ناوي الاحتراف
زيزوومى مبدع
غير متصل
السلام عليكم ورحمة الله وبركاته
هذا تقرير bitdefender
BitDefender QuickScan Beta 0.9.3.2 - Mar 30 2009, 16:32:31
----------------------------------------------------------------
Scan date/time: Wed Apr 01 06:14:14 2009
Machine Id: 8BCA753
Processes
----------
<unsigned> Bonjour Service 1576 C:\Program Files\Bonjour\mDNSResponder.exe
<unsigned> CTSVolFE.exe 2740 C:\Program Files\Creative\Mixer\CTSVolFE.exe
<unsigned> PowerDVD RC Service 2876 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
<unsigned> QuickSet 2712 C:\Program Files\Dell\QuickSet\quickset.exe
<unsigned> AFController.exe 3172 C:\Program Files\Hotspot Shield\AnchorFree\ctrl\AFController.exe
<unsigned> openvpnas.exe 1788 C:\Program Files\Hotspot Shield\bin\openvpnas.exe
<unsigned> ServiceLayer Module 3756 C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
<unsigned> NclBCBTSrv Application 3896 C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
<unsigned> NclRSSrv Application 3872 C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
<unsigned> NclUSBSrv Application 3820 C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
<unsigned> Bluetooth Support Server 1588 C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
<unsigned> Bluetooth Stack COM Server 3408 C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
<unsigned> Bluetooth Tray Application 3264 C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
<unsigned> Sigmatel Audio system tray application 2772 C:\WINDOWS\stsystra.exe
<unsigned> Dell Wireless WLAN Card Wireless Network Controlle 1320 C:\WINDOWS\System32\bcmwltry.exe
<unsigned> CrypKey NT Service 1620 C:\WINDOWS\system32\crypserv.exe
<unsigned> Dell Wireless WLAN Card Wireless Network Tray Appl 2988 C:\WINDOWS\system32\WLTRAY.exe
<unsigned> WLTRYSVC.EXE 1308 C:\WINDOWS\System32\WLTRYSVC.EXE
<unsigned> Apache.exe 1668 D:\Apache\Apache.exe
<unsigned> mysqld-nt.exe 2036 D:\mysql\bin\mysqld-nt.exe
<unsigned> Apache.exe 1544 D:\Apache\Apache.exe
<unsigned> HijackThis 352 C:\Documents and Settings\B\Desktop\zyzoom-support\Zyzoom_HijackThis.exe
<unsigned> Kaspersky Anti-Virus 1564 C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
<verified> RealNetworks Scheduler 2912 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
<verified> Client Server Runtime Process 640 C:\WINDOWS\system32\csrss.exe
<unsigned> Kaspersky Anti-Virus 2840 C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
<unsigned> Internal Network Card Power Management Service 192 C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
<unsigned> Nokia Launch Application 3192 D:\Nokia PC Suite 6\PCSuite.exe
<unsigned> P2P service of Orbit Downloader 3576 D:\Orbitdownloader\orbitnet.exe
<unsigned> Eyeball Chat 3120 D:\Program Files\Eyeball\Eyeball Chat\EyeballChat.exe
<verified> Internet Explorer 1712 C:\Program Files\Internet Explorer\iexplore.exe
<verified> Java(TM) Platform SE binary 2968 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
<verified> Windows Messenger 3036 C:\Program Files\Messenger\msmsgs.exe
<verified> SnagIt 8 3352 C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe
<verified> SnagIt RPC Helper 3424 C:\Program Files\TechSmith\SnagIt 8\SnagPriv.exe
<verified> TechSmith HTML Help Helper 3416 C:\Program Files\TechSmith\SnagIt 8\TSCHelp.exe
<verified> Windows Live Messenger 3180 C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
<verified> Messenger Sharing USN Journal Reader Service 4028 C:\Program Files\Windows Live\Messenger\usnsvc.exe
<verified> Windows Explorer 1288 C:\WINDOWS\Explorer.EXE
<verified> Notepad 364 C:\WINDOWS\notepad.exe
<verified> Application Layer Gateway Service 2224 C:\WINDOWS\System32\alg.exe
<verified> CTF Loader 3084 C:\WINDOWS\system32\ctfmon.exe
<verified> persistence Module 2680 C:\WINDOWS\system32\igfxpers.exe
<verified> igfxsrvc Module 2732 C:\WINDOWS\system32\igfxsrvc.exe
<verified> igfxTray Module 2664 C:\WINDOWS\system32\igfxtray.exe
<verified> LSA Shell (Export Version) 720 C:\WINDOWS\system32\lsass.exe
<verified> Services and Controller app 708 C:\WINDOWS\system32\services.exe
<verified> Windows NT Session Manager 592 C:\WINDOWS\System32\smss.exe
<verified> Spooler SubSystem App 1372 C:\WINDOWS\system32\spoolsv.exe
<verified> Generic Host Process for Win32 Services 1080 C:\WINDOWS\system32\svchost.exe
<verified> Generic Host Process for Win32 Services 968 C:\WINDOWS\System32\svchost.exe
<verified> Generic Host Process for Win32 Services 936 C:\WINDOWS\system32\svchost.exe
<verified> Generic Host Process for Win32 Services 888 C:\WINDOWS\system32\svchost.exe
<verified> WMI 2540 C:\WINDOWS\system32\wbem\wmiprvse.exe
<verified> Windows NT Logon Application 664 C:\WINDOWS\system32\winlogon.exe
<verified> Orbit Downloader 3332 D:\Orbitdownloader\orbitdm.exe
Autoruns and critical files
---------------------------
c:\documents and settings\b\my documents\autoshut\autoshut.exe
c:\program files\bonjour\mdnsnsp.dll
c:\program files\common files\real\update_ob\realsched.exe
c:\program files\creative\mixer\ctsvolfe.exe
c:\program files\cyberlink\powerdvd\language\language.exe
c:\program files\cyberlink\powerdvd\pdvdserv.exe
c:\program files\dell\quickset\quickset.exe
c:\program files\hotspot shield\anchorfree\ctrl\afcontroller.exe
c:\program files\java\jre1.6.0_05\bin\jusched.exe
c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe
c:\program files\messenger\msmsgs.exe
c:\program files\techsmith\snagit 8\snagit32.exe
c:\program files\widcomm\bluetooth software\bttray.exe
c:\program files\windows live\messenger\msnmsgr.exe
c:\windows\stsystra.exe
c:\windows\system32\crypt32.dll
c:\windows\system32\cryptnet.dll
c:\windows\system32\cscdll.dll
c:\windows\system32\ctfmon.exe
c:\windows\system32\dimsntfy.dll
c:\windows\system32\igfxdev.dll
c:\windows\system32\igfxpers.exe
c:\windows\system32\igfxtray.exe
c:\windows\system32\klogon.dll
c:\windows\system32\logonui.exe
c:\windows\system32\mswsock.dll
c:\windows\system32\nwprovau.dll
c:\windows\system32\rsvpsp.dll
c:\windows\system32\sclgntfy.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\wlnotify.dll
c:\windows\system32\wltray.exe
d:\nokia pc suite 6\pcsuite.exe
d:\orbitdownloader\orbitdm.exe
d:\program files\eyeball\eyeball chat\eyeballchat.exe
d:\برامج الحماية\trojan remover\trjscan.exe
E:\autorun.inf - executes E:\setupsnk.exe
Browser plugins
---------------
c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
c:\program files\hotspot shield\anchorfree\ie\afbho.dll
c:\program files\java\jre1.6.0_05\bin\ssv.dll
c:\program files\kaspersky lab\kaspersky internet security 2009\ievkbd.dll
c:\program files\ma-config.com\nphardwaredetection.dll
c:\program files\messenger\msmsgs.exe
c:\program files\mozilla firefox\plugins\npnul32.dll
c:\program files\mozilla firefox\plugins\nppl3260.dll
c:\program files\mozilla firefox\plugins\nprjplug.dll
c:\program files\mozilla firefox\plugins\nprpjplug.dll
c:\program files\real\realplayer\netscape6\nppl3260.dll
c:\program files\real\realplayer\netscape6\nprjplug.dll
c:\program files\real\realplayer\netscape6\nprpjplug.dll
c:\program files\real\realplayer\rpbrowserrecordplugin.dll
c:\windows\downloaded program files\activeqscan.ocx
c:\windows\downloaded program files\authenticatedll.dll
c:\windows\downloaded program files\fp_ax_cab_installer.exe
c:\windows\downloaded program files\imcv1.dll
c:\windows\downloaded program files\msnpupld.dll
c:\windows\downloaded program files\purar-sa.dll
c:\windows\downloaded program files\puren-us.dll
c:\windows\system32\adobe\director\np32dsw.dll
c:\windows\system32\macromed\flash\npswf32.dll
c:\windows\system32\shdocvw.dll
d:\activex\acroiehelper.dll
d:\orbitdownloader\grabpro.dll
d:\orbitdownloader\orbitcth.dll
Scan
----
The following files must be uploaded for server-side scanning:
C:\WINDOWS\system32\ckldrv.sys
Upload started - 1 file(s)
Upload: C:\WINDOWS\system32\ckldrv.sys - (recommended) 29414 bytes, hash: 6ef833dd01c8b2217d81aa73f9f43846
Upload speed - 11 KB/s
Upload finished - 1 uploaded, 0 failed
The uploaded file(s) were found clean.
No infection found.
هذا تقرير bitdefender
BitDefender QuickScan Beta 0.9.3.2 - Mar 30 2009, 16:32:31
----------------------------------------------------------------
Scan date/time: Wed Apr 01 06:14:14 2009
Machine Id: 8BCA753
Processes
----------
<unsigned> Bonjour Service 1576 C:\Program Files\Bonjour\mDNSResponder.exe
<unsigned> CTSVolFE.exe 2740 C:\Program Files\Creative\Mixer\CTSVolFE.exe
<unsigned> PowerDVD RC Service 2876 C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
<unsigned> QuickSet 2712 C:\Program Files\Dell\QuickSet\quickset.exe
<unsigned> AFController.exe 3172 C:\Program Files\Hotspot Shield\AnchorFree\ctrl\AFController.exe
<unsigned> openvpnas.exe 1788 C:\Program Files\Hotspot Shield\bin\openvpnas.exe
<unsigned> ServiceLayer Module 3756 C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
<unsigned> NclBCBTSrv Application 3896 C:\Program Files\PC Connectivity Solution\Transports\NclBCBTSrv.exe
<unsigned> NclRSSrv Application 3872 C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
<unsigned> NclUSBSrv Application 3820 C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
<unsigned> Bluetooth Support Server 1588 C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
<unsigned> Bluetooth Stack COM Server 3408 C:\Program Files\WIDCOMM\Bluetooth Software\BTStackServer.exe
<unsigned> Bluetooth Tray Application 3264 C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
<unsigned> Sigmatel Audio system tray application 2772 C:\WINDOWS\stsystra.exe
<unsigned> Dell Wireless WLAN Card Wireless Network Controlle 1320 C:\WINDOWS\System32\bcmwltry.exe
<unsigned> CrypKey NT Service 1620 C:\WINDOWS\system32\crypserv.exe
<unsigned> Dell Wireless WLAN Card Wireless Network Tray Appl 2988 C:\WINDOWS\system32\WLTRAY.exe
<unsigned> WLTRYSVC.EXE 1308 C:\WINDOWS\System32\WLTRYSVC.EXE
<unsigned> Apache.exe 1668 D:\Apache\Apache.exe
<unsigned> mysqld-nt.exe 2036 D:\mysql\bin\mysqld-nt.exe
<unsigned> Apache.exe 1544 D:\Apache\Apache.exe
<unsigned> HijackThis 352 C:\Documents and Settings\B\Desktop\zyzoom-support\Zyzoom_HijackThis.exe
<unsigned> Kaspersky Anti-Virus 1564 C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
<verified> RealNetworks Scheduler 2912 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
<verified> Client Server Runtime Process 640 C:\WINDOWS\system32\csrss.exe
<unsigned> Kaspersky Anti-Virus 2840 C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
<unsigned> Internal Network Card Power Management Service 192 C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
<unsigned> Nokia Launch Application 3192 D:\Nokia PC Suite 6\PCSuite.exe
<unsigned> P2P service of Orbit Downloader 3576 D:\Orbitdownloader\orbitnet.exe
<unsigned> Eyeball Chat 3120 D:\Program Files\Eyeball\Eyeball Chat\EyeballChat.exe
<verified> Internet Explorer 1712 C:\Program Files\Internet Explorer\iexplore.exe
<verified> Java(TM) Platform SE binary 2968 C:\Program Files\Java\jre1.6.0_05\bin\jusched.exe
<verified> Windows Messenger 3036 C:\Program Files\Messenger\msmsgs.exe
<verified> SnagIt 8 3352 C:\Program Files\TechSmith\SnagIt 8\SnagIt32.exe
<verified> SnagIt RPC Helper 3424 C:\Program Files\TechSmith\SnagIt 8\SnagPriv.exe
<verified> TechSmith HTML Help Helper 3416 C:\Program Files\TechSmith\SnagIt 8\TSCHelp.exe
<verified> Windows Live Messenger 3180 C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
<verified> Messenger Sharing USN Journal Reader Service 4028 C:\Program Files\Windows Live\Messenger\usnsvc.exe
<verified> Windows Explorer 1288 C:\WINDOWS\Explorer.EXE
<verified> Notepad 364 C:\WINDOWS\notepad.exe
<verified> Application Layer Gateway Service 2224 C:\WINDOWS\System32\alg.exe
<verified> CTF Loader 3084 C:\WINDOWS\system32\ctfmon.exe
<verified> persistence Module 2680 C:\WINDOWS\system32\igfxpers.exe
<verified> igfxsrvc Module 2732 C:\WINDOWS\system32\igfxsrvc.exe
<verified> igfxTray Module 2664 C:\WINDOWS\system32\igfxtray.exe
<verified> LSA Shell (Export Version) 720 C:\WINDOWS\system32\lsass.exe
<verified> Services and Controller app 708 C:\WINDOWS\system32\services.exe
<verified> Windows NT Session Manager 592 C:\WINDOWS\System32\smss.exe
<verified> Spooler SubSystem App 1372 C:\WINDOWS\system32\spoolsv.exe
<verified> Generic Host Process for Win32 Services 1080 C:\WINDOWS\system32\svchost.exe
<verified> Generic Host Process for Win32 Services 968 C:\WINDOWS\System32\svchost.exe
<verified> Generic Host Process for Win32 Services 936 C:\WINDOWS\system32\svchost.exe
<verified> Generic Host Process for Win32 Services 888 C:\WINDOWS\system32\svchost.exe
<verified> WMI 2540 C:\WINDOWS\system32\wbem\wmiprvse.exe
<verified> Windows NT Logon Application 664 C:\WINDOWS\system32\winlogon.exe
<verified> Orbit Downloader 3332 D:\Orbitdownloader\orbitdm.exe
Autoruns and critical files
---------------------------
c:\documents and settings\b\my documents\autoshut\autoshut.exe
c:\program files\bonjour\mdnsnsp.dll
c:\program files\common files\real\update_ob\realsched.exe
c:\program files\creative\mixer\ctsvolfe.exe
c:\program files\cyberlink\powerdvd\language\language.exe
c:\program files\cyberlink\powerdvd\pdvdserv.exe
c:\program files\dell\quickset\quickset.exe
c:\program files\hotspot shield\anchorfree\ctrl\afcontroller.exe
c:\program files\java\jre1.6.0_05\bin\jusched.exe
c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe
c:\program files\messenger\msmsgs.exe
c:\program files\techsmith\snagit 8\snagit32.exe
c:\program files\widcomm\bluetooth software\bttray.exe
c:\program files\windows live\messenger\msnmsgr.exe
c:\windows\stsystra.exe
c:\windows\system32\crypt32.dll
c:\windows\system32\cryptnet.dll
c:\windows\system32\cscdll.dll
c:\windows\system32\ctfmon.exe
c:\windows\system32\dimsntfy.dll
c:\windows\system32\igfxdev.dll
c:\windows\system32\igfxpers.exe
c:\windows\system32\igfxtray.exe
c:\windows\system32\klogon.dll
c:\windows\system32\logonui.exe
c:\windows\system32\mswsock.dll
c:\windows\system32\nwprovau.dll
c:\windows\system32\rsvpsp.dll
c:\windows\system32\sclgntfy.dll
c:\windows\system32\winrnr.dll
c:\windows\system32\wlnotify.dll
c:\windows\system32\wltray.exe
d:\nokia pc suite 6\pcsuite.exe
d:\orbitdownloader\orbitdm.exe
d:\program files\eyeball\eyeball chat\eyeballchat.exe
d:\برامج الحماية\trojan remover\trjscan.exe
E:\autorun.inf - executes E:\setupsnk.exe
Browser plugins
---------------
c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
c:\program files\hotspot shield\anchorfree\ie\afbho.dll
c:\program files\java\jre1.6.0_05\bin\ssv.dll
c:\program files\kaspersky lab\kaspersky internet security 2009\ievkbd.dll
c:\program files\ma-config.com\nphardwaredetection.dll
c:\program files\messenger\msmsgs.exe
c:\program files\mozilla firefox\plugins\npnul32.dll
c:\program files\mozilla firefox\plugins\nppl3260.dll
c:\program files\mozilla firefox\plugins\nprjplug.dll
c:\program files\mozilla firefox\plugins\nprpjplug.dll
c:\program files\real\realplayer\netscape6\nppl3260.dll
c:\program files\real\realplayer\netscape6\nprjplug.dll
c:\program files\real\realplayer\netscape6\nprpjplug.dll
c:\program files\real\realplayer\rpbrowserrecordplugin.dll
c:\windows\downloaded program files\activeqscan.ocx
c:\windows\downloaded program files\authenticatedll.dll
c:\windows\downloaded program files\fp_ax_cab_installer.exe
c:\windows\downloaded program files\imcv1.dll
c:\windows\downloaded program files\msnpupld.dll
c:\windows\downloaded program files\purar-sa.dll
c:\windows\downloaded program files\puren-us.dll
c:\windows\system32\adobe\director\np32dsw.dll
c:\windows\system32\macromed\flash\npswf32.dll
c:\windows\system32\shdocvw.dll
d:\activex\acroiehelper.dll
d:\orbitdownloader\grabpro.dll
d:\orbitdownloader\orbitcth.dll
Scan
----
The following files must be uploaded for server-side scanning:
C:\WINDOWS\system32\ckldrv.sys
Upload started - 1 file(s)
Upload: C:\WINDOWS\system32\ckldrv.sys - (recommended) 29414 bytes, hash: 6ef833dd01c8b2217d81aa73f9f43846
Upload speed - 11 KB/s
Upload finished - 1 uploaded, 0 failed
The uploaded file(s) were found clean.
No infection found.
