Pomoc

Lucky · January 9, 2006

Po meni je najsigurniji i najbrzi browser Opera, a Firefox moze da se koristi kada neka stranica nece lepo da se otvori u Operi...

Reci to boletu :))

btw, @ kerio - dobar je firewall, ali samo obrati paznju na to da ako je u onom "retard friendly" modu nece te pitati da ti "pusti" FTP servere i slicne stvari, pa nemoj da se pogubis ako ne bude hteo da ti otvori nijedan ftp ili slicno.

Doca · January 12, 2006

^^^...da i mene smara kad treba da proverim mail...moram da ga oborim...jbga...

Lucky · January 13, 2006

Ne moras da ga oboris, definisi da pusta mail, samo sto on od starta ne dozvoljava te stvari pa tripuje ljude.

AlexG · January 14, 2006

Burazer mi to sve definiso tako da nema frke.......dobar je nije los za sada....mada cu sledeceg vikenda da oborim ceo sistem pa da stavim f-secure kompletan i zdravo djaci :)

voodoo_ · January 16, 2006

Inace ja sam taj problem resio tupavo, ali jebeno radi :)
VMWare (90 Mb-pitzckhin dim)->Guest operating system linux (fedora, sad ce i suse).
Idem na net, na koji god ocu sajt, smejem se napadima koji gadjaju pogresan IP, kad se nesto sjebe samo obrisem Guest, pokrenem njegovog klona i uzivam. Radi mp3 bez po muke, radi DVD/Divx, radi sve. Instalacija i podesavanje tog linuxa je trajala sat i po.
Od tada me ne boli glava.

Pertu, zelim da iskoristim ovu priliku da ti se zahvalim do neba na ovoj sjajnoj ideji :)

Sto godina bezuspesno pokusavam da poteram ovaj krs od modema da radi pod Linuxom i nista, a ova varijanta sa mrezom sljaka sjajno.

Cheese! [:D]

» Click to show Spoiler - click again to hide... «

Hoho, Suse 10 i VMware 4.5... doduse ovo je cisto radi testa, gledacu da svucem novi 5.5...

Goku7 · February 11, 2006

Molim vas da mi neko pomogne (evo i dok pisem mi se to desava)! Pre neki dan je pocelo da mi se neki sajtovi sami otvaraju! Imam adsl i na netu sam non-stop, za nekih 10 min. mi se ovtvore 10-ak sajtova Molim vas da mi kazete sta sam to instalirao, ili kako to da iskljucim!

Evo npr koji mi se sajt otvorio:

http://www.intern-etadvertising.com/normal/yyy102.html

Inace koristim FireFox i skinuo sam spybot i adadware i nece neka 2 fajla da mi izbrise, koja se nalaze HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService!!!

Demian · February 11, 2006

http://www.spywareinfo.com/~merijn/files/hijackthis.zip

Skini ovo i pusti scan.Budi oprezan sa programom jer brishe do srzi, ne bi bilo pametno da unistish win ;)

Pametnije je da pustish scan i kad zavrshi baci nam ovde screenshot .

Goku7 · February 12, 2006

Logfile of HijackThis v1.99.1

Scan saved at 10:33:22 AM, on 2/12/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Norton AntiVirus\navapsvc.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

C:\WINDOWS\system32\rundll32.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe

C:\Program Files\ICQLite\ICQLite.exe

C:\windows\winsysban7.exe

C:\WINDOWS\eee2.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\BlueSoleil\BlueSoleil.exe

C:\Program Files\VIA\RAID\raid_tool.exe

C:\Program Files\Mozilla Firefox\firefox.exe

C:\Program Files\Messenger\msmsgs.exe

C:\Documents and Settings\Stiglic Igor\Desktop\HijackThis.exe

R3 - URLSearchHook: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll

O3 - Toolbar: ICQ Toolbar - {855F3B16-6D32-4fe6-8A56-BBB695989046} - C:\Program Files\ICQToolbar\toolbaru.dll

O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll

O4 - HKLM\..\Run: [bluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent

O4 - HKLM\..\Run: [ATIPTA] C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKLM\..\Run: [ccApp] C:\Program Files\Common Files\Symantec Shared\ccApp.exe

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime

O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"

O4 - HKLM\..\Run: [iCQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize

O4 - HKLM\..\Run: [winsysupd] C:\windows\winsysupd7.exe

O4 - HKLM\..\Run: [gimmygames] C:\windows\gimmygames.exe

O4 - HKLM\..\Run: [winsysban] C:\windows\winsysban7.exe

O4 - HKLM\..\Run: [wahm] C:\WINDOWS\eee2.exe

O4 - HKLM\..\Run: [ahkw] C:\WINDOWS\eee2.exe

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background

O4 - HKCU\..\RunOnce: [iCQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot

O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe

O4 - Global Startup: BlueSoleil.lnk = ?

O4 - Global Startup: VIA RAID TOOL.lnk = C:\Program Files\VIA\RAID\raid_tool.exe

O8 - Extra context menu item: &Download with &DAP - C:\PROGRA~1\DAP\dapextie.htm

O8 - Extra context menu item: &Google Search - res://c:\program files\google\GoogleToolbar1.dll/cmsearch.html

O8 - Extra context menu item: &ICQ Toolbar Search - res://C:\Program Files\ICQToolbar\toolbaru.dll/SEARCH.HTML

O8 - Extra context menu item: &Translate English Word - res://c:\program files\google\GoogleToolbar1.dll/cmwordtrans.html

O8 - Extra context menu item: Backward Links - res://c:\program files\google\GoogleToolbar1.dll/cmbacklinks.html

O8 - Extra context menu item: Cached Snapshot of Page - res://c:\program files\google\GoogleToolbar1.dll/cmcache.html

O8 - Extra context menu item: Download &all with DAP - C:\PROGRA~1\DAP\dapextie2.htm

O8 - Extra context menu item: Similar Pages - res://c:\program files\google\GoogleToolbar1.dll/cmsimilar.html

O8 - Extra context menu item: Translate Page into English - res://c:\program files\google\GoogleToolbar1.dll/cmtrans.html

O9 - Extra button: (no name) - AutorunsDisabled - (no file)

O9 - Extra button: Run DAP - {669695BC-A811-4A9D-8CDF-BA8C795F261C} - C:\PROGRA~1\DAP\DAP.EXE

O15 - Trusted Zone: *.media-motor.net

O15 - Trusted Zone: *.popuppers.com

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/...b?1128179780093

O17 - HKLM\System\CCS\Services\Tcpip\..\{E3AD9E74-2457-42FC-8D1E-92619DC83F6A}: NameServer = 194.106.188.17 194.106.188.2

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\PROGRA~1\MSNMES~1\msgrapp.dll" (file missing)

O20 - Winlogon Notify: policies - C:\WINDOWS\system32\mvr4l99q1.dll

O20 - Winlogon Notify: WRNotifier - WRLogonNTF.dll (file missing)

O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe

O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe

O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe

O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe

O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe

O23 - Service: Sandra Data Service (SandraDataSrv) - SiSoftware - C:\Program Files\Sandra\RpcDataSrv.exe

O23 - Service: Sandra Service (SandraTheSrv) - SiSoftware - C:\Program Files\Sandra\RpcSandraSrv.exe

O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

Demian · February 12, 2006

Logfile of HijackThis v1.99.1
Scan saved at 10:33:22 AM, on 2/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
......
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe
C:\Program Files\ICQLite\ICQLite.exe
C:\windows\winsysban7.exe brishi imash ovo
C:\WINDOWS\eee2.exe SAMO AKO nije neshto tvoje brishi
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\BlueSoleil\BlueSoleil.exe
C:\Program Files\VIA\RAID\raid_tool.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Documents and Settings\Stiglic Igor\Desktop\HijackThis.exe
.....
.....
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [CnxDslTaskBar] "C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe"
O4 - HKLM\..\Run: [iCQ Lite] C:\Program Files\ICQLite\ICQLite.exe -minimize
O4 - HKLM\..\Run: [winsysupd] C:\windows\winsysupd7.exe
O4 - HKLM\..\Run: [gimmygames] C:\windows\gimmygames.exe
O4 - HKLM\..\Run: [winsysban] C:\windows\winsysban7.exe
O4 - HKLM\..\Run: [wahm] C:\WINDOWS\eee2.exe
O4 - HKLM\..\Run: [ahkw] C:\WINDOWS\eee2.exe

VAZNO! Ovo shto je ljubicasto nemoj odmah da brisesh.Obrisi "gimmygames" i "winsysban7" probaj onda, pa ako i dalje bude cimao onda brishi i ovaj "eee2" ali ga prethodno prekopiraj negde za svaki slucaj... mada nemam pojma shta bi moglo da bude :(

Goku7 · February 13, 2006

E, izvini sto se ranije nisam javio, juce sam imao nekih obaveza, pa nisam stigao, vec sam danas sve ovo uradio :( Izbrisao sve sto si mi rekao ( takodje i eee2) i nista novo! Kad' god odem na internet, i ponovo skeniram komp, pojavi se oko 50-ak novih, i kad' stavim da se brise, uvek ostanu ona ista 2! Sta mislis, sta da radim, da li jos nesto da obrisem sa HijackThis!?

Hvala ti!

Demian · February 13, 2006

i nece neka 2 fajla da mi izbrise, koja se nalaze HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\cmdService
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\cmdService!!!

←

Ta dva fajla koja su se ponovo pojavila su ovi right?Ajde ovako.

1.Posto koristish Mozillu idi na Tools -> Options -> Web Features.Tu imash dve opcije koje bi trebalo da su ukljucene.Jedna je "Block popup windows" druga "Allow web sites to install software".Ako su iskljucene - ukljuci, ako nisu proveri sta imash u "Allowed sites" i sta god da ima tamo (ako ima) ukloni.Trebalo bi da imash sledece:

O15 - Trusted Zone: *.media-motor.net
O15 - Trusted Zone: *.popuppers.com

Ako nisu u mozili proveri Internet Explorer -> Tools -> Internet Options -> Security -> Trusted Sites -> Sites.Ako tamo imash neshto ukloni.

2.Izbrishi Download Accelerator Plus (Add Remove programs),restartuj, pusti opet HijackThis i baci mi nov log , ali ovaj put MOLIM te stavi ga u spoiler kk?

Reci mi josh da li ti Spybot ima najnovije update.Ne bi bilo loshe ni da mi bacih screen onoga shto ti kaze Spybot.

Goku7 · February 13, 2006

Ne mogu da nadjem Web Features u option-u Mozzile! Isao sam na tools-option-content i tamo stoji "stiklirano"Block popup Window! Mozda je moja neka starija verzija (1.5.0.1.)???

I samo mi reci sta si mislio pod "MOLIM te stavi ga u spoiler kk?"

Spybot mi je update-ovan!

Hvala ti sto se cimas oko mene!

Edited February 13, 2006 by Goku7

Goku7 · February 13, 2006

.... i zamisli, nece da mi se izbrise Download Accelerator (probao i preko add/remove program i preko njegovog uninstall). Da li vredi brisati folder gde je instaliran?

Goku7 · February 13, 2006

:( Reci mi samo kako da ti stavim screen od spybot-a ovde ? :(

Demian · February 13, 2006

Uh prati pazljivo sad korak po korak.

1.Nisam znao da ti je novija Mozilla.Pored opcije "Block popups" imash dugme mislim da je "View Sites" ili "Exceptions" uglavnom idi tamo i ako ima ikakav site brishi ...

2.Nisi mi odgovorio jesi proverio u IExploreru.Ako nisi to ti je sledeci korak.

3.Ako nisi ugasio DAccelerator ugasi ga skroz, onda probaj Add/Remove, ako ni tad nece obrishi ga rucno, ako ti i tad prijavi da nece, udji u Safe mode, (F8 pritisni dok se startuje win pa opcija "Safe mode") pa ga onda obrishi.

4.Skini instalaciju Mozille ako nemash pa obrishi i nju.Dok skidash nju skini i Operu.

5.APSOLUTNO je neophodno da ti nijedan program nishta ne bude pokrenuto dok HIjackThis radi svoje, imaj ovo na umu pa pusti scan.

6.Ne instaliraj nishta preko IExplorera dodji na RUR i stavi mi novi log HIjack-a u SPOILER.Stavljash tako shto odesh na forumu na "Add Reply" imash iznad prozora za kucanje dugme SPOILER klikni na njega (primeti da se dugme promenilo u SPOILER*)

prekopiraj sav text i klikni ponovo na SPOILER da zatvorish.I onda "Add Reply" ;)

» Click to show Spoiler - click again to hide... «

ovo ti je spoiler

Goku7 · February 13, 2006

Shavatio sam za spoiler :) !

Nego proverio sam u Mozzili i internet Exploreru i tamo nema nikakvih sajtova!

Demian · February 13, 2006

Onda pozuri i otprati korake 23456 ;)

Goku7 · February 13, 2006

:) uradio sam proveru i kod Internet Explorera, obrisao rucno download accelerator! E sad' nisam shvatio da li trebam da obrisem Mozzila, pre nego sto uradim ponovo uradio log?

Demian · February 13, 2006

Obrisi i Mozillu ... nek ne bude pokrenuto nishta sem Hijacka i pusti scan, vrati se ovde i baci log ;)

Goku7 · February 14, 2006

» Click to show Spoiler - click again to hide... «

Logfile of HijackThis v1.99.1

Scan saved at 1:20:19 PM, on 2/14/2006

Platform: Windows XP SP2 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

C:\WINDOWS\system32\spoolsv.exe

C:\Program Files\Norton AntiVirus\navapsvc.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe

C:\WINDOWS\system32\Ati2evxx.exe

C:\WINDOWS\Explorer.EXE

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\Program Files\QuickTime\qttask.exe

C:\Program Files\Conexant\AccessRunner ADSL\CnxDslTb.exe

C:\Program Files\ICQLite\ICQLite.exe

C:\WINDOWS\system32\ctfmon.exe

C:\Program Files\MSN Messenger\msnmsgr.exe

C:\Program Files\BlueSoleil\BlueSoleil.exe

C:\Program Files\VIA\RAID\raid_tool.exe

C:\WINDOWS\system32\rundll32.exe

C:\Program Files\Windows Media Player\wmplayer.exe

C:\Documents and Settings\Stiglic Igor\My Documents\Instalacije\Spyware\HijackThis.exe

C:\Program Files\Messenger\msmsgs.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = about:blank

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about:blank