Newsgroup: it.tlc.gestori.fastweb
Titolo: OT: chi cerca trova... o no? trojan

ecco i processi che ho, irc non mi si connette + con la dicitura :trojan
clones pls clean your pc (g-lined).
dei 20 programmi che ho usato solo anti trojan mi vede 2 trojan. uno in
porta 80 (ma è spystopper) l'altro in 5000 e un altro avolte in 1033. Uno di
questi è addirittura norton. Ma ce li ho sti trojan o sono stato solo
bannato dal server irc?
cmq questi sono i miei tasks. controllate in svchost...me puzza qualcosa.
aiutaaaaaaaaatemiiiiiiiiiiiiiiiiiii
                                 uxtheme.dll, OLEAUT32.dll, CLBCATQ.DLL,
                                 COMRes.dll, NISUMPS.DLL
LowLight.exe                1592 ntdll.dll, kernel32.dll, SETUPAPI.dll,
                                 msvcrt.dll, ADVAPI32.dll, RPCRT4.dll,
                                 GDI32.dll, USER32.dll, SHLWAPI.dll,
                                 LLowLght.dll, uxtheme.dll, MSCTF.dll,
                                 ophook12.dll, ole32.dll, OLEAUT32.dll,
                                 VERSION.dll, ophookSE2.dll
svchost.exe                 1776 ntdll.dll, kernel32.dll, ADVAPI32.dll,
                                 RPCRT4.dll, wiaservc.dll, msvcrt.dll,
                                 USER32.dll, GDI32.dll, OLEAUT32.dll,
                                 OLE32.DLL, SHLWAPI.dll, CFGMGR32.dll,
                                 setupapi.dll, USERENV.dll, mscms.dll,
                                 WINSPOOL.DRV, WINSTA.dll, VERSION.dll,
                                 CLBCATQ.DLL, COMRes.dll, CNQU85.DLL,
                                 CNQL1210.DLL, WINMM.dll, SHELL32.dll,
                                 COMCTL32.dll, comctl32.dll, wiavusd.dll,
                                 gdiplus.dll, SHFOLDER.dll, uxtheme.dll,
                                 actxprxy.dll, sti.dll
CCPXYSVC.EXE                1152 ntdll.dll, kernel32.dll, USER32.dll,
                                 GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
                                 ccTrust.dll, ole32.dll, OLEAUT32.dll,
                                 MSVCRT.DLL, VERSION.dll, MSVCP60.dll,
                                 SYMSTORE.dll, CRYPT32.dll, MSASN1.dll,
                                 rsaenh.dll, userenv.dll, secur32.dll,
                                 netapi32.dll, ccProxy.dll, WS2_32.dll,
                                 WS2HELP.dll, SYMREDIR.dll, SymNeti.DLL,
                                 WSOCK32.dll, iphlpapi.dll, SHLWAPI.dll,
                                 comctl32.dll, comctl32.dll, ccPxyEvt.dll,
                                 NisEvt.DLL, ccEvt.dll, CLBCATQ.DLL,
                                 COMRes.dll, msi.dll, SXS.DLL, mswsock.dll,
                                 wshtcpip.dll, PxyNNTP.DLL, StrmFilt.dll,
                                 SymIConv.dll, PxyIM.dll, NISCONFD.DLL,
                                 PxyHTTP.dll, DataHTTP.dll, NisAdBlk.dll,
                                 NISUMPS.DLL, cryptnet.dll, WLDAP32.dll,
                                 wininet.dll, shell32.dll, RASAPI32.DLL,
                                 rasman.dll, TAPI32.dll, rtutils.dll,
                                 WINMM.dll, sensapi.dll
SpyStopper.exe              3304 ntdll.dll, kernel32.dll, MSVBVM60.DLL,
                                 USER32.dll, GDI32.dll, ADVAPI32.dll,
                                 RPCRT4.dll, ole32.dll, OLEAUT32.dll,
                                 MSVCRT.DLL, uxtheme.dll, MSCTF.dll,
                                 ophook12.dll, VERSION.dll, ophookSE2.dll,
                                 CLBCATQ.DLL, COMRes.dll, MSWINSCK.OCX,
                                 WSOCK32.dll, WS2_32.dll, WS2HELP.dll,
                                 SXS.DLL, mswsock.dll, wshtcpip.dll,
                                 shell32.dll, SHLWAPI.dll, comctl32.dll,
                                 comctl32.dll
wwDisp.exe                  2312 ntdll.dll, kernel32.dll, advapi32.dll,
                                 RPCRT4.dll, comctl32.dll, GDI32.dll,
                                 USER32.dll, ole32.dll, oleaut32.dll,
                                 MSVCRT.DLL, Shell32.dll, SHLWAPI.dll,
                                 URLMON.DLL, VERSION.dll, wsock32.dll,
                                 WS2_32.dll, WS2HELP.dll, comctl32.dll,
                                 uxtheme.dll, MSCTF.dll, ophook12.dll,
                                 ophookSE2.dll, English.dll, mpr.dll,
                                 wininet.dll, CRYPT32.dll, MSASN1.dll,
                                 Secur32.dll, CLBCATQ.DLL, COMRes.dll,
                                 SETUPAPI.dll, appHelp.dll
AAtools.exe                 1672 ntdll.dll, kernel32.dll, user32.dll,
                                 GDI32.dll, ADVAPI32.dll, RPCRT4.dll,
                                 oleaut32.dll, MSVCRT.DLL, OLE32.DLL,
                                 mpr.dll, version.dll, comctl32.dll,
                                 SHLWAPI.dll, winspool.drv, shell32.dll,
                                 wininet.dll, CRYPT32.dll, MSASN1.dll,
                                 comdlg32.dll, winmm.dll, wsock32.dll,
                                 WS2_32.dll, WS2HELP.dll, hhctrl.ocx,
                                 netapi32.dll, hhctrlui.dll, uxtheme.dll,
                                 MSCTF.dll, ophook12.dll, ophookSE2.dll,
                                 iphlpapi.dll, Secur32.dll, appHelp.dll,
                                 CLBCATQ.DLL, COMRes.dll, psapi.dll,
                                 SETUPAPI.dll, shdocvw.dll, kbdhook.dll,
                                 MPRAPI.dll, ACTIVEDS.dll, adsldpc.dll,
                                 WLDAP32.dll, ATL.DLL, rtutils.dll,
                                 SAMLIB.dll, rasapi32.dll, rasman.dll,
                                 TAPI32.dll, mswsock.dll, DNSAPI.dll,
                                 winrnr.dll, rasadhlp.dll, wdmaud.drv,
                                 msacm32.drv, MSACM32.dll, midimap.dll,
                                 SXS.DLL, dao360.dll, msado15.dll,
                                 MSDART.DLL, UNIDRVUI.DLL, LINKINFO.dll,
                                 ntshrui.dll, USERENV.dll
mirc.exe                    2220 ntdll.dll, kernel32.dll, WINMM.dll,
                                 USER32.dll, GDI32.dll, ADVAPI32.dll,
                                 RPCRT4.dll, WSOCK32.dll, WS2_32.dll,
                                 msvcrt.dll, WS2HELP.dll, VERSION.dll,
                                 MPR.dll, COMCTL32.dll, SHLWAPI.dll,
                                 comdlg32.dll, SHELL32.dll, ole32.dll,
                                 OLEAUT32.dll, uxtheme.dll, MSCTF.dll,
                                 ophook12.dll, ophookSE2.dll, riched20.dll,
                                 CLBCATQ.DLL, COMRes.dll, agentmpx.dll,
                                 mdx.dll, dmu.dll, systray.dll, mswsock.dll,
                                 wshtcpip.dll, DNSAPI.dll, iphlpapi.dll,
                                 winrnr.dll, WLDAP32.dll, rasadhlp.dll
helpctr.exe                 3276 ntdll.dll, kernel32.dll, msvcrt.dll,
                                 ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
                                 USER32.dll, COMCTL32.dll, SHLWAPI.dll,
                                 UxTheme.dll, urlmon.dll, ole32.dll,
                                 VERSION.dll, WININET.dll, CRYPT32.dll,
                                 MSASN1.dll, OLEAUT32.dll, SHELL32.dll,
                                 MSIMG32.dll, MSCTF.dll, ophook12.dll,
                                 ophookSE2.dll, HCAppRes.dll, CLBCATQ.DLL,
                                 COMRes.dll, itss.dll, SETUPAPI.dll,
                                 msxml3.dll, Secur32.dll, pchshell.dll,
                                 mlang.dll, mshtml.DLL, SXS.DLL, msimtf.dll,
                                 shdoclc.dll, scrauth.dll, ScrBlock.dll,
                                 wintrust.dll, IMAGEHLP.dll, rsaenh.dll,
                                 userenv.dll, netapi32.dll, cryptnet.dll,
                                 WLDAP32.dll, jscript.dll, mshtmled.dll,
                                 MSLS31.DLL, shdocvw.dll, IMM32.DLL,
                                 appHelp.dll, vbscript.dll, msinfo.dll,
                                 MFC42u.DLL, Cabinet.dll, comdlg32.dll,
                                 MFC42LOC.DLL, RICHED32.DLL, RICHED20.dll,
                                 wbemprox.dll, wbemcomn.dll, wbemsvc.dll,
                                 fastprox.dll, msi.dll, kbdhook.dll
helpsvc.exe                 2092 ntdll.dll, kernel32.dll, msvcrt.dll,
                                 ADVAPI32.dll, RPCRT4.dll, USER32.dll,
                                 GDI32.dll, ole32.dll, OLEAUT32.dll,
                                 uxtheme.dll, HCAppRes.dll, CLBCATQ.DLL,
                                 COMRes.dll, VERSION.dll, msi.dll, SXS.DLL,
                                 itss.dll, urlmon.dll, SHLWAPI.dll,
                                 WININET.dll, CRYPT32.dll, MSASN1.dll,
                                 comctl32.dll, ESENT.dll
iexplore.exe                3696 ntdll.dll, kernel32.dll, msvcrt.dll,
                                 USER32.dll, GDI32.dll, ADVAPI32.dll,
                                 RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
                                 comctl32.dll, SHELL32.dll, comctl32.dll,
                                 ole32.dll, uxtheme.dll, MSCTF.dll,
                                 ophook12.dll, OLEAUT32.dll, VERSION.dll,
                                 ophookSE2.dll, BROWSEUI.dll, browselc.dll,
                                 appHelp.dll, CLBCATQ.DLL, COMRes.dll,
                                 WININET.dll, CRYPT32.dll, MSASN1.dll,
                                 Secur32.dll, cscui.dll, CSCDLL.dll,
                                 SETUPAPI.dll, AcroIEHelper.dll,
                                 AcroIEFavClient.dll, ATL.DLL, MSVCP60.dll,
                                 USERENV.dll, netapi32.dll, SXS.DLL,
                                 NavShExt.dll, ccTrust.dll, urlmon.dll,
                                 shdoclc.dll, mlang.dll, wsock32.dll,
                                 WS2_32.dll, WS2HELP.dll, mswsock.dll,
                                 wshtcpip.dll, RASAPI32.DLL, rasman.dll,
                                 TAPI32.dll, rtutils.dll, WINMM.dll,
                                 sensapi.dll, msi.dll, DNSAPI.dll,
                                 iphlpapi.dll, winrnr.dll, WLDAP32.dll,
                                 rasadhlp.dll, mshtml.dll, msimtf.dll,
                                 IMM32.DLL, msohev.dll, scrauth.dll,
                                 ScrBlock.dll, wintrust.dll, IMAGEHLP.dll,
                                 rsaenh.dll, cryptnet.dll, jscript.dll,
                                 MSLS31.DLL, iepeers.dll, WINSPOOL.DRV,
                                 mshtmled.dll, wdmaud.drv, msacm32.drv,
                                 MSACM32.dll, midimap.dll, kbdhook.dll,
                                 MSRATING.DLL, msratelc.dll, actxprxy.dll,
                                 imgutil.dll, pngfilt.dll, dispex.dll,
                                 dxtrans.dll, ddrawex.dll, DDRAW.dll,
                                 DCIMAN32.dll, dxtmsft.dll
regedit.exe                 2912 ntdll.dll, kernel32.dll, msvcrt.dll,
                                 ADVAPI32.dll, RPCRT4.dll, GDI32.dll,
                                 USER32.dll, COMCTL32.dll, SHLWAPI.dll,
                                 comdlg32.dll, SHELL32.dll, AUTHZ.dll,
                                 ACLUI.dll, ole32.dll, OLEAUT32.dll,
                                 ulib.dll, clb.dll, uxtheme.dll, MSCTF.dll,
                                 ophook12.dll, VERSION.dll, ophookSE2.dll
iexplore.exe                3784 ntdll.dll, kernel32.dll, msvcrt.dll,
                                 USER32.dll, GDI32.dll, ADVAPI32.dll,
                                 RPCRT4.dll, SHLWAPI.dll, SHDOCVW.dll,
                                 comctl32.dll, SHELL32.dll, comctl32.dll,
                                 ole32.dll, uxtheme.dll, MSCTF.dll,
                                 ophook12.dll, OLEAUT32.dll, VERSION.dll,
                                 ophookSE2.dll, BROWSEUI.dll, browselc.dll,
                                 appHelp.dll, CLBCATQ.DLL, COMRes.dll,
                                 WININET.dll, CRYPT32.dll, MSASN1.dll,
                                 Secur32.dll, cscui.dll, CSCDLL.dll,
                                 SETUPAPI.dll, AcroIEHelper.dll,
                                 AcroIEFavClient.dll, ATL.DLL, MSVCP60.dll,
                                 USERENV.dll, netapi32.dll, SXS.DLL,
                                 NavShExt.dll, ccTrust.dll, urlmon.dll,
                                 shdoclc.dll, mlang.dll, wsock32.dll,
                                 WS2_32.dll, WS2HELP.dll, mswsock.dll,
                                 wshtcpip.dll, RASAPI32.DLL, rasman.dll,
                                 TAPI32.dll, rtutils.dll, WINMM.dll,
                                 sensapi.dll, msi.dll, DNSAPI.dll,
                                 iphlpapi.dll, winrnr.dll, WLDAP32.dll,
                                 rasadhlp.dll, mshtml.dll, msimtf.dll,
                                 IMM32.DLL, msohev.dll, scrauth.dll,
                                 ScrBlock.dll, wintrust.dll, IMAGEHLP.dll,
                                 rsaenh.dll, cryptnet.dll, jscript.dll,
                                 MSLS31.DLL, iepeers.dll, WINSPOOL.DRV,
                                 wdmaud.drv, msacm32.drv, MSACM32.dll,
                                 midimap.dll, mshtmled.dll, actxprxy.dll,
                                 MSRATING.DLL, msratelc.dll, comdlg32.dll,
                                 ntshrui.dll, LINKINFO.dll, MPR.dll,
                                 drprov.dll, ntlanman.dll, NETUI0.dll,
                                 NETUI1.dll, NETRAP.dll, SAMLIB.dll,
                                 davclnt.dll, MSGINA.dll, WINSTA.dll,
                                 ODBC32.dll, odbcint.dll, sti.dll,
                                 CFGMGR32.dll, kbdhook.dll
cmd.exe                     3184 ntdll.dll, kernel32.dll, msvcrt.dll,
                                 USER32.dll, GDI32.dll, ADVAPI32.dll,
                                 RPCRT4.dll, Apphelp.dll
msmsgs.exe                  1928 ntdll.dll, kernel32.dll, ADVAPI32.dll,
                                 RPCRT4.dll, GDI32.dll, USER32.dll,
                                 ole32.dll, OLEAUT32.dll, MSVCRT.DLL,
                                 COMCTL32.dll, SHLWAPI.dll, SHELL32.dll,
                                 uxtheme.dll, MSCTF.dll, ophook12.dll,
                                 VERSION.dll, ophookSE2.dll, MSGSLANG.DLL,
                                 CLBCATQ.DLL, COMRes.dll, SXS.DLL,
                                 wtsapi32.dll, WINSTA.dll, es.dll,
                                 WS2_32.dll, WS2HELP.dll, msi.dll,
                                 rtcimsp.dll, WSOCK32.dll, rtcdll.dll,
                                 ATL.DLL, Secur32.dll, WININET.dll,
                                 CRYPT32.dll, MSASN1.dll, WINMM.dll,
                                 iphlpapi.dll, DNSAPI.dll, termmgr.dll,
                                 rtutils.dll, quartz.dll, mswsock.dll,
                                 wshtcpip.dll, dxmrtp.dll, MSVFW32.dll,
                                 DSOUND.dll, PSAPI.DLL, devenum.dll,
                                 setupapi.dll, wdmaud.drv, msacm32.drv,
                                 MSACM32.dll, midimap.dll, dpnhupnp.dll,
                                 rsaenh.dll, rasapi32.dll, rasman.dll,
                                 NETAPI32.dll, TAPI32.dll, hnetcfg.dll,
                                 netshell.dll, credui.dll, DHCPCSVC.DLL,
                                 wbemprox.dll, wbemcomn.dll, wbemsvc.dll,
                                 actxprxy.dll, fastprox.dll
wmiprvse.exe                3796 ntdll.dll, kernel32.dll, msvcrt.dll,
                                 ADVAPI32.dll, RPCRT4.dll, USER32.dll,
                                 GDI32.dll, FastProx.dll, wbemcomn.dll,
                                 OLEAUT32.dll, OLE32.DLL, NCObjAPI.DLL,
                                 uxtheme.dll, CLBCATQ.DLL, COMRes.dll,
                                 VERSION.dll, wbemprox.dll, wbemsvc.dll,
                                 wmiutils.dll, cimwin32.dll, framedyn.dll,
                                 Secur32.dll, SETUPAPI.dll, WTSAPI32.dll,
                                 WINSTA.dll, CFGMGR32.DLL, WMI.DLL,
                                 NETAPI32.DLL
tasklist.exe                3708 ntdll.dll, kernel32.dll, msvcrt.dll,
                                 ADVAPI32.dll, RPCRT4.dll, USER32.dll,
                                 GDI32.dll, MPR.dll, ole32.dll,
OLEAUT32.dll,
                                 Secur32.dll, WS2_32.dll, WS2HELP.dll,
                                 framedyn.dll, NETAPI32.dll, DBGHELP.dll,
                                 VERSION.dll, uxtheme.dll, MSCTF.dll,
                                 ophook12.dll, ophookSE2.dll, CLBCATQ.DLL,
                                 COMRes.dll, wbemprox.dll, wbemcomn.dll,
                                 Winsta.dll, wbemsvc.dll, fastprox.dll
C:\Documents and Settings\Alex>tasklist /svc
Nome immagine                PID Servizi
========================= ======
=============================================
System Idle Process            0 N/D
System                         4 N/D
smss.exe                     576 N/D
csrss.exe                    640 N/D
winlogon.exe                 664 N/D
services.exe                 708 Eventlog, PlugPlay
lsass.exe                    720 PolicyAgent, ProtectedStorage, SamSs
ati2evxx.exe                 880 Ati HotKey Poller
svchost.exe                  908 RpcSs
svchost.exe                 1008 AudioSrv, BITS, Browser, CryptSvc, Dhcp,
                                 dmserver, ERSvc, EventSystem,
                                 FastUserSwitchingCompatibility, helpsvc,
                                 HidServ, lanmanserver, lanmanworkstation,
                                 Messenger, Netman, Nla, Schedule, seclogon,
                                 SENS, ShellHWDetection, TermService,
Themes,
                                 TrkWks, uploadmgr, W32Time, winmgmt,
                                 wuauserv, WZCSVC
svchost.exe                 1112 LmHosts, RemoteRegistry, SSDPSRV, WebClient
spoolsv.exe                 1352 Spooler
ati2evxx.exe                1972 N/D
explorer.exe                2040 N/D
sstray.exe                   284 N/D
CCAPP.EXE                    296 N/D
atiptaxx.exe                 312 N/D
iTouch.exe                   320 N/D
ICQLite.exe                  420 N/D
RivaTuner.exe                436 N/D
opwareSE2.exe                444 N/D
opware12.exe                 456 N/D
LVComS.exe                   464 N/D
LogiTray.exe                 484 N/D
ATWatch.exe                  504 N/D
ctfmon.exe                   520 N/D
acrotray.exe                 604 N/D
CCEVTMGR.EXE                1128 ccEvtMgr
NAVAPSVC.EXE                 772 navapsvc
NISUM.EXE                   1408 NISUM
LowLight.exe                1592 N/D
svchost.exe                 1776 stisvc
CCPXYSVC.EXE                1152 ccPxySvc
SpyStopper.exe              3304 N/D
wwDisp.exe                  2312 N/D
AAtools.exe                 1672 N/D
mirc.exe                    2220 N/D
helpctr.exe                 3276 N/D
helpsvc.exe                 2092 N/D
iexplore.exe                3696 N/D
regedit.exe                 2912 N/D
iexplore.exe                3784 N/D
cmd.exe                     3184 N/D
wmiprvse.exe                3796 N/D
msmsgs.exe                  4028 N/D
notepad.exe                  832 N/D
tasklist.exe                3892 N/D
C:\Documents and Settings\Alex>

 ecco i processi che ho, irc non mi si connette + con la dicitura :trojan
Prega di non aver messo una email vera considerato il fatto che l'ho
inserita in un bel circuito di Spam.
Ps:Auguri.

 ha scritto nel messaggio
news:M4HFb.8934$Jw2....@tornado.fastwebnet.it...


 demente.
Vista la tua abilita'nel quoting, tutto è possibile.
PS:Hai gia'finito gli argomenti?

 Vista la tua abilita'nel quoting, tutto č possibile.
