MyCity » Zaštita od zlonamernih programa » Kako izbrisati rootkit sa gmer

Kako izbrisati rootkit sa gmer

Napisano na dan: 19.6.2014

Kako izbrisati rootkit sa gmer
Sledeća strana Pagination

Idi na vrh

Poslao: 19 Jun 2014 15:46
Idi na vrh
offline
  • zdr 
  • Građanin
  • Pridružio: 01 Okt 2013
  • Poruke: 190

Skenirao sam komp sa gmer pa mi je izbacilo ovo kako da ih obrisem sada?
GMER 2.1.19357 - gmer.net
Rootkit scan 2014-06-19 15:36:06
Windows 5.1.2600 Service Pack 3 \Device\Harddisk0\DR0 -> \Device\Scsi\nvgts1Port2Path1Target1Lun0 ST316081 rev.3.AC 149.05GB
Running: fwkf3xn4.exe; Driver: C:\DOCUME~1\Zeljko\LOCALS~1\Temp\uxloakoc.sys


---- Kernel code sections - GMER 2.1 ----

.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF64303C0, 0x84E2FA, 0xE8000020]

---- Devices - GMER 2.1 ----

AttachedDevice \FileSystem\Fastfat \Fat fltMgr.sys

---- Registry - GMER 2.1 ----

Reg HKLM\SYSTEM\CurrentControlSet\Control\Video\{DF9F8E7A-D398-49F4-9522-389150B8C11A}\0000@D3D_\x3332\x3331 2089309684
Reg HKLM\SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Keys\001f81000830
Reg HKLM\SYSTEM\ControlSet002\Control\Video\{DF9F8E7A-D398-49F4-9522-389150B8C11A}\0000@D3D_\x3332\x3331 2089309684
Reg HKLM\SYSTEM\ControlSet002\Services\BTHPORT\Parameters\Keys\001f81000830 (not active ControlSet)
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System
Reg HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\System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
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}@jafhciigfadnijnpjglh 0x62 0x61 0x68 0x62 ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}@jafhciigfadnijnpjghh 0x62 0x61 0x68 0x62 ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}@iafageabocnbfjlhpk 0x6B 0x61 0x61 0x62 ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{7F42ED0A-A645-F5FF-B774-3FFFE25EA6D9}@happefdljeahocip 0x6B 0x61 0x61 0x62 ...



Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.
Poslao: 19 Jun 2014 17:06
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Šta tačno želiš da obrišeš? Ovdje ne vidim ništa sporno.



Poslao: 19 Jun 2014 22:36
Idi na vrh
offline
  • zdr 
  • Građanin
  • Pridružio: 01 Okt 2013
  • Poruke: 190

Pa ne znam ja,sta moze odavde Very Happy Posto se ne brise automatski sigurno rucno mora ne znam sta se sme obrisati.

Poslao: 19 Jun 2014 22:40
Idi na vrh
offline
  • Pridružio: 26 Avg 2010
  • Poruke: 10622
  • Gde živiš: Hypnos Control Room, Tokyo Metropolitan Government Building

Ne vidim ništa za brisanje. Ako sumnjaš da ti je računar zaražen, otvori temu u Ambulanti i isprati uputstvo za otvaranje teme:

http://www.mycity.rs/Ambulanta/
http://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

MyCity » Zaštita od zlonamernih programa » Kako izbrisati rootkit sa gmer

Ko je trenutno na forumu
 

Ukupno su 1218 korisnika na forumu :: 36 registrovanih, 7 sakrivenih i 1175 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, Apok, bokisha253, bolenbgd, cenejac111, crnitrn, deLacy, DonRumataEstorski, dragoljub11987, Gall, hyla, jackreacher011011, janbo, Joco Skljoco, Kubovac, laurusri, Leonov, Lošmi, mercedesamg, milutin134, MrNo, operniki, opt1, Oscar, panonski mornar, pein, procesor, Ripanjac, Srle993, tubular, Tvrtko I, Valter071, xpforswodniw, šumar bk2, žeks62, 125