MyCity » Ambulanta -> Arhiva Ambulante » proverka

proverka

Napisano na dan: 9.3.2008

proverka

Sledeća strana

Pagination

Odgovori

badmance Poslao: 09 Mar 2008 19:16 Idi na vrh
offline badmance Novi MyCity građanin Pridružio: 09 Mar 2008 Poruke: 4	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Zdravo imam eden problem... imam amd sempron 2800+ so 256 ram 40hdd i 64 graficka karticka nvidia fx 5200 i vo posledno vreme kompjuterot mi raboti mnooogu sporo... probav so formatiranje i toa gi smeni rabotite malku... so instaliranje na nekolku programi toj pak e mn. spor.. probav da go cistam so kaspersky so nod32 ama seto toa bese djabe... i imam problem ... nekoi kopcinja kako sto se d,g,f, i sl. koga kucam izlevaat po 2 bukvi... eve eden log odd hijackthhis. pozz Logfile of HijackThis v1.99.1 Scan saved at 19:10:08, on 09.03.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe C:\Program Files\DU Meter\DUMeterSvc.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\WINDOWS\SOUNDMAN.EXE C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe C:\Program Files\DU Meter\DUMeter.exe C:\Program Files\Skype\Phone\Skype.exe C:\Program Files\Messenger\msmsgs.exe C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe C:\Program Files\RALINK\Common\RaUI.exe C:\Program Files\Skype\Plugin Manager\skypePM.exe C:\Program Files\Opera\Opera.exe C:\Documents and Settings\KIMOVII\Desktop\t\t.exe O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file) O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background O4 - HKCU\..\Run: [DU Meter] C:\Program Files\DU Meter\DUMeter.exe O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" autostart O4 - Global Startup: Ralink Wireless Utility.lnk = C:\Program Files\RALINK\Common\RaUI.exe O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Common Files\Microsoft Shared\Help\hxds.dll O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe O23 - Service: DU Meter Service (DUMeterSvc) - Hagel Technologies Ltd - C:\Program Files\DU Meter\DUMeterSvc.exe O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

Profil

helen1 Poslao: 09 Mar 2008 21:12 Idi na vrh
offline helen1 Anti Malware Fighter Rank 2 Master učitelj Pridružio: 27 Avg 2005 Poruke: 8617 Gde živiš: Novi Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Skini ComboFix sa jedne od sledecih adresa na Desktop: http://www.techsupportforum.com/sectools/sUBs/ComboFix.exe http://download.bleepingcomputer.com/sUBs/ComboFix.exe Startuj ga i ne diraj prozor programa dok skenira. Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.

Profil

badmance Poslao: 10 Mar 2008 14:37 Idi na vrh
offline badmance Novi MyCity građanin Pridružio: 09 Mar 2008 Poruke: 4	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! eve lod od ComboFix

Profil

helen1 Poslao: 10 Mar 2008 14:38 Idi na vrh
offline helen1 Anti Malware Fighter Rank 2 Master učitelj Pridružio: 27 Avg 2005 Poruke: 8617 Gde živiš: Novi Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Gde je log?

Profil

badmance Poslao: 10 Mar 2008 14:41 Idi na vrh
offline badmance Novi MyCity građanin Pridružio: 09 Mar 2008 Poruke: 4	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! ComboFix 08-03-09.4 - KIMOVII 2008-03-10 14:14:48.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1251.1.1033.18.103 [GMT 1:00] Running from: C:\Documents and Settings\KIMOVII\Desktop\ComboFix.exe * Created a new restore point WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((( Files Created from 2008-02-10 to 2008-03-10 ))))))))))))))))))))))))))))))) . 2008-03-09 19:36 . 2003-05-20 18:27 64,000 --a------ C:\WINDOWS\system32\ECBTEG.DLL 2008-03-09 19:36 . 2000-06-06 17:01 34,304 --a------ C:\WINDOWS\system32\EBPCHP.DLL 2008-03-09 19:35 . 2008-03-09 19:37 <DIR> d-------- C:\Program Files\EPSON 2008-03-09 19:34 . 2008-03-09 19:34 443,573 --a------ C:\WINDOWS\system32\EPSETUP.CAB 2008-03-09 19:34 . 2008-03-09 19:34 288,201 --a------ C:\WINDOWS\system32\EPPRTDRV.CAB 2008-03-09 19:34 . 2008-03-09 19:34 8,284 --a------ C:\WINDOWS\system32\eps_icon.avi 2008-03-09 19:33 . 2008-03-09 19:33 25 --a------ C:\WINDOWS\CDEC46Euro.ini 2008-03-09 19:32 . 2003-05-28 17:01 91,648 --a------ C:\WINDOWS\system32\E_SAGSET.DLL 2008-03-09 19:32 . 2003-12-09 17:13 76,054 --a------ C:\WINDOWS\system32\EBPMON24.DLL 2008-03-09 19:32 . 2003-07-16 05:14 31,744 --a------ C:\WINDOWS\system32\E_DCINST.DLL 2008-03-09 19:32 . 2001-09-03 18:04 182 --a------ C:\WINDOWS\system32\EBPPORT4.DAT 2008-03-08 19:38 . 2008-03-08 19:38 268 --ah----- C:\sqmdata00.sqm 2008-03-08 19:38 . 2008-03-08 19:38 244 --ah----- C:\sqmnoopt00.sqm 2008-03-08 11:27 . 2004-08-03 23:01 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys 2008-03-08 11:27 . 2004-08-03 23:01 25,856 --a--c--- C:\WINDOWS\system32\dllcache\usbprint.sys 2008-03-07 15:58 . 2008-03-07 15:58 307,968 --a------ C:\WINDOWS\system32\TuneUpDefragService.exe 2008-03-07 15:58 . 2008-02-27 13:15 28,416 --a------ C:\WINDOWS\system32\uxtuneup.dll 2008-03-07 15:53 . 2008-03-07 15:53 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\TuneUp Software 2008-03-07 15:52 . 2008-03-07 15:59 <DIR> d-------- C:\Program Files\TuneUp Utilities 2008 2008-03-07 15:52 . 2008-03-07 15:52 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\TuneUp Software 2008-03-06 17:19 . 2008-03-06 17:19 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\Ahead 2008-03-06 17:18 . 2008-03-06 17:18 <DIR> d-------- C:\Program Files\Common Files\Ahead 2008-03-06 17:18 . 2008-03-06 17:18 <DIR> d-------- C:\Program Files\Ahead 2008-03-06 17:18 . 2001-07-06 14:41 569,344 --a------ C:\WINDOWS\system32\imagr5.dll 2008-03-06 17:18 . 2001-07-06 12:44 544,768 --a------ C:\WINDOWS\system32\imagx5.dll 2008-03-06 17:18 . 2001-07-06 18:24 283,920 --a------ C:\WINDOWS\system32\ImagXpr5.dll 2008-03-06 17:18 . 2001-07-09 11:50 155,648 --a------ C:\WINDOWS\system32\NeroCheck.exe 2008-03-06 17:18 . 2003-03-29 16:45 89,184 --a------ C:\WINDOWS\system32\drivers\imagedrv.sys 2008-03-06 17:18 . 2003-07-22 16:29 57,344 --a------ C:\WINDOWS\system32\ImageDrive.cpl 2008-03-06 17:18 . 2001-06-26 08:15 38,912 --a------ C:\WINDOWS\system32\picn20.dll 2008-03-02 20:49 . 2008-03-02 20:49 <DIR> d-------- C:\Program Files\ESET 2008-03-02 20:30 . 2008-03-02 20:30 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\ESET 2008-03-02 14:05 . 2008-03-02 14:05 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\CyberLink 2008-02-27 19:23 . 2008-02-27 19:23 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\Samsung 2008-02-27 19:19 . 2006-05-03 22:53 174,592 --a------ C:\WINDOWS\system32\framedyn.dll 2008-02-27 19:18 . 2008-02-27 19:18 <DIR> d-------- C:\WINDOWS\system32\Samsung_USB_Drivers 2008-02-27 19:18 . 2005-12-22 12:24 137,884 --a------ C:\WINDOWS\system32\drivers\sscdmdm.sys 2008-02-27 19:18 . 2005-12-22 12:24 80,272 --a------ C:\WINDOWS\system32\drivers\sscdbus.sys 2008-02-27 19:18 . 2005-12-22 12:24 11,877 --a------ C:\WINDOWS\system32\drivers\sscdcmnt.sys 2008-02-27 19:18 . 2005-12-22 12:24 11,877 --a------ C:\WINDOWS\system32\drivers\sscdcm.sys 2008-02-27 19:18 . 2005-12-22 12:24 11,188 --a------ C:\WINDOWS\system32\drivers\sscdwhnt.sys 2008-02-27 19:18 . 2005-12-22 12:24 11,188 --a------ C:\WINDOWS\system32\drivers\sscdwh.sys 2008-02-27 19:18 . 2005-12-22 12:24 10,864 --a------ C:\WINDOWS\system32\drivers\sscdmdfl.sys 2008-02-27 19:18 . 2005-08-28 20:51 766 --a------ C:\WINDOWS\system32\Uninstall.ico 2008-02-27 19:17 . 2006-07-24 16:05 5,632 --a------ C:\WINDOWS\system32\drivers\StarOpen.sys 2008-02-27 19:16 . 2008-02-27 19:16 <DIR> d-------- C:\Program Files\Samsung 2008-02-27 18:03 . 2008-03-08 10:47 <DIR> d-------- C:\Program Files\DU Meter 2008-02-27 18:03 . 2008-02-27 18:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Hagel Technologies 2008-02-27 17:58 . 2008-03-08 10:48 <DIR> d-------- C:\Program Files\Mirc 2008-02-27 17:58 . 2008-03-03 17:28 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\mIRC 2008-02-27 17:10 . 2008-02-27 17:10 <DIR> d-------- C:\Program Files\Windows Live 2008-02-25 18:54 . 2008-02-25 18:56 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WinZip 2008-02-25 18:40 . 2008-02-25 18:42 <DIR> d-------- C:\WINDOWS\SxsCaPendDel 2008-02-25 18:00 . 2008-02-25 18:41 <DIR> d-------- C:\Program Files\Your Uninstaller 2008 2008-02-25 18:00 . 2008-02-25 18:00 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\URSoft 2008-02-25 18:00 . 2008-03-08 10:44 <DIR> d-a------ C:\Documents and Settings\All Users\Application Data\TEMP 2008-02-25 17:58 . 2008-02-27 18:30 <DIR> d-------- C:\Program Files\Serials 2000 2008-02-25 17:53 . 2008-02-25 17:53 54,156 --ah----- C:\WINDOWS\QTFont.qfn 2008-02-25 17:53 . 2008-02-25 17:53 1,409 --a------ C:\WINDOWS\QTFont.for 2008-02-25 17:50 . 2008-02-25 17:50 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\Apple Computer 2008-02-25 17:48 . 2008-02-25 17:49 <DIR> d-------- C:\Program Files\QuickTime 2008-02-25 17:48 . 2008-02-25 17:49 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple Computer 2008-02-25 17:47 . 2008-02-25 17:47 <DIR> d-------- C:\Program Files\Apple Software Update 2008-02-25 17:45 . 2008-02-25 17:45 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Apple 2008-02-25 17:43 . 2006-10-26 19:56 32,592 --a------ C:\WINDOWS\system32\msonpmon.dll 2008-02-25 17:40 . 2008-02-25 17:40 <DIR> d-------- C:\Program Files\MSBuild 2008-02-25 17:40 . 2008-02-25 17:40 <DIR> d-------- C:\Program Files\Microsoft Works 2008-02-25 17:35 . 2008-02-25 17:39 <DIR> d-------- C:\WINDOWS\SHELLNEW 2008-02-25 17:34 . 2008-02-25 17:43 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Microsoft Help 2008-02-25 17:32 . 2008-02-25 17:32 <DIR> dr-h----- C:\MSOCache 2008-02-25 17:31 . 2006-11-29 13:06 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll 2008-02-25 17:31 . 2006-09-28 16:05 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll 2008-02-25 17:31 . 2006-12-08 12:02 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll 2008-02-25 17:31 . 2006-09-28 16:05 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll 2008-02-25 17:31 . 2006-09-28 16:04 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll 2008-02-25 17:31 . 2006-11-15 11:38 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll 2008-02-25 17:28 . 2008-02-25 17:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\CyberLink 2008-02-25 17:22 . 2008-02-25 17:25 <DIR> d-------- C:\Program Files\CyberLink 2008-02-25 17:22 . 2008-02-25 17:20 505,392 --a------ C:\WINDOWS\system32\msvcp71.dll 2008-02-25 17:22 . 2008-02-25 17:20 353,840 --a------ C:\WINDOWS\system32\msvcr71.dll 2008-02-25 17:15 . 2008-02-25 17:15 <DIR> d-------- C:\Program Files\Webteh 2008-02-25 17:15 . 2008-02-25 17:16 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\BSplayer PRO 2008-02-25 17:13 . 2008-02-25 17:13 <DIR> d-------- C:\Program Files\Common Files\Adobe 2008-02-25 02:16 . 2008-02-25 02:16 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\.BitTornado 2008-02-23 18:58 . 2008-03-03 14:22 <DIR> d-------- C:\Program Files\Opera 2008-02-23 18:57 . 2008-02-23 18:57 <DIR> d-------- C:\WINDOWS\system32\LogFiles 2008-02-22 16:42 . 2008-02-25 18:47 <DIR> d-------- C:\Program Files\Winamp 2008-02-22 16:42 . 2008-02-24 19:15 <DIR> d-------- C:\Documents and Settings\KIMOVII\Application Data\Winamp 2008-02-22 01:42 . 2008-02-22 01:42 <DIR> d-------- C:\Program Files\SsWin 2008-02-22 01:39 . 2008-03-06 21:03 <DIR> d-------- C:\Documents and Settings\KIMOVII\Contacts 2008-02-22 01:37 . 2008-02-25 18:40 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-03-10 13:20 --------- d-----w C:\Documents and Settings\KIMOVII\Application Data\Skype 2008-03-07 14:50 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2008-02-27 18:16 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-02-25 01:16 --------- d-----w C:\Documents and Settings\KIMOVII\Application Data\.BitTornado 2008-02-21 20:55 --------- d-----w C:\Program Files\Farm Frenzy 2008-02-21 20:41 --------- d-----w C:\Program Files\Lavasoft 2008-02-21 20:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft 2008-02-21 20:19 --------- d-----w C:\Program Files\Skype 2008-02-21 20:19 --------- d-----w C:\Program Files\Common Files\Skype 2008-02-21 20:19 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype 2008-02-21 19:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab Setup Files 2008-02-21 19:52 20,747 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys 2008-02-21 19:51 --------- d-----w C:\Program Files\RALINK 2008-02-21 19:42 --------- d-----w C:\Program Files\Realtek Sound Manager 2008-02-21 19:42 --------- d-----w C:\Program Files\Realtek AC97 2008-02-21 19:42 --------- d-----w C:\Program Files\AvRack 2008-02-21 19:40 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-02-21 19:26 --------- d-----w C:\Program Files\microsoft frontpage 2008-02-06 15:09 34,312 ----a-w C:\WINDOWS\system32\drivers\epfwtdir.sys 2008-02-06 15:06 39,944 ----a-w C:\WINDOWS\system32\drivers\eamon.sys 2008-02-06 15:06 29,704 ----a-w C:\WINDOWS\system32\drivers\easdrv.sys . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2002-12-31 13:00 15360] "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184] "DU Meter"="C:\Program Files\DU Meter\DUMeter.exe" [2008-02-28 15:45 2582288] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-07-02 17:10 23237416] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 01:06 1667584] "TuneUp MemOptimizer"="C:\Program Files\TuneUp Utilities 2008\MemOptimizer.exe" [2008-02-29 14:24 196864] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SoundMan"="SOUNDMAN.EXE" [2005-08-17 11:39 90112 C:\WINDOWS\SOUNDMAN.EXE] "Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 22:16 39792] "RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [2007-02-07 16:24 71216] "LanguageShortcut"="C:\Program Files\CyberLink\PowerDVD\Language\Language.exe" [2007-02-07 16:21 54832] "GrooveMonitor"="C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 00:47 31016] "QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-01-31 23:13 385024] "egui"="C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" [2008-02-06 16:08 1443072] "NeroCheck"="C:\WINDOWS\system32\NeroCheck.exe" [2001-07-09 11:50 155648] "EPSON Stylus C46 Series"="C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\E_S4I0T1.exe" [2004-01-13 19:00 99840] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2002-12-31 13:00 15360] C:\Documents and Settings\All Users\Start Menu\Programs\Startup\ Ralink Wireless Utility.lnk - C:\Program Files\RALINK\Common\RaUI.exe [2008-02-21 20:52:40 606208] [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\system] "disableregistrytools"= 0 (0x0) [HKEY_LOCAL_MACHINE\software\microsoft\security center] "AntiVirusDisableNotify"=dword:00000001 "FirewallDisableNotify"=dword:00000001 "UpdatesDisableNotify"=dword:00000001 [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile] "EnableFirewall"= 0 (0x0) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"= "C:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"= "C:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"= "C:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"= "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"= "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"= "C:\\Program Files\\SsWin\\Status Script 2.3\\mirc.exe"= "C:\\Program Files\\Mirc\\mirc.exe"= "C:\\Program Files\\Opera\\Opera.exe"= "C:\\Program Files\\Skype\\Phone\\Skype.exe"= R1 epfwtdir;epfwtdir;C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2008-02-06 16:09] R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B};C:\Program Files\CyberLink\PowerDVD\000.fcl [2006-11-02 16:51] HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs UxTuneUp . Contents of the 'Scheduled Tasks' folder "2008-03-10 13:00:10 C:\WINDOWS\Tasks\1-Click Maintenance.job" - C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe "2008-03-07 16:52:26 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job" - C:\Program Files\Apple Software Update\SoftwareUpdate.exe . ************************************************************************ catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net Rootkit scan 2008-03-10 14:21:25 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************ [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\DUMeterSvc] "ImagePath"="C:\Program Files\DU Meter\DUMeterSvc.exe /startedbyscm:E1F6D4BE-40E33354-DUMeterService" [HKEY_LOCAL_MACHINE\system\ControlSet001\Services\{95808DC4-FA4A-4c74-92FE-5B863F82066B}] "ImagePath"="\??\C:\Program Files\CyberLink\PowerDVD\000.fcl" . Completion time: 2008-03-10 14:27:38

Profil

helen1 Poslao: 12 Mar 2008 19:44 Idi na vrh
offline helen1 Anti Malware Fighter Rank 2 Master učitelj Pridružio: 27 Avg 2005 Poruke: 8617 Gde živiš: Novi Beograd	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Log je cist.Ne pokazuje znake malwera.

Profil

MyCity » Ambulanta -> Arhiva Ambulante » proverka

Ko je trenutno na forumu

Ukupno su 1068 korisnika na forumu :: 45 registrovanih, 6 sakrivenih i 1017 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: aramis s, Bubimir, CikaKURE, darionis, Djokislav, draganca, dragoljub11987, esx66, Frunze, Georgius, goxin, HrcAk47, kybonacci, Luka Blažević, mercedesamg, Mercury, Milos ZA, milutin134, Miroljub1979, Mlav, moldway, Ne doznajem se u oružje, NikolaC, Petar35, Petarvu, RJ, ruma, Sale.S, slonic_tonic, Srle993, stegonosa, Sumadija34, theNedjeljko, Trpe Grozni, tubular, vaso1, vathra, Vlada1389, vladulns, VP6919, Webb, wolverined4, YugoSlav, zeo, šumar bk2

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by