Forumi


Povratak   PC Ekspert Forum > Računala > Problemi > Softverski problemi
Osvježi stranicu Pokupio hrušta
Ime
Lozinka

Odgovori
Stranica 1 od 2 1 2
 
Uređivanje
Staro 08.08.2006., 19:40   #1
-POP-
Eddie
Moj komp
 
-POP-'s Avatar
 
Datum registracije: Mar 2004
Lokacija: Osijek
Postovi: 5,490
Pokupio hrušta
http://img187.imageshack.us/my.php?i...ntitlednt6.jpg
Malo malo mi se otvori ovo.. Uglavnom sve radi OK, ali se otvara ovaj prozorčić...
NOD32 ne nalazi ništa, počistio sa Ad-Awareom. Šta mi je činiti?
__________________


Intel E5450 E0 @455X9=4005MHz 1.36V // H2O Corsair H100 @low
Asus P5Q-E P45 @1.2V @Ket's 2101 bios
4X2Gb G.Skill 4GBPQ @890MHz 15-5-5-5 1.82V
Gigabyte HD5850 1Gb @960/5100MHz 1.088V @Scythe Musashi
Samsung 250GB 850 EVO // Seagate 3000GB DM001 // Samsung 500GB T166S @2X Scythe Himuro
Lian Li PC-P50 ArmorSuit // Corsair VX450W // DVD-RW LG GH24NSB0
White Shark Commandos @red switch // Logitech MX518 @blue led
AOC Q3279VWF 31.5"

Rotel RC972 // 2X Rotel RB971 @bridged // Audio Epilog Peyote // Raiz Peyote stands
M2Tech Young DSD DAC // Audioperformance Power Supply by Apparatus
Ixos Gamma Geometry 6003 // Transparent Audio The Link 200 // Kimber PBJ
Nobsound NS-01G PRO // Acoustic Energy AE100² // Asus Xonar U7 // Ixos XHS243W
Sony KD-65XH9096 // Nvidia Shield (2017) // Logitech Z-5500 sub & Focal Sib satellites
Logitech Z-10 // Logitech Z-2300 // Sennheiser HD205
-POP- je offline   Reply With Quote
Staro 08.08.2006., 19:45   #2
McG
-------
 
Datum registracije: Aug 2005
Lokacija: -
Postovi: 7,566
Probaj s ovim programčekom počistiti registry...možda pomogne.
McG je offline   Reply With Quote
Oglasni prostor
Oglas
 
Oglas
Staro 08.08.2006., 20:07   #3
-POP-
Eddie
Moj komp
 
-POP-'s Avatar
 
Datum registracije: Mar 2004
Lokacija: Osijek
Postovi: 5,490
Citiraj:
Autor McG
Probaj s ovim programčekom počistiti registry...možda pomogne.
Nije pomoglo...

Logfile of HijackThis v1.99.1
Scan saved at 20:07:25, on 8.8.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\WINDOWS\TEMP\win18A.tmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Eddie\Desktop\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll
O3 - Toolbar: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.0 RC 16\RivaTuner.exe" /S
O4 - HKLM\..\Run: [RivaTuner] "C:\Program Files\RivaTuner v2.0 RC 16\RivaTuner.exe" /T
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O20 - Winlogon Notify: winbfi32 - C:\WINDOWS\SYSTEM32\winbfi32.dll
O23 - Service: NOD32 Kernel Service (NOD32krn) - Unknown owner - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
__________________


Intel E5450 E0 @455X9=4005MHz 1.36V // H2O Corsair H100 @low
Asus P5Q-E P45 @1.2V @Ket's 2101 bios
4X2Gb G.Skill 4GBPQ @890MHz 15-5-5-5 1.82V
Gigabyte HD5850 1Gb @960/5100MHz 1.088V @Scythe Musashi
Samsung 250GB 850 EVO // Seagate 3000GB DM001 // Samsung 500GB T166S @2X Scythe Himuro
Lian Li PC-P50 ArmorSuit // Corsair VX450W // DVD-RW LG GH24NSB0
White Shark Commandos @red switch // Logitech MX518 @blue led
AOC Q3279VWF 31.5"

Rotel RC972 // 2X Rotel RB971 @bridged // Audio Epilog Peyote // Raiz Peyote stands
M2Tech Young DSD DAC // Audioperformance Power Supply by Apparatus
Ixos Gamma Geometry 6003 // Transparent Audio The Link 200 // Kimber PBJ
Nobsound NS-01G PRO // Acoustic Energy AE100² // Asus Xonar U7 // Ixos XHS243W
Sony KD-65XH9096 // Nvidia Shield (2017) // Logitech Z-5500 sub & Focal Sib satellites
Logitech Z-10 // Logitech Z-2300 // Sennheiser HD205
-POP- je offline   Reply With Quote
Staro 08.08.2006., 20:27   #4
McG
-------
 
Datum registracije: Aug 2005
Lokacija: -
Postovi: 7,566
HijackThis Log File javlja da treba ukloniti:
  • O2 - BHO: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll
  • O2 - BHO: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll

O20 - Winlogon Notify: winbfi32 - C:\WINDOWS\SYSTEM32\winbfi32.dll je deklariran kao nepoznat.

Tu moreš skopirati/uplodati i analizirati log file.
McG je offline   Reply With Quote
Staro 08.08.2006., 20:39   #5
Mailman
Premium
 
Mailman's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 1,606
C:\WINDOWS\TEMP\win18A.tmp.exe
i ovo bi trebao ukloniti...

a i winbfi32.dll mi je sumnjiv...
nakon malo guglanja:
Citiraj:
Win32.TrojanClicker Object Recognized!
Type : Process
Data : winbfi32.dll
TAC Rating : 10
Category : Malware
Comment : winbmf32.dll
Object : C:\WINDOWS\system32\


Warning! Win32.TrojanClicker Object found in memory(C:\WINDOWS\system32\winbfi32.dll)
http://www.lavasoftsupport.com/index...=0&#entry12523
Mailman je offline   Reply With Quote
Staro 08.08.2006., 21:02   #6
-POP-
Eddie
Moj komp
 
-POP-'s Avatar
 
Datum registracije: Mar 2004
Lokacija: Osijek
Postovi: 5,490
Citiraj:
Autor McG
HijackThis Log File javlja da treba ukloniti:
  • O2 - BHO: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll
  • O2 - BHO: ToolBar888 - {CBCC61FA-0221-4ccc-B409-CEE865CACA3A} - C:\Program Files\ToolBar888\MyToolBar.dll

O20 - Winlogon Notify: winbfi32 - C:\WINDOWS\SYSTEM32\winbfi32.dll je deklariran kao nepoznat.

Tu moreš skopirati/uplodati i analizirati log file.
Napravio što je McG rekao ista stvar. Sad sam sredio winbfi32.dll pa budemo vidjeli.
__________________


Intel E5450 E0 @455X9=4005MHz 1.36V // H2O Corsair H100 @low
Asus P5Q-E P45 @1.2V @Ket's 2101 bios
4X2Gb G.Skill 4GBPQ @890MHz 15-5-5-5 1.82V
Gigabyte HD5850 1Gb @960/5100MHz 1.088V @Scythe Musashi
Samsung 250GB 850 EVO // Seagate 3000GB DM001 // Samsung 500GB T166S @2X Scythe Himuro
Lian Li PC-P50 ArmorSuit // Corsair VX450W // DVD-RW LG GH24NSB0
White Shark Commandos @red switch // Logitech MX518 @blue led
AOC Q3279VWF 31.5"

Rotel RC972 // 2X Rotel RB971 @bridged // Audio Epilog Peyote // Raiz Peyote stands
M2Tech Young DSD DAC // Audioperformance Power Supply by Apparatus
Ixos Gamma Geometry 6003 // Transparent Audio The Link 200 // Kimber PBJ
Nobsound NS-01G PRO // Acoustic Energy AE100² // Asus Xonar U7 // Ixos XHS243W
Sony KD-65XH9096 // Nvidia Shield (2017) // Logitech Z-5500 sub & Focal Sib satellites
Logitech Z-10 // Logitech Z-2300 // Sennheiser HD205
-POP- je offline   Reply With Quote
Staro 08.08.2006., 21:37   #7
Defcon.OS
Contra bonos mores
 
Defcon.OS's Avatar
 
Datum registracije: May 2006
Lokacija: Osijek
Postovi: 159
Mali dodatak na log file, ovaj proces makni, to nema što tražiti u temp.

C:\WINDOWS\TEMP\win18A.tmp.exe

Što se tiče tvog problema baci pogled i vamo, nisi jedini. : goood :

http://forum.pcekspert.com/showthread.php?t=39245

http://forum.pcekspert.com/showthread.php?t=42222
__________________
Defcon.OS je offline   Reply With Quote
Staro 08.08.2006., 21:53   #8
-POP-
Eddie
Moj komp
 
-POP-'s Avatar
 
Datum registracije: Mar 2004
Lokacija: Osijek
Postovi: 5,490
Zasad mi se čini da sam ga uspio počistiti kad sam sredio winbfi32.dll.
C:\WINDOWS\TEMP\win18A.tmp.exe Naravno, riješeno, tamo nema mjesta ničemu.
__________________


Intel E5450 E0 @455X9=4005MHz 1.36V // H2O Corsair H100 @low
Asus P5Q-E P45 @1.2V @Ket's 2101 bios
4X2Gb G.Skill 4GBPQ @890MHz 15-5-5-5 1.82V
Gigabyte HD5850 1Gb @960/5100MHz 1.088V @Scythe Musashi
Samsung 250GB 850 EVO // Seagate 3000GB DM001 // Samsung 500GB T166S @2X Scythe Himuro
Lian Li PC-P50 ArmorSuit // Corsair VX450W // DVD-RW LG GH24NSB0
White Shark Commandos @red switch // Logitech MX518 @blue led
AOC Q3279VWF 31.5"

Rotel RC972 // 2X Rotel RB971 @bridged // Audio Epilog Peyote // Raiz Peyote stands
M2Tech Young DSD DAC // Audioperformance Power Supply by Apparatus
Ixos Gamma Geometry 6003 // Transparent Audio The Link 200 // Kimber PBJ
Nobsound NS-01G PRO // Acoustic Energy AE100² // Asus Xonar U7 // Ixos XHS243W
Sony KD-65XH9096 // Nvidia Shield (2017) // Logitech Z-5500 sub & Focal Sib satellites
Logitech Z-10 // Logitech Z-2300 // Sennheiser HD205
-POP- je offline   Reply With Quote
Staro 09.08.2006., 13:35   #9
-POP-
Eddie
Moj komp
 
-POP-'s Avatar
 
Datum registracije: Mar 2004
Lokacija: Osijek
Postovi: 5,490
Hmm...opet.
Ovo mi se skuplja u tempu...
http://img91.imageshack.us/my.php?image=untitledkk0.jpg

A ovo je log...
Logfile of HijackThis v1.99.1
Scan saved at 13:36:16, on 9.8.2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
C:\WINDOWS\TEMP\win9F9.tmp.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\Eddie\LOCALS~1\Temp\Rar$EX01.094\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [RivaTunerStartupDaemon] "C:\Program Files\RivaTuner v2.0 RC 16\RivaTuner.exe" /S
O4 - HKLM\..\Run: [RivaTuner] "C:\Program Files\RivaTuner v2.0 RC 16\RivaTuner.exe" /T
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\Program Files\Stardock\ObjectDock\ObjectDock.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\npjpi150_06.dll
O9 - Extra button: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - C:\Program Files\ICQ\ICQ.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\OFFICE11\REFIEBAR.DLL
O23 - Service: NOD32 Kernel Service (NOD32krn) - Unknown owner - C:\Program Files\Eset\nod32krn.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe
__________________