juce skenirao u safe modu sa Malwarebytes-om i nasao mi neke 4 stavke: *** Registry Data Items Infected: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\updatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.
Files Infected: D:\instal\Foxit PDF editor\foxit.pdf.editor.2.1.0.build.0702-patch_Under SEH Team.exe (Malware.Packer) -> Quarantined and deleted successfully. D:\instal\test\hyper_pi_0.99b\hyper_pi_0.99\super_pi_mod-1.5\super_pi_mod.exe (Malware.Packer.Krunchy) -> Quarantined and deleted successfully. ***
Sve obrise, restartuje komp, greskom ode u normalni windows, ponovo restart, udjem u Safe mod, ponovno skeniram, kad ono opet:
*** Files Infected: D:\System Volume Information\_restore{B0EFCB74-29B7-4222-A14A-A63DCB47671A}\RP42\A0002835.exe (Malware.Packer) -> Quarantined and deleted successfully. D:\System Volume Information\_restore{B0EFCB74-29B7-4222-A14A-A63DCB47671A}\RP42\A0002836.exe (Malware.Packer.Krunchy) -> Quarantined and deleted successfully. *** I to u onom ekranu gde pokazuje rezultate pise:
Malware.Packer -> prvi system volume information Malware.Packer.Krunchy -> drugi system volume information
Znaci, ako iz safe moda ne udjem u Win, nemam virus. Cim udjem u Win, on ga obnovi.
to je jedna metoda koju neki malware-i koriste da se povrate u sistem nakon brisanja...UnHackMe ce morati da radi,brisanje na BOOT-ovanju kompa ce te najverovatnije resiti te napasti... Uputstvo imas iskoristi ga na pravi nacin...
KLIN(KA) SE KLIN(K)OM IZBIJA
:: juce skenirao u safe modu sa Malwarebytes-om i nasao mi neke 4 stavke :: ** :: Registry Data Items Infected :: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully :: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\updatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully :: :: Files Infected :: D:\instal\Foxit PDF editor\foxit.pdf.editor.2.1.0.build.0702-patch_Under SEH Team.exe (Malware.Packer) -> Quarantined and deleted successfully :: D:\instal\test\hyper_pi_0.99b\hyper_pi_0.99\super_pi_mod-1.5\super_pi_mod.exe (Malware.Packer.Krunchy) -> Quarantined and deleted successfully :: ** :: :: Sve obrise, restartuje komp, greskom ode u normalni windows, ponovo restart, udjem u Safe mod, ponovno skeniram, kad ono opet :: :: ** :: Files Infected :: D:\System Volume Information\_restore{B0EFCB74-29B7-4222-A14A-A63DCB47671A}\RP42\A0002835.exe (Malware.Packer) -> Quarantined and deleted successfully :: D:\System Volume Information\_restore{B0EFCB74-29B7-4222-A14A-A63DCB47671A}\RP42\A0002836.exe (Malware.Packer.Krunchy) -> Quarantined and deleted successfully :: ** :: I to u onom ekranu gde pokazuje rezultate pise :: :: Malware.Packer -> prvi system volume informatio :: Malware.Packer.Krunchy -> drugi system volume informatio :: :: Znaci, ako iz safe moda ne udjem u Win, nemam virus. Cim udjem u Win, on ga obnovi :: :: Ajd` sad pomagajte (ako mu pomoci ima) :: :: Unapred hvala :: :: Pozdrav.
ComboFix is not available for download until an issue with the program has been resolved. Please be patient while the developer fixes the program and makes it available once again. As more information becomes available, we will update this page.
DO NOT attempt to download ComboFix from sites other than BleepingComputer.com and Forospyware.com!
Other sites hosting ComboFix are not authorized mirrors and are hosting outdated copies of ComboFix that contain a bug that may render some machines unbootable. Using unauthorized mirrors of ComboFix puts your computer at risk of not booting again. Please wait for the official version to be fixed and released again.
We will also announce when ComboFix is available on our Twitter and Facebook pages.
:: :: Skini odavde ovo :: :: http://www.combofix.org :: :: :: iskluci sve antiviruse INTERNET NEKA BUDE UKLJUCEN PA INSTALIRAJ combofix :: :: pa prati uputstva :: :: javi rezulta :: :: ::
samo sto ce mi trebati i vremena i koncentracije (koju juce nisam imao).
Da li problem resavam ako ubacim jos jedan disk, na njega instaliram Win i Unhackme, a onda iskeniram ovaj stari i ocistim ga potpuno? Posto sadasnji disk ima samo 160GB, razmisljam vec neko vreme da nabavim neki WD od 640GB - 1TB i da mi to bude sistemski + jedna velika radna particija, a ovaj od 160GB da bude druga (radna) particija.
To je u redu ali ta verzija ima bug koja na nekim masinama moze da dovede do toga da ne mogu da se boot-uju uopste. Procitajte ceo tekst,tj nemojte rizikovati.
Al ja sam naknadno iskljucivao programe koje sam mogao. Ali moji racunari radu uvek sao svajcarski satovi.ali pitanje kako ce COMBOFIX DA RADI KOD VAS.
Kad budes ubuduce radio sa Malwarebytes-om, povodom iskljucivanja Firewall/antivirus(3ca stavka)/update sekcije windows-a, kada iskenira sve, nemoj da radis repair(koliko se secam ili clean), nego klikni misem desno dugme na svako od tih polja, i izaberi ignore.
Za `D:\System Volume Information\_restore{B0EFCB74-29B7-4222-A14A-A63DCB47671A}\RP42\A0002835.exe (Malware.Packer) -> Quarantined and deleted successfully :: D:\System Volume Information\_restore{B0EFCB74-29B7-4222-A14A-A63DCB47671A}\RP42\A0002836.exe (Malware.Packer.Krunchy) -> Quarantined and deleted successfully
ovaj deo, klikni desno dugme na My Computer, izaberi properties, izaberi stavku System restore i disableuj restore svih drajvova(stikliraj Turn off system restore on all drives), pa apply, pa odstikliraj(Turn Off) i rokni OK. Skini Kaspersky 2009 ili 2010(ako je izasao) sa probnim kljucem od metar dana, i preskeniraj komp. Naravno opet pusti Malwarebytes u pogon(Full Scan). Procistice ti sve.
Edit: NOD32 je krsh u odnosu na Kaspersky, koristio sam jedan i drugi kako sam mogao (kupovina preko `sajtova`), ali po iskustvu, Kaspersky je mnogo bolji jer je detaljniji. Sad imam licencirani :D Najbolja kombinacija je Kaspersky i Malwarebytes.
Broj postavljenih tema: 60355. Broj poslatih odgovora: 646991. Trenutno niste prijavljeni na PC Berzu i zbog toga imate status 'gosta'. Kao gost ne možete da šaljete poruke na Forum. Ako ste registrovani kao član PC Berze, prijavite se. Ako ste novi korisnik, molimo registrujte se da bi dobili mogućnost aktivnog učešća u radu Foruma.
