Problem sa avast antivirusom

Procesljaj sa MBAM-om , javi ako uspijes odrjesit tu gamad duznosti .

@dancy

Još bi ja nešto zamijenio. Ako dobro vidim koristiš RegCure, program za tzv. čišćenje registry baze. To je Fake program, neće ti taj program baš puno pomoći, a ne daj Bože da ti nešto još i ne shebe. Ovakvo mišljenje nemam samo ja već i veliki broj ljudi koji su ga koristili ( pogledati reakcije korisnika WOT-a, mišljenja na nekim drugim forumima i sl ) Ima i onih koji ga hvale, ali prevladavaju negativna mišljenja. Postoji puno boljih i sigurnijih programa ove namjene, kako komercijalnih tako i besplatnih. Pozdrav i bez zamjerke.

Ja bih maknuo i spybot, ali to je opet moje subjektivno mišljenje

Da, sry samo sam preletio okom na brzinu

ne treba se uopće ženirati po pitanju spybota - uninstall !
hvalabogu lako se deinstalira
kao ni po pitanju wot-a - install !

imam avast.ali dok mi radi blokira mi mozilu i ne mogu se prikljuciti na mrezu.cim ga ikljucim sve radi.kako da to popravim

ova poruka mi se pojavljuje cijelo jutro, jel netko zna u cemu je problem,

proskeniro sam i s avastom i s mbamom i nista nisu nasli.

a ta poruka mi se pojavi cim otvorim neku stranicu, prakticki svaki put kad se refresha ta se poruka javi

Sumnjaš na neki Rotkit jel kad MBAM nije ništ našel, pod pretpostavkom da su mu definicije updejtane jer mnogi s njime skeniraju preko dost starih definicija nažalost.

postaju sve gori i gori.  prije dva dana su upropastili update i vecini korisnika je zablokirao.  trebalo je poci pod addremoves program, dvoklik i u dolazecem prozoru kliknut update.  tu bi se pojavio ispravak i avast je odblokiran.  ovo je drugi puta unutar godinu dana da updateom zablokiraju svoj softver.   ne koristim ga, ali kukaju oni kojima ga instaliram....jer eto...masa kaze "to svi koriste", pa bolje ne pametovat i stavis im avast.

možeš i testirati AV ako želiš

htxxtp://support.clean-mx.de/clean-mx/viruses.php?sort=firstseen%20desc&review=193.107.16.124

htxxtp://malc0de.com/database/index.php?search=193.107.16.124&IP=on

htxxtp://193.107.16.124/imagenes/DSC340353.jpg.exe

htxxtp://193.107.16.124/animacion/update.exe

rogue killer 

RogueKiller V7.0.1 [01/28/2012] by Tigzy

mail: tigzyRK<at>gmail<dot>com

Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/

Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7601 Service Pack 1) 32 bits version

Started in : Normal mode

User: Mario [Admin rights]

Mode: Scan -- Date : 01/28/2012 18:03:29

¤¤¤ Bad processes: 0 ¤¤¤

¤¤¤ Registry Entries: 5 ¤¤¤

[HJ] HKLM\[...]\System : ConsentPromptBehaviorAdmin (0) -> FOUND

[HJ] HKLM\[...]\System : EnableLUA (0) -> FOUND

[HJ] HKCU\[...]\Advanced : Start_ShowMyGames (0) -> FOUND

[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> FOUND

[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> FOUND

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [LOADED] ¤¤¤

¤¤¤ Infection :  ¤¤¤

¤¤¤ HOSTS File: ¤¤¤

¤¤¤ MBR Check: ¤¤¤

+++++ PhysicalDrive0: ST380817AS ATA Device +++++

--- User ---

[MBR] fd6b9906a611797d5773ac8e84b27e55

[BSP] 93905f7f17c59a14e05c5271fdda0daa : Windows 7 MBR Code

Partition table:

0 - [ACTIVE] NTFS (0x07) [VISIBLE] Offset (sectors): 63 | Size: 80015 Mo

User = LL1 ... OK!

User = LL2 ... OK!

+++++ PhysicalDrive1: WDC WD5000AADS-00M2B0 ATA Device +++++

--- User ---

[MBR] dc6838622edc673f4fe4a7ae0961c0c6

[BSP] a220467fd974f5bd298a47b00ec4c746 : Windows 7 MBR Code

Partition table:

0 - [XXXXXX] NTFS (0x07) [VISIBLE] Offset (sectors): 19 | Size: 500104 Mo

User = LL1 ... OK!

User = LL2 ... OK!

Finished : << RKreport[1].txt >>

RKreport[1].txt

i ots

http://speedy.sh/9D8yW/New-Text-Document.txt

ne zeli mi se windows rebootat nakon sto ots zavrsi!!!

ComboFix 12-01-28.01 - Mario 8.01.2012.  20:07:12.1.4 - x86

Microsoft Windows 7 Enterprise   6.1.7601.1.1250.385.1050.18.3327.1315 [GMT 1:00]

Running from: c:\users\Mario\Desktop\ComboFix.exe

AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C}

SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681}

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

 * Created a new restore point

.

.

(((((((((((((((((((((((((((((((((((((((   Other Deletions   )))))))))))))))))))))))))))))))))))))))))))))))))

.

.

c:\users\Mario\AppData\Roaming\7za.exe

c:\users\Mario\AppData\Roaming\vso_ts_preview.xml

D:\install.exe

.

.

(((((((((((((((((((((((((   Files Created from 2011-12-28 to 2012-01-28  )))))))))))))))))))))))))))))))

.

.

2012-01-28 17:02 . 2012-01-28 17:02 111872 ----a-w- c:\windows\system32\drivers\TrueSight.sys

2012-01-27 15:52 . 2012-01-06 04:19 6557240 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{72BE5690-A7A3-43AB-AEA2-9525F25BFB50}\mpengine.dll

2012-01-23 13:37 . 2012-01-23 13:37 -------- d-----w- c:\users\Mario\AppData\Local\Greentube

2012-01-19 12:05 . 2012-01-19 12:06 -------- d-----w- c:\users\Guest

2012-01-16 10:01 . 2012-01-16 11:45 -------- d-----w- c:\users\Mario\AppData\Local\Microsoft Games

2012-01-16 10:00 . 2012-01-16 10:00 -------- d-----w- c:\program files\Microsoft Games

2012-01-14 15:12 . 2012-01-14 15:12 -------- d-----w- c:\users\Mario\AppData\Roaming\Unity

2012-01-14 15:11 . 2012-01-14 15:14 -------- d-----w- c:\users\Mario\AppData\Local\Unity

2012-01-13 12:20 . 2012-01-13 12:20 -------- d-----w- c:\users\Mario\AppData\Local\Mozilla

2012-01-13 10:22 . 2011-11-17 05:41 134000 ----a-w- c:\windows\system32\drivers\ksecpkg.sys

2012-01-13 10:22 . 2011-11-17 05:34 224768 ----a-w- c:\windows\system32\schannel.dll

2012-01-13 10:22 . 2011-11-17 05:32 1038848 ----a-w- c:\windows\system32\lsasrv.dll

2012-01-13 10:22 . 2011-11-17 05:41 67440 ----a-w- c:\windows\system32\drivers\ksecdd.sys

2012-01-13 10:22 . 2011-11-17 05:39 369352 ----a-w- c:\windows\system32\drivers\cng.sys

2012-01-13 10:22 . 2011-11-17 05:35 314880 ----a-w- c:\windows\system32\webio.dll

2012-01-13 10:22 . 2011-11-17 05:34 100352 ----a-w- c:\windows\system32\sspicli.dll

2012-01-13 10:22 . 2011-11-17 05:34 22016 ----a-w- c:\windows\system32\secur32.dll

2012-01-13 10:22 . 2011-11-17 05:29 22528 ----a-w- c:\windows\system32\lsass.exe

2012-01-13 10:22 . 2011-11-17 05:34 15872 ----a-w- c:\windows\system32\sspisrv.dll

2012-01-12 19:32 . 2012-01-12 19:32 -------- d-----w- c:\program files\Trend Micro

2012-01-11 14:37 . 2011-11-17 05:38 1288472 ----a-w- c:\windows\system32\ntdll.dll

2012-01-11 14:37 . 2011-11-19 14:01 67072 ----a-w- c:\windows\system32\packager.dll

2012-01-11 14:37 . 2011-10-26 04:32 514560 ----a-w- c:\windows\system32\qdvd.dll

2012-01-11 14:37 . 2011-10-26 04:32 1328128 ----a-w- c:\windows\system32\quartz.dll

2012-01-06 17:16 . 2012-01-06 17:18 -------- d-----w- C:\Buziol Games

2012-01-05 13:46 . 2012-01-05 13:46 -------- d-----w- c:\users\Mario\AppData\Local\CrashRpt

2012-01-05 13:30 . 2012-01-05 13:30 -------- d-----w- c:\users\Mario\AppData\Roaming\AnvSoft

2012-01-05 13:30 . 2012-01-05 13:30 -------- d-----w- c:\program files\AnvSoft

2012-01-05 12:12 . 2012-01-05 13:27 -------- d-----w- c:\program files\Garena Classic

2012-01-04 15:11 . 2012-01-05 10:07 -------- d-----w- c:\users\Mario\AppData\Roaming\TeamViewer

2012-01-04 11:57 . 2012-01-28 19:06 -------- d-----w- c:\users\Mario\AppData\Local\LogMeIn Hamachi

2012-01-04 11:56 . 2012-01-04 11:56 -------- d-----w- c:\program files\LogMeIn Hamachi

2011-12-31 23:44 . 2012-01-13 10:28 -------- d-----w- c:\users\Mario\AppData\Roaming\TS3Client

2011-12-31 23:41 . 2011-12-31 23:42 -------- d-----w- c:\program files\TeamSpeak 3 Client

.

.

.

((((((((((((((((((((((((((((((((((((((((   Find3M Report   ))))))))))))))))))))))))))))))))))))))))))))))))))))

.

2012-01-24 20:25 . 2011-09-07 16:20 138160 ----a-w- c:\windows\system32\drivers\PnkBstrK.sys

2012-01-24 20:25 . 2011-09-20 12:04 271200 ----a-w- c:\windows\system32\PnkBstrB.xtr

2012-01-24 20:25 . 2011-09-07 16:10 271200 ----a-w- c:\windows\system32\PnkBstrB.exe

2012-01-21 15:13 . 2011-09-07 16:10 271200 ----a-w- c:\windows\system32\PnkBstrB.ex0

2011-12-15 04:39 . 2011-12-15 04:39 42392 ----a-w- c:\windows\system32\xfcodec.dll

2011-12-10 14:24 . 2011-09-21 14:55 20464 ----a-w- c:\windows\system32\drivers\mbam.sys

2011-12-07 09:08 . 2011-09-19 14:12 236576 ------w- c:\windows\system32\MpSigStub.exe

2011-11-24 04:25 . 2011-12-15 12:21 2342912 ----a-w- c:\windows\system32\win32k.sys

2011-11-05 04:35 . 2011-12-15 12:21 981504 ----a-w- c:\windows\system32\wininet.dll

2011-11-05 04:26 . 2011-12-15 12:21 2048 ----a-w- c:\windows\system32\tzres.dll

2011-11-05 02:48 . 2011-12-15 12:21 1638912 ----a-w- c:\windows\system32\mshtml.tlb

2011-10-30 19:39 . 2011-09-30 07:43 409088 ----a-w- c:\windows\system32\systemcpl.dll

2011-10-30 19:39 . 2011-09-30 07:43 13824 ----a-w- c:\windows\system32\slwga.dll

2011-10-30 19:39 . 2011-09-30 07:43 811520 ----a-w- c:\windows\system32\user32.dll

.

.

------- Sigcheck -------

Note: Unsigned files aren't necessarily malware.

.

[-] 2011-10-30 . 7BD7F45FF37FA0669CD32CA0EF46E22C . 811520 . . [6.1.7601.17514] . . c:\windows\System32\user32.dll

[7] 2010-11-20 . F1DD3ACAEE5E6B4BBC69BC6DF75CEF66 . 811520 . . [6.1.7601.17514] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7601.17514_none_cf3fd62ccb9e983d\user32.dll

[7] 2009-07-14 . 34B7E222E81FAFA885F0C5F2CFA56861 . 811520 . . [6.1.7600.16385] . . c:\windows\winsxs\x86_microsoft-windows-user32_31bf3856ad364e35_6.1.7600.16385_none_cd0ec264ceb014a3\user32.dll

.

(((((((((((((((((((((((((((((((((((((   Reg Loading Points   ))))))))))))))))))))))))))))))))))))))))))))))))))

.

.

*Note* empty entries & legit default entries are not shown 

REGEDIT4

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]

@="{472083B0-C522-11CF-8763-00608CC02F24}"

[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]

2011-09-06 20:45 122512 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll

.

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1174016]

.

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

"HDAudDeck"="c:\program files\VIA\VIAudioi\VDeck\VDeck.exe" [2009-09-21 1681408]

"avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2011-09-06 3722416]

"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]

"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2011-12-24 460872]

"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712]

"WinampAgent"="d:\program files\Winamp\winampa.exe" [2009-03-09 37888]

.

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]

"ConsentPromptBehaviorAdmin"= 0 (0x0)

"ConsentPromptBehaviorUser"= 3 (0x3)

"EnableLUA"= 0 (0x0)

"EnableUIADesktopToggle"= 0 (0x0)

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]

2011-08-15 15:18 1955208 ----a-w- c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PWRISOVM.EXE]

2011-06-15 06:19 307200 ----a-w- c:\program files\PowerISO\PWRISOVM.EXE

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RGSC]

2008-11-14 12:35 305064 ----a-r- c:\program files\Rockstar Games\Rockstar Games Social Club\RGSCLauncher.exe

.

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Steam]

2011-12-25 15:55 1242448 ----a-w- d:\program files\Steam\Steam.exe

.

R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]

R3 cpuz130;cpuz130;c:\users\Mario\AppData\Local\Temp\cpuz130\cpuz_x32.sys [x]

R3 EagleXNt;EagleXNt;c:\windows\system32\drivers\EagleXNt.sys [x]

R3 GGSAFERDriver;GGSAFER Driver;c:\program files\Garena Classic\safedrv.sys [x]

R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys [2010-11-20 15872]

R3 Synth3dVsc;Synth3dVsc;c:\windows\system32\drivers\synth3dvsc.sys [x]

R3 TsUsbFlt;TsUsbFlt; [x]

S1 aswSnx;aswSnx; [x]

S1 aswSP;aswSP; [x]

S2 AdobeARMservice;Adobe Acrobat Update Service;c:\program files\Common Files\Adobe\ARM\1.0\armsvc.exe [2011-06-06 64952]

S2 aswFsBlk;aswFsBlk; [x]

S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2011-09-06 54616]

S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2011-08-15 1361288]

S2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [2011-12-24 652872]

S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2011-10-15 2253120]

S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [2011-10-14 381248]

S2 TeamViewer7;TeamViewer 7;c:\program files\TeamViewer\Version7\TeamViewer_Service.exe [2011-11-29 2916736]

S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-12-10 20464]

S3 NVHDA;Service for NVIDIA High Definition Audio Driver;c:\windows\system32\drivers\nvhda32v.sys [2011-07-07 139880]

S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt86win7.sys [2009-07-13 139776]

.

.

Contents of the 'Scheduled Tasks' folder

.

2012-01-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2368684498-2893261423-2687428133-1000Core.job

- c:\users\Mario\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-19 14:04]

.

2012-01-28 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-2368684498-2893261423-2687428133-1000UA.job

- c:\users\Mario\AppData\Local\Google\Update\GoogleUpdate.exe [2011-09-19 14:04]

.

.

--------------------- LOCKED REGISTRY KEYS ---------------------

.

[HKEY_USERS\S-1-5-21-2368684498-2893261423-2687428133-1000\Software\SecuROM\License information*]

"datasecu"=hex:24,5f,00,36,4b,57,2f,5a,8b,da,98,f4,26,10,a7,2f,f4,4c,ed,4f,9f,

  53,d2,44,95,02,3a,03,da,61,d1,68,52,28,ff,ec,ec,af,56,3a,5c,4d,71,99,b9,98,\

"rkeysecu"=hex:2f,0f,d5,3e,02,2b,06,63,b1,0b,dd,b6,71,e2,54,98

.

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]

@Denied: (Full) (Everyone)

.

Completion time: 2012-01-28  20:14:47

.

Pre-Run: 1.311.686.656 bytes free

Post-Run: 1.123.643.392 bytes free

.

sta je toliko gadno.

je najjednostavnije ali je i zadnje rjesenje