Pomoc oko virusa

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Napisano: 22 Jun 2009 22:01

za sada mi je javio da je pronasao jednu infekciju:

C:\Documents and Settings\Administrator\Local Settings\Application Data\Identities\{AB555B24-BD9E-40B2-BBCA-09EBD7C4A5C3}\Microsoft\Outlook Express\Inbox.dbx » DBX - is OK (internal scanning not performed)

C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail (de 4f3\Prijemno po 29\00294823-00000001.eml » MIME - is OK (internal scanning not performed)

C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml » MIME - is OK (internal scanning not performed)

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4XEVOXMJ\a5[1].exe - probably unknown NewHeur_PE virus - action selection postponed until scan completion

C:\Program Files\AC3Filter\uninstall.exe » NSIS - error reading archive

C:\Program Files\Ahead\Nero\Cdi\CDI_VCD.CFG » MIME - is OK (internal scanning not performed)

C:\Program Files\ffdshow\uninstall.exe » NSIS - bad archive

nije jos sve skenirao!!!!

Dopuna: 22 Jun 2009 22:20

prekiuo mi je skeniranje na 98% jer mi je javio da je pronasao ovo i nudi mi opciju: "set action to delate"


a do tada je pronasao ovako:

number of inflitrations: 10

C:\pagefile.sys - error opening
C:\Documents and Settings\Administrator\Local Settings\Application Data\Identities\{AB555B24-BD9E-40B2-BBCA-09EBD7C4A5C3}\Microsoft\Outlook Express\Inbox.dbx » DBX - is OK (internal scanning not performed)
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail (de 4f3\Prijemno po 29\00294823-00000001.eml » MIME - is OK (internal scanning not performed)
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml » MIME - is OK (internal scanning not performed)
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4XEVOXMJ\a5[1].exe - probably unknown NewHeur_PE virus - action selection postponed until scan completion
C:\Program Files\AC3Filter\uninstall.exe » NSIS - error reading archive
C:\Program Files\Ahead\Nero\Cdi\CDI_VCD.CFG » MIME - is OK (internal scanning not performed)
C:\Program Files\ffdshow\uninstall.exe » NSIS - bad archive
C:\Program Files\Microsoft Office\OFFICE11\1033\VIDEO.MHT » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\browser.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\comm.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\pippki.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\reporter.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\toolkit.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Webteh\BSPlayer\uninstall.EXE » NSIS - bad archive
C:\Program Files\Webteh\BSPlayer\doc\cmdline.txt » MIME - is OK (internal scanning not performed)
C:\Program Files\XviD\UninstXviD.exe » NSIS - bad archive
C:\Qoobox\Quarantine\C\WINDOWS\system32\dncyool32.sys.vir - a variant of Win32/TrojanClicker.VB.NFM trojan - cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\WINDOWS\system32\tpsaxyd.exe.vir - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP222\A0043748.old - a variant of Win32/TrojanClicker.VB.NFM trojan - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP223\A0043858.sys - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP223\A0043871.exe - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP223\A0043880.sys - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP223\A0043881.exe - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP224\A0043897.sys - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP224\A0043898.exe - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined



STA DA RADIM???

Dopuna: 22 Jun 2009 22:21

NISAM TI POSLAO ONO STO MI JE JAVIO KADA JE PREKINUO SKENIRANJE:

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4XEVOXMJ\a5[1].exe probably unknown NewHeur_PE virus No action

IMAM I OPCIJU "EXECUTE"

Dopuna: 22 Jun 2009 22:39

ja cu mu dati nalog da obrise ovaj file, a pronasa sam i karantin pa ti saljem logo:



21.6.2009 19:52:39 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:52:36 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:52:33 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:52:29 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:52:26 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:13:08 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:12:55 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:12:51 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:12:47 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 19:12:36 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
21.6.2009 14:10:53 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP222\A0043635.sys a variant of Win32/TrojanClicker.VB.NFM trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
21.6.2009 12:09:48 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP222\A0043574.old a variant of Win32/TrojanClicker.VB.NFM trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
21.6.2009 11:12:44 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP222\A0043544.exe Win32/Adware.Coolezweb application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 21:32:01 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP221\A0043520.sys a variant of Win32/TrojanClicker.VB.NFM trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 21:02:35 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP221\A0043501.exe a variant of Win32/Adware.Coolezweb.AK application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 19:32:07 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP221\A0043445.old a variant of Win32/TrojanClicker.VB.NFM trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 19:16:58 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041980.exe probably a variant of Win32/Adware.Coolezweb.AI application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 17:27:32 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041785.exe probably a variant of Win32/Adware.Coolezweb.AJ application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 15:30:35 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 15:30:25 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 15:29:58 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 15:29:44 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 15:28:26 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 15:27:50 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 15:26:36 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 13:03:50 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 13:03:46 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 13:03:42 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 13:03:18 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 13:02:32 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
20.6.2009 8:24:30 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041784.old a variant of Win32/TrojanClicker.VB.NHP trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 6:12:52 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041782.exe a variant of Win32/Adware.Coolezweb.AL application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 5:12:55 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041781.sys a variant of Win32/Adware.Coolezweb.AL application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 4:12:52 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041758.exe a variant of Win32/Adware.Coolezweb.AL application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 3:12:52 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041757.sys a variant of Win32/Adware.Coolezweb.AL application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 2:12:52 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041755.exe probably a variant of Win32/Adware.Coolezweb.AI application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 1:13:59 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041754.sys a variant of Win32/TrojanClicker.VB.NHP trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 0:12:53 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041741.exe a variant of Win32/Adware.Coolezweb.AL application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
20.6.2009 0:03:44 Real-time file system protection file C:\WINDOWS\system32\tpszxyd.sys Win32/Adware.Coolezweb application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\sopidkc.exe.
19.6.2009 23:51:54 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041740.sys a variant of Win32/Adware.Coolezweb.AL application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
19.6.2009 20:58:20 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041739.exe probably a variant of Win32/Adware.Coolezweb.AI application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
19.6.2009 17:27:14 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0041738.sys a variant of Win32/TrojanClicker.VB.NHP trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
19.6.2009 17:03:25 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0040745.exe probably a variant of Win32/Adware.Coolezweb.AI application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
19.6.2009 15:27:13 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0040744.sys probably a variant of Win32/Adware.Coolezweb.AI application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
19.6.2009 15:10:44 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0040742.exe probably a variant of Win32/Adware.Coolezweb.AI application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
19.6.2009 11:28:21 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0040741.sys a variant of Win32/TrojanClicker.VB.NFM trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
19.6.2009 9:53:49 HTTP filter file http://75.125.239.42/p0519/2.0/sor.bin?xs0506540750174_133_73_90_p0519sor_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:53:35 HTTP filter file http://174.133.73.90/p0519/2.0/sor.bin?xs050659620174_133_73_90_p0519sor_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:53:27 HTTP filter file http://174.133.73.90/p0519/2.0/sor.bin?xs050666739375_125_239_42_p0519so_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:52:57 HTTP filter file http://75.125.239.42/p0519/2.0/so.bin?xs050689976075_125_239_42_p0519so_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:52:13 HTTP filter file http://75.125.239.42/p0519/2.0/so.bin?xs0506839929174_133_34_178_p0612so_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:49:08 HTTP filter file http://174.133.34.178/p0612/2.0/so.bin?xs05063241674_55_52_170_p0508d_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:47:42 HTTP filter file http://74.55.52.170/p0508/2.0/d.bin?xs0506343600174_133_73_178_p0508d_bin a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:47:20 HTTP filter file http://174.133.73.178/p0508/2.0/d.bin?xs0506219462174_133_34_178_p0612d_bin a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:46:57 HTTP filter file http://174.133.34.178/p0612/2.0/d.bin?xs0506823301 a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:45:10 HTTP filter file http://74.55.52.170/p0508/2.0/w1.bin?842571 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:43:33 HTTP filter file http://174.133.72.250/p0508/2.0/w1.bin?655943 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:43:25 HTTP filter file http://75.125.239.42/p0519/2.0/w1.bin?108833 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:43:03 HTTP filter file http://174.133.73.90/p0519/2.0/w1.bin?402998 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:42:55 HTTP filter file http://74.55.52.170/p0508/2.0/w.bin?145280 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:42:32 HTTP filter file http://174.133.73.178/p0508/2.0/w.bin?547618 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:40:18 HTTP filter file http://174.133.34.178/p0612/2.0/w.bin?510737 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:39:49 HTTP filter file http://174.133.72.250/p0508/2.0/w.bin?604708 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:39:08 HTTP filter file http://75.125.239.42/p0519/2.0/w.bin?151049 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:38:42 HTTP filter file http://174.133.73.90/p0519/2.0/w.bin?100027 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
19.6.2009 9:37:47 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
19.6.2009 9:37:33 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
18.6.2009 21:55:22 Startup scanner file C:\WINDOWS\system32\dncyool32.sys a variant of Win32/TrojanClicker.VB.NFM trojan cleaned by deleting - quarantined
18.6.2009 21:54:16 Startup scanner file C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\18586f6700000 probably unknown NewHeur_PE virus
18.6.2009 17:32:42 Real-time file system protection file C:\WINDOWS\system32\sopidkc.exe Win32/Adware.Coolezweb application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE.
18.6.2009 17:32:41 Real-time file system protection file C:\WINDOWS\system32\tpsaxyd.exe Win32/Adware.Coolezweb application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE.
18.6.2009 17:28:58 Real-time file system protection file C:\WINDOWS\system32\wtukd32.exe Win32/Adware.Coolezweb application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\WINDOWS\system32\svchost.exe.
18.6.2009 16:46:19 HTTP filter file http://74.55.52.170/p0508/2.0/w.bin?321967 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:46:11 HTTP filter file http://174.133.73.178/p0508/2.0/w.bin?44127 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:46:02 HTTP filter file http://174.133.34.178/p0612/2.0/w.bin?490839 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:45:54 HTTP filter file http://174.133.72.250/p0508/2.0/w.bin?271194 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:45:15 HTTP filter file http://75.125.239.42/p0519/2.0/w.bin?562659 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:45:07 HTTP filter file http://174.133.73.90/p0519/2.0/w.bin?233415 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:44:23 HTTP filter file http://174.133.73.90/p0519/2.0/sor.bin?sy1312418174_133_73_178_p0508sor_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:44:12 HTTP filter file http://174.133.73.178/p0508/2.0/sor.bin?sy1504897174_133_73_178_p0508sor_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:44:01 HTTP filter file http://174.133.73.178/p0508/2.0/sor.bin?sy130097774_55_52_170_p0508so_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:43:49 HTTP filter file http://74.55.52.170/p0508/2.0/so.bin?sy143544174_133_73_90_p0519so_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:43:42 HTTP filter file http://174.133.73.90/p0519/2.0/so.bin?sy1828332174_133_34_178_p0612so_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:43:13 HTTP filter file http://174.133.34.178/p0612/2.0/so.bin?sy1588201174_133_73_178_p0508d_bin Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:42:49 Real-time file system protection file C:\WINDOWS\system32\dncyool32.sys a variant of Win32/TrojanClicker.VB.NFM trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\tpszxyd.sys.
18.6.2009 16:42:47 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
18.6.2009 16:42:43 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
18.6.2009 16:42:42 HTTP filter file http://174.133.73.90/p0519/2.0/w.bin?324280 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:42:41 HTTP filter file http://174.133.73.178/p0508/2.0/d.bin?sy110643275_125_239_42_p0519d_bin a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:42:35 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
18.6.2009 16:42:33 HTTP filter file http://75.125.239.42/p0519/2.0/d.bin?sy1316395174_133_73_178_p0508d_bin a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:42:33 HTTP filter file http://174.133.34.178/p0612/2.0/w.bin?10091 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:42:31 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
18.6.2009 16:42:26 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
18.6.2009 16:42:25 HTTP filter file http://174.133.73.178/p0508/2.0/d.bin?sy1666171 a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:42:24 HTTP filter file http://74.55.52.170/p0508/2.0/w.bin?422314 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:42:11 HTTP filter file http://174.133.72.250/p0508/2.0/w.bin?152917 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:42:02 HTTP filter file http://75.125.239.42/p0519/2.0/w.bin?334254 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:41:54 HTTP filter file http://174.133.73.178/p0508/2.0/w.bin?210017 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:41:52 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
18.6.2009 16:41:33 HTTP filter file http://174.133.73.90/p0519/2.0/w.bin?190566 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:41:32 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
18.6.2009 16:41:24 HTTP filter file http://174.133.72.250/p0508/2.0/w.bin?886710 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:41:05 HTTP filter file http://75.125.239.42/p0519/2.0/w.bin?52144 Win32/Adware.Coolezweb application connection terminated - quarantined NT AUTHORITY\SYSTEM
18.6.2009 16:40:46 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
17.6.2009 21:48:56 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP219\A0040725.exe probably a variant of Win32/Adware.Coolezweb.AI application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
17.6.2009 20:56:08 Real-time file system protection file C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP218\A0040673.old a variant of Win32/TrojanClicker.VB.NHP trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\svchost.exe.
17.6.2009 20:23:04 Real-time file system protection file C:\WINDOWS\system32\tpsaxyd.exe Win32/Adware.Coolezweb application cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred during an attempt to access the file by the application: C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE.
17.6.2009 19:23:28 Real-time file system protection file C:\WINDOWS\system32\dncyool32.sys a variant of Win32/TrojanClicker.VB.NFM trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a file modified by the application: C:\WINDOWS\system32\wtukd32.exe.
17.6.2009 19:23:28 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
17.6.2009 19:23:22 HTTP filter file http://174.133.73.90/p0519/2.0/d.bin?sy1771507174_133_73_178_p0508d_bin a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
17.6.2009 19:23:20 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
17.6.2009 19:23:16 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
17.6.2009 19:23:15 HTTP filter file http://174.133.73.178/p0508/2.0/d.bin?sy1231487174_133_72_250_p0508d_bin a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
17.6.2009 19:23:11 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
17.6.2009 19:23:08 HTTP filter file http://174.133.72.250/p0508/2.0/d.bin?sy1431530 a variant of Win32/TrojanClicker.VB.NFM trojan connection terminated - quarantined NT AUTHORITY\SYSTEM
17.6.2009 19:23:07 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
17.6.2009 19:22:28 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
17.6.2009 19:22:17 HTTP filter file http://www.so998s.com/xz/a1.exe multiple threats connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
17.6.2009 19:22:05 HTTP filter file http://www.so998s.com/xz/a1.exe Win32/Adware.Coolezweb application connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
16.6.2009 19:36:38 HTTP filter file http://74.55.52.170/p0508/2.0/w2.bin?326593 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:36:17 HTTP filter file http://174.133.73.178/p0508/2.0/w2.bin?221346 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:36:09 HTTP filter file http://174.133.34.178/p0612/2.0/w2.bin?869416 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:35:45 HTTP filter file http://174.133.72.250/p0508/2.0/w2.bin?354581 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:35:36 HTTP filter file http://75.125.239.42/p0519/2.0/w2.bin?380419 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:35:28 HTTP filter file http://174.133.73.90/p0519/2.0/w2.bin?745175 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:35:22 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
16.6.2009 19:35:18 HTTP filter file http://74.55.52.170/p0508/2.0/w1.bin?96685 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:35:17 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
16.6.2009 19:35:09 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
16.6.2009 19:35:08 HTTP filter file http://174.133.73.178/p0508/2.0/w1.bin?310279 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:35:04 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
16.6.2009 19:34:57 HTTP filter file http://174.133.34.178/p0612/2.0/w1.bin?418040 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:34:55 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
16.6.2009 19:34:39 HTTP filter file http://174.133.72.250/p0508/2.0/w1.bin?729782 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:34:28 HTTP filter file http://75.125.239.42/p0519/2.0/w1.bin?894342 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:34:19 HTTP filter file http://174.133.73.90/p0519/2.0/w1.bin?393638 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:34:06 HTTP filter file http://74.55.52.170/p0508/2.0/w.bin?96384 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:33:46 HTTP filter file http://www.so998s.com/xz/a1.exe Win32/Adware.Coolezweb application connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
16.6.2009 19:33:39 HTTP filter file http://174.133.73.178/p0508/2.0/w.bin?782326 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:33:19 HTTP filter file http://174.133.34.178/p0612/2.0/w.bin?35970 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:33:06 HTTP filter file http://174.133.72.250/p0508/2.0/w.bin?358063 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:32:25 HTTP filter file http://www.so998s.com/xz/a1.exe Win32/Adware.Coolezweb application connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
16.6.2009 19:32:19 HTTP filter file http://75.125.239.42/p0519/2.0/w.bin?131697 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:32:08 HTTP filter file http://174.133.73.90/p0519/2.0/w.bin?538254 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
16.6.2009 19:30:59 HTTP filter file http://www.so998s.com/xz/a1.exe Win32/Adware.Coolezweb application connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:11:20 HTTP filter file http://74.55.52.170/p0508/2.0/w2.bin?701353 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:11:11 HTTP filter file http://174.133.73.178/p0508/2.0/w2.bin?335706 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:11:03 HTTP filter file http://174.133.34.178/p0612/2.0/w2.bin?130961 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:10:55 HTTP filter file http://174.133.72.250/p0508/2.0/w2.bin?266085 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:10:46 HTTP filter file http://75.125.239.42/p0519/2.0/w2.bin?396231 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:10:38 HTTP filter file http://174.133.73.90/p0519/2.0/w2.bin?193162 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:10:29 HTTP filter file http://74.55.52.170/p0508/2.0/w1.bin?10361 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:10:21 HTTP filter file http://174.133.73.178/p0508/2.0/w1.bin?688665 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:10:13 HTTP filter file http://174.133.34.178/p0612/2.0/w1.bin?646410 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:10:05 HTTP filter file http://174.133.72.250/p0508/2.0/w1.bin?683608 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:09:56 HTTP filter file http://75.125.239.42/p0519/2.0/w1.bin?292420 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:09:45 HTTP filter file http://174.133.73.90/p0519/2.0/w1.bin?540563 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:09:36 HTTP filter file http://74.55.52.170/p0508/2.0/w.bin?210647 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:09:35 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:09:30 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:09:27 HTTP filter file http://174.133.73.178/p0508/2.0/w.bin?757184 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:09:26 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:09:19 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:09:18 HTTP filter file http://174.133.34.178/p0612/2.0/w.bin?800508 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:09:14 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:09:08 HTTP filter file http://174.133.72.250/p0508/2.0/w.bin?377670 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:09:00 HTTP filter file http://75.125.239.42/p0519/2.0/w.bin?714148 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:08:52 HTTP filter file http://174.133.73.90/p0519/2.0/w.bin?93265 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 21:08:46 HTTP filter file http://www.so998s.com/xz/a1.exe Win32/Adware.Coolezweb application connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:08:35 HTTP filter file http://www.so998s.com/xz/a1.exe Win32/Adware.Coolezweb application connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:08:24 HTTP filter file http://www.so998s.com/xz/a1.exe Win32/Adware.Coolezweb application connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:08:12 HTTP filter file http://www.so998s.com/xz/a1.exe Win32/Adware.Coolezweb application connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 21:07:47 Startup scanner file C:\WINDOWS\system32\sopidkc.exe a variant of Win32/Adware.Coolezweb.AK application cleaned by deleting - quarantined MEDIAMARKET\Administrator
15.6.2009 19:55:05 HTTP filter file http://74.55.52.170/p0508/2.0/w2.bin?550437 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:55:00 HTTP filter file http://174.133.73.178/p0508/2.0/w2.bin?257822 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:57 HTTP filter file http://174.133.73.178/p0508/2.0/w2.bin?306865 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:51 HTTP filter file http://174.133.34.178/p0612/2.0/w2.bin?810034 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:48 HTTP filter file http://174.133.34.178/p0612/2.0/w2.bin?742750 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:43 HTTP filter file http://74.55.52.170/p0508/2.0/w2.bin?703001 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:40 HTTP filter file http://174.133.72.250/p0508/2.0/w2.bin?391105 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:35 HTTP filter file http://75.125.239.42/p0519/2.0/w2.bin?801012 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:31 HTTP filter file http://75.125.239.42/p0519/2.0/w2.bin?885031 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:27 HTTP filter file http://174.133.72.250/p0508/2.0/w2.bin?198646 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:23 HTTP filter file http://174.133.73.90/p0519/2.0/w2.bin?634834 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:18 HTTP filter file http://174.133.73.90/p0519/2.0/w2.bin?785083 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:15 HTTP filter file http://74.55.52.170/p0508/2.0/w1.bin?654390 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:10 HTTP filter file http://174.133.73.178/p0508/2.0/w1.bin?400574 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:07 HTTP filter file http://174.133.73.178/p0508/2.0/w1.bin?326430 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:54:02 HTTP filter file http://174.133.34.178/p0612/2.0/w1.bin?477685 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:58 HTTP filter file http://174.133.34.178/p0612/2.0/w1.bin?76306 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:45 HTTP filter file http://74.55.52.170/p0508/2.0/w1.bin?433016 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:42 HTTP filter file http://174.133.72.250/p0508/2.0/w1.bin?736378 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:36 HTTP filter file http://75.125.239.42/p0519/2.0/w1.bin?186030 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:34 HTTP filter file http://75.125.239.42/p0519/2.0/w1.bin?791350 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:28 HTTP filter file http://174.133.72.250/p0508/2.0/w1.bin?680808 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:26 HTTP filter file http://174.133.73.90/p0519/2.0/w1.bin?738122 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:20 HTTP filter file http://174.133.73.90/p0519/2.0/w1.bin?36566 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:07 HTTP filter file http://74.55.52.170/p0508/2.0/w.bin?143305 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:53:04 HTTP filter file http://174.133.73.178/p0508/2.0/w.bin?417429 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:59 HTTP filter file http://174.133.73.178/p0508/2.0/w.bin?625114 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:55 HTTP filter file http://174.133.34.178/p0612/2.0/w.bin?563994 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:50 HTTP filter file http://174.133.34.178/p0612/2.0/w.bin?788690 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:46 HTTP filter file http://74.55.52.170/p0508/2.0/w.bin?635250 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:42 HTTP filter file http://174.133.72.250/p0508/2.0/w.bin?236195 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:38 HTTP filter file http://75.125.239.42/p0519/2.0/w.bin?305867 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:34 HTTP filter file http://75.125.239.42/p0519/2.0/w.bin?644708 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:30 HTTP filter file http://174.133.72.250/p0508/2.0/w.bin?119042 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:22 HTTP filter file http://174.133.73.90/p0519/2.0/w.bin?875998 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:52:21 HTTP filter file http://174.133.73.90/p0519/2.0/w.bin?159393 a variant of Win32/Adware.Coolezweb.AL application connection terminated - quarantined NT AUTHORITY\SYSTEM
15.6.2009 19:27:12 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 19:27:08 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 19:27:03 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 19:26:59 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
15.6.2009 19:26:54 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
14.6.2009 20:23:12 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
14.6.2009 20:23:07 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
14.6.2009 20:22:59 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
14.6.2009 20:22:54 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.
14.6.2009 20:22:49 HTTP filter file http://www.so998s.com/xz/a5.exe probably unknown NewHeur_PE virus connection terminated - quarantined MEDIAMARKET\Administrator Threat was detected upon access to web by the application: C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Thunder.exe.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Preuzmi program ATF Cleaner i sačuvaj ga na Desktop.

Štikliraj Select All i nakon toga klikni na Empty Selected.
Kada se pojavi poruka Done Cleaning, zatvori program.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

a ovo ti je izvjestaj skeniranja nakon sto sam mu dao nalog da obrise onaj fajl:

number of scanned objects: 130374
number of infected objects: 10
number of cleaned objects: 10



C:\pagefile.sys - error opening
C:\Documents and Settings\Administrator\Local Settings\Application Data\Identities\{AB555B24-BD9E-40B2-BBCA-09EBD7C4A5C3}\Microsoft\Outlook Express\Inbox.dbx » DBX - is OK (internal scanning not performed)
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows Live Mail\Hotmail (de 4f3\Prijemno po 29\00294823-00000001.eml » MIME - is OK (internal scanning not performed)
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows Live Mail\Sentinel\WLMailSearchSentinel.eml » MIME - is OK (internal scanning not performed)
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4XEVOXMJ\a5[1].exe - probably unknown NewHeur_PE virus - action selection postponed until scan completion
C:\Program Files\AC3Filter\uninstall.exe » NSIS - error reading archive
C:\Program Files\Ahead\Nero\Cdi\CDI_VCD.CFG » MIME - is OK (internal scanning not performed)
C:\Program Files\ffdshow\uninstall.exe » NSIS - bad archive
C:\Program Files\Microsoft Office\OFFICE11\1033\VIDEO.MHT » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\browser.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\comm.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\pippki.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\reporter.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Mozilla Firefox\chrome\toolkit.manifest » MIME - is OK (internal scanning not performed)
C:\Program Files\Webteh\BSPlayer\uninstall.EXE » NSIS - bad archive
C:\Program Files\Webteh\BSPlayer\doc\cmdline.txt » MIME - is OK (internal scanning not performed)
C:\Program Files\XviD\UninstXviD.exe » NSIS - bad archive
C:\Qoobox\Quarantine\C\WINDOWS\system32\dncyool32.sys.vir - a variant of Win32/TrojanClicker.VB.NFM trojan - cleaned by deleting - quarantined
C:\Qoobox\Quarantine\C\WINDOWS\system32\tpsaxyd.exe.vir - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP222\A0043748.old - a variant of Win32/TrojanClicker.VB.NFM trojan - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP223\A0043858.sys - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP223\A0043871.exe - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP223\A0043880.sys - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP223\A0043881.exe - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP224\A0043897.sys - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\System Volume Information\_restore{8B27E316-6429-4FEC-A757-B1AE8226A1FC}\RP224\A0043898.exe - Win32/Adware.Coolezweb application - cleaned by deleting - quarantined
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\4XEVOXMJ\a5[1].exe - probably unknown NewHeur_PE virus - deleted - quarantined





NADAM SE DA CE NAM POMOCI!!!!!!!

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uradi ono sto sam ti napisao u prethodnoh poruci pa se javi.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

EJJJJJJ

URADIO SAM ONO, STA SADA!!!!!!


NIJE VALJDA KRAJ NAPOKON!!!!1

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Sada drndaj komp par dana, pa ako ti Nod bude detektovao neki EXE fajl u IE Cache, javi se.

Potrebno je deinstalirati ComboFix:
klikni start (ili ), a zatim RUN.

Na Visti koristiti Start Search polje ukoliko Run nije dostupan.

U liniju za unos teksta ukucaj (iskopiraj) sledeće:

combofix /u

Primeti da postoji razmak između "ComboFix" i "/u".



a zatim klikni OK (ili pritisni Enter).

Sačekaj da se proces deinstalacije završi.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

ok! uradjeno


samo da ti javim da sam opet pokusao da otvorim "facebook" i nisam uspio opet mi je javio da je komp zarazen

javvja mi NA STRANICI " Microsoft Security Center
" ovako:

Microsoft Security Center



Alert : Your computer have been attacked by spyware or viruses!



Please download AntiSpyware to fix.



Download AntiSpyware Now



hvala svakako, a cujemo se mi jos imam neki osjecaja da ce mi NOD bas javiti to sto ti govoris POZZZ :-(

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Mozes li da postavis screenshot tog obavestenja?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

nema vise tog obavjestenja, nakon sto sam resetovao kom mogu da otvorim sve strane na sajtu sasvim normalno, pa intaj nesretni "facebook",

ako mi nod bude sta javljao ponovo cujemo se mi jos!!!!

veliko hvala i pozdrav!!!!