[ janus @ 23.12.2004. 09:36 ] @
Znam da je virus ,ali ni jednim alatoma ga ne mogu maknuti
[ -=k3rn3l=- @ 23.12.2004. 10:44 ] @
Sto se tice trojana, virusa i ostalih stvarcica kako da ih removnes itd... www.symantec.com i nadomak si resenja.
[ janus @ 23.12.2004. 22:02 ] @
ne nema nista o ovome virusu?????
[ Ivan Dimkovic @ 23.12.2004. 22:12 ] @
http://www.liutilities.com/pro...ntaskspro/processlibrary/crss/
[ reiser @ 23.12.2004. 22:14 ] @
Sta ti kaze AV, kako se zove taj virus ? Ovako mozemo samo da nagadjamo posto ima vise njih koji droppuju crss.exe.

Google

http://www.sophos.com/virusinfo/analyses/w32nauticala.html
http://www.sophos.com/virusinfo/analyses/w32agobotgh.html
http://securityresponse.symant...nc/data/pf/trojan.progent.html
http://www.sophos.com/virusinfo/analyses/w32rbotpx.html
[ -=k3rn3l=- @ 24.12.2004. 00:11 ] @
Upravo to... Da si malo bolje pogledao na symantecovom sajtu video bi koji sve crvi i trojani su zasluzni za ovaj proces ali ocigledno da nisi dobro pretrazio.
[ janus @ 24.12.2004. 10:05 ] @
ma potrazio sam dobro ,ali ga na symentecovom sajtu nema.Ime mu je W32.AGOBOT.GH Worm
[ janus @ 24.12.2004. 10:14 ] @
e da imam PcCillin i on ga uopste ne detektuje
[ reiser @ 24.12.2004. 13:29 ] @
Zar nisi ni pogledao one linkove koje sam ti dao ?

http://www.sophos.com/virusinfo/analyses/w32agobotgh.html
Citat:

Please follow the instructions for removing worms.


You will also need to edit the following registry entries, if they are present. Please read the warning about editing the registry.

At the taskbar, click Start|Run. Type 'Regedit' and press Return. The registry editor opens.

Before you edit the registry, you should make a backup. On the 'Registry' menu, click 'Export Registry File'. In the 'Export range' panel, click 'All', then save your registry as Backup.

Locate the HKEY_LOCAL_MACHINE entries:

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\
Run\ Distributed Link Tracking = ascvt.exe

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\
RunServices\ Distributed Link Tracking = ascvt.exe

and delete them if they exist.

Close the registry editor.
[ janus @ 24.12.2004. 15:43 ] @
da nasap sam ali meni u registriju nema run services ni distributed link tracking
[ smeker @ 29.12.2004. 08:56 ] @
i meni se pojavio vec vise dana slican proces samo sto je meni csrss.exe i nikako ne mogu da ga maknem ...
[ Sundance @ 29.12.2004. 11:33 ] @
Ako se csrss.exe nalazi u C:\WINDOWS\system32\ onda je OK. I ne mozes ga maknut ni da hoces.
[ m4rk0 @ 30.12.2004. 13:49 ] @
@Sundance
Covek trazi resenje za crss.exe, a ne za csrss.exe.
[ Sundance @ 03.01.2005. 19:14 ] @
Citat:
m4rk0: @Sundance
Covek trazi resenje za crss.exe, a ne za csrss.exe.


Citat:
smeker: i meni se pojavio vec vise dana slican proces samo sto je meni csrss.exe i nikako ne mogu da ga maknem ...


:)