elitemadzone.org - Kako spijunirati drugi komp-.

kristi1

Član broj: 151211
Poruke: 2012
*.dynamic.isp.telekom.rs.

Sajt: www.mycity.rs/Ambulanta

+88 Profil

^{21.06.2012. u 07:45 - pre 144 meseci}

Citat:

Jbg, to ne znam, ali znam kako posmatrati preko veb kamere, a da to druga strana ne zna. Ostavi nam ovde IP da vidimo sta se dela ovih dana:)

Pogledaj sta otprilike trpi tvoj sistem da bi se ti zezao i voajerisao preko web kamere.

https://www.virustotal.com/fil...230a842806670f73f303/analysis/

Code:
Malwarebytes Anti-Malware 1.61.0.1400
www.malwarebytes.org

Database version: v2012.06.20.07

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 6.0.2900.5512
Administrator :: ARGUS-463081E8E [administrator]

6/21/2012 12:09:02 AM
mbam-log-2012-06-21 (00-09-02).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 176584
Time elapsed: 5 minute(s), 7 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 2
HKCR\CLSID\{08B0E5JF-4FCB-11CF-AAA5-00401C6XX500} (Trojan.Llac) -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{08B0E5JF-4FCB-11CF-AAA5-00401C6XX500} (Trojan.Llac) -> Quarantined and deleted successfully.

Registry Values Detected: 4
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|HKLM (Trojan.Llac) -> Data: C:\WINDOWS\system32\svchostsvr\svchostsvr.exe -> Quarantined and deleted successfully.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run|Policies (Trojan.Llac) -> Data: C:\WINDOWS\system32\svchostsvr\svchostsvr.exe -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|HKCU (Trojan.Llac) -> Data: C:\WINDOWS\system32\svchostsvr\svchostsvr.exe -> Quarantined and deleted successfully.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run|Policies (Trojan.Llac) -> Data: C:\WINDOWS\system32\svchostsvr\svchostsvr.exe -> Quarantined and deleted successfully.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 1
C:\WINDOWS\system32\svchostsvr (Backdoor.Bot) -> Quarantined and deleted successfully.

Files Detected: 7
C:\WINDOWS\system32\svchostsvr\svchostsvr.exe (Trojan.Llac) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Desktop\Delli_541221891_IMG_22362473515562104-IMG-www.facebook.com.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\SpyNet.exe (Trojan.Agent) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Application Data\logs.dat (Bifrose.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\UuU.uUu (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\XxX.xXx (Malware.Trace) -> Quarantined and deleted successfully.
C:\Documents and Settings\Administrator\Local Settings\Temp\teste.vbs (Trojan.VBS) -> Quarantined and deleted successfully.

(end)

Pa se ti i dalje zajebavaj sa tim glupostima. Ovo sam izvuko samo iz jednog od nekolicinine tih budalastina od programa.
To kako se ponasa tvoj racunar mogu da zamislim, a da si i sam otvoren za napade svih vrsta, to mozes da vidis iz prilozenog.

Odgovor na temu