Gå til innhold

KillYou

Medlemmer
 Vis profil  Se deres aktivitet

  • Innlegg

    538

  • Ble med

  • Besøkte siden sist

 Innholdstype 

Innlegg skrevet av KillYou

  7. Anonyme erklærer krig mot Scientologi! / NY protestaksjon 14. Mars

    i Religion, filosofi og livssyn

    Skrevet · Endret av KillYou

    Vist noen kan svare om hva "status-en" på denne demo-en er hadde det vert fint, blir det søkt eller ikke? blir det en lovlig, og vær så snill ikke inviter blitserene, de kan få være med fordi de er mot Cos men ikke for de skal lage faen.

     

    og vist noen med litt PS skills lager noen flyers printer jeg ut til vi går tom for papir her.

  8. Anonyme erklærer krig mot Scientologi! / NY protestaksjon 14. Mars

    i Religion, filosofi og livssyn

    Skrevet

    Jeg hadde t5enkt å reise til oslo for å være med på dette, hva blir det til, blir dette en lovlig protest der vi kommer til å stå i ro, eller en mindre lovlig, hvor muligheen for å bli bortvist av politiet, ol.

     

    Hvis noen kunne laget noen flyers, eller oversatt de som er tidligere her? gjerne noen som vet hva de snakker om, så kan jeg printe ut noen å ta med meg nedover.

  16. Enda et msn virus?

    i IKT-drift og sikkerhet

    Skrevet

    Ja LatHans(han som driver moo.no) skiftet ut disse i går, så alle som har det msn viruset som linker til msnphotos.moo.no og msnprofiles.moo.no kan ikke smitte flere, det som er viktig er å få opp en enkel veiledning til å slette disse.

     

    Ikke personlig men de fleste som starter en ukjent kjørbar fil, trenger litt hjelp med å fjerne ting som dette.

     

    Så vist noen med en god del erfaring med virus å slik(norbat?) tar seg tid til å skrive en liten tut, vil den bli lagt ut på den siden som de to moo.no sidene linker til.

  20. Enda et msn virus?

    i IKT-drift og sikkerhet

    Skrevet

    Det siste msn, viruset bruker en moo.no adresse.

     

    msnprofiles.moo.no og msnphotos.moo.no

     

    disse er flyttet slik at de nå leder til

     

    http://moo.no/moo_virus.html

     

    for å heller gi beskjed om viruset, slik at nå sender viruset personen til denne siden i stedet for den som inneholder viruset,

     

    vist noen kunne ta på seg jobben med å skrive en lett forståelig måte å bli kvitt det kan det bli lagt ut der, slik at i steden for å bli infisert får man opp hvordan man sletter det.

  21. Enda et msn virus?

    i IKT-drift og sikkerhet

    Skrevet

    Jeg innfiserte meg selv med vilje, for å prøve å leke smart, å se hvordan det fungerte.

     

    tror jeg har fått vekk det meste men vet ikke, her er loggene vertfall

     

     

    Combofix

     

    ComboFix 08-01-20.1 - Alexander 2008-01-20 15:48:19.1 - NTFSx86

    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1033.18.387 [GMT 1:00]

    Running from: C:\ComboFix.exe

    * Created a new restore point

     

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!

    .

     

    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))

    .

     

    C:\WINDOWS\svchost.exe

    C:\WINDOWS\system32\efcdbyx.dll

    C:\WINDOWS\system32\nnnnonm.dll

     

    .

    ((((((((((((((((((((((((( Files Created from 2007-12-20 to 2008-01-20 )))))))))))))))))))))))))))))))

    .

     

    2008-01-20 15:43 . 2000-08-31 08:00 51,200 --a------ C:\WINDOWS\NirCmd.exe

    2008-01-20 15:41 . 2008-01-20 15:41 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\SUPERAntiSpyware.com

    2008-01-20 15:40 . 2008-01-20 15:43 <DIR> d-------- C:\Program Files\SUPERAntiSpyware

    2008-01-20 15:40 . 2008-01-20 15:40 <DIR> d-------- C:\Documents and Settings\Alexander\Application Data\SUPERAntiSpyware.com

    2008-01-20 15:38 . 2008-01-20 15:38 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard

    2008-01-20 15:35 . 2008-01-20 15:35 1,550,759 --a------ C:\ComboFix.exe

    2008-01-20 15:34 . 2008-01-20 15:35 401,720 --a------ C:\HiJackThis.exe

    2008-01-20 14:25 . 2008-01-20 14:26 <DIR> d-------- C:\Program Files\mIRC

    2008-01-20 14:25 . 2008-01-20 15:49 <DIR> d-------- C:\Documents and Settings\Alexander\Application Data\mIRC

    2008-01-19 13:58 . 2004-08-03 23:08 26,496 --a--c--- C:\WINDOWS\system32\dllcache\usbstor.sys

    2008-01-19 13:36 . 2008-01-19 13:36 <DIR> d-------- C:\Program Files\Advanced Port Scanner

    2008-01-17 06:50 . 2007-07-30 19:19 271,224 --a------ C:\WINDOWS\system32\mucltui.dll

    2008-01-17 06:50 . 2007-07-30 19:19 207,736 --a------ C:\WINDOWS\system32\muweb.dll

    2008-01-17 06:50 . 2007-07-30 19:19 30,072 --a------ C:\WINDOWS\system32\mucltui.dll.mui

    2008-01-16 14:53 . 2008-01-16 14:53 0 --a------ C:\WINDOWS\nsreg.dat

    2008-01-16 14:52 . 2008-01-19 19:26 <DIR> d-------- C:\Program Files\Mozilla Thunderbird

    2008-01-16 14:52 . 2008-01-16 14:53 <DIR> d-------- C:\Documents and Settings\Alexander\Application Data\Thunderbird

    2008-01-16 13:54 . 2008-01-16 13:54 <DIR> d-------- C:\Program Files\Wolfenstein - Enemy Territory

    2008-01-16 13:38 . 2008-01-16 13:38 <DIR> d-------- C:\Program Files\ScreenPrint32 v3

    2008-01-16 13:38 . 2008-01-16 13:38 249,856 --------- C:\WINDOWS\Setup1.exe

    2008-01-16 13:38 . 2008-01-16 13:38 73,216 --a------ C:\WINDOWS\ST6UNST.EXE

    2008-01-16 13:34 . 1997-01-16 00:00 71,680 --a------ C:\WINDOWS\ST5UNST.EXE

    2008-01-16 13:34 . 1997-01-16 00:00 29,696 --a------ C:\WINDOWS\system32\VB5StKit.dll

    2008-01-16 12:48 . 2008-01-16 12:48 <DIR> d-------- C:\Live!Cam

    2008-01-16 11:53 . 2008-01-16 14:47 <DIR> d-------- C:\Documents and Settings\Alexander\Contacts

    2008-01-16 09:15 . 2008-01-16 09:15 268 --ah----- C:\sqmdata00.sqm

    2008-01-16 09:15 . 2008-01-16 09:15 244 --ah----- C:\sqmnoopt00.sqm

    2008-01-16 09:12 . 2008-01-16 09:12 <DIR> d-------- C:\Documents and Settings\Alexander\Application Data\vlc

    2008-01-16 09:10 . 2008-01-16 09:10 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE

    2008-01-16 09:07 . 2008-01-16 09:07 <DIR> d-------- C:\Documents and Settings\Alexander\Application Data\dvdcss

    2008-01-16 09:05 . 2008-01-16 09:05 <DIR> d-------- C:\Program Files\VideoLAN

    2008-01-16 09:05 . 2008-01-16 09:09 <DIR> d--hsc--- C:\Program Files\Common Files\WindowsLiveInstaller

    2008-01-16 09:04 . 2008-01-16 09:10 <DIR> d-------- C:\Program Files\Windows Live

    2008-01-16 09:03 . 2008-01-16 09:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\WLInstaller

    2008-01-16 08:58 . 2008-01-17 15:16 <DIR> d--h----- C:\WINDOWS\$hf_mig$

    2008-01-16 08:58 . 2005-06-28 10:21 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe

    2008-01-16 08:55 . 2008-01-16 08:55 <DIR> d---s---- C:\Documents and Settings\Alexander\UserData

    2008-01-16 07:43 . 2008-01-16 07:43 <DIR> d--h----- C:\Program Files\InstallShield Installation Information

    2008-01-16 07:42 . 2008-01-16 07:43 <DIR> d-------- C:\Program Files\Common Files\InstallShield

    2008-01-16 07:34 . 2008-01-16 07:34 <DIR> d-------- C:\WINDOWS\system32\LogFiles

    2008-01-16 07:33 . 2006-06-14 10:00 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys

    2008-01-16 07:33 . 2006-06-14 10:00 82,944 --a--c--- C:\WINDOWS\system32\dllcache\wdmaud.sys

    2008-01-16 07:33 . 2001-08-17 14:00 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys

    2008-01-16 07:33 . 2001-08-17 14:00 54,272 --a--c--- C:\WINDOWS\system32\dllcache\swmidi.sys

    2008-01-16 07:33 . 2004-08-03 23:07 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys

    2008-01-16 07:33 . 2004-08-03 23:07 52,864 --a--c--- C:\WINDOWS\system32\dllcache\dmusic.sys

    2008-01-16 07:33 . 2006-06-14 09:47 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys

    2008-01-16 07:33 . 2006-06-14 09:47 6,400 --a--c--- C:\WINDOWS\system32\dllcache\splitter.sys

     

    .

    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    2008-01-20 15:05 1,994,784 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat

    2008-01-20 15:03 24,404 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx

    2008-01-20 15:03 2,758,656 ----a-w C:\WINDOWS\Internet Logs\xDB1.tmp

    2008-01-16 06:03 --------- d-----w C:\Documents and Settings\Alexander\Application Data\uTorrent

    2008-01-16 05:54 --------- d-----w C:\Program Files\uTorrent

    2008-01-16 05:53 --------- d-----w C:\Program Files\Alwil Software

    2008-01-16 05:49 --------- d-----w C:\Documents and Settings\All Users\Application Data\MailFrontier

    2008-01-16 05:47 --------- d-----w C:\Program Files\Opera

    2008-01-16 05:39 --------- d--h--w C:\Program Files\Uninstall Information

    2008-01-16 05:08 --------- d-----w C:\Program Files\microsoft frontpage

    2007-12-04 14:56 93,264 ----a-w C:\WINDOWS\system32\drivers\aswmon.sys

    2007-12-04 14:55 94,544 ----a-w C:\WINDOWS\system32\drivers\aswmon2.sys

    2007-12-04 14:53 23,152 ----a-w C:\WINDOWS\system32\drivers\aswRdr.sys

    2007-12-04 14:51 42,912 ----a-w C:\WINDOWS\system32\drivers\aswTdi.sys

    2007-12-04 14:49 26,624 ----a-w C:\WINDOWS\system32\drivers\aavmker4.sys

    2007-11-14 15:05 75,248 ----a-w C:\WINDOWS\zllsputility.exe

    .

     

    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))

    .

    .

    *Note* empty entries & legit default entries are not shown

    REGEDIT4

     

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-04 13:00 15360]

    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.exe" [2007-10-18 11:34 5724184]

    "MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [2004-10-13 17:24 1694208]

    "SUPERAntiSpyware"="C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2007-06-21 14:06 1318912]

     

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]

    "ZoneAlarm Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2007-11-14 16:05 919016]

    "avast!"="C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe" [2007-12-04 14:00 79224]

    "ScreenPrint32"="C:\Program Files\ScreenPrint32 v3\ScreenPrint32.exe" [2003-05-15 20:36 446464]

    "Windows Taskmanager"="svchost.exe" [2004-08-04 13:00 14336 C:\WINDOWS\system32\svchost.exe]

     

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]

    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-08-04 13:00 15360]

     

    [hkey_local_machine\software\microsoft\windows\currentversion\explorer\shellexecutehooks]

    "{89A1E40D-0254-4F99-B9AE-B60A2D8754A9}"= C:\WINDOWS\system32\nnnnonm.dll [ ]

    "{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

     

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]

    C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

     

    R3 AN983;ADMtek AN983/AN985/ADM951X 10/100Mbps Fast Ethernet Adapter;C:\WINDOWS\system32\DRIVERS\AN983.sys [2004-08-03 23:31]

    R3 V0260VID;Live! Cam Vista IM;C:\WINDOWS\system32\DRIVERS\V0260Vid.sys [2006-11-04 06:45]

     

    .

    **************************************************************************

     

    catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net

    Rootkit scan 2008-01-20 16:09:51

    Windows 5.1.2600 Service Pack 2 NTFS

     

    scanning hidden processes ...

     

    scanning hidden autostart entries ...

     

    scanning hidden files ...

     

    scan completed successfully

    hidden files: 0

     

    **************************************************************************

    .

    Completion time: 2008-01-20 16:12:28 - machine was rebooted

    ComboFix-quarantined-files.txt 2008-01-20 15:12:19

    .

    2008-01-17 14:16:56 --- E O F ---

     

     

     

    hijackthis

     

    Logfile of Trend Micro HijackThis v2.0.2

    Scan saved at 16:22:44, on 20.01.2008

    Platform: Windows XP SP2 (WinNT 5.01.2600)

    MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

    Boot mode: Normal

     

    Running processes:

    C:\WINDOWS\System32\smss.exe

    C:\WINDOWS\system32\winlogon.exe

    C:\WINDOWS\system32\services.exe

    C:\WINDOWS\system32\lsass.exe

    C:\WINDOWS\system32\svchost.exe

    C:\WINDOWS\System32\svchost.exe

    C:\WINDOWS\system32\ZoneLabs\vsmon.exe

    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    C:\Program Files\Alwil Software\Avast4\ashServ.exe

    C:\WINDOWS\system32\spoolsv.exe

    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

    C:\WINDOWS\Explorer.EXE

    C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe

    C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    C:\Program Files\ScreenPrint32 v3\ScreenPrint32.exe

    C:\WINDOWS\system32\ctfmon.exe

    C:\Program Files\Messenger\msmsgs.exe

    C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    C:\WINDOWS\system32\notepad.exe

    C:\Program Files\Opera\Opera.exe

    C:\HiJackThis.exe

     

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

    O4 - HKLM\..\Run: [ZoneAlarm Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"

    O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

    O4 - HKLM\..\Run: [screenPrint32] C:\Program Files\ScreenPrint32 v3\ScreenPrint32.exe -startup

    O4 - HKLM\..\Run: [Windows Taskmanager] svchost.exe

    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe

    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background

    O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background

    O4 - HKCU\..\Run: [sUPERAntiSpyware] C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')

    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')

    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe

    O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe

    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe

    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe

    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe

    O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

     

    --

    End of file - 3115 bytes

     

     

     

    tror combo tok knekken på det, det lager en liksom svchost fil. håper dette kan være til hjelp

  24. Loope html kode.

    i Programmering og webutvikling

    Skrevet

    bare for å få dette dette ferdig.

     

    slik SKAL det se ut:P

     

    <?php
function do_post_request($url, $data, $optional_headers = null)
{
$params = array('http' => array(
			 'method' => 'POST',
			 'content' => $data
		  ));
if ($optional_headers !== null) {
   $params['http']['header'] = $optional_headers;
}
$ctx = stream_context_create($params);
$fp = @fopen($url, 'rb', false, $ctx);
if (!$fp) {
   throw new Exception("Problem with $url, $php_errormsg");
}
$response = @stream_get_contents($fp);
if ($response === false) {
   throw new Exception("Problem reading data from $url, $php_errormsg");
}
return $response;
}

$data['navn'] = 'name';
$data['epost'] = '[email protected]';
$data['melding'] = 'Elendig sikkerhet.';
$data['hjemmeside'] = 'www.name.com';
$data['spam'] = 'Oslo';
$data['ok'] = 'SPAM!';

$url = 'http://----.net/gjestebok.php';

$datastring = '';
foreach ($data as $key => $value) {
 $datastring .= "$key=$value&";
}
$datastring = substr($datastring, 0, -1);

$antall = '1'; // sett inn antall ganger det skal postes
while ($antall) {
 do_post_request($url, $datastring);
 $antall--;
}
?>

×
×
  • Opprett ny...