Usporen kompjuter, ne radi Save Target

Iz navedenog mogu zaključiti da imaš virus u računalu!

Napravi avira rescue cd(imaš sticky temu na ovom forumu o tome kako se pravi)  i poskeniraj računalo! Ako to ne upali potraži neposrednu pomoć nekog iskusnijeg korisnika!

pa daj joj malo objasni,ako mošeš..i ja mislim da ima neki virus koji još stoji,norton ga nije detektirao..

Hajde pomozi mi malo kako da to uradim ja ti baš nisam stručnjak za ovu tehnologiju

Skinula sam i pronašao je ovo:

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 21:50:26, on 1.9.2009

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Boot mode: Normal

Running processes:

C:\windows\System32\smss.exe

C:\windows\system32\winlogon.exe

C:\windows\system32\services.exe

C:\windows\system32\lsass.exe

C:\windows\system32\svchost.exe

C:\windows\System32\svchost.exe

C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

C:\windows\system32\spoolsv.exe

C:\windows\Explorer.EXE

C:\Program Files\Java\jre6\bin\jqs.exe

C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe

C:\Program Files\CDBurnerXP\NMSAccessU.exe

C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

C:\windows\system32\svchost.exe

C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

C:\Program Files\Canon\CAL\CALMAIN.exe

C:\windows\AGRSMMSG.exe

C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

C:\WINDOWS\system32\igfxtray.exe

C:\WINDOWS\system32\hkcmd.exe

C:\WINDOWS\system32\igfxpers.exe

C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe

C:\Program Files\Common Files\Symantec Shared\ccApp.exe

C:\windows\system32\ctfmon.exe

C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

C:\Program Files\Symantec\Symantec Endpoint Protection\SmcGui.exe

C:\Documents and Settings\Emir\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

c:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe

C:\windows\system32\wuauclt.exe

C:\Documents and Settings\Emir\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Emir\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Emir\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Emir\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Documents and Settings\Emir\Local Settings\Application Data\Google\Chrome\Application\chrome.exe

C:\Program Files\Symantec\Symantec Endpoint Protection\SymCorpUI.exe

C:\WINDOWS\system32\msiexec.exe

C:\Program Files\Symantec\Symantec Endpoint Protection\SavUI.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll

O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll

O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe

O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\SoundMAX\SMax4PNP.exe

O4 - HKLM\..\Run: [SoundMAX] C:\Program Files\Analog Devices\SoundMAX\Smax4.exe /tray

O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe

O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe

O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe

O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe

O4 - HKLM\..\Run: [QlbCtrl] %ProgramFiles%\Hewlett-Packard\HP Quick Launch Buttons\QlbCtrl.exe /Start

O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\RunOnce: [Register C:\Program Files\Symbian\Shared\SymbianConnectRunTime\SCBALSBConnection.dll] "C:\WINDOWS\system32\regsvr32.exe" /s "C:\Program Files\Symbian\Shared\SymbianConnectRunTime\SCBALSBConnection.dll"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Emir\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [SUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll

O17 - HKLM\System\CCS\Services\Tcpip\..\{A1F114C6-7445-42F6-AA16-C9A63D66AA69}: NameServer = 77.238.208.3 77.238.208.4

O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

O23 - Service: Canon Camera Access Library 8 (CCALib8) - Canon Inc. - C:\Program Files\Canon\CAL\CALMAIN.exe

O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe

O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe

O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE

O23 - Service: Nero BackItUp Scheduler 4.0 - Nero AG - C:\Program Files\Common Files\Nero\Nero BackItUp 4\NBService.exe

O23 - Service: NMSAccessU - Unknown owner - C:\Program Files\CDBurnerXP\NMSAccessU.exe

O23 - Service: Symantec Management Client (SmcService) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\Smc.exe

O23 - Service: Symantec Network Access Control (SNAC) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\SNAC.EXE

O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe

O23 - Service: Symantec Endpoint Protection (Symantec AntiVirus) - Symantec Corporation - C:\Program Files\Symantec\Symantec Endpoint Protection\Rtvscan.exe

--

End of file - 7853 bytes

odlično,sad će ga neko pogledat..od doktora

Gdje da je nađem ima li neki link da ne lutam internetom

Ne da mi da ga izbrišem samo sam mogla deinstalirati update

Sta je to napad cura/hackera? :)

Još proskeniraj i s kaspersky-em (po meni najbolji av).

http://www.kaspersky.com/virusscanner

dajte ljudi nemojte pretjerivat,izgubiće se..nek ide korak po korak..deinstaliće nortona,stavit aviru..pa onda dalje
ima na kompu ccleaner i glary registry repair..

probaj u ccleaneru pod alati- -deinstalacija -označi ga-pokreni deinstalaciju

izbacuje mi ovo " THE FEATURE YOU ARE TRYING TO USE IS ON A NETWORK RESOURCE THAT IS UNAVAILABLE. CLICK OK TO TRY AGAIN OR ENTER AN ALTERNATE PATH TO A FOLDER CONTAINING THE INSTALLATION PACKAGE "SYMANTEC ANTIVIRUS" IN THE BOX BELOW. 

F:\Symantec_Endpoint_Protection_11.0.4000_MR4_AllWin_EN_CD1\SEP\

Moze probat skenirat u Safe Mode da sa Malwarebites i Superantyspyware normalno Quick Scan ce bit dosta sa oba programa, no ima i dodatni problem kad en moze normalno deinstalirat taj Norton nesretni!

a ti misliš da bi ga morala deinstalirati?

imjpmig.exe je Microsoft Input Method Editor - koristi se za lakši unos npr. kineskih znakova - i dio je MS Officea.

nwprovau.dll je klijent servis za Netware mreže - dio je Windowsa.

Trebala bi ga maknut da nije uopce efikasan zapravo Avira je bolji izbor kaj se tice detekcije gamadi to sigurno. No kad ga ne moze normalno maknut eto problema a to nije prvi pu da se događa sa tim programom on ima svoj put meni se cini i ne sljivi nikoga tj ne da se s kompa samo tak jednostavno. Trebat ce joj poseban alat tj Norton Removal Tool koji ce ga s kompa skinut valjda evo  link ima ga na popisu dole i nek to obavi trebat ce se registrirat, opet cudno cemu to ak samo hoces maknut program svasta glupost bezvezna. Meni se cini da je to Rotkit a to ne moze samo tak lako maknut bit ce tu problema ima alata koji to mogu maknut  ko Combofix ali on je pre opasan ak nekaj pođe po zlu odu windowsi u tren oka to niej obican alat ko vecina programa pa niej za svakog definitivno!

http://www.symantec.com/norton/downloads/index.jsp