MyCity » Ambulanta -> Arhiva Ambulante » Trojan Horse Injector ise32.exe

Trojan Horse Injector ise32.exe

Napisano na dan: 8.9.2008
2

Trojan Horse Injector ise32.exe
Pagination Prethodna strana

Idi na vrh

Poslao: 08 Sep 2008 22:36
Idi na vrh
offline
  • Pridružio: 04 Avg 2008
  • Poruke: 37

Hvala puno na pomoci. Praticu stanje, i javiti ukoliko bude bilo problema.

Srdacan pozdrav!

Dopuna: 08 Sep 2008 22:36

I dalje postoji problem. AVG javlja da je flash jos uvek zarazen. Ne mogu da obrisem folder sa slikama koji je napravio problem. Naime, u njemu se nalazi jos jedan fajl koji je, izgleda, zarazen.

Poslao: 08 Sep 2008 22:49
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Ok...

Ovako ćemo: skini sa tog drive-a sve što ti treba (slike, npr.) i ne uključuj ga više - njega ćemo na kraju srediti.




Pokrenite Spybot S&D
Kliknite Mode stavku u meniju
Odaberite Advance Mode
Na traci levo kliknite na Tools
Kliknite na Resident
Destiklirajte Resident Tea-Timer
Zatvorite Spybot S&D
Restartujte kompjuter.
- Zatim skinuti file sa ovog linka na Desktop.
- Pokrenuti file dvoklikom i ispratiti uputstva.

Nemojte zaboraviti da ponovo ukljucite ove opcije kada zavrsimo ciscenje.



* Klikni desnim tasterom miša na AVG ikonicu ( ) u donjem, desnom uglu ekrana.
* Kada se pokrene AVG Control Center, dvoklikni na AVG Resident Shield komponentu.
* U prozoru koji se otvori, deštikliraj opciju Turn on AVG Resident Shield i klikni OK.

Napomena: Ne zaboravi da uključiš ovu opciju po završetku čišćenja.



Arrow Skini ComboFix sa jedne od sledecih adresa na Desktop:
http://download.bleepingcomputer.com/sUBs/ComboFix.exe
http://www.forospyware.com/sUBs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.

Poslao: 08 Sep 2008 23:31
Idi na vrh
offline
  • Pridružio: 04 Avg 2008
  • Poruke: 37

Evo loga, ali mislim da postoji jedan problem. COMODO je konstantno iskakao, dozvoljavala sam sve procedure, no pitanje je da li sam to smela. Kako bilo, log je:

ComboFix 08-09-05.09 - Media 2008-09-08 23:09:41.7 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.161 [GMT 2:00]
Running from: C:\Documents and Settings\Media\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\rtl60.bpl
C:\WINDOWS\temp\perflib_perfdata_1cc.dat

.
((((((((((((((((((((((((( Files Created from 2008-08-08 to 2008-09-08 )))))))))))))))))))))))))))))))
.

2008-08-31 03:07 . 2008-08-31 03:19 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ABBYY
2008-08-31 03:02 . 2008-05-16 05:51 <DIR> d-------- C:\FR90PE_VOL
2008-08-22 14:44 . 2008-08-22 14:44 <DIR> d-------- C:\Program Files\Common Files\xing shared
2008-08-22 14:43 . 2008-08-22 14:44 <DIR> d-------- C:\Program Files\Common Files\Real
2008-08-22 14:42 . 2008-08-22 14:42 <DIR> d-------- C:\Program Files\Real
2008-08-21 00:12 . 2008-08-21 00:12 <DIR> d-------- C:\WINDOWS\Go-Go Gourmet 2 - Chef of the Year
2008-08-21 00:12 . 2008-08-21 00:12 <DIR> d-------- C:\Documents and Settings\Media\Application Data\Go-Go Gourmet Chef of the Year
2008-08-19 11:46 . 2008-08-19 12:04 <DIR> d-------- C:\Program Files\CD to MP3 Freeware
2008-08-19 11:46 . 2001-03-23 16:29 880,912 --a------ C:\WINDOWS\WM8EUTIL.exe
2008-08-19 11:44 . 2008-08-19 11:44 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Pianosoft
2008-08-19 11:44 . 2005-01-13 16:28 6,832 --a------ C:\WINDOWS\system32\PulseSoundTouchForVB.tlb
2008-08-16 16:47 . 2008-08-16 16:47 <DIR> d-------- C:\Program Files\Apple Software Update
2008-08-16 16:47 . 2008-08-16 16:47 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple
2008-08-16 16:30 . 2008-08-16 16:30 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-07 22:22 --------- d-----w C:\Documents and Settings\Media\Application Data\uTorrent
2008-09-07 13:56 --------- d-----w C:\Documents and Settings\Media\Application Data\Skype
2008-09-05 22:34 --------- d-----w C:\Program Files\Mozilla Thunderbird
2008-09-03 23:37 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-09-03 23:29 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-09-03 23:20 --------- d-----w C:\Program Files\Corel
2008-08-31 10:50 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-08-29 09:36 97,928 ----a-w C:\WINDOWS\system32\drivers\avgldx86.sys
2008-08-22 12:43 499,712 ----a-w C:\WINDOWS\system32\msvcp71.dll
2008-08-22 12:43 348,160 ----a-w C:\WINDOWS\system32\msvcr71.dll
2008-08-19 09:40 --------- d-----w C:\Program Files\Common Files\DVDVideoSoft
2008-08-19 09:39 --------- d-----w C:\Program Files\DVDVideoSoft
2008-08-16 14:30 --------- d-----w C:\Program Files\Safari
2008-08-07 21:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\comodo
2008-08-07 21:01 87,056 ----a-w C:\WINDOWS\system32\drivers\cmdguard.sys
2008-08-07 21:01 249,592 ----a-w C:\WINDOWS\system32\cssdll32.dll
2008-08-07 21:01 24,208 ----a-w C:\WINDOWS\system32\drivers\cmdhlp.sys
2008-08-07 21:01 143,104 ----a-w C:\WINDOWS\system32\guard32.dll
2008-08-07 21:01 --------- d-----w C:\Program Files\COMODO
2008-08-07 21:01 --------- d-----w C:\Documents and Settings\Media\Application Data\Comodo
2008-08-04 18:15 --------- d-----w C:\Documents and Settings\All Users\Application Data\SecTaskMan
2008-08-03 20:27 --------- d-----w C:\Program Files\MathType
2008-07-25 13:52 --------- d-----w C:\Program Files\Tropico
2008-07-19 19:36 --------- d-----w C:\Documents and Settings\Media\Application Data\Alawar
2008-07-11 08:56 76,040 ----a-w C:\WINDOWS\system32\drivers\avgtdix.sys
2008-07-11 08:56 10,520 ----a-w C:\WINDOWS\system32\avgrsstx.dll
2008-07-11 08:56 --------- d-----w C:\Program Files\AVG
2008-07-11 08:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg8
2007-01-23 11:46 312 ----a-w C:\Documents and Settings\Media\Application Data\bbbconfig.dat
2007-02-25 15:48 3,350 --sha-w C:\WINDOWS\system32\KGyGaAvL.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 15360]
"AlcoholAutomount"="C:\Program Files\Alcohol Soft\Alcohol 120\axcmd.exe" [2007-07-02 220544]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2005-08-11 81920]
"ISUSPM Startup"="C:\Program Files\Common Files\InstallShield\UpdateService\isuspm.exe" [2005-08-11 249856]
"DiskeeperSystray"="C:\Program Files\Diskeeper Corporation\Diskeeper\DkIcon.exe" [2006-10-04 163840]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"StartCCC"="C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2006-11-10 90112]
"googletalk"="C:\Program Files\Google\Google Talk\googletalk.exe" [2007-01-01 3739648]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-08-29 1235736]
"COMODO SafeSurf"="C:\Program Files\COMODO\SafeSurf\cssurf.exe" [2008-08-07 278264]
"COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [2008-08-07 1655552]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 15360]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveSearch"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoRecentDocsNetHood"= 01000000

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.3iv2"= 3ivxVfWCodec.dll
"VIDC.VP31"= vp31vfw.dll
"msacm.divxa32"= msaud32_divx.acm

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Acrobat Speed Launcher.lnk]
backup=C:\WINDOWS\pss\Adobe Acrobat Speed Launcher.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Acrobat Synchronizer.lnk]
backup=C:\WINDOWS\pss\Adobe Acrobat Synchronizer.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk]
backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk]
backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HP Digital Imaging Monitor.lnk]
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Watch.lnk]
backup=C:\WINDOWS\pss\Watch.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinNC - Launch WinNC - multiplelicense (external programming station).lnk]
backup=C:\WINDOWS\pss\WinNC - Launch WinNC - multiplelicense (external programming station).lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Media^Start Menu^Programs^Startup^3DO Registration.lnk]
backup=C:\WINDOWS\pss\3DO Registration.lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Media^Start Menu^Programs^Startup^H3 The Shadow of Death(TM).lnk]
backup=C:\WINDOWS\pss\H3 The Shadow of Death(TM).lnkStartup

[HKLM\~\startupfolder\C:^Documents and Settings^Media^Start Menu^Programs^Startup^MostFun.lnk]
backup=C:\WINDOWS\pss\MostFun.lnkStartup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Acrobat Assistant 8.0
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\avast!
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDAgent
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BDMCon
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BitDefender Antiphishing Helper
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DiskeeperSystray
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ICQ Lite
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 2008-01-11 23:16 39792 C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 2007-05-16 09:27 153136 C:\Program Files\Common Files\Ahead\Lib\NMBgMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 2005-05-12 00:12 49152 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut]
--a------ 2006-09-29 22:58 49152 C:\Program Files\CyberLink\PowerDVD\Language\Language.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 2007-03-01 15:57 153136 C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]
--a------ 2006-03-18 04:24 184320 C:\Program Files\PowerISO\PWRISOVM.EXE

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--------- 2005-12-07 23:57 30208 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
--a------ 2007-07-12 04:00 132496 C:\Program Files\Java\jre1.6.0_02\bin\jusched.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AGRSMMSG]
-ra------ 2003-09-23 11:06 88363 C:\WINDOWS\AGRSMMSG.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr]
-ra------ 2005-05-03 12:43 69632 C:\WINDOWS\Alcmtr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
-ra------ 2006-05-18 08:27 16207872 C:\WINDOWS\RTHDCPL.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"LIVESRV"=2 (0x2)
"VSSERV"=2 (0x2)
"avast! Web Scanner"=3 (0x3)
"avast! Mail Scanner"=3 (0x3)
"avast! Antivirus"=2 (0x2)
"aswUpdSv"=2 (0x2)

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"C:\\Program Files\\uTorrent\\uTorrent.exe"=
"D:\\AoEII\\age2_x1\\age2_x1.exe"=
"C:\\Program Files\\LimeWire\\LimeWire.exe"=
"C:\\Program Files\\Free Music Zilla\\FMZilla.exe"=
"C:\\Documents and Settings\\Media\\My Documents\\Duke3D.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Nero\\Nero 7\\Nero ShowTime\\ShowTime.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"10317:TCP"= 10317:TCP:BitComet 10317 TCP
"10317:UDP"= 10317:UDP:BitComet 10317 UDP

R1 AvgLdx86;AVG Free AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-08-29 97928]
R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\WINDOWS\system32\DRIVERS\cmdguard.sys [2008-08-07 87056]
R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [2008-08-07 24208]
R1 SSHDRV65;SSHDRV65;C:\WINDOWS\system32\drivers\SSHDRV65.sys [2007-03-18 120320]
R2 avg8emc;AVG Free8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-08-29 875288]
R2 avg8wd;AVG Free8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-08-29 231704]
R2 AvgTdiX;AVG Free8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-07-11 76040]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
.
Contents of the 'Scheduled Tasks' folder
.
- - - - ORPHANS REMOVED - - - -

BHO-{803E93C8-A79D-42E7-BE52-20DE96B6744A} - (no file)


.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Media\Application Data\Mozilla\Firefox\Profiles\edbk3j11.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE -
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net
Rootkit scan 2008-09-08 23:13:38
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\WINDOWS\system32\ati2evxx.exe
C:\WINDOWS\system32\ati2evxx.exe
C:\Program Files\COMODO\Firewall\cmdagent.exe
C:\Program Files\Diskeeper Corporation\Diskeeper\DkService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\AVG\AVG8\avgrsx.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
.
**************************************************************************
.
Completion time: 2008-09-08 23:21:01 - machine was rebooted
ComboFix-quarantined-files.txt 2008-09-08 21:20:25
ComboFix2.txt 2008-08-06 19:58:44

Pre-Run: 4,806,352,896 bytes free
Post-Run: 4,727,717,888 bytes free

214

Poslao: 09 Sep 2008 17:40
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Citat:Evo loga, ali mislim da postoji jedan problem. COMODO je konstantno iskakao, dozvoljavala sam sve procedure, no pitanje je da li sam to smela.

Pravilno si uradila (zaboravih napisati da isključiš Comodo FW).

PC je čist (tako je i izgledalo od početka, ali htedoh da proverim).

Da se vratimo na flash drive...

Imaš dve mogućnosti:

1. formatiranje flash-a - ako sada na flash-u nema nešto bitno, onda je to i najbolje rešenje.

Postupak: My Computer, desni klik na flash drive i izaberi opciju Format: u prozoru koji se otvori klikni Start.


2. možeš da skeniraš kompletan flash - My Computer pa desni klik na flash drive; trebalo bi da u meniju postoji opcija za skeniranje AVG-om.

Tada će AVG detektovati ono što može i više sigurno neće prijavljivati bilo šta (što nije garancija da okolo po drive-u nema zaostalih malicioznih file-ova).

Poslao: 09 Sep 2008 18:07
Idi na vrh
offline
  • Pridružio: 04 Avg 2008
  • Poruke: 37

Pozdrav!

Hvala za PC.
No, sto se tice flash-a, nesto me buni. Sinoc je AVG ocistio, izgleda i taj poslednji problem. No, ja i dalje ne mogu da izbrisem neki fajl koji je bio u folderu gde su doticne slike (koje su bile inficirane). Taj fajl je prijavljen kao DSC_5785.JPG i "tezak" je 0kb. Posto mi je i dalje selektovana opcija da vidim sve fajlove (i skrivene), na flash-u ne postoji nista vise sto bi ukazivalo na problem. Kada skeniram AVG-om, ne prijavljuje nista. Nisam sigurna da li smem da ga formatiram, posto se unutar njega (flash-a) nalazi i jedan fabricki folder pod imenom "Up-grade procedure(No deleting)". Ja sam ga prekopirala na PC za slucaj da mi odobrite formatiranje.
Izvinjavam se na opsirnom (mozda malo konfuznom) postu.

Poslao: 09 Sep 2008 18:18
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Svetlana_LSN ::Nisam sigurna da li smem da ga formatiram, posto se unutar njega (flash-a) nalazi i jedan fabricki folder pod imenom "Up-grade procedure(No deleting)".

Onda nemoj da ga formatiraš (ne znam šta je u pitanju, stoga nećemo rizikovati kakvu štetu).


Taj file koji ne možeš da obrišeš... To se uklapa sa ovim:
Citat:Ne znam da li treba da napomenem, ali prilikom ubacivanja flash-a, izasla mi je poruka da pokrenem check disc utility. To nisam uradila, vec samo ono sto mi je receno.

Pretpostavljam da je file prosto oštećen pa zato postoji i problem pri brisanju.

Probaj ovako: desni klik na flash drive: Properties.

Na Tools tabu klikni Check Now... - u prozoru koji se otvori čekiraj sve opcije i klikni Start.

Kada proces bude završen, probaj da obrišeš taj problematični file.

Poslao: 09 Sep 2008 18:29
Idi na vrh
offline
  • Pridružio: 04 Avg 2008
  • Poruke: 37

E, sada je, obrisano! AVG ne prijavljuje nista, flash je u prvobitnom stanju (bez spornih slika).

Poslao: 09 Sep 2008 18:53
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Odlično.

Programe koje smo koristili možeš obrisati.

Takođe, obriši i folder C:\qoobox .

Poslao: 09 Sep 2008 18:57
Idi na vrh
offline
  • Pridružio: 04 Avg 2008
  • Poruke: 37

Hvala puno i drugi put! Jos jednom se izvinjavam i zelim Vam sve najbolje!
Veliki pozz!

MyCity » Ambulanta -> Arhiva Ambulante » Trojan Horse Injector ise32.exe

Ko je trenutno na forumu
 

Ukupno su 1083 korisnika na forumu :: 65 registrovanih, 4 sakrivenih i 1014 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, A.R.Chafee.Jr., ajo baba, amaterSRB, aramis s, armor, babaroga, Battlehammer, BlekMen, Bobrock1, cenejac111, Dimitrije Paunovic, Dimitrise93, djboj, draganca, draggan, dule10savic, esx66, FileFinder, Georgius, goxin, havoc995, Ivan Campo, Kibice, kobaja77, Krvava Devetka, kunktator, laurusri, ljubacv, mercedesamg, Mercury, milenko crazy north, milimoj, Milometer, milutin134, nelsa, nikoladim, Nobunaga, novator, oldtimer, Panter, panzerwaffe, procesor, rasok, Recce, Romibrat, royst33, ruger357, ruma, S2M, shone34, Sirius, slonic_tonic, solic, Stoilkovic, Sumadija34, suton, uruk, vathra, Vlada1389, VojvodaMisic, wolverined4, žeks62, 125, 1107