Dva problema, explorer.exe

E ovako, procitala sam sve postove na temu explorer.exe, ali mi nisu pomogli.

Problem br.1 : Kada upalim komp, u poslednje vreme ponekad nece da startuje programe vec stoje ikonice (kao selektovane) i nista se ne desava,zablokira. Odem ctrl+alt+delete da ga restartujem, a on prikaze End now za explorer.exe ... To se desava svaki drugi treci put tokom paljenja.

Problem br.2 : Kada otvorim folder sa filmom koji sam skinula sa torrenta, prikaze mi 'Error..Send..Don't send' ..i kad kliknem don't send sve se skloni sa ekrana ostane samo wallpaper i onda se vrate ikonice itd. To se desava sa nekim filmovima, a sa nekima ne. Takodje mi se od skoro pojavljuje u tim istim filmovima i error tipa : explorer.exe - Aplication Error (The instruction at...referenced memory at... . The memory could not be read. Click OK to terminate preogram.
Znaci to se pojavljuje ili kad otvorim folder gde je film, ili kad obelezim taj fajl.

Da li iko ima ideju..? Antivirus imam, CCleaner, Combofix sam aktivirala.. Nistaaaa.

?

koji Anti Virus imas?
combo fix obrisi ovako:
CF nije za igranje
Sturt/Run
kucaj
Combofix /u
i klikni OK

----------------

ajmo sad na problem...
ajde probaj da downloadujes i pokrenes SmitFraudFix
http://siri.urz.free.fr/Fix/SmitfraudFix.exe

SmitFraudFix uputstvo:
http://www.2-viruses.com/smitfraudfix-tutorial.html

takodje ces da update ujes i skeniras i sa ovim programom
MalwareButes AM
iz safe moda
http://www.besttechie.net/tools/mbam-setup.exe


skini i ovaj za svaki slucaj,updateuj i skeniraj
Spybot
http://www.safer-networking.org/en/mirrors/index.html

kad sve to odradis

Skini HiJackThis program sa sledeceg linka:
http://www.majorgeeks.com/download5554.html
Stavi ga u zaseban folder na Desktop
Promeni naziv foldera i programa (opcija Rename) u Systav.exe

* Pokreni HijackThis
* Izaberi opciju "Do a system scan and save the logfile"
* Na kreju skeniranja program ce izbaciti tekstualni log.
* taj log kopiraj ovde ( opcije copy / paste)
* kao i logfile koji je napravio Malwarebutes
srecno

---

Imam ESET Nod32 Antivirus;
Izbrisala sam ComboFix..
SmitFraudFix, MalwareButes, Spybot sam instalirala i uradila sve po uputstvu..



Evo dva loga..:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:40:26, on 15.10.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\program files\microangelo\muamgr.exe
C:\Program Files\Conexant\Adsl\dslstat.exe
C:\Program Files\Conexant\Adsl\dslagent.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\Google\Gmail Notifier\gnotify.exe
C:\WINDOWS\anvshell.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [MOD] c:\program files\microangelo\muamgr.exe
O4 - HKLM\..\Run: [DSLSTATEXE] C:\Program Files\Conexant\Adsl\dslstat.exe icon
O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\Conexant\Adsl\dslagent.exe
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [{0228e555-4f9c-4e35-a3ec-b109a192b4c2}] C:\Program Files\Google\Gmail Notifier\gnotify.exe
O4 - HKLM\..\Run: [anvshell] anvshell.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SpybotSD TeaTimer] C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_06\bin\ssv.dll
O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {BDBDE413-7B1C-4C68-A8FF-C5B2B4090876} (F-Secure Online Scanner 3.3) - http://support.f-secure.com/ols/fscax.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - http://messenger.zone.msn.com/...ngerStatsPAClient.cab56907.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{DD348133-3593-417D-BF52-18281A451F9E}: NameServer = 77.105.0.19 77.105.0.18
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe (file missing)
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: ASUS Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 4773 bytes







Malwarebytes' Anti-Malware 1.28
Database version: 1274
Windows 5.1.2600 Service Pack 2

15.10.2008 22:32:33
mbam-log-2008-10-15 (22-32-33).txt

Scan type: Quick Scan
Objects scanned: 43164
Time elapsed: 3 minute(s), 34 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 3
Files Infected: 2

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\ErrorKiller (Rogue.ErrorKiller) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
C:\Documents and Settings\Katarina\Application Data\ErrorKiller (Rogue.ErrorKiller) -> Quarantined and deleted successfully.
C:\Documents and Settings\Katarina\Application Data\ErrorKiller\Log (Rogue.ErrorKiller) -> Quarantined and deleted successfully.
C:\Documents and Settings\Katarina\Application Data\ErrorKiller\Registry Backups (Rogue.ErrorKiller) -> Quarantined and deleted successfully.

Files Infected:
C:\Documents and Settings\Katarina\Application Data\ErrorKiller\Log\2008 Jul 05 - 02_20_57 AM_031.log (Rogue.ErrorKiller) -> Quarantined and deleted successfully.
C:\Documents and Settings\Katarina\Application Data\ErrorKiller\Registry Backups\2008-07-05_02-22-31.reg (Rogue.ErrorKiller) -> Quarantined and deleted successfully.

pozz kristina
svaka cast..znaci MalwareButes AM je odradio citav posao
bila si zarazena sa ovim "parazitom"
http://www.pcthreat.com/parasitebyid-6743en.html
rogue program
Malware Butes sve sto je nasao uklonio je

HijackThis log je cist

kako ti sad radi kompjuter? jel i dalje imas problema?

---

Katarina ;)

Za sada je sve u redu, ja se javljam ako opet bude problema..:) Znaci taj parazit ima veze sa explorer.exe...?

Tebi hvala puno!!!

I jos jedno pitanjce..sta sad da radim sa ovim silnim programima..da izbrisem neki il...? :)

Pogledaj teme po forumu u vezi antivirusa. Izaberi neki drugi, taj NOD nije više što je bio, ako je krekovan. Avast ili Avira, besplatne verzije.

katarina..izvini...mislio sam na jednu kristinu pa sam se izlajao
sorry
to je rogue program..ukratko...instalira se bez tvog znanja u komp,bravi nered po kompu i nudi ti
raznorazne programe (da ih kupis) koji naravno samo jos vise prave nered po tvom kompu..najednostavnije receno

SmitFraudFix ti vise netreba,njega obrisi

MalwareButes i Spybot ako ti nesmetaju,ostavi ih,jer ti nezauzimaju resurse..tj. nece ti kociti komp
ali ako bas hoces,obrisi ih mada ja ih nebi dirao,jer kad god budes imala nekih problema sa virusima,
samo odradis update i skeniras s njima sistem
pogotovo jer taj nod32 i nije bas neki AV

toliko...
puno pozdrava i tebi
pozz

---

E vise ne znam sta da koristim, svaki av pronadje nesto trece bla bla, a ovaj mi najmanje usporava komp, i nije los..






Magna86 hvala ti puno,nadam se da vise necu imati problema :)
Pozdrav! :)

Teško ti je da pročitaš šta ljudi pišu o NOD-u.

Vrlo dobro znam sta pisu o kom virusu, i uopste nisam neznalica po pitanju toga. Ono sto mi ostali av-i nisu nasli, nasao mi je ESET Nod32.. A instalirala sam ih bar 4. Tako da..svako ima svoje misljenje i svako razlicitu glavu.