Cudne aktivnosti

2

Cudne aktivnosti

offline
  • SVITAC 
  • Legendarni građanin
  • Pridružio: 28 Apr 2003
  • Poruke: 5919
  • Gde živiš: Beograd

Eventualno probaj da pregledas disk sa AD-AWARE-om 6.0 ..
Trazi SPY .. programe .. besplatan je za personalno koriscenje ..
I pojedini graficki programi imaju mogucnosta sakupljanja informacija o multimedijskom sadrzaju na hd-u .. tako da i njih mozes da precesljas ..



Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.
offline
  • PoP  Male
  • Ugledni građanin
  • Pridružio: 17 Apr 2003
  • Poruke: 420
  • Gde živiš: Pozega

Citat:ima xp pro i office xp pro i izbriso sam av i opet mi se to po nekad desava....hmmm neznam zasto....meni se nepali hdd,ali pocinje sve usporeno da mi radi Sad ovako nesto nepamtim u zadnji god. dana ... mozda treba da defragmentiras disk... a mozda je i zato sto si obrisao av... mozda ti nesto jede memoriju.... mozda Smile))) ....



offline
  • Pridružio: 18 Jul 2003
  • Poruke: 4196
  • Gde živiš: U zlatnom kavezu

@Puky
Moj AV je pre nekoliko minuta detaktovao i obrisao W32.Welchia.Worm znas li nesto o njemu?

Netdetect je programcic koji odradjuje auto update za AV

offline
  • Zoran Bujandric
  • Programer
  • Pridružio: 18 Apr 2003
  • Poruke: 152
  • Gde živiš: Podgorica

Objasnjenje i free removal tool na:

securityresponse.symantec.com/avcenter/venc/data/w32.welchia.worm.html

offline
  • Pridružio: 18 Apr 2003
  • Poruke: 5001
  • Gde živiš: Beograd

brksi ::
@neo
To je nemoguce zasto mi onda predlaze punu defragmentaciju kad pokrenem defrag program i zasto bi defrag radio svakodnevno... Prvo procitaj pa onda pricaj


to je moguce kako ne bi bilo moguce samo sto ne radi potpunu defragmentaciju jer bi mu duze trebalo da ga povratis u stanje za rad

iskljuci servise od symanteca kao sto je npr. Speed Disk service

offline
  • Teo 
  • Građanin
  • Pridružio: 09 Sep 2003
  • Poruke: 130
  • Gde živiš: Beograd

istaliro sam kav i naso mi je Worm.Win32.Welchia virus koji je obriso ali kad sam gledo na sajtu kasperkog naso sam da se taj virus sastoji iz dva dela iz dllhost.exe i svchost.exe folder dllhost.exe je detektovo kav i izvriso a folder svchost.exe se jos nalazi u mom konpjuteru i kav nepokazuje da je virus...sta da radim,dali jos imam virus...uradio sam Disk Defragmenter jos pre koji dan... ali to nema veze sa ovim... evo vec sam na netu 10 min. i nije poceo konpjuer da mi koci,ali sta bi sa dllhost.exe failmom dali je i on virus?

offline
  • Pridružio: 18 Jul 2003
  • Poruke: 4196
  • Gde živiš: U zlatnom kavezu

Meni je nasao u C:\WINDOWS\system32\TFTP812. Sad sam preuyeo removal pa cemo videti.
@Bone
hvala probacu

offline
  • Pridružio: 18 Jul 2003
  • Poruke: 4196
  • Gde živiš: U zlatnom kavezu

Sada mi je i removal rekao da imam taj virus tj. crv ali u drugom fajlu i obrisao ga je i sad kaže da više nemam.

Bone
Isključio sam videćemo šta će biti.......

offline
  • Teo 
  • Građanin
  • Pridružio: 09 Sep 2003
  • Poruke: 130
  • Gde živiš: Beograd

sto neprobas sa kav

offline
  • Zoran Bujandric
  • Programer
  • Pridružio: 18 Apr 2003
  • Poruke: 152
  • Gde živiš: Podgorica

Teo ::istaliro sam kav i naso mi je Worm.Win32.Welchia virus koji je obriso ali kad sam gledo na sajtu kasperkog naso sam da se taj virus sastoji iz dva dela iz dllhost.exe i svchost.exe folder dllhost.exe je detektovo kav i izvriso a folder svchost.exe se jos nalazi u mom konpjuteru i kav nepokazuje da je virus...sta da radim,dali jos imam virus...uradio sam Disk Defragmenter jos pre koji dan... ali to nema veze sa ovim... evo vec sam na netu 10 min. i nije poceo konpjuer da mi koci,ali sta bi sa dllhost.exe failmom dali je i on virus?

Pojasnjenje

Svchost (1) Svchost.exe
--------------------------------

(Microsoft) Service Host – Generic Host Process for Win32 Services. Windows 2000/XP only. SVCHOST is a generic process which acts as a host for processes that run from DLLs rather than EXEs. At startup SVCHOST checks the Services portion of the Registry to construct a list of DLL-based services that it needs to load, and then loads them. There can be many instances of SVCHOST running, as there will be one instance of SVCHOST for every DLL-based service or grouping of services (the grouping of services is determined by the programmers who wrote the services in question). Under Windows XP Professional you can find out what DLL-based services SVCHOST is running by typing Tasklist /SVC at a Command Prompt (MS-DOS Prompt – this command is not available in Windows XP Home), while under Windows 2000 you need to use the TLIST –s command from a Command Prompt (MS-DOS Prompt).

Recommendation :
An integral part of the operating system, leave alone – multiple instances of SVCHOST is a normal occurrence. If you experience SVCHOST errors, the problem is most likely not with SVCHOST but with the DLLs it is hosting.


Svchost (2) SVCHOST.EXE
----------------------------------

(???) Many viruses masquerade themselves as SVCHOST to escape detection. Some have names that are similar, such as SCCHOST, while others actually drop a program file called SVCHOST in the Windows or Windows System directory.

Recommendation :
The first recommendation is a simple one : always have a good antivirus product which is regularly updated (automatically preferably) and always renew your updates subscription when it expires. To detect if you have a virus that calls itself SVCHOST, first see if it shows up in Starter – if it does, then it is almost certain you have a virus. Secondly, if you have Windows 95/98/ME rather than WinNT4/2000/XP, then it is almost certain you have a virus. Thirdly, go to "Control Panel \ Administrative Tools \ Services" and look for any of the following services – if you find any of them, then you probably have a virus :

System Important Message service


Dllhost DLLHost.exe
-------------------------------

(Microsoft) DCOM support module for DLL based COM objects (DCOM = Distributed Component Object Model). DCOM is a software architecture model which is an intrinsic part of Windows, of most Microsoft products, and of many non-Microsoft products. In most cases you should never see DLLHOST in your Task List, as, typically, DLLHOST starts, does what it has to do, and then terminates. However, sometimes, if a Java COM object runs (this could happen if you are browsing the Internet and come to a page which has Java code), DLLHOST may not terminate, which is when you would see it in your Task List.

Recommendation :
Do not "End Task" it as there is no way to determine whether DLLHOST has completed its task or not. For the more advanced users, however, deleting the registry key "HKEY_LOCAL_MACHINE\SOFTWARE\ Microsoft\Java VM\MSDebug" can often solve the problem of DLLHOST constantly appearing in the Task List. Finally, if you keep getting DLLHOST errors on a Windows 2000/XP/2003 PC, then you may have the Welchia virus.

Ko je trenutno na forumu
 

Ukupno su 1029 korisnika na forumu :: 85 registrovanih, 15 sakrivenih i 929 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3028 - dana 22 Nov 2019 07:47

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 5.56, A.R.Chafee.Jr., amaterSRB, Apok, Areal84, azarakhsh, babaroga, bato3, baza, bojank, bojcistv, calvi, crnitrn, Crveni Kobac, Cvijo_ue, DeerHunter2, dejoglina, djboj, dobojman, dogodine, doktor1964, draganca, drdoca, Drug pukovnik, flash12, Gama, Georgius, herrDule, hyla, ikan, ivan1973, jimmy1, JOntra, Kinkou, kolateralnasteta, komkom, kovinacc, Leonardo, leptirleptir, ljs, madza, Marko Marković, Markogrozni, Markoni29, marsovac 2, mačković, mercedesamg, MILD66, Millennium, milos.cbr, Miskohd, nadjas_515, nebkv, Nebo_M, nenad812, ninareflex, operniki, ozzy, Panter, pavle_pzs, pein, PrintZip, raskoljnikov, royst33, ruseskij, ruso, sakota79, samsung, saputnik plavetnila, Sirius, Skijavoneska, snop, sosko2, srecko81, Srki94, stalker2, stug, Van, Vlada78, vladas87, voja64, VP3987, vsn111, Webb, Živković