MyCity » Ambulanta -> Arhiva Ambulante » Zlob.DNSChanger.Rtk

Zlob.DNSChanger.Rtk

Napisano na dan: 26.7.2008

Strana:
1
2

Zlob.DNSChanger.Rtk

Sledeća strana

Pagination

Odgovori

Strana:
1
2

varagicmarijan Poslao: 26 Jul 2008 14:25 Idi na vrh
offline varagicmarijan Građanin Pridružio: 17 Jul 2008 Poruke: 41 Gde živiš: Pirot/Nis	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! upotrebom Spaybot-a nalazi mi Zlob.DNSChanger.Rtk HKY_LOCAL_MACHINE\SOFTWARE\Microsote\WindowsNT\CurenntVersion\Winlogon\System=...KDDXZ.exe... kad ga ocisti opet sam skenirao i on se opet pojavjuje.?????sta da radim. koristim Dial-up.imam instaliran i NOD32. Dopuna: 26 Jul 2008 14:18 vezano za predhodnu temu takodje mi nod32 pokazoje trojana u win322exe Dopuna: 26 Jul 2008 14:20 virusi koje je nasao NOD so u karantinu Dopuna: 26 Jul 2008 14:25 ostacu mali i nikad vise necu otici na sajtove za odrasle upomooooccc

Profil

dr_Bora Poslao: 26 Jul 2008 14:46 Idi na vrh
offline dr_Bora Anti Malware Fighter Rank 2 Pridružio: 24 Jul 2007 Poruke: 12280 Gde živiš: Höganäs, SE	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Poz... http://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

Profil

varagicmarijan Poslao: 26 Jul 2008 18:49 Idi na vrh
offline varagicmarijan Građanin Pridružio: 17 Jul 2008 Poruke: 41 Gde živiš: Pirot/Nis	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Sta raditi obrisali ste mi drugu postavljenu temu

Profil

dr_Bora Poslao: 26 Jul 2008 19:12 Idi na vrh
offline dr_Bora Anti Malware Fighter Rank 2 Pridružio: 24 Jul 2007 Poruke: 12280 Gde živiš: Höganäs, SE	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Druga tema koju si otvorio je bila čak još manje informativna nego ova. Koji deo uputstva ti nije jasan? Pročitaj temu sa linka koji sam postavio, te isprati uputstvo za kreiranje HijackThis loga i iskopiraj ga u ovu temu.

Profil

varagicmarijan Poslao: 26 Jul 2008 19:23 Idi na vrh
offline varagicmarijan Građanin Pridružio: 17 Jul 2008 Poruke: 41 Gde živiš: Pirot/Nis	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! ogfile of HijackThis v1.99.1 Scan saved at 19:20:22, on 26.7.2008 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Running processes: C:\WINDOWS\system32\csrss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\system32\Ati2evxx.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\Explorer.EXE C:\WINDOWS\system32\spoolsv.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Program Files\Eset\nod32kui.exe C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe C:\WINDOWS\system32\ctfmon.exe C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Program Files\Messenger\msmsgs.exe C:\WINDOWS\system32\svchost.exe C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe C:\Program Files\Winamp\winamp.exe C:\Program Files\Opera\opera.exe C:\Documents and Settings\My PC\Desktop\New Folder\TR3.exe O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.1.1119.1736\swg.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [C:\WINDOWS\system32\kdgxz.exe] C:\WINDOWS\system32\kdgxz.exe O4 - HKLM\..\Run: [runservices] C:\WINDOWS\services.exe O4 - HKLM\..\Run: [Adobe Photo Downloader] "C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - gfx2.hotmail.com/mail/w3/pr01/resources/MSNPUpld.cab O17 - HKLM\System\CCS\Services\Tcpip\..\{2C7AF18A-2FAF-4652-BD27-76F33B825AB4}: NameServer = 92.60.224.20 92.60.224.30 O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe Dopuna: 26 Jul 2008 19:23 jel ovako treba da bude

Profil

dr_Bora Poslao: 26 Jul 2008 19:59 Idi na vrh
offline dr_Bora Anti Malware Fighter Rank 2 Pridružio: 24 Jul 2007 Poruke: 12280 Gde živiš: Höganäs, SE	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! * Otvori Nod32 Control Center (Klik na njegovu tray ikonicu ( ) u donjem desnom uglu ekrana). * Izaberi AMON iz Threat Protection grupe opcija. * Na desnom panelu deštikliraj opciju File system monitor (AMON) enabled. * Gašenje ove opcije pokazaće se kroz promenu boje Control Center-a iz zelene u crvenu. Napomena: Ne zaboravi da uključiš ovu opciju po završetku čišćenja. ------------------------------------------------------------------------------------- Skini ComboFix sa jedne od sledecih adresa na Desktop: http://download.bleepingcomputer.com/sUBs/ComboFix.exe http://www.forospyware.com/sUBs/ComboFix.exe http://subs.geekstogo.com/ComboFix.exe Startuj ga i ne diraj prozor programa dok skenira. Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.

Profil

varagicmarijan Poslao: 27 Jul 2008 00:45 Idi na vrh
offline varagicmarijan Građanin Pridružio: 17 Jul 2008 Poruke: 41 Gde živiš: Pirot/Nis	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! ComboFix 08-07-26.1 - My PC 2008-07-27 0:24:36.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.2.1252.1.1033.18.649 [GMT 2:00] Running from: C:\Documents and Settings\My PC\Desktop\ComboFix.exe * Created a new restore point * Resident AV is active WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !! . ((((((((((((((((((((((((((((((((((((((( Other Deletions ))))))))))))))))))))))))))))))))))))))))))))))))) . C:\WINDOWS\system32\kdgxz.exe C:\WINDOWS\system32\MSINET.oca . ((((((((((((((((((((((((( Files Created from 2008-06-26 to 2008-07-26 ))))))))))))))))))))))))))))))) . 2008-07-26 12:04 . 2008-07-26 12:04 <DIR> d-------- C:\Documents and Settings\Administrator 2008-07-25 13:34 . 2008-07-26 15:34 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Google Updater 2008-07-24 00:53 . 2008-07-24 21:27 8,192 --ahs---- C:\WINDOWS\Thumbs.db 2008-07-23 12:29 . 2008-07-23 12:29 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy 2008-07-23 12:29 . 2008-07-23 12:37 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy 2008-07-23 00:00 . 2008-07-23 00:00 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Trymedia 2008-07-22 23:36 . 2008-07-22 23:47 <DIR> d-------- C:\unzipped 2008-07-20 01:28 . 2003-11-04 15:10 69,632 --a------ C:\WINDOWS\system32\lfgif13n.dll 2008-07-20 01:27 . 2004-05-14 16:53 462,848 --a------ C:\WINDOWS\system32\ltkrn13n.dll 2008-07-20 01:27 . 2004-05-14 16:53 450,560 --a------ C:\WINDOWS\system32\ltimg13n.dll 2008-07-20 01:27 . 2004-05-14 16:53 401,408 --a------ C:\WINDOWS\system32\lfcmp13n.dll 2008-07-20 01:27 . 2004-05-14 16:53 299,008 --a------ C:\WINDOWS\system32\ltdis13n.dll 2008-07-20 01:27 . 2004-01-12 02:09 206,336 --a------ C:\WINDOWS\system32\ltefx13n.dll 2008-07-20 01:27 . 2004-05-14 16:53 163,840 --a------ C:\WINDOWS\system32\ltfil13n.dll 2008-07-20 01:27 . 2004-05-14 16:53 57,344 --a------ C:\WINDOWS\system32\lfbmp13n.dll 2008-07-18 17:58 . 2008-07-18 17:58 <DIR> d-------- C:\Documents and Settings\My PC\Application Data\Uniblue 2008-07-18 10:36 . 2008-07-18 10:36 <DIR> d-------- C:\Program Files\AGEIA Technologies 2008-07-17 18:14 . 2008-07-17 19:25 <DIR> d-------- C:\Program Files\Safari 2008-07-17 18:14 . 2008-07-17 18:14 <DIR> d-------- C:\Documents and Settings\My PC\Application Data\Apple Computer 2008-07-17 15:26 . 2008-07-17 15:28 <DIR> d-------- C:\Documents and Settings\My PC\Application Data\RegistryBot 2008-07-10 11:35 . 2008-07-10 11:35 2,401,296 --a------ C:\Program Files\WLinstaller.exe 2008-07-02 18:05 . 2008-07-02 18:05 <DIR> d-------- C:\Documents and Settings\My PC\Application Data\Command & Conquer 3 Tiberium Wars 2008-07-02 17:52 . 2008-07-02 17:52 <DIR> d-------- C:\Program Files\DAEMON Tools 2008-07-02 17:51 . 2008-07-02 17:51 639,224 --a------ C:\WINDOWS\system32\drivers\sptd.sys 2008-07-02 17:37 . 2008-07-02 17:37 <DIR> d--hs---- C:\WINDOWS\ftpcache 2008-07-02 16:41 . 2008-07-02 16:41 <DIR> d-------- C:\Program Files\CONEXANT 2008-07-02 16:41 . 2006-11-08 10:00 989,696 -ra------ C:\WINDOWS\system32\drivers\HSF_DPV.sys 2008-07-02 16:41 . 2006-11-08 09:59 730,112 -ra------ C:\WINDOWS\system32\drivers\HSF_CNXT.sys 2008-07-02 16:41 . 2006-11-08 09:59 257,408 -ra------ C:\WINDOWS\system32\drivers\HSFHWBS2.sys 2008-07-02 16:41 . 2006-11-08 12:10 144,201 -ra------ C:\WINDOWS\system32\drivers\HSFProf.cty 2008-07-02 16:41 . 2006-06-19 07:26 94,208 -ra------ C:\WINDOWS\system32\mdmxsdk.dll 2008-07-02 16:41 . 2006-06-19 07:26 12,672 -ra------ C:\WINDOWS\system32\drivers\mdmxsdk.sys 2008-07-02 16:40 . 2007-03-06 06:27 921,984 -ra------ C:\WINDOWS\system32\drivers\nvnrm.sys 2008-07-02 16:40 . 2007-02-01 11:44 356,352 --a------ C:\WINDOWS\system32\nvunrm.exe 2008-07-02 16:40 . 2007-03-06 06:26 261,632 -ra------ C:\WINDOWS\system32\drivers\nvsnpu.sys 2008-07-02 16:40 . 2007-03-06 06:25 196,096 -ra------ C:\WINDOWS\system32\fdco1.dll 2008-07-02 16:40 . 2007-03-06 06:27 110,592 -ra------ C:\WINDOWS\system32\drivers\nvtcp.sys 2008-07-02 16:40 . 2007-03-06 06:27 58,752 -ra------ C:\WINDOWS\system32\drivers\NVENETFD.sys 2008-07-02 16:40 . 2007-02-01 11:44 36,352 -ra------ C:\WINDOWS\system32\nvconrm.dll 2008-07-02 16:40 . 2007-03-06 06:27 19,968 -ra------ C:\WINDOWS\system32\drivers\nvnetbus.sys 2008-07-02 16:40 . 2007-03-06 06:25 9,216 -ra------ C:\WINDOWS\system32\bdco1.dll 2008-07-02 16:40 . 2006-11-30 10:37 3,903 -ra------ C:\WINDOWS\system32\nvnrm.nvu 2008-06-30 11:07 . 2008-06-30 11:07 2,359,350 --a------ C:\WINDOWS\wallpaper.bmp 2008-06-26 11:44 . 2008-06-26 11:44 <DIR> d-------- C:\Documents and Settings\My PC\Application Data\Leadertech 2008-06-26 11:37 . 2008-06-26 11:37 <DIR> d-------- C:\Documents and Settings\My PC\Application Data\AdobeUM 2008-06-26 11:29 . 2008-06-26 11:29 <DIR> d-------- C:\Program Files\Common Files\PCSuite 2008-06-26 11:29 . 2008-06-26 11:29 <DIR> d-------- C:\Program Files\Common Files\Nokia 2008-06-26 11:29 . 2006-05-29 08:26 127,488 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys 2008-06-26 11:29 . 2006-05-29 08:26 30,720 --a------ C:\WINDOWS\system32\nmwcdcocls.dll 2008-06-26 11:29 . 2006-05-29 08:26 13,312 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys 2008-06-26 11:29 . 2006-05-29 08:26 8,704 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys 2008-06-26 11:29 . 2006-05-29 08:26 4,608 --a------ C:\WINDOWS\system32\nmwcdlog.dll . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2008-07-25 11:34 --------- d-----w C:\Program Files\Google 2008-07-24 15:55 --------- d--h--w C:\Program Files\InstallShield Installation Information 2008-07-21 19:51 --------- d-----w C:\Program Files\Opera 2008-07-18 17:10 --------- d-----w C:\Program Files\Common Files\Adobe 2008-07-18 08:31 --------- d-----w C:\Program Files\Winamp 2008-07-17 15:51 --------- d-----w C:\Program Files\Eset 2008-06-29 23:11 --------- d-----w C:\Documents and Settings\My PC\Application Data\Winamp 2008-06-26 09:29 --------- d-----w C:\Program Files\Nokia 2008-06-26 09:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\Downloaded Installations 2008-06-26 08:56 --------- d-----w C:\Documents and Settings\My PC\Application Data\Nokia Multimedia Player 2008-06-25 17:22 --------- d-----w C:\Program Files\My Downloads 2008-06-25 12:51 22,328 ----a-w C:\WINDOWS\system32\drivers\PnkBstrK.sys 2008-06-25 12:51 22,328 ----a-w C:\Documents and Settings\My PC\Application Data\PnkBstrK.sys 2008-06-25 09:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\Skype 2008-06-25 08:59 --------- d-----w C:\Documents and Settings\My PC\Application Data\Datalayer 2008-06-25 08:39 --------- d-----w C:\Documents and Settings\My PC\Application Data\Nokia 2008-06-23 06:51 --------- d-----w C:\Program Files\DIFX 2008-06-23 06:51 --------- d-----w C:\Documents and Settings\All Users\Application Data\PC Suite 2008-06-23 06:50 --------- d-----w C:\Documents and Settings\My PC\Application Data\PC Suite 2008-06-13 14:18 --------- d-----w C:\Program Files\Ubi Soft 2008-06-13 13:30 --------- d-----w C:\Program Files\Common Files\Bcgsoft 2008-06-13 13:24 --------- d-----w C:\Program Files\OpenAL 2008-06-13 13:05 271,360 ----a-w C:\WINDOWS\system32\drivers\atksgt.sys 2008-06-13 13:05 18,048 ----a-w C:\WINDOWS\system32\drivers\lirsgt.sys 2008-06-13 13:04 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard 2008-06-13 12:56 48,928 ----a-w C:\WINDOWS\system32\drivers\Tetris.sys 2008-06-13 12:55 162,432 ----a-w C:\WINDOWS\system32\drivers\ithsgt.sys 2008-06-13 12:55 12,032 ----a-w C:\WINDOWS\system32\drivers\lilsgt.sys 2008-06-06 20:22 --------- d-----w C:\Documents and Settings\My PC\Application Data\Nero 2008-06-06 15:26 --------- d-----w C:\Program Files\audiograbber 2008-06-06 14:30 --------- d-----w C:\Documents and Settings\My PC\Application Data\Media Player Classic 2008-06-06 13:41 --------- d-----w C:\Documents and Settings\My PC\Application Data\CyberLink 2008-06-06 13:33 --------- d-----w C:\Documents and Settings\My PC\Application Data\ACD Systems 2008-06-06 12:10 502,368 ----a-w C:\WINDOWS\system32\drivers\amon.sys 2008-06-06 12:10 --------- d-----w C:\Documents and Settings\All Users\Application Data\CyberLink 2008-06-06 12:09 --------- d-----w C:\Program Files\CyberLink 2008-06-06 12:08 --------- d-----w C:\Program Files\Nero 2008-06-06 12:08 --------- d-----w C:\Program Files\lame-3.97 2008-06-06 12:08 --------- d-----w C:\Program Files\Common Files\Nero 2008-06-06 12:06 10,368 ----a-w C:\WINDOWS\system32\drivers\pfc.sys 2008-06-06 12:06 --------- d-----w C:\Program Files\Common Files\ACD Systems 2008-06-06 12:06 --------- d-----w C:\Program Files\ACD Systems 2008-06-06 12:06 --------- d-----w C:\Documents and Settings\All Users\Application Data\ACD Systems 2008-06-06 12:05 --------- d-----w C:\Program Files\K-Lite Codec Pack 2008-06-06 11:58 --------- d-----w C:\Documents and Settings\My PC\Application Data\ATI 2008-06-06 11:58 --------- d-----w C:\Documents and Settings\All Users\Application Data\ATI 2008-06-06 11:54 --------- d-----w C:\Program Files\My Company Name 2008-06-06 11:53 --------- d-----w C:\Program Files\ATI Technologies 2008-06-06 11:51 --------- d-----w C:\Program Files\Common Files\ATI Technologies 2008-06-06 11:45 --------- d-----w C:\Program Files\Common Files\InstallShield 2008-06-06 11:40 --------- d-----w C:\Program Files\Realtek 2008-06-06 11:40 --------- d-----w C:\Program Files\Driver 2008-06-06 11:39 315,392 ----a-w C:\WINDOWS\HideWin.exe 2008-06-06 11:39 --------- d-----w C:\Documents and Settings\My PC\Application Data\InstallShield 2008-06-06 11:34 --------- d-----w C:\Program Files\Common Files\L&H 2008-06-06 11:33 --------- d-----w C:\Program Files\Microsoft.NET 2008-06-06 11:33 --------- d-----w C:\Program Files\Microsoft Works 2008-06-06 11:33 --------- d-----w C:\Program Files\Microsoft ActiveSync 2008-06-06 11:25 --------- d-----w C:\Program Files\microsoft frontpage . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . Note empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 00:56 15360] "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2008-07-25 13:34 68856] "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-08-04 01:06 1667584] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2006-09-14 10:34 921600] "Adobe Photo Downloader"="C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe" [2005-06-06 23:46 57344] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 00:56 15360] [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32] "VIDC.YV12"= yv12vfw.dll "VIDC.ACDV"= ACDV.dll [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Speed Launch.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Speed Launch.lnk backup=C:\WINDOWS\pss\Adobe Reader Speed Launch.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Adobe Reader Synchronizer.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Reader Synchronizer.lnk backup=C:\WINDOWS\pss\Adobe Reader Synchronizer.lnkCommon Startup [HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^WinZip Quick Pick.lnk] path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\WinZip Quick Pick.lnk backup=C:\WINDOWS\pss\WinZip Quick Pick.lnkCommon Startup HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C: HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\WINDOWS HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\C:\WINDOWS\system32 [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Photo Downloader] --a------ 2005-06-06 23:46 57344 C:\Program Files\Adobe\Photoshop Album Starter Edition\3.0\Apps\apdproxy.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE] --a------ 2004-08-04 00:56 15360 C:\WINDOWS\system32\ctfmon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DAEMON Tools] --a------ 2006-11-12 12:48 157592 C:\Program Files\DAEMON Tools\daemon.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LanguageShortcut] --------- 2007-02-07 16:21 54832 C:\Program Files\CyberLink\PowerDVD\Language\Language.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS] --------- 2004-08-04 01:06 1667584 C:\Program Files\Messenger\msmsgs.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication] --a------ 2006-06-15 12:36 229376 C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync] --a------ 2006-06-27 16:21 1449984 C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl] --------- 2007-03-14 21:01 71216 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpybotSD TeaTimer] -rahs---- 2008-01-28 11:43 2097488 C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\StartCCC] --a------ 2006-11-10 12:35 90112 C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent] --a------ 2008-03-27 08:35 36352 C:\Program Files\Winamp\winampa.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Alcmtr] --a------ 2005-05-03 18:43 69632 C:\WINDOWS\Alcmtr.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL] --a------ 2007-10-16 18:30 16855552 C:\WINDOWS\RTHDCPL.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SkyTel] --a------ 2007-10-11 11:04 1826816 C:\WINDOWS\SkyTel.exe [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services] "wuauserv"=2 (0x2) "wscsvc"=2 (0x2) [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List] "%windir%\\system32\\sessmgr.exe"= "C:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"= "C:\\Program Files\\Messenger\\msmsgs.exe"= R1 BIOS;BIOS;C:\WINDOWS\system32\drivers\BIOS.sys [2005-03-16 08:23] R2 {95808DC4-FA4A-4c74-92FE-5B863F82066B};{95808DC4-FA4A-4c74-92FE-5B863F82066B};C:\Program Files\CyberLink\PowerDVD\000.fcl [2006-11-02 16:51] R2 ithsgt;ithsgt;C:\WINDOWS\system32\DRIVERS\ithsgt.sys [2008-06-13 14:55] R2 lilsgt;lilsgt;C:\WINDOWS\system32\DRIVERS\lilsgt.sys [2008-06-13 14:55] R3 Tetris;Tetris driver;C:\WINDOWS\system32\Drivers\Tetris.sys [2008-06-13 14:56] . - - - - ORPHANS REMOVED - - - - HKLM-Run-C:\WINDOWS\system32\kdgxz.exe - C:\WINDOWS\system32\kdgxz.exe HKLM-Run-runservices - C:\WINDOWS\services.exe HKLM-Explorer_Run-this - C:\Program Files\Web Technologies\wcs.exe MSConfigStartUp-BearShare - C:\Program Files\BearShare\BearShare.exe MSConfigStartUp-kdgxz - C:\WINDOWS\system32\kdgxz.exe MSConfigStartUp-runservices - C:\WINDOWS\services.exe MSConfigStartUp-swg - C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe MSConfigStartUp-Uniblue RegistryBooster 2 - C:\Program Files\Uniblue\RegistryBooster 2\RegistryBooster.exe MSConfigStartUp-Device Detector - DevDetect.exe . ------- Supplementary Scan ------- . R0 -: HKCU-Main,Start Page = hxxp://www.google.com/ R0 -: HKCU-Main,Search Page = hxxp://www.google.com R0 -: HKCU-Main,Search Bar = hxxp://www.google.com/ie R0 -: HKLM-Main,Default_Search_URL = hxxp://www.google.com/ie R1 -: HKCU-Internet Connection Wizard,ShellNext = iexplore R0 -: HKCU-Search,SearchAssistant = hxxp://www.google.com/ie R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/search?q=%s R0 -: HKLM-Search,SearchAssistant = hxxp://www.google.com/ie O8 -: E&xport to Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 ************************************************************************ catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, gmer.net Rootkit scan 2008-07-27 00:27:48 Windows 5.1.2600 Service Pack 2 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ********************************************************************** [HKEY_LOCAL_MACHINE\System\ControlSet001\Services\{95808DC4-FA4A-4c74-92FE-5B863F82066B}] "ImagePath"="\??\C:\Program Files\CyberLink\PowerDVD\000.fcl" . ------------------------ Other Running Processes ------------------------ . C:\WINDOWS\system32\ati2evxx.exe C:\WINDOWS\system32\ati2evxx.exe C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE C:\Program Files\Eset\nod32krn.exe C:\WINDOWS\system32\PnkBstrA.exe C:\Program Files\CyberLink\Shared files\RichVideo.exe C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe . ************************************************************************ . Completion time: 2008-07-27 0:31:10 - machine was rebooted ComboFix-quarantined-files.txt 2008-07-26 22:30:41 Pre-Run: 22,420,709,376 bytes free Post-Run: 22,551,998,464 bytes free 251 Dopuna: 27 Jul 2008 0:40 i sta sad? Dopuna: 27 Jul 2008 0:45 halo.,molim ,rambo ja te volim CUJE LI ME NEKO.... DIAL-UP

Profil

bobby Poslao: 27 Jul 2008 00:47 Idi na vrh
offline bobby Administrator Pridružio: 04 Sep 2003 Poruke: 24135 Gde živiš: Wien	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Ajde smiri se malko i pokazi malo postovanja. Mislis li da ce neko ovde da visi 24 sata dnevno i da ceka samo na tvoj log, i odmah da ti postavi resenje? Em je prosla ponoc, em je za pregled ovog loga ponekad potrebno i vise od sat vremena. Pokazi malo postovanja.

Profil

varagicmarijan Poslao: 27 Jul 2008 00:54 Idi na vrh
offline varagicmarijan Građanin Pridružio: 17 Jul 2008 Poruke: 41 Gde živiš: Pirot/Nis	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! DA UKLJUCIM NOD32 ???? Dopuna: 27 Jul 2008 0:51 s.soooooryyyyy Dopuna: 27 Jul 2008 0:54 dali da vratim NOD kako treba .mislim dok cekam

Profil

bobby Poslao: 27 Jul 2008 01:22 Idi na vrh
offline bobby Administrator Pridružio: 04 Sep 2003 Poruke: 24135 Gde živiš: Wien	0Niko još nije pohvalio poruku. Registruj se da bi pohvalio/la poruku! Vrati.

Profil

MyCity » Ambulanta -> Arhiva Ambulante » Zlob.DNSChanger.Rtk

Ko je trenutno na forumu

Ukupno su 816 korisnika na forumu :: 8 registrovanih, 1 sakriven i 807 gosta :: [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:: Korisnici trenutno na forumu: DPera, goxin, Hans Gajger, kljift, koom0001, laki_bb, Neutral-M, wizzardone

Svaki korisnik ovog sajta je odgovoran za sadržaj svoje poruke koju objavi na sajtu. Sajt se odriče svake odgovornosti za sadržaj tih poruka.
Postavljanjem vaše poruke ili vašeg autorskog dela na ovaj sajt, saglasni ste da ovaj sajt postaje distributer vašeg dela, i odričete se mogućnosti njegovog povlačenja ili brisanja, bez saglasnosti uprave sajta.
Distribucija sadržaja sa ovog sajta je dozvoljena samo u nekomercijalne svrhe, uz obaveznu napomenu da je sadržaj preuzet sa ovog sajta, i uz obavezno navođenje adrese MyCity sajta. Za sve ostale vidove distribucije obavezni ste da prethodno zatražite odobrenje od vlasnika MyCity sajta.
MyCity pokrenuo, administrira i razvija Predrag Damnjanović, a o uređenju sajta se brine MyCity Tim.
Ukoliko želite da nas kontaktirate kliknite ovde.
Naši sajtovi:
Vesti, Vojni forum, Zaštita od virusa, TekstPesme.rs

This content is licensed under a Creative Commons License.
Based on phpBB 2, translated by Simke, designed by