Neko mi je ulazio na msn dve noci zaredom...

Neko mi je ulazio na msn dve noci zaredom...

offline
  • Pridružio: 24 Nov 2008
  • Poruke: 3

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:24:52 PM, on 11/24/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Executive Software\Diskeeper\DkService.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\iWin Games\iWinGamesInstaller.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\PROGRA~1\Trust\280KSK~1\Keyboard\Ikeymain.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
C:\WINDOWS\nMtsk.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
C:\Documents and Settings\All Users\Application Data\iWin Games\DesktopAlerts\DesktopAlerts.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\AVG\AVG8\aAvgApi.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Documents and Settings\Saja Buba Maja\Desktop\ciki\TR3.exe..exe

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - (no file)
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: IEHlprObj Class - {8CA5ED52-F3FB-4414-A105-2E3491156990} - C:\PROGRA~1\IWINGA~1\IWINGA~1.DLL
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [Smapp] C:\Program Files\Analog Devices\SoundMAX\SMTray.exe
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [DiskeeperSystray] "C:\Program Files\Executive Software\Diskeeper\DkIcon.exe"
O4 - HKLM\..\Run: [NeroCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [iKeyWorks] C:\PROGRA~1\Trust\280KSK~1\Keyboard\Ikeymain.exe
O4 - HKLM\..\Run: [StatusClient] C:\Program Files\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe /auto
O4 - HKLM\..\Run: [TomcatStartup] C:\Program Files\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe
O4 - HKLM\..\Run: [nMTaskBarService] nMtsk.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: iWin Desktop Alerts.lnk = C:\Documents and Settings\All Users\Application Data\iWin Games\DesktopAlerts\DesktopAlerts.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - [Link mogu videti samo ulogovani korisnici]
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - [Link mogu videti samo ulogovani korisnici]
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Runtime Environment 1.6.0) - [Link mogu videti samo ulogovani korisnici]
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL,avgrsstx.dll
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Diskeeper - Executive Software International, Inc. - C:\Program Files\Executive Software\Diskeeper\DkService.exe
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopManager-022208-143751) - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: iWinGamesInstaller - iWin Inc. - C:\Program Files\iWin Games\iWinGamesInstaller.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Program Files\Analog Devices\SoundMAX\SMAgent.exe
O23 - Service: StarWind iSCSI Service (StarWindService) - Rocket Division Software - C:\Program Files\Alcohol Soft\Alcohol 120\StarWind\StarWindService.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe

--
End of file - 6371 bytes

Pozz...
Neko mi je ulazio na msn acc 2 noci zaredom. Moj drug je tu osobu primetio oko pola 2 uvece i mislo da sam to ja i pisao svakakve poruke , a onda mu je taj lik odgovorio da ne zna s kim se kachi. Opet ga je primetio taj moj drug dve noci kasnije ali lik nije odgovorio na provokacije. Svako jutro posto ukljucim msn nema mi nijednog kontakta. Drugi problem: ne mogu nikako da promenim sifru jer nece da mi nesto ucita. pomozite:kako da je promenim?
Treci problem: da li moze taj lik da mi udje na e-mail acc ako je vec provalio na msn i sta sve moze da uradi u tom slucaju?

Unapred hvala...

Dopuna: 24 Nov 2008 16:09

Usput.... uzela sam sa vaseg sajta program Hijack i pratila uputstva pa sam vam poslala izvestaj



offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Pozdrav...

U logu je vidljiv program iWin Games - a to je adware. Preporučio bih da ga deinstaliraš.

Sem toga, log je čist i problemi sa msn-om nemaju veze sa malware-om.

Potrebno je da promeniš šifru za logovanje na MSN - to je sve.

Citat:Treci problem: da li moze taj lik da mi udje na e-mail acc ako je vec provalio na msn i sta sve moze da uradi u tom slucaju?

Ta osoba zna tvoj mail i šifru za logovanje na MSN. Jesu li to isti podaci kao i oni za tvoj e-mail account? Odgovor na ovo pitanje je ujedno i odgovor na ono gore pitanje koje si postavila.


Za pomoć u vezi promene šifre, obrati se u forum [Link mogu videti samo ulogovani korisnici]



offline
  • Pridružio: 24 Nov 2008
  • Poruke: 3

hvala puno. A sta je moglo da se desi ako bi usao na moj e-mail acc?

offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Mogao bi da čita tvoje e-mailove (ako je to ono što pitaš).

offline
  • Pridružio: 24 Nov 2008
  • Poruke: 3

Ok. svejeno hvala, promenila sam pass, izbrisala onaj adware i valjda ce sve sada biti u redu... HVALA PUNO!

Ko je trenutno na forumu
 

Ukupno su 1366 korisnika na forumu :: 248 registrovanih, 19 sakrivenih i 1099 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 357magnum, 8u47, _stipa_, A.R.Chafee.Jr., AC-DC, Agape, airliners, alberto, aleksamaki, aleksmajstor, aleph_one, ALEXV, AMCXXL, Asparagus, avijacija, Ba4e, babaroga, Bahuss, Batko.VD.65, bbogdan, Beria, berste23, blejač, bojan313, bolimejoli, Boris.A, Boris90, Bozjidar87, BradaRS, BSD, bukefal, burevesnik, C-Gun, CCCP, ccoogg123, chichabg, Citalac, Crazzer, Cvetkovic, Dalibor Šafar, dane007, dankisha, darkdruid72, dartxxq, DeerHunter, dejno, dekan.m, delboy, Despot1, Df410, DjomlaHomer, djordjemiklusev, Djuza, Dogma21, dragan_mig31, Draganeli, draganst, DrFlyFisherman, Drugard72, Duk011, Dukelander, dule10savic, dusan.l, Dzumanga, Eagle_1, Ercomero, eulereix, Flanker-G, flash12, fokac, Folkstar, Fulcrum-A, GazdaDjoka, Giro77, Great White, grenadir, Grochow, GveX, halkin gol, Hans Gajger, havoc995, IQ116, ivan1973, IvanM1984, Jakonjveliki, jalos, Jan, Joco Skljoco, jodzula, JOntra, Jozo74, Kajzer Soze, Kamov, kib, Kichma, Komanca, kovac9mm, Krusarac, Kubovac, kybonacci, lafa008, Laluvr, Lelemood, lord sir giga, LostInSpaceandTime, luka35, lukisa, Maki1981, maksi007, Makssd85, Manjane, Marko Marković, markolopin, mercedesamg, Metanoja, mgolub, Miki281, milanpb, milenko crazy north, milijarder, milos.cbr, Milos1987, Milovan Dinic, mino bosanac, miodrag, mirkoro, mitja123, Mitraljeta, mixkax, Mićko22, Mldo, mmelezovic, moldway, Mozgonja, MrG, mushroom, Naj-Turs, nazgul75, nebojsag, neko_drugi, Neutral, Neutral-M, neutrino, nikolapetkovic, nixos, nizam, NklJov123, Nmr, nnovakis, obsidian, orfanel, Orlova, OtacMakarije, Paklenica, panonski mornar, Papadubi, Parker, Permaldar, petrovicrs, Piicoki, Pilipenda, ping15, PlayerOne, Podgoritza, Podljub, Povratak1912, Qvazimodo, Ran, razumihin, RiV, royst33, s putnik, S-lash, Samo gledam, samsung, sasa76, Savantije, Sevetar, Sharpshooter, ShtagodShtagod, simazr, simicnenadbg, Sin Boskic, Sinduk, sistem22, Sitan_Lopov, Siti2, siwoti, Sky diver 29, Sledge Hammer, Slingshot, slono, Sr.Stat., Srpska zauvjek, srđan, stalja, stefanmpurtic, stegonosa, steksi, stevo svinja, strn, Su 57, SympathyForTheDevil, Szigetwar, Tajpan, tamno.nebo, Tas011, Tenk, The_new_Statesman, Tihi86, Topaz9, trajkoni018, Tribal, troki1971, Tumansky, US_Rank_0, v0idmp3, Vanderx, vazduh, vdeki, Velizar Laro, veljko82, vensla, vidra boy, vlad4, vladetije, vladoje, VojaeZ, VPV, Vujkeu, vuksa72, Wrangler, x011, xAlex2, yip314, Zastava, Zec, Zeka_Peka, zil10, zivojin32, Zmaj Tolak, zmajbre, Zoran Rapajić, zoran-ruma, Zoran_Partizan, zziko, 127, 79693