MyCity » Ambulanta -> Arhiva Ambulante » Avira nalazi na 1000virusa a nista ne brise.

Avira nalazi na 1000virusa a nista ne brise.

Napisano na dan: 5.8.2010
2

Avira nalazi na 1000virusa a nista ne brise.
Pagination Prethodna strana
Sledeća strana Pagination

Idi na vrh

Poslao: 09 Avg 2010 09:17
Idi na vrh
offline
  • Pridružio: 19 Dec 2008
  • Poruke: 89

pa odlucio sam ze za reinstalaciju os samo malo mi teze ide backup podataka posto sa C particije sporo se prebacuju podaci na D particiji zbog virusa dosta mi fajlova neradi .Jedno pitanje koji da stavim AntiVirus kad zavrsaim instalaciju windowsa koji je po tebi najbolji ,naravno da je free Smile

Poslao: 09 Avg 2010 20:36
Idi na vrh
offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Ovako...
Zamolio bih te da detaljno pratis moja uputstva i radis iskljucivo po njima. Sve je kristalno jasno objasnjeno.





Opet cu ti ponoviti (ako u proslom post-u nisam bio jasan):
Ne smes uci u particiju D:\ niti u E:\ nakon instalacije Windows-a... (formatiranja C:\ particije).


Citat:smem li da gurnem antivirus u D ili E i onda ga instaliram odatle...

Odgovor je: NE.








Najbolja opcija ti je opcija br.1, tj. ova na koju si se odlucio:
- instaliras Windows (format C particije)
- sa internet-a download-ujes (i snimis instalaciju na Desktop - > slikovit prikaz) svezu kopiju Avast-a (on je free anti-virus) sa sledeceg link-a: Avast Download Link
- kada zavrsis sa instalacijom pokreni njegov interfejs dvoklikom na ikonicu na Desktopu. Zatim namesti sledeca podesavanja u Avast-u:

- racunar ce se restart-ovati i prilikom paljenja ce krenuti Boot Scan. Kada se zavrsi scan-iranje (u toku scan-iranja imaces da biras opcije - ukoliko malware bude detektovan, izaberi Move to quarantine), okaci log koji se nalazi na sledecoj lokaciji:
Citat:C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\log\aswBoot.log





goran9888 (AMF Tim)

Poslao: 10 Avg 2010 10:34
Idi na vrh
offline
  • Pridružio: 19 Dec 2008
  • Poruke: 89

mycity.rs/must-login.png

Poslao: 10 Avg 2010 14:35
Idi na vrh
offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Postavi mi i log koji se nalazi na sledecoj lokaciji:
Citat:C:\Documents and Settings\All Users\Application Data\Alwil Software\Avast5\report\aswBoot.txt

Da li sada imas problema sa racunarom?

Poslao: 10 Avg 2010 14:46
Idi na vrh
offline
  • Pridružio: 19 Dec 2008
  • Poruke: 89

Napisano: 10 Avg 2010 14:45

mycity.rs/must-login.png

Dopuna: 10 Avg 2010 14:46

pa neznam nisam nista na njega instalirao i radio ,dali da pustim Avast da skenira kompletan racunar ?

Poslao: 10 Avg 2010 15:02
Idi na vrh
offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Vec si jednom skenirao kompletan hard disk. Ukoliko si sve uradio po uputstvu koje si dobio, tvoj problem sa malware-om je resen.

Proveri, pa javi stanje!






Arrow Preuzmi USBNoRisk na Desktop i pokreni ga duplim klikom na ikonicu programa.
- Sacekaj koji sekund dok program izvrsi inicijalno skeniranje.
- Ubacuj sve USB memorijske uredjaje redom u USB slot i svaki zadrzi u slotu po 10 sekundi.
- Ukoliko imas vise uredjaja za proveru, onda na parcetu papira zapisi kojim redom su ubacivani jer ce nam kasnije trebati taj podatak
- Kada zavrsis sa svim uredjajima, klikni desno dugme misa na sred prozora programa i odaberi opciju Save log. To ce automatski otvoriti log u Notepadu. Iskopiraj nam taj log iz Notepada na forum.

Objasnjenje: U USB memorijske uredjaje spadaju svi oni uredjaji koji po prikljucivanju na kompjuter dobijaju svoju oznaku particije. Tu spadaju USB flash drajvovi, eksterni hard-diskovi, memorijske kartice, MP3 i MP4 plejeri, neki mobilni telefoni, neki GPS (navigacioni) uredjaji itd.



goran9888 (AMF Tim)

Poslao: 10 Avg 2010 15:10
Idi na vrh
offline
  • Pridružio: 19 Dec 2008
  • Poruke: 89

mycity.rs/must-login.png
samo cu jednu sad da koristimflesku na ovaj racunar ,necu vise dozvolit onako da se zarazi .Sad koliko mogu da primijetim radi dobro


USBNoRisk 2.5 (26 July 2009) by bobby

Started at 8/10/2010 3:08:54 PM

Searching for connected USB Mass storage...
----------------------------------------
G: {2ad1346b-a47d-11df-bb6b-00112f8f2aec}
========================================

Searching for other storage...
----------------------------------------
E: {5a76ebb9-a45c-11df-a9c9-806d6172696f}
D: {5a76ebba-a45c-11df-a9c9-806d6172696f}
C: {5a76ebbc-a45c-11df-a9c9-806d6172696f}
========================================

Scanning removable storage...
----------------------------------------

No blocked files found on G:
No Autorun.inf files found on G:
Sanitized mountpoint for 2ad1346b-a47d-11df-bb6b-00112f8f2aec
----------------------------------------
Desktop.ini found at G:\SLATKO\ contains interesting CLSID string
----------------------------------------
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}
----------------------------------------
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
No mimics found on drive G:
----------------------------------------


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for 5a76ebbc-a45c-11df-a9c9-806d6172696f
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for 5a76ebba-a45c-11df-a9c9-806d6172696f
No Desktop.ini files found on D:
----------------------------------------

No blocked files found on E:
No Autorun.inf files found on E:
No mountpoint found for E:
No mountpoint found for 5a76ebb9-a45c-11df-a9c9-806d6172696f
No Desktop.ini files found on E:
----------------------------------------

========================================
Initial scan finished!
========================================
========================================
Removed G:
========================================

Poslao: 10 Avg 2010 16:27
Idi na vrh
offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

- Pokrenuti USBNoRisk i sačekati da izvrši inicijalno skeniranje.

- Po završetku inicijalnog skeniranja priključiti USB memorijski uređaj.

- Kliknuti na karticu Script;

U beli okvir prozora iskopirati sledeći tekst:

{2ad1346b-a47d-11df-bb6b-00112f8f2aec}
folder_list: %DRIVE%

- Izvršiti komandu klikom na taster Run Script;



Po izvršenju komande USBNoRisk će se automatski vratiti na karticu Monitor;

- Uraditi desni klik unutar belog okvira prozora i odabrati opciju Save Log;

Otvoriće se prozor Notepad_a sa tekstom koji je potrebno iskopirati ovde u poruci.

Poslao: 10 Avg 2010 16:46
Idi na vrh
offline
  • Pridružio: 19 Dec 2008
  • Poruke: 89

USBNoRisk 2.5 (26 July 2009) by bobby

Started at 8/10/2010 4:45:19 PM

Searching for connected USB Mass storage...
----------------------------------------
========================================

Searching for other storage...
----------------------------------------
E: {5a76ebb9-a45c-11df-a9c9-806d6172696f}
D: {5a76ebba-a45c-11df-a9c9-806d6172696f}
C: {5a76ebbc-a45c-11df-a9c9-806d6172696f}
========================================


Scanning fixed storage...
----------------------------------------

No blocked files found on C:
No Autorun.inf files found on C:
No mountpoint found for C:
No mountpoint found for 5a76ebbc-a45c-11df-a9c9-806d6172696f
No Desktop.ini files found on C:
----------------------------------------

No blocked files found on D:
No Autorun.inf files found on D:
No mountpoint found for D:
No mountpoint found for 5a76ebba-a45c-11df-a9c9-806d6172696f
No Desktop.ini files found on D:
----------------------------------------

No blocked files found on E:
No Autorun.inf files found on E:
No mountpoint found for E:
No mountpoint found for 5a76ebb9-a45c-11df-a9c9-806d6172696f
No Desktop.ini files found on E:
----------------------------------------

========================================
Initial scan finished!
========================================


New device connected at 8/10/2010 4:45:48 PM

Scanning for connected USB mass storage...
----------------------------------------
G: {2ad1346b-a47d-11df-bb6b-00112f8f2aec}
Added G:
========================================

Scanning USB mass storage for files...
----------------------------------------
No blocked files found on G:
----------------------------------------
No Autorun.inf files found on G:
Sanitized mountpoint for 2ad1346b-a47d-11df-bb6b-00112f8f2aec
----------------------------------------

----------------------------------------
Desktop.ini found at G:\SLATKO\ contains interesting CLSID string
----------------------------------------
[.ShellClassInfo]
CLSID={645FF040-5081-101B-9F08-00AA002F954E}
----------------------------------------
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKCR\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},InfoTip = @%SystemRoot%\system32\SHELL32.dll,-22915
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},IntroText = @%SystemRoot%\system32\SHELL32.dll,-31748
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E},LocalizedString = @%SystemRoot%\system32\SHELL32.dll,-8964
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,@ = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Empty = %SystemRoot%\System32\shell32.dll,31
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\DefaultIcon,Full = %SystemRoot%\System32\shell32.dll,32
HKLM\Software\Classes\CLSID\{645FF040-5081-101B-9F08-00AA002F954E}\InProcServer32,@ = shell32.dll
----------------------------------------

No mimics found on drive G:
========================================


Processing script
----------------------------------------
2ad1346b-a47d-11df-bb6b-00112f8f2aec
Drive letter for GUID: G:
SectionStart = 0
SectionEnd = 1
----------------------------------------
Folder list for G:\:
----------------------------------------

--a--   16550   G:\MANUTD~1.PNG   G:\manutd gren.png
dr-hs   0   G:\SLATKO   G:\SLATKO
dr-hs   0   G:\RECYCLER   G:\RECYCLER
--a--   44298   G:\IP.JPG   G:\IP.JPG
d----   0   G:\WARCRA~1   G:\Warcraft III Reign of Chaos, The Frozen Throne + Update Patch War3TFT_121b_English +CD Key
--a--   157092970   G:\SSFORG~1.RAR   G:\SSForge_rapid4all.org_By_CyberTiger.rar
--a--   10703680   G:\NDP11S~1.EXE   G:\NDP1.1sp1-KB867460-X86.exe
d----   0   G:\100CANON   G:\100CANON

----------------------------------------

Poslao: 10 Avg 2010 20:03
Idi na vrh
offline
  • Pridružio: 02 Feb 2008
  • Poruke: 14018
  • Gde živiš: Nish

Korak 1

Aktiviraj prikaz skrivenih foldera i file-ova prateci uputstvo sa ovog linka:
-> http://www.mycity.rs/Uputstva/Kako-videti-skrivene-fajlove.html

Prikljuci USB memorijski uredjaj i sa njega obrisi sledece foldere:

- SLATKO
- RECYCLER



Korak 2

Postavi mi GMER log-ove (3 log-a).

Ukoliko si zaboravio, uputstvo za GMER se nalazi ovde:
-> http://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html


goran9888 (AMF Tim)

MyCity » Ambulanta -> Arhiva Ambulante » Avira nalazi na 1000virusa a nista ne brise.

Ko je trenutno na forumu
 

Ukupno su 1007 korisnika na forumu :: 46 registrovanih, 5 sakrivenih i 956 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 9k38, A.R.Chafee.Jr., Battlehammer, bigfoot, bojcistv, bokisha253, Boris BM, Brana01, BRATORIII, cinoeye, crnitrn, d bos, darionis, darkojbn, dejoglina, doktor1964, dushan, Džordžino, FOX, jackreacher011011, Još malo pa deda, Karla, laki_bb, Leonov, loon123, mercedesamg, Mi lao shu, mile23, milutin134, mnn2, nelsa, nikoli_ca, Parker, Pohovani_00, powSrb, repac, royst33, suton, Toper, Trpe Grozni, vandrej, vathra, vukovi, ZetaMan, Zoca, 1107