Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:0

1

Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 15:0

offline
  • Pridružio: 27 Mar 2009
  • Poruke: 202
  • Gde živiš: Sombor

Problem sa kompjuterom gasi se posle paljenja interneta

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8616
  • Gde živiš: Novi Beograd

Zdravo,

Jesi li uspeo da skeniras sa HiJack This-om?

offline
  • Pridružio: 27 Mar 2009
  • Poruke: 202
  • Gde živiš: Sombor

nerazumem pitanje.

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8616
  • Gde živiš: Novi Beograd

Kako ne razumes pitanje?

U naslov teme si stavio ime programa sa kojim treba da skeniras. Gde je taj log?

offline
  • Pridružio: 27 Mar 2009
  • Poruke: 202
  • Gde živiš: Sombor

a to ja sam nov u tome pa sam to slucajno stavio kao naslov

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8616
  • Gde živiš: Novi Beograd

OK.

Onda idemo ispocetka, isprati uputstvo sa ovog linka:

http://www.mycity.rs/Ambulanta/Kako-otvoriti-temu-u-Ambulanti.html

i postavi mi log ovde.

offline
  • Pridružio: 27 Mar 2009
  • Poruke: 202
  • Gde živiš: Sombor

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:33:59, on 27.3.2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Eset\nod32kui.exe
D:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Office Mouse Driver\MouseDrv.exe
C:\Program Files\Multimedia Keyboard Driver\PS2USBKbdDrv.exe
C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
D:\Program Files\IObit\Advanced SystemCare 3\AWC.exe
D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
D:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
C:\Program Files\APC\APC PowerChute Personal Edition\apcsystray.exe
D:\Program Files\nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Eset\nod32krn.exe
C:\WINDOWS\system32\svchost.exe
D:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Administrator\Desktop\New Folder\ss.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [BtTray] "D:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe"
O4 - HKLM\..\Run: [WireLessKeyboard] C:\Program Files\Multimedia Keyboard Driver\StartAutorun.exe PS2USBKbdDrv.exe
O4 - HKLM\..\Run: [WireLessMouse] C:\Program Files\Office Mouse Driver\StartAutorun.exe MouseDrv.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [Advanced SystemCare 3] "D:\Program Files\IObit\Advanced SystemCare 3\AWC.exe" /startup
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: APC UPS Status.lnk = ?
O8 - Extra context menu item: Send by Bluetooth - D:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send via &Message... - D:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\WINDOWS\system32\skype4com.dll
O23 - Service: APC UPS Service - American Power Conversion Corporation - C:\Program Files\APC\APC PowerChute Personal Edition\mainserv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BlueSoleilCS - Unknown owner - D:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - D:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - D:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Program Files\nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: NBService - Nero AG - D:\Program Files\nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe

--
End of file - 4111 bytes
A kakve to veze ima sa mpjim problemom?

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8616
  • Gde živiš: Novi Beograd

Ovako,

posto si postavio temu u Ambulanti, ja odmah pretpostavim da imas problema sa nekim virusom, trojancem... i radim analizu HiJack This loga.
Ukoliko vidim neke tragove, ili mi je nesto sumnjivo, radimo dalje, ukoliko nije uputim te negde drugde.

Sad, da li mozes malo bolje da mi objasnis tvoj problem?

offline
  • Pridružio: 27 Mar 2009
  • Poruke: 202
  • Gde živiš: Sombor

Nedavno mi je crko net pa sam pokusao da reinstalisem modem,i posle toga nece da upali...pa sam srusio sistem i instalirao modem i sada nemogu na net duze od 20 min samo se resetuje.

Dopuna: 28 Mar 2009 0:55

Sta uopste radi taj program HiJack This?

offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8616
  • Gde živiš: Novi Beograd

Prikazuje aktivne procese....


Rekao bih da ti prekidi nemaju veze sa malwerom.

Jesi probao da kontaktiras tvog provajdera?


Ovde se nasa prica zavrsava, probaj da se javis u neki drugi forum, pa vidi sta ce ti reci.

Ko je trenutno na forumu
 

Ukupno su 826 korisnika na forumu :: 37 registrovanih, 3 sakrivenih i 786 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 3466 - dana 01 Jun 2021 17:07

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, Areal84, Bane san, bigfoot, bobomicek, Boris BM, cenejac111, cifra, Dorcolac, DPera, Duh sa sekirom, Georgius, HrcAk47, Ivan001, Još malo pa deda, ladro, Leonov, Mcdado, mercedesamg, Milometer, Misirac, mkukoleca, Nemanja.M, Panter, Rakenica, raptorsi, S2M, sasa87, shone34, Srki94, stegonosa, Stoilkovic, Tvrtko I, vladaa012, Zoca, zxstole, zziko