MyCity » Ambulanta -> Arhiva Ambulante » Keyloger ili ne?

Keyloger ili ne?

Napisano na dan: 3.3.2011

Keyloger ili ne?
Sledeća strana Pagination

Idi na vrh

Poslao: 03 Mar 2011 16:25
Idi na vrh
offline
  • Pridružio: 11 Dec 2010
  • Poruke: 143
  • Gde živiš: Tu negde

Pozdrav poceo sam da sumnjam u keyloger... mislim da u kompjuteru imam neki keyloger skidao sam svasta sa neta pa da proverim..

Internet brzina mi je 4mb... Adsl

Ne koristim nikakav anti virus... niti koristim ostale zastitne softvere Smile

Ako vam nesto znaci.. Koristim windows 7 ultimate 32-bita


Evo logova:


DDS (Ver_10-12-12.02) - NTFSx86
Run by PC at 15:57:33.57 on Thu 03/03/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.2047.1388 [GMT 1:00]

SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\system32\atiesrxx.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\atieclxx.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Realtek\Audio\HDA\RtHDVCpl.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\Windows Media Player\wmpnetwk.exe
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServicePeerNet
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\explorer.exe
C:\Users\PC\Desktop\dds.scr
C:\Windows\system32\conhost.exe

============== Pseudo HJT Report ===============

BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\progra~1\micros~2\office12\GR469A~1.DLL
BHO: {7E853D72-626A-48EC-A868-BA8D5E23E045} - No File
BHO: Windows Live Sign-in Helper: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
uRun: [Sidebar] c:\program files\windows sidebar\sidebar.exe /autoRun
uRun: [Google Update] "c:\users\pc\appdata\local\google\update\GoogleUpdate.exe" /c
mRun: [RtHDVCpl] c:\program files\realtek\audio\hda\RtHDVCpl.exe -s
mRun: [StartCCC] "c:\program files\ati technologies\ati.ace\core-static\CLIStart.exe" MSRun
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mPolicies-system: ConsentPromptBehaviorAdmin = 0 (0x0)
mPolicies-system: ConsentPromptBehaviorUser = 3 (0x3)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
mPolicies-system: PromptOnSecureDesktop = 0 (0x0)
IE: E&xport to Microsoft Excel - c:\progra~1\micros~2\office12\EXCEL.EXE/3000
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~2\office12\ONBttnIE.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~2\office12\REFIEBAR.DLL
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\progra~1\micros~2\office12\GRA32A~1.DLL
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\progra~1\micros~2\office12\GR469A~1.DLL

================= FIREFOX ===================

FF - ProfilePath - c:\users\pc\appdata\roaming\mozilla\firefox\profiles\v4xylxcn.default\
FF - prefs.js: browser.startup.homepage - [Link mogu videti samo ulogovani korisnici]
FF - plugin: c:\program files\java\jre6\bin\new_plugin\npdeployJava1.dll
FF - plugin: c:\users\pc\appdata\local\google\update\1.2.183.39\npGoogleOneClick8.dll
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\program files\mozilla firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

============= SERVICES / DRIVERS ===============

R2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [2010-7-7 176128]
R3 amdkmdag;amdkmdag;c:\windows\system32\drivers\atikmdag.sys [2010-7-7 5882368]
R3 amdkmdap;amdkmdap;c:\windows\system32\drivers\atikmpag.sys [2010-7-7 210944]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2011-2-22 275048]
R3 usbfilter;AMD USB Filter Driver;c:\windows\system32\drivers\usbfilter.sys [2011-2-22 30392]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]

=============== Created Last 30 ================

2011-03-03 13:49:52 -------- d-----w- c:\users\pc\appdata\roaming\Cool Record Edit Pro
2011-03-02 14:59:28 -------- d-----w- c:\program files\VirtualDJ
2011-02-28 19:06:22 -------- d-----w- c:\program files\SystemRequirementsLab
2011-02-28 15:00:09 -------- d-----w- c:\users\pc\appdata\local\Rockstar Games
2011-02-26 13:24:30 2613248 ----a-w- c:\windows\explorer.exe
2011-02-26 09:59:54 -------- d-----w- c:\users\pc\appdata\local\Google
2011-02-25 18:15:45 249856 ----a-w- c:\windows\system32\uxtheme.dll.backup
2011-02-25 18:15:43 2755072 ----a-w- c:\windows\system32\themeui.dll.backup
2011-02-25 18:15:42 37376 ----a-w- c:\windows\system32\themeservice.dll.backup
2011-02-23 20:07:48 -------- d-----w- c:\users\pc\appdata\local\TechSmith
2011-02-23 20:06:54 -------- d-----w- c:\windows\system32\QuickTime
2011-02-23 20:06:45 -------- d-----w- c:\program files\common files\TechSmith Shared
2011-02-23 14:31:31 -------- d-----w- c:\users\pc\appdata\local\GPUMonitor
2011-02-23 12:45:36 -------- d-----w- c:\windows\system32\appmgmt
2011-02-23 06:01:00 -------- d-----w- c:\windows\Panther
2011-02-22 21:49:13 -------- d-----w- c:\users\pc\appdata\local\ElevatedDiagnostics
2011-02-22 21:23:09 -------- d-----w- c:\program files\common files\ATI Technologies
2011-02-22 21:22:53 446464 ----a-w- c:\windows\system32\ATIDEMGX.dll
2011-02-22 21:18:47 -------- d-----w- c:\users\pc\appdata\local\ATI
2011-02-22 21:18:33 0 ----a-w- c:\windows\ativpsrm.bin
2011-02-22 21:16:15 80416 ----a-w- c:\windows\system32\RtNicProp32.dll
2011-02-22 21:16:15 275048 ----a-w- c:\windows\system32\drivers\Rt86win7.sys
2011-02-22 21:16:15 100896 ----a-w- c:\windows\system32\RTNUninst32.dll
2011-02-22 21:15:55 -------- d-----w- c:\program files\Realtek
2011-02-22 21:15:28 30392 ----a-w- c:\windows\system32\drivers\usbfilter.sys
2011-02-22 21:15:28 -------- d-----w- c:\program files\AMD
2011-02-22 21:14:25 14392 ----a-w- c:\windows\system32\drivers\AtiPcie.sys
2011-02-22 21:14:18 50176 ----a-w- c:\windows\system32\coinst.dll
2011-02-22 21:13:47 -------- d-sh--w- c:\windows\Installer
2011-02-22 21:13:09 -------- d-----w- c:\program files\ATI Technologies
2011-02-22 21:13:07 -------- d-----w- c:\program files\ATI
2011-02-22 21:12:36 -------- d-----w- c:\windows\system32\wbem\Performance
2011-02-22 21:06:06 -------- d-sh--w- C:\Recovery
2011-02-22 20:53:49 -------- d-----w- c:\program files\common files\Macrovision Shared
2011-02-22 20:21:42 -------- d-----w- C:\Fraps
2011-02-22 19:55:50 -------- d-----w- c:\users\pc\appdata\local\Criterion Games
2011-02-22 19:23:46 -------- d-----w- c:\users\pc\appdata\local\storage
2011-02-22 18:21:08 -------- d-----w- c:\program files\Core Temp
2011-02-22 17:33:38 -------- d-----w- c:\progra~2\Codemasters
2011-02-22 17:13:23 413696 ----a-w- c:\windows\system32\wrap_oal.dll
2011-02-22 17:13:23 110592 ----a-w- c:\windows\system32\OpenAL32.dll
2011-02-22 17:13:23 -------- d-----w- c:\program files\OpenAL
2011-02-22 17:00:40 -------- d-----w- c:\program files\Team JPN
2011-02-22 16:55:54 695578 ----a-w- c:\windows\system32\unins000.exe
2011-02-22 16:55:54 65536 ----a-w- c:\windows\system32\camcodec.dll
2011-02-22 16:55:38 -------- d-----w- c:\program files\CamStudio
2011-02-22 16:47:18 5890896 ----a-w- c:\progra~2\microsoft\windows defender\definition updates\{ca0a4508-dd45-4998-961d-e7217316ff4f}\mpengine.dll
2011-02-22 16:47:17 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-02-22 16:28:20 -------- d-----w- C:\games
2011-02-22 15:06:01 -------- d-----w- c:\users\pc\appdata\local\Ahead
2011-02-22 14:57:47 33104 ----a-w- c:\windows\system32\spool\prtprocs\w32x86\msonpppr.dll
2011-02-22 14:57:47 32592 ----a-w- c:\windows\system32\msonpmon.dll
2011-02-22 14:55:02 -------- d-----w- c:\program files\Microsoft Visual Studio 8
2011-02-22 14:54:26 -------- d-----w- c:\users\pc\appdata\local\Microsoft Help
2011-02-22 14:50:06 -------- d-----w- c:\windows\system32\Adobe
2011-02-22 14:49:57 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-02-22 14:46:05 -------- d-----w- c:\program files\uTorrent
2011-02-22 14:46:03 -------- d-----w- c:\users\pc\appdata\roaming\uTorrent
2011-02-22 14:44:27 -------- d-----w- c:\windows\PCHEALTH
2011-02-22 14:44:27 -------- d-----w- c:\program files\MSN Messenger
2011-02-22 14:43:59 -------- d-----w- c:\program files\The KMPlayer
2011-02-22 14:43:44 165376 ----a-w- c:\windows\system32\unrar.dll
2011-02-22 14:43:43 839680 ----a-w- c:\windows\system32\lameACM.acm
2011-02-22 14:43:43 790528 ----a-w- c:\windows\system32\xvidcore.dll
2011-02-22 14:43:43 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2011-02-22 14:43:43 151552 ----a-w- c:\windows\system32\ac3acm.acm
2011-02-22 14:43:43 134144 ----a-w- c:\windows\system32\xvidvfw.dll
2011-02-22 14:43:43 108032 ----a-w- c:\windows\system32\ff_vfw.dll
2011-02-22 14:43:42 -------- d-----w- c:\program files\K-Lite Codec Pack
2011-02-22 14:42:10 -------- d-----w- c:\program files\Nero
2011-02-22 14:42:10 -------- d-----w- c:\progra~2\Nero
2011-02-22 14:34:45 -------- d-----w- c:\users\pc\appdata\local\Adobe
2011-02-22 14:34:09 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2011-02-22 14:33:58 -------- d-----w- c:\program files\DAEMON Tools Lite
2011-02-22 14:33:29 -------- d-----w- c:\users\pc\appdata\roaming\DAEMON Tools Lite
2011-02-22 14:33:27 -------- d-----w- c:\progra~2\DAEMON Tools Lite
2011-02-22 14:32:57 -------- d-----w- c:\program files\AIMP2
2011-02-22 14:31:12 -------- d-----w- c:\program files\common files\ACD Systems
2011-02-22 14:30:34 -------- d-----w- c:\users\pc\appdata\local\Downloaded Installations
2011-02-22 14:30:10 545 ----a-w- c:\windows\UC.PIF
2011-02-22 14:30:10 545 ----a-w- c:\windows\RAR.PIF
2011-02-22 14:30:10 545 ----a-w- c:\windows\PKZIP.PIF
2011-02-22 14:30:10 545 ----a-w- c:\windows\PKUNZIP.PIF
2011-02-22 14:30:10 545 ----a-w- c:\windows\NOCLOSE.PIF
2011-02-22 14:30:10 545 ----a-w- c:\windows\LHA.PIF
2011-02-22 14:30:10 545 ----a-w- c:\windows\ARJ.PIF
2011-02-22 14:30:10 -------- d-----w- c:\users\pc\appdata\roaming\GHISLER
2011-02-22 14:30:10 -------- d-----w- C:\totalcmd

==================== Find3M ====================

2011-02-25 18:15:45 249856 ----a-w- c:\windows\system32\uxtheme.dll
2011-02-25 18:15:43 2755072 ----a-w- c:\windows\system32\themeui.dll
2011-02-25 18:15:42 37376 ----a-w- c:\windows\system32\themeservice.dll

============= FINISH: 15:57:52.34 ===============




[Link mogu videti samo ulogovani korisnici]

GMER Arrow

[Link mogu videti samo ulogovani korisnici]


[Link mogu videti samo ulogovani korisnici]



[Link mogu videti samo ulogovani korisnici]



Poslao: 03 Mar 2011 16:52
Idi na vrh
rip
  • argus  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 27 Apr 2008
  • Poruke: 9160
  • Gde živiš: Prokuplje

Pozdrav.

Prvo instaliraj neki Antivirus i skeniraj sistem. Ukoliko mislis da i dalje imas problem postavi odgovarajuce logove.



MyCity » Ambulanta -> Arhiva Ambulante » Keyloger ili ne?

Ko je trenutno na forumu
 

Ukupno su 1107 korisnika na forumu :: 132 registrovanih, 5 sakrivenih i 970 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: -[CoA]-, 015, 100ka, Agape, ajo baba, AleksandarV, AndrejPetar, Armadillo, arsa, Avalon015, bato_banjaluka, Betty25, black venom, Boban0312, bojcistv, bokisha253, BOXRR, bozomotika, bpvl, brundo65, cezar67, CikaKURE, Coabelgrade, darkangel, darkdruid72, Dejan_vw, Deki Duga Devetka, Desmond, djile1, Djokislav, DJUNTA, dovlafkcz, dragan_mig31, dragoljub11987, dusanobr, Electron, EXIT78, Fabius, Feller, filip1326, FOX, GeoM, Georgius, gomago, GORDI, Haris, hpetr, icemilos, istina, ivicasimo, JK, Jomini, JOntra, karevski, kikisp, KonstantinR, Korle, kovinacc, Kriglord, Kubovac, kuntalo, lacko, lakson001, leptirleptir, Lieutenant, Litostroton, LostInSpaceandTime, M74AB3, maksi007, mane123, Manjane, markomacii9, mexo, Mig 29, Milan Miscevic, milanpb, Miletić Zoran, Milos ZA, Misha2101, mkukoleca, mm1811, N.e.m.a.nj.a., neko_drugi, Nmr, oldtimer, ostoja, panzermilan45, pein, Pekman, Petarvu, pirke96, pisac12, Povratak1912, predragc, PrincipL, raptorsi, rebro1974, Romibrat, Rothmans, rovac, s0ne, sabac015555m, sabros, samo opusteno, samocitam, samojednoimeznam, Sančo, sap, sekretar, shlauf, Stoilkovic, tachinni, tanakadzo, The Joker, tomigun, Trivo, TRZH92, tvlada, Utd4ce, VanZan, vaso1, vladetije, voja64, Vrač, vuksa72, X3, Zadonbas, Zavulon, ZetaMan, zombicar153, Zvrk, Žrnov