Problemi na externom hardu

Pozzz. Razboleo mi se externi hard, tacnije samo na njemu sam do sada primetio simptome. Neki ljudi su ovde imali slicne probleme ali moj je malo drugaciji pa zato otvaram novu temu. Simptomi su stalno u jednom folderu mada se (povremeno pojavljuju i u drugima) da umesto fajlova koje sam nekad ostavio u tom folderu zaticem brdo fajlova i foldera cija su imena niz karaktera i koji sada kao zauzimaju deset puta vise prostora. Skenirao sam se svim i svacim od nod32 koji mi je i inace bio na racunaru pa preko spybot sd, malwarebytes, i skoro svega sto sam u ostalim temama video da ljudi preporucuju i po njima izgleda savrseno zdravo. Slao sam i log na analizu na preporucenom siteu i tu je kao sve ok.. Bunario sam nesto i rucno, brisao, menjao atribute ... Ali da se ne rasplinjujem sa zapazanjima i iskustvima iz zadnje recenice jer mozda neko vec zna o cemu se radi ili bar put ka resenju pa da ne smaram bespotrebno.

Pozdrav nemijazz,
Da li ti se problem javlja i na ostalim USB diskovima (flash...)? Ako se javlja postoji velika sansa da je tvoj racunar zarazen nekom vrstom malware-a (verovatno nekim trojancem).

Preuzmi program RSIT, pokreni ga i na pitanje odgovori sa Continue. Na kraju skeniranja otvoritice se log.txt i njega iskopiraj ovde, da vidimo. Ako ga slucajno zatvoris taj file ce biti sacuvan kao C:\rsit\log.txt.

Ovde ne pise samo sa kim pijem kafu! Ili mozda pise.... :)


Logfile of random's system information tool 1.06 (written by random/random)
Run by nemanja at 2009-03-27 18:35:00
Microsoft Windows XP Professional Service Pack 2
System drive C: has 5 GB (12%) free of 39 GB
Total RAM: 255 MB (19% free)

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 18:35:41, on 27.3.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\Fmctrl.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\nemanja\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Documents and Settings\nemanja\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\nemanja\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\nemanja\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\nemanja\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\nemanja\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\nemanja\My Documents\Downloads\RSIT.exe
C:\Documents and Settings\nemanja\My Documents\Downloads\RSIT.exe
C:\Program Files\trend micro\nemanja.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R3 - URLSearchHook: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: MyPlayCity Toolbar - {4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - C:\Program Files\MyPlayCity\tbMyPl.dll
O4 - HKLM\..\Run: [FmctrlTray] Fmctrl.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\nemanja\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~1\OFFICE10\EXCEL.EXE/3000
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: C:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://www.update.microsoft.co...t/wuweb_site.cab?1193236244421
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://www.update.microsoft.co...t/muweb_site.cab?1193236221390
O17 - HKLM\System\CCS\Services\Tcpip\..\{BAA2242B-5B1B-4F5E-A919-543BC5AD0CDC}: NameServer = 192.168.1.2
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

--
End of file - 5470 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\Tune-up Application Start.job
C:\WINDOWS\tasks\AppleSoftwareUpdate.job
C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1343024091-920026266-1417001333-1005.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3}]
Adobe PDF Reader Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll [2009-02-27 61816]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2009-02-27 75128]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{22BF413B-C6D2-4d91-82A9-A0F997BA588C}]
Skype add-on (mastermind) - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2008-11-07 1088296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac}]
MyPlayCity Toolbar - C:\Program Files\MyPlayCity\tbMyPl.dll [2009-01-20 1881112]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{AA58ED58-01DD-4d91-8333-CF10577473F7}]
Google Toolbar Helper - c:\program files\google\googletoolbar1.dll [2005-09-10 770048]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{DBC80044-A445-435b-BC74-9C25C1C588A9}]
Java(tm) Plug-In 2 SSV Helper - C:\Program Files\Java\jre6\bin\jp2ssv.dll [2009-03-23 35840]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{E7E6F031-17CE-4C07-BC86-EABFE594F69C}]
JQSIEStartDetectorImpl Class - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll [2009-03-23 73728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
{2318C2B1-4965-11d4-9B18-009027A5CD4F} - &Google - c:\program files\google\googletoolbar1.dll [2005-09-10 770048]
{4724c5d8-dfa7-417a-a2f5-1eabfee9b4ac} - MyPlayCity Toolbar - C:\Program Files\MyPlayCity\tbMyPl.dll [2009-01-20 1881112]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"FmctrlTray"=C:\WINDOWS\system32\Fmctrl.EXE [2000-07-05 262144]
"NvCplDaemon"=C:\WINDOWS\system32\NvCpl.dll [2006-10-22 7700480]
"nwiz"=nwiz.exe /install []
"NvMediaCenter"=C:\WINDOWS\system32\NvMcTray.dll [2006-10-22 86016]
"egui"=C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [2008-03-13 1443072]
"Adobe Reader Speed Launcher"=C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe [2009-02-27 35696]

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"=C:\WINDOWS\system32\ctfmon.exe [2004-08-04 15360]
"Google Update"=C:\Documents and Settings\nemanja\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2009-03-06 133104]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FmctrlTray]
C:\WINDOWS\system32\Fmctrl.EXE [2000-07-05 262144]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\iTunesHelper]
C:\Program Files\iTunes\iTunesHelper.exe [2009-01-06 290088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoRepair]
C:\Program Files\Logitech\Video\ISStart.exe [2004-12-14 458752]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogitechVideoTray]
C:\Program Files\Logitech\Video\LogiTray.exe [2004-12-14 217088]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
C:\Program Files\Messenger\msmsgs.exe [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
C:\WINDOWS\system32\NeroCheck.exe [2001-07-09 155648]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nMTaskBarService]
C:\WINDOWS\nMtsk.exe [2003-07-22 90112]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NVIEW]
nview.dll,nViewLoadHook []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\nwiz]
nwiz.exe /install []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe [2006-07-21 98304]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
C:\Program Files\QuickTime\QTTask.exe [2009-01-05 413696]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoveIT Pro XT]
C:\Program Files\InCode Solutions\RemoveIT Pro v4-Trial\removeit.exe [2007-02-27 589824]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sony Ericsson PC Suite]
C:\Program Files\Sony Ericsson\Mobile2\Application Launcher\Application Launcher.exe [2007-06-13 528384]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SoundMan]
C:\WINDOWS\SOUNDMAN.EXE [2003-03-27 53248]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Spyware Doctor]
C:\Program Files\Spyware Doctor\swdoctor.exe /Q []

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpywareTerminator]
C:\PROGRA~1\SPYWAR~1\SpywareTerminatorShield.exe [2009-03-11 2233856]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
C:\Program Files\Java\jre6\bin\jusched.exe [2009-03-23 148888]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe [2009-03-27 1830128]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Gamma Loader.exe.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Enable Labtec Wireless Desktop.lnk]
C:\PROGRA~1\LABTEC~1\MagicKey.exe [2004-02-03 258048]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Microsoft Office.lnk]
C:\PROGRA~1\MICROS~1\Office10\Osa.exe [2001-02-13 83360]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^NkbMonitor.exe.lnk]
C:\PROGRA~1\Nikon\PICTUR~1\NKBMON~1.EXE [2006-11-29 118784]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^NkvMon.exe.lnk]
[]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Watch.lnk]
C:\PROGRA~1\BEARPA~1\Driver\WATCH.exe [2003-03-24 380928]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^nemanja^Start Menu^Programs^Startup^Nikon Monitor.lnk]
C:\PROGRA~1\COMMON~1\Nikon\Monitor\NKMONI~1.EXE [2007-10-18 479232]

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AVPCC"=2
"WZCSVC"=2
"wscsvc"=2
"mnmsrvc"=3
"Messenger"=2
"TrkWks"=2
"MSDTC"=3
"SharedAccess"=2
"SamSs"=2
"NVSvc"=2
"IDriverT"=3
"wuauserv"=2
"AntiVirService"=2
"AntiVirScheduler"=2
"TapiSrv"=3
"Apple Mobile Device"=2
"sp_rssrv"=2
"iPod Service"=3
"sp_clamsrv"=3
"srservice"=2
"spupdsvc"=2
"JavaQuickStarterService"=2
"Bonjour Service"=2

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll [2008-12-22 356352]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad]
WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll [2006-05-09 52224]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"=C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\network\UploadMgr]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=323
"NoDriveAutoRun"=67108863
"NoDrives"=0

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveAutoRun"=
"NoDriveTypeAutoRun"=
"NoDrives"=

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\eMule\emule.exe"="C:\Program Files\eMule\emule.exe:*:Enabled:eMule"
"C:\Program Files\iTunes\iTunes.exe"="C:\Program Files\iTunes\iTunes.exe:*:Enabled:iTunes"
"C:\Program Files\Bonjour\mDNSResponder.exe"="C:\Program Files\Bonjour\mDNSResponder.exe:*:Enabled:Bonjour"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ae52b104-0e39-11dd-8746-001802f6ebbe}]
shell\Auto\command - Autorun.exe
shell\AutoRun\command - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Autorun.exe


======List of files/folders created in the last 1 months======

2009-03-27 18:35:06 ----D---- C:\Program Files\trend micro
2009-03-27 18:35:00 ----D---- C:\rsit
2009-03-27 10:22:13 ----A---- C:\WINDOWS\SchedLog.Txt
2009-03-27 10:18:47 ----D---- C:\WINDOWS\temp
2009-03-27 10:18:45 ----A---- C:\ComboFix.txt
2009-03-27 10:14:52 ----A---- C:\WINDOWS\ntbtlog.txt
2009-03-27 10:14:10 ----D---- C:\ComboFix
2009-03-27 01:17:49 ----A---- C:\WINDOWS\zip.exe
2009-03-27 01:17:49 ----A---- C:\WINDOWS\VFIND.exe
2009-03-27 01:17:49 ----A---- C:\WINDOWS\SWXCACLS.exe
2009-03-27 01:17:49 ----A---- C:\WINDOWS\SWSC.exe
2009-03-27 01:17:49 ----A---- C:\WINDOWS\SWREG.exe
2009-03-27 01:17:49 ----A---- C:\WINDOWS\sed.exe
2009-03-27 01:17:49 ----A---- C:\WINDOWS\NIRCMD.exe
2009-03-27 01:17:49 ----A---- C:\WINDOWS\grep.exe
2009-03-27 01:17:49 ----A---- C:\WINDOWS\fdsv.exe
2009-03-27 01:17:45 ----D---- C:\WINDOWS\ERDNT
2009-03-27 01:17:07 ----D---- C:\Qoobox
2009-03-26 18:43:14 ----D---- C:\Documents and Settings\nemanja\Application Data\Malwarebytes
2009-03-26 18:43:01 ----D---- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2009-03-26 18:43:00 ----D---- C:\Program Files\Malwarebytes' Anti-Malware
2009-03-26 00:27:10 ----D---- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com
2009-03-26 00:26:39 ----D---- C:\Program Files\SUPERAntiSpyware
2009-03-26 00:26:39 ----D---- C:\Documents and Settings\nemanja\Application Data\SUPERAntiSpyware.com
2009-03-26 00:25:50 ----D---- C:\Program Files\Common Files\Wise Installation Wizard
2009-03-25 20:25:53 ----D---- C:\Program Files\File Scanner Library (Spybot - Search & Destroy)
2009-03-25 20:25:52 ----D---- C:\Program Files\TeaTimer (Spybot - Search & Destroy)
2009-03-25 20:25:52 ----D---- C:\Program Files\SDHelper (Spybot - Search & Destroy)
2009-03-25 20:25:52 ----D---- C:\Program Files\Misc. Support Library (Spybot - Search & Destroy)
2009-03-25 10:07:34 ----D---- C:\Documents and Settings\All Users\Application Data\TEMP
2009-03-25 10:02:28 ----D---- C:\Program Files\Trojan Remover
2009-03-23 11:32:49 ----A---- C:\WINDOWS\system32\deploytk.dll
2009-03-23 11:32:48 ----A---- C:\WINDOWS\system32\javaws.exe
2009-03-23 11:32:48 ----A---- C:\WINDOWS\system32\javaw.exe
2009-03-23 11:32:48 ----A---- C:\WINDOWS\system32\java.exe
2009-03-22 20:41:50 ----D---- C:\Documents and Settings\nemanja\Application Data\Transcend
2009-03-19 15:59:09 ----D---- C:\Program Files\The KMPlayer
2009-03-13 12:32:29 ----D---- C:\Program Files\Conduit
2009-03-13 12:32:26 ----D---- C:\Program Files\MyPlayCity
2009-03-13 12:30:15 ----D---- C:\Program Files\MyPlayCity.com
2009-03-11 11:52:46 ----D---- C:\Documents and Settings\nemanja\Application Data\Artweaver
2009-03-11 11:52:10 ----D---- C:\Program Files\Artweaver 0.5
2009-03-11 08:51:53 ----D---- C:\Documents and Settings\nemanja\Application Data\Spyware Terminator
2009-03-11 08:51:45 ----D---- C:\Documents and Settings\All Users\Application Data\Spyware Terminator
2009-03-11 08:51:42 ----D---- C:\Program Files\Spyware Terminator
2009-03-04 14:22:54 ----SHD---- C:\FOUND.027

======List of files/folders modified in the last 1 months======

2009-03-27 18:34:24 ----A---- C:\WINDOWS\wincmd.ini
2009-03-27 10:17:10 ----A---- C:\WINDOWS\system.ini
2009-03-27 09:26:48 ----ASH---- C:\boot.ini
2009-03-27 09:26:48 ----A---- C:\WINDOWS\win.ini
2009-03-25 21:22:40 ----A---- C:\WINDOWS\WININIT.INI
2009-03-25 02:26:24 ----A---- C:\WINDOWS\NeroDigital.ini

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R1 AmdK7;AMD K7 Processor Driver; C:\WINDOWS\System32\DRIVERS\amdk7.sys [2004-08-04 37376]
R1 easdrv;easdrv; C:\WINDOWS\system32\DRIVERS\easdrv.sys [2008-03-13 29704]
R1 epfwtdir;epfwtdir; C:\WINDOWS\system32\DRIVERS\epfwtdir.sys [2008-03-13 33800]
R1 kbfilter;Keyboard Filter Driver; C:\WINDOWS\system32\drivers\kbfilter.sys [2003-03-27 11776]
R1 moufiltr;Mouse Filter Driver; C:\WINDOWS\system32\drivers\moufiltr.sys [2003-01-23 9548]
R1 SASDIFSV;SASDIFSV; \??\C:\Program Files\SUPERAntiSpyware\SASDIFSV.SYS []
R1 SASKUTIL;SASKUTIL; \??\C:\Program Files\SUPERAntiSpyware\SASKUTIL.sys []
R2 eamon;EAMON; C:\WINDOWS\system32\DRIVERS\eamon.sys [2008-03-13 40456]
R3 Arp1394;1394 ARP Client Protocol; C:\WINDOWS\System32\DRIVERS\arp1394.sys [2004-08-04 60800]
R3 gameport;AU10 PCI Joystick; C:\WINDOWS\System32\DRIVERS\fmjoy.sys [2000-04-22 11089]
R3 GEARAspiWDM;GEAR ASPI Filter Driver; C:\WINDOWS\System32\Drivers\GEARAspiWDM.sys [2008-04-17 15464]
R3 GT680x;GrandTechICNameNT; C:\WINDOWS\System32\Drivers\gt680x.sys [2003-02-18 17504]
R3 iadusb;MT882; C:\WINDOWS\system32\DRIVERS\glauiad.sys [2006-03-20 30336]
R3 Intels51;Intel(R) 536EP Modem; C:\WINDOWS\System32\DRIVERS\Intels51.sys [2003-05-22 670203]
R3 LVUSBSta;Logitech USB Monitor Filter; C:\WINDOWS\system32\drivers\lvusbsta.sys [2004-10-11 22016]
R3 MODEMCSA;Unimodem Streaming Filter Device; C:\WINDOWS\system32\drivers\MODEMCSA.sys [2001-08-17 16128]
R3 netModUSBService;Service for netMod USB CAPI Driver; C:\WINDOWS\system32\drivers\nMUSB.sys [2003-11-27 61648]
R3 NIC1394;1394 Net Driver; C:\WINDOWS\System32\DRIVERS\nic1394.sys [2004-08-04 61824]
R3 nv;nv; C:\WINDOWS\System32\DRIVERS\nv4_mini.sys [2006-10-22 3994624]
R3 PID_0928;Labtec WebCam(PID_0928); C:\WINDOWS\system32\DRIVERS\LV561AV.SYS [2004-10-11 211712]
R3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\System32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
R3 usbehci;Microsoft USB 2.0 Enhanced Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbehci.sys [2004-08-04 26624]
R3 usbhub;USB2 Enabled Hub; C:\WINDOWS\System32\DRIVERS\usbhub.sys [2004-08-04 57600]
R3 usbprint;Microsoft USB PRINTER Class; C:\WINDOWS\System32\DRIVERS\usbprint.sys [2004-08-04 25856]
R3 usbser;%USBFilterString%; C:\WINDOWS\System32\DRIVERS\usbser.sys [2004-08-04 25600]
R3 USBSTOR;USB Mass Storage Driver; C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS [2004-08-04 26496]
R3 usbuhci;Microsoft USB Universal Host Controller Miniport Driver; C:\WINDOWS\System32\DRIVERS\usbuhci.sys [2004-08-04 20480]
R3 wdm_fm801;AU10 PCI Audio (WDM); C:\WINDOWS\system32\drivers\fm801.sys [2000-06-25 269106]
S3 61883;61883 Unit Device; C:\WINDOWS\System32\DRIVERS\61883.sys [2004-08-04 48128]
S3 ALCXWDM;Service for Realtek AC97 Audio (WDM); C:\WINDOWS\system32\drivers\ALCXWDM.SYS [2003-04-01 719052]
S3 Avc;AVC Device; C:\WINDOWS\System32\DRIVERS\avc.sys [2004-08-04 38912]
S3 catchme;catchme; \??\C:\DOCUME~1\nemanja\LOCALS~1\Temp\catchme.sys []
S3 CCDECODE;Closed Caption Decoder; C:\WINDOWS\System32\DRIVERS\CCDECODE.sys [2004-08-04 17024]
S3 hidgame;Microsoft Hid to Joystick Port Enabler; C:\WINDOWS\System32\DRIVERS\hidgame.sys [2001-08-17 8576]
S3 IntelC51;IntelC51; C:\WINDOWS\System32\DRIVERS\IntelC51.sys [2002-08-30 2166454]
S3 IntelC52;Intel(R) 537 Data Fax Voice V.92 Modem; C:\WINDOWS\System32\DRIVERS\IntelC52.sys [2002-08-30 447921]
S3 IntelC53;IntelC53; C:\WINDOWS\System32\DRIVERS\IntelC53.sys [2002-08-30 26921]
S3 k750bus;Sony Ericsson 750 driver (WDM); C:\WINDOWS\System32\DRIVERS\k750bus.sys [2005-02-11 55216]
S3 k750mdfl;Sony Ericsson 750 USB WMC Modem Filter; C:\WINDOWS\System32\DRIVERS\k750mdfl.sys [2005-02-11 6576]
S3 k750mdm;Sony Ericsson 750 USB WMC Modem Drivers; C:\WINDOWS\System32\DRIVERS\k750mdm.sys [2005-02-11 89872]
S3 LwAdiHid;Logitech WingMan Digital Devices(Auto-Detect); C:\WINDOWS\System32\DRIVERS\LwAdiHid.sys [2002-08-28 20864]
S3 MSDV;Microsoft DV Camera and VCR; C:\WINDOWS\System32\DRIVERS\msdv.sys [2004-08-04 51328]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2004-08-04 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\System32\DRIVERS\NABTSFEC.sys [2004-08-04 85376]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\System32\DRIVERS\NdisIP.sys [2004-08-04 10880]
S3 ntgrip;Gravis GamePort device driver; C:\WINDOWS\system32\drivers\ntgrip.sys [2001-08-17 51552]
S3 ROOTMODEM;Microsoft Legacy Modem Driver; C:\WINDOWS\System32\Drivers\RootMdm.sys [2001-08-23 5888]
S3 s115bus;Sony Ericsson Device 115 driver (WDM); C:\WINDOWS\system32\DRIVERS\s115bus.sys [2007-04-23 83208]
S3 s115mdfl;Sony Ericsson Device 115 USB WMC Modem Filter; C:\WINDOWS\system32\DRIVERS\s115mdfl.sys [2007-04-23 15112]
S3 s115mdm;Sony Ericsson Device 115 USB WMC Modem Driver; C:\WINDOWS\system32\DRIVERS\s115mdm.sys [2007-04-23 108680]
S3 s115mgmt;Sony Ericsson Device 115 USB WMC Device Management Drivers (WDM); C:\WINDOWS\system32\DRIVERS\s115mgmt.sys [2007-04-23 100488]
S3 s115obex;Sony Ericsson Device 115 USB WMC OBEX Interface; C:\WINDOWS\system32\DRIVERS\s115obex.sys [2007-04-23 98568]
S3 SASENUM;SASENUM; \??\C:\Program Files\SUPERAntiSpyware\SASENUM.SYS []
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\System32\DRIVERS\SLIP.sys [2004-08-04 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\System32\DRIVERS\StreamIP.sys [2004-08-04 15360]
S3 usbscan;USB Scanner Driver; C:\WINDOWS\System32\DRIVERS\usbscan.sys [2004-08-04 15104]
S3 WSTCODEC;World Standard Teletext Codec; C:\WINDOWS\System32\DRIVERS\WSTCODEC.SYS [2004-08-04 19328]
S3 WudfPf;Windows Driver Foundation - User-mode Driver Framework Platform Driver; C:\WINDOWS\system32\DRIVERS\WudfPf.sys [2006-04-11 82944]
S3 WudfRd;Windows Driver Foundation - User-mode Driver Framework Reflector; C:\WINDOWS\system32\DRIVERS\wudfrd.sys [2006-04-11 87808]
S4 cdawdm;CDAWDM; C:\WINDOWS\System32\DRIVERS\CDAWDM.sys []
S4 IntelIde;IntelIde; C:\WINDOWS\system32\drivers\IntelIde.sys []
S4 WS2IFSL;Windows Socket 2.0 Non-IFS Service Provider Support Environment; C:\WINDOWS\System32\drivers\ws2ifsl.sys [2001-08-23 12032]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ekrn;Eset Service; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [2008-03-13 472320]
S2 NOD32FiXTemDono;Eset Nod32 Boot; C:\WINDOWS\system32\regedt32.exe [2001-08-23 3584]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe [2005-09-23 29896]
S3 clr_optimization_v2.0.50727_32;.NET Runtime Optimization Service v2.0.50727_X86; C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe [2005-09-23 66240]
S3 EhttpSrv;Eset HTTP Server; C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe [2008-03-13 19200]
S3 WMPNetworkSvc;Windows Media Player Network Sharing Service; C:\Program Files\Windows Media Player\WMPNetwk.exe [2006-05-09 823808]
S3 WudfSvc;Windows Driver Foundation - User-mode Driver Framework; C:\WINDOWS\system32\svchost.exe [2004-08-04 14336]
S4 Apple Mobile Device;Apple Mobile Device; C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe [2008-11-07 132424]
S4 Bonjour Service;Bonjour Service; C:\Program Files\Bonjour\mDNSResponder.exe [2008-08-29 238888]
S4 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S4 JavaQuickStarterService;Java Quick Starter; C:\Program Files\Java\jre6\bin\jqs.exe [2009-03-23 152984]
S4 NVSvc;NVIDIA Display Driver Service; C:\WINDOWS\system32\nvsvc32.exe [2006-10-22 159810]
S4 sp_rssrv;Spyware Terminator Realtime Shield Service; C:\Program Files\Spyware Terminator\sp_rsser.exe [2009-03-11 540672]
S4 spupdsvc;Windows Service Pack Installer update service; C:\WINDOWS\system32\spupdsvc.exe [2006-05-09 22752]

-----------------EOF-----------------

Za pocetak vidim par stvari, pa moram da te upitam. Da li si ti instalirao MyPlayCity Toolbar? Drugo, da li si na svoju ruku pokretao program ComboFix ili su ti to savetovali na nekom forumu? Ako mozes okaci mi njegov izvestaj da vidim. Ako si zavrsio posao sa njim treba da ga obrises na sledeci nacin. Otvori Start > Run > pa ukucaj combofix /u. Posle ovoga nadji sledeci fajl:

C:\WINDOWS\system32\Fmctrl.EXE

Pa ga uploaduj na sledeci sajt, na proveru: http://www.virustotal.com/ i javi rezultate, ili posalji link od rezultata.

Toliko za sada....

Myplaycity ----toolbar jesam, glupo ali jesam...
ComboFix -----sa foruma
http://www.virustotal.com/anal...a9692826ae753e6b3be279d2b9c329

Ok, moja ti je preporuka da uninstaliras programe MyPlayCity i Conduit, jel oni predstavljaju potencijalni Adware. Ako mozes posalji mi link do teme sa tog foruma gde su ti preporucili Combofix na PM. I naravno obrisi ga prema upustvu koje sam ti dao.

ovaj log bi trebalo da je cist ( ako nisam nesto propustio jer sam log pregledao nabrzinu )
pre nego sto nemanja nastavi odradi sledece:
skini ovaj programcic:
http://oldtimer.geekstogo.com/OTMoveIt3.exe
pokreni ga ,sa leve strane kopiraj ovo

:reg
[-HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{47ced9dc-4672-11dd-8c96-001bfc20643e}]

klikni na MOVE IT

restartuj kompjuter

pa baci i ovaj fajl pa nek ga 35 anti virusa procesljaju.. :) ( uploaduj na virustotal pa daj link da ga nemanja pregleda )

C:\WINDOWS\WININIT.INI

srecno ;)

_{[Ovu poruku je menjao magna86 dana 28.03.2009. u 08:23 GMT+1]}

---

Pa hvala na lepim zeljama ali problem je jos uvek tu iako sam poradio sve sto mi rekoste. Nije da znam, ali imam utisak, da umesto dobronamernih saveta za resenje mog problema ovo prerasta u nekakvo vase nadmudrivanje sa dozom cinizma. Izvinite unapred ako gresim...
Imenjace i pored dobre volje ne mogu da se setim linka u vezi combofixa ali ako ti bas mnogo znaci potrudicu se jos vise... Inace obrisao sam ga onako kako si mi i rekao a log je verovatno otisao sa njim...

Gresis imenjace Ovde smo svi da bi se pomagali medjusobno. Link mi je bio potreban da vidim sta su ti preporucivali, da ne dupliramo posao. Jel si probao da pobrises sve fajlove koji su se stvorili na externom HDD-u? Je l` se opet vracaju posle odredjenog vremena? Da li ti se ovaj problem javlja i na USB flash diskovima? Ako mozes daj par imena tih fajlova koji se kreiraju.

Dobro, utisak je bio iz neznanja...
Naravno da sam pokusao da ih brisem ali kao sto pretpostavljate nece da moze. Pokusao sam da menjam attrib ali nece da moze ni to. E sad, uz sve ove fajlove, da nece da moze prijavi i jedan avi fajl da je corrupt a koji je do teda radio i koji posle vise nece. Kada ga obrisem sledeci put prijavi neki drugi i tako redom...
Ovaj folder ciju cu sliku da posaljem je stalno osasavljen a nekad se osasave jos po neki pa se posle vrate (kovarnu). Moguce da sam primetio i na fleshevima, u stvari siguran sam, ali su se oni kovarnuli....

Ok. Sad cemo da probamo na silu da ih izbrisemo. Prvo uradi ovo:

Otvori Start > Run > kucaj cmd

Kada se otvori Command Prompt ukucaj F: pa ukucaj dir > fles.txt. Sada ce ti se na flesu pojaviti fles.txt fajl i njegov sadrzaj mi iskopiraj. U principu mi trebaju nazivi foldera koji su zatrpani tim glupostima, da ih obrisemo pomocu jednog programa. Da li su ti folderi, koji su zarazeni puni samo glupostima. Trebaju mi imena foldera koje mozemo da obrisemo (znaci u kojima nemas filmove, muziku i sl.). Nadam se da se razumemo

P.S. Pre ove muke probaj da pobrises te gluposti iz Safe Moda.

ako sam te dobro razumeo hteo si ovo:
Volume in drive F is My Book
Volume Serial Number is 5DA0-1DEF

Directory of F:\

23.09.2008 15:41 <DIR> my book
23.09.2008 15:42 <DIR> foto album
23.09.2008 16:31 <DIR> filmoteka
23.09.2008 17:35 <DIR> voja jahorina
23.10.2008 20:03 <DIR> muzicka arhiva
25.10.2008 22:55 <DIR> smogovci
18.02.2009 22:04 <DIR> vojini filmovi
18.02.2009 22:06 <DIR> filmovi.baza
26.03.2009 00:10 <DIR> Recycled
27.03.2009 01:25 <DIR> System Volume Information
28.03.2009 17:32 0 fles.txt
1 File(s) 0 bytes
10 Dir(s) 114.069.241.856 bytes free


Volume in drive F is My Book
Volume Serial Number is 5DA0-1DEF

Directory of F:\my book

23.09.2008 15:41 <DIR> .
23.09.2008 15:41 <DIR> ..
22.01.2008 15:55 <DIR> wd_windows_tools
26.06.2007 12:02 212.992 Setup.exe
22.01.2008 15:55 <DIR> autorun
22.01.2008 15:55 <DIR> wd_mac_tools
28.03.2009 09:30 177 Install.log
28.03.2009 17:44 0 fles.txt
3 File(s) 213.169 bytes
5 Dir(s) 114.069.143.552 bytes free

Volume in drive F is My Book
Volume Serial Number is 5DA0-1DEF

Directory of F:\Recycled

26.03.2009 00:10 <DIR> .
26.03.2009 00:10 <DIR> ..
14.02.2009 17:50 0 Df2.exe
28.03.2009 15:53 4.020 INFO2
18.06.2005 16:37 44.321 Df3.srt
28.03.2009 08:45 461 Df4.lnk
28.03.2009 17:45 0 fles.txt
5 File(s) 48.802 bytes
2 Dir(s) 114.069.110.784 bytes free

Volume in drive F is My Book
Volume Serial Number is 5DA0-1DEF

Directory of F:\System Volume Information

27.03.2009 01:25 <DIR> .
27.03.2009 01:25 <DIR> ..
28.03.2009 07:19 <DIR> _restore{97A25DD3-0C30-4063-B0D0-DD1D8A2919CD}
28.03.2009 17:47 0 fles.txt
1 File(s) 0 bytes
3 Dir(s) 114.069.078.016 bytes free


jel da?

P.S. Davmo sam vec probao iz safe moda ali nece da moze

Ok. Sada mi daj redom adrese svih foldera koji su zarazeni, kao ono sto si mi pokazao na slici. Imaj na umu da cemo brisati kompletne foldere, pa ti proveri da pored tih "gluposti" u taj folder nije zalutao neki film ili slicno. Jel ti ovaj externi HDD stalno prikljucen na racunar?

Obrisi F:\Recycled
Obrisi sadrzaj F:\System Volume Information

---

chkdsk f: /x je resio problem. Bar za sada, umesto foldera "staje bre ovo" sada je istoimeni file. Nije da mi je nesto bitno, ali me zanima da li mogu nekako da pokusam da vratim avi fajlove koji su bili u tom folderu pre nego sto se osasavio. Puno hvala svima ....

Vracanje obrisanih fajlova mozes obaviti sa sledecim programima:

• Get Data Back
• Easy Recovery Pro

Sa njima sam se susretao, i cesto sam uspevao da povratim neke fajlove posle brisanja ili formatiranja.

**********

Sto se tice tih fajlova, koji su bili folderi, njih mozes izbrisati sa sledecim programom:

Unlocker: http://ccollomb.free.fr/unlocker/ (pogledaj upustvo i slike na sajtu - odlican program).

Pozdrav

Pozdrav. Ja se ovde javljam sa takodje jednim cudnim problemom. Ocistio sam fles USB od virusa koji su se preneli sa jednog racunara. Sada iz WIndows Explorer-a ne vidim foldere na USB disku, vidim samo fajlove koji su bili na root-u. U total comanderu se i folderi i fajlovi vide normalno. Verovatno nesto u regedit-u treba da se uradi ali nisam nasao resenje. Jel zna neko sta je u pitanju?

Proveri da li imas autorun.inf fajlove na USB-u (najbolje iz Total Commandera), pa ih sve obrisi. Da li ti folderi, kad ih gledas iz Total Commandera, imaju na sebi crveni uzvicnik, odnosno kada kliknes desnim dugmetom na neki od njih i odaberes Properties, pri dnu imaju stikliranu kucicu Hidden koju ne mozes da odstikliras?

Nema autorun.inf fajlova a kada idem na properties foldera opcija Hidden je zasivljena-ne mogu je menjati ali je potvrdjena!
Kada se vracam (Up one level) iz nekog od foldera u root na trenutak se vidi crveni uzvicnik koji oznacava da je folder Hidden.

Onda uradi izmenu atributa fajlova i foldera onako kako smo napisali u sledecoj temi:

http://www.elitesecurity.org/p2244868