Imam av avira i ona mi detektuje TR/Vundo.Gen [trojan],ali ne moze da ga obrise.File koji je zarazen je C:\WINDOWS\system32\tuvUNefg.dll.Jel zna neko mozda kako da ga obrisem,a da ne zeznem nesto oko sistema?hvala unapred.
Problem sa trojancem,potrebna pomoc
Zaključano
Zakačeno
Ovim programom http://download.cnet.com/Malwa...572&subj=dl&tag=button
ajde sad cu da probam pa javljam
skenirao sam ne znam da li smem da brisem ovo,evo log file
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Database version: 3958
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180
5.4.2010 23:18:17
mbam-log-2010-04-05 (23-18-17).txt
Scan type: Quick scan
Objects scanned: 100456
Time elapsed: 6 minute(s), 16 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 4
Registry Values Infected: 2
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
C:\WINDOWS\system32\tuvUNefg.dll (Trojan.Vundo.H) -> No action taken.
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bc728c13-5691-4529-a1c2-e662a9ad1c87} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tuvunefg (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{bc728c13-5691-4529-a1c2-e662a9ad1c87} (Trojan.Vundo.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{bc728c13-5691-4529-a1c2-e662a9ad1c87} (Trojan.Vundo) -> No action taken.
Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{bc728c13-5691-4529-a1c2-e662a9ad1c87} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> No action taken.
Registry Data Items Infected:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Folders Infected:
(No malicious items detected)
Files Infected:
C:\WINDOWS\system32\tuvUNefg.dll (Trojan.Vundo.H) -> No action taken.
C:\RECYCLER\S-1-5-21-6058878391-1499080094-228400857-5370\nissan.exe.vir (Worm.Autorun.B) -> No action taken.
C:\WINDOWS\system32\iiffddbb.dll (Trojan.Vundo.H) -> No action taken.
Malwarebytes' Anti-Malware 1.45
www.malwarebytes.org
Database version: 3958
Windows 5.1.2600 Service Pack 2
Internet Explorer 6.0.2900.2180
5.4.2010 23:18:17
mbam-log-2010-04-05 (23-18-17).txt
Scan type: Quick scan
Objects scanned: 100456
Time elapsed: 6 minute(s), 16 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 4
Registry Values Infected: 2
Registry Data Items Infected: 2
Folders Infected: 0
Files Infected: 3
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
C:\WINDOWS\system32\tuvUNefg.dll (Trojan.Vundo.H) -> No action taken.
Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bc728c13-5691-4529-a1c2-e662a9ad1c87} (Trojan.Vundo.H) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\tuvunefg (Trojan.Vundo.H) -> No action taken.
HKEY_CLASSES_ROOT\CLSID\{bc728c13-5691-4529-a1c2-e662a9ad1c87} (Trojan.Vundo.H) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{bc728c13-5691-4529-a1c2-e662a9ad1c87} (Trojan.Vundo) -> No action taken.
Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks\{bc728c13-5691-4529-a1c2-e662a9ad1c87} (Trojan.Vundo) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\taskman (Trojan.Agent) -> No action taken.
Registry Data Items Infected:
HKEY_CLASSES_ROOT\regfile\shell\open\command\(default) (Broken.OpenCommand) -> Bad: ("regedit.exe" "%1") Good: (regedit.exe "%1") -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
Folders Infected:
(No malicious items detected)
Files Infected:
C:\WINDOWS\system32\tuvUNefg.dll (Trojan.Vundo.H) -> No action taken.
C:\RECYCLER\S-1-5-21-6058878391-1499080094-228400857-5370\nissan.exe.vir (Worm.Autorun.B) -> No action taken.
C:\WINDOWS\system32\iiffddbb.dll (Trojan.Vundo.H) -> No action taken.
ako neko zna neka kaze stvarno ne znam sta smem da brisem a sta ne...
Sve što ti je Malwarebytes' Antimalware pronašao briši slobodno!
Ništa od gore prikazanih naziva ne pripada sistemu.
Bilo bi mudro da prethodno isključiš System Restore, očistiš kantu za đubre (imaš čak i tamo neku gamad!), očistiš sve temp foldere i browser cache, pa tek onda skeniraj kompletan sistem sa Malwarebytes i slobodno ga pusti da briše i popravlja sve što ti predloži.
Za čišćenje svog đubreta iz sistema preporučujem DiskMAX
Ništa od gore prikazanih naziva ne pripada sistemu.
Bilo bi mudro da prethodno isključiš System Restore, očistiš kantu za đubre (imaš čak i tamo neku gamad!), očistiš sve temp foldere i browser cache, pa tek onda skeniraj kompletan sistem sa Malwarebytes i slobodno ga pusti da briše i popravlja sve što ti predloži.
Za čišćenje svog đubreta iz sistema preporučujem DiskMAX
Potpis
"Take Five" is the famous jazz piece written by Paul Desmond and performed by The Dave Brubeck Quartet. It is famous for its distinctive saxophone line and use of the unusual quintuple (5/4) time, from which its name is derived.
Take Five (1966)
Take Five by Al Jarreau 1976
Take Five (1966)
Take Five by Al Jarreau 1976
izmenjeno 1 put, poslednji put kristi1 06.04.2010. u 12:45
Izmene poruke
- kristi106.04.2010. u 12:45zapis iz teksta poruke
Ovo si sa flseke navuko, ako je imas formatiraj je, ili ti je neki drugar zaprzio corbu.
Moj savet ti je da prekontrolises sve sa Dr.Web CureIt-om...uradi Complete scan,nista te ne kosta... :)))
Potpis
A wolf is weaker than a lion and a tiger, but doesn't play in the circus.
Sredi te inficirane fajlove sa mbytes, slobodno.
_________________________________________________________________
_________________________________________________________________
Potpis
Ivan Djordjevic
Hvala ljudi uspeo sam,Malwarebytes je obrisao sve Avira vise nista ne detektuje,a sa DiskMax-om sam ocistio sve....