|
jednom prilikom dok sam surfovao netom,odjednom mi se pojavio neki windowsow spisak virusa koji nisam mogao da iskljucim jer mi je neprestano nudio da nesto instaliram,ja,budalla,pa instalirao,to je bio neki antivirus 8 koji mi je prijavljivao da svuda imam virus,i da ce on to da sredi ako uplatim full verziju i to se pojavljivalo svaka 2 minuta.Uradio sam system restore i posle toga je delovalo sve ok samo sto su se zvuci upozorenja culi na pogresnom zvuvniku,onom u kucistu ispod hardova.Posle nekog vremena,to je proslo,ali sam posle primetio da mi ovde na forumu ne pise da koristim windows 7 vec nesto kao windows nt-a8 tako nesto,nije bitno videces kad budem postovao,skenirao sam ga sa Malwarebytes' Anti-Malware koji mi je prijavio 2 malwara,pa sam diskretno pritisnuo DELETE.E sad sam primetio da kada ocu da iskljucim racunar on mi prijavi nesto,ne znam kako da objasnim, ima ikonicu my computera ,a dole pise send repport, debug i dont send.Ja pritisnem dont send i opet pokusam da iskljucim racunar.Tek iz 2 pokusaja mi uspeva.
Ovu temu postavljam po predlogu goran 9888.
a evo i podataka:
DDS (Ver_10-12-12.02) - NTFSx86
Run by Marko at 14:53:11.95 on Fri 01/28/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_23
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.512.84 [GMT 1:00]
AV: avast! Antivirus *Enabled/Updated* {7591DB91-41F0-48A3-B128-1A293FD8233D}
============== Running Processes ===============
D:\WINDOWS\system32\nvsvc32.exe
D:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
D:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
D:\Program Files\Alwil Software\Avast5\AvastSvc.exe
D:\WINDOWS\Explorer.EXE
D:\WINDOWS\SOUNDMAN.EXE
D:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe
D:\Program Files\Common Files\Java\Java Update\jusched.exe
D:\WINDOWS\system32\RUNDLL32.EXE
D:\Program Files\EASEUS\Todo Backup 2.0\bin\EuWatch.exe
D:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
D:\Program Files\Alwil Software\Avast5\avastUI.exe
D:\Program Files\Winamp\winampa.exe
D:\WINDOWS\system32\ctfmon.exe
D:\Program Files\Skype\Phone\Skype.exe
D:\Program Files\OpenOffice.org 3\program\soffice.exe
D:\Program Files\OpenOffice.org 3\program\soffice.bin
D:\Program Files\Skype\Plugin Manager\skypePM.exe
D:\WINDOWS\system32\spoolsv.exe
svchost.exe
D:\WINDOWS\System32\svchost.exe -k Akamai
D:\Program Files\EASEUS\Todo Backup 2.0\bin\Agent.exe
D:\Program Files\Java\jre6\bin\jqs.exe
D:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
D:\Program Files\Java\jre6\bin\javaw.exe
D:\Program Files\Winamp\winamp.exe
D:\WINDOWS\system32\DllHost.exe
D:\Program Files\Mozilla Firefox\firefox.exe
D:\Program Files\Mozilla Firefox\plugin-container.exe
D:\WINDOWS\system32\svchost.exe -k imgsvc
D:\Documents and Settings\Marko\My Documents\Downloads\dds.scr
============== Pseudo HJT Report ===============
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - d:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Skype Plug-In: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - d:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - d:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - d:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: {3E1201F4-1707-409F-BB45-A5F192381DA0} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
EB: {947E34E9-1D85-43CB-9CBF-5C492118FDD5} - No File
uRun: [ctfmon.exe] d:\windows\system32\ctfmon.exe
uRun: [Skype] "d:\program files\skype\phone\Skype.exe" /nosplash /minimized
mRun: [SoundMan] SOUNDMAN.EXE
mRun: [Adobe Reader Speed Launcher] "d:\program files\adobe\reader 10.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "d:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [OrderReminder] d:\program files\hewlett-packard\orderreminder\OrderReminder.exe
mRun: [NeroFilterCheck] d:\windows\system32\NeroCheck.exe
mRun: [SunJavaUpdateSched] "d:\program files\common files\java\java update\jusched.exe"
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [NvMediaCenter] RUNDLL32.EXE d:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [NvCplDaemon] RUNDLL32.EXE d:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] d:\program files\nvidia corporation\nview\nwiz.exe /installquiet
mRun: [EaseUs Watch] "d:\program files\easeus\todo backup 2.0\bin\EuWatch.exe"
mRun: [ISUSPM Startup] d:\progra~1\common~1\instal~1\updateservice\ISUSPM.exe -startup
mRun: [ISUSScheduler] "d:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [avast5] "d:\program files\alwil software\avast5\avastUI.exe" /nogui
mRun: [WinampAgent] "d:\program files\winamp\winampa.exe"
dRunOnce: [ShowDeskFix] regsvr32 /s /n /i:u shell32
StartupFolder: d:\docume~1\marko\startm~1\programs\startup\openof~1.lnk - d:\program files\openoffice.org 3\program\quickstart.exe
mPolicies-explorer: NoResolveTrack = 1 (0x1)
IE: E&xport to Microsoft Excel - d:\progra~1\microsoft office\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - d:\program files\messenger\msmsgs.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - d:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - d:\progra~1\microsoft office\office11\REFIEBAR.DLL
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_23-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - d:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - d:\progra~1\common~1\skype\SKYPE4~1.DLL
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - d:\windows\system32\wpdshserviceobj.dll
================= FIREFOX ===================
FF - ProfilePath - d:\docume~1\marko\applic~1\mozilla\firefox\profiles\9q6iq66k.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2447621&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - 2Shared Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: network.proxy.type - 0
FF - component: d:\documents and settings\marko\application data\mozilla\firefox\profiles\9q6iq66k.default\extensions\{ef468e5b-5b30-4136-a833-7f2e3a31afdf}\components\RadioWMPCoreGecko19.dll
FF - component: d:\documents and settings\marko\application data\mozilla\firefox\profiles\9q6iq66k.default\extensions\engine@conduit.com\components\RadioWMPCoreGecko19.dll
FF - component: d:\program files\mozilla firefox\extensions\{ab2ce124-6272-4b12-94a9-7303c7397bd1}\components\SkypeFfComponent.dll
FF - plugin: d:\documents and settings\marko\application data\mozilla\firefox\profiles\9q6iq66k.default\extensions\yyginstantplay@yoyogames.com\plugins\NPYYGInstantPlay.dll
FF - plugin: d:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: d:\program files\mozilla firefox\plugins\npwachk.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - d:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - d:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Skype extension: {AB2CE124-6272-4b12-94A9-7303C7397BD1} - d:\program files\mozilla firefox\extensions\{AB2CE124-6272-4b12-94A9-7303C7397BD1}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - d:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - d:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: Conduit Engine : engine@conduit.com - %profile%\extensions\engine@conduit.com
FF - Ext: 2Shared Community Toolbar: {ef468e5b-5b30-4136-a833-7f2e3a31afdf} - %profile%\extensions\{ef468e5b-5b30-4136-a833-7f2e3a31afdf}
FF - Ext: World Sms: traycho@gmail.com - %profile%\extensions\traycho@gmail.com
FF - Ext: YoYo Games InstantPlay: yyginstantplay@yoyogames.com - %profile%\extensions\yyginstantplay@yoyogames.com
FF - Ext: DVDVideoSoft Menu: {ACAA314B-EEBA-48e4-AD47-84E31C44796C} - %profile%\extensions\{ACAA314B-EEBA-48e4-AD47-84E31C44796C}
============= SERVICES / DRIVERS ===============
R0 EUBAKUP;EUBAKUP;d:\windows\system32\drivers\eubakup.sys [2010-12-31 30472]
R0 EUFS;EUFS;d:\windows\system32\drivers\eufs.sys [2010-12-31 20744]
R1 aswSP;aswSP;d:\windows\system32\drivers\aswSP.sys [2011-1-17 294608]
R1 EUDSKACS;EUDSKACS;d:\windows\system32\drivers\eudskacs.sys [2010-12-31 14216]
R2 Akamai;Akamai NetSession Interface;d:\windows\system32\svchost.exe -k Akamai [2004-8-4 14336]
R2 aswFsBlk;aswFsBlk;d:\windows\system32\drivers\aswFsBlk.sys [2011-1-17 17744]
R2 avast! Antivirus;avast! Antivirus;d:\program files\alwil software\avast5\AvastSvc.exe [2011-1-17 40384]
R2 EASEUS Agent;EASEUS Agent;d:\program files\easeus\todo backup 2.0\bin\Agent.exe [2010-12-31 55688]
R3 EuDisk;EASEUS Disk Enumerator;d:\windows\system32\drivers\EuDisk.sys [2010-12-31 187400]
S3 epmntdrv;epmntdrv;d:\windows\system32\epmntdrv.sys [2011-1-19 13192]
S3 EuGdiDrv;EuGdiDrv;d:\windows\system32\EuGdiDrv.sys [2011-1-19 8456]
S3 pwdrvio;pwdrvio;d:\windows\system32\pwdrvio.sys [2011-1-19 16472]
S3 pwdspio;pwdspio;d:\windows\system32\pwdspio.sys [2011-1-19 11104]
=============== Created Last 30 ================
2011-01-26 20:25:22 -------- d-----w- d:\docume~1\alluse~1\applic~1\InterAction studios
2011-01-26 20:24:29 -------- d-----w- d:\program files\ChickenInvadersTNWXmasdemo
2011-01-26 18:40:11 -------- d-----w- d:\docume~1\marko\applic~1\Malwarebytes
2011-01-26 18:39:55 38224 ----a-w- d:\windows\system32\drivers\mbamswissarmy.sys
2011-01-26 18:39:54 -------- d-----w- d:\docume~1\alluse~1\applic~1\Malwarebytes
2011-01-26 18:39:49 20952 ----a-w- d:\windows\system32\drivers\mbam.sys
2011-01-26 18:39:48 -------- d-----w- d:\program files\Malwarebytes' Anti-Malware
2011-01-24 14:03:13 -------- d-----w- d:\program files\Free Screen Recorder
2011-01-24 08:01:47 -------- d-----w- D:\ZZZZZZCLASH BY NIGHT (1952)
2011-01-23 14:00:20 -------- d-----w- d:\program files\ClipX
2011-01-22 21:01:11 -------- d-----w- d:\program files\Matroska Pack
2011-01-22 19:33:03 -------- d-----w- d:\program files\Winamp Detect
2011-01-22 07:51:15 -------- d-----w- d:\docume~1\marko\applic~1\jah
2011-01-22 07:50:12 -------- d-----w- d:\program files\OpenLibraries
2011-01-22 07:49:42 -------- d-----w- d:\program files\jahPlayer
2011-01-22 07:04:43 -------- d-sh--w- D:\found.001
2011-01-20 21:23:28 -------- d-sh--w- D:\$RECYCLE.BIN
2011-01-19 18:02:15 2217088 ------w- d:\windows\system32\BootMan.exe
2011-01-19 18:02:15 14848 ------w- d:\windows\system32\EuEpmGdi.dll
2011-01-19 18:02:14 86408 ------w- d:\windows\system32\setupempdrv03.exe
2011-01-19 18:02:14 8456 ------w- d:\windows\system32\EuGdiDrv.sys
2011-01-19 18:02:14 13192 ------w- d:\windows\system32\epmntdrv.sys
2011-01-19 16:32:16 -------- d-----w- D:\Backup
2011-01-19 16:24:10 725064 ----a-w- d:\windows\system32\pwNative.exe
2011-01-19 16:24:04 16472 ------w- d:\windows\system32\pwdrvio.sys
2011-01-19 16:23:47 11104 ------w- d:\windows\system32\pwdspio.sys
2011-01-19 16:17:12 -------- d-----w- d:\program files\MiniTool Partition Wizard Home Edition 5.2
2011-01-17 22:52:46 38848 ------w- d:\windows\avastSS.scr
2011-01-17 22:28:25 -------- d-----w- d:\program files\COMODO
2011-01-17 17:00:51 18944 ------w- d:\windows\system32\spool\prtprocs\w32x86\mdippr.dll
2011-01-17 17:00:50 17920 ------w- d:\windows\system32\mdimon.dll
2011-01-17 16:56:26 -------- d-----w- d:\program files\Microsoft ActiveSync
2011-01-16 19:19:49 -------- d-----w- d:\docume~1\marko\applic~1\boswars
2011-01-16 15:12:33 -------- d-----w- d:\windows\system32\wbem\repository\FS
2011-01-16 15:12:33 -------- d-----w- d:\windows\system32\wbem\Repository
2011-01-16 08:26:10 -------- d-----w- d:\program files\common files\L&H
2011-01-16 08:23:49 -------- d-----w- d:\windows\SHELLNEW
2011-01-14 11:42:12 -------- d-----w- d:\docume~1\marko\applic~1\DVDVideoSoftIEHelpers
2011-01-14 11:41:56 -------- d-----w- d:\program files\DVDVideoSoft
2011-01-14 11:41:56 -------- d-----w- d:\program files\common files\DVDVideoSoft
2011-01-14 11:38:38 -------- d-----w- d:\windows\system32\XPSViewer
2011-01-13 19:47:00 -------- d-----w- d:\docume~1\marko\applic~1\Neverball
2011-01-13 19:45:58 -------- d-----w- d:\program files\Neverball
2011-01-13 07:35:42 -------- d-----w- d:\program files\Power Sound Editor Free
2011-01-13 07:05:11 -------- d-----w- d:\program files\Web TV Easy
2011-01-10 17:39:14 -------- d-----w- d:\program files\iColorFolder
2011-01-10 11:12:16 -------- d-----w- d:\program files\Rockstar Games
2011-01-10 11:11:53 32768 ------w- d:\program files\common files\installshield\professional\runtime\Objectps.dll
2011-01-10 11:11:53 155648 ------w- d:\program files\common files\installshield\professional\runtime\0701\intel32\iuser.dll
2011-01-10 11:11:52 57344 ------w- d:\program files\common files\installshield\professional\runtime\0701\intel32\ctor.dll
2011-01-10 11:11:52 5632 ------w- d:\program files\common files\installshield\professional\runtime\0701\intel32\DotNetInstaller.exe
2011-01-10 11:11:52 237568 ------w- d:\program files\common files\installshield\professional\runtime\0701\intel32\iscript.dll
2011-01-10 11:11:51 696320 ------w- d:\program files\common files\installshield\professional\runtime\0701\intel32\iKernel.dll
2011-01-10 11:11:37 282756 ------w- d:\program files\common files\installshield\professional\runtime\0701\intel32\setup.dll
2011-01-10 11:11:37 163972 ------w- d:\program files\common files\installshield\professional\runtime\0701\intel32\iGdi.dll
2011-01-09 19:18:11 -------- d-----w- d:\docume~1\marko\applic~1\Thinstall
2011-01-09 12:46:30 -------- d-----w- d:\program files\BearPaw 1200CU Plus
2011-01-09 12:46:22 -------- d-----w- d:\program files\Temp
2011-01-07 21:54:09 -------- d-----w- d:\program files\The KMPlayer
2011-01-07 15:09:35 -------- d-----w- d:\program files\ASIO4ALL v2
2011-01-07 15:09:22 225280 ------w- d:\windows\system32\rewire.dll
2011-01-07 15:08:13 1554944 ------w- d:\windows\system32\vorbis.acm
2011-01-07 15:06:15 -------- d-----w- d:\program files\VstPlugins
2011-01-07 15:06:03 -------- d-----w- d:\program files\Outsim
2011-01-07 14:59:40 -------- d-----w- d:\program files\Image-Line
2011-01-07 13:16:35 -------- d-----w- d:\program files\Game_Maker8
2011-01-07 09:30:48 -------- d-----w- d:\docume~1\alluse~1\applic~1\YoYoGames
2011-01-06 10:58:12 -------- d-sh--w- d:\documents and settings\marko\IECompatCache
2011-01-06 10:58:07 -------- d-----w- D:\Mozilla
2011-01-05 20:16:48 -------- d-----w- d:\program files\GameTop.com
2011-01-03 13:16:41 26496 -c----w- d:\windows\system32\dllcache\usbstor.sys
2011-01-03 12:25:41 -------- d-----w- d:\program files\Core Services
2010-12-31 08:02:23 -------- d-sh--w- D:\BOOT
2010-12-31 08:01:27 20744 ------w- d:\windows\system32\drivers\eufs.sys
2010-12-31 08:01:27 14216 ------w- d:\windows\system32\drivers\eudskacs.sys
2010-12-31 08:01:26 30472 ------w- d:\windows\system32\drivers\eubakup.sys
2010-12-31 08:01:17 187400 ------w- d:\windows\system32\drivers\EuDisk.sys
2010-12-31 08:01:02 18824 ------w- d:\windows\system32\fbnative.exe
2010-12-31 08:00:21 -------- d-----w- d:\program files\EASEUS
2010-12-30 19:51:49 -------- d-----w- d:\program files\Quintessential Media Player
2010-12-30 19:32:51 -------- d-----w- d:\program files\VideoLAN
2010-12-30 13:32:13 -------- d-----w- d:\docume~1\marko\applic~1\ooVoo Details
==================== Find3M ====================
2010-12-28 19:50:37 241444 ------w- d:\windows\system32\nvdrsdb1.bin
2010-12-28 19:50:37 1 ------w- d:\windows\system32\nvdrssel.bin
2010-12-28 19:50:28 241436 ------w- d:\windows\system32\nvdrsdb0.bin
2010-11-24 08:00:00 108032 ------w- d:\windows\system32\ff_vfw.dll
2010-11-12 17:53:06 472808 ------w- d:\windows\system32\deployJava1.dll
2010-11-12 15:34:10 73728 ------w- d:\windows\system32\javacpl.cpl
2010-11-03 19:08:48 237568 ------w- d:\windows\system32\yv12vfw.dll
============= FINISH: 14:55:02.20 ===============
https://www.mycity.rs/must-login.png
https://www.mycity.rs/must-login.png
https://www.mycity.rs/must-login.png
https://www.mycity.rs/must-login.png
gorane 9888 konacno otvorih temu 
|
