E posibil sa te conectezi la pcul cuiva prin intermediul messenger-ului?

#1
soso_ro

Posted 01 May 2006 - 22:37

Junior Member

Grup: Members
Posts: 137
Înscris: 03.12.2005

de un timp, cand stau [fara sa vb cu cineva / idle] pe yahoo messenger viteza de download variaza intre 4-7 kBps si cea de upload intre 1-3 kBps... asta vad prin bitmeter... am luat un TCP/UDP endpoint viewer si la conexiunile de pe yahoo imi arata 2 sau 3 ip-uri locale pe portul 5101 [86.35.43.100 / 85.186.122.158 / 86.123.231.21 - Artelecom, Astral BZ, RO-BZ-HDSNET(RDS)] si 2 de la yahoo. Cum sa fac sa aflu ce program folosesc de tot se conecteaza la mine (daca e ceva de genul victima-server cred ca se poate inversa) si mai ales cum sa-i blochez.

folosesc ca antivirus si firewall Zone Alarm Security Suite

ms

am scanat pc-ul cu ZA si nu a gasit nimic
l-am scanat si cu HiJackThis si am salvat logul

Attached Files

hijackthis.txt 10.27K 31 downloads

Back to top

#2
soso_ro

Posted 02 May 2006 - 17:16

Junior Member

Grup: Members
Posts: 137
Înscris: 03.12.2005

help me

Back to top

#3
disciple

Posted 05 May 2006 - 16:01

Junior Member

Grup: Members
Posts: 39
Înscris: 16.11.2005

Nu ai nici o treaba cu yahoo messenger....
Esti infectat cu spyware-ul MyWebSearch.

http://www.mac-net.com/445088.page
sau
http://www.annoyance...inxp/1076120425

Succes !

Back to top

#4
Daisuke

Posted 07 May 2006 - 11:02

Moderator

Grup: Senior Members
Posts: 2,173
Înscris: 19.01.2004

Dezinstaleaza din Add\Remove Programs:
MyWebSearch si Consumer Input Toolbar

Muta HiJackThis intr-un director al sau, de exemplu C:\HJT

Fixeaza urmatoarele cu HijackThis:
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://red.clientapp...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://red.clientapp...//www.yahoo.com
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://red.clientapp...rch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://red.clientapp...//www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://red.clientapp...//www.yahoo.com
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = http://red.clientapp...//www.yahoo.com
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL

O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O2 - BHO: CI ToolHelper - {55825511-174A-4b4e-84B7-69AAC4E294B6} - C:\PROGRA~1\CONSUM~1\CONSUM~1.DLL

O3 - Toolbar: My &Web Search - {07B18EA9-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O3 - Toolbar: Consumer Input Toolbar - {9B393B85-708D-4e61-9529-2FA61D4A4904} - C:\Program Files\Consumer Input Toolbar\ConsumerInputToolbar.dll

O4 - HKLM\..\Run: [My Web Search Bar] rundll32 C:\PROGRA~1\MYWEBS~1\bar\1.bin\MWSBAR.DLL,S
O4 - HKLM\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU\..\Run: [Consumer Input Toolbar] C:\Program Files\Consumer Input Toolbar\ConsumerInputToolbar.exe
O4 - HKCU\..\Run: [Consumer Input Toolbar Update] C:\Program Files\Consumer Input Toolbar\ConsumerInputToolbarUa.exe

O8 - Extra context menu item: &Search - http://edits.mywebse...html?p=ZNfox000

Sterge cele doua foldere daca mai exista:
C:\Program Files\MyWebSearch\ <-- acest folder
C:\Program Files\Consumer Input Toolbar\ <-- acest folder

Edited by Daisuke, 07 May 2006 - 11:04.

Back to top

#5
alin179

Posted 25 May 2006 - 03:22

Member

Grup: Members
Posts: 899
Înscris: 23.02.2005

si eu chiar ma gandeam sa-mi pun zone alarm. se pare ca ar fi fost proasta inspiratie din partea mea. o sa raman tot la nod32 + Kerio

Back to top

Anunturi

Neurochirurgie minim invazivă

"Primum non nocere" este ideea ce a deschis drumul medicinei spre minim invaziv.

Avansul tehnologic extraordinar din ultimele decenii a permis dezvoltarea tuturor domeniilor medicinei. Microscopul operator, neuronavigația, tehnicile anestezice avansate permit intervenții chirurgicale tot mai precise, tot mai sigure. Neurochirurgia minim invazivă, sau prin "gaura cheii", oferă pacienților posibilitatea de a se opera cu riscuri minime, fie ele neurologice, infecțioase, medicale sau estetice.

www.neurohope.ro

E posibil sa te conectezi la pcul cuiva prin intermediul messenger-ului?

#1 soso_ro Posted 01 May 2006 - 22:37

Attached Files

#2 soso_ro Posted 02 May 2006 - 17:16

#3 disciple Posted 05 May 2006 - 16:01

#4 Daisuke Posted 07 May 2006 - 11:02

#5 alin179 Posted 25 May 2006 - 03:22

Anunturi

▶ 0 user(s) are reading this topic

Sign In

#1
soso_ro

Posted 01 May 2006 - 22:37

#2
soso_ro

Posted 02 May 2006 - 17:16

#3
disciple

Posted 05 May 2006 - 16:01

#4
Daisuke

Posted 07 May 2006 - 11:02

#5
alin179

Posted 25 May 2006 - 03:22