[ laki02 @ 30.03.2011. 19:54 ] @
Mislim da imam problem sa Autorun crvom, pojavljuju se skriveni folderi. Mogu li nesto obrisati od procesa ili registara Saljem log file Hijack. Logfile of HiJackFree v4.5 Scan saved at 19:50:07, on 30.3.2011 Platform: Windows Win7_32 (Windows NT 6.1.7600) MSIE: Internet Explorer v 9.0 (9.0.8112.16421) Running processes: C:\Windows\System32\smss.exe C:\Windows\System32\csrss.exe C:\Windows\System32\wininit.exe C:\Windows\System32\csrss.exe C:\Windows\System32\services.exe C:\Windows\System32\lsass.exe C:\Windows\System32\lsm.exe C:\Windows\System32\winlogon.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\atiesrxx.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\svchost.exe C:\Windows\System32\atieclxx.exe C:\Windows\System32\spoolsv.exe C:\Windows\System32\svchost.exe C:\Program Files\Bonjour\mDNSResponder.exe C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe C:\Windows\System32\taskeng.exe C:\Windows\System32\dwm.exe C:\Windows\explorer.exe C:\Windows\System32\taskhost.exe C:\Windows\System32\svchost.exe C:\Program Files\Microsoft LifeCam\MSCamS32.exe C:\Windows\System32\svchost.exe C:\Program Files\IObit\Advanced SystemCare 3\AWC.exe C:\Windows\System32\svchost.exe C:\Program Files\Spybot C:\Windows\System32\SearchIndexer.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe C:\Windows\vVX3000.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe C:\Program Files\Spybot C:\Program Files\DAEMON Tools Lite\DTLite.exe C:\Program Files\Media Key\MagicKey.exe C:\Users\ZORAN\AppData\Local\Temp\ieudinit.exe C:\Program Files\Media Key\OSD.exe C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe C:\Program Files\Windows Media Player\wmpnetwk.exe C:\Windows\System32\svchost.exe C:\Windows\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe C:\Windows\System32\svchost.exe C:\Program Files\Common Files\microsoft shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe C:\Program Files\TeamViewer\Version5\TeamViewer.exe C:\Program Files\Emsisoft HiJackFree\a2hijackfree.exe C:\Windows\System32\dllhost.exe R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896 R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://google.com/ R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office14\GROOVEEX.DLL O2 - BHO: Skype Plug-In - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll O2 - BHO: Office Document Cache Handler - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~3\Office14\URLREDIR.DLL O2 - BHO: Foxit PDF Creator Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O3 - Toolbar: Foxit PDF Creator Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll O3 - Toolbar: DAEMON Tools Toolbar - {32099AAC-C132-4136-9E9A-4E364A424E17} - C:\Program Files\DAEMON Tools Toolbar\DTToolbar.dll O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun O4 - HKLM\..\Run: [VX3000] C:\Windows\vVX3000.exe O4 - HKLM\..\Run: [BCSSync] "C:\Program Files\Microsoft Office\Office14\BCSSync.exe" /DelayServices O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray O4 - HKLM\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe O4 - HKLM\..\Run: [DAEMON Tools Lite] "C:\Program Files\DAEMON Tools Lite\DTLite.exe" -autorun O4 - HKLM\..\Run: [ieudinit] C:\Users\ZORAN\AppData\Local\Temp\ieudinit.vbs O7 - Regedit - Enabled O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office14\EXCEL.EXE/3000 O8 - Extra context menu item: Se&nd to OneNote - res://C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll/105 O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll O9 - Extra "Tools" menuitem: Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office14\ONBttnIE.dll O9 - Extra button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\PROGRA~1\MICROS~3\Office14\ONBTTN~1.DLL,103 O9 - Extra "Tools" menuitem: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\PROGRA~1\MICROS~3\Office14\ONBTTN~1.DLL,103 O9 - Extra button: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico O9 - Extra "Tools" menuitem: Skype Plug-In - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\icon.ico O14 - IERESET.INF: SearchAssistant= O14 - IERESET.INF: CustomizeSearch= O21 - ShellServiceObjectDelayLoad: WebCheck - O23 - Service: Application Experience Service - C:\Windows\system32\svchost.exe O23 - Service: Application Layer Gateway Service - C:\Windows\System32\alg.exe O23 - Service: Application Identity Service - C:\Windows\system32\svchost.exe O23 - Service: Application Information Service - C:\Windows\system32\svchost.exe O23 - Service: AppMgmt - C:\Windows\system32\svchost.exe O23 - Service: Windows Audio Service - C:\Windows\System32\svchost.exe O23 - Service: Windows Audio Service - C:\Windows\System32\svchost.exe O23 - Service: ActiveX Installer Service - C:\Windows\system32\svchost.exe O23 - Service: BDE Service - C:\Windows\System32\svchost.exe O23 - Service: Background Intelligent Transfer Service - C:\Windows\System32\svchost.exe O23 - Service: ##Id_String1.6844F930_1628_4223_B5CC_5BB94B879762## - C:\Program Files\Bonjour\mDNSResponder.exe O23 - Service: Computer Browser Service DLL - C:\Windows\System32\svchost.exe O23 - Service: Bluetooth Support Service - C:\Windows\system32\svchost.exe O23 - Service: Microsoft Smartcard Certificate Propagation Service - C:\Windows\system32\svchost.exe O23 - Service: Microsoft .NET Framework NGEN v2.0.50727_X86 - C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe O23 - Service: COMSysApp - C:\Windows\system32\dllhost.exe O23 - Service: Cryptographic Services - C:\Windows\system32\svchost.exe O23 - Service: CSC Service DLL - C:\Windows\System32\svchost.exe O23 - Service: Microsoft\Disk Defragmenter - C:\Windows\system32\svchost.exe O23 - Service: DHCP Client Service - C:\Windows\system32\svchost.exe O23 - Service: DNS Client API DLL - C:\Windows\system32\svchost.exe O23 - Service: Wired AutoConfig Service - C:\Windows\system32\svchost.exe O23 - Service: Microsoft EAPHost service - C:\Windows\System32\svchost.exe O23 - Service: EFS Service - C:\Windows\System32\lsass.exe O23 - Service: Windows Media Center Receiver Service - C:\Windows\ehome\ehRecvr.exe O23 - Service: Windows Media Center Scheduler Service - C:\Windows\ehome\ehsched.exe O23 - Service: ESET HTTP Server - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe O23 - Service: ESET Service - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe O23 - Service: Event Logging Service - C:\Windows\System32\svchost.exe O23 - Service: EventSystem - C:\Windows\system32\svchost.exe O23 - Service: Microsoft Fax Resource DLL - C:\Windows\system32\fxssvc.exe O23 - Service: Function Discovery Provider host service - C:\Windows\system32\svchost.exe O23 - Service: Function Discovery Resource Publication Service - C:\Windows\system32\svchost.exe O23 - Service: FLEXnet Licensing Service - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe O23 - Service: Windows Font Cache Service - C:\Windows\system32\svchost.exe O23 - Service: Windows Presentation Foundation Host - C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe O23 - Service: HID Service - C:\Windows\system32\svchost.exe O23 - Service: Key Management Service - C:\Windows\System32\svchost.exe O23 - Service: Windows HomeGroup - C:\Windows\System32\svchost.exe O23 - Service: Windows HomeGroup - C:\Windows\System32\svchost.exe O23 - Service: Service Model Installer Resource Library - C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe O23 - Service: IKE extension - C:\Windows\system32\svchost.exe O23 - Service: PnP-X IP Bus Enumerator DLL - C:\Windows\system32\svchost.exe O23 - Service: Service that offers IPv6 connectivity over an IPv4 network. - C:\Windows\System32\svchost.exe O23 - Service: KeyIso - C:\Windows\system32\lsass.exe O23 - Service: KtmRm - C:\Windows\System32\svchost.exe O23 - Service: Server Service DLL - C:\Windows\system32\svchost.exe O23 - Service: Workstation Service DLL - C:\Windows\System32\svchost.exe O23 - Service: Link-Layer Topology Discovery Resources - C:\Windows\System32\svchost.exe O23 - Service: TCPIP NetBios Transport Services DLL - C:\Windows\system32\svchost.exe O23 - Service: Media Center Resources - C:\Windows\system32\svchost.exe O23 - Service: Microsoft SharePoint Workspace Audit Service - C:\Program Files\Microsoft Office\Office14\GROOVE.EXE O23 - Service: Multimedia Class Scheduler Service - C:\Windows\system32\svchost.exe O23 - Service: Windows Firewall API - C:\Windows\system32\svchost.exe O23 - Service: MSCamSvc - C:\Program Files\Microsoft LifeCam\MSCamS32.exe O23 - Service: MSDTC - C:\Windows\System32\msdtc.exe O23 - Service: iSCSI Discovery api - C:\Windows\system32\svchost.exe O23 - Service: Windows® Installer International Messages - C:\Windows\system32\msiexec.exe O23 - Service: Quarantine Agent Service Run-Time - C:\Windows\System32\svchost.exe O23 - Service: Net Logon Services DLL - C:\Windows\system32\lsass.exe O23 - Service: Network Connections Manager - C:\Windows\System32\svchost.exe O23 - Service: Network List Manager - C:\Windows\System32\svchost.exe O23 - Service: Service Model Installer Resource Library - C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe O23 - Service: Network Location Awareness 2 - C:\Windows\System32\svchost.exe O23 - Service: Network Store Interface RPC server - C:\Windows\system32\svchost.exe O23 - Service: Office Source Engine - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE O23 - Service: Office Software Protection Platform - C:\Program Files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE O23 - Service: PNRP Service Dll - C:\Windows\System32\svchost.exe O23 - Service: Peer-to-Peer Services - C:\Windows\System32\svchost.exe O23 - Service: Program Compatibility Assistant Service - C:\Windows\system32\svchost.exe O23 - Service: BranchCache Service - C:\Windows\System32\svchost.exe O23 - Service: Performance Logs & Alerts - C:\Windows\System32\svchost.exe O23 - Service: User-mode Plug-and-Play Service - C:\Windows\system32\svchost.exe O23 - Service: PNRP Auto Service Dll - C:\Windows\System32\svchost.exe O23 - Service: PNRP Service Dll - C:\Windows\System32\svchost.exe O23 - Service: Policy Storage dll - C:\Windows\system32\svchost.exe O23 - Service: User-mode Power Service - C:\Windows\system32\svchost.exe O23 - Service: ProfSvc - C:\Windows\system32\svchost.exe O23 - Service: Protected Storage default provider - C:\Windows\system32\lsass.exe O23 - Service: Windows NT - C:\Windows\\system32\svchost.exe O23 - Service: Remote Access AutoDial Manager - C:\Windows\System32\svchost.exe O23 - Service: Remote Access Connection Manager - C:\Windows\System32\svchost.exe O23 - Service: Dynamic Interface Manager - C:\Windows\System32\svchost.exe O23 - Service: RemoteRegistry - C:\Windows\system32\svchost.exe O23 - Service: RPC Endpoint Mapper - C:\Windows\system32\svchost.exe O23 - Service: Rpc Locator - C:\Windows\system32\locator.exe O23 - Service: SBSD Security Center Service - C:\Program Files\Spybot O23 - Service: Smart Card Resource Management Server - C:\Windows\system32\svchost.exe O23 - Service: Task Scheduler Service - C:\Windows\system32\svchost.exe O23 - Service: Microsoft Smartcard Certificate Propagation Service - C:\Windows\system32\svchost.exe O23 - Service: Microsoft® Windows Backup Service - C:\Windows\system32\svchost.exe O23 - Service: System Event Notification Service (SENS) - C:\Windows\system32\svchost.exe O23 - Service: Microsoft Windows ambient light service - C:\Windows\system32\svchost.exe O23 - Service: Remote Desktop Configuration service - C:\Windows\System32\svchost.exe O23 - Service: Microsoft NAT Helper Components - C:\Windows\System32\svchost.exe O23 - Service: Windows Shell Services Dll - C:\Windows\System32\svchost.exe O23 - Service: SNMP Trap - C:\Windows\System32\snmptrap.exe O23 - Service: Microsoft Software Protection Platform Service - C:\Windows\system32\sppsvc.exe O23 - Service: SPP Notification Service - C:\Windows\system32\svchost.exe O23 - Service: SSDP Service DLL - C:\Windows\system32\svchost.exe O23 - Service: Provides the facility of using Secure Socket Tunneling Protocol (SSTP) to connect to remote computers (using VPN). - C:\Windows\system32\svchost.exe O23 - Service: Still Image Devices Service - C:\Windows\system32\svchost.exe O23 - Service: Microsoft® Volume Shadow Copy Service software provider - C:\Windows\System32\svchost.exe O23 - Service: Superfetch Service Host - C:\Windows\system32\svchost.exe O23 - Service: Microsoft Tablet PC Input Service - C:\Windows\System32\svchost.exe O23 - Service: Microsoft® Windows(TM) Telephony Server - C:\Windows\System32\svchost.exe O23 - Service: TBS Service - C:\Windows\System32\svchost.exe O23 - Service: TeamViewer 5 - C:\Program Files\TeamViewer\Version5\TeamViewer_Service.exe O23 - Service: Remote Desktop Session Host Server Remote Connections Manager - C:\Windows\System32\svchost.exe O23 - Service: Windows Shell Theme Service Dll - C:\Windows\System32\svchost.exe O23 - Service: Multimedia Class Scheduler Service - C:\Windows\system32\svchost.exe O23 - Service: Interactive services detection - C:\Windows\system32\UI0Detect.exe O23 - Service: Remote Desktop Services Device Redirector Service - C:\Windows\System32\svchost.exe O23 - Service: UPnP Device Host - C:\Windows\system32\svchost.exe O23 - Service: Desktop Window Manager - C:\Windows\System32\svchost.exe O23 - Service: Credential Manager Service - C:\Windows\system32\lsass.exe O23 - Service: Virtual Disk Service - C:\Windows\System32\vds.exe O23 - Service: Microsoft® Volume Shadow Copy Service - C:\Windows\system32\vssvc.exe O23 - Service: Windows Time Service - C:\Windows\system32\svchost.exe O23 - Service: Microsoft® Block Level Backup Engine Service EXE - C:\Windows\system32\wbengine.exe O23 - Service: Windows Biometric Service - C:\Windows\system32\svchost.exe O23 - Service: Windows Connect Now - Config Registrar Service - C:\Windows\System32\svchost.exe O23 - Service: WcsPlugInService DLL - C:\Windows\system32\svchost.exe O23 - Service: Web DAV Service DLL - C:\Windows\system32\svchost.exe O23 - Service: Event Collector Service - C:\Windows\system32\svchost.exe O23 - Service: Problem Reports and Solutions - C:\Windows\System32\svchost.exe O23 - Service: Windows Error Reporting Service - C:\Windows\System32\svchost.exe O23 - Service: Windows Defender Resource Module - C:\Windows\System32\svchost.exe O23 - Service: Windows HTTP Services - C:\Windows\system32\svchost.exe O23 - Service: WMI - C:\Windows\system32\svchost.exe O23 - Service: WSMan Service - C:\Windows\System32\svchost.exe O23 - Service: Windows WLAN AutoConfig Service DLL - C:\Windows\system32\svchost.exe O23 - Service: WMI Performance Reverse Adapter - C:\Windows\system32\wbem\WmiApSrv.exe O23 - Service: Windows Media Player Network Sharing Service - C:\Program Files\Windows Media Player\wmpnetwk.exe O23 - Service: WPC Filtering Service - C:\Windows\system32\svchost.exe O23 - Service: Portable Device Enumerator - C:\Windows\system32\svchost.exe O23 - Service: Windows Security Center Service - C:\Windows\System32\svchost.exe O23 - Service: Microsoft Windows Search Indexer - C:\Windows\system32\SearchIndexer.exe O23 - Service: Windows Update Agent - C:\Windows\system32\svchost.exe O23 - Service: Windows Driver Foundation - User-mode Driver Framework Service - C:\Windows\system32\svchost.exe O23 - Service: WWAN Auto Config Service - C:\Windows\system32\svchost.exe |