MyCity » Ambulanta -> Arhiva Ambulante » HiJackThis log

HiJackThis log

Napisano na dan: 1.7.2008

HiJackThis log
Sledeća strana Pagination

Idi na vrh

Poslao: 01 Jul 2008 19:34
Idi na vrh
offline
  • vux777 
  • Novi MyCity građanin
  • Pridružio: 22 Apr 2008
  • Poruke: 21

imo sam neki trojan u rar arhivi koji mi je ad-aware pronašao. čudi me da ga nije prije našao jer ovo nije prvi scan sa njime a zarazeni RAR je na kompu vec duze (snimio sam stranicu HTML za neki 3D tutorijal a rar je bio dodatni file na stranici). ako neko moze pogledati log file i reci dali imam kakvu zarazu na kompu


Logfile of HijackThis v1.99.1
Scan saved at 19:32:47, on 1.7.2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.17184)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\Explorer.EXE
D:\Programi\Ad-Aware\aawservice.exe
D:\Programi\WinPatrol\winpatrol.exe
D:\Programi\ZoneAlarm\zlclient.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Programi\NetMeter\NetMeter.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
C:\WINDOWS\system32\nvsvc32.exe
D:\Programi\Sandboxie\SbieSvc.exe
C:\Program Files\T-Mobile\web'n'walk Manager\web'n'walk Manager.exe
D:\Programi\Sandboxie\SbieCtrl.exe
D:\Programi\FireFox 3 b5\firefox.exe
D:\Programi\Sandboxie\SandboxieRpcSs.exe
D:\Programi\Sandboxie\SandboxieDcomLaunch.exe
D:\Programi\HiJackThis\TR3.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [Link mogu videti samo ulogovani korisnici]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [Link mogu videti samo ulogovani korisnici]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O4 - HKLM\..\Run: [WinPatrol] D:\Programi\WinPatrol\winpatrol.exe -expressboot
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [ZoneAlarm Client] "D:\Programi\ZoneAlarm\zlclient.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [D:\Programi\NetMeter\NetMeter.exe] D:\Programi\NetMeter\NetMeter.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_05\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: dimsntfy - %SystemRoot%\System32\dimsntfy.dll (file missing)
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft - D:\Programi\Ad-Aware\aawservice.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - D:\Programi\Sandboxie\SbieSvc.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe



Poslao: 01 Jul 2008 20:04
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Poz...


Postavljeni logfile je čist.

Jesi li razmišljao da instaliraš neki antivirus?



Poslao: 01 Jul 2008 20:26
Idi na vrh
offline
  • vux777 
  • Novi MyCity građanin
  • Pridružio: 22 Apr 2008
  • Poruke: 21

imao sam avira antivirus do neki dan al sam ga deinstalirao (komp mi previše uspori zbog rendanja u 3ds MAX-u). Od zaštite imam winpatrol, zonealarm i sandboxie sa kojim surfam. instalirao sam još neki dan ad-aware.

Hvala na brzom odgovoru Dr Bora

Dopuna: 01 Jul 2008 20:26

još samo jedno pitanje.....

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)

dali je ovo potrebno i dali to mogu u HJT- obrisat (Fix checked)?

Poslao: 01 Jul 2008 20:48
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Linije su legitimne i ne bih preporučio da se uklanjaju...

Poslao: 02 Jul 2008 00:37
Idi na vrh
offline
  • vux777 
  • Novi MyCity građanin
  • Pridružio: 22 Apr 2008
  • Poruke: 21

ok...thanx Very Happy

MyCity » Ambulanta -> Arhiva Ambulante » HiJackThis log

Ko je trenutno na forumu
 

Ukupno su 3095 korisnika na forumu :: 69 registrovanih, 7 sakrivenih i 3019 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 33 bren, 6.5lapua, Abebe Bikila, airliners, alonso, Bojan198527, bokicacar, Boris90, Borkanović, boro975, branko87, BSD, Chainsaw, CrazyDiablo, damirZR, Denaya, Dimitrise93, Dorcolac, Dukelander, Dzambas, Gall, Georgius, goxin, Great White, Grebostrek, Haris, Ivoo, jalos, jeen yuhs, komenski, Lazur_01, Levi, luka35, Manjane, Mastrum Ridkali, max power, mean_machine, mercedesamg, Miki01, Miki281, MilosM, Ne doznajem se u oružje, nebojsag, nelezele, pein, Pekman, Prečanin30, procesor, royst33, sasovsky, Sharpshooter, Solunac na steroidima, ssekir75, tamno.nebo, tanakadzo, tecataki, tooooom, trajkoni018, uruk, VJ, Vladko, Vojvoda81, Vrač, vuksa72, Weah88, zeka013, ZetaMan, Zimbabwe, 800077