[es] - Problem sa HDD-om

.qwerty.

Član broj: 125936
Poruke: 140
*.zrlocal.net.

+1 Profil

^{22.02.2007. u 19:35 - pre 209 meseci}

Ako kaze da nije pronashao fajl ili ako fajl mozhdai ma neku restrikciju, kucaj:

Citat:

attrib -s -h -r d:\auto*.*
del d:\auto*.*

Da li mozhesh da pristupish toj particiji pomocu Total Commandera !?

Ukoliko sve ovo ne pomogne, udji u Safe Mode, pa pokushaj onda...

011100010111011101100101011100100111010001111001

Odgovor na temu

bairko
Bair Ghetto
Sabac

Član broj: 135126
Poruke: 32
91.150.71.*

Sajt: www.bair-ghetto.org

Profil

Re: Problem sa HDD-om

^{22.02.2007. u 19:53 - pre 209 meseci}

Ja particiju mogu da otvorim na desni klik open. Medjutim boldovano mi je na desni klik AUTOPLAY. Pa kad kliknem 2 puta on mi izbacuje tu gresku sxs.exe not found.
A ovo cu da probam kad dodjem kuci.
Hvala.

Odgovor na temu

.qwerty.

Član broj: 125936
Poruke: 140
*.zrlocal.net.

+1 Profil

Re: Problem sa HDD-om

^{22.02.2007. u 22:30 - pre 209 meseci}

Evo ti reshenje:

Code:

Removing Autostart Entry from the Registry

Removing the autostart entry from the registry prevents the malware from executing at startup.

If the registry entry below is not found, the malware may not have executed as of detection. If so, proceed to the succeeding solution set.

   1. Open Registry Editor. Click Start>Run, type REGEDIT, then press Enter.
   2. In the left panel, double-click the following:
      HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>
      Windows>CurrentVersion>Run
   3. In the right panel, locate and delete the entry:
      SoundMam = "%System%\SVOHOST.exe"
      (Note: %System% is the Windows system folder, which is usually C:\Windows\System on Windows 98 and ME, C:\WINNT\System32 on Windows NT and 2000, and C:\Windows\System32 on Windows XP and Server 2003.)

Restoring Modified Entries from the Registry

   1. Still in Registry Editor, in the left panel, double-click the following:
      HKEY_LOCAL_MACHINE>SOFTWARE>Microsoft>Windows>
      CurrentVersion>Explorer>Advanced>Folder>Hidden>SHOWALL
   2. In the right panel, locate the entry:
      CheckedValue = "0"
   3. Right-click on the value name and choose Modify. Change the value data to:
      1
   4. In the left panel, double-click the following:
      HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>
      Services>srservice
   5. In the right panel, locate the entry:
      Start = "dword:00000004"
   6. Right-click on the value name and choose Modify. Change the value data to:
      2
   7. In the left panel, double-click the following:
      HKEY_LOCAL_MACHINE>SYSTEM>CurrentControlSet>
      Services>wscsvc
   8. In the right panel, locate the entry:
      Start = "dword:00000004"
   9. Right-click on the value name and choose Modify. Change the value data to:
      2
  10. Close Registry Editor.

Restoring AUTORUN.INF

   1. Open AUTORUN.INF using Notepad on the drive where the malware was detected earlier. Note that this malware drops the said file in all available removable drives.
   2. Delete the following lines created by the malware:
      open = sxs.exe
      shellexecute= sxs.exe
      shell\Auto\command=sxs.exe
   3. Close AUTORUN.INF and click Yes when prompted to save.

011100010111011101100101011100100111010001111001

Odgovor na temu

bairko
Bair Ghetto
Sabac

Član broj: 135126
Poruke: 32
91.150.71.*

Sajt: www.bair-ghetto.org

Profil

Re: Problem sa HDD-om

^{23.02.2007. u 02:27 - pre 209 meseci}

Poceo sam da radim i kada sam dosao do dela kada treba da nadjem i izbrisem SVOHOST.exe ja ga ne nalazim.
Preskocim taj korak, dodjem do onog reg kada treba da promenim value u 2, i vidim da meni tamo vec stoji 2.
Znaci ne vredi ovako.

Pokusao sam i sa onim
attr -h -r itd. Ne vredi. Ne mogu uopste da pronadjem takav fajl.

Odgovor na temu

S_tosha
Sinisa Tosic
sistem administrator u opstinskoj upravi
SO Bojnik

Član broj: 61731
Poruke: 196
*.vdial.verat.net.

Profil

Re: Problem sa HDD-om

^{23.02.2007. u 11:44 - pre 209 meseci}

A šta imaš u registry-u na:

HKEY_CLASSES_ROOT\Drive\Shell

Ako ima Autoplay - obriši ga!

Mali je glup, al' se uporno trudi!

Odgovor na temu

bairko
Bair Ghetto
Sabac

Član broj: 135126
Poruke: 32
91.150.71.*

Sajt: www.bair-ghetto.org

Profil

Re: Problem sa HDD-om

^{23.02.2007. u 12:41 - pre 209 meseci}

Nema autoplay!

Odgovor na temu

.qwerty.

Član broj: 125936
Poruke: 140
*.zrlocal.net.

+1 Profil

Re: Problem sa HDD-om

^{23.02.2007. u 16:20 - pre 209 meseci}

:) Obori Windows...

Ako ne mozhesh da nadjesh neke registry kljucheve, kao shto je napisano u uputstvu, probaj sa opcijom FIND...
Ili instaliraj PC-Cillin (imash ga na CD-u od drajvera za plochu obichno), mozhda ti on odradi neshto...

Takodje trazhi u registy bazi "sxs.exe" i obrishi sve shto nadjesh... !!!

011100010111011101100101011100100111010001111001

Odgovor na temu