MyCity » Ambulanta -> Arhiva Ambulante » Problem sa stikom sa killvbs.vbs

Problem sa stikom sa killvbs.vbs

Napisano na dan: 28.1.2008

Problem sa stikom sa killvbs.vbs
Sledeća strana Pagination

Idi na vrh

Poslao: 28 Jan 2008 17:14
Idi na vrh
offline
  • may07  Male
  • Novi MyCity građanin
  • Pridružio: 22 Jan 2008
  • Poruke: 4

uradio sam navedeni postupak iz ambulante i evo mog log fajla.
hvala

Logfile of HijackThis v1.99.1
Scan saved at 17:03:59, on 28.1.2008
Platform: Windows XP SP1 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\PROGRA~1\Aston\aston.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
C:\Program Files\AirLive\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\WINDOWS\System32\svchost.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Phazer\Phazer3.exe
C:\Program Files\AirLive\Bluetooth Software\BTTray.exe
C:\Program Files\LaunchOnFly\lf.exe
C:\PROGRA~1\AirLive\BLUETO~1\BTSTAC~1.EXE
C:\PROGRA~1\INCRED~1\bin\IMApp.exe
C:\Program Files\Miranda\Miranda 32.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\explorer.exe
D:\Moji Dokumenti\New Folder (2)\TR3.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [Phaser] C:\Program Files\Phazer\Phazer3.exe
O4 - HKCU\..\Run: [IncrediMail] C:\PROGRA~1\INCRED~1\bin\IncMail.exe /c
O4 - Startup: Bluetooth.lnk = ?
O4 - Startup: LaunchOnFly.lnk = C:\Program Files\LaunchOnFly\lf.exe
O8 - Extra context menu item: &Add animation to IncrediMail Style Box - C:\PROGRA~1\INCRED~1\bin\resources\WebMenuImg.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\AirLive\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\AirLive\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\AirLive\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\System32\shdocvw.dll
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\WINDOWS\System32\shdocvw.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{24640127-6921-4791-96E6-C2CA48FCA2FE}: NameServer = 81.93.64.1
O17 - HKLM\System\CS1\Services\Tcpip\..\{24640127-6921-4791-96E6-C2CA48FCA2FE}: NameServer = 81.93.64.1
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\AirLive\Bluetooth Software\bin\btwdins.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe



Poslao: 28 Jan 2008 17:23
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Da li ti se problem sa killvbs.vbs pojavljuje samo kada prilkucis USB stik na komp?



Poslao: 28 Jan 2008 17:29
Idi na vrh
offline
  • may07  Male
  • Novi MyCity građanin
  • Pridružio: 22 Jan 2008
  • Poruke: 4

da, i to nanekoliko racunara kad ubacim stik (osim na laptopu koji sam formatirao juce, na njemu se ne pojavljuje).

Hvala

Poslao: 28 Jan 2008 17:33
Idi na vrh
offline
  • helen1  Male
  • Anti Malware Fighter
    Rank 2
  • Master učitelj
  • Pridružio: 27 Avg 2005
  • Poruke: 8652
  • Gde živiš: Novi Beograd

Skini ComboFix sa jedne od sledecih adresa na Desktop:
[Link mogu videti samo ulogovani korisnici]
[Link mogu videti samo ulogovani korisnici]

Startuj ga i ne diraj prozor programa dok skenira.
Sledi uputstva na ekranu. Kada zavrsi pojavice se log (C:\ComboFix.txt) koji ces nam ovde iskopirati.

MyCity » Ambulanta -> Arhiva Ambulante » Problem sa stikom sa killvbs.vbs

Ko je trenutno na forumu
 

Ukupno su 920 korisnika na forumu :: 89 registrovanih, 8 sakrivenih i 823 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 04bokibole, 357magnum, Ailton, Aleksa 3215, Andrija357, Aristotle2002, Asparagus, Ba4e, Bbbggg1979, blejač, Bobrock1, Bojan198527, Bojcca, boromir, Bosnjo, BOXRR, braca57, Centauro, cojapop, Crazzer, darios, djboj, DJUNTA, DonRumataEstorski, Dovla 1980, draganl, Fabius, Folkstar, FOX, g_g, Giskard, Gogi_avio, gregorxix, ikan, jarovitt, Jeremiah, jimi_agf, joca83, Kajzer Soze, Krusarac, Ljusa, maksi007, Marko Marković, Marko1238, marsi, Maschinekalibar, mercedesamg, milanstankovic087, mile.ilic75, Miler88, Milos1987, Mimis82, miodrag, mnn2, nenooo, Nepopravljivi, nevjerna beba, nixos, nnovakis, orjen, Otto Grunf, pacika, Pale2025, panzerwaffe, Pekman, Permaldar, Pero Petković, picknick, PrincipL, Prometeus, RajkoB, rakivan, raster12, saputnik plavetnila, shlauf, skok, Sky diver 29, Snorks, Solunac na steroidima, t84dar, tecataki, tm, tritonus, vrgudinac, Vucko11, vukajlo71, Zavulon, Zoran1959, Zorge