Preskoči na sadržaj
Ista raja. Nova runda.
GAMERZ.ba — REBORN
Diskusija Zaključana

Virus !

186 pregleda · 8 odgovora · otvorena 04.05.2014. u 13:21

Pozz .

Prije 2-3 dana brat je skinuo sa fejsa neki virus koji sam otkucava "đjut351" i remeti mi sve na racunaru otvara nove tabove , prozore za printanje i slicno.Prvo sam skenirao laptop sa Avirom 2014 nasla je nesto i to sam obrisao i onda je cijeli dan normalno radio,kad sam ga ponovo upalio ista stvar , oborio sam 1 sistem i cim se upalio latop opet isto oborim 2 put sistem mozda nisam formatiro pa ponovo oborim al' opet ista stvari instaliram avg ne nadje nista.Takodje laptop se jako tesko pali moram ga 3-4 puta upaliti da bi se pokrenuo , samo se upali i odmah se ugasi i 5 put ide normalno , temperatura se digla za oko 10 stepeni. :S Je li neko imao slican problem ili zna neki nacin da ovo rijesim ?
pobriši addone iz browsera
Skini ComboFix i popravit ce ti 
BRUTAL je napisao/la:
pobriši addone iz browsera
Nema ni jedan addon :S
Ponovo diži sistem, kad dođeš do formatiranja -> pobriši sve particije, napravi nove, formatiraj, i onda na jednu diži sistem.
Edinho je napisao/la:
Skini ComboFix i popravit ce ti :P
mboFix 14-04-30.01 - podza 04.05.2014 13:39:17.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.387.1033.18.4091.1615 [GMT 2:00]
Running from: c:\users\podza\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2014-04-04 to 2014-05-04 )))))))))))))))))))))))))))))))
.
.
2014-05-04 11:17 . 2014-05-04 11:17 -------- d-----w- c:\programdata\Malwarebytes
2014-05-04 11:17 . 2014-05-04 11:18 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-05-04 11:17 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-05-04 10:40 . 2014-05-04 10:40 -------- d-----w- c:\windows\SysWow64\Wat
2014-05-04 10:40 . 2014-05-04 10:40 -------- d-----w- c:\windows\system32\Wat
2014-05-04 00:17 . 2014-05-03 21:32 -------- d-----w- c:\windows\Panther
2014-05-03 22:25 . 2014-05-03 22:25 199680 ----a-w- c:\windows\system32\xmllite.dll
2014-05-03 22:22 . 2014-05-03 22:22 94208 ----a-w- c:\program files (x86)\Common Files\System\Ole DB\msdaosp.dll
2014-05-03 22:22 . 2014-05-03 22:22 86016 ----a-w- c:\windows\SysWow64\odbccu32.dll
2014-05-03 22:22 . 2014-05-03 22:22 81920 ----a-w- c:\windows\SysWow64\odbccr32.dll
2014-05-03 22:22 . 2014-05-03 22:22 319488 ----a-w- c:\windows\SysWow64\odbcjt32.dll
2014-05-03 22:22 . 2014-05-03 22:22 212992 ----a-w- c:\windows\system32\odbctrac.dll
2014-05-03 22:22 . 2014-05-03 22:22 163840 ----a-w- c:\windows\SysWow64\odbctrac.dll
2014-05-03 22:22 . 2014-05-03 22:22 163840 ----a-w- c:\windows\system32\odbccp32.dll
2014-05-03 22:22 . 2014-05-03 22:22 126976 ----a-w- c:\program files\Common Files\System\Ole DB\msdaosp.dll
2014-05-03 22:22 . 2014-05-03 22:22 122880 ----a-w- c:\windows\SysWow64\odbccp32.dll
2014-05-03 22:22 . 2014-05-03 22:22 106496 ----a-w- c:\windows\system32\odbccu32.dll
2014-05-03 22:22 . 2014-05-03 22:22 106496 ----a-w- c:\windows\system32\odbccr32.dll
2014-05-03 22:21 . 2014-05-03 22:21 287744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2014-05-03 22:21 . 2014-05-03 22:21 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2014-05-03 22:21 . 2014-05-03 22:21 126464 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2014-05-03 22:19 . 2014-05-03 22:19 64512 ----a-w- c:\windows\SysWow64\devobj.dll
2014-05-03 22:19 . 2014-05-03 22:19 44544 ----a-w- c:\windows\SysWow64\devrtl.dll
2014-05-03 22:19 . 2014-05-03 22:19 404992 ----a-w- c:\windows\system32\umpnpmgr.dll
2014-05-03 22:19 . 2014-05-03 22:19 252928 ----a-w- c:\windows\SysWow64\drvinst.exe
2014-05-03 22:19 . 2014-05-03 22:19 145920 ----a-w- c:\windows\SysWow64\cfgmgr32.dll
2014-05-03 22:16 . 2014-05-03 22:16 197120 ----a-w- c:\windows\system32\d3d10_1.dll
2014-05-03 22:16 . 2014-05-03 22:16 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2014-05-03 22:15 . 2014-05-03 22:15 461312 ----a-w- c:\windows\system32\drivers\srv.sys
2014-05-03 22:15 . 2014-05-03 22:15 399872 ----a-w- c:\windows\system32\drivers\srv2.sys
2014-05-03 22:15 . 2014-05-03 22:15 161792 ----a-w- c:\windows\system32\drivers\srvnet.sys
2014-05-03 22:14 . 2014-05-03 22:14 102400 ----a-w- c:\windows\system32\drivers\dfsc.sys
2014-05-03 22:13 . 2014-05-03 22:13 976896 ----a-w- c:\windows\system32\inetcomm.dll
2014-05-03 22:13 . 2014-05-03 22:13 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll
2014-05-03 22:12 . 2014-05-03 22:12 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2014-05-03 22:11 . 2014-05-03 22:11 142336 ----a-w- c:\windows\system32\poqexec.exe
2014-05-03 22:11 . 2014-05-03 22:11 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2014-05-03 22:10 . 2014-05-03 22:10 662528 ----a-w- c:\windows\system32\XpsPrint.dll
2014-05-03 22:10 . 2014-05-03 22:10 442880 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2014-05-03 22:10 . 2014-05-03 22:10 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2014-05-03 22:10 . 2014-05-03 22:10 31232 ----a-w- c:\windows\system32\prevhost.exe
2014-05-03 22:08 . 2014-05-03 22:08 356352 ----a-w- c:\windows\system32\dnsapi.dll
2014-05-03 22:08 . 2014-05-03 22:08 30208 ----a-w- c:\windows\system32\dnscacheugc.exe
2014-05-03 22:08 . 2014-05-03 22:08 28672 ----a-w- c:\windows\SysWow64\dnscacheugc.exe
2014-05-03 22:08 . 2014-05-03 22:08 182272 ----a-w- c:\windows\system32\dnsrslvr.dll
2014-05-03 22:07 . 2014-05-03 22:07 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2014-05-03 22:07 . 2014-05-03 22:07 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2014-05-03 22:06 . 2014-05-03 22:06 1395712 ----a-w- c:\windows\system32\mfc42.dll
2014-05-03 22:06 . 2014-05-03 22:06 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2014-05-03 22:06 . 2014-05-03 22:06 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2014-05-03 22:06 . 2014-05-03 22:06 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2014-05-03 22:05 . 2014-05-03 22:05 640896 ----a-w- c:\windows\system32\winload.efi
2014-05-03 22:05 . 2014-05-03 22:05 603976 ----a-w- c:\windows\system32\winload.exe
2014-05-03 22:05 . 2014-05-03 22:05 556928 ----a-w- c:\windows\system32\winresume.efi
2014-05-03 22:05 . 2014-05-03 22:05 518160 ----a-w- c:\windows\system32\winresume.exe
2014-05-03 22:05 . 2014-05-03 22:05 20352 ----a-w- c:\windows\system32\kdusb.dll
2014-05-03 22:05 . 2014-05-03 22:05 19328 ----a-w- c:\windows\system32\kd1394.dll
2014-05-03 22:05 . 2014-05-03 22:05 17792 ----a-w- c:\windows\system32\kdcom.dll
2014-05-03 22:04 . 2014-05-03 22:04 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2014-05-03 22:04 . 2014-05-03 22:04 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2014-05-03 22:03 . 2014-05-03 22:03 902656 ----a-w- c:\windows\system32\d2d1.dll
2014-05-03 22:03 . 2014-05-03 22:03 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-05-03 22:03 . 2014-05-03 22:03 1540608 ----a-w- c:\windows\system32\DWrite.dll
2014-05-03 22:03 . 2014-05-03 22:03 1135104 ----a-w- c:\windows\system32\FntCache.dll
2014-05-03 22:03 . 2014-05-03 22:03 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2014-05-03 22:01 . 2014-05-03 22:01 3138048 ----a-w- c:\windows\system32\mstscax.dll
2014-05-03 22:01 . 2014-05-03 22:01 2690560 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-05-03 22:01 . 2014-05-03 22:01 1097216 ----a-w- c:\windows\system32\mstsc.exe
2014-05-03 22:01 . 2014-05-03 22:01 1034240 ----a-w- c:\windows\SysWow64\mstsc.exe
2014-05-03 22:00 . 2014-05-03 22:00 961024 ----a-w- c:\windows\system32\CPFilters.dll
2014-05-03 22:00 . 2014-05-03 22:00 850432 ----a-w- c:\windows\SysWow64\sbe.dll
2014-05-03 22:00 . 2014-05-03 22:00 723968 ----a-w- c:\windows\system32\EncDec.dll
2014-05-03 22:00 . 2014-05-03 22:00 642048 ----a-w- c:\windows\SysWow64\CPFilters.dll
2014-05-03 22:00 . 2014-05-03 22:00 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2014-05-03 22:00 . 2014-05-03 22:00 259072 ----a-w- c:\windows\system32\mpg2splt.ax
2014-05-03 22:00 . 2014-05-03 22:00 199680 ----a-w- c:\windows\SysWow64\mpg2splt.ax
2014-05-03 22:00 . 2014-05-03 22:00 1118720 ----a-w- c:\windows\system32\sbe.dll
2014-05-03 21:58 . 2014-05-03 21:58 5510528 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-05-03 21:58 . 2014-05-03 21:58 3957120 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2014-05-03 21:58 . 2014-05-03 21:58 3901824 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2014-05-03 21:58 . 2014-05-03 21:58 1739176 ----a-w- c:\windows\system32\ntdll.dll
2014-05-03 21:58 . 2014-05-03 21:58 1293120 ----a-w- c:\windows\SysWow64\ntdll.dll
2014-05-03 21:52 . 2014-05-03 21:52 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2014-05-03 21:52 . 2014-05-03 21:52 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2014-05-03 21:51 . 2014-05-03 21:51 -------- d-----w- c:\programdata\PMB Files
2014-05-03 21:51 . 2014-05-03 21:51 442880 ----a-w- c:\windows\system32\winhttp.dll
2014-05-03 21:51 . 2014-05-03 21:51 350720 ----a-w- c:\windows\SysWow64\winhttp.dll
2014-05-03 21:51 . 2014-05-03 21:51 247808 ----a-w- c:\windows\system32\ieui.dll
2014-05-03 21:51 . 2014-05-03 21:51 1880576 ----a-w- c:\windows\system32\msxml3.dll
2014-05-03 21:51 . 2014-05-03 21:51 15360 ----a-w- c:\windows\system32\slwga.dll
2014-05-03 21:51 . 2014-05-03 21:51 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2014-05-03 21:51 . 2014-05-03 21:51 12369408 ----a-w- c:\windows\system32\ieframe.dll
2014-05-03 21:49 . 2014-05-03 21:49 148992 ----a-w- c:\windows\system32\t2embed.dll
2014-05-03 21:49 . 2014-05-03 21:49 109056 ----a-w- c:\windows\SysWow64\t2embed.dll
2014-05-03 21:48 . 2014-05-03 21:48 4582912 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2014-05-03 21:48 . 2014-05-03 21:48 4247040 ----a-w- c:\program files (x86)\Windows NT\Accessories\wordpad.exe
2014-05-03 21:48 . 2014-05-03 21:48 2085376 ----a-w- c:\windows\system32\ole32.dll
2014-05-03 21:48 . 2014-05-03 21:48 1413632 ----a-w- c:\windows\SysWow64\ole32.dll
2014-05-03 21:48 . 2014-05-03 21:48 954752 ----a-w- c:\windows\SysWow64\mfc40.dll
2014-05-03 21:48 . 2014-05-03 21:48 954288 ----a-w- c:\windows\SysWow64\mfc40u.dll
2014-05-03 21:47 . 2014-05-03 21:47 633856 ----a-w- c:\windows\system32\comctl32.dll
2014-05-03 21:47 . 2014-05-03 21:47 530432 ----a-w- c:\windows\SysWow64\comctl32.dll
2014-05-03 21:47 . 2014-05-03 21:47 738816 ----a-w- c:\windows\SysWow64\wmpmde.dll
2014-05-03 21:47 . 2014-05-03 21:47 1024512 ----a-w- c:\windows\system32\wmpmde.dll
2014-05-03 21:46 . 2014-05-03 21:46 112000 ----a-w- c:\windows\system32\consent.exe
2014-05-03 21:46 . 2014-05-03 21:46 516096 ----a-w- c:\program files\Windows Mail\wab.exe
2014-05-03 21:46 . 2014-05-03 21:46 516096 ----a-w- c:\program files (x86)\Windows Mail\wab.exe
2014-05-03 21:46 . 2014-05-03 21:46 35328 ----a-w- c:\program files\Windows Mail\wabfind.dll
2014-05-03 21:44 . 2014-05-03 21:44 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-05-03 21:44 . 2014-05-03 21:44 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-05-03 21:44 . 2014-05-03 21:44 14627840 ----a-w- c:\windows\system32\wmp.dll
2014-05-03 21:44 . 2014-05-03 21:44 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-05-03 21:44 . 2014-05-03 21:44 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-05-03 21:44 . 2014-05-03 21:44 9728 ----a-w- c:\windows\SysWow64\sscore.dll
2014-05-03 21:44 . 2014-05-03 21:44 236032 ----a-w- c:\windows\system32\srvsvc.dll
2014-05-03 21:43 . 2014-05-03 21:43 483840 ----a-w- c:\windows\system32\StructuredQuery.dll
2014-05-03 21:43 . 2014-05-03 21:43 363520 ----a-w- c:\windows\SysWow64\StructuredQuery.dll
2014-05-03 21:43 . 2014-05-03 21:43 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2014-05-03 21:43 . 2014-05-03 21:43 184832 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2014-05-03 21:42 . 2014-05-03 21:42 558592 ----a-w- c:\windows\system32\spoolsv.exe
2014-05-03 21:42 . 2014-05-03 21:42 52224 ----a-w- c:\windows\system32\rtutils.dll
2014-05-03 21:42 . 2014-05-03 21:42 37376 ----a-w- c:\windows\SysWow64\rtutils.dll
2014-05-03 21:41 . 2014-05-03 21:41 82944 ----a-w- c:\windows\SysWow64\iccvid.dll
2014-05-03 21:40 . 2014-05-03 21:40 84992 ----a-w- c:\windows\system32\asycfilt.dll
2014-05-03 21:40 . 2014-05-03 21:40 67584 ----a-w- c:\windows\SysWow64\asycfilt.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 7"="c:\program files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" [2013-12-09 2285344]
"RMClock"="d:\rightmark cpu clock utility\rmclock 2.35\RMClockLauncher.exe" [2014-05-03 61440]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [x]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTCore64;RTCore64;d:\rightmark cpu clock utility\rmclock 2.35\RTCore64.sys;d:\rightmark cpu clock utility\rmclock 2.35\RTCore64.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - RTCORE64
.
Contents of the 'Scheduled Tasks' folder
.
2014-05-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-03 16:09]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2014-05-03 21:25 2486592 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-02 2199840]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 195.222.32.30 195.222.60.60
FF - ProfilePath - c:\users\podza\AppData\Roaming\Mozilla\Firefox\Profiles\kfevcgjn.default\
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
d:\rightmark cpu clock utility\rmclock 2.35\RMClock.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
.
**************************************************************************
.
Completion time: 2014-05-04 14:01:45 - machine was rebooted
ComboFix-quarantined-files.txt 2014-05-04 12:01
.
Pre-Run: 123.463.995.392 bytes free
Post-Run: 123.341.934.592 bytes free
.
- - End Of File - - 5CD47422B2C26967C298A469183831CE
A36C5E4F47E84449FF07ED3517B43A31

Skinuo odradio i nista :S
ELD1NNNN je napisao/la:
mboFix 14-04-30.01 - podza 04.05.2014 13:39:17.1.2 - x64
Microsoft Windows 7 Ultimate 6.1.7600.0.1250.387.1033.18.4091.1615 [GMT 2:00]
Running from: c:\users\podza\Downloads\ComboFix.exe
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((( Files Created from 2014-04-04 to 2014-05-04 )))))))))))))))))))))))))))))))
.
.
2014-05-04 11:17 . 2014-05-04 11:17 -------- d-----w- c:\programdata\Malwarebytes
2014-05-04 11:17 . 2014-05-04 11:18 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
2014-05-04 11:17 . 2013-04-04 12:50 25928 ----a-w- c:\windows\system32\drivers\mbam.sys
2014-05-04 10:40 . 2014-05-04 10:40 -------- d-----w- c:\windows\SysWow64\Wat
2014-05-04 10:40 . 2014-05-04 10:40 -------- d-----w- c:\windows\system32\Wat
2014-05-04 00:17 . 2014-05-03 21:32 -------- d-----w- c:\windows\Panther
2014-05-03 22:25 . 2014-05-03 22:25 199680 ----a-w- c:\windows\system32\xmllite.dll
2014-05-03 22:22 . 2014-05-03 22:22 94208 ----a-w- c:\program files (x86)\Common Files\System\Ole DB\msdaosp.dll
2014-05-03 22:22 . 2014-05-03 22:22 86016 ----a-w- c:\windows\SysWow64\odbccu32.dll
2014-05-03 22:22 . 2014-05-03 22:22 81920 ----a-w- c:\windows\SysWow64\odbccr32.dll
2014-05-03 22:22 . 2014-05-03 22:22 319488 ----a-w- c:\windows\SysWow64\odbcjt32.dll
2014-05-03 22:22 . 2014-05-03 22:22 212992 ----a-w- c:\windows\system32\odbctrac.dll
2014-05-03 22:22 . 2014-05-03 22:22 163840 ----a-w- c:\windows\SysWow64\odbctrac.dll
2014-05-03 22:22 . 2014-05-03 22:22 163840 ----a-w- c:\windows\system32\odbccp32.dll
2014-05-03 22:22 . 2014-05-03 22:22 126976 ----a-w- c:\program files\Common Files\System\Ole DB\msdaosp.dll
2014-05-03 22:22 . 2014-05-03 22:22 122880 ----a-w- c:\windows\SysWow64\odbccp32.dll
2014-05-03 22:22 . 2014-05-03 22:22 106496 ----a-w- c:\windows\system32\odbccu32.dll
2014-05-03 22:22 . 2014-05-03 22:22 106496 ----a-w- c:\windows\system32\odbccr32.dll
2014-05-03 22:21 . 2014-05-03 22:21 287744 ----a-w- c:\windows\system32\drivers\mrxsmb10.sys
2014-05-03 22:21 . 2014-05-03 22:21 157696 ----a-w- c:\windows\system32\drivers\mrxsmb.sys
2014-05-03 22:21 . 2014-05-03 22:21 126464 ----a-w- c:\windows\system32\drivers\mrxsmb20.sys
2014-05-03 22:19 . 2014-05-03 22:19 64512 ----a-w- c:\windows\SysWow64\devobj.dll
2014-05-03 22:19 . 2014-05-03 22:19 44544 ----a-w- c:\windows\SysWow64\devrtl.dll
2014-05-03 22:19 . 2014-05-03 22:19 404992 ----a-w- c:\windows\system32\umpnpmgr.dll
2014-05-03 22:19 . 2014-05-03 22:19 252928 ----a-w- c:\windows\SysWow64\drvinst.exe
2014-05-03 22:19 . 2014-05-03 22:19 145920 ----a-w- c:\windows\SysWow64\cfgmgr32.dll
2014-05-03 22:16 . 2014-05-03 22:16 197120 ----a-w- c:\windows\system32\d3d10_1.dll
2014-05-03 22:16 . 2014-05-03 22:16 161792 ----a-w- c:\windows\SysWow64\d3d10_1.dll
2014-05-03 22:15 . 2014-05-03 22:15 461312 ----a-w- c:\windows\system32\drivers\srv.sys
2014-05-03 22:15 . 2014-05-03 22:15 399872 ----a-w- c:\windows\system32\drivers\srv2.sys
2014-05-03 22:15 . 2014-05-03 22:15 161792 ----a-w- c:\windows\system32\drivers\srvnet.sys
2014-05-03 22:14 . 2014-05-03 22:14 102400 ----a-w- c:\windows\system32\drivers\dfsc.sys
2014-05-03 22:13 . 2014-05-03 22:13 976896 ----a-w- c:\windows\system32\inetcomm.dll
2014-05-03 22:13 . 2014-05-03 22:13 740864 ----a-w- c:\windows\SysWow64\inetcomm.dll
2014-05-03 22:12 . 2014-05-03 22:12 27008 ----a-w- c:\windows\system32\drivers\Diskdump.sys
2014-05-03 22:11 . 2014-05-03 22:11 142336 ----a-w- c:\windows\system32\poqexec.exe
2014-05-03 22:11 . 2014-05-03 22:11 123904 ----a-w- c:\windows\SysWow64\poqexec.exe
2014-05-03 22:10 . 2014-05-03 22:10 662528 ----a-w- c:\windows\system32\XpsPrint.dll
2014-05-03 22:10 . 2014-05-03 22:10 442880 ----a-w- c:\windows\SysWow64\XpsPrint.dll
2014-05-03 22:10 . 2014-05-03 22:10 31232 ----a-w- c:\windows\SysWow64\prevhost.exe
2014-05-03 22:10 . 2014-05-03 22:10 31232 ----a-w- c:\windows\system32\prevhost.exe
2014-05-03 22:08 . 2014-05-03 22:08 356352 ----a-w- c:\windows\system32\dnsapi.dll
2014-05-03 22:08 . 2014-05-03 22:08 30208 ----a-w- c:\windows\system32\dnscacheugc.exe
2014-05-03 22:08 . 2014-05-03 22:08 28672 ----a-w- c:\windows\SysWow64\dnscacheugc.exe
2014-05-03 22:08 . 2014-05-03 22:08 182272 ----a-w- c:\windows\system32\dnsrslvr.dll
2014-05-03 22:07 . 2014-05-03 22:07 267776 ----a-w- c:\windows\system32\FXSCOVER.exe
2014-05-03 22:07 . 2014-05-03 22:07 90624 ----a-w- c:\windows\system32\drivers\bowser.sys
2014-05-03 22:06 . 2014-05-03 22:06 1395712 ----a-w- c:\windows\system32\mfc42.dll
2014-05-03 22:06 . 2014-05-03 22:06 1359872 ----a-w- c:\windows\system32\mfc42u.dll
2014-05-03 22:06 . 2014-05-03 22:06 1164288 ----a-w- c:\windows\SysWow64\mfc42u.dll
2014-05-03 22:06 . 2014-05-03 22:06 1137664 ----a-w- c:\windows\SysWow64\mfc42.dll
2014-05-03 22:05 . 2014-05-03 22:05 640896 ----a-w- c:\windows\system32\winload.efi
2014-05-03 22:05 . 2014-05-03 22:05 603976 ----a-w- c:\windows\system32\winload.exe
2014-05-03 22:05 . 2014-05-03 22:05 556928 ----a-w- c:\windows\system32\winresume.efi
2014-05-03 22:05 . 2014-05-03 22:05 518160 ----a-w- c:\windows\system32\winresume.exe
2014-05-03 22:05 . 2014-05-03 22:05 20352 ----a-w- c:\windows\system32\kdusb.dll
2014-05-03 22:05 . 2014-05-03 22:05 19328 ----a-w- c:\windows\system32\kd1394.dll
2014-05-03 22:05 . 2014-05-03 22:05 17792 ----a-w- c:\windows\system32\kdcom.dll
2014-05-03 22:04 . 2014-05-03 22:04 476160 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2014-05-03 22:04 . 2014-05-03 22:04 288256 ----a-w- c:\windows\SysWow64\XpsGdiConverter.dll
2014-05-03 22:03 . 2014-05-03 22:03 902656 ----a-w- c:\windows\system32\d2d1.dll
2014-05-03 22:03 . 2014-05-03 22:03 739840 ----a-w- c:\windows\SysWow64\d2d1.dll
2014-05-03 22:03 . 2014-05-03 22:03 1540608 ----a-w- c:\windows\system32\DWrite.dll
2014-05-03 22:03 . 2014-05-03 22:03 1135104 ----a-w- c:\windows\system32\FntCache.dll
2014-05-03 22:03 . 2014-05-03 22:03 1074176 ----a-w- c:\windows\SysWow64\DWrite.dll
2014-05-03 22:01 . 2014-05-03 22:01 3138048 ----a-w- c:\windows\system32\mstscax.dll
2014-05-03 22:01 . 2014-05-03 22:01 2690560 ----a-w- c:\windows\SysWow64\mstscax.dll
2014-05-03 22:01 . 2014-05-03 22:01 1097216 ----a-w- c:\windows\system32\mstsc.exe
2014-05-03 22:01 . 2014-05-03 22:01 1034240 ----a-w- c:\windows\SysWow64\mstsc.exe
2014-05-03 22:00 . 2014-05-03 22:00 961024 ----a-w- c:\windows\system32\CPFilters.dll
2014-05-03 22:00 . 2014-05-03 22:00 850432 ----a-w- c:\windows\SysWow64\sbe.dll
2014-05-03 22:00 . 2014-05-03 22:00 723968 ----a-w- c:\windows\system32\EncDec.dll
2014-05-03 22:00 . 2014-05-03 22:00 642048 ----a-w- c:\windows\SysWow64\CPFilters.dll
2014-05-03 22:00 . 2014-05-03 22:00 534528 ----a-w- c:\windows\SysWow64\EncDec.dll
2014-05-03 22:00 . 2014-05-03 22:00 259072 ----a-w- c:\windows\system32\mpg2splt.ax
2014-05-03 22:00 . 2014-05-03 22:00 199680 ----a-w- c:\windows\SysWow64\mpg2splt.ax
2014-05-03 22:00 . 2014-05-03 22:00 1118720 ----a-w- c:\windows\system32\sbe.dll
2014-05-03 21:58 . 2014-05-03 21:58 5510528 ----a-w- c:\windows\system32\ntoskrnl.exe
2014-05-03 21:58 . 2014-05-03 21:58 3957120 ----a-w- c:\windows\SysWow64\ntkrnlpa.exe
2014-05-03 21:58 . 2014-05-03 21:58 3901824 ----a-w- c:\windows\SysWow64\ntoskrnl.exe
2014-05-03 21:58 . 2014-05-03 21:58 1739176 ----a-w- c:\windows\system32\ntdll.dll
2014-05-03 21:58 . 2014-05-03 21:58 1293120 ----a-w- c:\windows\SysWow64\ntdll.dll
2014-05-03 21:52 . 2014-05-03 21:52 367104 ----a-w- c:\windows\system32\wcncsvc.dll
2014-05-03 21:52 . 2014-05-03 21:52 276992 ----a-w- c:\windows\SysWow64\wcncsvc.dll
2014-05-03 21:51 . 2014-05-03 21:51 -------- d-----w- c:\programdata\PMB Files
2014-05-03 21:51 . 2014-05-03 21:51 442880 ----a-w- c:\windows\system32\winhttp.dll
2014-05-03 21:51 . 2014-05-03 21:51 350720 ----a-w- c:\windows\SysWow64\winhttp.dll
2014-05-03 21:51 . 2014-05-03 21:51 247808 ----a-w- c:\windows\system32\ieui.dll
2014-05-03 21:51 . 2014-05-03 21:51 1880576 ----a-w- c:\windows\system32\msxml3.dll
2014-05-03 21:51 . 2014-05-03 21:51 15360 ----a-w- c:\windows\system32\slwga.dll
2014-05-03 21:51 . 2014-05-03 21:51 1236992 ----a-w- c:\windows\SysWow64\msxml3.dll
2014-05-03 21:51 . 2014-05-03 21:51 12369408 ----a-w- c:\windows\system32\ieframe.dll
2014-05-03 21:49 . 2014-05-03 21:49 148992 ----a-w- c:\windows\system32\t2embed.dll
2014-05-03 21:49 . 2014-05-03 21:49 109056 ----a-w- c:\windows\SysWow64\t2embed.dll
2014-05-03 21:48 . 2014-05-03 21:48 4582912 ----a-w- c:\program files\Windows NT\Accessories\wordpad.exe
2014-05-03 21:48 . 2014-05-03 21:48 4247040 ----a-w- c:\program files (x86)\Windows NT\Accessories\wordpad.exe
2014-05-03 21:48 . 2014-05-03 21:48 2085376 ----a-w- c:\windows\system32\ole32.dll
2014-05-03 21:48 . 2014-05-03 21:48 1413632 ----a-w- c:\windows\SysWow64\ole32.dll
2014-05-03 21:48 . 2014-05-03 21:48 954752 ----a-w- c:\windows\SysWow64\mfc40.dll
2014-05-03 21:48 . 2014-05-03 21:48 954288 ----a-w- c:\windows\SysWow64\mfc40u.dll
2014-05-03 21:47 . 2014-05-03 21:47 633856 ----a-w- c:\windows\system32\comctl32.dll
2014-05-03 21:47 . 2014-05-03 21:47 530432 ----a-w- c:\windows\SysWow64\comctl32.dll
2014-05-03 21:47 . 2014-05-03 21:47 738816 ----a-w- c:\windows\SysWow64\wmpmde.dll
2014-05-03 21:47 . 2014-05-03 21:47 1024512 ----a-w- c:\windows\system32\wmpmde.dll
2014-05-03 21:46 . 2014-05-03 21:46 112000 ----a-w- c:\windows\system32\consent.exe
2014-05-03 21:46 . 2014-05-03 21:46 516096 ----a-w- c:\program files\Windows Mail\wab.exe
2014-05-03 21:46 . 2014-05-03 21:46 516096 ----a-w- c:\program files (x86)\Windows Mail\wab.exe
2014-05-03 21:46 . 2014-05-03 21:46 35328 ----a-w- c:\program files\Windows Mail\wabfind.dll
2014-05-03 21:44 . 2014-05-03 21:44 167424 ----a-w- c:\program files\Windows Media Player\wmplayer.exe
2014-05-03 21:44 . 2014-05-03 21:44 164864 ----a-w- c:\program files (x86)\Windows Media Player\wmplayer.exe
2014-05-03 21:44 . 2014-05-03 21:44 14627840 ----a-w- c:\windows\system32\wmp.dll
2014-05-03 21:44 . 2014-05-03 21:44 12625920 ----a-w- c:\windows\system32\wmploc.DLL
2014-05-03 21:44 . 2014-05-03 21:44 12625408 ----a-w- c:\windows\SysWow64\wmploc.DLL
2014-05-03 21:44 . 2014-05-03 21:44 9728 ----a-w- c:\windows\SysWow64\sscore.dll
2014-05-03 21:44 . 2014-05-03 21:44 236032 ----a-w- c:\windows\system32\srvsvc.dll
2014-05-03 21:43 . 2014-05-03 21:43 483840 ----a-w- c:\windows\system32\StructuredQuery.dll
2014-05-03 21:43 . 2014-05-03 21:43 363520 ----a-w- c:\windows\SysWow64\StructuredQuery.dll
2014-05-03 21:43 . 2014-05-03 21:43 243712 ----a-w- c:\windows\system32\drivers\ks.sys
2014-05-03 21:43 . 2014-05-03 21:43 184832 ----a-w- c:\windows\system32\drivers\usbvideo.sys
2014-05-03 21:42 . 2014-05-03 21:42 558592 ----a-w- c:\windows\system32\spoolsv.exe
2014-05-03 21:42 . 2014-05-03 21:42 52224 ----a-w- c:\windows\system32\rtutils.dll
2014-05-03 21:42 . 2014-05-03 21:42 37376 ----a-w- c:\windows\SysWow64\rtutils.dll
2014-05-03 21:41 . 2014-05-03 21:41 82944 ----a-w- c:\windows\SysWow64\iccvid.dll
2014-05-03 21:40 . 2014-05-03 21:40 84992 ----a-w- c:\windows\system32\asycfilt.dll
2014-05-03 21:40 . 2014-05-03 21:40 67584 ----a-w- c:\windows\SysWow64\asycfilt.dll
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Advanced SystemCare 7"="c:\program files (x86)\IObit\Advanced SystemCare 7\ASCTray.exe" [2013-12-09 2285344]
"RMClock"="d:\rightmark cpu clock utility\rmclock 2.35\RMClockLauncher.exe" [2014-05-03 61440]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2013-07-02 254336]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableLUA"= 0 (0x0)
"EnableUIADesktopToggle"= 0 (0x0)
"PromptOnSecureDesktop"= 0 (0x0)
.
R2 LiveUpdateSvc;LiveUpdate;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe;c:\program files (x86)\IObit\LiveUpdate\LiveUpdate.exe [x]
R3 WatAdminSvc;Windows Activation Technologies Service;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x]
S2 AdvancedSystemCareService7;Advanced SystemCare Service 7;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe;c:\program files (x86)\IObit\Advanced SystemCare 7\ASCService.exe [x]
S2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x]
S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe [x]
S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [x]
S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x]
S3 k57nd60a;Broadcom NetLink (TM) Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys;c:\windows\SYSNATIVE\DRIVERS\k57nd60a.sys [x]
S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x]
S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x]
S3 RTCore64;RTCore64;d:\rightmark cpu clock utility\rmclock 2.35\RTCore64.sys;d:\rightmark cpu clock utility\rmclock 2.35\RTCore64.sys [x]
.
.
--- Other Services/Drivers In Memory ---
.
*NewlyCreated* - RTCORE64
.
Contents of the 'Scheduled Tasks' folder
.
2014-05-04 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-05-03 16:09]
.
.
--------- X64 Entries -----------
.
.
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{10921475-03CE-4E04-90CE-E2E7EF20C814}]
2014-05-03 21:25 2486592 ----a-w- c:\program files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2014-04-02 2199840]
.
------- Supplementary Scan -------
.
uLocal Page = c:\windows\system32\blank.htm
mLocal Page = c:\windows\SysWOW64\blank.htm
TCP: DhcpNameServer = 195.222.32.30 195.222.60.60
FF - ProfilePath - c:\users\podza\AppData\Roaming\Mozilla\Firefox\Profiles\kfevcgjn.default\
FF - user.js: network.http.pipelining.maxrequests - 8
FF - user.js: network.http.request.max-start-delay - 0
FF - user.js: network.http.max-connections - 48
FF - user.js: network.http.max-connections-per-server - 16
FF - user.js: network.http.max-persistent-connections-per-proxy - 16
FF - user.js: network.http.max-persistent-connections-per-server - 8
FF - user.js: browser.turbo.enabled - true
FF - user.js: browser.display.show_image_placeholders - true
FF - user.js: browser.chrome.favicons - false
FF - user.js: browser.urlbar.autocomplete.enabled - true
FF - user.js: browser.cache.memory.capacity - 65536
FF - user.js: content.notify.ontimer - true
FF - user.js: content.interrupt.parsing - true
FF - user.js: content.max.tokenizing.time - 2250000
FF - user.js: content.switch.threshold - 750000
FF - user.js: plugin.expose_full_path - true
FF - user.js: ui.submenuDelay - 0
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
c:\program files (x86)\IObit\Advanced SystemCare 7\Monitor.exe
d:\rightmark cpu clock utility\rmclock 2.35\RMClock.exe
c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
.
**************************************************************************
.
Completion time: 2014-05-04 14:01:45 - machine was rebooted
ComboFix-quarantined-files.txt 2014-05-04 12:01
.
Pre-Run: 123.463.995.392 bytes free
Post-Run: 123.341.934.592 bytes free
.
- - End Of File - - 5CD47422B2C26967C298A469183831CE
A36C5E4F47E84449FF07ED3517B43A31

Skinuo odradio i nista :S
Onda ti ne gine reinstall Windowsa nazalost.
Casanova7 je napisao/la:
Ponovo diži sistem, kad dođeš do formatiranja -> pobriši sve particije, napravi nove, formatiraj, i onda na jednu diži sistem.
Ne daje mi te opcije , probat cu sad skinuti sa neta i preko usb-a podici sistem.
Formatiraj sistem i radi 100% 

Prijavi se da bi odgovorio/la na ovu temu.