MyCity » Zaštita od zlonamernih programa » Za sta se koriste ovi Malware

Za sta se koriste ovi Malware

Napisano na dan: 19.3.2009

Za sta se koriste ovi Malware
Sledeća strana Pagination

Idi na vrh

Poslao: 19 Mar 2009 12:44
Idi na vrh
offline
  • aloe  Male
  • Super građanin
  • Pridružio: 01 Nov 2004
  • Poruke: 1270
  • Gde živiš: Beograd

Da li neko moze da mi kaze koju su stetu mogli da nanesu ovi Malware

Malwarebytes' Anti-Malware 1.34
Verzija baze podataka: 1868
Windows 5.1.2600 Service Pack 2

19.3.2009 12:18:18
mbam-log-2009-03-19 (12-16-33).txt

Tip skeniranja: Kompletno Skeniranje (C:\|D:\|E:\Smajli
Skeniranih objekata: 333818
Proteklo vreme: 1 hour(s), 6 minute(s), 52 second(s)

Inficirani procesi u memoriji: 0
Inficirani moduli u memoriji: 0
Inficirani ključevi u registru: 12
Inficirane vrednosti u registru: 5
Inficirani podaci u registru: 3
Inficirane fascikle: 2
Inficirane datoteke: 10

Inficirani procesi u memoriji:
(Maliciozne stavke nisu detektovane)

Inficirani moduli u memoriji:
(Maliciozne stavke nisu detektovane)

Inficirani ključevi u registru:
HKEY_CLASSES_ROOT\Typelib\{9233c3c0-1472-4091-a505-5580a23bb4ac} (Trojan.FakeAlert) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{500bca15-57a7-4eaf-8143-8c619470b13d} (Trojan.FakeAlert) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\MSFox (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\tdssdata (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\tdss (Trojan.Agent) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Drivers (Rogue.Multiple) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Software Notifier (Rogue.Multiple) -> No action taken.
HKEY_CLASSES_ROOT\xml.xml (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\xml.xml.1 (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\xml.xmlordersexport (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\xml.xmlordersimport (Trojan.FakeAlert) -> No action taken.
HKEY_CLASSES_ROOT\xml.xmlstatemetexport (Trojan.FakeAlert) -> No action taken.

Inficirane vrednosti u registru:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\UpdateWin (Worm.Sdbot) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Lsa\UpdateWin (Worm.Sdbot) -> No action taken.
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\UpdateWin (Worm.Sdbot) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\OLE\UpdateWin (Worm.Sdbot) -> No action taken.
HKEY_CURRENT_USER\SYSTEM\CurrentControlSet\Control\Lsa\UpdateWin (Worm.Sdbot) -> No action taken.

Inficirani podaci u registru:
HKEY_CLASSES_ROOT\SOFTWARE\Microsoft\Internet Explorer\Main\Start Page (Hijack.Homepage) -> Bad: (C:\WINDOWS\system32\spywarewarning.mht) Good: (http://www.google.com/) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> No action taken.

Inficirane fascikle:
C:\Documents and Settings\All Users\Application Data\SalesMon (Rogue.Multiple) -> No action taken.
C:\Documents and Settings\All Users\Application Data\SalesMon\Data (Rogue.Multiple) -> No action taken.

Inficirane datoteke:
C:\WINDOWS\system32\wpx91.cpx (Trojan.Downloader) -> No action taken.
E:\WUTemp\setup_en.exe (Rogue.Installer) -> No action taken.
C:\WINDOWS\system32\shell31.dll (Trojan.Agent) -> No action taken.
C:\winxplogon.sys (Fake.Dropped.Malware) -> No action taken.
C:\Documents and Settings\MarkSoft konsalting\My Documents\My Music\My Music.url (Trojan.Zlob) -> No action taken.
C:\Documents and Settings\MarkSoft konsalting\My Documents\My Pictures\My Pictures.url (Trojan.Zlob) -> No action taken.
C:\Documents and Settings\MarkSoft konsalting\My Documents\My Videos\My Video.url (Trojan.Zlob) -> No action taken.
C:\Documents and Settings\MarkSoft konsalting\My Documents\My Documents.url (Trojan.Zlob) -> No action taken.
C:\syst.exe (Trojan.Downloader) -> No action taken.
C:\WINDOWS\system32\lich.dat (Stolen.Data) -> No action taken.


Tj. st kradu?



Registruj se da bi učestvovao u diskusiji. Registrovanim korisnicima se NE prikazuju reklame unutar poruka.
Poslao: 19 Mar 2009 13:28
Idi na vrh
offline
  • dr_Bora  Male
  • Anti Malware Fighter
    Rank 2
  • Pridružio: 24 Jul 2007
  • Poruke: 12280
  • Gde živiš: Höganäs, SE

Teško je dati precizan odgovor na tvoje pitanje.

U logu se vide rogue aplikacije i trojani koji ih reklamiraju/instaliraju (cilj je da ti prodaju program koji radi ništa), ostaci nekog rootkit-a (verovatno vezan za ove prethodne), neki download-eri (koji instaliraju drugi malware) i bot (može da služi za slanje spam-a, vršenje DDOS-ova, itd).



MyCity » Zaštita od zlonamernih programa » Za sta se koriste ovi Malware

Ko je trenutno na forumu
 

Ukupno su 1412 korisnika na forumu :: 99 registrovanih, 9 sakrivenih i 1304 gosta   ::   [ Administrator ] [ Supermoderator ] [ Moderator ] :: Detaljnije

Najviše korisnika na forumu ikad bilo je 20624 - dana 04 Apr 2026 04:18

Korisnici koji su trenutno na forumu:
Korisnici trenutno na forumu: 683hmkh, A.R.Chafee.Jr., aleph_one, ALEXV, alzir86, ArchaBasha, Asteker, bambulic, Baždaranac, BB, Belac91, bestguarder, Bobrock1, bokisha253, Boris90, boro975, Brzi voz, Bubimir, BWG, cardeo, cole77, dankisha, Dare, DeerHunter, dejandr, deLacy, Denaya, DezurniOperativni, djboj, DJUNTA, dmrdc, Draganeli, DragoslavS, Dukelander, dunavzed, Ercomero, g0xy, geo.dule, goran.vvv, goxin, GrammaticalAnalysis, gripen, GUARIN, Hans Gajger, howyesno, Ikica977, ivan_8282, Jeremiah, Jozo74, Još malo pa deda, K-1A, Kajzer Soze, Kenanjoz, Kobrim, kokodakalo, kolle.the.kid, Kredit, Krin, kuntakinte, Laluvr, Lazur_01, littlebunny, LostInSpaceandTime, max power, mikrimaus, Milan1996, Mili026, Moldovan, Morava71, niksa517, Njubara, pacika, precan, predragc, proljece, promajauglavi, Radoslava, Ray1973, Robin, rovac, ruma, sasics, Sharpshooter, Sinduk, slowhand, Snorks, stefan95, stegonosa, suponik, SympathyForTheDevil, Tandrkalo, UAV operator, vathra, Walkers, Woya, zaoka, Zastava, Zavulon, Zerajic