Problem sa Windowsom

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Napisano: 14 Feb 2013 16:15

pa to je to uputstvo samo ne znam kod drugog posupka kada podesavam burn method sta da obelezim, ja disk od jednom PW(DAO96) ili Disk od jednom PQ (DAO16)???

Dopuna: 14 Feb 2013 16:22

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.2180 BrowserJavaVersion: 10.9.2
Run by Admin at 16:20:42 on 2013-02-14
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1024.434 [GMT 1:00]
.
AV: Sunbelt VIPRE *Disabled/Updated* {964FCE60-0B18-4D30-ADD6-EB178909041C}
.
============== Running Processes ================
.
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTsvcCDA.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\PROGRA~1\SEARCH~1\Datamngr\DATAMN~1.EXE
C:\Program Files\Microsoft IntelliType Pro\itype.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\Sunbelt Software\VIPRE\SBPIMSvc.exe
c:\Program Files\Microsoft IntelliPoint\dpupdchk.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\System32\alg.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\CDBurnerXP\cdbxpp.exe
C:\Documents and Settings\Admin\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
uSearch Bar = [Link mogu videti samo ulogovani korisnici]
uSearch Page = [Link mogu videti samo ulogovani korisnici]
mDefault_Search_URL = [Link mogu videti samo ulogovani korisnici]
uInternet Connection Wizard,ShellNext = [Link mogu videti samo ulogovani korisnici]
uSearchAssistant = [Link mogu videti samo ulogovani korisnici]{searchTerms}
uSearchURL,(Default) = [Link mogu videti samo ulogovani korisnici]
mSearchAssistant = [Link mogu videti samo ulogovani korisnici]{searchTerms}
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Google Toolbar Helper: {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - c:\program files\google\googletoolbarnotifier\5.7.8313.1002\swg.dll
BHO: DataMngr: {C1ED9DA0-AFD0-4b90-AC6A-D3874F591014} - c:\program files\search results toolbar\datamngr\BrowserConnection.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: Search-Results Toolbar: {f34c9277-6577-4dff-b2d7-7d58092f272f} - c:\program files\search results toolbar\datamngr\srtool~1\searchresultsDx.dll
TB: Google Toolbar: {2318C2B1-4965-11D4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Google Toolbar: {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Search-Results Toolbar: {f34c9277-6577-4dff-b2d7-7d58092f272f} - c:\program files\search results toolbar\datamngr\srtool~1\searchresultsDx.dll
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [Google Update] "c:\documents and settings\admin\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /minimized /regrun
uRun: [Facebook Update] "c:\documents and settings\admin\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
mRun: [TaskTray] <no file>
StartupFolder: c:\docume~1\admin\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - [Link mogu videti samo ulogovani korisnici]
DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} - [Link mogu videti samo ulogovani korisnici]
TCP: NameServer = 192.168.1.1
TCP: Interfaces\{35337BE4-6C54-4BE3-AE37-2ED518BB8C63} : DHCPNameServer = 192.168.1.1
TCP: Interfaces\{CB506C24-C87D-475D-B570-F3F666BC5DC0} : DHCPNameServer = 217.169.208.1 217.169.208.2
TCP: Interfaces\{E2906987-0F65-4D30-A986-57332B5CC526} : DHCPNameServer = 192.168.0.1
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
AppInit_DLLs= c:\docume~1\alluse~1\applic~1\wincert\win32c~1.dll c:\docume~1\alluse~1\applic~1\browse~1\261095~1.52\{c16c1~1\browse~1.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
LSA: Authentication Packages = msv1_0 nwprovau
.
============= SERVICES / DRIVERS ===============
.
R1 sbaphd;sbaphd;c:\windows\system32\drivers\sbaphd.sys [2012-10-17 21464]
R1 SBRE;SBRE;c:\windows\system32\drivers\SBREDrv.sys [2010-5-13 98392]
R1 SbTis;SbTis;c:\windows\system32\drivers\sbtis.sys [2012-10-17 212568]
R2 sbapifs;sbapifs;c:\windows\system32\drivers\sbapifs.sys [2012-10-17 69976]
R2 SBPIMSvc;SB Recovery Service;c:\program files\sunbelt software\vipre\SBPIMSvc.exe [2010-8-20 181584]
S2 PfDetNT;PfDetNT;\??\c:\windows\system32\drivers\pfmodnt.sys --> c:\windows\system32\drivers\PfModNT.sys [?]
S2 SBAMSvc;VIPRE Antivirus;c:\program files\sunbelt software\vipre\SBAMSvc.exe [2010-8-20 2763080]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2013-1-8 161536]
S3 BTCOMM;BTCOMM;c:\windows\system32\drivers\btcomm.sys --> c:\windows\system32\drivers\Btcomm.sys [?]
S3 BTKRNBDG;Bluetooth COM Bridge;c:\windows\system32\drivers\btkrnbdg.sys --> c:\windows\system32\drivers\btkrnbdg.sys [?]
S3 vad_multi;Windigo Virtual Audio Device (WDM);c:\windows\system32\drivers\vadmulti.sys --> c:\windows\system32\drivers\vadmulti.sys [?]
.
=============== Created Last 30 ================
.
2013-02-14 14:38:14 -------- d-----w- c:\documents and settings\all users\application data\ReviverSoft
2013-02-14 14:36:40 -------- d-----w- c:\program files\ReviverSoft
2013-02-14 14:33:39 -------- d-----w- c:\documents and settings\all users\application data\Canneverbe Limited
2013-02-14 14:33:37 -------- d-----w- c:\documents and settings\admin\application data\Canneverbe Limited
2013-02-14 14:32:37 5504 ----a-w- c:\windows\system32\drivers\StarOpen.sys
2013-02-13 02:11:41 -------- d-s---w- c:\documents and settings\admin\UserData
2013-02-12 22:37:11 -------- d-----w- c:\documents and settings\admin\local settings\application data\Facebook
2013-02-12 22:14:10 -------- d-----r- c:\program files\Skype
2013-02-12 20:08:37 -------- d-----w- c:\program files\Ad Blocker
2013-02-02 17:52:00 -------- d-----w- c:\documents and settings\admin\local settings\application data\Bundled software uninstaller
2013-02-02 17:47:35 -------- d-----w- c:\program files\VideoLAN
2013-02-02 17:46:51 -------- d-----w- c:\documents and settings\all users\application data\BrowserProtect
2013-02-02 17:46:51 -------- d-----w- c:\documents and settings\admin\application data\BabSolution
2013-02-02 17:43:47 -------- d-----w- c:\documents and settings\all users\application data\Babylon
2013-02-02 17:43:46 -------- d-----w- c:\documents and settings\admin\application data\Babylon
2013-01-16 15:57:20 -------- d-----w- c:\documents and settings\admin\application data\searchresultstb
2013-01-16 15:56:46 -------- d-----w- c:\documents and settings\all users\application data\Wincert
.
==================== Find3M ====================
.
2013-02-14 11:09:29 71024 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2013-02-14 11:09:29 691568 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-11-27 08:43:01 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2012-11-27 08:42:56 143872 ----a-w- c:\windows\system32\javacpl.cpl
2012-11-27 08:42:55 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
2012-11-27 08:42:55 746984 ----a-w- c:\windows\system32\deployJava1.dll
.
============= FINISH: 16:21:19,18 ===============

[Link mogu videti samo ulogovani korisnici]



evo odradila sam u ambulanti...

Dopuna: 14 Feb 2013 16:58

opet ne mogu da se snadjem...instalirala sam gmer, sve odradila, do sledeceg koraka
kliknite desnim tasterom u prozor programa Gmer i odaberite Options > Only non MS files - kliknite Scan;
ja u mom programu koji sam instalirala, kada stisnem desnim klikom-opcije, imam opcije:

IRP hoops
NTAPI registry scan
IRP files scan
--------------------
fille version info
3rd party
sta da izaberem?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Pozdrav, Ana Guarana Brkovic


Ukoliko ti je GMER tezak za snalazenje, probaj sa RootRepealom koji je jedna od alternativa. Uputstvo za dostavljenje njegovog loga takodje imas u uputstvu za otvaranje teme.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

pozdrav i hvala vam sto se trudide da mi pomognete...sto se tice ambulante, ja sam odradila prva 2 koraka i to sam okacila, nisam mogla da se snadjem u gmeru pa sam treci korak odradila u rootrepeal-u...evo i taj izvestaj...je l' se vidi problem u svemu ovome..hvala jos jednom )
[Link mogu videti samo ulogovani korisnici]

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Da li koristis piratsku verziju Vipre-a?

Ukoliko koristis piratsku verziju, obrisi je i Instaliraj neki drugi antivirusni program. Imaš dosta kvalitetnih besplatnih rešenja, kao što su Avira, Avast, Microsoft Security Essentials, itd.
Nemoj koristiti piratske verzije AV programa!!








Preuzmi "Xplode"-ov AdwCleaner i sacuvaj ga na Desktop
Dvoklikom pokreni program i klikni na dugme [Search] .
Kada program zavrsi analizu otvorice notepad sa izvestajem. Zatvori taj notepad.

Klikni na dugme [Delete] i pricekaj da program zavrsi.
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok
Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"
Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt