[excited]

c: asub nero 6 install fail, mida tahaks maha lasta a ei saa kuna kui avan C: ketta jookseb arvuti totaalselt umbe ja hiljem nöitab et not responding

[raul141]

shvost.exe on näiteks 3 tk.-mul samamodi ,3 tükki tervelt.msnmsgr.exe -lõpetasi tegumi ja läks arvuti kiiremaks tuntavalt kohe,kurat rav ikka näitab va mozillat olgugi otsingust saadud mozilla tõmbasi maha,avg aga seda viirusena ei võta!

[excited]

tegin temporary internet files tühjaks, siis võtsin lahti propertis ja kukkus faile lugema näitab mingi 200 000 vähemalt 4 GB(ikka leiab juurde neid). read only oli nagu kinni (roheline, ei olnud linnukest) tegin selle kastikese tühjaks siis kukkus faile üle kandma (applying attributes to: )kas lasen seda teha tal näitab mingi 5 tundi . krdi xp

[excited]

leiab koguaeg faile juurde ja näitab mingi 8 tundi et need applyda. mis krdi asi see on?????

[Elof]

Võtab maha kõigil failidel' read-only .
Jäta see jama pooleli.

[excited]

selleks pean ju tegema nii: temporary internet files parempoolne hiire klõps-> propertis-> attributes: read only võtan linnukese ära?????

kui on nii, siis hakkabki seda jama tegema ja kui katkestan on folder ikka tühi

[excited]

mis ma siis tegema pean, seal on mingi 6GB jura, mida ma isegi ei näe, tahaks ära kustuta selle kraami

[Elof]

mh' exploreris : tools -> folder options -> view
Show hidden files and folders
Hide protected operating system files
OK

[Alfredo]

Sisuliselt lihtsam oleks väike format c: teha äkki, selle mitmepäevase jändamise asemel??

[excited]

[excited]

[HacaX]

Kas mitte Wini delete ka read-only failidele mõjunud (s.t. esimese juures teatab "RO peal, et kas ikka kustutan?", pane YES, siis ei tohiks rohkem pärida)? Ja kustuta Shift-Del, et ikka kohe maha laseks ja ei hakkaks esmalt Recycle Bini toppima.

[excited]

sain siis lõpuks selle temporary internet files kausta "enam vähem tühjaks"(15,6MB mingit jama on ikka sees, mida ei näita). proovisin uuesti viirust otsida a peatub 4-nda faili juures milleks on desktop.ini(või .dat täpselt ei mäleta)

[excited]

nüüd ragistas terve arvuti läbi(50000 faili) aga peatus ikka index.dat juures. kas on võimalik, et antiviirus paneb segast?

[excited]

Scanning Report
11 March 2005 12:11:07

Options
Target:

* C:\

Action:

* Disinfect infected files

Scanning options:

* Scan all files
* Scan inside archives: on

Scanning Engines:

* F-Secure F-PROT: 3.12.410, 2005-03-10
* F-Secure AVP: 4.0.164.4160, 2005-03-11
* F-Secure Orion: 1.02.21, 2005-03-08

Results
Boot Sectors

* Scanned: 1
* Infected: 0
* Suspected: 0
* Disinfected: 0

Files

* Scanned: 45014
* Infected: 0
* Suspected: 0
* Disinfected: 0
* Renamed: 0
* Deleted: 0
* Quarantined: 0

Report

* Cannot read from file C:\nero6605.exe\Nero\Nerodeu.nls [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\1e61b927-8c5044d4-ae889c51-dd586cd3.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\2c7682e2-d38b40b0-afd3ab3f-1119f089.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\36b69eab-4da7410e-a9233458-ff920a91.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\3e837f70-d5764187-951f9de3-34cf0129.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\541c03d3-cbfb40c0-b0385740-afec9f4.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\73abe042-a4514a93-853113e3-8a42a686.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\7c25acb5-fb1c458e-87732cad-5b483c26.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\9ccd71-dd314df9-b871a1b2-adb7d13c.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\9d61817f-45664ed8-9445daa0-a46641de.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\a1d2638d-b23f429f-b0afdee5-a3350131.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\c62798c7-f50a4226-a88470d-37015a98.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\d8684a6c-a1a14e4a-93c59908-d63ba37e.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\d9608ef8-5d0d4927-a0091465-535f57ed.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero Wave Editor\Presets\fed38076-c8f547a7-9f8e0da5-8e44486.pre [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\ImageDrive\imagedrv.sys [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\setup\Eula_deu.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\setup\Eula_esp.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\setup\Eula_fra.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\setup\Eula_ita.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\setup\Eula_nld.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\setup\Eula_ptg.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\setup\Eula_sve.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero\Nero.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\Nero\Nerodeu.txt [F-Secure F-PROT]
* Cannot read from file C:\nero6605.exe\VersionInfo.txt [F-Secure F-PROT]
* Cannot open file C:\pagefile.sys
* Cannot open file C:\WINDOWS\system32\config\default
* Cannot open file C:\WINDOWS\system32\config\SAM
* Cannot open file C:\WINDOWS\system32\config\SECURITY
* Cannot open file C:\WINDOWS\system32\config\system
* Cannot open file C:\WINDOWS\$NtUninstallQ828026$\msdxm.ocx
* Cannot open file C:\WINDOWS\$NtUninstallKB833998$\shell32.dll
* Cannot open file C:\WINDOWS\$NtUninstallKB829558$\dao360.dll
* Cannot open file C:\WINDOWS\$NtUninstallKB828035$\msgsvc.dll
* Cannot open file C:\WINDOWS\$NtUninstallKB828028$\msasn1.dll
* Cannot open file C:\WINDOWS\$NtUninstallKB826942$\dhcpcsvc.dll
* Cannot open file C:\WINDOWS\$NtUninstallKB826942$\wzcdlg.dll
* Cannot open file C:\WINDOWS\$NtUninstallKB826939$\accwiz.exe
* Cannot open file C:\WINDOWS\$NtUninstallKB824141$\user32.dll
* Cannot open file C:\Program Files\F-Secure\Common\policy.ipf
* Cannot open file C:\Program Files\F-Secure\BackWeb\7681197\Users\Default\Data\chandir.dat
* Cannot open file C:\Program Files\F-Secure\BackWeb\7681197\Users\Default\Data\D0000000.FCS
* Cannot open file C:\Program Files\F-Secure\BackWeb\7681197\Users\Default\Data\L0000003.FCS
* Cannot open file C:\Program Files\F-Secure\BackWeb\7681197\Users\Default\Data\prs.dat
* Cannot open file C:\Program Files\F-Secure\BackWeb\7681197\Users\Default\Data\storydb.dat
* Cannot open file in archive C:\Program Files\eMule\Temp\007.part\cd2/03 - Oasis - Acquisce.mp3
* Cannot open file in archive C:\Program Files\eMule\Temp\007.part\cd2/01 - Oasis - Stand By Me.mp3
* Cannot open file C:\Documents and Settings\NetworkService\NTUSER.DAT
* Cannot open file C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
* Cannot open file C:\Documents and Settings\LocalService\NTUSER.DAT
* Cannot open file C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
* Cannot open file C:\Documents and Settings\kasutajanimi\ntuser.dat

mis nende failidega on mida ta ei suutnud avada või välja lugeda, kas see on usaldusväärne et midagi ei leidnid.

index.dat tegin puhtaks track eraseriga

[Elof]

Need peaks olema "lukustatud" failid, ilmselt olid hetkel kasutusel. Pealegi pole ükski neist failidest "kahtlases" kohas - seega ilmselt kõik puhas.

[Tomek]

Ava: Start->run
tipi "cmd" ja vajuta enter
tipi "cd.." ja vajuta enter
tipi "cd.." ja vajuta enter
tipi "erase nero6605.exe" ja vajuta enter
tipi "exit" ja vajuta enter

Jutumärkides on see osa, mida tuleb kirjutada. Jutumärke ennast pole vaja.

[excited]

tänud!!!! arvuti puhas ja c: avamisel enam kinni ei jookse.

[Sirius]

üks asi, mida tee on keera system rstore kinni - sinna need troojad ronivad vägagi tihti.