Phishing...

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Uloguj se preko Facebooka da bi skinuo fajl:

Problem obrazlozen ovde : [Link mogu videti samo ulogovani korisnici]

DDS (Ver_2012-11-20.01) - NTFS_x86
Internet Explorer: 9.0.8112.16455 BrowserJavaVersion: 10.3.1
Run by home at 20:16:59 on 2012-12-05
Microsoft Windows 7 Home Basic 6.1.7601.1.1252.1.1033.18.2047.1002 [GMT 1:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {B140BF4E-23BB-4198-90AB-A51A4C60A69C}
SP: Microsoft Security Essentials *Enabled/Updated* {0A215EAA-0581-4E16-AA1B-9E6837E7EC21}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\nvvsvc.exe
C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
C:\Windows\system32\nvvsvc.exe
C:\Windows\System32\spoolsv.exe
C:\Program Files\Common Files\Adobe\ARM\1.0\armsvc.exe
C:\Windows\system32\lxcgcoms.exe
E:\programi\MBAM\Malwarebytes_NEW\Malwarebytes' Anti-Malware\mbamscheduler.exe
E:\programi\MBAM\Malwarebytes_NEW\Malwarebytes' Anti-Malware\mbamservice.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
C:\Program Files\Microsoft Security Client\NisSrv.exe
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
E:\programi\MBAM\Malwarebytes_NEW\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Program Files\Lexmark 2300 Series\lxcgmon.exe
C:\Program Files\Lexmark 2300 Series\ezprint.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\MCShield\MCShieldRTM.exe
C:\Users\home\Local Settings\Apps\F.lux\flux.exe
E:\programi\webCam\VMonitor.exe
C:\Program Files\OpenOffice.org 3\program\soffice.exe
C:\Program Files\OpenOffice.org 3\program\soffice.bin
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Windows\system32\SearchIndexer.exe
C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
C:\Windows\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Windows\system32\Macromed\Flash\FlashPlayerPlugin_11_4_402_287.exe
C:\Program Files\Microsoft Security Client\MpCmdRun.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\svchost.exe -k imgsvc
C:\Windows\system32\svchost.exe -k LocalServiceAndNoImpersonation
C:\Windows\system32\svchost.exe -k SDRSVC
.
============== Pseudo HJT Report ===============
.
uStart Page = [Link mogu videti samo ulogovani korisnici]
BHO: Adobe PDF Link Helper: {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: Skype Browser Helper: {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {DBC80044-A445-435b-BC74-9C25C1C588A9} - c:\program files\java\jre7\bin\jp2ssv.dll
uRun: [MCShield Monitor] c:\program files\mcshield\mcshieldrtm.exe
uRun: [F.lux] "c:\users\home\local settings\apps\f.lux\flux.exe" /noshow
uRun: [Facebook Update] "c:\users\home\appdata\local\facebook\update\FacebookUpdate.exe" /c /nocrashserver
uRun: [DAEMON Tools Lite] "e:\programi\daemon tools lite\DTLite.exe" -autorun
mRun: [Adobe ARM] "c:\program files\common files\adobe\arm\1.0\AdobeARM.exe"
mRun: [LXCGCATS] rundll32 c:\windows\system32\spool\drivers\w32x86\3\LXCGtime.dll,_RunDLLEntry@16
mRun: [lxcgmon.exe] "c:\program files\lexmark 2300 series\lxcgmon.exe"
mRun: [EzPrint] "c:\program files\lexmark 2300 series\ezprint.exe"
mRun: [MSC] "c:\program files\microsoft security client\msseces.exe" -hide -runkey
mRun: [NBAgent] "e:\programi\nero\install\nero\nero 11\nero backitup\NBAgent.exe" /WinStart
StartupFolder: c:\users\home\appdata\roaming\micros~1\windows\startm~1\programs\startup\openof~1.lnk - c:\program files\openoffice.org 3\program\quickstart.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\sweexs~1.lnk - e:\programi\webcam\VMonitor.exe
uPolicies-Explorer: NoDrives = dword:0
uPolicies-Explorer: NoDriveTypeAutoRun = dword:145
mPolicies-Explorer: NoDrives = dword:0
mPolicies-System: ConsentPromptBehaviorAdmin = dword:5
mPolicies-System: ConsentPromptBehaviorUser = dword:3
mPolicies-System: EnableUIADesktopToggle = dword:0
IE: E&xport to Microsoft Excel - c:\progra~1\mif5ba~1\office12\EXCEL.EXE/3000
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-0017-0000-0003-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - [Link mogu videti samo ulogovani korisnici]
TCP: NameServer = 8.8.8.8 8.8.4.4
TCP: Interfaces\{775BC556-39A5-4E28-A918-FCEC9D13A8E6} : DHCPNameServer = 77.239.64.19 77.239.64.20
TCP: Interfaces\{775BC556-39A5-4E28-A918-FCEC9D13A8E6}\4505D2C494E4B4F5146443031343 : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{775BC556-39A5-4E28-A918-FCEC9D13A8E6}\4554252514D245E44523 : DHCPNameServer = 77.74.231.141 8.8.8.8 8.8.4.4
TCP: Interfaces\{775BC556-39A5-4E28-A918-FCEC9D13A8E6}\4554252514D27414D4540223 : DHCPNameServer = 77.74.231.141 8.8.8.8 8.8.4.4
TCP: Interfaces\{775BC556-39A5-4E28-A918-FCEC9D13A8E6}\4554252514D2B4F46594C4A4553554 : DHCPNameServer = 77.74.231.141 8.8.8.8 8.8.4.4
TCP: Interfaces\{775BC556-39A5-4E28-A918-FCEC9D13A8E6}\4556272716E4564702455616D6 : DHCPNameServer = 77.74.231.141 8.8.8.8 8.8.4.4
TCP: Interfaces\{775BC556-39A5-4E28-A918-FCEC9D13A8E6}\46C696E6B6 : DHCPNameServer = 192.168.0.1
TCP: Interfaces\{80B68877-4598-4DAB-A11E-E88730E715D4} : DHCPNameServer = 8.8.8.8 8.8.4.4
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\program files\common files\skype\Skype4COM.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\users\home\appdata\roaming\mozilla\firefox\profiles\ci43df4b.default\
FF - plugin: c:\program files\adobe\reader 10.0\reader\air\nppdf32.dll
FF - plugin: c:\program files\google\update\1.3.21.123\npGoogleUpdate3.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dv.dll
FF - plugin: c:\program files\nvidia corporation\3d vision\npnv3dvstreaming.dll
FF - plugin: c:\program files\oracle\javafx 2.0 runtime\bin\plugin2\npjp2.dll
FF - plugin: c:\program files\pando networks\media booster\npPandoWebPlugin.dll
FF - plugin: c:\users\home\appdata\local\facebook\video\skype\npFacebookVideoCalling.dll
FF - plugin: c:\users\home\appdata\roaming\f4\f4webplugin\npF4WebPlugin.dll
FF - plugin: c:\users\home\appdata\roaming\mozilla\firefox\profiles\ci43df4b.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
FF - plugin: c:\windows\system32\macromed\flash\NPSWF32_11_4_402_287.dll
FF - plugin: c:\windows\system32\npdeployJava1.dll
FF - plugin: c:\windows\system32\npmproxy.dll
FF - ExtSQL: 2012-10-31 17:30; {82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}; c:\program files\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
.
============= SERVICES / DRIVERS ===============
.
R0 MpFilter;Microsoft Malware Protection Driver;c:\windows\system32\drivers\MpFilter.sys [2012-8-30 193552]
R0 NBVol;Nero Backup Volume Filter Driver;c:\windows\system32\drivers\NBVol.sys [2012-8-25 56496]
R0 NBVolUp;Nero Backup Volume Upper Filter Driver;c:\windows\system32\drivers\NBVolUp.sys [2012-8-25 12464]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver;c:\windows\system32\drivers\dtsoftbus01.sys [2012-10-21 242240]
R2 MBAMScheduler;MBAMScheduler;e:\programi\mbam\malwarebytes_new\malwarebytes' anti-malware\mbamscheduler.exe [2012-9-10 399432]
R2 MBAMService;MBAMService;e:\programi\mbam\malwarebytes_new\malwarebytes' anti-malware\mbamservice.exe [2012-9-10 676936]
R2 NisDrv;Microsoft Network Inspection System;c:\windows\system32\drivers\NisDrvWFP.sys [2011-4-27 99272]
R2 Skype C2C Service;Skype C2C Service;c:\programdata\skype\toolbars\skype c2c service\c2c_service.exe [2012-11-22 3290304]
R2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files\nvidia corporation\3d vision\nvSCPAPISvr.exe [2012-10-2 382824]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2012-4-29 22856]
R3 NisSrv;Microsoft Network Inspection;c:\program files\microsoft security client\NisSrv.exe [2012-9-12 287824]
R3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\drivers\Rt86win7.sys [2009-6-10 139776]
R3 VMUVC;Vimicro Camera Service VMUVC;c:\windows\system32\drivers\VMUVC.sys [2012-4-17 254720]
R3 vvftUVC;Vimicro Camera Filter Service VMUVC;c:\windows\system32\drivers\vvftUVC.sys [2012-4-17 398720]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\microsoft.net\framework\v4.0.30319\mscorsvw.exe [2010-3-18 130384]
S2 SkypeUpdate;Skype Updater;c:\program files\skype\updater\Updater.exe [2012-7-13 160944]
S3 athur;Wireless Network Adapter Service;c:\windows\system32\drivers\athur.sys [2012-4-12 1500160]
S3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\system32\drivers\b57nd60x.sys [2009-7-13 229888]
S3 Revoflt;Revoflt;c:\windows\system32\drivers\revoflt.sys [2012-4-19 27192]
S3 ss_bbus;SAMSUNG USB Mobile Device (WDM);c:\windows\system32\drivers\ss_bbus.sys [2009-9-19 98432]
S3 ss_bmdfl;SAMSUNG USB Mobile Modem (Filter);c:\windows\system32\drivers\ss_bmdfl.sys [2009-9-19 14848]
S3 ss_bmdm;SAMSUNG USB Mobile Modem;c:\windows\system32\drivers\ss_bmdm.sys [2009-9-19 123648]
S3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\TsUsbFlt.sys [2012-4-14 52224]
.
=============== Created Last 30 ================
.
2012-12-04 18:46:39 6812136 ----a-w- c:\programdata\microsoft\microsoft antimalware\definition updates\{58ab5535-9c88-4db1-8b73-80e1b13de580}\mpengine.dll
2012-12-03 14:24:49 6812136 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\backup\mpengine.dll
2012-11-28 19:52:57 -------- d-----w- c:\users\home\appdata\local\TechSmith
2012-11-28 19:51:49 411480 ----a-w- c:\windows\system32\tsccvid.dll
2012-11-28 19:51:47 -------- d-----w- c:\windows\system32\QuickTime
2012-11-28 19:51:32 -------- d-----w- c:\windows\system32\Flash
2012-11-28 19:51:15 -------- d-----w- c:\program files\common files\TechSmith Shared
2012-11-28 08:20:42 740840 ------w- c:\programdata\microsoft\microsoft antimalware\definition updates\{a9bf50bf-e5db-47c0-a3e4-3f6f3054501a}\gapaengine.dll
2012-11-25 18:43:10 74072 ----a-w- c:\windows\system32\XAPOFX1_5.dll
2012-11-25 18:43:10 527192 ----a-w- c:\windows\system32\XAudio2_7.dll
2012-11-25 18:43:09 239960 ----a-w- c:\windows\system32\xactengine3_7.dll
2012-11-25 18:43:09 2106216 ----a-w- c:\windows\system32\D3DCompiler_43.dll
2012-11-25 18:43:08 470880 ----a-w- c:\windows\system32\d3dx10_43.dll
2012-11-25 18:43:08 248672 ----a-w- c:\windows\system32\d3dx11_43.dll
2012-11-25 18:43:08 1868128 ----a-w- c:\windows\system32\d3dcsx_43.dll
2012-11-25 18:43:07 1998168 ----a-w- c:\windows\system32\D3DX9_43.dll
2012-11-22 09:34:38 5885632 ----a-w- c:\program files\mozilla firefox\extensions\{82af8dca-6de9-405d-bd5e-43525bdad38a}\components\SkypeFfComponent.dll
2012-11-19 21:33:01 -------- d-----w- c:\program files\OpenOffice.org 3
2012-11-19 19:39:57 -------- d-----w- C:\Output
2012-11-19 19:16:31 -------- d-----w- c:\users\home\Classic PDF Editor Files
2012-11-17 21:45:45 645992 ----a-w- c:\windows\system32\nvvsvc.exe
2012-11-17 21:45:45 62312 ----a-w- c:\windows\system32\nvshext.dll
2012-11-17 21:45:45 3965288 ----a-w- c:\windows\system32\nvcpl.dll
2012-11-17 21:45:45 2853224 ----a-w- c:\windows\system32\nvsvc.dll
2012-11-17 21:45:45 2557288 ----a-w- c:\windows\system32\nvsvcr.dll
2012-11-17 21:45:44 108392 ----a-w- c:\windows\system32\nvmctray.dll
2012-11-16 23:42:43 47720 ----a-w- c:\windows\system32\drivers\WdfLdr.sys
2012-11-16 23:42:42 9728 ----a-w- c:\windows\system32\Wdfres.dll
2012-11-16 23:42:42 526952 ----a-w- c:\windows\system32\drivers\Wdf01000.sys
2012-11-16 23:42:16 155136 ----a-w- c:\windows\system32\drivers\WUDFRd.sys
2012-11-16 23:42:15 73216 ----a-w- c:\windows\system32\WUDFSvc.dll
2012-11-16 23:42:15 66560 ----a-w- c:\windows\system32\drivers\WUDFPf.sys
2012-11-16 23:42:15 172032 ----a-w- c:\windows\system32\WUDFPlatform.dll
2012-11-16 23:42:14 38912 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2012-11-16 23:42:14 196608 ----a-w- c:\windows\system32\WUDFHost.exe
2012-11-16 23:42:13 613888 ----a-w- c:\windows\system32\WUDFx.dll
2012-11-16 12:01:18 156672 ----a-w- c:\windows\system32\ncsi.dll
2012-11-16 12:01:17 52224 ----a-w- c:\windows\system32\nlaapi.dll
2012-11-16 12:01:17 499712 ----a-w- c:\windows\system32\iphlpsvc.dll
2012-11-16 12:01:17 35328 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2012-11-16 12:01:17 242176 ----a-w- c:\windows\system32\nlasvc.dll
2012-11-16 12:01:17 18944 ----a-w- c:\windows\system32\netevent.dll
2012-11-16 12:01:17 175104 ----a-w- c:\windows\system32\netcorehc.dll
2012-11-16 12:01:17 1293680 ----a-w- c:\windows\system32\drivers\tcpip.sys
2012-11-16 12:01:14 78336 ----a-w- c:\windows\system32\synceng.dll
2012-11-16 12:01:13 2345984 ----a-w- c:\windows\system32\win32k.sys
2012-11-16 12:01:12 44032 ----a-w- c:\windows\system32\dhcpcsvc6.dll
2012-11-16 12:01:12 193536 ----a-w- c:\windows\system32\dhcpcore6.dll
2012-11-11 12:32:13 -------- d-----w- c:\windows\PCHEALTH
2012-11-11 12:30:55 -------- d-----w- c:\windows\SHELLNEW
2012-11-07 05:27:28 -------- d-----w- c:\users\home\appdata\local\Rockstar Games
2012-11-07 05:24:32 462864 ----a-w- c:\windows\system32\d3dx10_37.dll
2012-11-07 05:24:32 3786760 ----a-w- c:\windows\system32\D3DX9_37.dll
2012-11-07 05:24:32 1420824 ----a-w- c:\windows\system32\D3DCompiler_37.dll
2012-11-07 05:24:31 81768 ----a-w- c:\windows\system32\xinput1_3.dll
2012-11-07 05:24:15 -------- d-----w- c:\windows\system32\xlive
2012-11-07 05:24:14 -------- d-----w- c:\program files\Microsoft Games for Windows - LIVE
.
==================== Find3M ====================
.
2012-11-07 05:25:42 107888 ----a-w- c:\windows\system32\CmdLineExt.dll
2012-10-25 20:59:09 691696 ----a-w- c:\windows\system32\drivers\sptd.sys
2012-10-21 17:40:24 242240 ----a-w- c:\windows\system32\drivers\dtsoftbus01.sys
2012-10-16 07:39:52 561664 ----a-w- c:\windows\apppatch\AcLayers.dll
2012-10-10 20:15:04 1867112 ----a-w- c:\windows\system32\nvcuvenc.dll
2012-10-10 20:15:00 2574696 ----a-w- c:\windows\system32\nvcuvid.dll
2012-10-10 20:14:50 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
2012-10-10 20:14:50 12501352 ----a-w- c:\windows\system32\nvwgf2um.dll
2012-10-10 20:14:46 17559912 ----a-w- c:\windows\system32\nvcompiler.dll
2012-10-10 20:14:44 2428776 ----a-w- c:\windows\system32\nvapi.dll
2012-10-10 20:14:42 7697768 ----a-w- c:\windows\system32\nvcuda.dll
2012-10-10 20:14:28 10837352 ----a-w- c:\windows\system32\drivers\nvlddmkm.sys
2012-10-10 20:14:22 19906920 ----a-w- c:\windows\system32\nvoglv32.dll
2012-10-10 20:14:22 1009512 ----a-w- c:\windows\system32\nvdispco32.dll
2012-10-10 20:14:16 6127464 ----a-w- c:\windows\system32\nvopencl.dll
2012-10-10 20:14:16 15309160 ----a-w- c:\windows\system32\nvd3dum.dll
2012-10-08 17:50:15 696760 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2012-10-08 17:50:14 73656 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2012-10-08 07:56:24 1800704 ----a-w- c:\windows\system32\jscript9.dll
2012-10-08 07:48:03 1129472 ----a-w- c:\windows\system32\wininet.dll
2012-10-08 07:47:44 1427968 ----a-w- c:\windows\system32\inetcpl.cpl
2012-10-08 07:44:05 142848 ----a-w- c:\windows\system32\ieUnatt.exe
2012-10-08 07:43:21 420864 ----a-w- c:\windows\system32\vbscript.dll
2012-10-08 07:40:56 2382848 ----a-w- c:\windows\system32\mshtml.tlb
2012-10-02 12:15:52 430952 ----a-w- c:\windows\system32\nvStreaming.exe
2012-09-29 17:54:26 22856 ----a-w- c:\windows\system32\drivers\mbam.sys
2012-09-14 18:28:53 2048 ----a-w- c:\windows\system32\tzres.dll
.
============= FINISH: 20:18:09.92 ===============

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

[Link mogu videti samo ulogovani korisnici]

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Koleza, logovi su cisti...



Da li ti se ta reklama pojavljuje samo na MC-u ili i na drugim sajtovima?

• 0Niko još nije pohvalio poruku.
  Registruj se da bi pohvalio/la poruku!

Samo ma MC.