Kako se riješiti Win32/Agent.ODG virusa

http://www.wilderssecurity.com/showthread.php?t=235658

probaj s ovim

hvala ^^ na pomoci ... idem sad instalirat taj programic i vidjet cemo sto ce biti xD !

Nema na čemu.

Pokušaj s ovim.

Isključi sistem restore prije skeniranja, a možeš skinuti combofix i njime probati

http://www.bleepingcomputer.com/combofix/how-to-use-combofix

na ovoj stranici imaš linkove za skidanje programa i kako program radi .

e sad moj buraz je napravio boot - to jest - Norton Ghost 11 DISK IMAGE - BACK UP

dali da ja sad reebootam svoje windowse ili neka drugo xD ???

ja se ne kuzim u te viruse -... :( ali sam sretan kad ih unistavam ...

Back Up mi je na D - imam dvije particije - C i D

na C su mi windowsi i programi za windowse sveukupno 20-30gb

na D su mi muzika, filmovi, slike i ta sranja... i igrice... e tam mi je i taj Ghost koji kada resetam laptop da ubacim CD mi otvori program i ja ga mogu reebooutat ... sta na napravim xD ^^ ???

OMG - kako dosadno gamad jedna od Trojana ...

ili da skinem jos koji programic pa da nesto napravim neznam sto xD ...

ili da reinstalliram nod32 pa ponovno instaliram pa skeniram i skinem update ...

ocekujem pdgovore i zahvaljujem na pomoci ...

e ljudi jel bi moglo biti moguce da mi NOD32 to prikazuje jer ga nisam updato - moj frend mi je dao da ja sa njega updatam ne direktno sa njihove strance - mozda je to problem ?

samo prijedlog

HVALA na odgovorima iako ih jos uvijek ocekujem ... xD :)...

Ak koristis stari NOD 3 onda ga zamjeni s novom verzijom 4 pa ces vidit onda a krekirani Nod nemoj koristit nikad to ne valja!!!

A da izbrišeš NOD32 i staviš AVIRU Free ako ti je NOD32 pirat?

scan je nasao ovo... hvala na pomoci ...

Avira AntiVir Personal
Report file date: 28. travanj 2009  20:54

Scanning for 1369743 virus strains and unwanted programs.

Licensee        : Avira AntiVir Personal - FREE Antivirus
Serial number   : 0000149996-ADJIE-0000001
Platform        : Windows XP
Windows version : (Service Pack 3)  [5.1.2600]
Boot mode       : Normally booted
Username        : SYSTEM
Computer name   : TOOFAST

Version information:
BUILD.DAT       : 9.0.0.394     17962 Bytes   17.4.2009 11:20:00
AVSCAN.EXE      : 9.0.3.5      466689 Bytes   28.4.2009 18:50:47
AVSCAN.DLL      : 9.0.3.0       40705 Bytes   27.2.2009 08:58:24
LUKE.DLL        : 9.0.3.2      209665 Bytes   20.2.2009 09:35:49
LUKERES.DLL     : 9.0.2.0       12033 Bytes   27.2.2009 08:58:52
ANTIVIR0.VDF    : 7.1.0.0    15603712 Bytes  27.10.2008 10:30:36
ANTIVIR1.VDF    : 7.1.2.12    3336192 Bytes   11.2.2009 18:33:26
ANTIVIR2.VDF    : 7.1.3.63    1588224 Bytes   16.4.2009 18:50:47
ANTIVIR3.VDF    : 7.1.3.124    211456 Bytes   28.4.2009 18:50:47
Engineversion   : 8.2.0.156
AEVDF.DLL       : 8.1.1.0      106868 Bytes   27.1.2009 15:36:42
AESCRIPT.DLL    : 8.1.1.77     381306 Bytes   28.4.2009 18:50:47
AESCN.DLL       : 8.1.1.10     127348 Bytes   28.4.2009 18:50:47
AERDL.DLL       : 8.1.1.3      438645 Bytes  29.10.2008 16:24:41
AEPACK.DLL      : 8.1.3.14     397685 Bytes   28.4.2009 18:50:47
AEOFFICE.DLL    : 8.1.0.36     196987 Bytes   26.2.2009 18:01:56
AEHEUR.DLL      : 8.1.0.122   1737080 Bytes   28.4.2009 18:50:47
AEHELP.DLL      : 8.1.2.2      119158 Bytes   26.2.2009 18:01:56
AEGEN.DLL       : 8.1.1.39     348532 Bytes   28.4.2009 18:50:47
AEEMU.DLL       : 8.1.0.9      393588 Bytes   9.10.2008 12:32:40
AECORE.DLL      : 8.1.6.9      176500 Bytes   28.4.2009 18:50:47
AEBB.DLL        : 8.1.0.3       53618 Bytes   9.10.2008 12:32:40
AVWINLL.DLL     : 9.0.0.3       18177 Bytes  12.12.2008 06:47:59
AVPREF.DLL      : 9.0.0.1       43777 Bytes   5.12.2008 08:32:15
AVREP.DLL       : 8.0.0.3      155905 Bytes   20.1.2009 12:34:28
AVREG.DLL       : 9.0.0.0       36609 Bytes   5.12.2008 08:32:09
AVARKT.DLL      : 9.0.0.3      292609 Bytes   28.4.2009 18:50:47
AVEVTLOG.DLL    : 9.0.0.7      167169 Bytes   30.1.2009 08:37:08
SQLITE3.DLL     : 3.6.1.0      326401 Bytes   28.1.2009 13:03:49
SMTPLIB.DLL     : 9.2.0.25      28417 Bytes    2.2.2009 06:21:33
NETNT.DLL       : 9.0.0.0       11521 Bytes   5.12.2008 08:32:10
RCIMAGE.DLL     : 9.0.0.21    2438401 Bytes    9.2.2009 09:45:45
RCTEXT.DLL      : 9.0.37.0      86785 Bytes   28.4.2009 18:50:47

Configuration settings for the scan:
Jobname.............................: Complete system scan
Configuration file..................: c:\program files\avira\antivir desktop\sysscan.avp
Logging.............................: low
Primary action......................: interactive
Secondary action....................: ignore
Scan master boot sector.............: on
Scan boot sector....................: on
Boot sectors........................: C:, D:,
Process scan........................: on
Scan registry.......................: on
Search for rootkits.................: on
Integrity checking of system files..: off
Scan all files......................: All files
Scan archives.......................: on
Recursion depth.....................: 20
Smart extensions....................: on
Macro heuristic.....................: on
File heuristic......................: medium
Deviating risk categories...........: +APPL,

Start of the scan: 28. travanj 2009  20:54

Starting search for hidden objects.
c:\windows\system32\ovfstheivhodypywilrdqwmiexqlkhvtwxhguo.dll
    [INFO]      The file is not visible.
    [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    [INFO]      No SpecVir entry was found!
    [NOTE]      A backup was created as '4a5d51ba.qua'  ( QUARANTINE )
c:\windows\system32\ovfsthhdpfquwpfywthkdcibltiqjmieplrxuj.dat
    [INFO]      The file is not visible.
    [NOTE]      A backup was created as '4b393003.qua'  ( QUARANTINE )
c:\windows\system32\ovfsthmpctgqvknofiixejkslmvlitipnhoepn.dat
    [INFO]      The file is not visible.
    [NOTE]      A backup was created as '4b3bd823.qua'  ( QUARANTINE )
c:\windows\system32\ovfsthnomqvalqrgjkhqxatukpqvaxcgknnfxq.dll
    [INFO]      The file is not visible.
    [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    [INFO]      No SpecVir entry was found!
    [NOTE]      A backup was created as '4b35e0c3.qua'  ( QUARANTINE )
c:\windows\system32\ovfsthpjlwvwykyqsahcsjicdowumwrbnvkmsx.dll
    [INFO]      The file is not visible.
    [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    [INFO]      No SpecVir entry was found!
    [NOTE]      A backup was created as '4a5d51bb.qua'  ( QUARANTINE )
c:\windows\system32\drivers\ovfsthxrwasbacxhhwulimyxyqmuxypfjxjvwi.sys
    [INFO]      The file is not visible.
    [DETECTION] Contains recognition pattern of the RKIT/Agent.iuc root kit
    [INFO]      No SpecVir entry was found!
    [NOTE]      A backup was created as '4b305084.qua'  ( QUARANTINE )
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ovfsthtyxtuirqpkltfqxwmltsrwrrsqrovbrp\main
    [INFO]      The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ovfsthtyxtuirqpkltfqxwmltsrwrrsqrovbrp\modules
    [INFO]      The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ovfsthtyxtuirqpkltfqxwmltsrwrrsqrovbrp\start
    [INFO]      The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ovfsthtyxtuirqpkltfqxwmltsrwrrsqrovbrp\type
    [INFO]      The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ovfsthtyxtuirqpkltfqxwmltsrwrrsqrovbrp\group
    [INFO]      The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ovfsthtyxtuirqpkltfqxwmltsrwrrsqrovbrp\imagepath
    [INFO]      The registry entry is invisible.
HKEY_LOCAL_MACHINE\System\ControlSet001\Services\ovfsthtyxtuirqpkltfqxwmltsrwrrsqrovbrp\inst
    [INFO]      The registry entry is invisible.
'40818' objects were checked, '13' hidden objects were found.

The scan of running processes will be started
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'firefox.exe' - '1' Module(s) have been scanned
Scan process 'avscan.exe' - '1' Module(s) have been scanned
Scan process 'wuauclt.exe' - '1' Module(s) have been scanned
Scan process 'avcenter.exe' - '1' Module(s) have been scanned
Scan process 'Com4QLBEx.exe' - '1' Module(s) have been scanned
Scan process 'alg.exe' - '1' Module(s) have been scanned
Scan process 'wmiprvse.exe' - '1' Module(s) have been scanned
Scan process 'hpqwmiex.exe' - '1' Module(s) have been scanned
Scan process 'CCC.exe' - '1' Module(s) have been scanned
Scan process 'wdfmgr.exe' - '1' Module(s) have been scanned
Scan process 'MOM.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'PnkBstrB.exe' - '1' Module(s) have been scanned
Scan process 'PnkBstrA.exe' - '1' Module(s) have been scanned
Scan process 'MDM.EXE' - '1' Module(s) have been scanned
Scan process 'jqs.exe' - '1' Module(s) have been scanned
Scan process 'mDNSResponder.exe' - '1' Module(s) have been scanned
Scan process 'avguard.exe' - '1' Module(s) have been scanned
Scan process 'agrsmsvc.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'BTStackServer.exe' - '1' Module(s) have been scanned
Scan process 'BTTray.exe' - '1' Module(s) have been scanned
Scan process 'btdna.exe' - '1' Module(s) have been scanned
Scan process 'ctfmon.exe' - '1' Module(s) have been scanned
Scan process 'daemon.exe' - '1' Module(s) have been scanned
Scan process 'avgnt.exe' - '1' Module(s) have been scanned
Scan process 'reader_sl.exe' - '1' Module(s) have been scanned
Scan process 'jusched.exe' - '1' Module(s) have been scanned
Scan process 'smax4pnp.exe' - '1' Module(s) have been scanned
Scan process 'QLBCTRL.exe' - '1' Module(s) have been scanned
Scan process 'SynTPEnh.exe' - '1' Module(s) have been scanned
Scan process 'sched.exe' - '1' Module(s) have been scanned
Scan process 'explorer.exe' - '1' Module(s) have been scanned
Scan process 'scardsvr.exe' - '1' Module(s) have been scanned
Scan process 'spoolsv.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'btwdins.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'svchost.exe' - '1' Module(s) have been scanned
Scan process 'ati2evxx.exe' - '1' Module(s) have been scanned
Scan process 'lsass.exe' - '1' Module(s) have been scanned
Scan process 'services.exe' - '1' Module(s) have been scanned
Scan process 'winlogon.exe' - '1' Module(s) have been scanned
Scan process 'csrss.exe' - '1' Module(s) have been scanned
Scan process 'smss.exe' - '1' Module(s) have been scanned

49 processes with 49 modules were scanned

Starting master boot sector scan:

Start scanning boot sectors:
Boot sector 'C:\'
    [INFO]      No virus was found!
Boot sector 'D:\'
    [INFO]      No virus was found!

Starting to scan executable files (registry).

The registry was scanned ( '63' files ).


Starting the file scan:

Begin scan in 'C:\'
C:\hiberfil.sys
    [WARNING]   The file could not be opened!
    [NOTE]      This file is a Windows system file.
    [NOTE]      This file cannot be opened for scanning.
C:\pagefile.sys
    [WARNING]   The file could not be opened!
    [NOTE]      This file is a Windows system file.
    [NOTE]      This file cannot be opened for scanning.
C:\WINDOWS\SoftwareDistribution\Download\32828a5696479ffed0e7b75fbb62e8c0\BITA32.tmp
  [0] Archive type: CAB (Microsoft)
    - PRN2KXP\cnm.in_
      [WARNING]   No further files can be extracted from this archive. The archive will be closed
    [WARNING]   No further files can be extracted from this archive. The archive will be closed
C:\WINDOWS\system32\drivers\sptd.sys
    [WARNING]   The file could not be opened!
Begin scan in 'D:\' <Local Disk>
D:\Music\Trip Lee\Other\behold the spirit trip lee.mp3
    [DETECTION] Is the TR/Dldr.WMA.Wimad.N Trojan

Beginning disinfection:
D:\Music\Trip Lee\Other\behold the spirit trip lee.mp3
    [DETECTION] Is the TR/Dldr.WMA.Wimad.N Trojan
    [NOTE]      The file was moved to '4a5f5cfb.qua'!


End of the scan: 28. travanj 2009  21:44
Used time: 49:25 Minute(s)

The scan has been done completely.

  10795 Scanned directories
 402175 Files were scanned
      5 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      0 files were deleted
      0 Viruses and unwanted programs were repaired
      7 Files were moved to quarantine
      0 Files were renamed
      3 Files cannot be scanned
 402167 Files not concerned
   2993 Archives were scanned
      5 Warnings
      9 Notes
  40818 Objects were scanned with rootkit scan
     13 Hidden objects were found

Spyware Doctor mu ne treba uopce niti Pc Tools Internet Security oni nisu besplatni i nisu nista posebno uopce sve se moze rijesit s besplatnim programima bez problema!!!