MyCity » Ambulanta -> Arhiva Ambulante » Trojanci, Crv i nepoznato; potreban savet

Trojanci, Crv i nepoznato; potreban savet

Napisano na dan: 1.11.2006
2

Trojanci, Crv i nepoznato; potreban savet
Pagination Prethodna strana
Sledeća strana Pagination

Idi na vrh

Poslao: 02 Nov 2006 23:20
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Pitanje br.1: imas li dva stampaca - Canon i HP?
Pitanje br.2: koristis neki Bluetooth uredjaj u sprezi sa ovim racunarom?
Pitanje br.3: Jel Power Menu namerno instaliran ili ne?
Pitanje br.4: Da li su se obrisani fajlovi pojavili ponovo nakon restarta racunara?

Dopuna: 02 Nov 2006 22:20

Sto se tice WinZip-a, jesi li kriptovao fajl lozinkom?
Kriptovani fajl bi trebao da moze da prodje kraj antivirusa na mail serveru.



Poslao: 02 Nov 2006 23:44
Idi na vrh
offline
  • Pridružio: 17 Apr 2006
  • Poruke: 215
  • Gde živiš: Novi Sad

1. imam instalirana 2 stampaca
2. ne koristim bluetooth (mozda je brat koristio, zvao sam da ga pitam al se ne javlja)
3. ne znam sta je power menu
4. nisu se vratili obrisani fajlovi ima slicnih (dlh9jkdq2.exe ; taskdir~.exe)

WinZip: stisnuo sam Options pa Password i upisao ali to izgleda nema veze (ne znam kako da kriptujem)

btw: AdAware je medju mnogima prijavio neki trojan "MatrisHaveyou" i obrisao kao i winsys2f.dll koji nissm mogso rucno da nadjem



Poslao: 03 Nov 2006 00:08
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

OK, skontao sam sa cime imamo posla, s tim sto ce biti malo teze to odraditi rucno jer taj trojanac ostavlja na sistemu jako puno fajlova. Imas li mogucnost postavljanja drugog antivirus programa, ili da odradimo jedan online scan koji bi podrazumevao download nekih 7.5mb?

Sto se tice nemogucnosti ukljucivanja Task Managera, startuj RegEdit i pronadji sledecu putanju:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System
i u njoj kljuc:
DisableTaskMgr
i promeni vrednost kljuca sa 1 na 0.

Poslao: 03 Nov 2006 00:16
Idi na vrh
offline
  • Pridružio: 17 Apr 2006
  • Poruke: 215
  • Gde živiš: Novi Sad

CtrAltDel proradio nakon brisanja shtetocina (ne znam kako i zasto ali evo sada radi

cini mi se da mi je lakse (dobar protok ~50KB/sec) OnLine Scan nego dodavanje trial verzije KAV-a ili slicno

Poslao: 03 Nov 2006 00:23
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Evo adresa dva online scannera:
KAV - [Link mogu videti samo ulogovani korisnici] (klik na ikonicu Kaspersky Online Scanner)
Bitdefender - [Link mogu videti samo ulogovani korisnici]

Za oba je potreban Internet Explorer jer funkcionisu kao ActiveX komponente. Takodje je potrebno omoguciti ActiveX komponente.

Kaspersky Online scanner ce samo da prijavi maliciozne fajlove, ne cisti nista.
Bitdefenderov scanner pored prijavljivanja omogucava i ciscenje.

Ukoliko se odlucis za Kaspersky, nije neki problem. Potrebno je samo da mi ovde iskopiras log koji ce da ti prikaze posle skeniranja, pa mozemo fajlove i rucno da uklonimo na osnovu loga.

Poslao: 03 Nov 2006 22:52
Idi na vrh
offline
  • Pridružio: 17 Apr 2006
  • Poruke: 215
  • Gde živiš: Novi Sad

Skenirao sam iz safe moda sa AVG antispyware, AdAware i Avastom
Na kraju OnLine Scan Kaspersky
evo log:


-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, November 04, 2006 9:26:20 PM
Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 3/11/2006
Kaspersky Anti-Virus database records: 224389
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 48567
Number of viruses found: 4
Number of infected objects: 5 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:41:53

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\PC Centar NS\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Temporary Internet Files\Content.IE5\5577R3TE\adirss[1].exe Infected: SpamTool.Win32.Small.v skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Temporary Internet Files\Content.IE5\OOY7QJSJ\image1[1].gif Infected: SpamTool.Win32.Small.v skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Temporary Internet Files\Content.IE5\W6UBCJ4W\new3[1].htm Infected: Constructor.Perl.Msdds.b skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Temporary Internet Files\Content.IE5\W6UBCJ4W\new[1].htm Infected: Trojan-Downloader.JS.Agent.bi skipped
C:\Documents and Settings\PC Centar NS\ntuser.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\report\Stalna zastita.txt Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\CENTRA.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\vxgame4.exe Infected: Packed.Win32.PePatch.dw skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_734.dat Object is locked skipped
C:\WINDOWS\Temp\ZLT06167.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT06f6b.TMP Object is locked skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped

Scan process completed.

Poslao: 03 Nov 2006 23:05
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Otvori Internet Explorer i idi na menij Tools, pa Internet Options.
Na kartici General mozes videti dugme Delete Files.
Klikni to dugme.
Nakon toga ce se pojaviti dijalog na kome je potrebno stiklirati brisanje kompletnog offline sadrzaja.

Koristeci Explorer ili neki drugi fajl-menadzer, uci u folder C:\Windows\System32 i obrisati fajl vxgame4.exe

Koristeci Explorer ili neki drugi fajl-menadzer, uci u folder C:\Windows\Temp i obrisati sve fajlove i foldere unutar tog foldera.
Ukoliko je neki fajl ili folder nemoguce obrisati zbog odbijenog pristupa, probati postupak iz Safe Moda.

Kada to odradis, zamolio bih te da ponovo skeniras i postavis novi log.

Dopuna: 03 Nov 2006 22:05

lalanesosa ::
4. nisu se vratili obrisani fajlovi ima slicnih (dlh9jkdq2.exe ; taskdir~.exe)


I ove fajlove je potrebno obrisati, kao i varijante fajla dlh9jkdq2.exe koje imaju samo drugi broj na kraju u imenu.

Poslao: 04 Nov 2006 00:23
Idi na vrh
offline
  • Pridružio: 17 Apr 2006
  • Poruke: 215
  • Gde živiš: Novi Sad

Skenirao sam nakon brisanja kao sto si rekao da treba.

Evo ga log:


-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER REPORT
Saturday, November 04, 2006 11:04:13 PM
Operating System: Microsoft Windows XP Professional, Service Pack 1 (Build 2600)
Kaspersky Online Scanner version: 5.0.83.0
Kaspersky Anti-Virus database last update: 3/11/2006
Kaspersky Anti-Virus database records: 224389
-------------------------------------------------------------------------------

Scan Settings:
Scan using the following antivirus database: standard
Scan Archives: true
Scan Mail Bases: true

Scan Target - My Computer:
C:\
D:\
E:\

Scan Statistics:
Total number of scanned objects: 46696
Number of viruses found: 0
Number of infected objects: 0 / 0
Number of suspicious objects: 0
Duration of the scan process: 00:40:44

Infected Object Name / Virus Name / Last Action
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked skipped
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked skipped
C:\Documents and Settings\PC Centar NS\Cookies\index.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\History\History.IE5\index.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\History\History.IE5\MSHist012006110420061105\index.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\ntuser.dat Object is locked skipped
C:\Documents and Settings\PC Centar NS\ntuser.dat.LOG Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\aswResp.dat Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\Avast4.db Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\integ\avast.int Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\AshWebSv.ws Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\aswMaiSv.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\log\nshield.log Object is locked skipped
C:\Program Files\Alwil Software\Avast4\DATA\report\Stalna zastita.txt Object is locked skipped
C:\WINDOWS\Debug\oakley.log Object is locked skipped
C:\WINDOWS\Debug\PASSWD.LOG Object is locked skipped
C:\WINDOWS\Internet Logs\CENTRA.ldb Object is locked skipped
C:\WINDOWS\Internet Logs\fwdbglog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\fwpktlog.txt Object is locked skipped
C:\WINDOWS\Internet Logs\IAMDB.RDB Object is locked skipped
C:\WINDOWS\Internet Logs\tvDebug.log Object is locked skipped
C:\WINDOWS\SchedLgU.Txt Object is locked skipped
C:\WINDOWS\system32\config\Antivirus.Evt Object is locked skipped
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\default Object is locked skipped
C:\WINDOWS\system32\config\default.LOG Object is locked skipped
C:\WINDOWS\system32\config\SAM Object is locked skipped
C:\WINDOWS\system32\config\SAM.LOG Object is locked skipped
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\SECURITY Object is locked skipped
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked skipped
C:\WINDOWS\system32\config\software Object is locked skipped
C:\WINDOWS\system32\config\software.LOG Object is locked skipped
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked skipped
C:\WINDOWS\system32\config\system Object is locked skipped
C:\WINDOWS\system32\config\system.LOG Object is locked skipped
C:\WINDOWS\system32\h323log.txt Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked skipped
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DATA Object is locked skipped
C:\WINDOWS\Temp\Perflib_Perfdata_71c.dat Object is locked skipped
C:\WINDOWS\Temp\ZLT0310a.TMP Object is locked skipped
C:\WINDOWS\Temp\ZLT055c8.TMP Object is locked skipped
C:\WINDOWS\Temp\_avast4_\Webshlock.txt Object is locked skipped

Scan process completed.

Poslao: 04 Nov 2006 00:43
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Mislim da je sada sve OK. Kako se komp ponasa, jel se primecuje nesto cudno?

Postavi i HJT log da proverimo kako tamo stvari stoje.

Poslao: 04 Nov 2006 00:51
Idi na vrh
offline
  • Pridružio: 17 Apr 2006
  • Poruke: 215
  • Gde živiš: Novi Sad

PC se ponasao OK vec posle prvog rucnog brisanja fajlova.
Avast. ZoneAlarm i AVGantiSpyware (sva 3 su resident-na) nista ne javljaju.
Koliko sam primetio AVGAntiSpyware je imao najvishe prijava malicioznog softvera. Zaboravio sam "KAV online" je nakon svih skeniranja jos nasao par shtetochina.

Evo ga HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 23:40:33, on 2006-11-04
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\System32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\Netropa\Multimedia Keyboard\TrayMon.exe
C:\Program Files\Netropa\Onscreen Display\OSD.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\PC Centar NS\Desktop\HJT\h2.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PowerMenu] "%systemroot%\system32\powermenu.exe" -hideself on
O4 - HKLM\..\Run: [Easy-PrintToolBox] C:\Program Files\Canon\Easy-PrintToolBox\BJPSMAIN.EXE /logon
O4 - HKLM\..\Run: [MULTIMEDIA KEYBOARD] C:\Program Files\Netropa\Multimedia Keyboard\MMKeybd.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [System] C:\WINDOWS\System32\kernels8.exe
O4 - HKLM\..\Run: [_mzu_stonedrv3] c:\windows\system32\_mzu_stonedrv3.exe
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKLM\..\RunServices: [_mzu_stonedrv3] c:\windows\system32\_mzu_stonedrv3.exe
O4 - HKLM\..\RunServices: [SystemTools] C:\WINDOWS\System32\kernels8.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [Windows update loader] C:\Windows\xpupdate.exe
O4 - HKCU\..\Run: [taskdir] C:\WINDOWS\System32\taskdir.exe
O4 - HKCU\..\Run: [_mzu_stonedrv3] c:\windows\system32\_mzu_stonedrv3.exe
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Easy-WebPrint Add To Print List - [Link mogu videti samo ulogovani korisnici]\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - [Link mogu videti samo ulogovani korisnici]\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - [Link mogu videti samo ulogovani korisnici]\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - [Link mogu videti samo ulogovani korisnici]\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - C:\Program Files\ICQLite\ICQLite.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - [Link mogu videti samo ulogovani korisnici]
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Netropa NHK Server (nhksrv) - Unknown owner - C:\Program Files\Netropa\Multimedia Keyboard\nhksrv.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

MyCity » Ambulanta -> Arhiva Ambulante » Trojanci, Crv i nepoznato; potreban savet

Ko je trenutno na forumu
 

Ukupno su 800 korisnika na forumu :: 92 registrovanih, 3 sakrivenih i 705 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 16.mabr, aleph_one, alkatraz080, Arni, Bobrock1, bojan_t, Borski1977, BSD, Buzdovan, ceman, crnirocko, d.arsenal321, Dannyboy, Demi87, DJ Brain(w)rack, DJUNTA, DonRumataEstorski, ekozelj, Feller, Frunze, goran.vvv, gost321, Hans Gajger, Heavy Jerk, hyla, Igorkg77, Ivica1102, ivica976, Jester, K a s p e r, K2, Kajzer_Soze, kinez88, KizJ, Kosare, kunktator, kybonacci, luka35, m0nstrum_, Malahit, mane123, markoskjk, Mig 29, miki kv, Mikisha, milenko crazy north, Milos82, Milovan Dinic, mkukoleca, Mldo, mm1811, Mzee, Ne doznajem se u oružje, neko_drugi, niksa517, NklJov123, paja69, pavle_pzs, Plavi Jadran, Prašinar, PrincipL, rachmoff, Rogan33, royst33, s0ne, Sawages, shiro, shlauf, Silvertooth, Srki94, ssekir75, starlights, stegonosa, T55, Titan, tomo2, Tristan_Bantam, ulogovan, VanZan, Vatreni Zmaj, Velizar Laro, Vitomir, Vića, VojaeZ, vukajlo71, wexy, YFSS33, yip314, zajcev1, Zastava, zgoljo, zule2