Izgubljena linija menija Windows Explorera

Imam Windows XP Professional. Nestala mi linija menija Windows Explorera, znaci nemam File, Edit, View i ostalo. Kada kliknem desnim klikom na mesto linije menija, nista se ne desava. Skenirala sam u safe mode, probala sam sa F11, nije mi se pojavio toolbar kao ni sa opcijom Alt-V. U IE imam menu bar kao i u Outlook Expressu. Bila sam na raznim forumima ali nigde nisam nasla odgovor kojim bih resila ovaj problem. Da li neko zna da resi moj problem?
Unapred hvala :)

_{[Ovu poruku je menjao Ivana88 dana 27.10.2008. u 20:03 GMT+1]}

Pogledaj ovde, mozda pomogne:
Windows Explorer - missing FILE menu

---

Nazalost nista mi nije pomogao sajt zar je moguce da niko ne zna da mi pomogne?

Jesi li probala ući u Registry i pretražiti sve ključeve NoFileMenu. Ima ih nekoliko.
Pogledaj njihove vrijednosti. Trebali bi biti 0 ( nula ).
Probaj, ali prethodno izvrši Backup cijelog Registry-ja

BTW: vidi http://www.google.hr/search?hl...e+pretra%C5%BEivanje&meta=

Probala sa Start>Run>regedit, da ne pisem redom pa sve do \Policies\Explorer i tamo uopste nemam kljuc "NoFileMenu". Imam "NoDrives", "NoDriveTypeAutoRun",NoLowDiskSpaceChecks" i "NoStartBanner" nista dalje. Ne znam sta dalje da radim?

Ivana88 skini ovaj program http://www.download.com/Trend-...This/3000-8022_4-10227353.html
Smesti ga na desktop u neki folder, i promeni mu ime u ivana.exe
pokreni ga i klikni na prvi tab odozgo, kad ti izbaci log, iskopiraj log i postavi ovde na forum
Moguce da imas neki virus pa da proverimo,

Uradi ovo što je @kristi1 rekao a uz to probaj u path stazi [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] kreirati DWORD ključ sa NoFileMenu i postavi value na 0.

Prvo sam skinula program po savetu Kristi1, skenirala, zatim sam na stazi [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] kreirala sam DWORD ključ sa NoFileMenu i postavila value na 0. Da li ovako treba da pise 0X00000000 (0)? Da li sam nesto pogresila, posto se nista nije promenilo i dalje imam isti problem. Sacuvala sam izbaceni log posle skeniranja ali posto se bas ne razumem u forume ne znam kako ste mislili da ga ovde postavim? Da li jednostavno copy/paste ili? Jako je dugacko, da li smem ovde kopirati dugacke tekstove?
Hvala na odgovorima Kristi1 i Ivek33

Pa da, samo copy/paste, Edit-select all Edit - copy i paste na forum.

Evo kopirano:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 20:29:39, on 29.10.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16640)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\Program Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Spyware Terminator\sp_rsser.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\System32\UAService7.exe
C:\Program Files\Logitech\iTouch\iTouch.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Eset\nod32kui.exe
C:\WINDOWS\System32\LVCOMSX.EXE
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Clock Tray Skins\ClockTraySkins.exe
C:\Program Files\Logitech\Desktop Messenger\8876480\Program\BackWeb-8876480.exe
C:\Documents and Settings\Iboja\Local Settings\Application

Data\Google\Update\GoogleUpdate.exe
C:\Program Files\MSI\BToes Bluetooth Software\BTTray.exe
C:\Program Files\HDD Thermometer\HDD Thermometer.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Downloads\flashget.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =

http://google.icq.com/search/search_frame.php
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://home.sbb.rs/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =

http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr7/*http://www.yahoo.com/ext/search/

search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr7/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = InfoSky
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride =

localhost
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} -

C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} -

C:\Program Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -

C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Flashget Catch Url Class - {2F364306-AA45-47B5-9F9D-39A8B94E7EF7} -

C:\Downloads\jccatch.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program

Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} -

C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: TGTSoft Explorer Toolbar Changer -

{C333CF63-767F-4831-94AC-E683D962C63C} - C:\Program

Files\TGTSoft\StyleXP\TGT_BHO.dll
O2 - BHO: NTIECatcher Class - {C56CB6B0-0D96-11D6-8C65-B2868B609932} - C:\Program

Files\Xi\NetTransport 2\NTIEHelper.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} -

C:\Downloads\getflash.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program

Files\Yahoo!\Companion\Installs\cpn4\yt.dll
O3 - Toolbar: FlashGet - {E0E899AB-F487-11D5-8D29-0050BA6940E3} -

C:\Downloads\fgiebar.dll
O4 - HKLM\..\Run: [zBrowser Launcher] C:\Program Files\Logitech\iTouch\iTouch.exe
O4 - HKLM\..\Run: [iTunesHelper] C:\Program Files\iTunes\iTunesHelper.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Outpost Firewall] C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe

/waitservice
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\System32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Program Files\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe

bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE

C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program

Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [SkinClock] C:\Program Files\Clock Tray Skins\ClockTraySkins.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop

Messenger\8876480\Program\BackWeb-8876480.exe
O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Iboja\Local

Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User

'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User

'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User

'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User

'Default user')
O4 - Startup: HDD Thermometer.lnk = C:\Program Files\HDD Thermometer\HDD

Thermometer.exe
O4 - Global Startup: BTTray.lnk = C:\Program Files\MSI\BToes Bluetooth

Software\BTTray.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box -

C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: &Preuzmi sa FlashGet-om - C:\Downloads\jc_link.htm
O8 - Extra context menu item: &Preuzmi sve sa FlashGet-om - C:\Downloads\jc_all.htm
O8 - Extra context menu item: &Yahoo! Search - file:///C:\Program

Files\Yahoo!\Common/ycsrch.htm
O8 - Extra context menu item: Download all by Net Transport - C:\Program

Files\Xi\NetTransport 2\NTAddList.html
O8 - Extra context menu item: Download by Net Transport - C:\Program

Files\Xi\NetTransport 2\NTAddLink.html
O8 - Extra context menu item: E&xport to Microsoft Excel -

res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\MSI\BToes Bluetooth

Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: Yahoo! &Dictionary - file:///C:\Program

Files\Yahoo!\Common/ycdict.htm
O8 - Extra context menu item: Yahoo! &Maps - file:///C:\Program

Files\Yahoo!\Common/ycmap.htm
O8 - Extra context menu item: Yahoo! &SMS - file:///C:\Program

Files\Yahoo!\Common/ycsms.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program

Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console -

{08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} -

C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} -

C:\PROGRA~1\ICQ\ICQ.exe
O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} -

C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} -

C:\WINDOWS\System32\shdocvw.dll
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} -

C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F}

- C:\Program Files\MSI\BToes Bluetooth Software\btsendto_ie.htm
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -

C:\DOWNLO~1\flashget.exe
O9 - Extra 'Tools' menuitem: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} -

C:\DOWNLO~1\flashget.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} -

C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -

{e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network

Diagnostic\xpnetdiag.exe
O9 - Extra button: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} - C:\Program

Files\ICQ6\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ6 - {E59EB121-F339-4851-A3BA-FE49C35617C2} -

C:\Program Files\ICQ6\ICQ.exe
O9 - Extra button: Quick Login www.yu-mp3.com -

{ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Funnsystems

YuMp3Com-User-Authorization\YuMp3ComLogin.exe
O9 - Extra 'Tools' menuitem: &Quick Login www.yu-mp3.com -

{ECC5777A-6E88-BFCE-13CE-81F134789E7B} - C:\Program Files\Funnsystems

YuMp3Com-User-Authorization\YuMp3ComLogin.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program

Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -

{FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} - C:\Program

Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)
O9 - Extra 'Tools' menuitem: Show Trashcan - {072F3B8A-2DA2-40e2-B841-88899F240200} -

C:\Program Files\Agnitum\Outpost Firewall\TRASH.EXE (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) -

http://www.kaspersky.com/kos/e...default/kavwebscan_unicode.cab
O16 - DPF: {1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} -

http://ak.imgfarm.com/images/n...-2/FunBuddyIconsFWBInitialSetu

p1.0.0.8-2.cab
O16 - DPF: {53B8B406-42E4-4DD3-96E7-9DEC8CEB3DD8} -

http://xtraz.icq.com/xtraz/activex/ICQVideoControl.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center

Base Module) -

http://cdn.scan.onecare.live.c...nload/scanner/wlscbase4009.cab
O16 - DPF: {62789780-B744-11D0-986B-00609731A21D} (Autodesk MapGuide ActiveX

Control) - http://ns.zig.nsinfo.co.yu/ActiveX/mgaxctrl.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

http://update.microsoft.com/wi...en/x86/client/wuweb_site.cab?1

192637942656
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) -

http://security.symantec.com/s...edContent/common/bin/cabsa.cab
O16 - DPF: {67A5F8DC-1A4B-4D66-9F24-A704AD929EEE} (System Requirements Lab) -

http://www.systemrequirementslab.com/sysreqlab2.cab
O16 - DPF: {6BEA1C48-1850-486C-8F58-C7354BA3165E} -

http://updates.lifescapeinc.com/installers/pinstall/pinstall.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -

http://www.update.microsoft.co...trols/en/x86/client/muweb_site.

cab?1213380384140
O16 - DPF: {70BA88C8-DAE8-4CE9-92BB-979C4A75F53B} -

http://launch.gamespyarcade.com/software/launch/alaunch.cab
O16 - DPF: {8714912E-380D-11D5-B8AA-00D0B78F3D48} -

http://chat.yahoo.com/cab/yuplapp.cab
O16 - DPF: {8FA9D107-547B-4DBC-9D88-FABD891EDB0A} -

http://playroom.icq.com/odyssey_web11.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF}

(MsnMessengerSetupDownloadControl Class) -

http://messenger.msn.com/download/MsnMessengerSetupDownloader.cab
O16 - DPF: {BAC01377-73DD-4796-854D-2A8997E3D68A} -

http://us.dl1.yimg.com/downloa...lls/ydropper/ydropper1_4us.cab
O16 - DPF: {D48E57A5-9AC9-11D5-A2F5-00105A1F6B57} -

http://www.cig.canon-europe.com/zb/AXCIG.ocx
O16 - DPF: {F00F4763-7355-4725-82F7-0DA94A256D46} (IncrediMail) -

http://www5.incredimail.com/co.../setup/downloader/imloader.cab
O16 - DPF: {FF0F0003-0051-153A-A3C9-08002B25E0CD} -

http://uk.global-acces.com/7adpower/nonadult.exe
O18 - Protocol: bw+0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw+0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw-0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw-0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw00 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw00s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw10 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw10s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw20 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw20s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw30 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw30s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw40 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw40s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw50 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw50s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw60 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw60s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw70 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw70s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw80 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw80s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw90 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bw90s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwa0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwa0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwb0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwb0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwc0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwc0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwd0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwd0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwe0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwe0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwf0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwf0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - (no file)
O18 - Protocol: bwg0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwg0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwh0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwh0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwi0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwi0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwj0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwj0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwk0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwk0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwl0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwl0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwm0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwm0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwn0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwn0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwo0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwo0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwp0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwp0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwq0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwq0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwr0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwr0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bws0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bws0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwt0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwt0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwu0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwu0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwv0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwv0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bww0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bww0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwx0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwx0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwy0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwy0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwz0 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: bwz0s - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: offline-8876480 - {3EA0F6AF-BF9C-49A5-B536-0CD7D5E7EE5C} - (no file)
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -

C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: wbsys.dll,
O23 - Service: Autodesk Licensing Service - Unknown owner - C:\Program Files\Common

Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation - C:\Program

Files\MSI\BToes Bluetooth Software\bin\btwdins.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program

Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation -

C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NetCom3 Service (Netcom3) - Unknown owner - C:\Program Files\Netcom3

Cleaner\PSCMonitor.exe (file missing)
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program

Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation -

C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Outpost Firewall Service (OutpostFirewall) - Agnitum -

C:\PROGRA~1\Agnitum\OUTPOS~1\outpost.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common

Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Spyware Terminator Clam Service (sp_clamsrv) - Crawler.com - C:\Program

Files\WinClamAVShield\sp_clamsrv.exe
O23 - Service: Spyware Terminator Realtime Shield Service (sp_rssrv) - Crawler.com -

C:\Program Files\Spyware Terminator\sp_rsser.exe
O23 - Service: StyleXPService - Unknown owner - C:\Program

Files\TGTSoft\StyleXP\StyleXPService.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common

Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: SecuROM User Access Service (V7) (UserAccess7) - Unknown owner -

C:\WINDOWS\System32\UAService7.exe

--
End of file - 19962 bytes

Ok Ivana, vrlo je moguce da imas neki napad od spolja, prvo sto ces da uradis je da obrises sve sto se nalazi u Hosts fajlu,
Otvori notepad pa idi na File/ open i prati ovu liniju C\Windows\System32\drivers\etc\hosts (ako ne vidis hosts stavi dole na all file) klikni na hosts i open Obrisi sve sto se nalazi tu, sve
Onda deinstaliraj Javu i skini malwarebytes sa ovog linka http://www.malwarebytes.org/mbam.php i skeniraj sa njim, prati uputstvo i obrisi sve sto nadje, ako trazi restart restartuj.
Posle toga postavi Nov HJT log, jer jos nismo zavrsili posao, pozdrav

edit:
Sad moram na spavanje, pogledacu log sutra ako ga u medjuvremenu ostavis, ima jos dosta posla ovde
Molim moderatore da prebace ovu temu u zastitu.

_{[Ovu poruku je menjao kristi1 dana 29.10.2008. u 23:54 GMT+1]}

@Ivana88
Da ne ulazim dublje u savjete ja nemam što dodati ovome što je @kristi1 napisao, uradi kako kaže, jer postoji vjerojatno neki zloćudan program koji ti je uklonio tekstualni menu.

Mogu ti samo prikazati što ja imam u mom Reg-u.
U svakoj ovoj Path stazi imam NoFileMenu sa value 0

My Computer\HKEY_CURRENT_USER\Software\MIcrosoft\Windows NT\CurrentVersion\Program Manager\Restrictions
My Computer\HKEY_USERS\.DEFAULT\Software\MIcrosoft\Windows NT\CurrentVersion\Program Manager\Restrictions
My Computer\HKEY_USERS\S-1-5-18\Software\MIcrosoft\Windows NT\CurrentVersion\Program Manager\Restrictions
My Computer\HKEY_USERS\S-1-5-19\Software\MIcrosoft\Windows NT\CurrentVersion\Program Manager\Restrictions
My Computer\HKEY_USERS\S-1-5-20\Software\MIcrosoft\Windows NT\CurrentVersion\Program Manager\Restrictions
My Computer\HKEY_USERS\S-1-5-21\Software\MIcrosoft\Windows NT\CurrentVersion\Program Manager\Restrictions

Što se tiče kreiranje REG_DWORD to si dobro odradila ( vidi attach )
pozdrav

Kristi1,
sada sam na teskim mukama, moram odmah priznati da se ja ne razumem toliko u sve ono sto ovde procitam. Bilo bi mi zao da odustanem od svega, ali sada mi postaje sve teze i nisu mi jasne neke stvari. Otvorila sam notepad i pratila liniju koja mi je napisana ali nisam smela da obrisem sve u Hosts fajlu (posto ne znam sta znaci host fajl). Zanima me ako sve obrisem u Host fajlu i deinstaliram Javu da li ce mi komp normalno raditi, jer mi je to jako vazno. Ja sam skinula malwarebytes i instalirala i tu sam stala. Napisano mi je da posle svega kada odradim postavim novi HJT log. Da li to znaci da ponovo skeniram sa HijackThis-om i ponovo sve nalepim kao prosli put?
Izvinjavam se na stotinu pitanja ali sada mozes videti koliko se ja ne razumem u te stvari. Ako predstavljam problem zbog mog "neznanja" ja cu se povuci i odustati od svega.
Sto se tice sto mi je Ivek33 napisao, ja sam pregledala sve Path staze kako mi je napisano i kod mene svugne stoji kao i kod tebe Ivek33, NoFileMenu sa value 0.
U svakom slucaju hvala vam na svim savetima :)
Cekam odgovore da bih odlucila da li cu da nastavim ili odustanem.

@Ivana88
Probaj ući u Start => Run => upiši gpedit.msc
Pronađi path stazu Local Computer Policy\User Configuration\Administrative Templates\Windows Components\Windows Explorer
Potom klikni dvoklik na desnom dijelu prozora na Remove File Menu from Windows Explorer Probaj Enabled ili Disabled ( obe opcije ) pa vidi hoće li biti OK. Po defaultu bi trebalo biti Not Configured.
vidi sliku u attachu

Ivek33,
probala sam i odradila sve kako si mi napisao, prvo sam isla na enabled, i nista se nije promenilo kao ni sa disabled. Na kraju sam vratila kako je i bilo Not Configured. Znaci sve je ostalo isto :(

@Ivana88, ja nemam više ideja, pogledaj ovaj link ( dva zadnja posta ) možda ti pomogne
http://groups.google.com/group...thread/thread/0edab3d571ea6368

Moracu ovako da ti objasnim sa slikama. U host fjlu imas dve maliciozne linije
O1 - Hosts: 66.98.148.65 auto.search.msn.com
O1 - Hosts: 66.98.148.65 auto.search.msn.es
koje moras da obrises, tvoj hosts fajl ce izgledati ovako kao na slici, znaci sve sto nadjes ispod local hosts obrisi. Da ti sad ne objasnjavam da abog tih linija verovatno imas problem sa internetom. Sledece sto ces da odradis jeste da udjes u Safe mode (restartujes i klikces na F8 i kad stane izaberes Safe Mode)
Tu ces da pokrenes Hijack This i da cekiras sve ove linije koje su u code tagu, zatim klikni na fix, obrati paznju da samo zadnju ostavis ona je legitimna, ne zadnju iz code taga, vec zadnju koja se nalazi u HJT,kad ga pokrenes, ta se odnosi na skype.



Znaci samo polako idi redo i cekiraj ih i klikni na Fix. Posle toga restartuj racunar i vratices se u normal mode.
Kad to odradis, onda pokreni malwarebytes, azuriraj mu bazu, postavi na quick scan i klini na skan. Posle samo prati uputstva, on ce dosta brzo da zavrsi scan.

Kad sve to odradis ponovo pokreni Hijack This i kad izbaci novi log postavi ga ovde kao i prvi put, da vidimo sta je uradjeno.
Javu cemo ostaviti za kraj objasnicu ti kako da je deinstaliras i skines najnoviju verziju.

Nemoj da se predajes, samo radi po uputstvu i nadam se da cemo resiti problem.



Nisam gledao detaljno taj link sto je Ivek postavio ali to mozes da ostavis za kraj ako treba, prvo da se resimo ovih linija koje nisu dobre, jer definitivno ti je los log.

_{[Ovu poruku je menjao kristi1 dana 30.10.2008. u 22:45 GMT+1]}

Jos nesto vrlo vazno! Promeni ime Hijack this.exe u Ivana.exe i onda ga pokreni.

<sub>[Ovu poruku je menjao kristi1 dana 30.10.2008. u 22:48 GMT+1]

[Ovu poruku je menjao kristi1 dana 30.10.2008. u 22:50 GMT+1]</sub>

Kristi1
ja sam sve odradila, redom tacno kako mi je napisano. Nisam nasla nikakve maliciozne ni inficirane stavke. Jos da ti kazem da sa internetom nikada nisam imala problema. Evo ga i novi log.Cekam dalja uputstva.

Hvala


_{[Ovu poruku je menjao Ivana88 dana 01.11.2008. u 16:05 GMT+1]}

Ok sacu pogledati

Evo ovako, udji u safe Mode (restart pa F8)
Pokreni HJT cekiraj ove linije i klikni na fix
Restartuj komp da se vratis u normal mode



Sacemo da deinstaliramo Javu i da instaliramo novu verziju
Sjini program JavaRa
Klikni na Remove older versions
Kad to zavrsi i izbaci log onda klikni na Search for updates
Onda stikliraj donju opciju i klikni na Search
To ce te odvesti na sajt sa koga treba skinuti i instalirati zadnju verziju Jave

Kad ovo zavrsis javi se ponovo trebalo bi jos jednu komandu da odradimo.