Kompjuter mi ne prepoznaje usb flash

Pregledala sam sve teme u vezi slicnih problema ali nista slicno nisam nasla.Hitno mi treba pomoc.Upitanju je sledece:
Ubacim usb flash
Kompjuter pokaze dva signalizirajuca kratka tona da je nesto ubaceno u njega,ALI
U my kompjuter i u taskbaru nema nista,jednostavno ga uopste ne pokazuje
Izvadim usb
kompjuter da signal jednim dugim tonom,kao sto daje za svaki usb uredjaj.
U pitanju je apacer usb flash od 2 gb
N drugim kompjuterima sasvim normalno radi.
Drugi portovi na mom kompjuteru takodje rade(adsl modem mi je povezan preko usb kabla,i mis takodje)

To se desilo od kako je avast! antivirus pronasao viruse u
C:\WINDOWS\system32
mislim da je u pitanju malware virus
Sta mi preporucujete da radim?
Unapred hvala.

Komp ti verovatno ima usb1 prikljucke ili je u biosu tako setovano.
Po postavljanju trebac pokrenuti carobnjaka za nalazenje novoga hardvera i u roku par sekundi ga registruje.

---

Ma nije zbog toga pre pet dana je sasvim dobro radio,ja sam proverila za svaki slucaj,nece da ga nadje.
Hvala u svakom slucaju.Poz

Ako je uzrok problema malware, temu premestamo u forum "Zastita" jer sam Avast ocigledno nije dovoljan za resenje tvog problema. Postoji jos specijalizovanih alata kojim ces najverovatnije morati da skeniras racunar da bi potpuno ocistila racunar od gamadi, i nadajmo se svi, osposobila operativni sistem za normalan rad bez ponovne instalcije istog, mada ni ponovna instalacija Windowsa nije za izbegavati. Ponekad je ona mnogo bolje resenje od "krpljenja" starog sistema.

Ne znam sta je razlog zato se i obraćam vama,a gde bih mogla da nadjem te programe za skeniranje?

posto si u forumu zastita,pregledacemo ti racunar u nadi da necemo naci ni jednu infekciju:

Skini DDS Program na Desktop
http://download.bleepingcomputer.com/sUBs/dds.com

Dvoklikom pokreni dds.scr

Kad zavrsi, DDS ce otvoriti dva loga:
1. DDS.txt
2. Attach.txt
Oba izvestaja sacuvaj na Desktop.
Kopiraj mi DDS.txt

---

Pogledaj dali ti se pojave kada desnim klikom odes na mycomputer > manage > storage device ..

Ili pogledaj u servisima dali ti je aktiviran "Plug and Play service"

---

DDS (Ver_09-12-01.01) - NTFSx86
Run by Bojana at 0:12:18,14 on sub 20.02.2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.255.11 [GMT 1:00]

AV: avast! antivirus 4.8.1368 [VPS 100219-0] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
DDS
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\tlntsvr.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\Mixer.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Conexant\Adsl\dslstat.exe
C:\Program Files\Conexant\Adsl\dslagent.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\Bojana\My Documents\Downloads\RouterClient.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre6\bin\javaw.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\PROGRA~1\THEKMP~1\KMPlayer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Bojana\My Documents\Downloads\dds.com

============== Pseudo HJT Report ===============

uSearch Page = ${URL_SEARCHPAGE}
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2086743
mSearch Page = ${URL_SEARCHPAGE}
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
uURLSearchHooks: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
uURLSearchHooks: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearsharetb\BearShareDx.dll
BHO: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
BHO: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearsharetb\BearShareDx.dll
TB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
TB: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [CryptLoad] c:\documents and settings\bojana\my documents\downloads\RouterClient.exe
uRun: [SVCHOST.EXE] c:\windows\system32\drivers\svchost.exe
mRun: [C-Media Mixer] Mixer.exe /startup
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [DSLSTATEXE] c:\program files\conexant\adsl\dslstat.exe icon
mRun: [DSLAGENTEXE] c:\program files\conexant\adsl\dslagent.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32
dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\bojana\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\documents and settings\bojana\start menu\programs\startup\netuza32.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dslmon.lnk - c:\program files\sagem\sagem f@st 800-840\dslmon.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
TCP: {EB60050D-3807-4989-ADBB-3B0918A75FE5} = 77.105.0.18 77.105.0.19
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\bojana\applic~1\mozilla\firefox\profiles\12nhgqra.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Softonic-Eng7 Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=2&q=
FF - component: c:\documents and settings\bojana\application data\mozilla\firefox\profiles\12nhgqra.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\components\FFExternalAlert.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\veetle\player\npvlc.dll
FF - plugin: c:\program files\veetle\plugins\npVeetle.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-10-21 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-10-21 20560]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-10-21 138680]
R3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-10-21 254040]
R3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-10-21 352920]
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2010-2-16 104344]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2010-2-16 69656]

=============== Created Last 30 ================

2010-02-19 21:06:22 0 d-----w- c:\docume~1\alluse~1\applic~1\Mozilla Firefox
2010-02-16 13:40:18 21 ----a-w- c:\windows\Fast800.ini
2010-02-16 13:40:18 169 ----a-w- c:\windows\adidsl.ini
2010-02-16 13:40:01 253008 ----a-w- c:\windows\adirasx64.exe
2010-02-16 13:40:01 194128 ----a-w- c:\windows\adiras.exe
2010-02-16 01:54:22 26810 ----a-w- c:\windows\Sysvxd.exe
2010-02-16 00:19:32 34688 -c--a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2010-02-16 00:19:32 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2010-02-16 00:18:24 8576 -c--a-w- c:\windows\system32\dllcache\i2omgmt.sys
2010-02-16 00:18:24 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2010-02-16 00:18:10 8192 -c--a-w- c:\windows\system32\dllcache\changer.sys
2010-02-16 00:08:24 4 ----a-w- c:\docume~1\bojana\applic~1\avdrn.dat
2010-02-07 14:45:56 0 d-----w- c:\program files\LG Electronics
2010-02-07 14:45:03 81920 ----a-r- c:\windows\system32\srctrl.dll
2010-02-07 14:44:49 0 d-----w- c:\program files\LGGSM
2010-01-30 21:54:14 0 d-----w- c:\program files\StatMate
2010-01-30 21:53:56 0 d-----w- c:\program files\InStat3

==================== Find3M ====================

2010-02-16 13:40:18 32 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2010-01-02 15:24:51 123988 ----a-w- c:\windows\HPHins12.dat
2009-12-20 17:35:28 90112 ----a-w- c:\windows\DUMP3e9f.tmp
2009-10-21 07:28:28 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009102120091022\index.dat

============= FINISH: 0:13:39,20 ===============




Attach

UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 10/21/2009 9:26:44 AM
System Uptime: 2/17/2010 8:53:19 AM (64 hours ago)

Motherboard: MICRO-STAR INC. | | MS-6704
Processor: Intel(R) Celeron(R) CPU 2.40GHz | FC-478 | 2405/100mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 74 GiB total, 6.205 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {36FC9E60-C465-11CF-8056-444553540000}
Description: USB Mass Storage Device
Device ID: USB\VID_1005&PID_B113\079A108497472195
Manufacturer: Compatible USB storage device
Name: USB Mass Storage Device
PNP Device ID: USB\VID_1005&PID_B113\079A108497472195
Service: USBSTOR

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Audio Splitter
Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Audio Splitter
PNP Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: splitter

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Acoustic Echo Canceller
Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Acoustic Echo Canceller
PNP Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: aec

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel GS Wavetable Synthesizer
Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel GS Wavetable Synthesizer
PNP Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: swmidi

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel DLS Synthesizer
Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC
Manufacturer: Microsoft
Name: Microsoft Kernel DLS Synthesizer
PNP Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC
Service: DMusic

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel DRM Audio Descrambler
Device ID: SW\{EEC12DB6-AD9C-4168-8658-B03DAEF417FE}\{ABD61E00-9350-47E2-A632-4438B90C6641}
Manufacturer: Microsoft
Name: Microsoft Kernel DRM Audio Descrambler
PNP Device ID: SW\{EEC12DB6-AD9C-4168-8658-B03DAEF417FE}\{ABD61E00-9350-47E2-A632-4438B90C6641}
Service: drmkaud

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

µTorrent
ACDSee Pro 2
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Help Center 1.0
Adobe Photoshop CS2
Adobe Reader 7.0.9
Adobe Stock Photos 1.0
AIMP2
Ask Toolbar
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
avast! Antivirus
BufferChm
CDBurnerXP
Conexant DSL Modem
CustomerResearchQFolder
D1300
D1300_Help
DeviceManagementQFolder
eSupportQFolder
EVEREST Ultimate Edition v5.00
Foxit Reader
HFSLIP Total Slipstream (v1.7.8, build 80614)
HP Customer Participation Program 7.0
HP Imaging Device Functions 7.0
HP Photosmart and Deskjet 7.0 Software
HP Photosmart Essential
HP Software Update
HP Solution Center 7.0
hph_ProductContext
hph_readme
hph_software
hph_software_req
HPPhotoSmartExpress
HPProductAssistant
Java(TM) 6 Update 15
JDownloader
K-Lite Mega Codec Pack 5.2.0
LG GSM PC Components
MarketResearch
MediaBar
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft .NET Framework 3.5
Microsoft Office PowerPoint 2003 Template Pack 1
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.5.8)
PCI Audio Driver
PHPNukeEN Toolbar
SAGEM F@st 800-840
Softonic-Eng7 Toolbar
SolutionCenter
Status
The KMPlayer (remove only)
Toolbox
TrayApp
Unload
Veetle TV 0.9.15
WebFldrs XP
WebReg
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

2/16/2010 5:09:33 AM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the avast! Web Scanner service to connect.
2/16/2010 5:09:33 AM, error: Service Control Manager [7000] - The avast! Web Scanner service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
2/16/2010 5:07:18 AM, error: Service Control Manager [7023] - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error: The system cannot find the file specified.
2/16/2010 5:06:23 AM, error: Disk [15] - The device, \Device\Harddisk1\D, is not ready for access yet.
2/16/2010 5:03:23 AM, error: DCOM [10000] - Unable to start a DCOM Server: {9EB4C4CB-74C2-4BE9-AA5D-8249F16020AD}. The error: "%1450" Happened while starting this command: C:\PROGRA~1\THEKMP~1\KMPlayer.exe -Embedding
2/16/2010 3:07:52 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service helpsvc with arguments "" in order to run the server: {833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}
2/16/2010 1:27:22 AM, error: Service Control Manager [7000] - The Conexant USB ADSL WAN Modem service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:27:15 AM, error: Service Control Manager [7000] - The USB Mass Storage Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:50 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbstor.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:43 AM, error: Service Control Manager [7000] - The Microsoft USB PRINTER Class service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:40 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbprint.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:35 AM, error: Service Control Manager [7000] - The Microsoft USB Generic Parent Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:17 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbccgp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tdtcp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:06 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tdpipe.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:35 AM, error: Service Control Manager [7000] - The Microsoft Kernel GS Wavetable Synthesizer service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:28 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\swmidi.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:20 AM, error: Service Control Manager [7000] - The StarOpen service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:15 AM, error: Service Control Manager [7000] - The Microsoft Kernel Audio Splitter service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file sfloppy.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\splitter.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:23:28 AM, error: Service Control Manager [7000] - The Secdrv service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:23:21 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\rootmdm.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:23:14 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\rdpwd.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:20:38 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\nwlnkfwd.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:20:38 AM, error: Service Control Manager [7001] - The IPX Traffic Filter Driver service depends on the IPX Traffic Forwarder Driver service which failed to start because of the following error: The system cannot find the file specified.
2/16/2010 1:20:38 AM, error: Service Control Manager [7000] - The IPX Traffic Forwarder Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:30 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\nwlnkflt.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:20:23 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mspqm.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:20:23 AM, error: Service Control Manager [7000] - The Microsoft Streaming Quality Manager Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:16 AM, error: Service Control Manager [7000] - The Microsoft Streaming Clock Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:15 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mspclock.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
2/16/2010 1:20:08 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file lbrtfdc.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.10.1.0.
2/16/2010 1:20:07 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mskssrv.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
2/16/2010 1:20:07 AM, error: Service Control Manager [7000] - The Microsoft Streaming Service Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:32 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\irenum.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:31 AM, error: Service Control Manager [7000] - The IR Enumerator Service service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:24 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipnat.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:24 AM, error: Service Control Manager [7000] - The IP Network Address Translator service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:16 AM, error: Service Control Manager [7000] - The IP in IP Tunnel Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:07 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipinip.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:01 AM, error: Service Control Manager [7000] - The IP Traffic Filter Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:58 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipfltdrv.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:18:51 AM, error: Service Control Manager [7000] - The IPv6 Windows Firewall Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:39 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ip6fw.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:34 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file i2omgmt.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:32 AM, error: Service Control Manager [7000] - The i2omgmt service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:24 AM, error: Service Control Manager [7000] - The General Purpose USB Driver (e4ldr.sys) service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:14 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file changer.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:13 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\drmkaud.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:13 AM, error: Service Control Manager [7000] - The Microsoft Kernel DRM Audio Descrambler service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:08 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\dmusic.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:06 AM, error: Service Control Manager [7000] - The Microsoft Kernel DLS Syntheiszer service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:17:09 AM, error: Service Control Manager [7000] - The ATM ARP Client Protocol service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:17:08 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\atmarpc.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:16:52 AM, error: Service Control Manager [7000] - The RAS Asynchronous Media Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:16:36 AM, error: Service Control Manager [7000] - The Microsoft Kernel Acoustic Echo Canceller service failed to start due to the following error: The system cannot find the file specified.
2/15/2010 8:27:02 PM, error: Service Control Manager [7034] - The avast! Web Scanner service terminated unexpectedly. It has done this 1 time(s).
2/15/2010 8:14:55 PM, error: Service Control Manager [7000] - The General Purpose USB Driver (e4ldr.sys) service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.

==== End Of File ===========================




Eto to bi bilo to.
Proverila sam i u manege,removable storage nema ga.

Skini program Malwarebytes' Anti-Malware
Dvoklikom pokreni instalaciju
Na samom pocetku proveri da li su stiklirane ove opcije
Update Malwarebytes' Anti-Malware
Launch Malwarebytes Anti-Malware

Zatim klikni Finish.

Izaberi opciju Perform Quick Scan i klikni Scan.
Po završetku procesa klikni OK, Show Results: u listi detektovanog malware-a proveri da li su obelezene sve stavke i klikni Remove Selected.

*Po zavrsetku ciscenja zakaci MBAM log na forum.
*Ponovo pokreni DDS program i kopiraj svez DDS.txt log

---

Malwarebytes' Anti-Malware 1.44
Database version: 3766
Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

20.2.2010 15:17:34
mbam-log-2010-02-20 (15-17-34).txt

Scan type: Quick Scan
Objects scanned: 137158


mbam
Time elapsed: 29 minute(s), 56 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 1
Registry Data Items Infected: 3
Folders Infected: 0
Files Infected: 12

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\svchost.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

Registry Data Items Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Documents and Settings\Itana\My Documents\downloads\MyWebFaceSetup2.3.50.62.GRfox000(2).exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Itana\My Documents\downloads\MyWebFaceSetup2.3.50.62.GRfox000.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-606747145-436374069-1606980848-1004\Dc49.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-606747145-436374069-1606980848-1004\Dc50.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\RECYCLER\S-1-5-21-606747145-436374069-1606980848-1004\Dc51.exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Start Menu\Programs\Startup\netuza32.exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Local Settings\Temporary Internet Files\Content.IE5\5P2VNOZK\load[1].exe (Worm.KoobFace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Itana\Local Settings\Temporary Internet Files\Content.IE5\PAPXR2GD\MyWebFaceSetup2.3.50.62.GRman000[1].exe (Adware.MyWebSearch) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Local Settings\Temporary Internet Files\Softonic-Eng7_EN.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Local Settings\Temporary Internet Files\udRemove.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\WINDOWS\Sysvxd.exe (Trojan.FakeAlert) -> Quarantined and deleted successfully.
C:\Documents and Settings\Bojana\Application Data\avdrn.dat (Malware.Trace) -> Quarantined and deleted successfully.

U toku skeniranja samo dva puta mi se pojavio avast da je nasao virus,a ovaj je nasao 17 sto trojanaca sto malwara,i ostalih virusa.Jel treba da instaliram neki drugi anti virus?Koji bi to bio?
Kaze da moram da restartujem komp pa cu naknadno poslati dds.HVALA PUNO

nema na cemu ;)

restartuj racunar pa mi daj svez dds.txt log i javi stanje

---

Izvinjavam se na kasnjenju ,kompjuter mi se zabagovao skroz,nisam mogla da se konektujem,a kao sto znate imam problem sa usbom i nisam mogla da prebacim DDS ali evo ga sad.




DDS (Ver_09-12-01.01) - NTFSx86
Run by Bojana at 16:04:12,98 on sub 20.02.2010
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_15
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.255.49 [GMT 1:00]

AV: avast! antivirus 4.8.1368 [VPS 100219-1] *On-access scanning enabled* (Updated) {7591DB91-41F0-48A3-B128-1A293FD8233D}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\system32\tlntsvr.exe
C:\WINDOWS\Mixer.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\Program Files\Conexant\Adsl\dslstat.exe
C:\Program Files\Conexant\Adsl\dslagent.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
C:\Documents and Settings\Bojana\Desktop\Downloads\dds.com
C:\Program Files\Adobe\Acrobat 7.0\Reader\AcroRd32Info.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe
C:\Program Files\ATI Technologies\ATI.ACE\cli.exe

============== Pseudo HJT Report ===============

uSearch Page = ${URL_SEARCHPAGE}
uStart Page = hxxp://search.conduit.com?SearchSource=10&ctid=CT2086743
mSearch Page = ${URL_SEARCHPAGE}
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
uURLSearchHooks: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
uURLSearchHooks: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearsharetb\BearShareDx.dll
BHO: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
BHO: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn0\YTSingleInstance.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn0\yt.dll
TB: MediaBar: {0974ba1e-64ec-11de-b2a5-e43756d89593} - c:\program files\bearsharetb\BearShareDx.dll
TB: FrostWire Toolbar: {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\GenericAskToolbar.dll
TB: Softonic-Eng7 Toolbar: {414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3} - c:\program files\softonic-eng7\tbSoft.dll
TB: PHPNukeEN Toolbar: {dd02a4eb-4afd-4d60-99d8-e67f964ca813} - c:\program files\phpnukeen\tbPHPN.dll
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [Messenger (Yahoo!)] "c:\program files\yahoo!\messenger\YahooMessenger.exe" -quiet
uRun: [CryptLoad] c:\documents and settings\bojana\my documents\downloads\RouterClient.exe
mRun: [C-Media Mixer] Mixer.exe /startup
mRun: [ATICCC] "c:\program files\ati technologies\ati.ace\cli.exe" runtime -Delay
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [avast!] c:\progra~1\alwils~1\avast4\ashDisp.exe
mRun: [DSLSTATEXE] c:\program files\conexant\adsl\dslstat.exe icon
mRun: [DSLAGENTEXE] c:\program files\conexant\adsl\dslagent.exe
mRun: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
dRunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32
dRunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N
StartupFolder: c:\docume~1\bojana\startm~1\programs\startup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\dslmon.lnk - c:\program files\sagem\sagem f@st 800-840\dslmon.exe
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\hpdigi~1.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
TCP: {EB60050D-3807-4989-ADBB-3B0918A75FE5} = 77.105.0.18 77.105.0.19
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\bojana\applic~1\mozilla\firefox\profiles\12nhgqra.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=3&q={searchTerms}
FF - prefs.js: browser.search.selectedEngine - Softonic-Eng7 Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://en-US.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-US:official
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2405280&SearchSource=2&q=
FF - component: c:\documents and settings\bojana\application data\mozilla\firefox\profiles\12nhgqra.default\extensions\{414b6d9d-4a95-4e8d-b5b1-149dd2d93bb3}\components\FFExternalAlert.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\veetle\player\npvlc.dll
FF - plugin: c:\program files\veetle\plugins\npVeetle.dll
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: yahoo.homepage.dontask - truec:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R?3 avast! Mail Scanner;avast! Mail Scanner;c:\program files\alwil software\avast4\ashMaiSv.exe [2009-10-21 254040]
R1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-10-21 114768]
R2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswFsBlk.sys [2009-10-21 20560]
R2 avast! Antivirus;avast! Antivirus;c:\program files\alwil software\avast4\ashServ.exe [2009-10-21 138680]
R3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2010-2-16 104344]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2010-2-16 69656]
S3 avast! Web Scanner;avast! Web Scanner;c:\program files\alwil software\avast4\ashWebSv.exe [2009-10-21 352920]

=============== Created Last 30 ================

2010-02-20 13:37:11 0 d-----w- c:\docume~1\bojana\applic~1\Malwarebytes
2010-02-20 13:36:23 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-02-20 13:36:15 0 d-----w- c:\docume~1\alluse~1\applic~1\Malwarebytes
2010-02-20 13:36:13 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-02-20 13:36:12 0 d-----w- c:\program files\Malwarebytes' Anti-Malware
2010-02-19 21:06:22 0 d-----w- c:\docume~1\alluse~1\applic~1\Mozilla Firefox
2010-02-16 13:40:18 21 ----a-w- c:\windows\Fast800.ini
2010-02-16 13:40:18 169 ----a-w- c:\windows\adidsl.ini
2010-02-16 13:40:01 253008 ----a-w- c:\windows\adirasx64.exe
2010-02-16 13:40:01 194128 ----a-w- c:\windows\adiras.exe
2010-02-16 00:19:32 34688 -c--a-w- c:\windows\system32\dllcache\lbrtfdc.sys
2010-02-16 00:19:32 34688 ----a-w- c:\windows\system32\drivers\lbrtfdc.sys
2010-02-16 00:18:24 8576 -c--a-w- c:\windows\system32\dllcache\i2omgmt.sys
2010-02-16 00:18:24 8576 ----a-w- c:\windows\system32\drivers\i2omgmt.sys
2010-02-16 00:18:10 8192 -c--a-w- c:\windows\system32\dllcache\changer.sys
2010-02-07 14:45:56 0 d-----w- c:\program files\LG Electronics
2010-02-07 14:45:03 81920 ----a-r- c:\windows\system32\srctrl.dll
2010-02-07 14:44:49 0 d-----w- c:\program files\LGGSM
2010-01-30 21:54:14 0 d-----w- c:\program files\StatMate
2010-01-30 21:53:56 0 d-----w- c:\program files\InStat3

==================== Find3M ====================

2010-02-16 13:40:18 32 ----a-w- c:\windows\system32\drivers\adidsl.cfg
2010-01-02 15:24:51 123988 ----a-w- c:\windows\HPHins12.dat
2009-12-20 17:35:28 90112 ----a-w- c:\windows\DUMP3e9f.tmp
2009-10-21 07:28:28 32768 --sha-w- c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012009102120091022\index.dat

============= FINISH: 16:06:14,42 ===============


UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT

DDS (Ver_09-12-01.01)

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 10/21/2009 9:26:44 AM
System Uptime: 2/20/2010 3:53:20 PM (1 hours ago)

Motherboard: MICRO-STAR INC. | | MS-6704
Processor: Intel(R) Celeron(R) CPU 2.40GHz | FC-478 | 2405/100mhz

==== Disk Partitions =========================

A: is Removable
C: is FIXED (NTFS) - 74 GiB total, 6.548 GiB free.
D: is CDROM ()

==== Disabled Device Manager Items =============

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Audio Splitter
Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Audio Splitter
PNP Device ID: SW\{2F412AB5-ED3A-4590-AB24-B0CE2AA77D3C}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: splitter

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel Acoustic Echo Canceller
Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel Acoustic Echo Canceller
PNP Device ID: SW\{4245FF73-1DB4-11D2-86E4-98AE20524153}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: aec

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel GS Wavetable Synthesizer
Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4}
Manufacturer: Microsoft
Name: Microsoft Kernel GS Wavetable Synthesizer
PNP Device ID: SW\{6C1B9F60-C0A9-11D0-96D8-00AA0051E51D}\{9B365890-165F-11D0-A195-0020AFD156E4}
Service: swmidi

Class GUID: {4D36E96C-E325-11CE-BFC1-08002BE10318}
Description: Microsoft Kernel DLS Synthesizer
Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC
Manufacturer: Microsoft
Name: Microsoft Kernel DLS Synthesizer
PNP Device ID: SW\{8C07DD50-7A8D-11D2-8F8C-00C04FBF8FEF}\DMUSIC
Service: DMusic

==== System Restore Points ===================

No restore point in system.

==== Installed Programs ======================

µTorrent
ACDSee Pro 2
Adobe Bridge 1.0
Adobe Common File Installer
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Help Center 1.0
Adobe Photoshop CS2
Adobe Reader 7.0.9
Adobe Stock Photos 1.0
AIMP2
Ask Toolbar
ATI - Software Uninstall Utility
ATI Catalyst Control Center
ATI Display Driver
avast! Antivirus
BufferChm
CDBurnerXP
Conexant DSL Modem
CustomerResearchQFolder
D1300
D1300_Help
DeviceManagementQFolder
eSupportQFolder
EVEREST Ultimate Edition v5.00
Foxit Reader
HFSLIP Total Slipstream (v1.7.8, build 80614)
HP Customer Participation Program 7.0
HP Imaging Device Functions 7.0
HP Photosmart and Deskjet 7.0 Software
HP Photosmart Essential
HP Software Update
HP Solution Center 7.0
hph_ProductContext
hph_readme
hph_software
hph_software_req
HPPhotoSmartExpress
HPProductAssistant
Java(TM) 6 Update 15
JDownloader
K-Lite Mega Codec Pack 5.2.0
LG GSM PC Components
Malwarebytes' Anti-Malware
MarketResearch
MediaBar
Microsoft .NET Framework 2.0 Service Pack 1
Microsoft .NET Framework 3.0 Service Pack 1
Microsoft .NET Framework 3.5
Microsoft Office PowerPoint 2003 Template Pack 1
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Mozilla Firefox (3.5.8)
PCI Audio Driver
PHPNukeEN Toolbar
SAGEM F@st 800-840
Softonic-Eng7 Toolbar
SolutionCenter
Status
The KMPlayer (remove only)
Toolbox
TrayApp
Unload
Veetle TV 0.9.15
WebFldrs XP
WebReg
Windows Internet Explorer 8
Windows Media Format 11 runtime
Windows Media Player 11
WinRAR archiver
XML Paper Specification Shared Components Pack 1.0
Yahoo! Messenger
Yahoo! Toolbar

==== Event Viewer Messages From Past Week ========

2/20/2010 3:32:04 PM, error: Service Control Manager [7026] - The following boot-start or system-start driver(s) failed to load: IntelIde
2/16/2010 5:07:18 AM, error: Service Control Manager [7023] - The Windows Firewall/Internet Connection Sharing (ICS) service terminated with the following error: The system cannot find the file specified.
2/16/2010 5:03:23 AM, error: DCOM [10000] - Unable to start a DCOM Server: {9EB4C4CB-74C2-4BE9-AA5D-8249F16020AD}. The error: "%1450" Happened while starting this command: C:\PROGRA~1\THEKMP~1\KMPlayer.exe -Embedding
2/16/2010 3:07:52 PM, error: DCOM [10005] - DCOM got error "%1058" attempting to start the service helpsvc with arguments "" in order to run the server: {833E4010-AFF7-4AC3-AAC2-9F24C1457BCE}
2/16/2010 1:27:22 AM, error: Service Control Manager [7000] - The Conexant USB ADSL WAN Modem service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:27:15 AM, error: Service Control Manager [7000] - The USB Mass Storage Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:50 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbstor.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:43 AM, error: Service Control Manager [7000] - The Microsoft USB PRINTER Class service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:40 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbprint.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:35 AM, error: Service Control Manager [7000] - The Microsoft USB Generic Parent Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:26:17 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\usbccgp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tdtcp.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:26:00 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\tdpipe.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:35 AM, error: Service Control Manager [7000] - The Microsoft Kernel GS Wavetable Synthesizer service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:28 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\swmidi.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:20 AM, error: Service Control Manager [7000] - The StarOpen service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:15 AM, error: Service Control Manager [7000] - The Microsoft Kernel Audio Splitter service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:24:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file sfloppy.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:24:11 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\splitter.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:23:28 AM, error: Service Control Manager [7000] - The Secdrv service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:23:15 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\rootmdm.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:23:14 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\rdpwd.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:20:38 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\nwlnkfwd.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:20:38 AM, error: Service Control Manager [7001] - The IPX Traffic Filter Driver service depends on the IPX Traffic Forwarder Driver service which failed to start because of the following error: The system cannot find the file specified.
2/16/2010 1:20:33 AM, error: Service Control Manager [7000] - The IPX Traffic Forwarder Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:30 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\nwlnkflt.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:20:23 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mspqm.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:20:23 AM, error: Service Control Manager [7000] - The Microsoft Streaming Quality Manager Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:16 AM, error: Service Control Manager [7000] - The Microsoft Streaming Clock Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:15 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mspclock.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
2/16/2010 1:20:07 AM, error: Service Control Manager [7000] - The Microsoft Streaming Service Proxy service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:20:02 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file lbrtfdc.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.10.1.0.
2/16/2010 1:20:01 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\mskssrv.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.3.2600.5512.
2/16/2010 1:19:32 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\irenum.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:31 AM, error: Service Control Manager [7000] - The IR Enumerator Service service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:24 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipnat.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:24 AM, error: Service Control Manager [7000] - The IP Network Address Translator service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:16 AM, error: Service Control Manager [7000] - The IP in IP Tunnel Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:19:07 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipinip.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:19:01 AM, error: Service Control Manager [7000] - The IP Traffic Filter Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:58 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ipfltdrv.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.0.
2/16/2010 1:18:51 AM, error: Service Control Manager [7000] - The IPv6 Windows Firewall Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:39 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\ip6fw.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:34 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file i2omgmt.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:32 AM, error: Service Control Manager [7000] - The i2omgmt service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:24 AM, error: Service Control Manager [7000] - The General Purpose USB Driver (e4ldr.sys) service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:14 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file changer.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:13 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\drmkaud.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:13 AM, error: Service Control Manager [7000] - The Microsoft Kernel DRM Audio Descrambler service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:18:08 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\dmusic.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:18:06 AM, error: Service Control Manager [7000] - The Microsoft Kernel DLS Syntheiszer service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:17:09 AM, error: Service Control Manager [7000] - The ATM ARP Client Protocol service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:17:03 AM, information: Windows File Protection [64002] - File replacement was attempted on the protected system file c:\windows\system32\drivers\atmarpc.sys. This file was restored to the original version to maintain system stability. The file version of the system file is 5.1.2600.5512.
2/16/2010 1:16:52 AM, error: Service Control Manager [7000] - The RAS Asynchronous Media Driver service failed to start due to the following error: The system cannot find the file specified.
2/16/2010 1:16:36 AM, error: Service Control Manager [7000] - The Microsoft Kernel Acoustic Echo Canceller service failed to start due to the following error: The system cannot find the file specified.
2/13/2010 12:28:37 PM, error: Service Control Manager [7034] - The avast! Web Scanner service terminated unexpectedly. It has done this 1 time(s).
2/13/2010 12:13:33 PM, error: Service Control Manager [7009] - Timeout (30000 milliseconds) waiting for the avast! Web Scanner service to connect.
2/13/2010 12:13:33 PM, error: Service Control Manager [7000] - The avast! Web Scanner service failed to start due to the following error: The service did not respond to the start or control request in a timely fashion.
2/13/2010 12:13:07 PM, error: Service Control Manager [7000] - The General Purpose USB Driver (e4ldr.sys) service failed to start due to the following error: The service cannot be started, either because it is disabled or because it has no enabled devices associated with it.
2/13/2010 12:11:04 PM, error: Disk [15] - The device, \Device\Harddisk1\D, is not ready for access yet.

==== End Of File ===========================

Bojana,izvestaj vise nepokazuje tragove infekcije. Ovo bi trebao da je cist PC
No morali bi odraditi jos jednu malu stvar.

Uz poruku sam ti upload-ovao neki zapakovani file. Skini ga na Desktop.
Raspakuj ga i pokreni file. Na Desktopu ce ti se pojaviti notepad ( log ) pod nazivom showreg

sadrzaj tog file-a prikaci uz poruku.

_{[Ovu poruku je menjao magna86 dana 22.02.2010. u 17:45 GMT+1]}

---

Ne znam sta se desava ali meni i dalje nece da prikaze usb,ali kad sam ga ubacila u komp,prikazao mi je poruku da je on HIGH SPEED MASS STORAGE DEVICE,i da imam 6 portova,tu poruku prvi put vidim i nista ne razumem,

_{[Ovu poruku je menjao Bojana489 dana 23.02.2010. u 13:57 GMT+1]}

Uz poruku sam ti prikacio File pod nazivom fixMe...
Skini taj file na Desktop.Raspakuj ga i pokreni ga. Na pitanje odgovori sa Yes

Restartuj kompjuter,to je to. Logovi su cisti,nevidim nijednu infekciju.


..........


Sto se tice USB-a...hm...za pocetak trebali bi da vidimo sadrzaj Device Manager-a

Start >> Run kopiraj ovo:

Ok

Da li ima negde neko znak pitanje?
Imas li Universal Serial Bus controllers?
Najbolje da uradis PrintScreen Device Manager-a (da ga uslikas srpski receno )

Kako radis PrintScreen?

Otvoris Device Manager i onda na tastaturi pritisnes dugme Print Scrn.
Nakon toga otvoris Paint i u Edit meniju odaberes Paste.
Onda odes na File>Save As,
pa dole u dijalogu za snimanje promenis format u JPG (nemoj BMP)
i nakon toga snimis sliku negde na HD (Desktop najbolje), pa je nakon toga uploadujes na forum.

_{i mislim da smo sa zastitom zavrsili pa ako se moderatori slazu da se tema prebaci u Windows forum.}

---

OK hvala.
Evo sta kaze u device manegeru kad otvorim usb,Sta sad trerba da radim?



Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)

Da ne započinjem novu temu...
Nisam početnik, ali sam napravio početničku grešku. Umesto da koristim USB flash sa zaključavanjem (ReadOnly), koristio sam standardni i na njemu odneo pripremu za izradu pečata. Čim je ubode u računar video sam kako folder ikone postaju bledje i odmah sam izvadio flash. Sve mi je bilo jasno, ali kasno
Na svom računaru sam pronašao gomilu EXE fajlova sa ikonom foldera, a folderi su bili sakriveni i slučaj mi je poznat. Pobrisao zaražene EXE, skinuto Hidden & System atribute na svim folderima, podfolderima i fajlovima pomoću Total Commander-a i izgledalo je da je sve ok. Sve sam video regularno. Medjutim, flash se odjavio i više nisam uspeo da ga vidim.
Ubadanjem u USB port se regularno prijavi, ali ne omogućava pristup fajl sistemu. Recovery programi ne pomažu (GetData Back, Recover My Files). Probano i iz Linux-a.
Sa skidanjem podataka još nisam počeo jer mi treba "geometrija" diska. Šta mi je činiti?
Da li je moguće da sam skinuo atribute sa nečega što nije trebalo, mada sve znam šta je na flash-u bilo. Na root-u je bio onaj njihov CarryItEasy.exe program.
Možda je flash i crkao, ali mi je jako čudno da se to desi baš kada sam brisao viruse sa njega...

---