MyCity » Ambulanta -> Arhiva Ambulante » Molim proveru

Molim proveru

Napisano na dan: 26.8.2008
1

Molim proveru
Sledeća strana Pagination

Idi na vrh

Poslao: 26 Avg 2008 13:32
Idi na vrh
offline
  • Pridružio: 31 Dec 2005
  • Poruke: 2408

Molim za pomoc. Dogodilo se pre sat vremena. Stigla mi je u Inbox Incredimail-a otvorena poruka od nekog sa sajta B92 (tu osobu poznajem, ali je ovo prvi put da mi salje email). Nista nisam mogla da uradim s tom porukom. Od tog trenutka poceo je da iskace Pop Up prozor za IncrediMail Babylon, mis je poludeo.
Sve vreme bio je ukljucen AVG i normalno je radio, ali nista nije prijavio. Ad-Adware se najednom iskljucio. Pokrenula sam sken na njemu, otkrio je i uklonio 32 privacy objects. Vise ne mogu da ga pokrenem.

Ovo je HijackThis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 13:13:52, on 26.8.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16544)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\PROGRA~1\AVG\AVG8\avgscanx.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Gordana\Desktop\New Folder\TR3.exe.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Picture Motion Browser Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O8 - Extra context menu item: &Windows Live Search - [Link mogu videti samo ulogovani korisnici]\Program Files\Windows Live Toolbar\msntb.dll/search.htm
O8 - Extra context menu item: Add to Windows &Live Favorites - [Link mogu videti samo ulogovani korisnici]
O8 - Extra context menu item: E&xport to Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [Link mogu videti samo ulogovani korisnici]
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

--
End of file - 5137 bytes



Poslao: 26 Avg 2008 13:49
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8620
  • Gde živiš: Novi Beograd

Pozzz,

licno ne vidim nista sporno, ali cemo uraditi dublju analizu.

Uradi sledece:

* Klikni desnim tasterom miša na AVG ikonicu ( ) u donjem, desnom uglu ekrana.
* Kada se pokrene AVG Control Center, dvoklikni na AVG Resident Shield komponentu.
* U prozoru koji se otvori, deštikliraj opciju Turn on AVG Resident Shield i klikni OK.

Napomena: Ne zaboravi da uključiš ovu opciju po završetku čišćenja.


Skini ComboFix sa jedne od sledecih adresa na Desktop:
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.



Poslao: 26 Avg 2008 14:07
Idi na vrh
offline
  • Pridružio: 31 Dec 2005
  • Poruke: 2408

Helen1, puno ti hvala. Trenutno je u toku AVG running scans i uz to ne mogu da skinem, tj. da snimim ComboFix ni sa jednog od ponudjenih linkova.

Poslao: 26 Avg 2008 15:11
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8620
  • Gde živiš: Novi Beograd

OK. Kad zavrsi scan, ti probaj ponovo da skines, ako zelis da nastavimo.

Ako ne budes mogla da skines nacicemo nacina da mozes Mr. Green

Poslao: 26 Avg 2008 17:56
Idi na vrh
offline
  • Pridružio: 31 Dec 2005
  • Poruke: 2408

Zelim da nastavimo, izvinjavam se, ovaj sken je mnogo dugo trajao, ali nemam mogucnost da skinem ComboFix sa ovih adresa ("Save As" je iskljuceno).

Poslao: 26 Avg 2008 17:59
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8620
  • Gde živiš: Novi Beograd

Probaj odavde:

[Link mogu videti samo ulogovani korisnici]

Poslao: 26 Avg 2008 18:32
Idi na vrh
offline
  • Pridružio: 31 Dec 2005
  • Poruke: 2408

Ista situacija.

Dopuna: 26 Avg 2008 18:32

Evo i loga

ComboFix 08-08-25.01 - Gordana 2008-08-26 18:23:24.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1251.7.1033.18.366 [GMT 2:00]
Running from: C:\Documents and Settings\Gordana\Desktop\ffff.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Documents and Settings\Gordana\Application Data\macromedia\Flash Player\#SharedObjects\DHALN6NV\bin.clearspring.com
C:\Documents and Settings\Gordana\Application Data\macromedia\Flash Player\#SharedObjects\DHALN6NV\bin.clearspring.com\clearspring.sol
C:\Documents and Settings\Gordana\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com
C:\Documents and Settings\Gordana\Application Data\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#bin.clearspring.com\settings.sol
C:\WINDOWS\system32\grouppolicy\machine\scripts\scripts.ini

.
((((((((((((((((((((((((( Files Created from 2008-07-26 to 2008-08-26 )))))))))))))))))))))))))))))))
.

2008-08-05 11:40 . 2008-08-05 11:40 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\IM
2008-08-05 11:37 . 2008-08-05 11:37 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\IncrediMail
2008-08-01 14:17 . 2008-08-01 14:17 <DIR> d-------- C:\Program Files\Windows Live Favorites
2008-08-01 14:16 . 2008-08-01 14:16 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Windows Live Toolbar
2008-08-01 11:16 . 2008-08-01 14:17 <DIR> d-------- C:\Program Files\Windows Live Toolbar

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-26 10:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-08-23 12:41 --------- d-----w C:\Documents and Settings\Gordana\Application Data\AdobeUM
2008-08-05 09:38 --------- d-----w C:\Program Files\IncrediMail
2008-08-01 12:12 --------- d-----w C:\Program Files\MSN Messenger
2008-08-01 12:09 --------- d-----w C:\Program Files\Windows Live
2008-08-01 09:13 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2008-08-01 09:05 --------- d-----w C:\Documents and Settings\All Users\Application Data\WLInstaller
2008-07-04 07:44 96,520 ----a-w C:\WINDOWS\system32\drivers\avgldx86.sys
2008-07-04 07:44 76,040 ----a-w C:\WINDOWS\system32\drivers\avgtdix.sys
2008-07-04 07:44 10,520 ----a-w C:\WINDOWS\system32\avgrsstx.dll
2001-11-23 04:08 712,704 ----a-w C:\WINDOWS\inf\OTHER\AUDIO3D.DLL
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 03:07 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2005-02-24 07:32 5537792]
"NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2005-02-24 07:32 86016]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-07-04 09:44 1232152]
"QuickTime Task"="C:\Program Files\QuickTime\QTTask.exe" [2008-05-27 10:50 413696]
"nwiz"="nwiz.exe" [2005-02-24 07:32 1495040 C:\WINDOWS\system32\nwiz.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 03:07 15360]

C:\Documents and Settings\Gordana\Start Menu\Programs\Startup\
Picture Motion Browser Media Check Tool.lnk - C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2008-01-21 02:24:14 344064]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\group policy\state\Machine\Scripts\Shutdown\0\0]
"Script"=C:\ntosboot.bat

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Acrobat Assistant.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Acrobat Assistant.lnk
backup=C:\WINDOWS\pss\Acrobat Assistant.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^Gordana^Start Menu^Programs^Startup^Adobe Gamma.lnk]
path=C:\Documents and Settings\Gordana\Start Menu\Programs\Startup\Adobe Gamma.lnk
backup=C:\WINDOWS\pss\Adobe Gamma.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 2004-08-04 03:07 15360 C:\WINDOWS\system32\ctfmon.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IncrediMail]
--a------ 2008-07-24 14:22 243072 C:\Program Files\IncrediMail\bin\IncMail.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--a------ 2004-11-02 20:24 32768 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\WINDOWS\\system32\\mmc.exe"=
"C:\\Program Files\\IncrediMail\\bin\\ImApp.exe"=
"C:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"C:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"C:\\Program Files\\Mozilla Firefox\\firefox.exe"=
"C:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"C:\\Program Files\\MSN Messenger\\livecall.exe"=

R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-07-04 09:44]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-07-04 09:44]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-07-04 09:44]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-07-04 09:44]
S3 usnjsvc;Messenger Sharing Folders USN Journal Reader service;C:\Program Files\MSN Messenger\usnsvc.exe [2007-01-19 12:54]

*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
.
Contents of the 'Scheduled Tasks' folder

2008-08-11 C:\WINDOWS\Tasks\AppleSoftwareUpdate.job
- C:\Program Files\Apple Software Update\SoftwareUpdate.exe [2008-04-11 17:57]

2008-08-26 C:\WINDOWS\Tasks\Check Updates for Windows Live Toolbar.job
- C:\Program Files\Windows Live Toolbar\MSNTBUP.EXE [2006-09-27 17:39]
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-DiskeeperSystray - C:\Program Files\Executive Software\Diskeeper\DkIcon.exe
MSConfigStartUp-ImInstaller_IncrediMail - C:\DOCUME~1\Gordana\LOCALS~1\Temp\ImInstaller\IncrediMail\incredimail_install.exe
MSConfigStartUp-Cmaudio - cmicnfg.cpl


.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\Gordana\Application Data\Mozilla\Firefox\Profiles\y3y5rldm.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - [Link mogu videti samo ulogovani korisnici]
.

**************************************************************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, [Link mogu videti samo ulogovani korisnici]
Rootkit scan 2008-08-26 18:25:30
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
Completion time: 2008-08-26 18:27:40
ComboFix-quarantined-files.txt 2008-08-26 16:27:13

Pre-Run: 31,593,029,632 bytes free
Post-Run: 31,797,342,208 bytes free

125 --- E O F --- 2007-10-19 08:34:44

Poslao: 26 Avg 2008 22:13
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8620
  • Gde živiš: Novi Beograd

Kakvo je sad stanje?

Poslao: 26 Avg 2008 22:23
Idi na vrh
offline
  • Pridružio: 31 Dec 2005
  • Poruke: 2408

Stanje je sad super, tj. normalno u odnosu na ono danas. Ali je Ad-Advare realtime protection i dalje off.

Poslao: 26 Avg 2008 22:44
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8620
  • Gde živiš: Novi Beograd

Za ovaj Ad-aware cu morati da se konsultujem sa kolegama. Uglavnom nema niceg vise.... ali budi blizu, javljam se cim se oni meni jave Wink

Dopuna: 26 Avg 2008 22:44

Pita drug Boban (ne pevac) da li javlja neku gresku?

MyCity » Ambulanta -> Arhiva Ambulante » Molim proveru

Ko je trenutno na forumu
 

Ukupno su 1187 korisnika na forumu :: 116 registrovanih, 5 sakrivenih i 1066 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 4thFlavian, antonije64, Aristotle2002, Armadillo, Beardonitch, blatruc82, Boris.A, Borkanović, boromir, borya90, Botovac, Bubimir, chervoncy, Cicumile, Cigi, cikadeda, cyprus, Dalibor Šafar, DalmatinacMF, Dambi, darko_c, darkojovxp, dearg, del boy, delboy, Dimitrije Paunovic, djordjekec, Dogma21, doktor097, Dovla 1980, draganl, dushan, FileFinder, Georgius, Gheljda, Goran 0000, Hardenberg, HrcAk47, Jakonjveliki, jarovitt, jodzula, karevski, Koridor, Kriglord, krkalon, Kubovac, kuntalo, KUZMAR, kybonacci, ljubsz, LostInSpaceandTime, luka35, M74AB3, Mackomen, Mane88, mat, mercedesamg, Mi lao shu, milanstankovic087, mile.ilic75, milenko crazy north, Milos ZA, Milos1389, milutin134, Mitogna, MK10, mkukoleca, nebidrag, nemkea71, Nikola Galovic, nikoladim, nisamBot, nobutado, Nomica, ObelixSRB, Paklenica, Papadubi, Parker, Phalanx, Podljub, Polifon, powSrb, precan, PrincipL, Razdroid, ruger357, sakac23, Sančo, saputnik plavetnila, savaskytec, Sevetar, shlauf, Sirius, SOVO515, stalja, stegonosa, suton, TheDictator, Timočka Divizija, Trpe Grozni, TRZH92, umpah-pah, vanja.maric, vathra, Vatreni Zmaj, vensla, Viktor Petrenko, Vlada78, vladas87, voja64, Woya, yagosh, Zavulon, zbazin, zixo, ZlatniRez