))))))))))))))))))))))))
.

2009-03-09 20:10 . 2009-03-09 20:10 268 --ah----- C:\sqmdata02.sqm
2009-03-09 20:10 . 2009-03-09 20:10 244 --ah----- C:\sqmnoopt02.sqm
2009-03-09 00:46 . 2009-03-09 00:46 268 --ah----- C:\sqmdata01.sqm
2009-03-09 00:46 . 2009-03-09 00:46 244 --ah----- C:\sqmnoopt01.sqm
2009-03-08 20:07 . 2009-03-08 20:07 <DIR> d-------- c:\windows\system32\drivers\Avg
2009-03-08 20:07 . 2009-03-08 20:07 96,520 --a------ c:\windows\system32\drivers\avgldx86.sys
2009-03-08 20:07 . 2009-03-08 20:07 74,376 --a------ c:\windows\system32\drivers\avgtdix.sys
2009-03-08 20:07 . 2009-03-08 20:07 12,424 --a------ c:\windows\system32\drivers\avgrkx86.sys
2009-03-08 20:07 . 2009-03-08 20:07 10,520 --a------ c:\windows\system32\avgrsstx.dll
2009-03-08 20:03 . 2009-03-08 20:03 <DIR> d-------- c:\program files\AVG
2009-03-08 20:03 . 2009-03-08 20:03 <DIR> d-------- c:\documents and settings\All Users\Application Data\avg8
2009-03-08 20:03 . 2009-03-08 20:03 45,568 --a------ c:\windows\system32\avgfwdx.dll
2009-03-08 20:03 . 2009-03-08 20:03 22,528 --a------ c:\windows\system32\drivers\avgfwdx.sys
2009-03-07 15:32 . 2009-03-07 15:32 <DIR> d-------- c:\documents and settings\All Users\Application Data\TEMP
2009-03-07 15:31 . 2009-03-07 15:31 <DIR> d-------- c:\documents and settings\All Users\Application Data\Sony
2009-03-07 15:20 . 2009-03-07 15:20 <DIR> d-------- c:\windows\system32\XPSViewer
2009-03-07 15:20 . 2009-03-07 15:20 <DIR> d-------- c:\program files\Reference Assemblies
2009-03-07 15:19 . 2006-06-29 14:07 14,048 --------- c:\windows\system32\spmsg2.dll
2009-03-07 04:36 . 2009-03-07 04:36 <DIR> d-------- c:\program files\Hewlett-Packard
2009-03-07 04:36 . 2007-12-10 09:00 430,080 --a------ c:\windows\system32\ZSHP1018.EXE
2009-03-07 04:36 . 2007-12-10 09:00 128,380 --a------ c:\windows\system32\hp1018.img
2009-03-07 04:36 . 2007-12-10 09:00 106,496 --a------ c:\windows\system32\ZSPOOL.DLL
2009-03-07 04:36 . 2007-12-10 09:00 102,400 --a------ c:\windows\system32\ZLhp1018.DLL
2009-03-07 04:36 . 2007-12-10 09:00 61,440 --a------ c:\windows\system32\ZIMF.DLL
2009-03-07 04:36 . 2007-12-10 09:00 53,248 --a------ c:\windows\system32\ZTAG.DLL
2009-03-07 04:36 . 2007-12-10 09:00 10,632 --a------ c:\windows\system32\ZSHP1018.CHM
2009-03-07 03:54 . 2009-03-08 17:00 69 --a------ c:\windows\NeroDigital.ini

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-03-09 21:06 --------- d-----w c:\documents and settings\Administrator\Application Data\Skype
2009-03-09 19:51 --------- d-----w c:\documents and settings\Administrator\Application Data\skypePM
2009-03-08 18:30 --------- d-----w c:\program files\Windows Live
2009-03-07 14:32 --------- d-----w c:\documents and settings\Administrator\Application Data\Sony
2009-03-07 14:31 --------- d-----w c:\program files\Sony
2009-03-07 14:22 --------- d-----w c:\program files\MSBuild
2009-03-07 00:51 --------- d-----w c:\documents and settings\Administrator\Application Data\uTorrent
2009-03-06 23:53 --------- d-----w c:\program files\uTorrent
2009-03-06 23:27 --------- d-----w c:\program files\Sony Setup
2009-03-06 21:21 --------- d-----w c:\documents and settings\Administrator\Application Data\Publish Providers
2009-03-06 21:13 --------- d-----w c:\program files\Vstplugins
2009-03-06 21:09 --------- d-----w c:\documents and settings\Administrator\Application Data\Desktopicon
2009-03-06 21:08 --------- d-----w c:\program files\FormatFactory
2009-03-06 21:06 --------- d-----w c:\program files\Skype
2009-03-06 21:06 --------- d-----w c:\program files\Common Files\Skype
2009-03-06 21:06 --------- d-----w c:\documents and settings\All Users\Application Data\Skype
2009-03-06 21:03 --------- d-----w c:\documents and settings\Administrator\Application Data\Sony Setup
2009-03-06 21:01 --------- d-----w c:\program files\Fanfiction Downloader
2009-03-06 21:00 --------- d-----w c:\program files\GIMP-2.0
2009-03-06 20:49 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2009-03-06 20:45 --------- d-----w c:\program files\Microsoft.NET
2009-03-06 20:45 --------- d-----w c:\program files\Microsoft Works
2009-03-06 20:42 --------- d-----w c:\program files\Microsoft Visual Studio 8
2009-03-06 20:26 --------- d-----w c:\program files\Stardock
2009-03-06 20:24 --------- d-----w c:\program files\Winamp
2009-03-06 19:48 --------- d-----w c:\documents and settings\Administrator\Application Data\GRETECH
2009-03-06 19:47 --------- d-----w c:\program files\GRETECH
2009-03-06 19:04 --------- d-----w c:\documents and settings\Administrator\Application Data\PC Suite
2009-03-06 19:04 --------- d-----w c:\documents and settings\Administrator\Application Data\Nokia
2009-03-06 19:03 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2009-03-06 19:03 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2009-03-06 19:02 --------- d-----w c:\documents and settings\All Users\Application Data\PC Suite
2009-03-06 19:01 --------- d-----w c:\program files\PC Connectivity Solution
2009-03-06 19:01 --------- d-----w c:\program files\Nokia
2009-03-06 19:01 --------- d-----w c:\program files\DIFX
2009-03-06 19:01 --------- d-----w c:\program files\Common Files\PCSuite
2009-03-06 19:01 --------- d-----w c:\program files\Common Files\Nokia
2009-03-06 19:00 --------- d-----w c:\documents and settings\All Users\Application Data\Installations
2009-03-06 05:01 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-03-06 05:01 --------- d-----w c:\program files\AGEIA Technologies
2009-03-06 05:00 --------- d-----w c:\program files\My Company Name
2009-03-06 04:58 --------- d-----w c:\program files\Common Files\InstallShield
2009-03-06 04:54 --------- d--h--w c:\program files\InstallShield Installation Information
2009-03-06 04:52 --------- d-----w c:\program files\Intel
2009-03-06 04:51 --------- d-----w c:\program files\Realtek
2009-03-06 04:32 --------- d-----w c:\program files\OO Software
2009-03-06 04:32 --------- d-----w c:\program files\MagicISO
2009-03-06 04:32 --------- d-----w c:\program files\CyberLink
2009-03-06 04:32 --------- d-----w c:\program files\Common Files\Ahead
2009-03-06 04:32 --------- d-----w c:\program files\Ahead
2009-03-06 04:31 --------- d-----w c:\program files\Real Alternative
2009-03-06 04:31 --------- d-----w c:\program files\QuickTime Alternative
2009-03-06 04:31 --------- d-----w c:\program files\Media Player Classic
2009-03-06 04:31 --------- d-----w c:\program files\K-Lite Codec Pack
2009-03-06 04:31 --------- d-----w c:\program files\Google
2009-03-06 04:31 --------- d-----w c:\program files\Common Files\Adobe
2009-03-06 04:31 --------- d-----w c:\documents and settings\All Users\Application Data\Apple Computer
2009-03-06 04:30 155,995 ----a-w c:\windows\java\Packages\37LZNN79.ZIP
2009-03-06 04:30 --------- d-----w c:\program files\Java
2009-03-06 04:30 --------- d-----w c:\program files\Common Files\Java
2009-03-06 04:19 --------- d-----w c:\program files\Unlocker
2009-03-06 04:19 --------- d-----w c:\program files\LClock
2006-06-25 14:48 32,768 ----a-r c:\windows\inf\UpdateUSB.exe
.

------- Sigcheck -------

2002-12-31 13:00 360448 0601f83f6784c220ee302f03f702316e c:\windows\system32\drivers\tcpip.sys
.
((((((((((((((((((((((((((((( [Link mogu videti samo ulogovani korisnici] )))))))))))))))))))))))))))))))))))))))))
.
+ 2005-10-20 19:02:28 163,328 ----a-w c:\windows\ERDNT\subs\ERDNT.EXE
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2002-12-31 15360]
"msnmsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"LClock"="c:\program files\LClock\LClock.exe" [2004-09-19 65536]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2009-03-08 1171712]
"RTHDCPL"="RTHDCPL.EXE" [2008-11-17 c:\windows\RTHDCPL.EXE]
"nwiz"="nwiz.exe" [2008-10-07 c:\windows\system32\nwiz.exe]

c:\documents and settings\Administrator\Start Menu\Programs\Startup\
OneNote 2007 Screen Clipper and Launcher.lnk - c:\program files\Microsoft Office\Office12\ONENOTEM.EXE [2006-10-26 98632]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
2009-03-06 21:29 210168 c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=wbsys.dll avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.3iv2"= 3ivxVfWCodec.dll
"VIDC.VP31"= vp31vfw.dll
"msacm.l3fhg"= mp3fhg.acm
"msacm.divxa32"= msaud32_divx.acm

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0OODBS

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Documents and Settings\\Administrator\\Desktop\\windowslivemessenger2009(14.0.8064).exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgnsx.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

R0 AvgRkx86;avgrkx86.sys;c:\windows\system32\drivers\avgrkx86.sys [2009-03-08 12424]
R1 AvgLdx86;AVG AVI Loader Driver x86;c:\windows\system32\drivers\avgldx86.sys [2009-03-08 96520]
R2 avg8wd;AVG8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2009-03-08 282904]
R2 avgfws8;AVG8 Firewall;c:\progra~1\AVG\AVG8\avgfws8.exe [2009-03-08 930584]
R2 AvgTdiX;AVG8 Network Redirector;c:\windows\system32\drivers\avgtdix.sys [2009-03-08 74376]
R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [2009-03-08 22528]
R3 L1e;Miniport Driver for Atheros AR8121/AR8113/AR8114 PCI-E Ethernet Controller;c:\windows\system32\drivers\l1e51x86.sys [2009-03-06 38400]
S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [2009-03-08 22528]
.
.
------- Supplementary Scan -------
.
IE: &Google Search - c:\program files\Google\GoogleToolbar1.dll/cmsearch.html
IE: &Translate English Word - c:\program files\Google\GoogleToolbar1.dll/cmwordtrans.html
IE: Backward Links - c:\program files\Google\GoogleToolbar1.dll/cmbacklinks.html
IE: Cached Snapshot of Page - c:\program files\Google\GoogleToolbar1.dll/cmcache.html
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~1\Office12\EXCEL.EXE/3000
IE: Similar Pages - c:\program files\Google\GoogleToolbar1.dll/cmsimilar.html
IE: Translate Page into English - c:\program files\Google\GoogleToolbar1.dll/cmtrans.html
DPF: Microsoft XML Parser for Java - [Link mogu videti samo ulogovani korisnici]\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\pxdgk9ry.default\
FF - prefs.js: browser.startup.homepage - [Link mogu videti samo ulogovani korisnici]
FF - prefs.js: keyword.URL - about:neterror?e=query&u=
FF - component: c:\program files\Mozilla Firefox\extensions\{B13721C7-F507-4982-B2E5-502A71474FED}\components\NPComponent.dll
FF - component: c:\program files\Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava11.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava12.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava13.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava14.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJava32.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPJPI150_06.dll
FF - plugin: c:\program files\Java\jre1.5.0_06\bin\NPOJI610.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici]
Rootkit scan 2009-03-09 23:01:16
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(992)
c:\program files\Stardock\Object Desktop\WindowBlinds\wbsrv.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\rundll32.exe
c:\program files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
c:\windows\system32\nvsvc32.exe
c:\progra~1\AVG\AVG8\avgam.exe
c:\progra~1\AVG\AVG8\avgnsx.exe
c:\windows\system32\oodag.exe
c:\program files\AVG\AVG8\avgrsx.exe
c:\progra~1\AVG\AVG8\avgupd.exe
.
**************************************************************************
.
Completion time: 2009-03-09 23:02:20 - machine was rebooted
ComboFix-quarantined-files.txt 2009-03-09 22:02:18
ComboFix2.txt 2009-03-09 21:35:41

Pre-Run: 95,470,678,016 bytes free
Post-Run: 95,394,627,584 bytes free

237

Poslao: 09 Mar 2009 23:08
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Probaj sad, jel otvara?

Poslao: 09 Mar 2009 23:11
Idi na vrh
offline
  • Pridružio: 07 Sep 2008
  • Poruke: 49

AAaaa!!!! Sve se konektuje kako treba, msn mi prelazi na novu verziju, avg update-ovan...

HVALA TI PUNO!!!!!!!!!!! Smile))))))))))))

Dopuna: 09 Mar 2009 23:11

Otvara! Very Happy

Ne znam kako bih da se oduzim, rekla bih ako nesto treba da se obratite, al sta vama da treba od mene... Razz

Poslao: 09 Mar 2009 23:13
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Nema na cemu, drago mi je da sam pomogao.

Ako nema drugih problema, uradi jos ovo:

Klikni START a zatim RUN
U liniju za unos teksta ukucaj Combofix /u i klikni OK





Sačekaj da se proces deinstalacije završi
Gornja procedura će:
Obrisati sledeće:
ComboFix i njegove file-ove i foldere
VundoFix Backups folder, ako postoji
C:\Deckard folder, ako postoji
C:\OtMoveIt folder, ako postoji
Resetovati podešavanja sata na kompjuteru
Sakriti ekstenzije file-ova, ako je potrebno
Sakriti sistemske/skrivene file-ove/foldere, ako je potrebno
Resetovati System Restore

Pozzz

Poslao: 09 Mar 2009 23:16
Idi na vrh
offline
  • Pridružio: 07 Sep 2008
  • Poruke: 49

Uradjeno!

Hvala jos jednom Very Happy

MyCity » Ambulanta -> Arhiva Ambulante » Ne mogu da pristupim nekim sajtovima

Ko je trenutno na forumu
 

Ukupno su 1021 korisnika na forumu :: 97 registrovanih, 11 sakrivenih i 913 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., advokat84, Agape, AleksSE, Andrija357, Asteker, Atomski čoban, Banovo Brdo, bbogdan, Belac91, bigfoot, blankspace, blatruc82, BrcakRS, burevestnik, BWG, Cigi, cole77, crazydkure, dejno, doktor097, dragan_mig31, draganca, draganl, Dzambas, Dzigy, Dzumanga, Electron, gajasvi, gale48, galerija, GandorCC, Grochow, GT, Insan, Jaz, kapela, KizJ, kori, kovacicbozo, kutija11, ljuba.b, LostInSpaceandTime, M74AB3, milanpb, Miletić Zoran, MiljanXD, Milos1389, milutin134, MiroslavD, Mis uz pusku, mkukoleca, nebidrag, nekdo, neutrino, nevjerna beba, nikolapetkovic, operniki, ozzy, Parker, pavle_pzs, pceklic, pein, perunnurep, Plavi Jadran, PMsnow, procesor, Pururin, repac, RJ, Rok A Bit, S-lash, samo_citam, septembar, sevenino, silikon, Sir Budimir, Sirtaki Suvlaki, sistem22, siwoti, smuk, Sone0883, sspp, stingD, Teodor60, Tila Painen, Tragač, troki1971, vaci, vensla, vidra1, vlahale, Wehicle, zeka013, ZetaMan, Žrnov, 787