MyCity » Ambulanta -> Arhiva Ambulante » Problem sa Trojancem

Problem sa Trojancem

Napisano na dan: 10.3.2007
2

Problem sa Trojancem
Pagination Prethodna strana

Idi na vrh

Poslao: 10 Mar 2007 14:11
Idi na vrh
offline
  • Pridružio: 14 Avg 2006
  • Poruke: 108

Evo novog loga:

Logfile of HijackThis v1.99.1
Scan saved at 14:05:16, on 3/10/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\Misa\Desktop\New Folder\HT.exe

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SpywareBlock Class - {0A87E45F-537A-40B4-B812-E2544C21A09F} - D:\Programi\SpyCatcher 2006\SCActiveBlock.dll (file missing)
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.5.0_10\bin\jusched.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [REGSHAVE] C:\Program Files\REGSHAVE\REGSHAVE.EXE /AUTORUN
O4 - HKLM\..\Run: [ISUSPM Startup] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -startup
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [updateMgr] "C:\Program Files\Adobe\Acrobat 7.0\Reader\AdobeUpdateManager.exe" AcRdB7_0_7 -reboot 1
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &Google Search - [Link mogu videti samo ulogovani korisnici]\program files\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - [Link mogu videti samo ulogovani korisnici]\program files\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - [Link mogu videti samo ulogovani korisnici]\program files\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - [Link mogu videti samo ulogovani korisnici]\program files\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xport to Microsoft Excel - [Link mogu videti samo ulogovani korisnici]\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - [Link mogu videti samo ulogovani korisnici]\program files\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - [Link mogu videti samo ulogovani korisnici]\program files\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\ssv.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\scieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{5552D92D-932E-44F0-9725-163F2D0F2AAD}: NameServer = 194.247.192.33,194.247.192.1
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: Kaspersky Anti-Virus 6.0 (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus 6.0\avp.exe" -r (file missing)
O23 - Service: InCD Helper (InCDsrv) - AHEAD Software - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe


Ovaj put mi KAV ne prijavljuje nista.



Poslao: 10 Mar 2007 14:23
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Log je cist.

Java ti je samo malo starija, pa ti je komp zbog nje podlozan Vundo infekcijama.
Da bi se instalirala novija verzija treba prvo deinstalirati staru, pa tek onda instalirati novu. Ukoliko ne deinstaliras staru, imaces dve verzije Jave na kompu, pa ce i dalje biti podlozan infekcijama zbog starije verzije koja je jos uvek instalirana.

Ima Java Runtime Environment (JRE) 6 na
[Link mogu videti samo ulogovani korisnici]

Ili zadnji update za JRE 5 (update 11) na:
[Link mogu videti samo ulogovani korisnici]



Poslao: 10 Mar 2007 14:28
Idi na vrh
offline
  • Pridružio: 14 Avg 2006
  • Poruke: 108

Definitivno smo uspeli. E, pa Bobby, hvala ti do neba. Vec sam bila resena da reinstaliram komp. Umesto toga, izgraviracu tvoju sliku i okaciti je iznad istog! Jos jednom, hvala!

Poslao: 10 Mar 2007 14:38
Idi na vrh
offline
  • Pridružio: 04 Sep 2003
  • Poruke: 24135
  • Gde živiš: Wien

Nema frke, tu smo Wink

12 Mar 2007 01:36 bobby Zaključavanje topica Razlog: Javiti se na PP ukoliko je potrebno aktiviranje teme  

MyCity » Ambulanta -> Arhiva Ambulante » Problem sa Trojancem

Ko je trenutno na forumu
 

Ukupno su 1026 korisnika na forumu :: 130 registrovanih, 9 sakrivenih i 887 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 15694 - dana 01 Feb 2026 12:23

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: A.R.Chafee.Jr., Aleksandar Šljivar, aleph_one, Alojzije, aramis s, Arsenije, Avalon015, Belisarius, Bo96, Bobrock1, Bojcca, bojcistv, bokicacar, bokisha253, Borski1977, BOXRR, brufen, BSD, bufanje, C-Gun, cavatina, celt, cifra, Coabelgrade, comi, crnirocko, cuvarkuca, DeerHunter, dekan.m, Dekanovic, DezurniOperativni, DjomlaHomer, Djuza, doktor2, DonRumataEstorski, draganca, draganl, Duce, EVIDENTICAR, EXIT78, Gerilac, Goran_, grenadir, havoc995, HawX, HogarStrashni, hrkaz, In_hero, ivan_8282, jalos, jodzula, Joksss, Jose, Kobrim, Koce, Koser, kovacicbozo, kreker, kripo, kuntakinte, ljubo70, luja, Manjane, marsovac 2, mačković, mercedesamg, Metanoja, milenko crazy north, Milometer, milos97, minke, Mldo, monomah, morava_01, mux, Ne doznajem se u oružje, nebojsag, Nemanja.M, neutrino, nfific, Njubara, NklJov123, nnovakis, Nomica, Ognjen D., pds, Permaldar, Pilipenda, precan, Radoslava, rakivan, razumihin, rikirubio, royst33, ruma, sales, Sass Drake, Smiljkovich, Sonic, Srki98, steksi, stemark, Str2022, tachinni, tamno.nebo, Tila Painen, Titan, toni061, Tristan_Bantam_2, tritonus, trutcina, tvlada, vidra1, Vilson, Vlad000, VNVK, voja64, Vojkan Petrovic, W123, x011, xAlex2, Zeljo980, ZetaMan, zlatkoa987, ZlatniRez, Zoran1959, zoran77, Zrcalo, zubri, Zvlade