Virus na USB-u

[cross_that_line]

Dakle imam virus na usb-u,sad sam ponovo digo windowse i instaliro avast i ubacio usb da si prebacim nes s njega i on je otkrio virus na nekim instalacijskim programima,virus je bio na glazbi koju sam obrisao i zbog ceg sam rusio windowse no cini se da se prebacio na ostale stvari na usb-u.
Sad me zanima jel mi mogo kako prebacit virus na komp jer nisam nis kopiro s usb-a i kako se rjesit virusa na usb-u,strah me ponovo ubacit usb da izbrisem sve s njega jer sam prije sat vremena ponovo digo windowse i da opet dobijem virus vjerojatno bi komp letio kroz prozor.Ima li nade za usb ili da ga bacim u smece?

[yoyoba]

cross_that_line kaže:

Dakle imam virus na usb-u,sad sam ponovo digo windowse i instaliro avast i ubacio usb da si prebacim nes s njega i on je otkrio virus na nekim instalacijskim programima,virus je bio na glazbi koju sam obrisao i zbog ceg sam rusio windowse no cini se da se prebacio na ostale stvari na usb-u.
Sad me zanima jel mi mogo kako prebacit virus na komp jer nisam nis kopiro s usb-a i kako se rjesit virusa na usb-u,strah me ponovo ubacit usb da izbrisem sve s njega jer sam prije sat vremena ponovo digo windowse i da opet dobijem virus vjerojatno bi komp letio kroz prozor.Ima li nade za usb ili da ga bacim u smece?

Ako si vec ubacivao usb u komp., prenio si virus........

Prebaci podatke sa usb na komp i onda formatiraj usb........

a za komp ovako:

Na desktopu napravi novu mapu i nazovi ju 123. Skini ovo i smjesti u tu mapu.
http://www.trendsecure.com/portal/en...HiJackThis.exe
Preimenuj Hijackthis.exe u 123.exe. (obavezno ga preimenuj)

Pokreni i klikni "Do a system scan and save a log file". Kad ti se otvori log u Notepadu, kopiraj ga u poruku ovdje.

[cross_that_line]

yoyoba kaže:

Ako si vec ubacivao usb u komp., prenio si virus........

Prebaci podatke sa usb na komp i onda formatiraj usb........

a za komp ovako:

Na desktopu napravi novu mapu i nazovi ju 123. Skini ovo i smjesti u tu mapu.
http://www.trendsecure.com/portal/en...HiJackThis.exe
Preimenuj Hijackthis.exe u 123.exe. (obavezno ga preimenuj)

Pokreni i klikni "Do a system scan and save a log file". Kad ti se otvori log u Notepadu, kopiraj ga u poruku ovdje.

I onda bi komp trebao bit cist? Nemas pojma kolko me je koristenje racunala kostalo zivaca i sijedih a sad jos ovo,to nema nigdje.
Trebalo bi uvest obavijest pri kupnji racunala OPASNO PO ZDRAVLJE.
Ak ovo ne uspije usb ide u smeće a komp na ulicu,ako nekog zanima di ce bit javim vam adresu jer ovo stvarno nije normalno.

[yoyoba]

cross_that_line kaže:

I onda bi komp trebao bit cist? Nemas pojma kolko me je koristenje racunala kostalo zivaca i sijedih a sad jos ovo,to nema nigdje.
Trebalo bi uvest obavijest pri kupnji racunala OPASNO PO ZDRAVLJE.
Ak ovo ne uspije usb ide u smeće a komp na ulicu,ako nekog zanima di ce bit javim vam adresu jer ovo stvarno nije normalno.

Da nije takvih ko ti , ja bih bio na ulici, bez posla

Samo ti redom uradi kako sam rekao..........

[frenchkey]

pozdrav svima, i ja imam sličan problem. Na USB sticku mi je nekakav recycler, a 123 exe mi je izbacio ovo:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:01:56, on 9.4.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\Documents and Settings\Ivo\qysutdk.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\SYSTEM32\astsrv.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
C:\Program Files\Cyberlink\Shared files\RichVideo.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Ivo\Desktop\123\123.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.speedbit.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
F2 - REGystem.ini: UserInit=C:\WINDOWS\system32\userinit.exe,C:\Docum ents and Settings\Ivo\qysutdk.exe \s
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: eBay Toolbar Helper - {22D8E815-4A5E-4DFB-845E-AAB64207F5BD} - C:\Program Files\eBay\eBay Toolbar2\eBayTB.dll
O2 - BHO: (no name) - {554D5023-DA97-4802-AE57-999FCFF9C92E} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: (no name) - {724d43a9-0d85-11d4-9908-00400523e39a} - C:\Program Files\Siber Systems\AI RoboForm\roboform.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.ex e" -launchedbylogin
O4 - HKLM\..\Run: [ifyneax] C:\WINDOWS\system32\ifyneax.exe \u
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LDM] C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger .exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User 'Default user')
O4 - Global Startup: Logitech Desktop Messenger.lnk = C:\Program Files\Logitech\Desktop Messenger\8876480\Program\LogitechDesktopMessenger .exe
O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\SetPoint.exe
O8 - Extra context menu item: Add to Google Photos Screensa&ver - res://C:\WINDOWS\system32\GPhotos.scr/200
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Easy-WebPrint Add To Print List - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_AddToList.html
O8 - Extra context menu item: Easy-WebPrint High Speed Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_HSPrint.html
O8 - Extra context menu item: Easy-WebPrint Preview - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Preview.html
O8 - Extra context menu item: Easy-WebPrint Print - res://C:\Program Files\Canon\Easy-WebPrint\Resource.dll/RC_Print.html
O8 - Extra context menu item: eBay Search - res://C:\Program Files\eBay\eBay Toolbar2\eBayTb.dll/RCSearch.html
O8 - Extra context menu item: Ispuni obrasce - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O8 - Extra context menu item: Prilagodi izbornik - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComCustomizeIEMenu.html
O8 - Extra context menu item: RF Alatna traka - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O8 - Extra context menu item: Spremi obrasce - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: Ispuni obrasce - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra 'Tools' menuitem: Ispuni obrasce - {320AF880-6646-11D3-ABEE-C5DBF3571F46} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComFillForms.html
O9 - Extra button: Spremi - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra 'Tools' menuitem: Spremi obrasce - {320AF880-6646-11D3-ABEE-C5DBF3571F49} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComSavePass.html
O9 - Extra button: RoboForm - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra 'Tools' menuitem: RF Alatna traka - {724d43aa-0d85-11d4-9908-00400523e39a} - file://C:\Program Files\Siber Systems\AI RoboForm\RoboFormComShowToolbar.html
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.com/wind...?1217245392468
O17 - HKLM\System\CCS\Services\Tcpip\..\{4D0EC077-7FC9-4B58-832A-21BC81E52585}: NameServer = 195.29.166.117 195.29.149.197
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AST Service (astcc) - Nalpeiron Ltd. - C:\WINDOWS\SYSTEM32\astsrv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\CyberLink\PowerCinema\Kernel\TV\CLSched.exe
O23 - Service: Portrait Displays Display Tune Service (DTSRVC) - Unknown owner - C:\Program Files\Common Files\Portrait Displays\Shared\DTSRVC.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Logitech Bluetooth Service (LBTServ) - Logitech, Inc. - C:\Program Files\Common Files\Logitech\Bluetooth\LBTServ.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\Cyberlink\Shared files\RichVideo.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 10298 bytes

[cross_that_line]

Ma sve to treba otjerat u pm i prodat komp kupit si nes normalno sta te nece zivcirat.

[tirox]

cross that line pa zakaj si stavio na friske windowse Avast kak si bas izabrao njega a ima nekoliko puno boljih antivirusa za izabrat a tu je jasno i Avira Free kao najbolji besplatni antivirus pa kud bas na Avast ti volis igrat na nesigurnom terenu jel!!!

[tirox]

frenchkey ovo mozes izbrisat tj pazljivo kvacice na to pa Fix Checked!!!
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: (no name) - {554D5023-DA97-4802-AE57-999FCFF9C92E} - (no file)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

[cross_that_line]

tirox kaže:

cross that line pa zakaj si stavio na friske windowse Avast kak si bas izabrao njega a ima nekoliko puno boljih antivirusa za izabrat a tu je jasno i Avira Free kao najbolji besplatni antivirus pa kud bas na Avast ti volis igrat na nesigurnom terenu jel!!!

Kakve sad veze avast ima s tim,jel to antivirus il nije?

[yoyoba]

frenchkey

NE BRISI NISTA

Otvori novu temu, i postavi svoj log.
Ima poradit na njemu...........

Ovde resavamo drugi probleem......

[frenchkey]

yoyoba kaže:

frenchkey

Otvori novu temu, i postavi svoj log.
Ima poradit na njemu...........

Ovde resavamo drugi probleem......

budem ,hvala
pomoć čekam tu

[tirox]

cross that line Avast je los antivirus ak to ne znas i od njega ti nema dobre zastite kompa uopce, frenchkey ono kaj sam ti napisao da obrises mozes slobodno obrisat nece ti se nikaj loseg dogodit samo to obrisi!!!

[lord stark]

ja sam se mislila rješit virusa formatiranjem usb-a, no piše mi da će se prilikom formatiranja datoteke na njemu izbrisati
postoji li način da se formatiranjem makne virus al da datoteke ostanu na njemu?

[Cilim]

Tesko, formatiranjem brises sve na sticku, a pregledavanjem i brisanjem antivirusnim programom zadrzavas sadrzaj a brises virus, pa stavi ga u komp i pregledaj antivirusnim programom koji imas na kompu.

[rock n roller]

lord stark kaže:

ja sam se mislila rješit virusa formatiranjem usb-a, no piše mi da će se prilikom formatiranja datoteke na njemu izbrisati
postoji li način da se formatiranjem makne virus al da datoteke ostanu na njemu?

Neces ti formatiranjem nista postici, obrisaces podatke a crv ce se vratiti sa kompa na USB i tako u krug.
Nego javi se ti dobroti da ti ocisti prvo racunar, jer ako je zarazen desice se ovo sto sam ti vec napisao.