Ne secam se tačno šta je bio problem sa mojim PC-om sa XP SP3, ali znam da sam ga nekako resio uz pomoć Combofix-a. Posle je sve bilo u redu dok nisam hteo AVG iz prošle godine zameniti sa AVG Internet Security 2011. Stari AVG Int. Sec. nisam mogao deinstalirati. Pošto mi je to bio rezervni operacioni Windows disk za surfovanje i download, obrisao sam rucno AVG Ordnere, ali novi AVG neće da se instalira, tj. hoće, ali ne mogu da ga startujem sa Desktopa (kaže da mu nešto fali), a u Sigurnosnom centru mi kaže da nemam AV-zastitu.
Proveo sam sate i sate (amaterski) trazeci i brisuci tragove AVG u Registry-ma. Sve je i dalje isto, PC odlično radi i na internetu, ali ne mogu instalirati kako treba ni jedan AV. Probao sam Kaspersky, Aviru, ne ide do kraja niti kako treba. Ah, da... vidim nedavno da su mi u TuneUp 2011 programskom ordneru, neki ordneri multiplicirani tj. umesto napr. jedan MIKA ja imam i MIKA(2), MIKA(3)i čak MIKA(4). Mislim da sam to imao i u Windows ordneru. Verujem da znate o cemu pišem, a saljem vam HijackThis-Editor sveze uradjen (bez egzekucije).
Ništa ne diram vise, cekam i nadam se pomoći. Hvala svima koji mogu pomoći!
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 22:15:24, on 08.02.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32ls ass.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:WINDOWSExplorer.EXE
C:WINDOWSRTHDCPL.EXE
C:ProgrammeIntelIntel Matrix Storage ManagerIaanotif.exe
C:WINDOWSsystem32ctfmon.exe
C:ProgrammeBrotherBrmfcmonBrMfcWnd.exe
C:ProgrammePC-Doctor 5 for WindowsPcdSmartMonitor.exe
C:ProgrammeBrotherBrmfcmonBrMfcmon.exe
C:ProgrammeGemeinsame DateienMaxtorSchedule2schedul2.exe
C:WINDOWSeHomeehRecvr.exe
C:WINDOWSeHomeehSched.exe
C:ProgrammeIntelIntel Matrix Storage ManagerIaantmon.exe
C:ProgrammeJavajre6binjqs.exe
C:ProgrammeGemeinsame DateienLightScribeLSSrvc.exe
C:WINDOWSsystem32nvsvc32.exe
C:ProgrammeGemeinsame DateienPC ToolssMonitorStartManSvc.exe
C:WINDOWSsystem32svchost.exe
C:ProgrammeIntelIntelDHIntel(R) Quick Resume Technology DriversElservice.exe
C:WINDOWSsystem32wuauclt.exe
C:WINDOWSsystem32dllhost.exe
C:WINDOWSsystem32wscntfy.exe
C:Dokume nte und EinstellungenHP_AdministratorDesktopHiJackThis204_Chip de.exe
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Search Bar =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DE_CH&c=64&bd=PAVILION&pf=desktop
R0 - HKCUSoftwareMicrosoftInternet ExplorerMain,Start Page =
http://www.google.ch/
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLMSoftwareMicrosoftInternet ExplorerMain,Search Bar =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DE_CH&c=64&bd=PAVILION&pf=desktop
R0 - HKLMSoftwareMicrosoftInternet ExplorerSearch,SearchAssistant =
http://ie.redirect.hp.com/svs/rdr?TYPE=3&tp=iesearch&locale=DE_CH&c=64&bd=PAVILION&pf=desktop
R1 - HKCUSoftwareMicrosoftInternet ExplorerMain,Window Title = Microsoft Internet Explorer
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:ProgrammeTechSmithSnagit 9SnagitBHO.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:ProgrammeMicrosoft OfficeOffice12GrooveShellExtensions.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:ProgrammeJavajre6binjp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:ProgrammeJavajre6libdeployjqsiejqs_plugin.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:ProgrammeTechSmithSnagit 9SnagitIEAddin.dll
O4 - HKLM..Run: [NvCplDaemon] RUNDLL32.EXE C:WINDOWSsystem32NvCpl.dll,NvStartup
O4 - HKLM..Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM..Run: [Recguard] C:WINDOWSSMINSTRECGUARD.EXE
O4 - HKLM..Run: [IAAnotif] C:ProgrammeIntelIntel Matrix Storage ManagerIaanotif.exe
O4 - HKLM..Run: [ftutil2] rundll32.exe ftutil2.dll,SetWriteCacheMode
O4 - HKLM..Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM..Run: [PCDrSmartMonitor] „C:ProgrammePC-Doctor 5 for WindowsPcdSmartMonitor.exe” -r
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKUSS-1-5-19..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User '?')
O4 - HKUSS-1-5-20..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User '?')
O4 - HKUSS-1-5-21-2699685544-2808253265-1300674608-1007..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe (User '?')
O4 - S-1-5-21-2699685544-2808253265-1300674608-1007 Startup: setup_9.0.0.722_08.02.2011_00-06.lnk = C:Dokumente und EinstellungenHP_AdministratorDesktopVirus Removal Toolsetup_9.0.0.722_08.02.2011_00-06startup.exe (User '?')
O4 - Startup: setup_9.0.0.722_08.02.2011_00-06.lnk = C:Dokumente und EinstellungenHP_AdministratorDesktopVirus Removal Toolsetup_9.0.0.722_08.02.2011_00-06startup.exe
O4 - Global Startup: Status Monitor.lnk = C:ProgrammeBrotherBrmfcmonBrMfcWnd.exe
O9 - Extra button: An OneNote senden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 - Extra 'Tools' menuitem: An OneNote s&enden - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~3Office12ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MICROS~3Office12REFIEBAR.DLL
O9 - Extra button: WinAVI FLV Manager - {DE365254-2F9B-4908-9E3A-7AAA6EC90BCC} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra 'Tools' menuitem: WinAVI FLV Manager - {DE365254-2F9B-4908-9E3A-7AAA6EC90BCC} - C:WINDOWSsystem32shdocvw.dll
O9 - Extra button: Hilfe zu Verbindungen - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:WINDOWSPCHEALTHHELPCTRVendorsCN=Hewlett-Packard,L=Cupertino,S=Ca,C=USIEButtonsupport.htm
O9 - Extra 'Tools' menuitem: Hilfe zu Verbindungen - {E2D4D26B-0180-43a4-B05F-462D6D54C789} - C:WINDOWSPCHEALTHHELPCTRVendorsCN=Hewlett-Packard,L=Cupertino,S=Ca,C=USIEButtonsupport.htm
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammeMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:ProgrammeMessengermsmsgs.exe
O16 - DPF: Garmin Communicator Plug-In -
https://static.garmincdn.com/gcp/ie/2.9.3.0/GarminAxControl.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1240654270312
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1241032318546
O16 - DPF: {CFCDAA03-8BE4-11CF-B84B-0020AFBBCCFA} -
http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} -
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:ProgrammeMicrosoft OfficeOffice12GrooveSystemServices.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32browseui.dll
O22 - SharedTaskScheduler: Component Categories cache daemon - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32browseui.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:ProgrammeGemeinsame DateienMaxtorSchedule2schedul2.exe
O23 - Service: Defragmentation-Service (DfSdkS) - mst software GmbH, Germany - C:ProgrammeAshampooAshampoo WinOptimizer 7Dfsdks.exe
O23 - Service: Intel(R) Quick Resume technology (ELService) - Intel Corporation - C:ProgrammeIntelIntelDHIntel(R) Quick Resume Technology DriversElservice.exe
O23 - Service: Intel(R) Matrix Storage Event Monitor (IAANTMON) - Intel Corporation - C:ProgrammeIntelIntel Matrix Storage ManagerIaantmon.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:ProgrammeGemeinsame DateienInstallShieldDriver1050Intel 32IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:ProgrammeJavajre6binjqs.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:ProgrammeGemeinsame DateienLightScribeLSSrvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:WINDOWSsystem32nvsvc32.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:ProgrammeGemeinsame DateienPC ToolssMonitorStartManSvc.exe
--
End of file - 8072 bytes