prosze o sprawdzenie loga keylogger(screenshooter)

**Posty:** 7 · przez **seba1990** 15 Gru 2007, 22:03

prosze s prawdzenie loga: mozliwosc wystepowania keyylogera tylko to mnie interesuje...

Logfile of HijackThis v1.99.1
Scan saved at 20:57:08, on 2007-12-15
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
C:\Program Files\Gadu-Gadu\gg.exe
C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\a-squared Free\a2service.exe
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Neostrada TP\NeostradaTP.exe
C:\Program Files\Neostrada TP\ComComp.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\Anti-keylogger\Anti-keylogger.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\seba\USTAWI~1\Temp\Rar$EX00.969\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza
R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file)
O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe
O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe
O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [CameraFixer] C:\WINDOWS\CameraFixer.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe"
O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [WebrootDesktopFirewall] C:\Program Files\Webroot\Desktop Firewall\WebrootDesktopFirewall.exe -t
O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O17 - HKLM\System\CCS\Services\Tcpip\..\{DE0B5D18-2010-446A-95BB-2F2E2B4FFA01}: NameServer = 194.204.159.1 217.98.63.164
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Ares Chatroom server (AresChatServer) - Unknown owner - C:\Program Files\Ares\chatServer.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\AntiVirenKit professional\AVKWCtl.exe (file missing)
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE
O23 - Service: WinFast(R) Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: Webroot Desktop Firewall Data Service (WebrootDesktopFirewallDataService) - Webroot Software, Inc. - C:\Program Files\Webroot\Desktop Firewall\WDFDataService.exe
O23 - Service: Webroot Desktop Firewall (WebrootFirewall) - Unknown owner - C:\Program Files\Webroot\Desktop Firewall\FirewallNTService.exe

**Posty:** 3854 · przez **Dzi@dek** 15 Gru 2007, 22:07

seba1990 napisał(a):prosze s prawdzenie loga: mozliwosc wystepowania keyylogera tylko to mnie interesuje...

Przeczytaj temat i popraw log - wstawiamy w tagi CODE lub QUOTE
http://forum.programosy.pl/hijackthis-amp-silent-runners-gtobsuga-i-umieszczanie-vt9452.html

**Posty:** 7 · przez **seba1990** 15 Gru 2007, 22:14

tak wem, ale nie moge wsadzic tego w quote ani w code nie wiem czemu:/

**Posty:** 3854 · przez **Dzi@dek** 15 Gru 2007, 22:17

seba1990 napisał(a):ale nie moge wsadzic tego w quote ani w code nie wiem czemu

Zrób edycję posta, zaznacz cały log i kliknij quote

**Posty:** 7 · przez **seba1990** 15 Gru 2007, 22:23

to nic nie daje

[ Dodano: Dzisiaj o 21:27 ]
nie wiem o co chodzi pierwsy raz sie z takim czyms spotkalem, zeby nie mozna bylo dac loga do quote-.-

**Posty:** 3854 · przez **Dzi@dek** 15 Gru 2007, 22:32

Poprawiłem - a Ty potrenuj.

BTW

Odpal hijackthis - scan - zaznacz ten wpis V i daj - fix checked:

O3 - Toolbar: (no name) - {37B85A29-692B-4205-9CAD-2626E4993404} - (no file)
O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm

seba1990 napisał(a):mozliwosc wystepowania keyylogera

C:\Program Files\Anti-keylogger\Anti-keylogger.exe
Masz ten program - sprawdza sie ??

Daj nowy log po tym zabiegu.

**Posty:** 7 · przez **seba1990** 15 Gru 2007, 22:38

nie da sie w zaden sposob, ani dac cytuj ani quote.....
mam go od kilku godzin, wiec nie moge o nim zbyt duzo powiedziec....on dzila tylko w tle nie mozna nim skanowac...

Kod: Zaznacz wszystko: Logfile of HijackThis v1.99.1 Scan saved at 21:38:28, on 2007-12-15 Platform: Windows XP (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 (6.00.2600.0000) Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe C:\WINDOWS\Explorer.EXE C:\Program Files\Alwil Software\Avast4\ashServ.exe C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe C:\Program Files\Gadu-Gadu\gg.exe C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe C:\WINDOWS\system32\LEXBCES.EXE C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\system32\LEXPPS.EXE C:\Program Files\a-squared Free\a2service.exe C:\WINDOWS\System32\nvsvc32.exe C:\WINDOWS\System32\svchost.exe C:\Program Files\Alwil Software\Avast4\ashWebSv.exe C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe C:\Program Files\Neostrada TP\NeostradaTP.exe C:\Program Files\Neostrada TP\ComComp.exe C:\Program Files\Opera\Opera.exe C:\Program Files\Anti-keylogger\Anti-keylogger.exe C:\Program Files\WinRAR\WinRAR.exe C:\DOCUME~1\seba\USTAWI~1\Temp\Rar$EX00.797\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.neostrada.pl R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Neostrada TP R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Łącza R3 - URLSearchHook: Search Class - {08C06D61-F1F3-4799-86F8-BE1A89362C85} - C:\PROGRA~1\NEOSTR~1\SEARCH~1.DLL O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx O4 - HKLM\..\Run: [WooCnxMon] C:\PROGRA~1\NEOSTR~1\CnxMon.exe O4 - HKLM\..\Run: [WOOWATCH] C:\PROGRA~1\NEOSTR~1\Watch.exe O4 - HKLM\..\Run: [WOOTASKBARICON] C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [CameraFixer] C:\WINDOWS\CameraFixer.exe O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe O4 - HKLM\..\Run: [Lexmark X1100 Series] "C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" O4 - HKLM\..\Run: [WinampAgent] C:\Program Files\Winamp\winampa.exe O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe O4 - HKLM\..\Run: [WebrootDesktopFirewall] C:\Program Files\Webroot\Desktop Firewall\WebrootDesktopFirewall.exe -t O4 - HKCU\..\Run: [Gadu-Gadu] "C:\Program Files\Gadu-Gadu\gg.exe" /tray O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe O17 - HKLM\System\CCS\Services\Tcpip\..\{DE0B5D18-2010-446A-95BB-2F2E2B4FFA01}: NameServer = 194.204.159.1 217.98.63.164 O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL O23 - Service: a-squared Free Service (a2free) - Emsi Software GmbH - C:\Program Files\a-squared Free\a2service.exe O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Ares Chatroom server (AresChatServer) - Unknown owner - C:\Program Files\Ares\chatServer.exe (file missing) O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing) O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing) O23 - Service: Strażnik AVK (AVKWCtl) - Unknown owner - C:\Program Files\AntiVirenKit professional\AVKWCtl.exe (file missing) O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE O23 - Service: WinFast(R) Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe O23 - Service: Webroot Desktop Firewall Data Service (WebrootDesktopFirewallDataService) - Webroot Software, Inc. - C:\Program Files\Webroot\Desktop Firewall\WDFDataService.exe O23 - Service: Webroot Desktop Firewall (WebrootFirewall) - Unknown owner - C:\Program Files\Webroot\Desktop Firewall\FirewallNTService.exe

[ Dodano: Dzisiaj o 21:49 ]
o udalo sie;p

**Posty:** 3854 · przez **Dzi@dek** 15 Gru 2007, 22:49

seba1990 napisał(a):nie da sie w zaden sposob, ani dac cytuj ani quote

to przed naglówkiem wpisz ręcznie [ code] i na końcu loga [ /code]

Log czysty

seba1990 napisał(a):o udalo sie;p

Nie udało - ja zmieniłem

**Posty:** 7 · przez **seba1990** 15 Gru 2007, 22:58

hehehehe;p jestes pewien?? a keyloggery albo cos tez nie ma?

**Posty:** 3854 · przez **Dzi@dek** 15 Gru 2007, 22:59

seba1990 napisał(a):a keyloggery albo cos tez nie ma

A miały być :?:

- nic nie widać.

Możesz jeszcze dać log z http://www.programosy.pl/program,combofix.html

**Posty:** 7 · przez **seba1990** 15 Gru 2007, 23:12

najprawdopodobniej powinien byc bo mialem hacka a da sie to jakos sprawdzic inaczej?

Kod: Zaznacz wszystko: ComboFix 07-12-15.5 - seba 2007-12-15 22:03:34.1 - NTFSx86 Microsoft Windows XP Professional 5.1.2600.0.1250.1.1045.18.177 [GMT 1:00] Running from: C:\Documents and Settings\seba\Pulpit\ComboFix.exe * Created a new restore point . ((((((((((((((((((((((((( Files Created from 2007-11-15 to 2007-12-15 ))))))))))))))))))))))))))))))) . 2007-12-15 18:08 . 2007-12-15 18:08 <DIR> d-------- C:\Program Files\CleanCenter 2007-12-15 18:02 . 2007-12-15 18:02 <DIR> d-------- C:\Program Files\Webroot 2007-12-15 17:48 . 2007-12-15 22:04 <DIR> d-------- C:\Program Files\Anti-keylogger 2007-12-15 17:48 . 2006-11-24 12:19 374,272 --a------ C:\WINDOWS\system32\drivers\krnl_akl.sys 2007-12-14 16:55 . 2007-12-14 17:42 <DIR> d-------- C:\Program Files\a-squared Free 2007-12-14 16:39 . 2007-12-04 13:54 95,608 --a------ C:\WINDOWS\system32\AvastSS.scr 2007-12-14 16:39 . 2007-12-04 15:55 94,544 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys 2007-12-14 16:39 . 2007-12-04 15:56 93,264 --a------ C:\WINDOWS\system32\drivers\aswmon.sys 2007-12-14 16:39 . 2007-12-04 15:51 42,912 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys 2007-12-14 16:39 . 2007-12-04 15:49 26,624 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys 2007-12-14 16:39 . 2007-12-04 15:53 23,152 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys 2007-12-14 16:38 . 2007-12-04 14:04 837,496 --a------ C:\WINDOWS\system32\aswBoot.exe 2007-12-14 16:38 . 2004-01-09 10:13 380,928 --a------ C:\WINDOWS\system32\actskin4.ocx 2007-12-13 23:41 . 2007-12-13 23:41 <DIR> d-------- C:\Program Files\CDRecordKit 2007-12-03 18:31 . 2007-12-13 07:31 <DIR> d-------- C:\Documents and Settings\seba\Dane aplikacji\OpenOffice.org2 2007-12-03 18:26 . 2007-12-03 18:28 <DIR> d-------- C:\Program Files\OpenOffice.org 2.3 2007-12-01 23:19 . 2007-12-01 23:19 <DIR> d-------- C:\Documents and Settings\All Users\Dane aplikacji\nView_Profiles 2007-11-27 15:44 . 2007-11-28 15:56 <DIR> d-------- C:\Program Files\Opera 2007-11-25 12:57 . 2007-11-25 12:57 <DIR> d-------- C:\FotoSzop 2007-11-23 08:17 . 2007-12-08 20:53 38 --a------ C:\WINDOWS\AviSplitter.INI 2007-11-21 18:50 . 2007-11-21 18:50 <DIR> d-------- C:\Program Files\Angel Writer 2007-11-18 10:47 . 2007-12-07 22:01 <DIR> d-------- C:\Program Files\NAPI-PROJEKT . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-12-15 17:10 --------- d-----w C:\Program Files\Neostrada TP 2007-12-15 16:31 --------- d-----w C:\Documents and Settings\seba\Dane aplikacji\Skype 2007-12-14 21:53 --------- d-----w C:\Program Files\Tibia Player by TORG 2007-12-14 17:51 --------- d-----w C:\Program Files\Tibia Auto 2007-12-13 22:41 --------- d--h--w C:\Program Files\InstallShield Installation Information 2007-12-13 21:39 --------- d-----w C:\Documents and Settings\seba\Dane aplikacji\Tibia 2007-12-09 23:20 --------- d-----w C:\Documents and Settings\seba\Dane aplikacji\uTorrent 2007-11-25 13:14 --------- d-----w C:\Program Files\Common Files\Adobe 2007-11-21 16:58 --------- d-----w C:\Program Files\Lexmark X1100 Series 2007-11-15 15:25 --------- d-----w C:\Program Files\Silkroad 2007-11-06 14:30 47,194 ----a-w C:\WINDOWS\system32\interceptor.sys 2007-11-06 14:29 45,056 ----a-w C:\WINDOWS\system32\WNASPI32.DLL 2007-11-06 14:29 16,512 ----a-w C:\WINDOWS\system32\drivers\ASPI32.SYS 2007-11-06 14:29 --------- d-----w C:\Program Files\Common Files\G DATA 2007-11-04 19:53 --------- d-----w C:\Program Files\MarBit 2007-10-27 15:16 --------- d-----w C:\Program Files\BearShare 2007-10-27 11:19 --------- d-----w C:\Program Files\DC++ 2007-10-09 21:01 107,888 ----a-w C:\WINDOWS\system32\CmdLineExt.dll 2007-09-14 19:02 5,935,104 ----a-w C:\Program Files\Trust WB-1200p Mini Webcam.msi 2007-09-14 19:02 4,632 ----a-w C:\Program Files\[u]0[/u]x0409.ini 2007-09-14 19:02 102,912 ----a-w C:\Program Files\1033.MST . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "Gadu-Gadu"="C:\Program Files\Gadu-Gadu\gg.exe" [2007-07-09 08:39] "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-09-13 12:31] [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "WooCnxMon"="C:\PROGRA~1\NEOSTR~1\CnxMon.exe" [2003-10-16 18:07] "WOOWATCH"="C:\PROGRA~1\NEOSTR~1\Watch.exe" [2003-10-16 18:07] "WOOTASKBARICON"="C:\PROGRA~1\NEOSTR~1\TaskbarIcon.exe" [2003-10-16 18:07] "NvCplDaemon"="RUNDLL32.exe" [2001-10-26 18:30 C:\WINDOWS\system32\rundll32.exe] "nwiz"="nwiz.exe" [2005-07-20 20:07 C:\WINDOWS\system32\nwiz.exe] "NvMediaCenter"="RUNDLL32.exe" [2001-10-26 18:30 C:\WINDOWS\system32\rundll32.exe] "CameraFixer"="C:\WINDOWS\CameraFixer.exe" [2005-12-06 12:08] "snpstd"="C:\WINDOWS\vsnpstd.exe" [2005-10-11 12:54] "Lexmark X1100 Series"="C:\Program Files\Lexmark X1100 Series\lxbkbmgr.exe" [2003-08-19 16:09] "WinampAgent"="C:\Program Files\Winamp\winampa.exe" [2005-10-27 00:01] "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00] "WebrootDesktopFirewall"="C:\Program Files\Webroot\Desktop Firewall\WebrootDesktopFirewall.exe" [2005-09-29 21:46] [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\System32\CTFMON.EXE" [2001-10-26 18:29] C:\Documents and Settings\All Users\Menu Start\Programy\Autostart\ DSLMON.lnk - C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe [2007-08-14 13:47:24] R1 krnl_akl;krnl_akl;\??\C:\WINDOWS\System32\drivers\krnl_akl.sys S1 pwipf2;pwipf2;C:\WINDOWS\System32\drivers\pwipf2.sys S2 AVKWCtl;Strażnik AVK;C:\Program Files\AntiVirenKit professional\AVKWCtl.exe S3 GDInterceptor;GDInterceptor;\??\C:\WINDOWS\System32\interceptor.sys S3 usbscan;Sterownik skanera USB;C:\WINDOWS\System32\DRIVERS\usbscan.sys S3 USBSTOR;Sterownik magazynu masowego USB;C:\WINDOWS\System32\DRIVERS\USBSTOR.SYS S3 WebrootDesktopFirewallDataService;Webroot Desktop Firewall Data Service;C:\Program Files\Webroot\Desktop Firewall\WDFDataService.exe S3 WebrootFirewall;Webroot Desktop Firewall;C:\Program Files\Webroot\Desktop Firewall\FirewallNTService.exe *Newly Created Service* - ASWUPDSV *Newly Created Service* - AVAST!_ANTIVIRUS *Newly Created Service* - AVAST!_MAIL_SCANNER *Newly Created Service* - AVAST!_WEB_SCANNER *Newly Created Service* - CATCHME *Newly Created Service* - KRNL_AKL *Newly Created Service* - PROCEXP90 . ************************************************************************** catchme 0.3.1333 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-12-15 22:05:09 Windows 5.1.2600 NTFS scanning hidden processes ... scanning hidden autostart entries ... scanning hidden files ... scan completed successfully hidden files: 0 ************************************************************************** . Completion time: 2007-12-15 22:06:00

**Posty:** 3854 · przez **Dzi@dek** 15 Gru 2007, 23:17

Tu nic nie widać - czysto.

**Posty:** 330 · przez **Kapucino** 15 Gru 2007, 23:18

a skąd wiesz czy ten anty kylogger sam nie jest keyloggerem? stałoo sie to przed czy po jego instalacji?

jak byl sciagany z niepewnego zrodla to mogl miec podpietego keyloggera.

moze po prostu za prosty pass miales i ktos go zlamal.

**Posty:** 7 · przez **seba1990** 15 Gru 2007, 23:21

przed ,dlatego go zainstalowalem

[ Dodano: Dzisiaj o 22:25 ]
wlasnie nie, watpie zeby ktos potrafil zlamac moje passy a potem nie wiedzial co ma robic po shackowaniu mnie-.-

P.s malo istotne jakie mam pass jezeli hacker uzywa keyloggera i screenshotera

prosze o sprawdzenie loga keylogger(screenshooter)

prosze o sprawdzenie loga keylogger(screenshooter)

Kto jest na forum