Da li je nekome poznat ovaj virus i kako da ga se rjesim Prije 15 dana sam rusio sistem zbog istog Ne da mi se opet to raditi Pokusavao sam skenirati sa kasperskim 3.0, ad-aware, spybot, nod32 ali nijedan ne vidi nista Molim vas pomozite izludi me U task manageru ga vidi kao(ja mislim da je to) Issac.exe
otvara mi se my documents pri startovanju win
Zaključano
Zakačeno
ako mžeš da ga ubiješ iz task m. ubi ga pa pokušaj opet da brišeš?
Potpis
"There are only 10 types of people in the world:
Those who understand binary, and those who don't"
Those who understand binary, and those who don't"
Ne moze iz task managera izbaci mi This is critical system process. task manager cnnnot end this process
Probaj da podigneš win u safe modu, a ako neće ni onda, zapamtis putanju, bootujes neki linuxov tool sa flopija ili nekog cd-a...
Potpis
"There are only 10 types of people in the world:
Those who understand binary, and those who don't"
Those who understand binary, and those who don't"
sorry sto upadam
isaac.exe ili issac.exe ?
ili Issac.exe
isaac.exe ili issac.exe ?
ili Issac.exe
Potpis
Lomografija je kad imaš sa čime, a nećeš … a Pinhole kad nemaš sa čime, a hoćeš! tm
tačno, možda je i sistemski fajl
http://www.liutilities.com/pro...taskspro/processlibrary/lsass/
http://www.liutilities.com/pro...taskspro/processlibrary/lsass/
Potpis
"There are only 10 types of people in the world:
Those who understand binary, and those who don't"
Those who understand binary, and those who don't"
Pardon u pitanju je isass.exe Ali nije mi bio u tasku prije nego sto se instalirao virus Usput kako da udjem u safe mode Koliko ja znam trebalo bi biti sa F8 ali mi izbaci select first boot device
požurio si sa F8,
pa ti je izbacio boot meni , ako si siguran da je virus brisi a ako nije, svasta moze da se desi
pa ti je izbacio boot meni , ako si siguran da je virus brisi a ako nije, svasta moze da se desi
Potpis
"There are only 10 types of people in the world:
Those who understand binary, and those who don't"
Those who understand binary, and those who don't"
Evo isao sam u safe mode ne otvara my documents ali je tamo u tasku i ista stvar se desava
http://www.liutilities.com/pro...taskspro/processlibrary/lsass/
pogledaj navedenu stranicu, mozda je šumi??? Šala, To je verovatno (pretpostavka) xp sp2 odlepio, kao što zna.
pogledaj navedenu stranicu, mozda je šumi??? Šala, To je verovatno (pretpostavka) xp sp2 odlepio, kao što zna.
Potpis
"There are only 10 types of people in the world:
Those who understand binary, and those who don't"
Those who understand binary, and those who don't"
Citat:
vatri: Pardon u pitanju je isass.exe
Covece ne diraj fajl Isass.exe nije to nikakv virus!
Description:
lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated.
Note: lsass.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.
Note: lsass.exe is registered as a downloader. This process usually comes bundled with a virus or spyware and its main role is to do nothing other than download other viruses/spyware to your computer. This process is a security risk and should be removed from your system.
Determining whether lsass.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
lsass.exe is a system process of the Microsoft Windows security mechanisms. It specifically deals with local security and login policies. This program is important for the stable and secure running of your computer and should not be terminated.
Note: lsass.exe is a process which is registered as a trojan. This Trojan allows attackers to access your computer from remote locations, stealing passwords, Internet banking and personal data. This process is a security risk and should be removed from your system.
Note: lsass.exe is registered as a downloader. This process usually comes bundled with a virus or spyware and its main role is to do nothing other than download other viruses/spyware to your computer. This process is a security risk and should be removed from your system.
Determining whether lsass.exe is a virus or a legitimate Windows process depends on the directory location it executes or runs from in WinTasks.
Potpis
"There are only 10 types of people in the world:
Those who understand binary, and those who don't"
Those who understand binary, and those who don't"
Citat:
aco murija: Covece ne diraj fajl Isass.exe nije to nikakv virus!
Postoje dva Isass.exe Pored jednog pise user name system a pored drugog vatri
https://www.elitesecurity.org/t54144-0#348707 evo ovo sam upravo nasao na net-u
izmenjeno 1 put, poslednji put sergio2matrox 05.02.2007. u 12:42
Izmene poruke
- sergio2matrox05.02.2007. u 12:42zapis iz teksta poruke
pre nego krenes sa brisanjem probaj drugacije da resis
Isključi servise koji se odnose na remote controle, mozda ti tu vidi opasnost,
takodje u gpedit.msc mozes ručno da zabraniš bilo koju aplikaciju/preoces.
Jel imaš password na admin. account? Na svom User account-u?
Isključi servise koji se odnose na remote controle, mozda ti tu vidi opasnost,
takodje u gpedit.msc mozes ručno da zabraniš bilo koju aplikaciju/preoces.
Jel imaš password na admin. account? Na svom User account-u?
Potpis
"There are only 10 types of people in the world:
Those who understand binary, and those who don't"
Those who understand binary, and those who don't"
Pozdrav,
koliko ja vidim ovde jedni govore o procesu cije je pocetno slovo veliko I (i) a drugi o procesu cije je pocetno slovo malo l, mozda otud nerazumevanje i zabune.
koliko ja vidim ovde jedni govore o procesu cije je pocetno slovo veliko I (i) a drugi o procesu cije je pocetno slovo malo l, mozda otud nerazumevanje i zabune.
Zbog zauzetosti pratim ovu "dragu temu" po malo nepovezano.
A zelim pomoci.
evo samo najkrace:
"svchost.exe" (bez navodnika!) se moze nazvati stanje koje nemetnu neki servisi. Al i neki virusi, crvi i trojanci.
kada je nesto sumnivo a klasicni programi za otkrivane i dezinfekciu ne odrade ostaje mucno pretraga RAZLIKE izmedju broja pokrenutih svchost.exe procesa i ODOBRENIH servisa. al to ni malo nije posao za pocetnika. brez uvrede. ako se sa Ctrl+Alt+Delete u Task Manageru vidi vise pokrenutih ovih procesa - jos ne znaci da je nesto strasno.
evo da pobrojim NEKE servise koji prikazuju ovaj proces:
Automatic update, Computer Browser, Cryptographic services, DHCP Client, Distributed link tracking client, DNS client, Error reporting service, Fast user switching compatibility, Help and support, Internet connection firewall and internet connection sharing, Logical disk manager, Messanger, Network Connections, Network location awareness, Portable media serial number, Print spooler, Remote access auto connection manager, Remote procedure call, Remote registry service, Removable storage, Secondary login, System event notification, System restore service, TCP/IP netBIOS helper service i td... Dakle koliko ovi procesa su pokrenuti tolko (otprilike) ima vidljivih "svchost.exe" .
prema tome ne treba u T.Manageru gasiti ove procese, već u Servisima, ali i tada se mora znati sta sme a sta ne...
Oko ovoga ima velika filozofia.
Za prikazane Isass.exe mogu biti odgovorni mnogi servisi! zato ima vise od jednog u T.M.
Na pr:
Net login (isass.exe)
Sluzi za logovanje na mrezni domen
Protecter storage (Isass.exe)
Brine za poverljive i passwordom zasticene fajlove i podatke.
Obratiti paznu: prvi servis je sa malim "i" a drugi sa velikim!
Pa:
Security accounts manager (isass.exe)
Brine se o korisnickim nalozima i njihovoj sigurnosti, zato se kod "Vatri" pojavljuju s malem i velikem slovima i sa raznim sufiksom.
znaci, isass (ili Isass) moze biti inficiran - ali sam fajl nije virus.
Izvinavam se na duzini.
Moderatori ako mislite da je prekoraceno - brisite poruku.
A zelim pomoci.
evo samo najkrace:
"svchost.exe" (bez navodnika!) se moze nazvati stanje koje nemetnu neki servisi. Al i neki virusi, crvi i trojanci.
kada je nesto sumnivo a klasicni programi za otkrivane i dezinfekciu ne odrade ostaje mucno pretraga RAZLIKE izmedju broja pokrenutih svchost.exe procesa i ODOBRENIH servisa. al to ni malo nije posao za pocetnika. brez uvrede. ako se sa Ctrl+Alt+Delete u Task Manageru vidi vise pokrenutih ovih procesa - jos ne znaci da je nesto strasno.
evo da pobrojim NEKE servise koji prikazuju ovaj proces:
Automatic update, Computer Browser, Cryptographic services, DHCP Client, Distributed link tracking client, DNS client, Error reporting service, Fast user switching compatibility, Help and support, Internet connection firewall and internet connection sharing, Logical disk manager, Messanger, Network Connections, Network location awareness, Portable media serial number, Print spooler, Remote access auto connection manager, Remote procedure call, Remote registry service, Removable storage, Secondary login, System event notification, System restore service, TCP/IP netBIOS helper service i td... Dakle koliko ovi procesa su pokrenuti tolko (otprilike) ima vidljivih "svchost.exe" .
prema tome ne treba u T.Manageru gasiti ove procese, već u Servisima, ali i tada se mora znati sta sme a sta ne...
Oko ovoga ima velika filozofia.
Za prikazane Isass.exe mogu biti odgovorni mnogi servisi! zato ima vise od jednog u T.M.
Na pr:
Net login (isass.exe)
Sluzi za logovanje na mrezni domen
Protecter storage (Isass.exe)
Brine za poverljive i passwordom zasticene fajlove i podatke.
Obratiti paznu: prvi servis je sa malim "i" a drugi sa velikim!
Pa:
Security accounts manager (isass.exe)
Brine se o korisnickim nalozima i njihovoj sigurnosti, zato se kod "Vatri" pojavljuju s malem i velikem slovima i sa raznim sufiksom.
znaci, isass (ili Isass) moze biti inficiran - ali sam fajl nije virus.
Izvinavam se na duzini.
Moderatori ako mislite da je prekoraceno - brisite poruku.
Citat:
sergio2matrox: pre nego krenes sa brisanjem probaj drugacije da resis
Isključi servise koji se odnose na remote controle, mozda ti tu vidi opasnost,
takodje u gpedit.msc mozes ručno da zabraniš bilo koju aplikaciju/preoces.
Jel imaš password na admin. account? Na svom User account-u?
[Ovu poruku je menjao sergio2matrox dana 05.02.2007. u 12:42 GMT+1]
Isključi servise koji se odnose na remote controle, mozda ti tu vidi opasnost,
takodje u gpedit.msc mozes ručno da zabraniš bilo koju aplikaciju/preoces.
Jel imaš password na admin. account? Na svom User account-u?
[Ovu poruku je menjao sergio2matrox dana 05.02.2007. u 12:42 GMT+1]
Mozes li malo preciznije objasniti ovo Nemam pass
Ajde ovako
idi start > run i ukucaj regedit
Sidji do
HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon
a tu bi trebao da imas
C:\windows\system32\userinit.exe,C:\windows\system32\userinit.exe,
Ako ga imas u duplikatu, kao sto primecujes
obrisi onaj drugi da ti ostane samo
C:\windows\system32\userinit.exe,
Zatvori, restartuj pa javi
idi start > run i ukucaj regedit
Sidji do
HKLM/SOFTWARE/Microsoft/Windows NT/CurrentVersion/Winlogon
a tu bi trebao da imas
C:\windows\system32\userinit.exe,C:\windows\system32\userinit.exe,
Ako ga imas u duplikatu, kao sto primecujes
obrisi onaj drugi da ti ostane samo
C:\windows\system32\userinit.exe,
Zatvori, restartuj pa javi
Potpis
Lomografija je kad imaš sa čime, a nećeš … a Pinhole kad nemaš sa čime, a hoćeš! tm
password
Potpis
"There are only 10 types of people in the world:
Those who understand binary, and those who don't"
Those who understand binary, and those who don't"