ده ال hijack
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:55:47 PM, on 9/16/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0013)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Documents and Settings\Ma7mod\Desktop\Zyzoom_HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
O1 - Hosts: 127.1 localhost
O1 - Hosts: 127.1 vt0r48p760.cn
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1 po.uc-us.cn
O1 - Hosts: 127.1 219.139.83.20
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1 219.153.71.185
O1 - Hosts: 127.1 59.34.148.68
O1 - Hosts: 127.1 208.43.165.86
O1 - Hosts: 127.1 208.43.166.171
O1 - Hosts: 127.1 219.153.71.185
O1 - Hosts: 127.1 61.164.140.39
O1 - Hosts: 127.1
O1 - Hosts: 127.1 cwk1237.3322.org
O1 - Hosts: 127.1
O1 - Hosts: 127.1 munchkin.marketo.net
O1 - Hosts: 127.1 post.marketo.net
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1 facaizhifuok.cn
O1 - Hosts: 127.1
O1 - Hosts: 127.1 a.woaigan.com
O1 - Hosts: 127.1 b.woaigan.com
O1 - Hosts: 127.1 xxx.usxx.info
O1 - Hosts: 127.1 alenxya.1122mb.com
O1 - Hosts: 127.1
O1 - Hosts: 127.1 972se.com
O1 - Hosts: 127.1 pic.03wyt.com
O1 - Hosts: 127.1 d.03wyt.com
O1 - Hosts: 127.1 xs.03wyt.com
O1 - Hosts: 127.1
O1 - Hosts: 127.1 8jse.net
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1 1aa1aa.com
O1 - Hosts: 127.1 xx.avno3.com
O1 - Hosts: 127.1 xxx.avno5.com
O1 - Hosts: 127.1
O1 - Hosts: 127.1 avno7.com
O1 - Hosts: 127.1 ok.avno4.com
O1 - Hosts: 127.1 ok.avno5.com
O1 - Hosts: 127.1 ok.avno6.com
O1 - Hosts: 127.1 ok.avno7.com
O1 - Hosts: 127.1 ok.avno9.com
O1 - Hosts: 127.1 avno1.com
O1 - Hosts: 127.1 avno3.com
O1 - Hosts: 127.1 avno4.com
O1 - Hosts: 127.1 aikanav.com
O1 - Hosts: 127.1 link.selink.org
O1 - Hosts: 127.1
O1 - Hosts: 127.1 avno6.com
O1 - Hosts: 127.1 4.chibbs.info
O1 - Hosts: 127.1 bbs.chibbs.info
O1 - Hosts: 127.1 aa.ss99.biz
O1 - Hosts: 127.1 se.ss99.biz
O1 - Hosts: 127.1 aa.sxlk.net
O1 - Hosts: 127.1 se.sxlk99.com
O1 - Hosts: 127.1
O1 - Hosts: 127.1 88xj.net
O1 - Hosts: 127.1
O1 - Hosts: 127.1 99xj.net
O1 - Hosts: 127.1
O1 - Hosts: 127.1 91semi.com
O1 - Hosts: 127.1 haobaidu.1122mb.com
O1 - Hosts: 127.1 xiao777.za.pl
O1 - Hosts: 127.1 ccavo6.avno6.com
O1 - Hosts: 127.1 a.sxlk99.com
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1
O1 - Hosts: 127.1 php-1.cn
O1 - Hosts: 127.1
O1 - Hosts: 127.1 php-2.cn
O1 - Hosts: 127.1 php-3.cn
O1 - Hosts: 127.1 php-4.cn
O1 - Hosts: 127.1 php-5.cn
O1 - Hosts: 127.1 php-6.cn
O1 - Hosts: 127.1 php-7.cn
O1 - Hosts: 127.1 php-8.cn
O1 - Hosts: 127.1 php-9.cn
O1 - Hosts: 127.1 php-10.cn
O1 - Hosts: 127.1 php-11.cn
O1 - Hosts: 127.1 k.5x2x.com
O1 - Hosts: 127.1 a.5x2x.com
O1 - Hosts: 127.1 202.108.23.205
O1 - Hosts: 127.1 60.190.218.21
O1 - Hosts: 127.1 121.14.154.195
O1 - Hosts: 127.1 218.30.82.201
O1 - Hosts: 127.1 59.34.198.48
O1 - Hosts: 127.1 121.14.154.216
O1 - Hosts: 127.1 219.152.120.237
O1 - Hosts: 127.1 121.14.154.184
O1 - Hosts: 127.1 125.67.67.201
O1 - Hosts: 127.1 222.168.102.12
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - (no file)
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
O20 - AppInit_DLLs: c:\progra~1\kasper~1\kasper~1\mzvkbd.dll,c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll,c:\progra~1\kasper~1\kasper~1\adialhk.dll,c:\progra~1\kasper~1\kasper~1\kloehk.dll
O21 - SSODL: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - (no file)
O21 - SSODL: twainyy.dll - {434FA69C-5F0A-42e1-82B8-10AF2C8E53C6} - C:\WINDOWS\system32\twainyy.dll (file missing)
O21 - SSODL: tcdhvuzh.dll - {21BE5FDF-D4CB-4850-AD99-21E68B50BF3F} - C:\WINDOWS\system32\tcdhvuzh.dll (file missing)
O21 - SSODL: nwapi32dj.dll - {A2C3BA54-DF75-4881-8EB3-E54B26BBBBC9} - C:\WINDOWS\system32\nwapi32dj.dll (file missing)
O21 - SSODL: dispexcb.dll - {76D44356-B494-443a-BEDC-AA68DE4255E6} - C:\WINDOWS\system32\dispexcb.dll (file missing)
O21 - SSODL: adsntzt.dll - {E0F3526A-4165-4589-80CD-50B6FBAC3BDA} - C:\WINDOWS\system32\adsntzt.dll (file missing)
O21 - SSODL: mstimewd.dll - {65056902-6E7B-4bd7-95BA-688DB5FA5BEB} - C:\WINDOWS\system32\mstimewd.dll (file missing)
O21 - SSODL: avicapwm.dll - {6B9FEAD7-4319-4312-AB05-D8C9CD255BFE} - C:\WINDOWS\system32\avicapwm.dll (file missing)
O21 - SSODL: tscfgwmijxsj.dll - {2CB77746-8ECC-40ca-8217-10CA8BE5EFC8} - C:\WINDOWS\system32\tscfgwmijxsj.dll (file missing)
O21 - SSODL: cliconfgzx.dll - {7A6DF30E-D0F2-446f-B4F0-BF4232D60E07} - C:\WINDOWS\system32\cliconfgzx.dll (file missing)
O21 - SSODL: lweurqhx.dll - {71A78CD4-E470-4a18-8457-E0E0283DD507} - C:\WINDOWS\system32\lweurqhx.dll (file missing)
O21 - SSODL: xolehlpjh.dll - {F0930A2F-D971-4828-8209-B7DFD266ED44} - C:\WINDOWS\system32\xolehlpjh.dll (file missing)
O21 - SSODL: slbiopfs2.dll - {EB9660D8-E1CD-4ff0-B4A9-00CD907F928A} - C:\WINDOWS\system32\slbiopfs2.dll (file missing)
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 9564 bytes
و دى صوره السكان التانى
و شكرا على ردك يا باشا :d:
