Új hozzászólás Aktív témák

• #12 .:GoliBali:. aktív tag

  Új Válasz 2004-11-18 10:57:45 #12

  Új hozzászólás

  Összes hozzászólása itt Válaszok az összes hozzászólására itt Válaszok erre a hozzászólásra

  Privát üzenet küldése

  

  .:GoliBali:.

  aktív tag

  Logfile of HijackThis v1.98.2
  Scan saved at 10:59:02, on 2004.11.18.
  Platform: Windows XP Szervizcsomag 2 (WinNT 5.01.2600)
  MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
  
  Running processes:
  C:\WINDOWS\System32\smss.exe
  C:\WINDOWS\system32\winlogon.exe
  C:\WINDOWS\system32\services.exe
  C:\WINDOWS\system32\lsass.exe
  C:\WINDOWS\System32\Ati2evxx.exe
  C:\WINDOWS\system32\svchost.exe
  C:\WINDOWS\System32\svchost.exe
  C:\Program Files\TGTSoft\StyleXP\StyleXPService.exe
  C:\WINDOWS\system32\spoolsv.exe
  C:\WINDOWS\System32\DVDRAMSV.exe
  C:\WINDOWS\System32\tcpsvcs.exe
  C:\WINDOWS\system32\ZoneLabs\vsmon.exe
  C:\WINDOWS\System32\svchost.exe
  C:\WINDOWS\system32\wscntfy.exe
  C:\WINDOWS\system32\Ati2evxx.exe
  C:\WINDOWS\Explorer.EXE
  D:\Installs\ZONELA~1\ZoneAlarm\zapro.exe
  D:\Installs\D-Tools\daemon.exe
  C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
  C:\WINDOWS\system32\rundll32.exe
  C:\WINDOWS\system32\sstray.exe
  C:\WINDOWS\system32\ctfmon.exe
  C:\Program Files\TGTSoft\StyleXP\StyleXP.exe
  C:\windows\dllhlp.exe
  D:\Installs\WIDCOMM\Bluetooth Software\BTTray.exe
  E:\Installs\Nokia\PC Suite for Nokia 3650\connmngmntbox.exe
  E:\Installs\Nokia\PC Suite for Nokia 3650\ectaskscheduler.exe
  C:\WINDOWS\system32\RAMASST.exe
  D:\Installs\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
  D:\Installs\ICQ\ICQ.exe
  e:\Installs\Nokia\PCSUIT~1\Elogerr.exe
  C:\Program Files\Intuwave\Shared\mRouterRunTime\mRouterRuntime.exe
  e:\Installs\Nokia\PCSUIT~1\BROADC~1.EXE
  e:\Installs\Nokia\PCSUIT~1\SCRFS.exe
  D:\Installs\Netscape\Netscape 6\netscp6.exe
  C:\Program Files\Internet Explorer\iexplore.exe
  C:\WINDOWS\system32\taskmgn.exe
  L:\LEtöltés\hijackthis\HijackThis.exe
  
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\mfplay.dll/sp.html (obfuscated)
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\mfplay.dll/sp.html (obfuscated)
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\System32\mfplay.dll/sp.html (obfuscated)
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\System32\mfplay.dll/sp.html (obfuscated)
  R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\mfplay.dll/sp.html (obfuscated)
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\System32\mfplay.dll/sp.html (obfuscated)
  R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
  R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://your-searcher.com/index.htm
  R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,SearchURL = http://your-searcher.com/sp.htm
  R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
  R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about:blank
  R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Hivatkozások
  R3 - URLSearchHook: (no name) - {5D60FF48-95BE-4956-B4C6-6BB168A70310} - (no file)
  O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\Installs\SPYBOT~1\SDHelper.dll
  O2 - BHO: (no name) - {6647C146-71E6-417F-9E3E-7F390D43E5EE} - C:\WINDOWS\System32\mfplay.dll
  O2 - BHO: (no name) - {85CBFDE0-B26B-4EE5-BD3C-4DE111DE763E} - C:\WINDOWS\System32\winnet.dll
  O4 - HKLM\..\Run: [Zone Labs Client] D:\Installs\ZONELA~1\ZoneAlarm\zapro.exe
  O4 - HKLM\..\Run: [Mirabilis ICQ] D:\Installs\ICQ\ICQNet.exe
  O4 - HKLM\..\Run: [DAEMON Tools-1033] ''D:\Installs\D-Tools\daemon.exe'' -lang 1033
  O4 - HKLM\..\Run: [LogonStudio] ''D:\Installs\LogonStudio\logonstudio.exe'' /RANDOM
  O4 - HKLM\..\Run: [BootSkin Startup Jobs] ''D:\Installs\BootSkin\BootSkin.exe'' /StartupJobs
  O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
  O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINDOWS\System32\spool\drivers\w32x86\3\hpztsb04.exe
  O4 - HKLM\..\Run: [New.net Startup] rundll32 C:\PROGRA~1\NEWDOT~1\NEWDOT~1.DLL,NewDotNetStartup -s
  O4 - HKLM\..\Run: [nForce Tray Options] sstray.exe /r
  O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
  O4 - HKCU\..\Run: [STYLEXP] C:\Program Files\TGTSoft\StyleXP\StyleXP.exe -Hide
  O4 - HKCU\..\Run: [dllhelp] c:\windows\dllhlp.exe
  O4 - HKCU\..\RunOnce: [Web Offer] C:\WINDOWS\iLookup\ezStub22.exe
  O4 - Global Startup: BTTray.lnk = ?
  O4 - Global Startup: Microsoft Office.lnk = C:\Program Files\Microsoft Office\Office10\OSA.EXE
  O4 - Global Startup: PCSuiteForNokia3650 Detect.lnk = ?
  O4 - Global Startup: PCSuiteForNokia3650 TS.lnk = ?
  O4 - Global Startup: RAMASST.lnk = C:\WINDOWS\system32\RAMASST.exe
  O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
  O8 - Extra context menu item: E&xportálás Microsoft Excel formátumba - res://C:\PROGRA~1\MICROS~2\Office10\EXCEL.EXE/3000
  O9 - Extra button: ICQ Pro - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Installs\ICQ\ICQ.exe
  O9 - Extra 'Tools' menuitem: ICQ - {6224f700-cba3-4071-b251-47cb894244cd} - D:\Installs\ICQ\ICQ.exe
  O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
  O10 - Hijacked Internet access by New.Net
  O10 - Hijacked Internet access by New.Net
  O10 - Hijacked Internet access by New.Net
  O10 - Hijacked Internet access by New.Net
  O10 - Hijacked Internet access by New.Net
  O15 - Trusted Zone: http://*.63.219.181.7
  O16 - DPF: {10003000-1000-0000-1000-000000000000} - ms-its:mhtml:file://c:\nosuch.mht!http://195.225.177.8/02/chm/cool.chm::/cool.exe
  O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://www.cult3d.com/download/cult.cab
  O16 - DPF: {525A15D0-4938-11D4-94C7-0050DA20189B} (SnoopyCtrl Class) - http://www.easports.com/downloads/games/common/snoopy/iesnoopy.cab
  O18 - Filter: text/html - {29CECDDE-7C94-4FC5-9400-97B6C17D3CB4} - C:\WINDOWS\System32\mfplay.dll
  O18 - Filter: text/plain - {29CECDDE-7C94-4FC5-9400-97B6C17D3CB4} - C:\WINDOWS\System32\mfplay.dll
  
  Én a kiemelt részekre gyanakszom!!!!

  #!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj $/= unpack( 'H*' , $_ ); $_ = `echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1 lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)

Új hozzászólás Aktív témák