[ Bojana489 @ 17.02.2010. 13:34 ] @
Pregledala sam sve teme u vezi slicnih problema ali nista slicno nisam nasla.Hitno mi treba pomoc.Upitanju je sledece:
Ubacim usb flash
Kompjuter pokaze dva signalizirajuca kratka tona da je nesto ubaceno u njega,ALI
U my kompjuter i u taskbaru nema nista,jednostavno ga uopste ne pokazuje
Izvadim usb
kompjuter da signal jednim dugim tonom,kao sto daje za svaki usb uredjaj.
U pitanju je apacer usb flash od 2 gb
N drugim kompjuterima sasvim normalno radi.
Drugi portovi na mom kompjuteru takodje rade(adsl modem mi je povezan preko usb kabla,i mis takodje)

To se desilo od kako je avast! antivirus pronasao viruse u
C:\WINDOWS\system32
mislim da je u pitanju malware virus
Sta mi preporucujete da radim?
Unapred hvala.
[ Horvat I @ 17.02.2010. 16:28 ] @
Komp ti verovatno ima usb1 prikljucke ili je u biosu tako setovano.
Po postavljanju trebac pokrenuti carobnjaka za nalazenje novoga hardvera i u roku par sekundi ga registruje.
[ Bojana489 @ 18.02.2010. 19:28 ] @
Ma nije zbog toga pre pet dana je sasvim dobro radio,ja sam proverila za svaki slucaj,nece da ga nadje.
Hvala u svakom slucaju.Poz
[ Binary Mind @ 18.02.2010. 21:17 ] @
Ako je uzrok problema malware, temu premestamo u forum "Zastita" jer sam Avast ocigledno nije dovoljan za resenje tvog problema. Postoji jos specijalizovanih alata kojim ces najverovatnije morati da skeniras racunar da bi potpuno ocistila racunar od gamadi, i nadajmo se svi, osposobila operativni sistem za normalan rad bez ponovne instalcije istog, mada ni ponovna instalacija Windowsa nije za izbegavati. Ponekad je ona mnogo bolje resenje od "krpljenja" starog sistema.
[ Bojana489 @ 19.02.2010. 16:05 ] @
Ne znam sta je razlog zato se i obraćam vama,a gde bih mogla da nadjem te programe za skeniranje?
[ magna86 @ 19.02.2010. 16:08 ] @
posto si u forumu zastita,pregledacemo ti racunar u nadi da necemo naci ni jednu infekciju:

Skini DDS Program na Desktop
http://download.bleepingcomputer.com/sUBs/dds.com

Dvoklikom pokreni dds.scr

Kad zavrsi, DDS ce otvoriti dva loga:
1. DDS.txt
2. Attach.txt
Oba izvestaja sacuvaj na Desktop.
Kopiraj mi DDS.txt
[ osimblog.net @ 19.02.2010. 20:43 ] @
Pogledaj dali ti se pojave kada desnim klikom odes na mycomputer > manage > storage device ..

Ili pogledaj u servisima dali ti je aktiviran "Plug and Play service"
[ Bojana489 @ 19.02.2010. 23:28 ] @

DDS (Ver_09-12-01.01) - NTFSx86
Run by Bojana at 0:12:18,14 on sub 20.02.2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.255.11 [GMT 1:00]

AV: avast! antivirus 4.8.1368 [VPS 100219-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
DDS
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\tlntsvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Conexant\Adsl\dslstat.exe
C:\Program Files\Conexant\Adsl\dslagent.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Bojana\My Documents\Downloads\RouterClient.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\PROGRA~1\THEKMP~1\KMPlayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Bojana\My Documents\Downloads\dds.com

============== Pseudo HJT Report ===============

uSearch Page = ${URL_SEARCHPAGE}
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2086743
mSearch Page = ${URL_SEARCHPAGE}
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
uURLSearchHooks: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
uURLSearchHooks: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearsharetb\BearShareDx.dll
BHO: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
BHO: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearsharetb\BearShareDx.dll
TB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
TB: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [CryptLoad] c:\documents and settings\bojana\my documents\downloads\RouterClient.exe
uRun: [SVCHOST.EXE] c:\windows\system32\drivers\svchost.exe
mRun: [C-Media Mixer] Mixer.exe /startup
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [DSLSTATEXE] c:\program files\conexant\adsl\dslstat.exe icon
mRun: [DSLAGENTEXE] c:\program files\conexant\adsl\dslagent.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32
dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\bojana\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\documents and settings\bojana\start menu\programs\startup\netuza32.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dslmon.lnk - c:\program files\sagem\sagem f@st 800-840\dslmon.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
TCP: {EB60050D-3807-4989-ADBB-3B0918A75FE5} = 77.105.0.18 77.105.0.19
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\bojana\applic~1\mozilla\firefox\profiles\12nhgqra.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Softonic-Eng7 Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=2&q=
FF - component: c:\documents and settings\bojana\application data\mozilla\firefox\profiles\12nhgqra.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\components\FFExternalAlert.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\veetle\player\npvlc.dll
FF - plugin: c:\program files\veetle\plugins\npVeetle.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-10-21 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-10-21 20560]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-10-21 138680]
R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-10-21 254040]
R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-10-21 352920]
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2010-2-16 104344]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2010-2-16 69656]

=============== Created Last 30 ================

2010-02-19 21:06:22 0 d-----w- c:\docume~1\alluse~1\applic~1\Mozilla Firefox
2010-02-16 13:40:18 21 ----a-w- c:\windows\Fast800.ini
2010-02-16 13:40:18 169 ----a-w- c:\windows\adidsl.ini
2010-02-16 13:40:01 253008 ----a-w- c:\windows\adirasx64.exe
2010-02-16 13:40:01 194128 ----a-w- c:\windows\adiras.exe
2010-02-16 01:54:22 26810 ----a-w- c:\windows\Sysvxd.exe
2010-02-16 00:19:32 34688 -c--a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2010-02-16 00:19:32 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2010-02-16 00:18:24 8576 -c--a-w- c:\windows\system32\dllcache\i2omgmt.sys
2010-02-16 00:18:24 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2010-02-16 00:18:10 8192 -c--a-w- c:\windows\system32\dllcache\changer.sys
2010-02-16 00:08:24 4 ----a-w- c:\docume~1\bojana\applic~1\avdrn.dat
2010-02-07 14:45:56 0 d-----w- c:\program files\LG Electronics
2010-02-07 14:45:03 81920 ----a-r- c:\windows\system32\srctrl.dll
2010-02-07 14:44:49 0 d-----w- c:\program files\LGGSM
2010-01-30 21:54:14 0 d-----w- c:\program files\StatMate
2010-01-30 21:53:56 0 d-----w- c:\program files\InStat3

==================== Find3M ====================

2010-02-16 13:40:18 32 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2010-01-02 15:24:51 123988 ----a-w- c:\windows\HPHins12.dat
2009-12-20 17:35:28 90112 ----a-w- c:\windows\DUMP3e9f.tmp
2009-10-21 07:28:28 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009102120091022\index.dat

============= FINISH: 0:13:39,20 ===============




Attach

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 10/21/2009 9:26:44 AM
System Uptime: 2/17/2010 8:53:19 AM (64 hours ago)

Motherboard: MICRO-STAR INC. | | MS-6704
Processor: Intel(R) Celeron(R) CPU 2.40GHz | FC-478 | 2405/100mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 74 GiB total, 6.205 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {36FC9E60-C465-11CF-8056-444553540000}
Description: USB Mass Storage Device
Device ID: USB\VID_1005&PID_B113\079A108497472195
Manufacturer: Compatible USB storage device
Name: USB Mass Storage Device
PNP Device ID: USB\VID_1005&PID_B113\079A108497472195
Service: USBSTOR

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Audio Splitter
Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Audio Splitter
PNP Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: splitter

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Acoustic Echo Canceller
Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Acoustic Echo Canceller
PNP Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: aec

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel GS Wavetable Synthesizer
Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel GS Wavetable Synthesizer
PNP Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: swmidi

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel DLS Synthesizer
Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC
Manufacturer: Microsoft
Name: Microsoft Kernel DLS Synthesizer
PNP Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC
Service: DMusic

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel DRM Audio Descrambler
Device ID: SW\{EEC12DB6-AD9C-4168-8658-B03DAEF417FE}\{ABD61E00-9350-47E2-A632-4438B90C6641}
Manufacturer: Microsoft
Name: Microsoft Kernel DRM Audio Descrambler
PNP Device ID: SW\{EEC12DB6-AD9C-4168-8658-B03DAEF417FE}\{ABD61E00-9350-47E2-A632-4438B90C6641}
Service: drmkaud

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

µTorrent
ACDSee Pro 2
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Help Center 1.0
Adobe Photoshop CS2
Adobe Reader 7.0.9
Adobe Stock Photos 1.0
AIMP2
Ask Toolbar
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
avast! Antivirus
BufferChm
CDBurnerXP
Conexant DSL Modem
CustomerResearchQFolder
D1300
D1300_Help
DeviceManagementQFolder
eSupportQFolder
EVEREST Ultimate Edition v5.00
Foxit Reader
HFSLIP Total Slipstream (v1.7.8, build 80614)
HP Customer Participation Program 7.0
HP Imaging Device Functions 7.0
HP Photosmart and Deskjet 7.0 Software
HP Photosmart Essential
HP Software Update
HP Solution Center 7.0
hph_ProductContext
hph_readme
hph_software
hph_software_req
HPPhotoSmartExpress
HPProductAssistant
Java(TM) 6 Update 15
JDownloader
K-Lite Mega Codec Pack 5.2.0
LG GSM PC Components
MarketResearch
MediaBar
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft .NET Framework 3.5
Microsoft Office PowerPoint 2003 Template Pack 1
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.5.8)
PCI Audio Driver
PHPNukeEN Toolbar
SAGEM F@st 800-840
Softonic-Eng7 Toolbar
SolutionCenter
Status
The KMPlayer (remove only)
Toolbox
TrayApp
Unload
Veetle TV 0.9.15
WebFldrs XP
WebReg
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

2/16/2010 5:09:33 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the avast! Web Scanner service to connect.
2/16/2010 5:09:33 AM, error: Service Control Manager [7000] - The avast! Web Scanner service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
2/16/2010 5:07:18 AM, error: Service Control Manager [7023] - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error: The system cannot find the file specified.
2/16/2010 5:06:23 AM, error: Disk [15] - The device, \Device\Harddisk1\D, is not ready for access yet.
2/16/2010 5:03:23 AM, error: DCOM [10000] - Unable to start a DCOM Server: {9EB4C4CB-74C2-4BE9-AA5D-8249F16020AD}. The error: "%1450" Happened while starting this command: C:\PROGRA~1\THEKMP~1\KMPlayer.exe -Embedding
2/16/2010 3:07:52 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service helpsvc with arguments "" in order to run the server: {833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}
2/16/2010 1:27:22 AM, error: Service Control Manager [7000] - The Conexant USB ADSL WAN Modem service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:27:15 AM, error: Service Control Manager [7000] - The USB Mass Storage Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:50 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbstor.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:43 AM, error: Service Control Manager [7000] - The Microsoft USB PRINTER Class service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:40 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbprint.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:35 AM, error: Service Control Manager [7000] - The Microsoft USB Generic Parent Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:17 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbccgp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tdtcp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:06 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tdpipe.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:35 AM, error: Service Control Manager [7000] - The Microsoft Kernel GS Wavetable Synthesizer service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:28 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\swmidi.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:20 AM, error: Service Control Manager [7000] - The StarOpen service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:15 AM, error: Service Control Manager [7000] - The Microsoft Kernel Audio Splitter service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file sfloppy.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\splitter.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:23:28 AM, error: Service Control Manager [7000] - The Secdrv service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:23:21 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\rootmdm.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:23:14 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\rdpwd.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:20:38 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\nwlnkfwd.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:20:38 AM, error: Service Control Manager [7001] - The IPX Traffic Filter Driver service depends on the IPX Traffic Forwarder Driver service which failed to start because of the following error: The system cannot find the file specified.
2/16/2010 1:20:38 AM, error: Service Control Manager [7000] - The IPX Traffic Forwarder Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:30 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\nwlnkflt.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:20:23 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mspqm.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:20:23 AM, error: Service Control Manager [7000] - The Microsoft Streaming Quality Manager Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:16 AM, error: Service Control Manager [7000] - The Microsoft Streaming Clock Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:15 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mspclock.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
2/16/2010 1:20:08 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file lbrtfdc.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.10.1.0.
2/16/2010 1:20:07 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mskssrv.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
2/16/2010 1:20:07 AM, error: Service Control Manager [7000] - The Microsoft Streaming Service Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:32 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\irenum.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:31 AM, error: Service Control Manager [7000] - The IR Enumerator Service service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:24 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipnat.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:24 AM, error: Service Control Manager [7000] - The IP Network Address Translator service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:16 AM, error: Service Control Manager [7000] - The IP in IP Tunnel Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:07 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipinip.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:01 AM, error: Service Control Manager [7000] - The IP Traffic Filter Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:58 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipfltdrv.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:18:51 AM, error: Service Control Manager [7000] - The IPv6 Windows Firewall Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:39 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ip6fw.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:34 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file i2omgmt.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:32 AM, error: Service Control Manager [7000] - The i2omgmt service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:24 AM, error: Service Control Manager [7000] - The General Purpose USB Driver (e4ldr.sys) service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:14 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file changer.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:13 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\drmkaud.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:13 AM, error: Service Control Manager [7000] - The Microsoft Kernel DRM Audio Descrambler service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:08 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\dmusic.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:06 AM, error: Service Control Manager [7000] - The Microsoft Kernel DLS Syntheiszer service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:17:09 AM, error: Service Control Manager [7000] - The ATM ARP Client Protocol service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:17:08 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\atmarpc.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:16:52 AM, error: Service Control Manager [7000] - The RAS Asynchronous Media Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:16:36 AM, error: Service Control Manager [7000] - The Microsoft Kernel Acoustic Echo Canceller service failed to start due to the following error: The system cannot find the file specified.
2/15/2010 8:27:02 PM, error: Service Control Manager [7034] - The avast! Web Scanner service terminated unexpectedly. It has done this 1 time(s).
2/15/2010 8:14:55 PM, error: Service Control Manager [7000] - The General Purpose USB Driver (e4ldr.sys) service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

==== End Of File ===========================




Eto to bi bilo to.
Proverila sam i u manege,removable storage nema ga.
[ magna86 @ 20.02.2010. 12:40 ] @
Skini program Malwarebytes' Anti-Malware
Dvoklikom pokreni instalaciju
Na samom pocetku proveri da li su stiklirane ove opcije
Update Malwarebytes' Anti-Malware
Launch Malwarebytes Anti-Malware

Zatim klikni Finish.

Izaberi opciju Perform Quick Scan i klikni Scan.
Po završetku procesa klikni OK, Show Results: u listi detektovanog malware-a proveri da li su obelezene sve stavke i klikni Remove Selected.

*Po zavrsetku ciscenja zakaci MBAM log na forum.
*Ponovo pokreni DDS program i kopiraj svez DDS.txt log
[ Bojana489 @ 20.02.2010. 14:24 ] @
Malwarebytes' Anti-Malware 1.44
Database version: 3766
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

20.2.2010 15:17:34
mbam-log-2010-02-20 (15-17-34).txt

Scan type: Quick Scan
Objects scanned: 137158


mbam
Time elapsed: 29 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 12

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Itana\My Documents\downloads\MyWebFaceSetup2.3.50.62.GRfox000(2).exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Itana\My Documents\downloads\MyWebFaceSetup2.3.50.62.GRfox000.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-606747145-436374069-1606980848-1004\Dc49.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-606747145-436374069-1606980848-1004\Dc50.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-606747145-436374069-1606980848-1004\Dc51.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Start Menu\Programs\Startup\netuza32.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Local Settings\Temporary Internet Files\Content.IE5\5P2VNOZK\load[1].exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Itana\Local Settings\Temporary Internet Files\Content.IE5\PAPXR2GD\MyWebFaceSetup2.3.50.62.GRman000[1].exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Local Settings\Temporary Internet Files\Softonic-Eng7_EN.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Local Settings\Temporary Internet Files\udRemove.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Sysvxd.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Application Data\avdrn.dat (Malware.Trace) -> Quarantined and deleted successfully.

U toku skeniranja samo dva puta mi se pojavio avast da je nasao virus,a ovaj je nasao 17 sto trojanaca sto malwara,i ostalih virusa.Jel treba da instaliram neki drugi anti virus?Koji bi to bio?
Kaze da moram da restartujem komp pa cu naknadno poslati dds.HVALA PUNO

[ magna86 @ 20.02.2010. 14:56 ] @
nema na cemu ;)

restartuj racunar pa mi daj svez dds.txt log i javi stanje
[ Bojana489 @ 22.02.2010. 14:45 ] @
Izvinjavam se na kasnjenju ,kompjuter mi se zabagovao skroz,nisam mogla da se konektujem,a kao sto znate imam problem sa usbom i nisam mogla da prebacim DDS ali evo ga sad.




DDS (Ver_09-12-01.01) - NTFSx86
Run by Bojana at 16:04:12,98 on sub 20.02.2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.255.49 [GMT 1:00]

AV: avast! antivirus 4.8.1368 [VPS 100219-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\tlntsvr.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Conexant\Adsl\dslstat.exe
C:\Program Files\Conexant\Adsl\dslagent.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Documents and Settings\Bojana\Desktop\Downloads\dds.com
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

============== Pseudo HJT Report ===============

uSearch Page = ${URL_SEARCHPAGE}
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2086743
mSearch Page = ${URL_SEARCHPAGE}
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
uURLSearchHooks: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
uURLSearchHooks: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearsharetb\BearShareDx.dll
BHO: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
BHO: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearsharetb\BearShareDx.dll
TB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
TB: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [CryptLoad] c:\documents and settings\bojana\my documents\downloads\RouterClient.exe
mRun: [C-Media Mixer] Mixer.exe /startup
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [DSLSTATEXE] c:\program files\conexant\adsl\dslstat.exe icon
mRun: [DSLAGENTEXE] c:\program files\conexant\adsl\dslagent.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32
dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\bojana\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dslmon.lnk - c:\program files\sagem\sagem f@st 800-840\dslmon.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
TCP: {EB60050D-3807-4989-ADBB-3B0918A75FE5} = 77.105.0.18 77.105.0.19
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\bojana\applic~1\mozilla\firefox\profiles\12nhgqra.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Softonic-Eng7 Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=2&q=
FF - component: c:\documents and settings\bojana\application data\mozilla\firefox\profiles\12nhgqra.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\components\FFExternalAlert.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\veetle\player\npvlc.dll
FF - plugin: c:\program files\veetle\plugins\npVeetle.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R?3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-10-21 254040]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-10-21 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-10-21 20560]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-10-21 138680]
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2010-2-16 104344]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2010-2-16 69656]
S3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-10-21 352920]

=============== Created Last 30 ================

2010-02-20 13:37:11 0 d-----w- c:\docume~1\bojana\applic~1\Malwarebytes
2010-02-20 13:36:23 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-20 13:36:15 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-02-20 13:36:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-20 13:36:12 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-19 21:06:22 0 d-----w- c:\docume~1\alluse~1\applic~1\Mozilla Firefox
2010-02-16 13:40:18 21 ----a-w- c:\windows\Fast800.ini
2010-02-16 13:40:18 169 ----a-w- c:\windows\adidsl.ini
2010-02-16 13:40:01 253008 ----a-w- c:\windows\adirasx64.exe
2010-02-16 13:40:01 194128 ----a-w- c:\windows\adiras.exe
2010-02-16 00:19:32 34688 -c--a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2010-02-16 00:19:32 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2010-02-16 00:18:24 8576 -c--a-w- c:\windows\system32\dllcache\i2omgmt.sys
2010-02-16 00:18:24 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2010-02-16 00:18:10 8192 -c--a-w- c:\windows\system32\dllcache\changer.sys
2010-02-07 14:45:56 0 d-----w- c:\program files\LG Electronics
2010-02-07 14:45:03 81920 ----a-r- c:\windows\system32\srctrl.dll
2010-02-07 14:44:49 0 d-----w- c:\program files\LGGSM
2010-01-30 21:54:14 0 d-----w- c:\program files\StatMate
2010-01-30 21:53:56 0 d-----w- c:\program files\InStat3

==================== Find3M ====================

2010-02-16 13:40:18 32 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2010-01-02 15:24:51 123988 ----a-w- c:\windows\HPHins12.dat
2009-12-20 17:35:28 90112 ----a-w- c:\windows\DUMP3e9f.tmp
2009-10-21 07:28:28 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009102120091022\index.dat

============= FINISH: 16:06:14,42 ===============


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 10/21/2009 9:26:44 AM
System Uptime: 2/20/2010 3:53:20 PM (1 hours ago)

Motherboard: MICRO-STAR INC. | | MS-6704
Processor: Intel(R) Celeron(R) CPU 2.40GHz | FC-478 | 2405/100mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 74 GiB total, 6.548 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Audio Splitter
Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Audio Splitter
PNP Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: splitter

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Acoustic Echo Canceller
Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Acoustic Echo Canceller
PNP Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: aec

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel GS Wavetable Synthesizer
Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel GS Wavetable Synthesizer
PNP Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: swmidi

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel DLS Synthesizer
Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC
Manufacturer: Microsoft
Name: Microsoft Kernel DLS Synthesizer
PNP Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC
Service: DMusic

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

µTorrent
ACDSee Pro 2
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Help Center 1.0
Adobe Photoshop CS2
Adobe Reader 7.0.9
Adobe Stock Photos 1.0
AIMP2
Ask Toolbar
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
avast! Antivirus
BufferChm
CDBurnerXP
Conexant DSL Modem
CustomerResearchQFolder
D1300
D1300_Help
DeviceManagementQFolder
eSupportQFolder
EVEREST Ultimate Edition v5.00
Foxit Reader
HFSLIP Total Slipstream (v1.7.8, build 80614)
HP Customer Participation Program 7.0
HP Imaging Device Functions 7.0
HP Photosmart and Deskjet 7.0 Software
HP Photosmart Essential
HP Software Update
HP Solution Center 7.0
hph_ProductContext
hph_readme
hph_software
hph_software_req
HPPhotoSmartExpress
HPProductAssistant
Java(TM) 6 Update 15
JDownloader
K-Lite Mega Codec Pack 5.2.0
LG GSM PC Components
Malwarebytes' Anti-Malware
MarketResearch
MediaBar
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft .NET Framework 3.5
Microsoft Office PowerPoint 2003 Template Pack 1
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.5.8)
PCI Audio Driver
PHPNukeEN Toolbar
SAGEM F@st 800-840
Softonic-Eng7 Toolbar
SolutionCenter
Status
The KMPlayer (remove only)
Toolbox
TrayApp
Unload
Veetle TV 0.9.15
WebFldrs XP
WebReg
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

2/20/2010 3:32:04 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: IntelIde
2/16/2010 5:07:18 AM, error: Service Control Manager [7023] - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error: The system cannot find the file specified.
2/16/2010 5:03:23 AM, error: DCOM [10000] - Unable to start a DCOM Server: {9EB4C4CB-74C2-4BE9-AA5D-8249F16020AD}. The error: "%1450" Happened while starting this command: C:\PROGRA~1\THEKMP~1\KMPlayer.exe -Embedding
2/16/2010 3:07:52 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service helpsvc with arguments "" in order to run the server: {833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}
2/16/2010 1:27:22 AM, error: Service Control Manager [7000] - The Conexant USB ADSL WAN Modem service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:27:15 AM, error: Service Control Manager [7000] - The USB Mass Storage Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:50 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbstor.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:43 AM, error: Service Control Manager [7000] - The Microsoft USB PRINTER Class service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:40 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbprint.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:35 AM, error: Service Control Manager [7000] - The Microsoft USB Generic Parent Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:17 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbccgp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tdtcp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:00 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tdpipe.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:35 AM, error: Service Control Manager [7000] - The Microsoft Kernel GS Wavetable Synthesizer service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:28 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\swmidi.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:20 AM, error: Service Control Manager [7000] - The StarOpen service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:15 AM, error: Service Control Manager [7000] - The Microsoft Kernel Audio Splitter service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file sfloppy.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\splitter.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:23:28 AM, error: Service Control Manager [7000] - The Secdrv service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:23:15 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\rootmdm.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:23:14 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\rdpwd.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:20:38 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\nwlnkfwd.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:20:38 AM, error: Service Control Manager [7001] - The IPX Traffic Filter Driver service depends on the IPX Traffic Forwarder Driver service which failed to start because of the following error: The system cannot find the file specified.
2/16/2010 1:20:33 AM, error: Service Control Manager [7000] - The IPX Traffic Forwarder Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:30 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\nwlnkflt.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:20:23 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mspqm.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:20:23 AM, error: Service Control Manager [7000] - The Microsoft Streaming Quality Manager Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:16 AM, error: Service Control Manager [7000] - The Microsoft Streaming Clock Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:15 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mspclock.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
2/16/2010 1:20:07 AM, error: Service Control Manager [7000] - The Microsoft Streaming Service Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:02 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file lbrtfdc.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.10.1.0.
2/16/2010 1:20:01 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mskssrv.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
2/16/2010 1:19:32 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\irenum.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:31 AM, error: Service Control Manager [7000] - The IR Enumerator Service service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:24 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipnat.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:24 AM, error: Service Control Manager [7000] - The IP Network Address Translator service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:16 AM, error: Service Control Manager [7000] - The IP in IP Tunnel Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:07 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipinip.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:01 AM, error: Service Control Manager [7000] - The IP Traffic Filter Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:58 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipfltdrv.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:18:51 AM, error: Service Control Manager [7000] - The IPv6 Windows Firewall Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:39 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ip6fw.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:34 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file i2omgmt.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:32 AM, error: Service Control Manager [7000] - The i2omgmt service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:24 AM, error: Service Control Manager [7000] - The General Purpose USB Driver (e4ldr.sys) service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:14 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file changer.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:13 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\drmkaud.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:13 AM, error: Service Control Manager [7000] - The Microsoft Kernel DRM Audio Descrambler service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:08 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\dmusic.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:06 AM, error: Service Control Manager [7000] - The Microsoft Kernel DLS Syntheiszer service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:17:09 AM, error: Service Control Manager [7000] - The ATM ARP Client Protocol service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:17:03 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\atmarpc.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:16:52 AM, error: Service Control Manager [7000] - The RAS Asynchronous Media Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:16:36 AM, error: Service Control Manager [7000] - The Microsoft Kernel Acoustic Echo Canceller service failed to start due to the following error: The system cannot find the file specified.
2/13/2010 12:28:37 PM, error: Service Control Manager [7034] - The avast! Web Scanner service terminated unexpectedly. It has done this 1 time(s).
2/13/2010 12:13:33 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the avast! Web Scanner service to connect.
2/13/2010 12:13:33 PM, error: Service Control Manager [7000] - The avast! Web Scanner service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
2/13/2010 12:13:07 PM, error: Service Control Manager [7000] - The General Purpose USB Driver (e4ldr.sys) service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
2/13/2010 12:11:04 PM, error: Disk [15] - The device, \Device\Harddisk1\D, is not ready for access yet.

==== End Of File ===========================

[ magna86 @ 22.02.2010. 16:26 ] @
Bojana,izvestaj vise nepokazuje tragove infekcije. Ovo bi trebao da je cist PC
No morali bi odraditi jos jednu malu stvar.

Uz poruku sam ti upload-ovao neki zapakovani file. Skini ga na Desktop.
Raspakuj ga i pokreni file. Na Desktopu ce ti se pojaviti notepad ( log ) pod nazivom showreg

sadrzaj tog file-a prikaci uz poruku.

[Ovu poruku je menjao magna86 dana 22.02.2010. u 17:45 GMT+1]
[ Bojana489 @ 23.02.2010. 12:41 ] @
Ne znam sta se desava ali meni i dalje nece da prikaze usb,ali kad sam ga ubacila u komp,prikazao mi je poruku da je on HIGH SPEED MASS STORAGE DEVICE,i da imam 6 portova,tu poruku prvi put vidim i nista ne razumem,

[Ovu poruku je menjao Bojana489 dana 23.02.2010. u 13:57 GMT+1]
[ magna86 @ 23.02.2010. 15:46 ] @
Uz poruku sam ti prikacio File pod nazivom fixMe...
Skini taj file na Desktop.Raspakuj ga i pokreni ga. Na pitanje odgovori sa Yes

Restartuj kompjuter,to je to. Logovi su cisti,nevidim nijednu infekciju.


..........


Sto se tice USB-a...hm...za pocetak trebali bi da vidimo sadrzaj Device Manager-a

Start >> Run kopiraj ovo:
Citat:
devmgmt.msc

Ok

Da li ima negde neko znak pitanje?
Imas li Universal Serial Bus controllers?
Najbolje da uradis PrintScreen Device Manager-a (da ga uslikas srpski receno )

Kako radis PrintScreen?

Otvoris Device Manager i onda na tastaturi pritisnes dugme Print Scrn.
Nakon toga otvoris Paint i u Edit meniju odaberes Paste.
Onda odes na File>Save As,
pa dole u dijalogu za snimanje promenis format u JPG (nemoj BMP)
i nakon toga snimis sliku negde na HD (Desktop najbolje), pa je nakon toga uploadujes na forum.

i mislim da smo sa zastitom zavrsili pa ako se moderatori slazu da se tema prebaci u Windows forum.
[ Bojana489 @ 02.03.2010. 16:26 ] @
OK hvala.
Evo sta kaze u device manegeru kad otvorim usb,Sta sad trerba da radim?



Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
[ BigFoot @ 17.04.2010. 18:59 ] @
Da ne započinjem novu temu...
Nisam početnik, ali sam napravio početničku grešku. Umesto da koristim USB flash sa zaključavanjem (ReadOnly), koristio sam standardni i na njemu odneo pripremu za izradu pečata. Čim je ubode u računar video sam kako folder ikone postaju bledje i odmah sam izvadio flash. Sve mi je bilo jasno, ali kasno
Na svom računaru sam pronašao gomilu EXE fajlova sa ikonom foldera, a folderi su bili sakriveni i slučaj mi je poznat. Pobrisao zaražene EXE, skinuto Hidden & System atribute na svim folderima, podfolderima i fajlovima pomoću Total Commander-a i izgledalo je da je sve ok. Sve sam video regularno. Medjutim, flash se odjavio i više nisam uspeo da ga vidim.
Ubadanjem u USB port se regularno prijavi, ali ne omogućava pristup fajl sistemu. Recovery programi ne pomažu (GetData Back, Recover My Files). Probano i iz Linux-a.
Sa skidanjem podataka još nisam počeo jer mi treba "geometrija" diska. Šta mi je činiti?
Da li je moguće da sam skinuo atribute sa nečega što nije trebalo, mada sve znam šta je na flash-u bilo. Na root-u je bio onaj njihov CarryItEasy.exe program.
Možda je flash i crkao, ali mi je jako čudno da se to desi baš kada sam brisao viruse sa njega...
[ drobac92 @ 22.03.2012. 22:38 ] @
Drustvo racunar mi prepoznaje telefon kao fotoaparat?? Ne mogu da prebacujem vise nista na fon sa racunara.. ne znam u cemu je problem radio mi je ok dok nisam reinstalirao windows, Telefon je NOKIA X3-00. Unapred hvala.
[ Nina Ster @ 23.05.2014. 16:34 ] @
Zdravo, vidim da je neko imao isti problem pa sam sledila iste postupke kao i Bojana iz gornjeg posta.
I moj kopmjuterne prepoznaje USB flash. Radi se za Transcend 2.0 (8 GB)

Evo sta kaze DDs.txt

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 6.0.2900.5512 BrowserJavaVersion: 10.51.2
Run by User at 17:23:48 on 2014-05-23
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1213 [GMT 2:00]
.
AV: Avira Desktop *Enabled/Updated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
============== Running Processes ================
.
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Application Updater\ApplicationUpdater.exe
C:\Program Files\IVT Corporation\BlueSoleil\BTNtService.exe
C:\Program Files\Java\jre7\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\IVT Corporation\BlueSoleil\StartSkysolSvc.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\CyberLink\PowerDVD9\PDVD9Serv.exe
C:\Program Files\Cyberlink\Shared Files\brs.exe
C:\WINDOWS\PixArt\PAP7501\GUCI_AVS.exe
C:\WINDOWS\PixArt\PAP7501\PACTray.exe
C:\PROGRA~1\BEARSH~1\MediaBar\DataMngr\DataMngrUI.exe
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe
C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Kodak\KODAK Share Button App\Listener.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Common Files\Spigot\Search Settings\SearchSettings.exe
C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\Teleca Shared\CapabilityManager.exe
C:\Program Files\Common Files\Ahead\lib\NMBgMonitor.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\McAfee Security Scan\3.8.141\SSScheduler.exe
C:\Program Files\Microsoft Office\Office12\ONENOTEM.EXE
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil.exe
C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleil VoIP Plugin.exe
C:\Program Files\Common Files\Teleca Shared\Generic.exe
C:\Program Files\Sony Ericsson\Mobile2\Mobile Phone Monitor\epmworker.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Common Files\Java\Java Update\jucheck.exe
C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k NetworkService
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\system32\svchost.exe -k imgsvc
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://eu.ask.com?o=15573&l=dis
uSearch Bar = hxxp://search.bearshare.com/sidebar.html?src=ssb
uInternet Connection Wizard,ShellNext = iexplore
mSearchAssistant = hxxp://search.bearshare.com/sidebar.html?src=ssb
uURLSearchHooks: YTD Toolbar: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - c:\program files\ytd toolbar\ie\9.2\ytdToolbarIE.dll
uURLSearchHooks: {D8278076-BC68-4484-9233-6E7F1628B56C} - <orphaned>
uURLSearchHooks: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\prxtbBS_1.dll
BHO: MediaBar: {0974BA1E-64EC-11DE-B2A5-E43756D89593} - c:\program files\bearshare applications\mediabar\toolbar\BearshareMediabarDx.dll
BHO: MSS+ Identifier: {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} - c:\program files\mcafee security scan\3.8.141\McAfeeMSS_IE.dll
BHO: Speed Test (4354): {11C8C9C0-D918-44C0-8B5E-D297DA42F2C7} - c:\program files\speed test (4354)\ScriptHost.dll
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Free Games (4357): {2977C29A-6723-4436-90BB-F7C5FDEF88A1} - c:\program files\free games (4357)\ScriptHost.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - <orphaned>
BHO: Groove GFS Browser Helper: {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: UrlHelper Class: {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - c:\program files\bearshare applications\mediabar\datamngr\IEBHO.dll
BHO: Java(tm) Plug-In SSV Helper: {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - c:\program files\java\jre7\bin\ssv.dll
BHO: Windows Live Sign-in Helper: {9030D464-4C02-4ABF-8ECC-5164760863C6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
BHO: YTD Toolbar: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - c:\program files\ytd toolbar\ie\9.2\ytdToolbarIE.dll
BHO: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\prxtbBS_1.dll
TB: BS Player Toolbar: {FED66DC5-1B74-4A04-8F5C-15C5ACE2B9A5} - c:\program files\bs_player\prxtbBS_1.dll
TB: MediaBar: {0974BA1E-64EC-11DE-B2A5-E43756D89593} - c:\program files\bearshare applications\mediabar\toolbar\BearshareMediabarDx.dll
TB: BS Player Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - c:\program files\bs_player\prxtbBS_1.dll
TB: YTD Toolbar: {F3FEE66E-E034-436a-86E4-9690573BEE8A} - c:\program files\ytd toolbar\ie\9.2\ytdToolbarIE.dll
uRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
uRun: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "c:\program files\common files\ahead\lib\NMBgMonitor.exe"
uRun: [uTorrent] "c:\program files\utorrent\uTorrent.exe"
uRun: [Google Update] "c:\documents and settings\user\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [KGShareApp] c:\program files\kodak\kodak share button app\KGShare_App.exe
uRun: [MSMSGS] "c:\program files\messenger\msmsgs.exe" /background
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
uRun: [Facebook Update] "c:\documents and settings\user\local settings\application data\facebook\update\FacebookUpdate.exe" /c /nocrashserver
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [CorelDRAW Graphics Suite 11b] <no file>
dRun: [Nokia.PCSync] c:\documents and settings\user\desktop\nokia pc suite 6\PcSync2.exe /NoDialog
dRunOnce: [RunNarrator] Narrator.exe
StartupFolder: c:\docume~1\user\startm~1\programs\startup\onenot~1.lnk - c:\program files\microsoft office\office12\ONENOTEM.EXE
StartupFolder: c:\documents and settings\user\start menu\programs\startup\OneNote Table Of Contents.onetoc2
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueso~1.lnk - c:\program files\ivt corporation\bluesoleil\gprs.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\mcafee~1.lnk - c:\program files\mcafee security scan\3.8.141\SSScheduler.exe
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDriveTypeAutoRun = dword:145
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\program files\microsoft office\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503}
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
TCP: NameServer = 62.162.58.46 89.205.127.21
TCP: Interfaces\{8B6F515F-3060-4E7B-B92F-1B4FD0D48B56} : DHCPNameServer = 62.162.58.46 89.205.127.21
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\windows\system32\Skype4COM.dll
AppInit_DLLs= c:\progra~1\bearsh~1\mediabar\datamngr\datamngr.dll
SEH: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
Hosts: 127.0.0.1 mpa.one.microsoft.com
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\documents and settings\user\application data\mozilla\firefox\profiles\vdy7q1il.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1750559&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://eu.ask.com?o=15573&l=dis
FF - plugin: c:\documents and settings\user\application data\mozilla\plugins\np-mswmp.dll
FF - plugin: c:\documents and settings\user\local settings\application data\facebook\video\skype\npFacebookVideoCalling.dll
FF - plugin: c:\documents and settings\user\local settings\application data\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: c:\program files\adobe\reader 11.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\google earth\plugin\npgeplugin.dll
FF - plugin: c:\program files\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - plugin: c:\program files\google\update\1.3.21.115\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.135\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.145\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.153\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.53\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.57\npGoogleUpdate3.dll
FF - plugin: c:\program files\google\update\1.3.21.65\npGoogleUpdate3.dll
FF - plugin: c:\program files\java\jre7\bin\npjpi170_25.dll
FF - plugin: c:\program files\java\jre7\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\mcafee security scan\3.0.318\npMcAfeeMSS.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_8_800_94.dll
FF - plugin: c:\windows\system32\npdeployJava1.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0033-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0035-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA} - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0037-ABCDEFFEDCBA}
FF - Ext: Conduit Engine : [email protected] - %profile%\extensions\[email protected]
FF - Ext: MediaBar: {E84D42CA-64EB-11DE-A65F-8C3656D89593} - %profile%\extensions\{E84D42CA-64EB-11DE-A65F-8C3656D89593}
FF - Ext: BS Player Community Toolbar: {fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5} - %profile%\extensions\{fed66dc5-1b74-4a04-8f5c-15c5ace2b9a5}
.
============= SERVICES / DRIVERS ===============
.
R1 avkmgr;avkmgr;c:\windows\system32\drivers\avkmgr.sys [2013-7-24 37352]
R2 {B154377D-700F-42cc-9474-23858FBDF4BD};Power Control [2010/07/21 14:48:24];c:\program files\cyberlink\powerdvd9\000.fcl [2009-8-28 87536]
R2 AntiVirSchedulerService;Avira Scheduler;c:\program files\avira\antivir desktop\sched.exe [2013-7-24 440400]
R2 AntiVirService;Avira Real-Time Protection;c:\program files\avira\antivir desktop\avguard.exe [2013-7-24 440400]
R2 Application Updater;Application Updater;c:\program files\application updater\ApplicationUpdater.exe [2014-5-9 807800]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2013-7-24 90400]
R2 Start BT in service;Start BT in service;c:\program files\ivt corporation\bluesoleil\StartSkysolSvc.exe [2007-12-27 51816]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [2010-7-21 1684736]
S3 GUCI_AVS;Generic USB Controller Interface (AVS);c:\windows\system32\drivers\GUCI_AVS.sys [2010-7-21 560128]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\program files\mcafee security scan\3.8.141\McCHSvc.exe [2014-1-16 235696]
.
=============== Created Last 30 ================
.
2014-05-20 18:15:43 -------- d-----w- c:\documents and settings\user\application data\Search Settings
2014-05-20 18:15:41 -------- d-----w- c:\program files\YTD Toolbar
2014-05-20 18:15:41 -------- d-----w- c:\program files\common files\Spigot
2014-05-20 18:15:41 -------- d-----w- c:\program files\Application Updater
.
==================== Find3M ====================
.
2014-05-20 19:10:35 70832 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2014-05-20 19:10:35 692400 ----a-w- c:\windows\system32\FlashPlayerApp.exe
.
============= FINISH: 17:24:06.43 ===============


Ako neko moze da mi odgovori bila bih veoma zahvalna
Pozdrav
[ crnilabrador @ 23.05.2014. 17:53 ] @
Kopjuter ti je prepun problema, i ako je u ovakvom stanju, ko zna koliko je narusen integritet registrija. U prevodu, ukljuci usb fles u neki drugi kompjuter koji je ispravan i u boljem stanju od tvog, i vidi da li ce tamo da radi. Da bi utvrdila da li je uopste ziv taj fles. Ako hoce da radi na drugom kompu, pomoci ce ti ovde da koliko toliko povratis racunar u stanje za normalan rad.

Mada ako i radi i ne radi usb fles, treba da sredis ovo od ovih conduita, bearsherova i svacega po kompu. Verovatno ce se uskoro javiti momci sa ovog foruma pa ce ti pomoci. Ili sledi uputstva sa prethodnih tema.
[ kristi1 @ 24.05.2014. 11:25 ] @
Pokreni AdwCleaner
Klikni Scan
Klikni Clean
Potvrdi sa OK sve do restarta.


Dostavi mi log.







Arrow Preuzmi instalaciju za Malwarebytes Anti-Malware (MBAM) ver.2.0 i instaliraj aplikaciju.

http://downloads.malwarebytes.org/file/mbam

Dvoklik na mbam-setup.exe i prati uputstva za instalaciju. Instalacija je klasicna, "Next > I Agree . . > Next > Install" princip. Po zavrsenoj instalaciji, klikni Finish.
Napomena: 14 dana besplatna trail verzija je pre-selektovana. Mozes decekirati ovu opciju ako zelis.

- Po prvom pokretanju, MBAM ce zapoceti "Update" u nameri da preuzme najsvezije definicije.
Ili ... klik na 'Update Now >>' link ili dugme radi preuzimanja svezih definicija.

• Konfigurisati skener; Na 'Settings' tabu, Detection and Protection podesiti sledece opcije:
1. pod-tab Detection Options, cekirati kucicu za 'Scan for rootkits';
2. pod-tab Non-Malware Protection, za 'PUP detections', prostarati se da je selektovana 'Threat detections as malware' opcija.



• Izvrsiti 'Threat Scan';
Klik na Scan tab, zatim na 'Scan Now >>' da bi izvrsio skeniranje.
Ukoliko MBAM prijavi da je 'update' dostupan, klik na 'Update Now' a potom nastaviti do skeniranja.
Obavestenje: kod nekih teskih infekcija, moguce je dobiti sledecu poruku "Could not load DDA driver". U tom slucaju, klik Yes na tu poruku, dopustiti ucitavanje drajvera po restartu racunara, dozvoliti restart.
Potom, nastaviti sa ostatkom instrukcija.

• Po zavrsenom skeniranju, klik na Apply Action dugme ukoliko je pretnja detektovana. Sacekati da program zatrazi restart!
- Klik na Yes na poruku koja govori da ce se sistem restartovati.



• Postaviti izvestaj (export-ovati logfile) na uvid;
Ponovo pokrenuti MBAM, klik na History tab > Application Logs. Dvoklik na 'Scan Log' koji pokazuje vreme i datum upravo izvrsenog skeniranja.
1. U novom prozoru klik na 'Export' dugme, pa izabrati 'Text file (*.txt)';
2. Kada se pojavi Save File dialog, izabrati da se log sacuva na Desktop.
U tom istom prozoru, dole pod File name: upisi 'mbam' kao naziv izvestaja i klikni dugme Save.

- Po dobijenoj poruci ("Your file has been successfully exported") izvestaj koji si nazvao kao 'mbam' bice sacuvan na Desktop.



Arrow Okaci mbam.txt uz poruku koristeci opciju Prikači fajl.






[ Siki 5 @ 24.05.2014. 22:02 ] @
Problem koji sam ja imao sa USB memorijom nije baš isti ali ja sam ga rešio uz pomoć uputstva u prilogu. Nije isto to što je kompjuter prepoznavao USB memoriju ali na njoj nije dozvoljavao da se kopira ,lepi i sl.i. Na drugim kompjuterima USB je radio normalno.Videti prilog pa probati.
[ crnilabrador @ 25.05.2014. 04:28 ] @
Za one kojima fles pokazuje nekakva kineska slova, ili ima 1 GB memorije, a u stvari ima 8 GB, pitajete nekog drugara koji ima kompijuterskoga mekintosa, da zakaci usb pokvareni, i da pobrise particije preko disk utilitija.app, ne bi li mu opet bilo dobro. Oce to kad se pravi butabilni disk regenerator ili se tura u sbb da se snimaju serije i emisije na fles, pa ga formatira drljavo.
[ calexx @ 25.05.2014. 08:32 ] @
To nije drljavo formatiranje nego se koristi ext4 fajl sistem a fleška se deli na dve particije. Problem je što windows (bez nekih dodataka) ne može da čita taj fs a još veći što ne ume da koristi particionisanu flešku nego prepozna samo prvu particiju. Ne mora mac, dovoljan je bilo koji linux.
Drugi padež su fleške koje su zaražene ali se to lakše rešava, mada je veći problem ako je virus aktiviran na kompu, onda može da bude posla.
[ kristi1 @ 25.05.2014. 09:58 ] @
Windows joj je pun svacega, pa nije na odmet pokusati prvo tu opciju.
[ jolemisa @ 03.06.2014. 00:42 ] @
Skini i instaliraj MCShield i prikljuci USB i sacekaj da ga ovaj program preskenira,i ako ima nesto na njemu od zaraza precisti ce ga i otvoriti.