Navigacija
Lista poslednjih: 16, 32, 64, 128 poruka.

USB autroun problem

[es] :: Zaštita :: USB autroun problem

[ Pregleda: 2843 | Odgovora: 3 ] > FB > Twit

Postavi temu Odgovori

Autor

Pretraga teme: Traži
Markiranje Štampanje RSS

crni013
Mladen Sesa
Vrsac

Član broj: 24525
Poruke: 3
91.150.127.*



Profil

icon USB autroun problem08.05.2008. u 11:07 - pre 194 meseci
Naime imam porblem sa usb flash drive - om. Svaki put kada ga bodem na bilo ciji pc, ne dozvoljava mi da ga otvorim default putem opcije open, vec samo desnim klikom misa i opcijom explore. Kada zelim opciju open daje mi poruku:
U zaglavlju RUNDLL
Error loading ./desktop.dll
The specifed module could not be found

Svaki put kada ubacim potpuno prazan usb vidim sledece fajlove.
Ova dva se vide:
Autorun - ikonica kao folder u visti
system - system file

Ove 3 se vide kad ukljucim da se vide sakriveni fajlovi:
thumb.dd - DD file
desktop.dll - 5.0.385.0 Java Virtual Machine
autorun - Setup Information

Ne znam da li je problem na mom pc ili vucem taj autorun shit na usb. Posto sam se vec ovde informisao i video da i drugi imaju slicne probleme, pokusao sam da ih resim savetima koje sam vec video ali i dalje nista. Evo odmah kacim i HijackThis log fajl, pa Vas molim da mi kazete sta da radim.




Logfile of Trend Micro HijackThis v2.0.0 (BETA)
Scan saved at 14:24:23, on 5.5.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\vdriver.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
I:\new for autorun virus\HijackThis\HiJackThis_v2.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Yamaha DS-XG Driver] C:\WINDOWS\system32\vdriver.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Yamaha DS-XG Driver] C:\WINDOWS\system32\vdriver.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 1694 bytes



tartupList report, 5.5.2008, 14:24:51
StartupList version: 1.52.2
Started from : I:\new for autorun virus\HijackThis\HiJackThis_v2.EXE
Detected: Windows XP SP2 (WinNT 5.01.2600)
Detected: Internet Explorer v6.00 SP2 (6.00.2900.2180)
* Using default options
==================================================

Running processes:

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\WINDOWS\system32\vdriver.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Microsoft Office\OFFICE11\WINWORD.EXE
I:\new for autorun virus\HijackThis\HiJackThis_v2.exe

--------------------------------------------------

Checking Windows NT UserInit:

[HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon]
UserInit = C:\WINDOWS\system32\userinit.exe,

--------------------------------------------------

Autorun entries from Registry:
HKLM\Software\Microsoft\Windows\CurrentVersion\Run

NvCplDaemon = RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
NvMediaCenter = RunDLL32.exe NvMCTray.dll,NvTaskbarInit
Yamaha DS-XG Driver = C:\WINDOWS\system32\vdriver.exe

--------------------------------------------------

Autorun entries from Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run

ctfmon.exe = C:\WINDOWS\system32\ctfmon.exe
Yamaha DS-XG Driver = C:\WINDOWS\system32\vdriver.exe

--------------------------------------------------

Shell & screensaver key from C:\WINDOWS\SYSTEM.INI:

Shell=*INI section not found*
SCRNSAVE.EXE=*INI section not found*
drivers=*INI section not found*

Shell & screensaver key from Registry:

Shell=Explorer.exe
SCRNSAVE.EXE=*Registry value not found*
drivers=*Registry value not found*

Policies Shell key:

HKCU\..\Policies: Shell=*Registry value not found*
HKLM\..\Policies: Shell=*Registry value not found*

--------------------------------------------------


Enumerating Task Scheduler jobs:

1-Click Maintenance.job

--------------------------------------------------

Enumerating Winsock LSP files:

NameSpace #2: C:\WINDOWS\system32\wshbth.dll
gravedigger
 
Odgovor na temu

RobertNestaMarley
Beograd

Član broj: 56051
Poruke: 100
*.adsl-a-1.sezampro.yu.



Profil

icon Re: USB autroun problem08.05.2008. u 13:03 - pre 194 meseci
Da li si pokusao da formatiras flesku? Open > My Computer > Desni klik (na usb)... > format... Eventualno stavis Volume Label... I klik Start?

[Ovu poruku je menjao RobertNestaMarley dana 08.05.2008. u 14:17 GMT+1]
Jah Live!
 
Odgovor na temu

pl4stik
Senior .NET programmer/Consultant
oDesk
NI na nebu NI na zemlji

Član broj: 173596
Poruke: 715
82.117.195.*

Sajt: xx-auth.com.azhar.arvixe...


+31 Profil

icon Re: USB autroun problem08.05.2008. u 13:19 - pre 194 meseci
Vuces to sa flasha, formatiranje resava stvar jedino ako ti je komp cist sto kod tebe nije slucaj (posle hormatiranja i dalje imash fajlove na flash-u) i neces moci to da resis bez AV sigurno. Virusi koji to rade su Rays i AdobeR (koje ja znam), a ima ih josh...

AdobeR je kod tebe mislim aj napisi dal sam u pravu
To sto nekoliko miliona ljudi tvrdi da nisi u pravu ne znaci da stvarno nisi - Frank Zappa

https://youtu.be/DLe358DPGXU
 
Odgovor na temu

crni013
Mladen Sesa
Vrsac

Član broj: 24525
Poruke: 3
91.150.127.*



Profil

icon Re: USB autroun problem11.05.2008. u 20:13 - pre 194 meseci
Pokusao sam sa raznim AV programima, poslednji koji sam instalirao je NOD 32, i on mi je pronasao 2 trojanca, i sad mi USB flash radi ok, bar na mom pc. Videcu jos par dana kada ga ubodem jos na par mesta, pa sam mozda i uspeo da resim problem. Javicu...

gravedigger
 
Odgovor na temu

[es] :: Zaštita :: USB autroun problem

[ Pregleda: 2843 | Odgovora: 3 ] > FB > Twit

Postavi temu Odgovori

Navigacija
Lista poslednjih: 16, 32, 64, 128 poruka.