Pomoc oko loga

1

Pomoc oko loga

offline
  • Pridružio: 25 Apr 2006
  • Poruke: 46

Napisano: 15 Maj 2009 12:01

Nakon restarta kompa izlazi mi ikonica koja trazi instalacioni cd broj 2 za windows




Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:56:04, on 15.5.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclIrSrv.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Program Files\Mozilla Firefox 3.1 Beta 2\firefox.exe
C:\Documents and Settings\xp pro\Desktop\New Folder\TR3.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = download3000.com/index.php?start=home
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: EpsonToolBandKicker Class - {E99421FB-68DD-40F0-B4AC-B7027CAE2F1A} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O3 - Toolbar: EPSON Web-To-Page - {EE5D279F-081B-4404-994D-C6B60AAEBA6D} - C:\Program Files\EPSON\EPSON Web-To-Page\EPSON Web-To-Page.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\pchealth\helpctr\Binaries\MSCONFIG.EXE /auto
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download by YouTube Robot - res://C:\Program Files\YouTubeRobot\RobotExt.ocx/LINK.HTM
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {858B4F85-E945-4F0C-AF65-059E0AD9EEC0} (IntraLaunch.MainControl) - file:///E:/P%20R%20O%20G%20R%20A%20M%20I/HACKERS.MATRIX-JGTiSO/Interface/IntraLaunch.CAB
O17 - HKLM\System\CCS\Services\Tcpip\..\{8AD8E4E2-6BD0-4E03-BE2A-4C46E9C6CA27}: NameServer = 89.216.45.193
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\Skype4COM.dll
O21 - SSODL: lpegfdQJUUah - {24EFF327-8E45-598D-C495-C3FE5C0DFC65} - (no file)
O23 - Service: BlueSoleil Hid Service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft - C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe (file missing)
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Start BT in service - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe

--
End of file - 5801 bytes

Dopuna: 15 Maj 2009 12:03

Inace imam problema sa Eset smart security 4 koji mi prijavljuje 5 virusa u exploreru i trash ikonici

Dopuna: 15 Maj 2009 12:17

To je ta j problem

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

OK ... Pokreni Nod i kopiraj mi log pod stavkom detected threats kao na slici



Da vidim sa cim imamo posla

offline
  • Pridružio: 25 Apr 2006
  • Poruke: 46

15.5.2009 14:45:43 Startup scanner file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 14:45:41 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 14:45:41 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 14:45:41 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 14:45:40 Startup scanner file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 14:45:40 Startup scanner file C:\WINDOWS\Explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 12:01:16 Startup scanner file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 12:01:15 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 12:01:14 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 12:01:14 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 12:01:14 Startup scanner file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 12:01:13 Startup scanner file C:\WINDOWS\Explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 10:43:17 Startup scanner file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 10:43:16 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 10:43:16 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 10:43:16 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 10:43:16 Startup scanner file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 10:43:15 Startup scanner file C:\WINDOWS\Explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
15.5.2009 10:19:57 Startup scanner file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:56 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:56 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:56 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:55 Startup scanner file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:53 Startup scanner file C:\WINDOWS\system32\Winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:52 Startup scanner file C:\WINDOWS\Explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:48 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:45 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 10:19:44 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:28 Startup scanner file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:27 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:26 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:26 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:26 Startup scanner file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:23 Startup scanner file C:\WINDOWS\system32\Winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:23 Startup scanner file C:\WINDOWS\Explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:18 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:13 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
15.5.2009 8:02:11 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning
14.5.2009 17:05:04 Startup scanner file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
14.5.2009 17:05:03 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
14.5.2009 17:05:03 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
14.5.2009 17:05:03 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
14.5.2009 17:05:03 Startup scanner file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
14.5.2009 17:05:02 Startup scanner file C:\WINDOWS\Explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
13.5.2009 23:44:11 Startup scanner file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
13.5.2009 23:44:07 Startup scanner file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
13.5.2009 23:44:06 Startup scanner file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
13.5.2009 23:44:06 Startup scanner file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
13.5.2009 23:44:06 Startup scanner file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
13.5.2009 23:44:05 Startup scanner file C:\WINDOWS\Explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro
13.5.2009 23:42:50 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:50 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:50 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:50 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:50 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:45 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:45 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:45 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:45 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:45 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:40 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:40 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:40 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:40 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:40 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:35 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:35 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:35 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:35 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:35 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:29 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:29 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:29 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:29 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:29 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:24 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:24 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:24 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:24 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:24 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:18 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:18 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:18 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:18 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:18 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:13 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:13 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:12 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:12 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:12 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:07 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:07 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:07 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:07 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:07 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:01 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:01 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:01 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:01 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:42:01 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:56 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:56 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:56 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:56 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:56 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:51 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:51 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:50 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:50 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:50 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:45 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:45 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:45 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:45 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:45 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:40 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\NETWORK SERVICE Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\svchost.exe.
13.5.2009 23:41:37 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:37 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:37 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:37 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:37 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:31 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:31 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:31 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:31 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:31 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:26 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:26 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:26 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:26 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:26 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:21 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:19 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:19 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:19 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:19 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:19 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:19 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:18 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:18 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:18 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:13 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\Explorer.EXE Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:12 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:11 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:41:07 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:07 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:07 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:07 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:07 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:02 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:02 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:02 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:02 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:41:02 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:56 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:56 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:56 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:56 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:56 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:51 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:51 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:51 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:51 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:51 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:46 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:46 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:46 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:46 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:46 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:41 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:40:40 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:40 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:40 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:40 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:40 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:40 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:40:40 Real-time file system protection file C:\windows\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe.
13.5.2009 23:40:40 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning XP-DC4B5E24BF36\xp pro Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\msiexec.exe.
13.5.2009 23:40:39 Real-time file system protection file C:\windows\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe.
13.5.2009 23:40:35 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:35 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:35 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:35 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:35 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:30 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:30 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:30 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:30 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:30 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:25 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:25 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:25 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:25 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:25 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:20 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:20 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:20 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:20 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:20 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:14 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:14 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:14 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:14 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:14 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:09 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:09 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:09 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:09 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:09 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:04 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:04 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:04 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:04 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:40:04 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:59 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:59 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:59 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:59 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:59 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:53 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:53 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:53 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:53 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:53 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:47 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:47 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:47 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:47 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:47 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:42 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:42 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:42 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:42 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:41 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:36 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:36 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:36 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:36 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:36 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:30 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:30 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:30 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:30 Real-time file system protection file C:\WINDOWS\system32\lsass.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:30 Real-time file system protection file C:\WINDOWS\system32\svchost.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:25 Real-time file system protection file C:\WINDOWS\explorer.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:25 Real-time file system protection file C:\WINDOWS\system32\winlogon.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:24 Real-time file system protection file C:\WINDOWS\system32\services.exe Win32/TrojanProxy.Agent.NCI virus error while cleaning NT AUTHORITY\SYSTEM Event occurred during an attempt to run the file by the application: C:\WINDOWS\system32\winlogon.exe.
13.5.2009 23:39:24 Real-time file

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Arrow Jel imas pri ruci instalacioni disk od sistema?

Arrow * Pokreni ESET Smart Security/ESET NOD32 na sledeci nacin :
Start>All Programs>ESET>ESET Smart Security ili pak ESET NOD32 Antivirus(ukoliko koristis samo Antivirus resenje).

* Kada ti se otvori glavni prozor programa, klikni na Setup opciju sa leve strane prozora;
* Izaberi Antivirus and antispyware opciju i klikni na Temporarily disable Antivirus and antispyware protection.
* Na sledece pitanje klikni Yes.

Napomena: Ne zaboravi da ukljuciš ovu opciju po završetku cišcenja.


Arrow Skini ComboFix sa jedne od sledecih adresa na Desktop:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Startuj ga i ne diraj prozor programa dok skenira. Kada te pita za instalaciju Recovery konzole prihvati.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.


Arrow Preuzmi gmer.zip sa ovog linka i sačuvaj na Desktopu.
Raspakuj ga u neki folder.

Dupli klik na gmer.exe za početak: Izaberi Rootkit/Malware Tab na vrhu.
Klikni na Scan.
Kada je skeniranje završeno, klik na Copy dugme ispod - ovo će sačuvati rezultate skeniranja u Clipboard.
Iskoristi opciju Paste u Notepad-u da bi to prebacio u tekst. Snimi taj tekst iz Notepada kao file1.txt.
Ponovi ovo isto sa Autostart Tab-om. Snimi taj tekst iz Notepada kao file2.txt.


Iskoristi opciju Prikači fajl ispod polja za pisanje poruke na forumu, i prikači nam ovde ta dva fajla koja smo malopre snimili.

offline
  • Pridružio: 25 Apr 2006
  • Poruke: 46

Imam servis pack 2 ali ovaj sto je instaliran nije kod mene.

Log ComboFixa

ComboFix 09-05-14.07 - xp pro 15.05.2009 17:45.10 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.2046.1456 [GMT 2:00]
Running from: c:\documents and settings\xp pro\Desktop\ComboFix.exe
AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\drivers\RKHit.sys

.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.

-------\Legacy_RKHIT


((((((((((((((((((((((((( Files Created from 2009-04-15 to 2009-05-15 )))))))))))))))))))))))))))))))
.

2009-05-14 13:29 . 2009-05-14 13:29 -------- d-----w C:\vcs5BGEffects
2009-05-14 13:24 . 2009-05-14 13:26 323584 ----a-w c:\windows\system32\AUDIOGENIE2.DLL
2009-05-14 13:23 . 2009-05-14 13:23 -------- d-----w c:\windows\Replay Media Catcher
2009-05-14 13:23 . 2009-05-14 14:58 -------- d-----w c:\program files\Replay Media Catcher
2009-05-13 21:37 . 2009-05-13 21:37 -------- d-----w c:\documents and settings\xp pro\Application Data\ESET
2009-05-04 16:52 . 2009-05-04 12:13 15688 ----a-w c:\windows\system32\lsdelete.exe
2009-05-04 12:13 . 2009-05-04 12:12 64160 ----a-w c:\windows\system32\drivers\Lbd.sys
2009-05-04 12:10 . 2009-05-04 12:10 -------- dc-h--w c:\documents and settings\All Users\Application Data\{83C91755-2546-441D-AC40-9A6B4B860800}
2009-05-04 12:09 . 2009-05-04 12:09 -------- d-----w c:\program files\Lavasoft
2009-04-29 11:26 . 2009-04-29 11:26 -------- d-----w c:\program files\Common Files\DirectX
2009-04-28 16:35 . 2009-05-12 17:48 -------- d-----w c:\program files\Ubisoft
2009-04-28 16:35 . 2009-04-28 16:35 -------- d-----w c:\documents and settings\All Users\Application Data\Ubisoft
2009-04-27 12:34 . 2009-04-27 12:34 -------- d-----w c:\documents and settings\xp pro\Application Data\Malwarebytes
2009-04-27 12:34 . 2009-04-27 12:34 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-04-27 12:31 . 2009-04-27 12:31 -------- d-----w c:\documents and settings\All Users\Application Data\Malwarebytes
2009-04-27 11:34 . 2009-05-04 12:09 -------- d-----w c:\documents and settings\All Users\Application Data\Lavasoft
2009-04-27 08:07 . 2009-04-27 08:07 17408 ----a-w C:\psapi.dll
2009-04-27 07:49 . 2009-04-27 07:49 29170931 ----a-w c:\windows\system32\xa224354343.exe
2009-04-27 07:49 . 2009-04-27 07:49 29170931 ----a-w c:\windows\system32\xa224352843.exe
2009-04-24 13:19 . 2009-04-24 13:19 -------- d-----w c:\documents and settings\All Users\Application Data\Ashampoo
2009-04-19 22:28 . 2009-05-11 06:47 -------- d-----w c:\program files\Registry Clean Expert
2009-04-19 20:41 . 2009-05-14 15:00 -------- d-----w c:\program files\ESET
2009-04-19 20:41 . 2009-05-15 12:51 -------- d-----w c:\documents and settings\All Users\Application Data\ESET
2009-04-18 17:39 . 2009-04-18 17:39 -------- d-----w c:\program files\Gekko Mahjongg (Xmas edition)
2009-04-17 11:56 . 2009-04-17 11:56 -------- d-----w c:\program files\Xvid
2009-04-17 11:56 . 2009-04-17 11:56 -------- d-----w c:\program files\FDRLab
2009-04-17 11:55 . 2009-04-17 11:55 -------- d-----w c:\program files\YouTube Downloader
2009-04-16 21:38 . 2009-04-16 21:38 -------- d-----w c:\program files\YouTubeRobot
2009-04-16 14:23 . 2009-04-16 14:23 -------- d-----w c:\documents and settings\All Users\Application Data\Sandlot Games
2009-04-16 04:20 . 2009-04-16 04:20 -------- d-----w c:\documents and settings\xp pro\Application Data\Zylom
2009-04-16 04:20 . 2005-08-03 10:48 389120 ----a-w c:\windows\Adventure Inlay.scr
2009-04-16 04:20 . 2009-04-16 04:20 -------- d-----w c:\documents and settings\All Users\Application Data\Zylom

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-15 06:37 . 2009-01-09 11:26 -------- d-----w c:\program files\Mozilla Firefox 3.1 Beta 2
2009-05-13 15:35 . 2009-04-09 20:03 -------- d-----w c:\program files\Common Files\EZB Systems
2009-05-13 15:35 . 2008-10-05 11:13 -------- d-----w c:\program files\UltraISO
2009-05-12 18:46 . 2008-07-11 13:33 43 ----a-w c:\windows\popcinfo.dat
2009-05-10 16:22 . 2008-07-18 11:04 -------- d-----w c:\program files\Puzzle Express
2009-05-05 21:56 . 2009-02-08 19:40 -------- d-----w c:\program files\Perfect Uninstaller
2009-04-24 22:20 . 2009-01-09 19:41 -------- d-----w c:\program files\Luxor 4 - Quest for the Afterlife
2009-04-23 13:52 . 2009-01-21 11:36 -------- d-----w c:\program files\The KMPlayer
2009-04-19 22:38 . 2008-07-07 13:35 -------- d--h--w c:\program files\InstallShield Installation Information
2009-04-16 15:47 . 2008-08-01 20:19 -------- d-----w c:\program files\Empire Interactive
2009-04-09 20:30 . 2009-04-09 20:30 716272 ----a-w c:\windows\system32\drivers\sptd.sys
2009-04-06 13:32 . 2009-03-26 15:49 38496 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-04-06 13:32 . 2009-03-26 15:49 15504 ----a-w c:\windows\system32\drivers\mbam.sys
2009-04-04 23:58 . 2009-02-02 22:15 -------- d-----w c:\program files\Alawar
2009-03-26 09:19 . 2008-11-05 09:17 -------- d-----w c:\program files\Spybot - Search & Destroy
2009-03-25 21:30 . 2009-02-28 21:15 -------- d-----w c:\program files\BFDaily
2009-03-22 16:13 . 2008-07-10 20:25 -------- d-----w c:\program files\uTorrent
2009-03-21 01:24 . 2009-03-21 01:24 107888 ----a-w c:\windows\system32\CmdLineExt.dll
2009-03-21 01:23 . 2008-07-11 13:30 -------- d-----w c:\program files\Mahjong Medley
2007-07-26 19:00 . 2008-07-07 13:51 23800756 ----a-w c:\program files\Burning Studio 7.1.0.exe
.

------- Sigcheck -------

[-] 2004-08-04 00:56 17408 B35F4F2B059F1A36FC393A55CA15FD86 c:\windows\system32\svchost.exe

[7] 2004-08-03 23:14 359040 9F4B36614A0FC234525BA224957DE55C c:\windows\system32\dllcache\tcpip.sys
[-] 2004-08-03 23:14 359040 27A5959C94EE173A063CA06BD14F021A c:\windows\system32\drivers\tcpip.sys

[-] 2004-08-04 00:56 506368 9381C12D271113545126025F64106F17 c:\windows\system32\winlogon.exe

[-] 2004-08-04 00:56 1034752 EE5372FA8F010786D9B53A19C673CE63 c:\windows\explorer.exe

[-] 2004-08-04 00:56 110592 D1D1F99BB3C15807B0E578DF9A8B5260 c:\windows\system32\services.exe

[-] 2004-08-04 00:56 14848 FB0F915174118309E3BE189EBFA10AE9 c:\windows\system32\lsass.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2008-12-03 1205760]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-02-28 13516800]
"MSConfig"="c:\windows\pchealth\helpctr\Binaries\MSCONFIG.EXE" [2004-08-04 158208]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-02-06 2021400]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Lavasoft Ad-Aware Service]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Scheduler for OEM.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Scheduler for OEM.lnk
backup=c:\windows\pss\Scheduler for OEM.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\IVT Corporation\\BlueSoleil\\BlueSoleil.exe"=

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [4.5.2009 14:13 64160]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfwtdir.sys [6.2.2009 15:24 93336]
R2 {FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054};c:\program files\CyberLink\PowerDVD8\000.fcl [1.2.2008 17:24 41456]
R2 713xTVCard;SAA7130 TV Card;c:\windows\system32\drivers\SAA713x.sys [7.7.2008 15:45 279552]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [6.2.2009 14:23 727720]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\Lavasoft\Ad-Aware\AAWService.exe [18.1.2009 23:34 953168]
R2 Start BT in service;Start BT in service;c:\program files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe [30.9.2007 10:16 51816]
R2 WDMTVTuner;Universal WDM TV Tuner;c:\windows\system32\drivers\WDMTuner.sys [7.7.2008 15:45 25984]
S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\mbamswissarmy.sys [26.3.2009 17:49 38496]

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d05b4181-8b88-11dd-bfbf-0018c034940f}]
\Shell\AutoRun\command - I:\uvsqfgwd.cmd
\Shell\open\Command - I:\uvsqfgwd.cmd
.
Contents of the 'Scheduled Tasks' folder

2009-05-11 c:\windows\Tasks\Ad-Aware Update (Weekly).job
- c:\program files\Lavasoft\Ad-Aware\Ad-AwareAdmin.exe [2009-01-18 12:12]
.
- - - - ORPHANS REMOVED - - - -

SSODL-lpegfdQJUUah-{24EFF327-8E45-598D-C495-C3FE5C0DFC65} - (no file)


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.download3000.com/index.php?start=home
IE: Download by YouTube Robot - c:\program files\YouTubeRobot\RobotExt.ocx/LINK.HTM
IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
TCP: {8AD8E4E2-6BD0-4E03-BE2A-4C46E9C6CA27} = 89.216.45.193
DPF: {858B4F85-E945-4F0C-AF65-059E0AD9EEC0} - file:///E:/P%20R%20O%20G%20R%20A%20M%20I/HACKERS.MATRIX-JGTiSO/Interface/IntraLaunch.CAB
FF - ProfilePath - c:\documents and settings\xp pro\Application Data\Mozilla\Firefox\Profiles\ftjliinr.default\
FF - prefs.js: browser.search.selectedEngine - MyStart Search
FF - prefs.js: browser.startup.homepage - hxxp://www.google.rs/
FF - prefs.js: keyword.URL - hxxp://mystart.incredimail.com/?loc=ff_address_bar&search=
FF - plugin: c:\documents and settings\All Users\Application Data\Zylom\ZylomGamesPlayer\npzylomgamesplayer.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\Mozilla Firefox 3.1 Beta 2\plugins\npzylomgamesplayer.dll

---- FIREFOX POLICIES ----
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("media.enforce_same_site_origin", false);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("media.cache_size", 51200);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("media.ogg.enabled", true);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("media.wave.enabled", true);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("media.autoplay.enabled", true);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("browser.urlbar.autocomplete.enabled", true);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("capability.policy.mailnews.*.wholeText", "noAccess");
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("dom.storage.default_quota", 5120);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("network.http.prompt-temp-redirect", true);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("gestures.enable_single_finger_input", true);
c:\program files\Mozilla Firefox 3.1 Beta 2\greprefs\all.js - pref("network.tcp.sendbuffer", 131072);
c:\program files\Mozilla Firefox 3.1 Beta 2\defaults\pref\firefox.js - pref("extensions.blocklist.level", 2);
c:\program files\Mozilla Firefox 3.1 Beta 2\defaults\pref\firefox.js - pref("browser.urlbar.restrict.typed", "~");
c:\program files\Mozilla Firefox 3.1 Beta 2\defaults\pref\firefox.js - pref("browser.urlbar.default.behavior", 0);
c:\program files\Mozilla Firefox 3.1 Beta 2\defaults\pref\firefox.js - pref("browser.ssl_override_behavior", 2);
c:\program files\Mozilla Firefox 3.1 Beta 2\defaults\pref\firefox.js - pref("security.alternate_certificate_error_page", "certerror");
c:\program files\Mozilla Firefox 3.1 Beta 2\defaults\pref\firefox.js - pref("browser.privatebrowsing.autostart", false);
c:\program files\Mozilla Firefox 3.1 Beta 2\defaults\pref\firefox.js - pref("browser.privatebrowsing.dont_prompt_on_enter", false);
c:\program files\Mozilla Firefox 3.1 Beta 2\defaults\pref\firefox.js - pref("geo.wifi.uri", "https://www.google.com/loc/json");
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net
Rootkit scan 2009-05-15 17:48
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{FE4C91E7-22C2-4D0C-9F6B-82F1B7742054}]
"ImagePath"="\??\c:\program files\CyberLink\PowerDVD8\000.fcl"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1645522239-117609710-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{586A8F2C-7720-628A-1D0A-FFF4789DE6D3}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"iabgbmbjhdkkafdalk"=hex:6a,61,69,61,65,6c,62,65,6d,6b,66,6d,6c,6f,61,6c,70,6d,
6e,6c,00,00
"halkdppjcapfhpfh"=hex:6a,61,69,61,65,6c,62,65,6d,6b,66,6d,6c,6f,61,6c,70,6d,
6e,6c,00,00
"eadhfclbnd"=hex:61,61,00,7c
"eajfbpbcmp"=hex:61,61,00,7c

[HKEY_USERS\S-1-5-21-1645522239-117609710-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7A69BA63-A6A3-1087-816D-8AF284205586}*]
@Allowed: (Read) (RestrictedCode)
@Allowed: (Read) (RestrictedCode)
"nadfdmhlofdifbmcnjjpcgfhnpge"=hex:6a,61,67,61,66,6d,6b,6b,61,6a,64,69,70,6c,
6c,6f,6e,63,69,65,00,00
"majffmmmejphpbnmikpamopigk"=hex:6a,61,67,61,6a,6d,6f,6d,65,62,69,61,65,69,61,
61,64,6b,61,69,00,00
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3496)
c:\windows\system32\msi.dll
c:\windows\system32\browselc.dll
c:\progra~1\SPYBOT~1\SDHelper.dll
c:\program files\Common Files\Nero\SMC\NeroDigitalExt.dll
c:\program files\Common Files\Adobe\Acrobat\ActiveX\PDFShell.dll
c:\progra~1\MICROS~2\OFFICE11\MCPS.DLL
.
------------------------ Other Running Processes ------------------------
.
c:\program files\IVT Corporation\BlueSoleil\BTNtService.exe
c:\program files\Common Files\Nero\Nero BackItUp 4\NBService.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\PC Connectivity Solution\ServiceLayer.exe
c:\program files\PC Connectivity Solution\Transports\NclUSBSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclIrSrv.exe
c:\program files\PC Connectivity Solution\Transports\NclRSSrv.exe
c:\program files\Lavasoft\Ad-Aware\AAWTray.exe
c:\windows\system32\msiexec.exe
c:\windows\system32\msiexec.exe
c:\windows\system32\msiexec.exe
c:\windows\system32\msiexec.exe
c:\windows\system32\msiexec.exe
.
**************************************************************************
.
Completion time: 2009-05-15 17:51 - machine was rebooted
ComboFix-quarantined-files.txt 2009-05-15 15:50
ComboFix2.txt 2009-04-27 19:23

Pre-Run: 62.096.068.608 bytes free
Post-Run: 63.795.507.200 bytes free

228


Logovi Gmera



mycity.rs/must-login.png

mycity.rs/must-login.png


Inace mi ovaj Eset zadaje puno problema

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Uploaduj mi sledeci fajl

C:\WINDOWS\system32\svchost.exe

Preko sledece forme :

http://www.mycity.rs/ambulanta-upload.php

offline
  • Pridružio: 25 Apr 2006
  • Poruke: 46

Nestala ikonica brate, sta da radim? Znaci nema je ni hidden

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Kakva ikonica?

offline
  • Pridružio: 25 Apr 2006
  • Poruke: 46

Nigde ne mogu da nadjem folder windows

offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Preuzmi CatchMe.

Dvoklikom pokreni catchme.exe i pređi na Script tab.
U (beli) prozor programa iskopiraj tekst koji se nalazi unutar kod polja:

files:
C:\WINDOWS\system32\svchost.exe


Klikni na taster Run.

Kada se pojavi poruka sa obaveštenjem, kliknuti OK.


Po završetku procesa, na Desktopu će se nalaziti file catchme.zip.
Uploaduj ga preko sledeće forme: http://www.mycity.rs/ambulanta-upload.php

Ko je trenutno na forumu
 

Ukupno su 931 korisnika na forumu :: 51 registrovanih, 6 sakrivenih i 874 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: -[CoA]-, 357magnum, 8u47, _Rade, babaroga, Battlehammer, Bobrock1, bokisha253, Boris Bosiljčić, BORUTUS, Brana01, bufanje, cemix, Centauro, comi_pfc, cvrle312, darcaud, DENIRO, Dimitrise93, Djokislav, dragon986, Georgius, h8propaganda, hooraay, ILGromovnik, jackreacher011011, Kubovac, kybonacci, Lieutenant, Magistar78, mercedesamg, mile23, milenko crazy north, Milometer, MiroslavD, misa1xx, muaddib, novator, opt1, Panter, prle122, Ripanjac, stegonosa, vathra, VJ, Vladko, vladulns, Volkhov-M, wolverined4, zziko, 125