MyCity » Ambulanta -> Arhiva Ambulante » HiJackThis log

HiJackThis log

Napisano na dan: 1.7.2008

HiJackThis log
Sledeća strana Pagination

Idi na vrh

Poslao: 01 Jul 2008 19:34
Idi na vrh
offline
  • vux777 
  • Novi MyCity građanin
  • Pridružio: 22 Apr 2008
  • Poruke: 21

imo sam neki trojan u rar arhivi koji mi je ad-aware pronašao. čudi me da ga nije prije našao jer ovo nije prvi scan sa njime a zarazeni RAR je na kompu vec duze (snimio sam stranicu HTML za neki 3D tutorijal a rar je bio dodatni file na stranici). ako neko moze pogledati log file i reci dali imam kakvu zarazu na kompu


Logfile of HijackThis v1.99.1
Scan saved at 19:32:47, on 1.7.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.17184)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
D:\Programi\Ad-Aware\aawservice.exe
D:\Programi\WinPatrol\winpatrol.exe
D:\Programi\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Programi\NetMeter\NetMeter.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\Programi\Sandboxie\SbieSvc.exe
C:\Program Files\T-Mobile\web'n'walk Manager\web'n'walk Manager.exe
D:\Programi\Sandboxie\SbieCtrl.exe
D:\Programi\FireFox 3 b5\firefox.exe
D:\Programi\Sandboxie\SandboxieRpcSs.exe
D:\Programi\Sandboxie\SandboxieDcomLaunch.exe
D:\Programi\HiJackThis\TR3.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [WinPatrol] D:\Programi\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Programi\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [D:\Programi\NetMeter\NetMeter.exe] D:\Programi\NetMeter\NetMeter.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Programi\Ad-Aware\aawservice.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - D:\Programi\Sandboxie\SbieSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe



Poslao: 01 Jul 2008 20:04
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Poz...


Postavljeni logfile je čist.

Jesi li razmišljao da instaliraš neki antivirus?



Poslao: 01 Jul 2008 20:26
Idi na vrh
offline
  • vux777 
  • Novi MyCity građanin
  • Pridružio: 22 Apr 2008
  • Poruke: 21

imao sam avira antivirus do neki dan al sam ga deinstalirao (komp mi previše uspori zbog rendanja u 3ds MAX-u). Od zaštite imam winpatrol, zonealarm i sandboxie sa kojim surfam. instalirao sam još neki dan ad-aware.

Hvala na brzom odgovoru Dr Bora

Dopuna: 01 Jul 2008 20:26

još samo jedno pitanje.....

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

dali je ovo potrebno i dali to mogu u HJT- obrisat (Fix checked)?

Poslao: 01 Jul 2008 20:48
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Linije su legitimne i ne bih preporučio da se uklanjaju...

Poslao: 02 Jul 2008 00:37
Idi na vrh
offline
  • vux777 
  • Novi MyCity građanin
  • Pridružio: 22 Apr 2008
  • Poruke: 21

ok...thanx Very Happy

MyCity » Ambulanta -> Arhiva Ambulante » HiJackThis log

Ko je trenutno na forumu
 

Ukupno su 1310 korisnika na forumu :: 94 registrovanih, 5 sakrivenih i 1211 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 015, acov34, Alexa77, annon, Arsenije, Asteker, Bobrock1, bojan_t, bojcistv, bokki, branko87, Bubimir, burevestnik, Centauro, coaaco, crnogorac, cyprus, darkkran, dearg, debeli, Demi87, dradex, Dragon Order, galerija, GeoM, ginjica, Gonga, gorankuba, ILGromovnik, istina, ivica976, ivran064, jackreacher011011, jimi_agf, Josef, kolateralnasteta, Krusarac, Kubovac, Kvazar, laurusri, Litostroton, loon123, M74AB3, Mackomen, mango, Marex, Marko Marković, mayorlany, medaTT, mercedesamg, miki kv, MiloradKomadic, milutin134, mir, MiroslavD, nazgul75, nelezele, nenaddz, Nikolajevic, niksa517, orah, Paklenica, Papadubi, Pikac-47, Plavi Jadran, Razdroid, ruger357, Sančo, Sarmat, sluga, smerch, sspp, stegonosa, Stoilkovic, synergia, Tandrkalo, taomaster, tihi-posmatrac, tubular, vaci, varda, vasa.93, vathra, Vlada1389, VladaKG1980, Vladonius, vuksa72, x011, zmajbre, zmajognjeniivan, Zoca, Zrcalo, Zvlade, Đurđevdan