Napali mi windows vistu neka djubrad ja ih obrisem oni se vrate!

Neki virus ili sta mi je napao kompijuter i ubacio ovu djibrad u windows: ja ih obrisem oni se vrate! zeznuli su mi task menager i u system tray me obavestava da imam spyware! evo su ta djubrad: 123messenger.per , 2020search2.dll , 2020search.dll , apphelp32.dll , asferror32.dll , asycfilt32.dll , athprxy32.dll , ati2dvaa32.dll , ati2dvag32.dll , audiosrv32.dll , autodisc32.dll , avifile32.dll , avisynthex32.dll , aviwrap32.dll , bjam.dll , bokja.exe , browserad.dll , cdsm32.dll , changeurl_30.dll , clofghls.dll , default.htm , didduid.ini , licencia.txt , msa64chk.dll , msapasrc.dll , mspphe.dll , mssvr.exe , ntnut.exe , saiemod.dll , shdocpe.dll , stcloader.exe , swin32.dll , telefonos.txt , textos.txt , voiceip.dll...mozda ih ima jos ko zna! kaspersky cuti i tvrdi da to nisu virusi! skidao sam spyware doctora , registry booster...hijiack this ne pomaze! ne znam koji program bi ih obrisao? vec su mi pojeli windows vistu!

aj postuj ipak HijackThis log...

Efikasan nacin borbe protiv izdajnika racunarske nam drzave, kao tvoje, je sledeca specijalna jedinica!

1.Nabavi xp koji radi sa cda, ima ih, ako ne znas kako sta gde, posalji mi mejl pa cu da te uputim
2. kada ga podignes, on ce tvoj hard da gleda kao obicno mesto za skladistenje podataka, a pri tome, posto je na cdu, ne moze da se zarazi:>
3. Ubaci neki Antivirus sa flesa, ima da se se skinu razni, moja preporuka je da potrazis po guglu, tipa portable nod, kasperski, il sl.
4.Iskeniras komp i vidis sta ce da ti kaze.

Ovo je najbolja varijanta da znas!

Potpis

Nekada je istina oko nas a mi non stop gledamo ili previse ispred ili previse iza

evo ti:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:42:31, on 15.5.2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v8.00 (8.00.6001.17184)
Boot mode: Normal

Running processes:
D:\Windows\system32\wmsdkns.exe
D:\Windows\system32\Dwm.exe
D:\Windows\system32\taskeng.exe
D:\Program Files\Opera\Opera.exe
D:\Windows\system32\SearchFilterHost.exe
D:\Program Files\Windows Media Player\wmpnscfg.exe
D:\Windows\system32\conime.exe
D:\Windows\System32\rundll32.exe
E:\Install\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
F2 - REG:system.ini: UserInit=D:\WINDOWS\SYSTEM32\userinit.exe,D:\Windows\system32\wmsdkns.exe,
O2 - BHO: (no name) - {00000250-0320-4dd4-be4f-7566d2314352} - (no file)
O2 - BHO: (no name) - {13197ace-6851-45c3-a7ff-c281324d5489} - (no file)
O2 - BHO: (no name) - {15651c7c-e812-44a2-a9ac-b467a2233e7d} - (no file)
O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file)
O2 - BHO: (no name) - {4e1075f4-eec4-4a86-add7-cd5f52858c31} - (no file)
O2 - BHO: (no name) - {4e7bd74f-2b8d-469e-92c6-ce7eb590a94d} - (no file)
O2 - BHO: (no name) - {5929cd6e-2062-44a4-b2c5-2c7e78fbab38} - (no file)
O2 - BHO: (no name) - {5dafd089-24b1-4c5e-bd42-8ca72550717b} - (no file)
O2 - BHO: (no name) - {5fa6752a-c4a0-4222-88c2-928ae5ab4966} - (no file)
O2 - BHO: (no name) - {622cc208-b014-4fe0-801b-874a5e5e403a} - (no file)
O2 - BHO: (no name) - {8674aea0-9d3d-11d9-99dc-00600f9a01f1} - (no file)
O2 - BHO: (no name) - {965a592f-8efa-4250-8630-7960230792f1} - (no file)
O2 - BHO: (no name) - {9c5b2f29-1f46-4639-a6b4-828942301d3e} - (no file)
O2 - BHO: (no name) - {CECA28C9-449A-481F-AAFC-A85D7A8B65B3} - D:\Windows\system32\ssqQkLDs.dll
O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-717765728274} - (no file)
O2 - BHO: (no name) - {fc3a74e5-f281-4f10-ae1e-733078684f3c} - (no file)
O2 - BHO: (no name) - {ffff0001-0002-101a-a3c9-08002b2f49fb} - (no file)
O4 - HKLM\..\Run: [MSConfig] "D:\Windows\system32\msconfig.exe" /auto
O8 - Extra context menu item: Download All by FlashGet - D:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - D:\Program Files\FlashGet\jc_link.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{8F824917-6AB7-45B9-87DE-6666841D340B}: NameServer = 212.200.191.166 212.200.190.166
O23 - Service: Lavasoft Ad-Aware Service (aawservice) - Lavasoft - D:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - D:\Windows\system32\Ati2evxx.exe
O23 - Service: Kaspersky Anti-Virus 7.0 (AVP) - Kaspersky Lab - D:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 7.0\avp.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - D:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - D:\Program Files\Spyware Doctor\pctsSvc.exe

--
End of file - 3011 bytes

tebi je pun komp spyware-a! skini AVG ANTI SPYWARE: http://download.grisoft.cz/sof.../avgas-setup-7.5.1.43-3339.exe kaspersky je glup za spyware pola ne nadje!

_{mod:prepravljen link}

Potpis

none

jedan od procesa ti je wmsdkns.exe, ukucas u google i dobijes npr ovo:
http://www.prevx.com/filenames...1843634927-X1/WMSDKNS.EXE.html
evo sta kaze za conime.exe:
http://www.liutilities.com/pro...askspro/processlibrary/conime/
citaj, ja sad nemam vremena...:)

Auuu, al si ga ti lepo slozio :).
Aj da probamo nesto da uradimo satim. Skini sa ove adrese http://downloads.andymanchesta.com/RemovalTools/SDFix.exe SDFix. Kad ga skines, pokreni SDFix.exe koji ce ti otpakovati fajlove verovatno u c:\SDFix.

E sad, restartuj komp i udji u Safe Mode. U Safe Mode ulazis tako sto dok se sistem butuje pritisnes F8 i iz menija izaberes Safe Mode.

Kad se nadjes u Safe Mode-u, udji u folder gde su se raspakovali oni fajlovi, znaci najverovatnije c:\SDFix i pokreni RunThis.bat. Skripta ce te pitati nesto tipa da li zelis da pocnes i ti tu upises y kako bi skripta pocela sa radom. Kad zavrsi pitace te da restartujes racunar, tu samo klikni bilo koju tipku da bi se restartovao komp.
Sad kad se racunar restartuje nemoj nista dirati, tj. nemoj opet ulaziti u safe mode, vec pusti da se normalno butuje sistem. Kad se pokrene Windows, jos jednom ce se pokrenuti onaj program automatski, pusti ga da zavrsi posao i kad zavrsi stisni bilo koju tipku. Report koji je nastao, tj. fajl Report.txt okaci ovde da vidimo da li je proslo kako treba. I onda jos jednom uradi HijackThis i okaci log.

Sad postoji jos jedna stvar koju ces trebati proveriti. Unos D:\Windows\system32\conime.exe mi je sumnjiv, to moze biti neki malware, a moze i biti deo Windowsa. Kako bi to proverili, ukljuci opciju da skriveni fajlovi budu vidljivi i zatim proveri propertiese ovog fajla, odnosno vidi da li je proizvodjac tog fajla Microsoft (verovatno jeste, ali proveri cisto sigurnosti radi).

A ovo ocisti pomocu HijackThis-a:

O2 - BHO: (no name) - {00000250-0320-4dd4-be4f-7566d2314352} - (no file)
O2 - BHO: (no name) - {13197ace-6851-45c3-a7ff-c281324d5489} - (no file)
O2 - BHO: (no name) - {15651c7c-e812-44a2-a9ac-b467a2233e7d} - (no file)
O2 - BHO: (no name) - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} - (no file)
O2 - BHO: (no name) - {4e1075f4-eec4-4a86-add7-cd5f52858c31} - (no file)
O2 - BHO: (no name) - {4e7bd74f-2b8d-469e-92c6-ce7eb590a94d} - (no file)
O2 - BHO: (no name) - {5929cd6e-2062-44a4-b2c5-2c7e78fbab38} - (no file)
O2 - BHO: (no name) - {5dafd089-24b1-4c5e-bd42-8ca72550717b} - (no file)
O2 - BHO: (no name) - {5fa6752a-c4a0-4222-88c2-928ae5ab4966} - (no file)
O2 - BHO: (no name) - {622cc208-b014-4fe0-801b-874a5e5e403a} - (no file)
O2 - BHO: (no name) - {8674aea0-9d3d-11d9-99dc-00600f9a01f1} - (no file)
O2 - BHO: (no name) - {965a592f-8efa-4250-8630-7960230792f1} - (no file)
O2 - BHO: (no name) - {9c5b2f29-1f46-4639-a6b4-828942301d3e} - (no file)
O2 - BHO: (no name) - {CECA28C9-449A-481F-AAFC-A85D7A8B65B3} - D:\Windows\system32\ssqQkLDs.dll
O2 - BHO: (no name) - {cf021f40-3e14-23a5-cba2-717765728274} - (no file)
O2 - BHO: (no name) - {fc3a74e5-f281-4f10-ae1e-733078684f3c} - (no file)
O2 - BHO: (no name) - {ffff0001-0002-101a-a3c9-08002b2f49fb} - (no file)

Javi sta se desava.

Potpis

www.printeks.rs