kis2010 je pronasao dosta virusa

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

rotpeal nisam mogao da skeniram posto je pisalo neki eroer i drajveri ali vo druge..kompjuter mi je pun virusa i kis2010 je nasao razne pa da proverim da li ima,,,mislim da ima evo..
DDS (Ver_09-10-26.01) - NTFSx86
Run by Amar at 10:33:55,92 on źet 12.11.2009
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.381.1033.18.2048.1191 [GMT -8:00]


============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\Nero\Nero8\Nero BackItUp\NBService.exe
C:\Windows\system32\IoctlSvc.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Users\Amar\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Amar\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Users\Amar\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\system32\DllHost.exe
C:\Users\Amar\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\system32\taskhost.exe
C:\Users\Amar\Documents\Downloads\dds.scr
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = [Link mogu videti samo ulogovani korisnici]
uURLSearchHooks: Winamp Search Class: {57bca5fa-5dbb-45a2-b558-1755c3f6253b} - c:\program files\winamp toolbar\winamptb.dll
mURLSearchHooks: Winamp Search Class: {57bca5fa-5dbb-45a2-b558-1755c3f6253b} - c:\program files\winamp toolbar\winamptb.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Winamp Toolbar Loader: {25cee8ec-5730-41bc-8b58-22ddc8ab8c20} - c:\program files\winamp toolbar\winamptb.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky internet security 2010\ievkbd.dll
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: Windows Live ID Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
BHO: FilterBHO Class: {e33cf602-d945-461a-83f0-819f76a199f8} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll
TB: Winamp Toolbar: {ebf2ba02-9094-4c5a-858b-bb198f3d8de2} - c:\program files\winamp toolbar\winamptb.dll
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [Uniblue RegistryBooster 2] c:\program files\uniblue\registrybooster 2\StartRegistryBooster.exe
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky internet security 2010\avp.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: &Winamp Search - c:\programdata\winamp toolbar\ietoolbar\resources\en-us\local\search.html
IE: Add to Anti-Banner - c:\program files\kaspersky lab\kaspersky internet security 2010\ie_banner_deny.htm
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {4248FE82-7FCB-46AC-B270-339F08212110} - {4248FE82-7FCB-46AC-B270-339F08212110} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
IE: {CCF151D8-D089-449F-A5A4-D9909053F20F} - {CCF151D8-D089-449F-A5A4-D9909053F20F} - c:\program files\kaspersky lab\kaspersky internet security 2010\klwtbbho.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: klogon - c:\windows\system32\klogon.dll
AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll,c:\progra~1\kasper~1\kasper~1\kloehk.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\amar\appdata\roaming\mozilla\firefox\profiles\ur3uwyod.default\
FF - component: c:\program files\mozilla firefox\extensions\linkfilter@kaspersky.ru\components\KavLinkFilter.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll
FF - plugin: c:\users\amar\appdata\local\google\update\1.2.183.13\npGoogleOneClick8.dll

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2009-10-14 36880]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\system32\drivers\klim6.sys [2009-9-14 21520]
R2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service;c:\program files\tuneup utilities 2010\TuneUpUtilitiesService32.exe [2009-10-30 1021256]
R2 wlidsvc;Windows Live ID Sign-in Assistant;c:\program files\common files\microsoft shared\windows live\WLIDSVC.EXE [2009-3-30 1533808]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [2009-10-2 19472]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-8-20 189440]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv;c:\program files\tuneup utilities 2010\TuneUpUtilitiesDriver32.sys [2009-10-14 10064]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 fssfltr;fssfltr;c:\windows\system32\drivers\fssfltr.sys [2009-11-4 54632]
S3 fsssvc;Windows Live Family Safety Service;c:\program files\windows live\family safety\fsssvc.exe [2009-8-5 704864]

=============== Created Last 30 ================

2009-11-11 22:55:02 69 ----a-w- c:\windows\NeroDigital.ini
2009-11-10 04:41:50 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-11-10 02:27:16 0 d-----w- C:\Sierra
2009-11-05 18:09:03 0 d-----w- c:\program files\Defraggler
2009-11-05 07:38:23 0 d-----w- c:\users\amar\Tracing
2009-11-05 07:37:50 0 d-----w- c:\program files\Microsoft Office Outlook Connector
2009-11-05 07:37:37 54632 ----a-w- c:\windows\system32\drivers\fssfltr.sys
2009-11-05 07:35:36 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2009-11-05 07:35:28 0 d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-11-05 07:34:04 0 d-----w- c:\program files\Windows Live SkyDrive
2009-11-05 07:28:01 0 d-----w- c:\windows\sr-Latn-CS
2009-11-05 07:27:47 0 d-----w- c:\windows\system32\drivers\sr-Latn-CS
2009-11-05 07:27:45 0 d-----w- c:\windows\system32\wbem\sr-Latn-CS
2009-11-05 07:21:15 29512 ----a-w- c:\windows\system32\TURegOpt.exe
2009-11-05 07:21:12 30024 ----a-w- c:\windows\system32\uxtuneup.dll
2009-11-05 07:21:12 21320 ----a-w- c:\windows\system32\authuitu.dll
2009-11-05 07:20:50 0 d-----w- c:\users\amar\appdata\roaming\TuneUp Software
2009-11-05 07:20:48 0 d-----w- c:\program files\common files\Windows Live
2009-11-05 07:20:43 0 d-----w- c:\program files\TuneUp Utilities 2010
2009-11-05 07:20:32 0 d-----w- c:\programdata\TuneUp Software
2009-11-05 07:19:56 0 d-sh--w- c:\programdata\{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}
2009-11-05 07:14:07 0 d-----w- c:\program files\Microsoft
2009-11-04 21:41:59 0 d-----w- c:\program files\MSXML 4.0
2009-11-04 21:11:50 0 d-----w- c:\users\amar\appdata\roaming\Auslogics
2009-11-04 21:11:46 0 d-----w- c:\program files\Auslogics
2009-11-04 19:19:00 15290 ----a-w- c:\users\amar\forahm5.jpg
2009-11-04 19:11:07 0 d-----w- c:\programdata\DriverScanner
2009-11-04 19:08:26 0 dc-h--w- c:\programdata\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2009-11-04 19:07:02 0 d-----w- c:\users\amar\appdata\roaming\Uniblue
2009-11-04 19:06:54 0 d-----w- c:\program files\Uniblue
2009-11-04 19:03:42 0 d-----r- c:\program files\Skype
2009-11-04 19:03:36 0 d-----w- c:\programdata\Skype
2009-11-04 18:58:31 0 d-----w- c:\users\amar\appdata\roaming\FTWeak
2009-11-04 18:58:18 0 d-----w- c:\programdata\FTWeak
2009-11-04 18:58:18 0 d-----w- c:\program files\FCleaner
2009-11-04 17:04:02 0 d-----w- c:\windows\pss
2009-11-04 07:36:43 0 d-----w- c:\program files\Counter-Strike 1.6
2009-11-04 07:17:40 257024 ----a-w- c:\windows\system32\msv1_0.dll
2009-11-04 07:15:15 728648 ----a-w- c:\windows\system32\drivers\dxgkrnl.sys
2009-11-04 07:15:15 71168 ----a-w- c:\windows\system32\fontsub.dll
2009-11-04 07:15:15 507568 ----a-w- c:\windows\system32\winload.exe
2009-11-04 07:15:15 2613248 ----a-w- c:\windows\explorer.exe
2009-11-04 07:15:15 1320960 ----a-w- c:\windows\system32\CertEnroll.dll
2009-11-04 07:15:15 108544 ----a-w- c:\windows\system32\t2embed.dll
2009-11-04 07:15:14 442920 ----a-w- c:\windows\system32\winresume.exe
2009-11-04 07:15:14 293888 ----a-w- c:\windows\system32\atmfd.dll
2009-11-04 07:15:14 12625408 ----a-w- c:\windows\system32\wmploc.DLL
2009-11-04 07:15:12 34816 ----a-w- c:\windows\system32\msasn1.dll
2009-11-04 06:50:10 32656 ----a-w- c:\windows\system32\msonpmon.dll
2009-11-04 06:45:20 0 d-----w- c:\windows\PCHEALTH
2009-11-04 06:43:09 0 d-----w- c:\program files\Microsoft Visual Studio 8
2009-11-04 06:42:05 0 d-----w- c:\programdata\Microsoft Help
2009-11-04 06:35:48 1024 ----a-w- c:\users\amar\.rnd
2009-11-04 06:33:56 0 d-----w- c:\programdata\Nero
2009-11-04 06:33:56 0 d-----w- c:\program files\Nero
2009-11-04 06:03:57 0 d-----w- c:\program files\Ask.com
2009-11-04 05:59:02 0 d-----w- c:\program files\uTorrent
2009-11-04 05:58:52 0 d-----w- c:\users\amar\appdata\roaming\uTorrent
2009-11-04 05:58:15 0 d-----w- c:\program files\VideoLAN
2009-11-04 05:53:52 0 d-----w- c:\programdata\Winamp Toolbar
2009-11-04 05:53:52 0 d-----w- c:\program files\Winamp Toolbar
2009-11-04 05:53:05 0 d-----w- c:\program files\common files\PX Storage Engine
2009-11-04 05:52:37 0 d-----w- c:\program files\CCleaner
2009-11-04 05:51:44 0 d-----w- c:\program files\K-Lite Codec Pack
2009-11-04 05:48:19 0 d-----w- c:\programdata\Adobe
2009-11-04 05:09:55 181408 ----a-w- C:\grldr.bak
2009-11-04 05:09:55 171136 --sha-r- C:\grldr
2009-11-04 05:08:38 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-11-04 04:53:45 95259 ----a-w- c:\windows\system32\drivers\klick.dat
2009-11-04 04:53:45 108059 ----a-w- c:\windows\system32\drivers\klin.dat
2009-11-04 04:53:24 713888 ----a-w- c:\windows\system32\PerfStringBackup.INI
2009-11-04 04:53:04 0 d-----w- c:\programdata\Kaspersky Lab
2009-11-04 04:53:04 0 d-----w- c:\program files\Kaspersky Lab
2009-11-04 04:52:26 0 d-sh--w- c:\windows\Installer
2009-11-04 04:52:20 0 d-----w- c:\windows\system32\wbem\Performance
2009-11-04 04:52:04 0 d-----w- c:\programdata\Kaspersky Lab Setup Files
2009-11-04 04:51:26 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_09_00.Wdf
2009-11-04 04:47:27 0 d-sh--w- C:\Recovery
2009-11-04 04:34:34 0 ----a-w- c:\windows\system32\atiicdxx.dat
2009-11-04 04:34:34 0 ----a-w- c:\windows\ativpsrm.bin
2009-11-04 04:32:36 0 d-----w- c:\windows\Panther
2009-11-03 19:24:42 8192 --sha-r- C:\BOOTSECT.BAK
2009-11-03 19:24:39 383562 --sha-r- C:\bootmgr
2009-11-03 19:24:38 0 d-sh--w- C:\Boot
2009-10-26 12:36:03 0 d-----r- C:\Sandbox
2009-10-21 04:34:56 219664 ----a-w- c:\windows\system32\klogon.dll
2009-10-15 05:18:34 36880 ----a-w- c:\windows\system32\drivers\klbg.sys

==================== Find3M ====================

2009-10-03 03:39:36 19472 ----a-w- c:\windows\system32\drivers\klmouflt.sys
2009-09-14 22:46:36 21520 ----a-w- c:\windows\system32\drivers\klim6.sys
2009-08-18 07:33:52 1193832 ----a-w- c:\windows\system32\FM20.DLL
2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2009-07-14 04:56:42 31548 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2009-07-14 04:56:42 291294 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2009-07-14 04:41:57 174 --sha-w- c:\program files\desktop.ini
2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2009-07-14 00:34:40 291294 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2009-07-14 00:34:38 31548 ----a-w- c:\windows\inf\perflib\0000\perfc.dat
2009-06-10 21:26:35 9633792 --sha-r- c:\windows\fonts\StaticCache.dat
2009-07-14 01:14:45 396800 --sha-w- c:\windows\winsxs\x86_microsoft-windows-mail-app_31bf3856ad364e35_6.1.7600.16385_none_f12e83abb108c86c\WinMail.exe

============= FINISH: 10:34:55,32 ===============

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Daj mi izvestaj od KIS-a..Il mi uslikaj sto je nasao..Posto logovi ne pokazuju da ti racunar "pun" virusa...

Osecas li ti neke probleme...Usporen rad...Redirekcije, nemogucnost konektovanja na neke sajtove itd..

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 12 Nov 2009 11:39

Kada god skeniram komp sa kis2010 on nalazi isti virus evo ime tog virusa virus Worm.Win32.Carrier.he....evo sad sam skenirao i opet ga je pronasao i izbrisao tako svaki put se vrti u krug

Dopuna: 12 Nov 2009 11:43

evo opet je pronasai isti virus, i tako se vrti u krug,,,evo bas sad pise da ga je izbrisao a posle opet kada skeniram pronadje ga opet

Dopuna: 12 Nov 2009 11:45

zaboravi pise da je to-containt virus

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ne mozemo ovako..Ne znaci mi nista ime crva...ako ne znam ime fajl-a



Uslikaj mi karantin da vidim sta je sve detektovao ..i moraju da se vide putanje i imena detektovanih fjalova.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 12 Nov 2009 11:54

u quarantini nema nista ali evo iz opcije gde all

Dopuna: 12 Nov 2009 11:55

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Nesto si skidao preko rapida sto je ovaj definisao kao carrier.HE

Ali i dalje ne vidim putanju i imena fajlova..

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ili koristis prekrekovan deamon tools ili je Fp positive...

Tvoj komp je cist

Deinstaliraj tu verziju Deamon Tool-a

Ocisti Chrome-ov kes

[Link mogu videti samo ulogovani korisnici]

Zatim restartuj racunar..To bi bilo to...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 12 Nov 2009 12:45

dt nisam ni instaliravao nego sam hteo da skinem dtlite ali skinuo pogresnu odnosno crekovanu...

Dopuna: 12 Nov 2009 12:55

Hvala ki2010 vise ne prijavljuje virus...hvala puno