MyCity » Ambulanta -> Arhiva Ambulante » Analiza HJT loga

Analiza HJT loga

Napisano na dan: 16.4.2009

Analiza HJT loga
Sledeća strana Pagination

Idi na vrh

Poslao: 16 Apr 2009 15:07
Idi na vrh
offline
  • Pridružio: 26 Apr 2008
  • Poruke: 3

dali ste u mogucnosti da ixvrsite proveru loga

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:01:11, on 16.4.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Documents and Settings\user\Desktop\New Folder\TR3.exe..exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

--
End of file - 3230 bytes

Poslao: 16 Apr 2009 15:12
Idi na vrh
offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Naravno da jesmo.. jos jedna stvar... nemoj pisati u tudjim temama.. prebacio sam tvoj log iz tudje teme a tvoju poruku obrisao...

Procitaj pravila ovog dela foruma

Takodje reci mi na sta se tacno zalis?

Poslao: 16 Apr 2009 15:31
Idi na vrh
offline
  • Pridružio: 26 Apr 2008
  • Poruke: 3

Izvinjavam se na greskama.Prvi put sam na ovom forumu tako da mi je sve novo i puno gresim,a i jedva se snalazim oko svega.Komp za sada dobro radi ali me interesuje dali je zarazen ili ne posto sestra stalno posecuje Fejsbuk valjda se tako kaze.Hvala vam na uputstvima i sto ste ispravili moje greske.Takodje me brine sto stariji drajveri za graficku imao je znak na desnom kliku misa,i u taskbaru,a sada ovaj noviji nema.

Poslao: 16 Apr 2009 15:37
Idi na vrh
offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Opusteno Wink

Btw.. Dobrodosao Smile... Polako samo... lako ces se snaci Wink

Log je cist k'o suza.. I updateovan ti je sistem, tako da ne moras da brines sto se toga tice...

PozZz

Poslao: 16 Apr 2009 15:46
Idi na vrh
offline
  • Pridružio: 26 Apr 2008
  • Poruke: 3

Hvala Puno , Pozdrav

MyCity » Ambulanta -> Arhiva Ambulante » Analiza HJT loga

Ko je trenutno na forumu
 

Ukupno su 1055 korisnika na forumu :: 33 registrovanih, 3 sakrivenih i 1019 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: bigfoot, bobomicek, Bobrock1, bokisha253, Bubimir, cenejac111, Dukelander, FOX, Georgius, janbo, Kibice, koom0001, Kubovac, Lieutenant, mercedesamg, Metanoja, Mi lao shu, milutin134, Nemanja.M, nenad81, nenaddz, nick79, novator, nuke92, robertino, sasa87, suton, Trpe Grozni, vathra, virked, voja64, vukdra, šumar bk2