sality.AK i njegova braća

Kulkiver

Kulkiver

Ističe se
Poruka
2.117
да да, то је чувени вирус који зарази све ексе фајлове и никако не могу да га обришем иако га панда и есетов онлајн скенер одмах дезинфикују он се после минут два опет врати без обзира што је конекција искључена:eek:
имали неко са искуством у вези гмаза?
 
Poslednja izmena:
Kako otvoriti temu / tražiti pomoć na podforumu Sigurnost i zaštita?
1. Download-ujte program HijackThis i sačuvajte ga u zaseban folder HijackThis v1.99.1.
Korisnici Windows Vista-e treba da koriste noviju verziju programa Trend Micro HijackThis.

2. Promenite naziv foldera i programa HijackThis u nešto što ni na koji način neće asocirati na sam program. Ovo je vrlo bitno, jer se neki maliciozni programi znaju sakriti iza naziva HijackThis. (Promena naziva se vrši tako što kliknete desnim tasterom miša na ikonicu foldera i programa i izaberete opciju Rename. Kao novo ime upišite bilo šta, npr. 123.)

3. Pokrenite HijackThis i izaberite opciju Do a system scan and save a logfile.
Nakon nekoliko sekundi skeniranje će biti završeno. Log file će biti snimljen u folderu u kome se nalazi program. Takođe, log file će se otvoriti u Notepad-u. (Ukoliko se ne pojavi uvodni ekran sa opcijama, potrebno je kliknuti na Scan, a posle toga na Save log.)

4. Otvorite novu temu na podforumu Sigurnost i zaštita (nemojte tražiti pomoć u ''tuđoj'' temi).
Dajte joj smislen naziv koji će da ukazuje na problem koji imate.

Što preciznije objasnite kako se ispoljava problem u vezi koga tražite pomoć.
Ukoliko je neki od programa korišćenih za skeniranje prijavio Malware koji ne može da ukloni, precizno napišite naziv file-a koji je detektovan.
Iskopirajte sadržaj log-a koji je napravio HijackThis u temu na forumu.
Doslovce se pridržavajte uputstava koje dobijete i nemojte pokušavati sami rešiti problem pomoću programa HijackThis!
Kliknite za proširenje...
Isprati ovo uputstvo i postupi prema njemu..
Na taj nacin mozemo da ti pomognemo..
 
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Documents and Settings\All Users\Application Data\Kwinzy\kwinzy117.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrls.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Kwinzy\kwinzy.exe
C:\Program Files\Atomic Alarm Clock\AtomicAlarmClock.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\WINDOWS\system32\SearchProtocolHost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\bvb\bvn b.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.digsby.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbox.digsby.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbox.digsby.com/ie

*******************************

evo људи, урадио сам све што сте написали.
то је то.
 
незнам колико ће ово помоћи јер сам већ имао цц клинер а сад имам вин. доктор и адвансд систем кер који једва нешто могу да учине...
 
Kulkiver:
незнам колико ће ово помоћи јер сам већ имао цц клинер а сад имам вин. доктор и адвансд систем кер који једва нешто могу да учине...
Kliknite za proširenje...

Log nije kompletan..

CCleaner ti u ovom poslu nece mnogo pomoci, kao ni win doktor, teadv sistem ker..
Pokusaj da nam das kompletan Hijak This Log..


Offtopic:
Uklonjeno je lokacija..
Zahvaljujem se administaciji..
 
Kulkiver:
јел морам да одем у сејф мод и да искључим систем ристор којег не могу да нађем па да још једном скенирам?
Kliknite za proširenje...
Safe Mode je čisto da bi imao manje pokrenutih procesa.
System Restore : desni klik na My Comp > Properties > kartica System Restore > čekiraš Turn off SR.

Skeniraj iz Safe moda pa postavi HijackThis log, ali CEO, od prve (Logfile of...) do zadnje stavke (END of...).
 
да знаш:D

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\SYSTEM32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Documents and Settings\All Users\Application Data\Kwinzy\kwinzy117.exe
C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe
C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe
C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrls.exe
C:\WINDOWS\system32\PnkBstrA.exe
C:\WINDOWS\system32\PnkBstrB.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\WINDOWS\system32\SearchIndexer.exe
C:\Program Files\Kwinzy\kwinzy.exe
C:\Program Files\Atomic Alarm Clock\AtomicAlarmClock.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Trend Micro\bvb\bvn b.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\SearchProtocolHost.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.digsby.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://us.rd.yahoo.com/customize/ie/defaults/su/msgr8/*http://www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://searchbox.digsby.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://searchbox.digsby.com/ie
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {e0c7b854-d5ce-4db6-9804-be1438603d89} - (no file)
R3 - URLSearchHook: (no name) - {0A94B116-4504-4e26-AB05-E61E474AA38B} - (no file)
R3 - URLSearchHook: SweetIM ToolbarURLSearchHook Class - {EEE6C35D-6118-11DC-9C72-001320C79847} - C:\Program Files\SweetIM\Toolbars\Internet Explorer\mgHelper.dll
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\bar\3.bin\MWSSRCAS.DLL
F2 - REG:system.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\WINDOWS\system32 \smss.exe
O2 - BHO: (no name) - {00A6FAF1-072E-44cf-8957-5838F569A31D} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-86BD-FD60BB9AAE3A} - (no file)
O3 - Toolbar: (no name) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - (no file)
O3 - Toolbar: (no name) - {e0c7b854-d5ce-4db6-9804-be1438603d89} - (no file)
O3 - Toolbar: (no name) - {07AA283A-43D7-4CBE-A064-32A21112D94D} - (no file)
O3 - Toolbar: (no name) - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - (no file)
O3 - Toolbar: (no name) - {F4D76F09-7896-458a-890F-E1F05C46069F} - (no file)
O3 - Toolbar: (no name) - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - (no file)
O3 - Toolbar: (no name) - {EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: &Search - http://edits.mywebsearch.com/toolbaredits/menusearch.jhtml?p=ZKfox000
O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: Download all with Free Download Manager - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: Download selected with Free Download Manager - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: Download video with Free Download Manager - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: Download with Free Download Manager - file://C:\Program Files\Free Download Manager\dllink.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new background tab - res://C:\Program Files\Windows Live Toolbar\Components\en-ww\msntabres.dll.mui/229?4cebb5be6ee6426ba406d5d16f58e2cf
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-ww\msntabres.dll.mui/230?4cebb5be6ee6426ba406d5d16f58e2cf
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\WINDOWS\system32\shdocvw.dll
 
Poslednja izmena:
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra 'Tools' menuitem: PartyPoker.com - {B7FE5D70-9AA2-40F1-9C6B-12A255F085E1} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: Run IMVU - {d9288080-1baa-4bc4-9cf8-a92d743db949} - C:\WINDOWS\system32\shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by13fd.bay13.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {56762DEC-6B0D-4AB4-A8AD-989993B5D08B} (OnlineScanner Control) - http://www.eset.eu/buxus/docs/OnlineScanner.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1167145430484
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1149021016803
O17 - HKLM\System\CCS\Services\Tcpip\..\{9A469D22-0787-46BF-9689-8D08F1736F96}: NameServer = 92.60.224.20 92.60.224.30
O18 - Protocol: bw+0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw+0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw-0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw00s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw10s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw20s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw30s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw40s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw50s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw60s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw70s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw80s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bw90s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwa0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwb0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwc0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwd0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwe0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwf0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: bwg0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwg0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwh0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwi0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwj0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwk0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwl0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwm0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
 
O18 - Protocol: bwm0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwn0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwo0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwp0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwq0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwr0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bws0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwt0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwu0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwv0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bww0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwx0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwy0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: bwz0s - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: ebk - {1E411CE8-FE8B-4973-B8E0-6EA2CC3C6B06} - C:\WINDOWS\system32\ebkp.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - (no file)
O18 - Protocol: offline-8876480 - {6D8A68EA-9B7D-46CB-AFB3-0C3B9586DE04} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BWPlugProtocol-8876480.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: sockspy.dll
O20 - Winlogon Notify: vtUKBsQk - vtUKBsQk.dll (file missing)
O21 - SSODL: UpdateCheck - {C4AB5FE8-2E5F-4B57-A4A5-420B3377A830} - (no file)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Forceware Web Interface (ForcewareWebInterface) - Apache Software Foundation - C:\NVIDIA\NetworkAccessManager\Apache Group\Apache2\bin\apache.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Kwinzy Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\Kwinzy\kwinzy117.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech Inc. - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: ForceWare IP service (nSvcIp) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcIp.exe
O23 - Service: ForceWare user log service (nSvcLog) - Unknown owner - C:\NVIDIA\NetworkAccessManager\bin\nSvcLog.exe
O23 - Service: Panda Software Controller - Panda Software International - C:\Program Files\Panda Security\Panda Antivirus 2008\PsCtrls.exe
O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\WINDOWS\system32\PnkBstrB.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
O24 - Desktop Component 1: Aqua Real - 7db39a0d-580f-4be9-9195-8bfcd226f6c2

--
End of file - 23104 bytes

као што видиш по дугачко је :hahaha:
 
имам проблем са пандом јер је њој оштећен аутоматски апдејт и тражи ми да реинсталирам ЛСП а комбо фикс ми налаже да га искључим. све опције сам ставио на оф ал опет ме упозорава.
нека га све како је једино да све одрадим хај џек тулсом.
 
labrys:
U pravu si. Za sality nema leka. Postoji neki mali tool -Sality Remover ali meni nije pomogao. Sistem mora da se ruši pa onda sve ponovo :(
Kliknite za proširenje...

@momci
Pricate napamet..
Nemojte takve komentare da ostavljate, ako vi ne znate rjesenje u ovom momentu, ne znaci da rjesenje ne postoji..
Prema tome, budite sudrzani bar kada su ovakve teme u pitanju..
Posebno ovo kazem jer ima ljudi (korisnika) koji se ne snalaze bas najbolje u svemu ovom, i kad procitaju vase postove, mogu zakljuciti da bas rjesenja nema, a rjesenje uvijek postoji..
:dash:
 
niceboy:
@GZ

Jeste,da,resenje postoji.Samo sto ti posle tog resenja nista ne radi!Ali ako je to tebi ok,onda dobro,mada mislim da vecini ljudi to nebi bilo ok.
Kliknite za proširenje...

Ni to nije tacno..
Zasto nakon odredjenog rjesenja nista ne bi radilo, onda se to ne bi zvalo rjesenje..
Ne uzmi za zlo, sve sto pisem, ali shvati da nije rjesenje ono koje standardno nadjes na netu i koje se nudi u vidu raznih removal tool-ova, te takva rjesenje nekad i nisu rjesenja..
Za odredjene probleme postoje rjesenje po odredjenoj proceduri (ukoliko je korisnik spreman da je isprati), te da bude strpljiv, da je dovede do kraja.. I takva rjesenja obicno budu uspjesna rjesenja, ali takva rjesenja ne dajem ovde iz prostog razloga jer vecina korisnika postavi HJ log i ne pojave se vise, ili ne poslusaju odredjen savjet, i ne dovedu proceduru do kraja, sto je neophodno..
Prema tome dabome, za sve ima rjesenje, ali ponavljam, nije tacno da posle odredjenih rjesenja nista ne radi..
:ok:
 
GZ:
@momci
Pricate napamet..
Nemojte takve komentare da ostavljate, ako vi ne znate rjesenje u ovom momentu, ne znaci da rjesenje ne postoji..
Prema tome, budite sudrzani bar kada su ovakve teme u pitanju..
Posebno ovo kazem jer ima ljudi (korisnika) koji se ne snalaze bas najbolje u svemu ovom, i kad procitaju vase postove, mogu zakljuciti da bas rjesenja nema, a rjesenje uvijek postoji..
:dash:
Kliknite za proširenje...

Ne pričam napamet jer je i moj računar bio zaražen sa Sality. Sve moguće "procedure" i uputstva sam isprobala, kao i removere ali jednostavno ništa ne pomaže. Problem je u tome što kao što je već neko pomenuo: svi programi su zaraženi tako da npr. Sality remover briše i uklanja exe fajlove programa a među njima su i neki sistemski fajlovi windowsa. Kada se obrišu sistemski fajlovi windows neće da se pokrene tako da ništa drugo ne preostaje nego da se instalira ponovo.
Zanimljivo je da sality (ima ih više vrsta) postoji negde oko 10-ak godina (nisam sigurna, možda malo manje) a do sad nije pronađen način da se ukloni.
 
Prijavite se ili registrujte da biste poslali poruku.

Slične teme

Umri_muski
nove igre lada 2107 i vaz 2107 simulacije
Odgovora
1
Pregleda
219
Black_star
Black_star
M
Var, Let i Const u Javascript greškama
Odgovora
3
Pregleda
356
Mastrangello
Mastrangello
M
Raziskovanje implementacij skladov in čakalnih vrst v C++
Odgovora
0
Pregleda
170
madhavan
M

Back
Top