MyCity » Ambulanta -> Arhiva Ambulante » sta da radim

sta da radim

Napisano na dan: 3.2.2008

sta da radim
Sledeæa strana Pagination

Idi na vrh

Poslao: 03 Feb 2008 12:52
Idi na vrh
offline
  • Pridružio: 02 Feb 2008
  • Poruke: 104

Logfile of HijackThis v1.99.1
Scan saved at 12:47:00, on 03.02.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Programme\Gemeinsame Dateien\iS3\Anti-Spyware\SZServer.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Programme\Java\jre1.6.0_03\bin\jusched.exe
C:\Programme\QuickTime\qttask.exe
C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd.exe
C:\Programme\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Programme\MSN Messenger\MsnMsgr.Exe
C:\Programme\ICQ6\ICQ.exe
C:\Programme\Shareaza\Shareaza.exe
C:\Dokumente und Einstellungen\BATA\Anwendungsdaten\SurfAccuracy\SAcc.exe
C:\Dokumente und Einstellungen\BATA\Anwendungsdaten\Microsoft\Windows\tcktkena.exe
C:\Dokumente und Einstellungen\BATA\Anwendungsdaten\WinButler\WinButler.exe
C:\Dokumente und Einstellungen\BATA\Anwendungsdaten\Microsoft\Windows\pwddyh.exe
C:\WINDOWS\System32\svchost.exe
C:\Programme\STOPzilla!\STOPzilla.exe
C:\Programme\MSN Messenger\usnsvc.exe
C:\Programme\Opera\Opera.exe
C:\Dokumente und Einstellungen\BATA\Desktop\lobek\TR3.exe..exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - C:\Programme\AskPBar\SrchAstt\2.bin\A9SRCHAS.DLL
R3 - URLSearchHook: Yahoo! Toolbar mit Pop-Up-Blocker - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Programme\Best_Security_Tips\tbBes1.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Programme\Gemeinsame Dateien\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Ask Search Assistant BHO - {0A94B111-4504-4e26-AB05-E61E474AA38B} - C:\Programme\AskPBar\SrchAstt\2.bin\A9SRCHAS.DLL
O2 - BHO: SITEguard BHO - {1827766B-9F49-4854-8034-F6EE26FCB1EC} - C:\Programme\STOPzilla!\SZSG.dll
O2 - BHO: {3b0fc3ff-6612-d8c8-2254-23dd4574fe93} - {39ef4754-dd32-4522-8c8d-2166ff3cf0b3} - C:\WINDOWS\system32\ioqnsfko.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Programme\Gemeinsame Dateien\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: (no name) - {D592CF9B-7F94-4F08-8E6F-164E597965F9} - C:\WINDOWS\system32\awtsq.dll (file missing)
O2 - BHO: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Programme\Best_Security_Tips\tbBes1.dll
O2 - BHO: STOPzilla Browser Helper Object - {E3215F20-3212-11D6-9F8B-00D0B743919D} - C:\Programme\STOPzilla!\SZIEBHO.dll
O2 - BHO: Ask Toolbar BHO - {F4D76F01-7896-458a-890F-E1F05C46069F} - C:\Programme\AskPBar\bar\2.bin\ASKPBAR.DLL
O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\PROGRA~1\ICQTOO~1\toolbaru.dll
O3 - Toolbar: Ask Toolbar - {F4D76F09-7896-458a-890F-E1F05C46069F} - C:\Programme\AskPBar\bar\2.bin\ASKPBAR.DLL
O3 - Toolbar: Yahoo! Toolbar mit Pop-Up-Blocker - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Programme\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Best Security Tips Toolbar - {da30eff8-ccc6-4162-a20d-67402a26a215} - C:\Programme\Best_Security_Tips\tbBes1.dll
O3 - Toolbar: STOPzilla - {98828DED-A591-462F-83BA-D2F62A68B8B8} - C:\Programme\STOPzilla!\SZSG.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Programme\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Programme\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [HP Software Update] "C:\Programme\Hewlett-Packard\HP Software Update\HPWuSchd.exe"
O4 - HKLM\..\Run: [HP Component Manager] "C:\Programme\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb09.exe
O4 - HKLM\..\Run: [DeviceDiscovery] C:\Programme\Hewlett-Packard\Digital Imaging\bin\hpotdd01.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Programme\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [wxjrvfki] C:\WINDOWS\system32\wxjrvfki.exe
O4 - HKLM\..\RunServices: [wxjrvfki] C:\WINDOWS\system32\wxjrvfki.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Programme\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [ICQ] "C:\Programme\ICQ6\ICQ.exe" silent
O4 - HKCU\..\Run: [Shareaza] "C:\Programme\Shareaza\Shareaza.exe" -tray
O4 - HKCU\..\Run: [SurfAccuracy] C:\Dokumente und Einstellungen\BATA\Anwendungsdaten\SurfAccuracy\SAcc.exe
O4 - HKCU\..\Run: [ReJf5vH] C:\Dokumente und Einstellungen\BATA\Anwendungsdaten\Microsoft\Windows\tcktkena.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Programme\CCleaner\ccleaner.exe" /AUTO
O4 - HKCU\..\Run: [WinButler] C:\Dokumente und Einstellungen\BATA\Anwendungsdaten\WinButler\WinButler.exe
O4 - HKCU\..\Run: [SfKg6wIPu] C:\Dokumente und Einstellungen\BATA\Anwendungsdaten\Microsoft\Windows\pwddyh.exe
O4 - HKCU\..\Run: [ChristmasTree] C:\DOKUME~1\BATA\LOKALE~1\Temp\Rar$EX00.062\New Folder\alberello.exe
O4 - Startup: PalNetaware.lnk = C:\Programme\Paltalk\pnetaware.exe
O4 - Global Startup: PalTalk.lnk = C:\Programme\Paltalk Messenger\paltalk.exe
O8 - Extra context menu item: Nach Microsoft &Excel exportieren - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Konsole - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Programme\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Programme\Paltalk Messenger\Paltalk.exe (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Programme\ICQ6\ICQ.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Programme\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
O10 - Unknown file in Winsock LSP: c:\programme\gemeinsame dateien\is3\anti-spyware\is3lsp.dll
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Programme\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [Link mogu videti samo ulogovani korisnici]
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: hpdj - HP - C:\DOKUME~1\BATA\LOKALE~1\Temp\hpdj.exe
O23 - Service: hpdj5100 - Unknown owner - C:\DOKUME~1\BATA\LOKALE~1\Temp\hpdj5100.exe (file missing)
O23 - Service: Print Spooler Service (i1sgx8u0) - Unknown owner - C:\WINDOWS\system32\wxjrvfki.exe
O23 - Service: STOPzilla Service (szserver) - iS3, Inc. - C:\Programme\Gemeinsame Dateien\iS3\Anti-Spyware\SZServer.exe



Poslao: 03 Feb 2008 13:10
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Skini ComboFix sa jedne od sledecih adresa na Desktop:
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.



Poslao: 03 Feb 2008 17:45
Idi na vrh
offline
  • Pridružio: 02 Feb 2008
  • Poruke: 104

ÉÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ»
º º
º ABLEHNUNGSHINWEIS (DISCLAIMER) DER GARANTIE AUF DIESE SOFTWARE. º
º º
º DIE SOFTWARE WIRD "AS IS" (IM IST-ZUSTAND) ZUR VERFšGUNG GESTELLT, º
º OHNE JEGLICHE GARANTIE. ALLE IMPLIZIERTEN GARANTIEN WERDEN AUSDRšCKLICH º
º DEMENTIERT. º
º º
ÌÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍ͹
º º
º Dieses Programm ist fr den privaten Gebrauch vorgesehen und sollte nie º
º in einem unbeaufsichtigten Umfeld benutzt werden. Sollten Infizierungen º
º gefunden werden, wird es automatisch Windows neustarten, um den º
º Entfernungsprozess zu beenden. º
º º
º BITTE STELLE SICHER, DASS ALLE OFFENEN BILDSCHIRMFENSTER GESCHLOSSEN º
º SIND, BEVOR DU MIT DEM PROGRAMM FORTFŽHRST. º
º º
º Wenn Du beenden musst, tippe unten '2' ... º
º º
ÈÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍÍͼ

. TIPPE 1 um fortzufahren, oder 2 um zu beenden. _

Dopuna: 03 Feb 2008 17:45

hvala nisam jos vest u forumu

Poslao: 03 Feb 2008 20:33
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

To sto si iskopirao nije log vec deo programa.
Na tom prozoru stisni taster 1 i isprati uputstva do kraja.
Kada zavrsi skeniranje, dobices tekstualni log otvoren u Notepadu (ukoliko koristis nemacki Windows onda je Notepad kod tebe Editor).

Poslao: 07 Feb 2008 13:43
Idi na vrh
offline
  • Pridružio: 02 Feb 2008
  • Poruke: 104

Cao. Puno hvala za upustva nisam bio tu ali sad imam takode problem.Formatirao sam window bio si u pravu na nemackom je bio sad imam englesku verziju U TOKU FORMATIRANJA POJAVIO MI SE PROZOR GDE JE PISALO FATAL ERROR AN ERROR HAS BEEN ENCOUNTERED THAT PREVENTS SETUP FROM CONTINUING.ONE OF THE COMPONENTS THAT WINDOWS NEEDS TO CONTINUE SETUP COULD NOT BE INSTALLED PRITISKAM NA OK I POJAVLJUJE SE PROZOR GDE PISE SYSTEM SETUP LOG C WINDOWS SETUPER. LOG kada sam pritisnuo na ok restartovao mi je pc tako par puta i neznam kako sam to uklonio i nastavio sa formatiranjem inace to se desavaloposle formatiranje particije pre podesavanja opcijeCUSTOMIZE kada sam zavrsio sve opet sada problemi ne mogu da podesim nista audio winamp, windows medija plejer nista ne mogu da slusam i gledam GDE SAM POGRESIO
PUNO HVALA

Poslao: 07 Feb 2008 19:03
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Ovo vec nije problem za Ambulantu.
Otvori adekvatnu temu u Windows forumu.

MyCity » Ambulanta -> Arhiva Ambulante » sta da radim

Ko je trenutno na forumu
 

Ukupno su 3098 korisnika na forumu :: 59 registrovanih, 7 sakrivenih i 3032 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, Aleksa 3215, AleksSE, Apok, Avalon015, bobo85, Bobrock1, bojankrstc, boromir, Branke90, Bubimir, C-Gun, cavatina, comi991, Crazzer, drimer, Duk011, ekser222, Electron, esx66, Feller, Georgius, GveX, HrcAk47, istina, jodzula, Kandrbandrdzilo, kaskadija, Marko Markoviæ, Miha79, Milometer, milutin134, morava_01, Nikola9223, opt1, Paklenica, PlayerOne, Profica, proka89, repac, RiV, sasovsky, singa, Sinisa76, Sir Budimir, Sirius, Sonic, stegonosa, styg, tanakadzo, theNedjeljko, tomo2, Tvrtko I, VekiJ, VJ, voja64, zeka013, zgoljo, Zoran1959