Sumnja na virus (laptop, Dell)

Pozdrav narode,

Imam problem sa laptop-om.
* Sistem podize relativno brzo
* aplikacije otvara jako sporo i u radu sa istim dosta koci i povremeno blokira (nekoliko sekundi se ukoci pa onda nastavi dalje)
* previse se greje
* u poslednjih par dana primetio sam u par navrata, u delicu sekunde ekran potpuno pocrni ( u toku rada )
* na HD-u ima dosta slobodnog prostora
* aktivnost procesora normalna

Evo nekih karakteristika ove machine:

General
Maticna Ploca : Dell 0RT951
Chipset : AMD RS690/RS690M
Procesor : AMD Turion 64 X2 Mobile TL-64 @ 2200MHz
Fizicka Memorija : 1024 Mb (2 x 512 DDR2-SDRAM )
Graficka Kartica : ATI Technologies Inc Radeon X1200 Series
Hard Disk : Hitachi (120 Gb)
DVD-Rom Drive : Optiarc DVD+-RW AD-5540A
Mrezna Kartica : Broadcom Corp BCM440x 100Base-TX Fast Ethernet
Mrezna Kartica : Broadcom Corp Dell Wireless 1390 WLAN Mini-PCI Card
Operativni sistem : Microsoft Windows XP Professionnal 5.01.2600 Service Pack 2
DirectX : Verzija 9.0c (March 2006)

Maticna ploca
Proizvodjac : Dell Inc.
Maticna Ploca : Dell 0RT951
Bios : Dell Inc.
Chipset : AMD RS690/RS690M
Fizicka Memorija : 1024 Mb DDR2-SDRAM
LPC magistrala : Da
PCI Magistrala : Da
Magistrala PCI-E Grafike : Da
USB Magistrala : Da
SMMagitrala/i2c Magistrala : Da
Bus HyperTransport : Da
Bus CardBus : Ne
Bus FireWire : Da

Procesor
Procesor : AMD Turion 64 X2 Mobile TL-64
Frekvencija : 2200MHz - (Trenutna : 2194.55MHz)
Number of Core : 2
Podrska : Socket S1
Kes L1 : 2 x 128 Kb
Kes L2 : 2 x 512 Kb
Voltaza : 1.100 V
Temperatura Procesora : 42 °C
FPU Koprocesor : Prisutan
Core 1 Activity : 3%
Core 2 Activity : 7%

Grafika
Broj Monitora : 1
Tip Monitora : Default Monitor
Graficka Kartica : ATI Radeon X1270
Trenutni Displej : 1440x900 pixels na60 HzuIstinite Boje (32-bit)
OpenGL : Da
GDI Plus : Da

Temperatura (u trenutku dok ovo pisem)
Chip za Nadzor : SMSC
Voltaza CPU : 1.10 V
Temperatura Procesora : 42 °C
Temperatura Procesora (Core 1) : 64 °C
Temperatura Procesora (Core 2) : 59 °C
ACPI Thermal Zone : 42 °C
:
Temperatura Hard Diska Hitachi HTS541612J9SA00 : 46 °C

Software
Ime Aplikacije : ArchiCAD 11 INT
Ime Aplikacije : Windows Driver Package - Ricoh Company (rimsptsk) hdc (11/14/2006 6.00.01.04)
Ime Aplikacije : Adobe Flash Player 10 ActiveX
Ime Aplikacije : Advanced Audio FX Engine
Ime Aplikacije : Advanced Video FX Engine
Ime Aplikacije : Air Hawk 2
Ime Aplikacije : ATI - Software Uninstall Utility
Ime Aplikacije : ATI Display Driver
Ime Aplikacije : AutoCAD 2008 - English
Ime Aplikacije : Autodesk Express Viewer
Ime Aplikacije : AxCrypt (Remove Only)
Ime Aplikacije : Dell Wireless WLAN Card
Ime Aplikacije : CCleaner (remove only)
Ime Aplikacije : SafeCast Shared Components
Ime Aplikacije : Conexant HDA D330 MDC V.92 Modem
Ime Aplikacije : DELL Webcam Center
Ime Aplikacije : DELL Webcam Manager
Ime Aplikacije : DivX Plus DirectShow Filters
Ime Aplikacije : Filzip 3.06
Ime Aplikacije : foobar2000 v0.9.6.9
Ime Aplikacije : GOM Player
Ime Aplikacije : Google Chrome
Ime Aplikacije : HASP4 Device Drivers
Ime Aplikacije : HP Officejet K7100 Series
Ime Aplikacije : Microsoft Script Debugger
Ime Aplikacije : Windows Internet Explorer 8
Ime Aplikacije : WebPAM
Ime Aplikacije : Kaspersky Internet Security 2009
Ime Aplikacije : Update for Windows XP (KB911164)
Ime Aplikacije : Hotfix for Windows XP (KB954550-v5)
Ime Aplikacije : Security Update for Windows XP (KB969947)
Ime Aplikacije : Security Update for Windows Internet Explorer 8 (KB971961)
Ime Aplikacije : Security Update for Windows Internet Explorer 8 (KB972260)
Ime Aplikacije : Update for Windows XP (KB973687)
Ime Aplikacije : Security Update for Windows Internet Explorer 8 (KB974455)
Ime Aplikacije : Hotfix for Windows XP (KB976098-v2)
Ime Aplikacije : Update for Windows Internet Explorer 8 (KB976749)
Ime Aplikacije : K-Lite Codec Pack 5.3.0 (Basic)
Ime Aplikacije : Microsoft .NET Framework 1.1 Security Update (KB953297)
Ime Aplikacije : Microsoft .NET Framework 1.1
Ime Aplikacije : Microsoft .NET Framework 3.5 SP1
Ime Aplikacije : PC Wizard 2008.1.80
Ime Aplikacije : PrimoPDF -- by Nitro PDF Software
Ime Aplikacije : RealOne Player
Ime Aplikacije : Macromedia Flash Player 8
Ime Aplikacije : SONIC HEROES
Ime Aplikacije : Spyware Doctor 6.0
Ime Aplikacije : Subtitle Workshop 2.51
Ime Aplikacije : TmNationsForever
Ime Aplikacije : TC UP
Ime Aplikacije : Tower6
Ime Aplikacije : Winamp
Ime Aplikacije : Wise Disk Cleaner 4.72
Ime Aplikacije : Wise Registry Cleaner 4 Free 4.83
Ime Aplikacije : XnView 1.96.1
Ime Aplikacije : Yahoo! Toolbar
Ime Aplikacije : Google Toolbar for Internet Explorer
Ime Aplikacije : Live! Cam Avatar v1.0
Ime Aplikacije : Google Toolbar for Internet Explorer
Ime Aplikacije : Java(TM) 6 Update 15
Ime Aplikacije : Mobile Connect
Ime Aplikacije : WIDCOMM Bluetooth Software
Ime Aplikacije : SAGEM F@st 800-840
Ime Aplikacije : Skype web features
Ime Aplikacije : Apple Software Update
Ime Aplikacije : MSXML 6 Service Pack 2 (KB973686)
Ime Aplikacije : AutoCAD 2004
Ime Aplikacije : VC80CRTRedist - 8.0.50727.4053
Ime Aplikacije : Broadcom 440x 10/100 Integrated Controller
Ime Aplikacije : Live! Cam Avatar Creator
Ime Aplikacije : Java 2 Runtime Environment, SE v1.4.2_04
Ime Aplikacije : Microsoft Visual C++ 2005 Redistributable
Ime Aplikacije : DivX Codec
Ime Aplikacije : CDBurnerXP
Ime Aplikacije : DivX Player
Ime Aplikacije : Kaspersky Internet Security 2009
Ime Aplikacije : OpenOffice.org 3.1
Ime Aplikacije : Autodesk DWF Viewer 7
Ime Aplikacije : Dell Touchpad
Ime Aplikacije : Microsoft .NET Framework 3.0 Service Pack 2
Ime Aplikacije : SigmaTel Audio
Ime Aplikacije : Google Update Helper
Ime Aplikacije : Adobe Reader 9.2
Ime Aplikacije : DivX Converter
Ime Aplikacije : DivX Web Player
Ime Aplikacije : Adobe Flash Player 9 ActiveX
Ime Aplikacije : Microsoft .NET Framework 2.0 Service Pack 2
Ime Aplikacije : HP Product Detection
Ime Aplikacije : Microsoft .NET Framework 1.1
Ime Aplikacije : Microsoft .NET Framework 3.5 SP1
Ime Aplikacije : Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595)
Ime Aplikacije : Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484)
Ime Aplikacije : Update for Microsoft .NET Framework 3.5 SP1 (KB963707)
Ime Aplikacije : Skype™ 4.1
Ime Aplikacije : Broadcom Gigabit Integrated Controller
Ime Aplikacije : Google Talk Plugin
Ime Aplikacije : Adobe Photoshop CS
Ime Aplikacije : QuickTime
Ime Aplikacije : AdvancedDefrag 3.0
Ime Aplikacije : HP Product Detection
Ime Aplikacije : Google Talk Plugin
Ime Aplikacije : WebFldrs XP
Ime Aplikacije : Skype web features
Ime Aplikacije : MSXML 6 Service Pack 2 (KB973686)
Ime Aplikacije : Microsoft .NET Framework 3.0 Service Pack 2
Ime Aplikacije : OpenOffice.org 3.1
Ime Aplikacije : Google Toolbar for Internet Explorer
Ime Aplikacije : VBA (2627.01)
Ime Aplikacije : Microsoft .NET Framework 3.5 SP1
Ime Aplikacije : Broadcom Gigabit Integrated Controller
Ime Aplikacije : Broadcom 440x 10/100 Integrated Controller
Ime Aplikacije : Adobe Flash Player 9 ActiveX
Ime Aplikacije : Kaspersky Internet Security 2009
Ime Aplikacije : Java(TM) 6 Update 13
Ime Aplikacije : Autodesk DWF Viewer 7
Ime Aplikacije : WIDCOMM Bluetooth Software
Ime Aplikacije : Adobe Reader 9.2
Ime Aplikacije : WebPAM
Ime Aplikacije : AutoCAD 2008 - English
Ime Aplikacije : AutoCAD 2004
Ime Aplikacije : Java 2 Runtime Environment, SE v1.4.2_04
Ime Aplikacije : Google Update Helper
Ime Aplikacije : VC80CRTRedist - 8.0.50727.4053
Ime Aplikacije : Skype™ 4.1
Ime Aplikacije : Microsoft Visual C++ 2005 Redistributable
Ime Aplikacije : QuickTime
Ime Aplikacije : Apple Software Update
Ime Aplikacije : Microsoft .NET Framework 2.0 Service Pack 2
Ime Aplikacije : Microsoft .NET Framework 1.1

Ako je neko voljan da pomogne?!

Skinite program HijackThis.
Kada ga preuzmete, preimenujte fajl u bilo sta, npr. “destruct0.exe”. Pokrenite ga i kliknite “Do a system scan and save a logfile”. Taj log iskopirajte ovde.

Druze, evo ga HijackThis log file:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:59:17, on 11/28/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ATI\WebPAM\jetty\extra\win32\Wrapper.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\ATI\WebPAM\_jvm\bin\java.exe
C:\WINDOWS\system32\hasplms.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
C:\Documents and Settings\Aleksandar\Desktop\POPRAVKA\popravka.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.4.4525.1752\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Aleksandar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {62BA437C-7712-48C6-9F0B-D251FA43192B} (SayaTV Control) - http://www.sayatv.com/download/SayaTV.cab
O16 - DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} (GMNRev Class) - http://h20270.www2.hp.com/edia...nstall/HPProductDetection2.cab
O16 - DPF: {76326493-E84F-4D4B-939C-1E07B50037F2} (ProxyModule Class) - https://online.bancaintesabeograd.com/RetailDLL/SGCMSCCD.DLL
O16 - DPF: {A7C346A3-B076-46B3-97F0-D00F6B479451} (FileInterface Class) - https://online.bancaintesabeograd.com/RetailDLL/FSINT.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{26A6E8A8-4CE0-4B2D-B53D-380EE125C710}: NameServer = 192.168.0.1,192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{8804E4FB-AAD8-45F3-B106-D5859A0AE4F7}: NameServer = 194.247.192.1 194.247.192.33
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI WebPAM (ATIWebPAM) - Unknown owner - C:\Program Files\ATI\WebPAM\jetty\extra\win32\Wrapper.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: C-DillaCdaC11BA - Macrovision - C:\WINDOWS\system32\drivers\CDAC11BA.EXE
O23 - Service: gupdate1ca0c33312fce84 - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: HASP License Manager (hasplms) - Aladdin Knowledge Systems Ltd. - C:\WINDOWS\system32\hasplms.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 9455 bytes

E ovako za pocetak ugasi
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\hasplms.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\Documents and Settings\Aleksandar\Desktop\POPRAVKA\popravka.exe
C:\WINDOWS\System32\alg.exe mozes i njega slobodno da ugasis taj fajl se svakom pali ali ne znam cemu sluzi.

Eto to ti je to za pocetak valjda ce i ostali doprineti malo da ti pomognu da se resis glupih stetocina u tvom kompu i slobodno pogasi one programe koji ti ne trebaju u startup sta ce ti toliko gomila samo da ti se sporije loguje i time ces smanjiti listu svakakvih gluposti pa ces lakse otkriti napasti u tvom kompu

Potpis

Ako te snadje muka pozovi hajduka
Pazi se hajduka ako ga snjadje muka

Ove procese gasim u Task Manager-u?
U folder C:\Documents and Settings\Aleksandar\Desktop\POPRAVKA sam smestio hijackthis.exe.
( file popravka.exe je u stvari hijackthis.exe ). Siguran si da to treba obrisati?

Ma nemoj da diras, sve su to legitimni procesi. U tvom logu se ne vidi prisustvo malware-a.

Pozdrav,

nista ne brisi, fajlovi su legitimni. Log je cist, nema tragova malware-a.

Tvoj problem je najverovatnije vezan za pregrevanje. Kod notebook-ova, najcesce se nakupilo prasine, i zbog toga se hladjenje znatno slabije ostvaruje. Otvori sam notebook ako si strucniji, ili odnesi u neki servis da to lepo ociste.

Pa mogo sa i da pretpostavim da je to HJT ali nema potrebe da ti on stoji u startup tebi pretpostavljam nije tesko da ga pokrenes po potrebi


Ko zna mozda si i upavu znam dosta slucajeva gde su se kompovi pregrejavali zato sto ima dosta prasine u njemu. Ja doduse sad kad mi neko kaze da mu se pregrejava komp to je medju prvim stvarima koje uradim znaci lepo uzmem usisivac i ocistim ga od prasine

Potpis

Ako te snadje muka pozovi hajduka
Pazi se hajduka ako ga snjadje muka

To nisu autorun datoteke vec aktivni procesi.

Otvarao sam laptop i nije bilo bog zna koliko prasine. To sam ocistio.
Videcu sta se desava dalje ali mislim da problem nije do prasine.
Da nije problem hardware-ski? Moze li da se utvrdi neispravnost komponeti na neki nacin?
Sistem ne prijavljuje nikakav problem ali......

Ajde da ti proverim komp sa ovim programom. Skini ga na desktop, pokreni dvoklikom i sacekaj da ti izbaci dva loga u notepadu. Okaci mi logove (upload uz poruku).

http://download.bleepingcomputer.com/sUBs/dds.scr

Moze da se utvrdi. Javi kakvo je stanje posle neke duze upotrebe pa da vidimo sta i kako dalje.

Koliko cesto radis chkdsk i defragmentaciju? Da li ti je slobodan prostor na particijama >15% ukupnog? Da li ti je bas stvarno potreban sav taj softver na racunaru?

chkdsk nisam radio skoro a defragmentaciju pre oko mesec dana. Slobodan prostor na particijama je veci od 15 %.
Sto se softwarea tice, nije mi potrebno sve to i svakako bi trebalo neke stvari deinstalirati.



Uradicu kako si rekao sutra, jer mi sada laptop nije pri ruci.

Ne znam o cemu se radi. Ovo je neki AutoCAD Script i kad ga pokrenem otvori se u notepad-u. Nema dva loga koja si pomenuo!

Nije... To je nesto nalik Hijackthis programu ( malo naprednije). Nemoj da ga otvaras sa AutoCad-om.

Ne znam zasto ti otvara preko AutoCADa treba da otvori logove u notepadu.

Ocigledno ti je .scr ekstenzija podesena da se otvara sa AutoCad-om. Osim sa bleepingcomputers, DDS mozes skinuti i sa Forospyware foruma i u tom slucaju ima .pif ekstenziju (nadam se da nemas i neki softver koji automatski otvara .pif fajlove)

Evo jos jedan link sa bin extenzijom http://download.bleepingcomputer.com/sUBs/dds.com

Evo su dva loga koja si trazio:


DDS (Ver_09-12-01.01) - NTFSx86
Run by Aleksandar at 7:44:52.78 on Wed 12/02/2009
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.894.155 [GMT 1:00]

AV: Spyware Doctor with AntiVirus *On-access scanning enabled* (Updated) {D3C23B96-C9DC-477F-8EF1-69AF17A6EFF6}
AV: Kaspersky Internet Security *On-access scanning enabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *enabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

============== Running Processes ===============

C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
C:\WINDOWS\system32\svchost -k rpcss
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe -k LocalService
C:\Program Files\ATI\WebPAM\jetty\extra\win32\Wrapper.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\drivers\CDAC11BA.EXE
C:\Program Files\ATI\WebPAM\_jvm\bin\java.exe
C:\WINDOWS\system32\hasplms.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\CDBurnerXP\NMSAccessU.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\WINDOWS\Explorer.EXE
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\alg.exe
C:\Documents and Settings\Aleksandar\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Skype\Toolbars\Shared\SkypeNames.exe
C:\Documents and Settings\Aleksandar\Desktop\dds.com
C:\WINDOWS\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.google.com/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uInternet Settings,ProxyServer = 192.168.1.101:80
uInternet Settings,ProxyOverride = <local>
uSearchAssistant = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
mSearchAssistant = hxxp://www.google.com/ie
uURLSearchHooks: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Skype add-on (mastermind): {22bf413b-c6d2-4d91-82a9-a0f997ba588c} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
BHO: IEVkbdBHO Class: {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky internet security 2009\ievkbd.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
BHO: Google Toolbar Notifier BHO: {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.4.4525.1752\swg.dll
BHO: Google Dictionary Compression sdch: {c84d72fe-e17d-4195-bb24-76c02e2e7c4e} - c:\program files\google\google toolbar\component\fastsearch_B7C5AC242193BB3E.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn\YTSingleInstance.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar_32.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File
uRun: [Google Update] "c:\documents and settings\aleksandar\local settings\application data\google\update\GoogleUpdate.exe" /c
uRun: [Skype] "c:\program files\skype\phone\Skype.exe" /nosplash /minimized
uRun: [swg] "c:\program files\google\googletoolbarnotifier\GoogleToolbarNotifier.exe"
uRun: [ctfmon.exe] c:\windows\system32\ctfmon.exe
mRun: [AVP] "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe"
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
mRun: [QuickTime Task] "c:\program files\quicktime\qttask.exe" -atboottime
mRun: [TkBellExe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\blueto~1.lnk - c:\program files\widcomm\bluetooth software\BTTray.exe
IE: Add to Banner Ad Blocker - c:\program files\kaspersky lab\kaspersky internet security 2009\ie_banner_deny.htm
IE: Send to &Bluetooth Device... - c:\program files\widcomm\bluetooth software\btsendto_ie_ctx.htm
IE: {CCA281CA-C863-46ef-9331-5C8D4460577F} - c:\program files\widcomm\bluetooth software\btsendto_ie.htm
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - {85E0B171-04FA-11D1-B7DA-00A0C90348D6} - c:\program files\kaspersky lab\kaspersky internet security 2009\SCIEPlgn.dll
IE: {5067A26B-1337-4436-8AFE-EE169C2DA79F} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
IE: {77BF5300-1474-4EC7-9980-D32B190E9B07} - {77BF5300-1474-4EC7-9980-D32B190E9B07} - c:\program files\skype\toolbars\internet explorer\SkypeIEPlugin.dll
LSP: c:\program files\common files\pc tools\lsp\PCTLsp.dll
Trusted Zone: bancaintesabeograd.com\online
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
DPF: {62BA437C-7712-48C6-9F0B-D251FA43192B} - hxxp://www.sayatv.com/download/SayaTV.cab
DPF: {73ECB3AA-4717-450C-A2AB-D00DAD9EE203} - hxxp://h20270.www2.hp.com/ediags/gmn2/install/HPProductDetection2.cab
DPF: {76326493-E84F-4D4B-939C-1E07B50037F2} - hxxps://online.bancaintesabeograd.com/RetailDLL/SGCMSCCD.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {A7C346A3-B076-46B3-97F0-D00F6B479451} - hxxps://online.bancaintesabeograd.com/RetailDLL/FSINT.dll
DPF: {CAFEEFAC-0014-0002-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/products/plugin/autodl/jinstall-142-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_15-windows-i586.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
TCP: {26A6E8A8-4CE0-4B2D-B53D-380EE125C710} = 192.168.0.1,192.168.1.1
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: AtiExtEvent - Ati2evxx.dll
Notify: klogon - c:\windows\system32\klogon.dll

============= SERVICES / DRIVERS ===============

R0 IKFileSec;File Security Driver;c:\windows\system32\drivers\ikfilesec.sys [2009-9-26 40840]
R0 kl1;Kl1;c:\windows\system32\drivers\kl1.sys [2008-7-21 121872]
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-1-29 33808]
R1 IKSysFlt;System Filter Driver;c:\windows\system32\drivers\iksysflt.sys [2009-9-26 66952]
R1 IKSysSec;System Security Driver;c:\windows\system32\drivers\iksyssec.sys [2009-9-26 81288]
R1 KLIF;Kaspersky Lab Driver;c:\windows\system32\drivers\klif.sys [2009-6-26 226832]
R1 pctfw2;pctfw2;c:\windows\system32\drivers\pctfw2.sys [2009-9-26 159880]
R1 VD_FileDisk;VD_FileDisk;c:\windows\system32\drivers\vd_filedisk.sys [2009-7-10 15872]
R2 ATIWebPAM;ATI WebPAM;c:\program files\ati\webpam\jetty\extra\win32\Wrapper.exe [2003-9-29 110592]
R2 AVP;Kaspersky Internet Security;c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe [2008-11-11 208616]
R2 hasplms;HASP License Manager;c:\windows\system32\hasplms.exe -run --> c:\windows\system32\hasplms.exe -run [?]
R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2009-9-26 356920]
R2 sdCoreService;PC Tools Security Service;c:\program files\spyware doctor\pctsSvc.exe [2009-9-26 1079176]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [2008-3-13 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2008-4-30 24592]
S2 E4LOADER;General Purpose USB Driver (e4ldr.sys);c:\windows\system32\drivers\e4ldr.sys [2009-9-23 69656]
S2 gupdate1ca0c33312fce84;gupdate1ca0c33312fce84;c:\program files\google\update\GoogleUpdate.exe [2009-7-24 133104]
S3 e4usbaw;USB ADSL2 WAN Adapter;c:\windows\system32\drivers\e4usbaw.sys [2009-9-23 104344]

=============== Created Last 30 ================

2009-11-19 08:22:23 0 d-----w- c:\program files\Radimpex
2009-11-19 08:22:23 0 d-----w- c:\docume~1\aleksa~1\applic~1\Radimpex
2009-11-19 08:20:02 0 d-----w- c:\program files\common files\Aladdin Shared
2009-11-19 08:19:59 2549248 ----a-w- c:\windows\system32\hasplms.exe
2009-11-19 08:19:24 9216 ----a-w- c:\windows\system32\akshsp50.dll
2009-11-19 08:12:22 586240 ----a-w- c:\windows\system32\drivers\hardlock.sys
2009-11-19 08:12:07 7168 ----a-w- c:\windows\system32\akscoinst.dll
2009-11-19 08:11:59 6656 ----a-w- c:\windows\system32\haspvdd.dll
2009-11-19 08:11:59 47616 ----a-w- c:\windows\system32\drivers\Haspnt.sys
2009-11-19 08:11:59 383 ----a-w- c:\windows\system32\haspdos.sys
2009-11-19 08:11:59 2577 ----a-w- c:\windows\system32\config.hsp
2009-11-19 08:11:42 3063808 ----a-w- c:\windows\system32\hinstd.dll
2009-11-19 08:11:42 24576 ----a-w- c:\windows\system32\hdduinst.exe
2009-11-19 08:11:42 164864 ----a-w- c:\windows\system32\UNWISE.EXE
2009-11-19 08:06:24 13339 ----a-w- c:\windows\system32\drivers\vusbbus.sys
2009-11-17 11:18:08 0 d-----w- C:\spoolerlogs
2009-11-17 11:17:47 0 d-----w- c:\docume~1\aleksa~1\applic~1\PrimoPDF
2009-11-17 11:16:09 176235 ----a-w- c:\windows\system32\Primomonnt.dll
2009-11-17 11:15:59 0 d-----w- c:\program files\Nitro PDF
2009-11-10 13:46:54 0 d-----w- c:\docume~1\aleksa~1\applic~1\Canneverbe_Limited
2009-11-10 13:46:51 0 d-----w- c:\docume~1\alluse~1\applic~1\Canneverbe Limited
2009-11-10 13:04:20 120056 ------w- c:\windows\system32\pxcpyi64.exe
2009-11-10 13:04:19 118520 ------w- c:\windows\system32\pxinsi64.exe
2009-11-10 13:02:55 0 d-----w- c:\program files\common files\DivX Shared
2009-11-10 13:02:52 0 d-----w- c:\program files\DivX
2009-11-10 12:41:17 0 d-----w- c:\program files\K-Lite Codec Pack
2009-11-10 12:37:29 0 d-----w- c:\program files\URUSoft
2009-11-10 11:09:17 0 d-----w- c:\program files\GRETECH

==================== Find3M ====================

2009-12-01 14:50:52 876576 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2009-12-01 14:50:52 5124 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2009-12-01 14:50:52 3985440 --sha-w- c:\windows\system32\drivers\fidbox.dat
2009-12-01 14:50:52 33264 --sha-w- c:\windows\system32\drivers\fidbox.idx
2009-10-14 14:11:34 95259 ----a-w- c:\windows\system32\drivers\klick.dat
2009-10-14 14:11:34 108059 ----a-w- c:\windows\system32\drivers\klin.dat
2009-10-08 05:10:46 4096 ----a-w- c:\windows\d3dx.dat
2009-10-07 06:30:26 57344 ----a-w- c:\windows\system32\drivers\wdreg.exe
2009-10-06 12:56:19 66952 ----a-w- c:\windows\system32\drivers\iksysflt.sys
2009-10-06 12:56:06 81288 ----a-w- c:\windows\system32\drivers\iksyssec.sys
2009-10-06 12:56:03 40840 ----a-w- c:\windows\system32\drivers\ikfilesec.sys
2009-10-06 07:12:26 12464 ----a-w- c:\windows\system32\drivers\CDAC15BA.SYS
2009-10-06 07:12:21 54784 ----a-w- c:\windows\system32\drivers\CDAC11BA.EXE
2009-09-25 16:42:38 129784 ------w- c:\windows\system32\pxafs.dll
2009-09-25 16:41:28 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-09-25 16:41:26 856064 ----a-w- c:\windows\system32\divx_xx0c.dll
2009-09-25 16:41:26 856064 ----a-w- c:\windows\system32\divx_xx07.dll
2009-09-25 16:41:26 847872 ----a-w- c:\windows\system32\divx_xx0a.dll
2009-09-25 16:41:26 843776 ----a-w- c:\windows\system32\divx_xx16.dll
2009-09-25 16:41:26 839680 ----a-w- c:\windows\system32\divx_xx11.dll
2009-09-25 16:41:26 696320 ----a-w- c:\windows\system32\DivX.dll
2009-09-25 13:50:54 724992 ----a-w- c:\windows\iun6002.exe
2009-09-12 06:41:16 4721 ----a-w- c:\program files\log.txt
2009-09-12 06:40:36 0 ----a-w- c:\program files\ArchiCAD.exe
2009-09-11 14:33:52 133632 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 20:45:26 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-07-25 05:18:54 722 ----a-w- c:\program files\INSTALL.LOG
2008-12-18 13:10:50 26214027 ----a-w- c:\program files\Tower 6.pdf
2009-06-26 11:20:38 80 --sh--r- c:\windows\CT4CET.bin

============= FINISH: 7:45:43.46 ===============