Me parece k man hakceado o algo asi

makkki

Entro en el Disco C i me envuentro 7 carpetes con diferentes numeros i letras. Abro el arixvo (bloc de notas) i encuentro esto:

=== Verbose logging started: 25/11/2006 14:51:38 Build type: SHIP UNICODE 3.01.4000.2435 Calling process: C:\WINDOWS\system32\msiexec.exe ===
MSI (c) (40:08) [14:51:38:828]: Resetting cached policy values
MSI (c) (40:08) [14:51:38:828]: Machine policy value 'Debug' is 0
MSI (c) (40:08) [14:51:38:828]: ******* RunEngine:
******* Product: c:\75e61d47fc546a6251dde9f09ea3\msxml.msi
******* Action:
******* CommandLine: **********
MSI (c) (40:08) [14:51:38:828]: Client-side and UI is none or basic: Running entire install on the server.
MSI (c) (40:08) [14:51:38:828]: Grabbed execution mutex.
MSI (c) (40:08) [14:51:38:859]: Cloaking enabled.
MSI (c) (40:08) [14:51:38:859]: Attempting to enable all disabled priveleges before calling Install on Server
MSI (c) (40:08) [14:51:38:875]: Incrementing counter to disable shutdown. Counter after increment: 0
MSI (s) (AC:98) [14:51:38:890]: Grabbed execution mutex.
MSI (s) (AC:E8) [14:51:38:890]: Resetting cached policy values
MSI (s) (AC:E8) [14:51:38:890]: Machine policy value 'Debug' is 0
MSI (s) (AC:E8) [14:51:38:890]: ******* RunEngine:
******* Product: c:\75e61d47fc546a6251dde9f09ea3\msxml.msi
******* Action:
******* CommandLine: **********
MSI (s) (AC:E8) [14:51:38:890]: Machine policy value 'DisableUserInstalls' is 0
MSI (s) (AC:E8) [14:51:38:906]: End dialog not enabled
MSI (s) (AC:E8) [14:51:38:906]: Original package ==> c:\75e61d47fc546a6251dde9f09ea3\msxml.msi
MSI (s) (AC:E8) [14:51:38:906]: Package we're running from ==> c:\WINDOWS\Installer\8f887a.msi
MSI (s) (AC:E8) [14:51:38:906]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (AC:E8) [14:51:38:906]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (AC:E8) [14:51:38:921]: MSCOREE not loaded loading copy from system32
MSI (s) (AC:E8) [14:51:38:968]: Machine policy value 'DisablePatch' is 0
MSI (s) (AC:E8) [14:51:38:968]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (AC:E8) [14:51:38:968]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (AC:E8) [14:51:38:968]: Machine policy value 'DisableFlyWeightPatching' is 0
MSI (s) (AC:E8) [14:51:39:015]: APPCOMPAT: looking for appcompat database entry with ProductCode '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'.
MSI (s) (AC:E8) [14:51:39:015]: APPCOMPAT: no matching ProductCode found in database.
MSI (s) (AC:E8) [14:51:39:015]: Transforms are not secure.
MSI (s) (AC:E8) [14:51:39:015]: Command Line: REBOOT=ReallySuppress CURRENTDIRECTORY=c:\75e61d47fc546a6251dde9f09ea3 CLIENTUILEVEL=3 CLIENTPROCESSID=2112
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding PackageCode property. Its value is '{2B27DCD9-53FA-4885-B6CD-698623819F4C}'.
MSI (s) (AC:E8) [14:51:39:015]: Product Code passed to Engine.Initialize: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
MSI (s) (AC:E8) [14:51:39:015]: Product Code from property table before transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
MSI (s) (AC:E8) [14:51:39:015]: Product Code from property table after transforms: '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}'
MSI (s) (AC:E8) [14:51:39:015]: Product registered: entering maintenance mode
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding ProductState property. Its value is '5'.
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding ProductToBeRegistered property. Its value is '1'.
MSI (s) (AC:E8) [14:51:39:015]: Entering CMsiConfigurationManager::SetLastUsedSource.
MSI (s) (AC:E8) [14:51:39:015]: Specifed source is not already in a list.
MSI (s) (AC:E8) [14:51:39:015]: User policy value 'SearchOrder' is 'nmu'
MSI (s) (AC:E8) [14:51:39:015]: Machine policy value 'DisableBrowse' is 0
MSI (s) (AC:E8) [14:51:39:015]: Machine policy value 'AllowLockdownBrowse' is 0
MSI (s) (AC:E8) [14:51:39:015]: Adding new sources is allowed.
MSI (s) (AC:E8) [14:51:39:015]: Package name retrieved from configuration data: 'msxml.msi'
MSI (s) (AC:E8) [14:51:39:015]: Determined that existing product (either this product or the product being upgraded with a patch) is installed per-machine.
MSI (s) (AC:E8) [14:51:39:015]: Note: 1: 2729
MSI (s) (AC:E8) [14:51:39:015]: Note: 1: 2729
MSI (s) (AC:E8) [14:51:39:015]: Note: 1: 2262 2: AdminProperties 3: -2147287038
MSI (s) (AC:E8) [14:51:39:015]: Machine policy value 'DisableMsi' is 0
MSI (s) (AC:E8) [14:51:39:015]: Machine policy value 'AlwaysInstallElevated' is 0
MSI (s) (AC:E8) [14:51:39:015]: User policy value 'AlwaysInstallElevated' is 0
MSI (s) (AC:E8) [14:51:39:015]: Product {37477865-A3F1-4772-AD43-AAFC6BCFF99F} is admin assigned: LocalSystem owns the publish key.
MSI (s) (AC:E8) [14:51:39:015]: Product {37477865-A3F1-4772-AD43-AAFC6BCFF99F} is managed.
MSI (s) (AC:E8) [14:51:39:015]: Running product '{37477865-A3F1-4772-AD43-AAFC6BCFF99F}' with elevated privileges: Product is assigned.
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding REBOOT property. Its value is 'ReallySuppress'.
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding CURRENTDIRECTORY property. Its value is 'c:\75e61d47fc546a6251dde9f09ea3'.
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding CLIENTUILEVEL property. Its value is '3'.
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding CLIENTPROCESSID property. Its value is '2112'.
MSI (s) (AC:E8) [14:51:39:015]: TRANSFORMS property is now:
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding PRODUCTLANGUAGE property. Its value is '1033'.
MSI (s) (AC:E8) [14:51:39:015]: PROPERTY CHANGE: Adding VersionDatabase property. Its value is '200'.

Esto es una milesima parte de lo k hay escrito. Alguien sabe de k se trata?

I

#1 Pues hombre, si le han hackeado el 99'4 % de las posibilidades... es que la persona sea usuaria de esta web de Hackers Online.

Creo que lo mejor hubiera sido no abrir el Thread... :/

makkki

#2 Poca coña en serio tio...

HIMOTEN

dios mio, segun esos datos... tu pc explotara en 20 segundos xD

B

Eso es una actualización de windows... no te preocupes.

O

Si lo que te preocupa es si te han hackeado, pues no, no has sido hackeado.

Posiblemente esos logs sean consecuencia de la ejecucion de algun virus o de algun programa de windows que no se aclara con los directorios temporales que crea.

makkki

#7 Esto es normal?
MSI (s) (AC:E8) [14:51:38:968]: Machine policy value 'DisablePatch' is 0
MSI (s) (AC:E8) [14:51:38:968]: Machine policy value 'AllowLockdownPatch' is 0
MSI (s) (AC:E8) [14:51:38:968]: Machine policy value 'DisableLUAPatching' is 0
MSI (s) (AC:E8) [14:51:38:968]: Machine policy value 'DisableFlyWeightPatching' is 0

La palabra policy me huele fatal xD

P.D. No, no soy pedófilo

Unr3al

Formatea...

H

no se, pero que te apuestas a que si reinicias no vuelves, o vuelves en un entorno gráfico basado en el W98 o similares -.-
pse, esta gente con sus WXP originales...pseeeee

B

A ver, repito, es una actualización de windows, yo tambien lo tengo y no es nada, he reinciado y no pasa nada...

Ux1o

#5 & #11 xDDDDDD

SilentB0b

Eso no es ningun hacker, lo puedes borrar si quieres pero si vuelve a aparecer es que algo tienes mal configurado

Karurosu

Si te han hackeado exactamente los hackers de hablar por hablar los Andalhuzé team.

Losiento, pero ahora mismo van a desviar un COBETE a tu casa.

DaCo

#16

Y ten cuidao que ya tienen el curriculum haber chateado con will puertas

ScOuT

ya lo ha contestado #14, borralo y punto. No es nada preocupante.

_GrAyFoX_

sera el tio del otro post, el q mueve los cohetes de la nasa

makkki

#20 k es?

Danrex

#9 Es mi config del cs... :(

X

sí, te han juankeado !_!

Usuarios habituales