Navigacija
Lista poslednjih: 16, 32, 64, 128 poruka.

Nepoznat startup program- mozda virus?

[es] :: Zaštita :: Nepoznat startup program- mozda virus?

[ Pregleda: 2448 | Odgovora: 3 ] > FB > Twit

Postavi temu Odgovori

Autor

Pretraga teme: Traži
Markiranje Štampanje RSS

dellco
Marko Markovic
Nis

Član broj: 90550
Poruke: 85
*.internet.krstarica.net.



Profil

icon Nepoznat startup program- mozda virus?24.08.2008. u 00:52 - pre 190 meseci
Pored spiska programa koji se pokrecu sa Windowsom pojavljuje se i program, ili sta je vec bez naziva kao na slici u mom prilogu.
Interesuju me vasa iskustva da li je to virus , da li da ga disablujem - onemogucim ili da ostane da radi u pozadini?
Kad su Srbi pevali uz gusle svet nije ni znao sta je kompjuter ;-)
Prikačeni fajlovi
 
Odgovor na temu

Nazzgull
Nikola Plavšić
Elektrotehnicka skola " Mihajlo
Pupin "
Budisava

Član broj: 172019
Poruke: 4
79.101.182.*

Sajt: srbija.wowmmorpg.net


Profil

icon Re: Nepoznat startup program- mozda virus?24.08.2008. u 12:46 - pre 190 meseci
Verovatno je neko iz grupe Malware-a. Molio bih te da odradiš HijackThis, i da mi Log fajl kopiraš ovde.
Hvala.
Don't forget to say thanks.
 
Odgovor na temu

dellco
Marko Markovic
Nis

Član broj: 90550
Poruke: 85
*.internet.krstarica.net.



Profil

icon Re: Nepoznat startup program- mozda virus?29.08.2008. u 19:26 - pre 190 meseci
Evo ga log fajl, Molim strucnu expertizu i kraci komentar.


Logfile of HijackThis v1.99.1
Scan saved at 20:21:50, on 29.8.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\WINDOWS\htpatch.exe
C:\WINDOWS\AGRSMMSG.exe
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Dejan\Desktop\FG5.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [HTpatch] C:\WINDOWS\htpatch.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE NvQTwk,NvCplDaemon initialize
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb06.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [kis] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office 2000\Office\OSA9.EXE
O8 - Extra context menu item: Add to Kaspersky Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\\ie_banner_deny.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Web Anti-Virus - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\scieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4A4FC5D9-9E3A-4AF4-B734-9F183D41A07E}: NameServer = 212.200.172.1 212.200.172.3
O17 - HKLM\System\CS1\Services\Tcpip\..\{4A4FC5D9-9E3A-4AF4-B734-9F183D41A07E}: NameServer = 212.200.172.1 212.200.172.3
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1.0\adialhk.dll
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Kaspersky Internet Security 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 6.0\avp.exe" -r (file missing)
O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe





Kad su Srbi pevali uz gusle svet nije ni znao sta je kompjuter ;-)
 
Odgovor na temu

petersonic
Beograd

Član broj: 67030
Poruke: 246



+1 Profil

icon Re: Nepoznat startup program- mozda virus?29.08.2008. u 21:36 - pre 190 meseci
Najlakse bi bilo da samo odstikliras i zavrsio si posao. Ako hoces pogledaj ovaj link http://ask-leo.com/why_is_ther..._msconfig_startup_entries.html
 
Odgovor na temu

[es] :: Zaštita :: Nepoznat startup program- mozda virus?

[ Pregleda: 2448 | Odgovora: 3 ] > FB > Twit

Postavi temu Odgovori

Navigacija
Lista poslednjih: 16, 32, 64, 128 poruka.