ذكرى

وهذا تقرير الجهاز:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 549 PM, on 6/6/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\********s and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\Freem akeUtilsService.exe
C:\Program Files\Freemake\CaptureLib\CaptureLibServ ice.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\****\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\STacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Omantel Mobile Broadband\AssistantServices.exe
C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\WINDOWS\system32\rundll32.exe
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\WINDOWS\system32\rundll32.exe
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSour...ctid=CT3072253
R3 - URLSearchHook: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5. 3.17\bh\BabylonToolbar.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\********s and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin \IE\rpbrowserrecordplugin.dll
O2 - BHO: uTorrentControl2 - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O2 - BHO: avast! ***Rep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\asw***RepIE.dll
O3 - Toolbar: avast! ***Rep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\asw***RepIE.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.5. 3.17\BabylonToolbarTlbr.dll
O3 - Toolbar: uTorrentControl2 Toolbar - {687578b9-7132-4a7a-80e4-30ee31099e03} - C:\Program Files\uTorrentControl2\prxtbuTor.dll
O4 - HKCU\..\Run: [98D437A0E663C998CD774356C22D00B60F2A2D3F ._service_run] "C:\********s and Settings\User\Local Settings\Application Data\Google\Chrome\Application\chrome.ex e" --type=service
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra con**** menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra con**** menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra con**** menu item: Search the *** - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html
O17 - HKLM\System\CCS\Services\Tcpip\..\{8C4E6 233-4BC0-4DE1-A146-130156327F34}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{9AD9A 21D-214C-408D-A49C-59E165A6AFC7}: NameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{AF484 826-225F-4939-B78F-A528B89C72E4}: NameServer = 192.168.1.1
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\Flash PlayerUpdateService.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Faronics Data Igloo Service (DataIglooService) - Faronics Corporation - C:\Program Files\Faronics\Data Igloo Standard\DIService.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Freemake Improver - Freemake - C:\********s and Settings\All Users\Application Data\Freemake\FreemakeUtilsService\Freem akeUtilsService.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: **** Quick Starter (****QuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\****\jre6\bin\jqs.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
O23 - Service: Protexis Licensing V2 (PSI_SVC_2) - Protexis Inc. - c:\Program Files\Common Files\Protexis\License Service\PsiService_2.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\WINDOWS\system32\STacSV.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: tuEagles Service (tuEaglesService) - Unknown owner - C:\Program Files\tuEagles\eglsrv.exe
O23 - Service: UI Assistant Service - Unknown owner - C:\Program Files\Omantel Mobile Broadband\AssistantServices.exe
O23 - Service: WD Backup (WDBackup) - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDBackupEngine.exe
O23 - Service: WD Drive Manager (WDDriveService) - Western Digital - C:\Program Files\Western Digital\WD Drive Manager\WDDriveService.exe
O23 - Service: WD Rules (WDRulesService) - Western Digital - C:\Program Files\Western Digital\WD SmartWare\WDRulesEngine.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE

--
End of file - 9337 bytes

شمس الحب

تستطيع المشاركة هنا والرد على الموضوع ومشاركة رأيك عبر حسابك في الفيس بوك

---

lshu]m ohwdm hgfpe td hg;lfd,jv(ghf j,f) gh julg !! (d,[] jrvdv gg[ih.)