imam problema oko instaliranja antivirusa...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

ovako ne mogu instairati ni jedan anti virus. problem se pojavio pre nekoliko dana( nisam siguran sta je uzrok) kada sa pokusao skenirati uz pomoc avire ali se nakon nekoliko sekundi prekinulo skeniranje i swe je kocilo dok nisam izbriso antivirus,a od tada ne mogu instalirati ni jedan(ne mogu cak ni uci na internet adresu ni od jednog)... ne mogu koristiti ne jedan browsver samo Firefix... nadam se da mi mozete pomoci,xwala unapred



DDS (Ver_10-12-12.02) - NTFSx86
Run by computer-city at 20:47:17.90 on Wed 01/12/2011
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_21
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.1015.514 [GMT 1:00]

AV: Lavasoft Ad-Watch Live! Anti-Virus *Enabled/Updated* {A1C4F2E0-7FDE-4917-AFAE-013EFC3EDE33}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\program files\real\realplayer\update\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\DOCUME~1\COMPUT~1\LOCALS~1\Temp\ktedun.exe
C:\DOCUME~1\COMPUT~1\LOCALS~1\Temp\hoywkn.exe
C:\DOCUME~1\COMPUT~1\LOCALS~1\Temp\tcfbcu.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Documents and Settings\computer-city\My Documents\Downloads\dds(2).scr

============== Pseudo HJT Report ===============

uStart Page = hxxp://home.mywebsearch.com/index.jhtml?n=77C09F4F&ptnrS=ZCfox000&ptb=3n3SG_1OfX4Y7XCibML8bw
uSearch Page = hxxp://search13.net/
uSearch Bar = hxxp://search13.net/
uDefault_Search_URL = hxxp://search13.net/
uDefault_Page_URL = hxxp://search13.net/
uInternet Settings,ProxyOverride = *.local
uSearchAssistant = hxxp://search13.net/
uCustomizeSearch = hxxp://search13.net/
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://start.facemoods.com/?a=fbpage&s={searchTerms}&f=4
uURLSearchHooks: H - No File
uURLSearchHooks: UrlSearchHook Class: {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\GenericAskToolbar.dll
uURLSearchHooks: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
mWinlogon: Taskman=c:\recycler\s-1-5-21-4097870198-3942064791-007988429-4781\nissan.exe
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: RealPlayer Download and Record Plugin for Internet Explorer: {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\ie\rpbrowserrecordplugin.dll
BHO: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\ConduitEngine.dll
BHO: ThunderHlpObj Class: {97421d0d-e07f-40df-8f07-99597b9585ad} - c:\windows\downloaded program files\ThunderAdvise.dll
BHO: GdfrDUEn: {a3cf7606-e683-4375-a372-96b75da0aef7} - GdfrDUEn Class
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5805.1910\swg.dll
BHO: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
TB: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
TB: Conduit Engine: {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\ConduitEngine.dll
TB: Ask Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
mRun: [igfxtray] c:\windows\system32\igfxtray.exe
mRun: [igfxhkcmd] c:\windows\system32\hkcmd.exe
mRun: [igfxpers] c:\windows\system32\igfxpers.exe
mRun: [SunJavaUpdateSched] "c:\program files\common files\java\java update\jusched.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [TkBellExe] "c:\program files\real\realplayer\update\realsched.exe" -osboot
mExplorerRun: [pql03] c:\windows\temp\9k4islf.exe
mExplorerRun: [apps] c:\windows\fonts\services.exe
mExplorerRun: [MPMKrnl] rundll32 "c:\windows\MKMKrnl.dll",KMainProc
uPolicies-system: DisableTaskMgr = 1 (0x1)
uPolicies-system: DisableRegistryTools = 1 (0x1)
mPolicies-system: EnableLUA = 0 (0x0)
dPolicies-system: DisableTaskMgr = 1 (0x1)
dPolicies-system: DisableRegistryTools = 1 (0x1)
IE: &Search - edits.mywebsearch.com/toolbaredits/menusear.....2010062110
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office11\EXCEL.EXE/3000
IE: Google Sidewiki... - c:\program files\google\google toolbar\component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
IE: {14CD42DD-ABCD-3586-DCAB-40E3693E3737} - c:\program files\stylish profile\ct.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office11\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Notify: igfxcui - igfxdev.dll
SSODL: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - c:\windows\downloaded program files\ThunderAdvise.dll
IFEO: 360rpt.exe - ntsd -d
IFEO: 360Safe.exe - ntsd -d
IFEO: 360tray.exe - ntsd -d
IFEO: arvmon.exe - ntsd -d
IFEO: AST.exe - ntsd -d

Note: multiple IFEO entries found. Please refer to Attach.txt

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\comput~1\applic~1\mozilla\firefox\profiles\k8ho2ybj.default\
FF - prefs.js: keyword.URL - hxxp://search.mywebsearch.com/mywebsearch/GGmain.jhtml?id=ZCfox000&ptb=3n3SG_1OfX4Y7XCibML8bw&psa=&ind=2010062110&ptnrS=ZCfox000&si=&st=kwd&n=77cf1d1e&searchfor=
FF - component: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordext.dll
FF - component: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\firefox\ext\components\nprpffbrowserrecordlegacyext.dll
FF - component: c:\documents and settings\computer-city\application data\mozilla\firefox\profiles\k8ho2ybj.default\extensions\firesheep@codebutler.com\platform\winnt_x86-msvc\components\mozpopen.dll
FF - plugin: c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\mozillaplugins\nprphtml5videoshim.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Quick Starter: jqs@sun.com - c:\program files\java\jre6\lib\deploy\jqs\ff
FF - Ext: RealPlayer Browser Record Plugin: {ABDE892B-13A8-4d1b-88E6-365A6E755758} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin\firefox\Ext
FF - Ext: Firesheep: firesheep@codebutler.com - %profile%\extensions\firesheep@codebutler.com
FF - Ext: Greasemonkey: {e4a8a97b-f2ed-450b-b12d-ee082ba24781} - %profile%\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}

============= SERVICES / DRIVERS ===============

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2011-1-10 64288]
R3 amsint32;amsint32;c:\windows\system32\drivers\gometn.sys [2011-1-12 5157]
S2 gupdate;Google Update Service (gupdate);c:\program files\google\update\GoogleUpdate.exe [2010-6-16 199680]
S2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;"c:\program files\lavasoft\ad-aware\aawservice.exe" --> c:\program files\lavasoft\ad-aware\AAWService.exe [?]
S3 abp470n5;abp470n5;c:\windows\system32\drivers\gometn.sys [2011-1-12 5157]
S3 Lavasoft Kernexplorer;Lavasoft helper driver;\??\c:\program files\lavasoft\ad-aware\kernexplorer.sys --> c:\program files\lavasoft\ad-aware\KernExplorer.sys [?]

=============== Created Last 30 ================

2069-11-22 14:48:08 7324526 ----a-w- c:\program files\mozilla firefox\speed.exe
2011-01-12 19:40:03 -------- d-----w- C:\USBNoRisk
2011-01-12 08:57:59 5157 ----a-w- c:\windows\system32\drivers\gometn.sys
2011-01-12 08:57:58 48128 ----a-w- c:\program files\messenger\h323cc.dll
2011-01-09 23:03:24 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2011-01-09 23:02:57 98392 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2011-01-09 22:51:24 -------- d-----w- c:\docume~1\comput~1\locals~1\applic~1\Sunbelt Software
2011-01-09 22:50:05 -------- d-----w- c:\program files\Lavasoft
2011-01-09 15:01:41 130787 --sh--r- C:\wggq.exe
2011-01-09 13:58:17 150016 ----a-w- c:\windows\system32\07dc4d5a-a99c-4d10-aefb-a21f4d8ef457
2011-01-09 13:58:14 150016 ----a-w- c:\windows\system32\e0741536-2bd4-4144-b5d9-475150902c34
2011-01-09 13:58:11 150016 ----a-w- c:\windows\system32\5455672d-d9c5-437d-9d06-1f4bb02fee37
2011-01-09 13:57:56 150016 ----a-w- c:\windows\system32\b33fe91b-08f6-4003-9356-d30915bb1b63
2011-01-09 13:44:38 150016 ----a-w- c:\windows\system32\3219883d-9f56-4265-9da5-e05601b5bb68
2011-01-09 13:32:36 -------- d--h--w- C:\$AVG
2011-01-09 13:24:50 -------- d-----w- c:\docume~1\comput~1\applic~1\AVG10
2011-01-09 13:23:31 -------- d--h--w- c:\docume~1\alluse~1\applic~1\Common Files
2011-01-09 13:21:53 -------- d-----w- c:\docume~1\alluse~1\applic~1\AVG10
2011-01-09 12:42:17 -------- d-----w- c:\docume~1\alluse~1\applic~1\MFAData
2011-01-09 12:38:21 -------- d-----w- c:\program files\CCleaner
2011-01-09 12:17:10 -------- d-----w- c:\program files\sasa
2011-01-09 10:36:24 24625 ----a-w- c:\windows\MSVB50CHS.dll
2011-01-09 10:36:17 17920 ----a-w- c:\windows\system32\qt-dx3.dll
2011-01-09 10:33:55 48128 ----a-w- c:\program files\messenger\msmsgs.dll
2011-01-09 10:33:54 48128 ----a-w- c:\windows\system32\MSGSCR.TLB
2011-01-09 10:25:24 62496 ----a-w- c:\windows\system32\MSWINSCK.OCX
2011-01-08 16:29:50 130787 --sh--r- C:\csjglt.pif

==================== Find3M ====================

2011-01-12 09:00:02 10240 ----a-w- c:\windows\system32\d3d8thk.dll
2011-01-11 22:05:24 1181696 ----a-w- c:\windows\system32\d3d8.dll
2011-01-11 22:05:18 10240 ----a-w- c:\windows\system32\d3d8thk.dll.GBNP
2011-01-11 22:05:12 1181696 ----a-w- c:\windows\system32\d3d8.dll.ENAS
2011-01-11 22:05:05 369664 ----a-w- c:\windows\system32\dsound.dll
2011-01-11 22:04:59 268288 ----a-w- c:\windows\system32\ddraw.dll
2011-01-11 22:04:53 10240 ----a-w- c:\windows\system32\d3d8thk.dll.HIJR
2011-01-11 22:04:47 369664 ----a-w- c:\windows\system32\dsound.dll.HLUE
2011-01-11 22:04:41 346112 ----a-w- c:\windows\system32\hnetcfg.dll
2011-01-11 22:04:34 10240 ----a-w- c:\windows\system32\d3d8thk.dll.EUPK
2011-01-11 22:04:28 1181696 ----a-w- c:\windows\system32\d3d8.dll.EQEF
2011-01-11 22:04:10 1181696 ----a-w- c:\windows\system32\d3d8.dll.AOVL
2011-01-11 22:04:03 268288 ----a-w- c:\windows\system32\ddraw.dll.XOEG
2011-01-11 22:03:58 10240 ----a-w- c:\windows\system32\d3d8thk.dll.UICZ
2011-01-11 22:03:50 10240 ----a-w- c:\windows\system32\d3d8thk.dll.GHFW
2011-01-11 22:03:42 10240 ----a-w- c:\windows\system32\d3d8thk.dll.GAUP
2011-01-11 22:03:36 268288 ----a-w- c:\windows\system32\ddraw.dll.WZSF
2011-01-09 15:20:46 369664 ----a-w- c:\windows\system32\dsound.dll.KZAW
2011-01-09 13:58:08 4608 ----a-w- c:\windows\system32\mqsvc.exe
2011-01-09 13:58:03 117248 ----a-w- c:\windows\system32\mqtgsvc.exe
2011-01-09 13:33:47 94208 ----a-w- c:\windows\system32\igfxtray.exe
2011-01-09 13:33:35 114688 ----a-w- c:\windows\system32\igfxpers.exe
2011-01-09 13:33:33 77824 ----a-w- c:\windows\system32\hkcmd.exe
2011-01-09 10:38:08 369664 ----a-w- c:\windows\system32\dsound.dll.BGFE
2011-01-09 10:38:02 268288 ----a-w- c:\windows\system32\ddraw.dll.MYCN
2011-01-09 10:37:55 10240 ----a-w- c:\windows\system32\d3d8thk.dll.GTRB
2011-01-09 10:37:49 369664 ----a-w- c:\windows\system32\dsound.dll.KKWI
2011-01-09 10:37:42 346112 ----a-w- c:\windows\system32\hnetcfg.dll.RFTA
2011-01-09 10:37:36 10240 ----a-w- c:\windows\system32\d3d8thk.dll.DQXJ
2011-01-09 10:37:30 1181696 ----a-w- c:\windows\system32\d3d8.dll.TEJG
2011-01-09 10:37:23 10240 ----a-w- c:\windows\system32\rasadhlp.dll.HTGP
2011-01-09 10:37:10 1181696 ----a-w- c:\windows\system32\d3d8.dll.ZBUK
2011-01-09 10:37:04 268288 ----a-w- c:\windows\system32\ddraw.dll.AMGK
2011-01-09 10:36:58 10240 ----a-w- c:\windows\system32\d3d8thk.dll.TWJY
2011-01-09 10:36:50 10240 ----a-w- c:\windows\system32\d3d8thk.dll.ZIRC
2011-01-09 10:36:37 268288 ----a-w- c:\windows\system32\ddraw.dll.SDYY
2011-01-08 16:32:09 1181696 ----a-w- c:\windows\system32\d3d8.dll.MXNM
2011-01-08 16:32:09 10240 ----a-w- c:\windows\system32\rasadhlp.dll.DXLJ
2011-01-08 16:32:08 268288 ----a-w- c:\windows\system32\ddraw.dll.ICHH
2011-01-08 16:32:07 369664 ----a-w- c:\windows\system32\dsound.dll.JVIV
2011-01-08 16:32:07 10240 ----a-w- c:\windows\system32\d3d8thk.dll.ZBGW
2011-01-08 16:32:06 369664 ----a-w- c:\windows\system32\dsound.dll.FZAL
2011-01-08 16:32:05 346112 ----a-w- c:\windows\system32\hnetcfg.dll.QBTZ
2010-10-19 18:57:33 499712 ----a-w- c:\windows\system32\msvcp71.dll
2010-10-19 18:57:33 348160 ----a-w- c:\windows\system32\msvcr71.dll

============= FINISH: 20:47:44.20 ===============




mycity.rs/must-login.png


mycity.rs/must-login.png



mycity.rs/must-login.png



mycity.rs/must-login.png

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ovo ne izgleda dobro.

Ovde je aktivna jedna varijanta Sality-ja; u pitanju je virus (file infektor).
Za dezinfekciju virusa je potrebno koristiti antivirus program - problem je u tome što je dezinfekcija praktično nemoguća iz aktivnog Windows-a.


Postoje tri mogućnosti:

1. formatiranje diska i instalacija Windows-a.

Ako ti je hard disk podeljen na više particija, sve što ti je bitno možeš skloniti na jednu od njih, formatirati C: disk i instalirati Windows.
Odmah nakon toga bi bilo potrebno izvršiti skeniranje svih preostalih particija.

2. mogao bi pokušati izvršiti dezinfekciju korišćenjem LiveCD-a neke AV kompanije. To uključuje download image-a, snimanje na CD, boot sa tog CD-a i skeniranje.

3. mogao bi prebaciti svoj HDD u drugi kompjuter i tamo ga skenirati.


Jasno mi je da ti ovo ne zvuči baš dobro, no... Dezinfekcija aktivnog Sality-ja je stvarno nemoguća misija.


Javi na šta si se odlučio pa da te uputim na odgovarajuće programe.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

ok...koja od ovix opcija tebi zvuci kao najbolja,zato sto nemam bs welikog iskustwa sa radom oko ovix stwari... xwala

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Najbolja je prva opcija

1. formatiranje diska i instalacija Windows-a.

Obrati paznju na ovo:

Kad instaliras Windows ne smes da klikces ni na jednu particiju, sve su zarazene.

- Instaliraj sa diska drajvere za lan, da bi dobio internet.

- Preuzmi antivirus na desktop. Preporuka Avast, zato sto ima boot scan opciju.

- Pokreni antivirus da skenira kompletan racunar i brisi sve sto nadje.

- Preuzmi MCShield sa ovog linka http://amf.mycity.rs/programs/mc/mcshield/ i instaliraj ga. Sve fleske ili druge memorijske kartice koje imas su takodje zarazene. MCShield ce spreciti infekciju i ocistice fleske.

Tek nakon ovoga mozes da nastavis instalaciju drajvera i programa.

Ukoliko imas jos neko pitanje, slobodno pitaj.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

odradio mi je swe jedan ortak,u swakom slucaju xvala na savetima,i utrosenom vremenu...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Molim i drugi put

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

e da,zaboravih da pitam : jel postoji problem ako instaliram i MCShield iako imam AV

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Ne, MCS nije antivirus i sluzi da spreci infekciju sa flesha na racunar, ujedno i cisti flesku. Pozeljno je da ga imas instaliranog.

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

ok,hvala