MyCity » Ambulanta -> Arhiva Ambulante » Nemogu da uklonim pup babylon tolbar

Nemogu da uklonim pup babylon tolbar

Napisano na dan: 16.8.2012
1

Nemogu da uklonim pup babylon tolbar
Sledeća strana Pagination

Idi na vrh

Poslao: 16 Avg 2012 21:44
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

Vec nekoliko dana skeniram sa supera antispyware ali nemogu ga ukloniti,
trazio sam ga u kontrol panelu ali nemam nikakav tolbar uopste a nemam ga ni u jednom web pretrazivacu gledao sam par puta ali nista preostalo mi je jedino da vi pogledate


.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Administrator at 21:33:50 on 2012-08-16
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1023.338 [GMT 2:00]
.
AV: AVG Anti-Virus Free Edition 2012 *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
AV: AntiVir Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost.exe -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\VMSnap3.exe
C:\WINDOWS\RTHDCPL.EXE
C:\program files\real\realplayer\update\realsched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MCShield\mcshieldrtm.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\Yahoo!\Widgets\YahooWidgets.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
svchost.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Documents and Settings\All Users\Application Data\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Maxthon3\Bin\Maxthon.exe
.
============== Pseudo HJT Report ===============
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
uSearch Page = [Link mogu videti samo ulogovani korisnici]
uDefault_Search_URL = [Link mogu videti samo ulogovani korisnici]
uWindow Title = Internet Explorer, optimized for Bing and MSN
uDefault_Page_URL = about:blank
mDefault_Page_URL = [Link mogu videti samo ulogovani korisnici]
mStart Page = [Link mogu videti samo ulogovani korisnici]
uSearchAssistant = [Link mogu videti samo ulogovani korisnici]
uSearchURL,(Default) = [Link mogu videti samo ulogovani korisnici]
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: FastestTubeBHO Class: {3e532ce8-c6d9-4a10-8ace-4348c96e8b6a} - c:\program files\fastesttube\2.0.0\WombatBHO.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
{e7df6bff-55a5-4eb7-a673-4ed3e9456d39}
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [MCShield Monitor] c:\program files\mcshield\mcshieldrtm.exe
uRun: [Google Update] "c:\documents and settings\administrator\local settings\application data\google\update\GoogleUpdate.exe" /c
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [VMSnap3] c:\windows\VMSnap3.exe
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot
mRun: [NeroFilterCheck] c:\windows\system32\NeroCheck.exe
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\admini~1\startm~1\programs\startup\yahoo!~1.lnk - c:\program files\yahoo!\widgets\YahooWidgets.exe
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: E&xport to Microsoft Excel
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - [Link mogu videti samo ulogovani korisnici]
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\Yinsthelper.dll
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} - [Link mogu videti samo ulogovani korisnici]
TCP: Interfaces\{3318030E-D9FE-4743-86EB-1FC99D49B8CB} : NameServer = 194.247.192.33,194.247.192.1
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - c:\program files\superantispyware\SASWINLO.DLL
Notify: AtiExtEvent - Ati2evxx.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - c:\program files\superantispyware\SASSEH.DLL
.
============= SERVICES / DRIVERS ===============
.
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2012-8-9 11608]
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2012-8-9 36000]
R1 SASDIFSV;SASDIFSV;c:\program files\superantispyware\sasdifsv.sys [2011-7-22 12880]
R1 SASKUTIL;SASKUTIL;c:\program files\superantispyware\SASKUTIL.SYS [2011-7-12 67664]
R2 !SASCORE;SAS Core Service;c:\program files\superantispyware\SASCore.exe [2011-8-12 116608]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2012-8-9 136360]
R2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2012-8-9 269480]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2012-8-9 66616]
R2 LBeepKE;Logitech Beep Suppression Driver;c:\windows\system32\drivers\LBeepKE.sys [2012-1-7 12184]
R2 MBAMService;MBAMService;c:\program files\malwarebytes' anti-malware\mbamservice.exe [2012-7-14 655944]
R2 Skype C2C Service;Skype C2C Service;c:\documents and settings\all users\application data\skype\toolbars\skype c2c service\c2c_service.exe [2012-7-5 3048136]
R3 gMouPS2;PS2 Scroll Mouse Device;c:\windows\system32\drivers\gMouPS2.sys [2012-2-29 17408]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-7-14 22344]
R3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [2009-12-1 34384]
R3 vvftav303;vvftav303;c:\windows\system32\drivers\vvftav303.sys [2011-8-28 480128]
R3 ZSMC0303;A4 TECH PC Camera H;c:\windows\system32\drivers\usbVM303.sys [2011-8-28 1472768]
S0 DwProt;DrWeb Protection;c:\windows\system32\drivers\dwprot.sys --> c:\windows\system32\drivers\dwprot.sys [?]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2011-9-29 136176]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-7-13 160944]
S3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\system32\macromed\flash\FlashPlayerUpdateService.exe [2012-4-20 250056]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2011-8-28 1691480]
S3 DrvAgent32;DrvAgent32;c:\windows\system32\drivers\DrvAgent32.sys [2012-1-8 23456]
S3 gupdatem;Google Update Service (gupdatem);c:\program files\google\update\GoogleUpdate.exe [2011-9-29 136176]
S3 SetupNTGLM7X;SetupNTGLM7X;\??\e:\ntglm7x.sys --> e:\NTGLM7X.sys [?]
S3 WinRM;Windows Remote Management (WS-Management);c:\windows\system32\svchost.exe -k WINRM [2004-8-4 14336]
.
=============== Created Last 30 ================
.
2012-08-12 18:30:23 -------- d-----r- c:\program files\Skype
2012-08-11 12:03:30 -------- d-----w- c:\documents and settings\administrator\local settings\application data\PCHealth
2012-08-11 11:40:54 1172480 ----a-w- c:\windows\system32\SET140.tmp
2012-08-11 11:40:23 152576 ----a-w- c:\windows\system32\SET13C.tmp
2012-08-11 11:39:48 8462848 ----a-w- c:\windows\system32\SET138.tmp
2012-08-11 11:38:09 -------- d-----w- c:\windows\system32\winrm
2012-08-11 11:38:09 -------- d-----w- c:\windows\system32\GroupPolicy
2012-08-11 11:38:02 -------- dc-h--w- c:\windows\$968930Uinstall_KB968930$
2012-08-09 17:12:10 -------- d-----w- c:\documents and settings\administrator\application data\Avira
2012-08-09 16:55:12 66616 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2012-08-09 16:55:12 -------- d-----w- c:\program files\Avira
2012-08-09 16:47:05 -------- d-----w- c:\documents and settings\administrator\local settings\application data\WMTools Downloaded Files
2012-08-09 06:52:30 36000 ----a-w- c:\windows\system32\drivers\avkmgr.sys
2012-08-07 14:45:00 81984 ----a-w- c:\windows\system32\bdod.bin
2012-08-07 14:30:33 -------- d-----w- c:\documents and settings\all users\application data\BitDefender
2012-08-07 14:29:57 -------- d-----w- c:\program files\common files\BitDefender
2012-08-04 11:15:41 -------- d-----w- c:\program files\VS Revo Group
2012-07-27 20:12:56 -------- d-----w- c:\documents and settings\administrator\local settings\application data\gfie
2012-07-23 11:44:15 -------- d-----w- c:\documents and settings\administrator\application data\MSNInstaller
2012-07-23 11:31:32 -------- d-----w- c:\documents and settings\administrator\application data\AVG
2012-07-23 11:23:49 -------- d-----w- c:\documents and settings\administrator\application data\AVG2012
2012-07-23 11:21:46 -------- d--h--w- C:\$AVG
2012-07-23 11:17:31 -------- d-----w- c:\documents and settings\all users\application data\MFAData
2012-07-23 11:00:47 -------- d-----w- c:\program files\MCShield
2012-07-23 11:00:47 -------- d-----w- c:\documents and settings\all users\application data\MCShield
2012-07-22 16:17:21 -------- d-----w- c:\documents and settings\administrator\application data\PriceGong
2012-07-22 16:17:00 558133 ----a-w- c:\windows\system32\sqlite3.dll
2012-07-22 16:16:41 -------- d-----w- c:\documents and settings\administrator\local settings\application data\CRE
2012-07-22 16:12:53 -------- d-----w- c:\documents and settings\administrator\application data\BluetoothDriverInstaller
2012-07-22 16:06:50 -------- d-----w- c:\documents and settings\administrator\local settings\application data\Yahoo
.
==================== Find3M ====================
.
2012-08-14 20:59:25 70344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-08-14 20:59:25 426184 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-08-09 18:28:19 23624 ----a-w- c:\windows\system32\drivers\hitmanpro35.sys
2012-07-22 18:45:36 12872 ----a-w- c:\windows\system32\bootdelete.exe
2012-07-03 11:46:44 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-06-13 13:19:59 1866112 ----a-w- c:\windows\system32\win32k.sys
2012-06-05 15:50:25 1372672 ------w- c:\windows\system32\msxml6.dll
2012-06-02 13:19:44 22040 ----a-w- c:\windows\system32\wucltui.dll.mui
2012-06-02 13:19:38 219160 ----a-w- c:\windows\system32\wuaucpl.cpl
2012-06-02 13:19:38 15384 ----a-w- c:\windows\system32\wuaucpl.cpl.mui
2012-06-02 13:19:34 15384 ----a-w- c:\windows\system32\wuapi.dll.mui
2012-06-02 13:19:30 17944 ----a-w- c:\windows\system32\wuaueng.dll.mui
2012-05-31 15:24:14 6126736 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
2012-05-31 13:22:09 599040 ----a-w- c:\windows\system32\crypt32.dll
2012-05-25 16:06:00 1706640 ----a-w- c:\windows\RtlExUpd.dll
.
============= FINISH: 21:34:37.18 ===============

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]



Poslao: 16 Avg 2012 22:24
Idi na vrh
rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Preuzmi program OTL sa donjeg linka na Desktop:

download link



Dvoklikom pokreni OTL;
klikni Run Scan;
po zavrsetku skeniranja, izvestaj (koji ce biti automatski sacuvan na Desktop-u kao OTL.Txt) ce se otvoriti u Notepad-u.

Prilozi izvestaj OTL.txt uz poruku koriscenjem opcije Prikaci fajl.



Poslao: 16 Avg 2012 22:41
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

[Link mogu videti samo ulogovani korisnici]

Poslao: 16 Avg 2012 23:07
Idi na vrh
rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Ponovo pokreni program OTL dvoklikom na ikonicu;

U beli okvir prozora gde piše Custom Scans/Fixes iskopirati sledeći tekst:

:OTL
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=109217&babsrc=SP_ss&mntrId=d84bfe66000000000000001d92472bc2
IE - HKCU\..\SearchScopes\{1CB20BF0-BBAE-40A7-93F4-6435FF3D0411}: "URL" = http://www.crawler.com/search/dispatcher.aspx?tp=bs&qkw={searchTerms}&tbid=60747
IE - HKCU\..\SearchScopes\{21AB021F-C99C-43E9-8DAE-7D1F16278EF4}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=AVR-3&o=APN10401&src=crm&q={searchTerms}&locale=&apn_ptnrs=^ABZ&apn_dtid=^YYYYYY^YY^RS&apn_uid=cd2f9c49-69da-4816-b967-05fdef4eb927&apn_sauid=CE820758-DC1F-42EC-96B9-ADBCC0B1DD67
IE - HKCU\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={E9314FEF-CF42-4CE7-BFD5-D4463DEFF3CF}&mid=9df29e52183e47d1b995d154d4a3c231-09af4c059e9480f8ebac0c0bc36da91f75c0867a&lang=sr&ds=AVG&pr=fr&d=2012-07-23 13:22:33&v=11.0.0.10&sap=dsp&q={searchTerms}
IE - HKCU\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3205709
IE - HKCU\..\SearchScopes\{D3F83BF1-CAA4-4B09-ACA3-3387B96393F2}: "URL" = http://search.softonic.com/MON00006/tb_v1?q={searchTerms}&SearchSource=4&cc=&r=875
FF - prefs.js..browser.search.defaultengine: "Ask.com"
FF - prefs.js..browser.search.defaultenginename: "Ask.com"
FF - prefs.js..browser.search.defaultthis.engineName: "uTorrentBar Customized Web Search"
FF - prefs.js..browser.search.defaulturl: "http://search.conduit.com/ResultsExt.aspx?ctid=CT2786678&SearchSource=3&q={searchTerms}"
FF - prefs.js..browser.search.order.1: "Ask.com"
FF - prefs.js..browser.search.selectedEngine: "Ask.com"
FF - prefs.js..browser.startup.homepage: "http://search.avira.com/?l=dis&o=APN10401&gct=hp&dc=EU&locale=en_RS"
FF - prefs.js..keyword.URL: "http://websearch.ask.com/redirect?client=ff&src=kw&tb=AVR-3&o=APN10401&locale=en_RS&apn_uid=cd2f9c49-69da-4816-b967-05fdef4eb927&apn_ptnrs=%5EABZ&apn_sauid=CE820758-DC1F-42EC-96B9-ADBCC0B1DD67&apn_dtid=%5EYYYYYY%5EYY%5ERS&&q="
FF - prefs.js..browser.search.selectedEngine: "Search the web (Softonic)"
[2012/07/22 18:16:40 | 000,000,000 | ---D | M] (BrotherSoft Extreme3 Community Toolbar) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\extensions\{62d40876-df18-411f-9d34-a9dd7a197bc5}
[2012/05/20 13:11:38 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2012/07/07 09:19:04 | 000,000,000 | ---D | M] (softonic.com) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\extensions\ffxtlbra@softonic.com
[2012/03/14 23:25:23 | 000,000,000 | ---D | M] (TheBflix) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\extensions\info@bflix.info
[2012/07/12 20:57:48 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\extensions\staged
[2012/08/09 17:48:19 | 000,002,344 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\searchplugins\askcom.xml
[2011/12/14 09:14:37 | 000,003,741 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\searchplugins\avg-secure-search.xml
[2010/04/12 15:01:54 | 000,002,476 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\searchplugins\BearShareWebSearch.xml
[2012/01/11 12:53:08 | 000,000,925 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\searchplugins\conduit.xml
[2012/07/04 14:20:51 | 000,002,519 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\searchplugins\Search_Results.xml
[2012/07/12 20:57:30 | 000,002,060 | ---- | M] () -- C:\Documents and Settings\Administrator\Application Data\Mozilla\Firefox\Profiles\5bzqvh71.default\searchplugins\softonic.xml
CHR - homepage: http://search.avira.com/?l=dis&o=APN10401&gct=hp&dc=EU&locale=en_RS
CHR - default_search_provider: Ask (Enabled)
CHR - default_search_provider: search_url = http://websearch.ask.com/redirect?client=cr&src=kw&tb=AVR-3&o=APN10401&locale=en_RS&apn_uid=cd2f9c49-69da-4816-b967-05fdef4eb927&apn_ptnrs=%5EABZ&apn_sauid=CE820758-DC1F-42EC-96B9-ADBCC0B1DD67&apn_dtid=%5EYYYYYY%5EYY%5ERS&q={searchTerms}
CHR - default_search_provider: suggest_url = http://ss.websearch.ask.com/query?qsrc=2922&li=ff&sstype=prefix&q={searchTerms}
CHR - homepage: http://search.avira.com/?l=dis&o=APN10401&gct=hp&dc=EU&locale=en_RS
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No CLSID value found.
@Alternate Data Stream - 134 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:CB0AACC9
@Alternate Data Stream - 127 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:0B4227B4
@Alternate Data Stream - 121 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:DBC416F8
@Alternate Data Stream - 104 bytes -> C:\Documents and Settings\All Users\Application Data\TEMP:FC1216D7

:files
C:\Documents and Settings\Administrator\Local Settings\Application Data\5b227151\@
ipconfig /flushdns /c

:commands
[CREATERESTOREPOINT]
[emptytemp]


Klikni taster Run Fix;


Log koji dobiješ iskopiraj ovde u poruci.

Poslao: 16 Avg 2012 23:18
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

[Link mogu videti samo ulogovani korisnici]

Poslao: 16 Avg 2012 23:23
Idi na vrh
rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Ima li ga sada, ako ima u kom browseru?

Poslao: 17 Avg 2012 10:18
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

Sve sam pregledao koliko ja to umem ali ga opet nigde nevidim a skenirao sam sa supera antispyware i opet ga prijavljuje GUZ - Glavom U Zid
Evo izvestaj od supera antispywara :
[Link mogu videti samo ulogovani korisnici]

Poslao: 17 Avg 2012 11:04
Idi na vrh
rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Ma ostavi se Supera antispywara, to sto on prijavljuje nema veze sa malware-om.
Ti ustvari nemas nikakvih problema.

Evo jos ovo da odradimo.

Preuzmi "Xplode"-ov AdwCleaner i sacuvaj ga na Desktop
Dvoklikom pokreni program i klikni na dugme [Search] .
Kada program zavrsi analizu otvorice notepad (AdwCleaner[R1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"
Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[R1].txt

Poslao: 17 Avg 2012 11:13
Idi na vrh
offline
  • Dalibor
  • Pridružio: 03 Feb 2011
  • Poruke: 447
  • Gde živiš: Nemačka

Evo izvestaj :
[Link mogu videti samo ulogovani korisnici]

Poslao: 17 Avg 2012 12:02
Idi na vrh
rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Ponovo pokreni AdwCleaner
Klikni na dugme [Delete] i pricekaj da program zavrsi.
Program ce zatvoriti sve aktivne programe i izbaciti prozor sa tim upozorenjem. Klikni Ok kao potvrdu.
Na sledeca dva prozora koja se otvore (Informations i Restart required ) klikni Ok
Racunar ce se restartovati a potom otvoriti notepad (C:\AdwCleaner[S1].txt) sa izvestajem.
Sacuvaj taj notepad na Desktop i okaci ga uz poruku koristeci opciju "Prikaci fajl"
Napomena: Izvestaj ce takodje biti sacuvan na C:\AdwCleaner[S1].txt




Stanje?

MyCity » Ambulanta -> Arhiva Ambulante » Nemogu da uklonim pup babylon tolbar

Ko je trenutno na forumu
 

Ukupno su 1074 korisnika na forumu :: 84 registrovanih, 8 sakrivenih i 982 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 13297 - dana 20 Jan 2026 17:42

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 04bokibole, advokat84, Anunakiii, Aristotle2002, Avalon015, bankulen, BB, Betta, bokicacar, bpop, bufanje, cavatina, darionis, DeerHunter, Deki Duga Devetka, Desmond, Despot Đurađ, Despot1, Dimitrije Paunovic, dmarx1, DonRumataEstorski, Duk011, dusanobr, Dzigy, Electron, Filip1, FOX, igorkozar83, Istman, Jan, Jelly4183, Jeremiah, joca83, Kajzer Soze, Kaponi, Kriglord, Kruger, Kubovac, Lelemood, Lucije Kvint, Major91, Malahit, markolopin, mačković, mercedesamg, miki kv, mikrimaus, milenko crazy north, Miler88, Milo97, Milometer, mnn2, moldway, mrav pesadinac, nikolapetkovic, Orc, pablojepao, Panter, Pekman, Podljub, Potkozarje, Povratak1912, raptorsi, repac, royst33, sasa76, Seeker, sony771, Srky Boy, ss10, stegonosa, tamno.nebo, Tihi86, Topaz9, Uros Cuore Sportivo, vathra, virked, Vojkan Petrovic, vukajlo71, vuksa72, Yugol33, zivojin32, Zorge, Žoržo