MyCity » Ambulanta -> Arhiva Ambulante » Analiza HJT loga

Analiza HJT loga

Napisano na dan: 16.4.2009

Analiza HJT loga
Sledeća strana Pagination

Idi na vrh

Poslao: 16 Apr 2009 15:07
Idi na vrh
offline
  • Pridružio: 26 Apr 2008
  • Poruke: 3

dali ste u mogucnosti da ixvrsite proveru loga

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:01:11, on 16.4.2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\UPHClean\uphclean.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\ccc.exe
C:\Documents and Settings\user\Desktop\New Folder\TR3.exe..exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AlcWzrd] ALCWZRD.EXE
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe

--
End of file - 3230 bytes



Poslao: 16 Apr 2009 15:12
Idi na vrh
offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Naravno da jesmo.. jos jedna stvar... nemoj pisati u tudjim temama.. prebacio sam tvoj log iz tudje teme a tvoju poruku obrisao...

Procitaj pravila ovog dela foruma

Takodje reci mi na sta se tacno zalis?



Poslao: 16 Apr 2009 15:31
Idi na vrh
offline
  • Pridružio: 26 Apr 2008
  • Poruke: 3

Izvinjavam se na greskama.Prvi put sam na ovom forumu tako da mi je sve novo i puno gresim,a i jedva se snalazim oko svega.Komp za sada dobro radi ali me interesuje dali je zarazen ili ne posto sestra stalno posecuje Fejsbuk valjda se tako kaze.Hvala vam na uputstvima i sto ste ispravili moje greske.Takodje me brine sto stariji drajveri za graficku imao je znak na desnom kliku misa,i u taskbaru,a sada ovaj noviji nema.

Poslao: 16 Apr 2009 15:37
Idi na vrh
offline
  • diarno  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 15 Jun 2007
  • Poruke: 5572

Opusteno Wink

Btw.. Dobrodosao Smile... Polako samo... lako ces se snaci Wink

Log je cist k'o suza.. I updateovan ti je sistem, tako da ne moras da brines sto se toga tice...

PozZz

Poslao: 16 Apr 2009 15:46
Idi na vrh
offline
  • Pridružio: 26 Apr 2008
  • Poruke: 3

Hvala Puno , Pozdrav

MyCity » Ambulanta -> Arhiva Ambulante » Analiza HJT loga

Ko je trenutno na forumu
 

Ukupno su 1217 korisnika na forumu :: 117 registrovanih, 10 sakrivenih i 1090 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: Agape, ajo baba, Aleksa 3215, ALFASPORTIVO, babaroga, Bobrock1, bojan313, bojanstros9, bolimejoli, Boris BM, Boris90, Brok, brufen, Centauro, Cian, Civa, comi_pfc, CrazyNorth, Dannyboy, darkdruid72, DavidA, DeerHunter, Denaya, denisnapast2015, Dimitrise93, djukapfc, DJUNTA, Dolinc, Dovla 1980, dragan_mig31, draganca, dragoljub11987, DrFlyFisherman, Electron, ElvisP, Folkstar, Frunze, gaga23, Gogi_avio, gomago, gorankuba, goxin, HrcAk47, hyla, ILGromovnik, IQ116, jalos, JOntra, Jovan.D, karevski, karjatid, Khalid ibn al-Walid, Kolimator, Krusarac, kunktator, ladro, Libertas, Lucije Kvint, luka35, macak44, Mackomen, mango, mat, medaTT, mercedesamg, Michellefromrezistance, miki kv, mikrimaus, mile.ilic75, miljannis, Milo97, mir juzni, MK10, mocnijogurt, momcilob55, Mrav Obrad, Niksicanin, Novakomp, obsc, opt1, Orc, Oscar, Papadubi, Parker, Pero, Podljub, Povratak1912, PrincipL, proka89, Radogost, RAKITNICA, Ranutovac, Regrut Boskica, royst33, sekretar, Shinobi, Singidunumac, Sirius, sluga, SOVO515, Str2022, tamno.nebo, Tandrkalo, Tihi86, tomigun, trutcina, Veless, vladulns, Weah88, wizzardone, wolf431, x9, Yellow Pinky, zdrebac, ZetaMan, Zmaj001, šumar bk2