سقوط الأسد
زيزوومي جديد
- إنضم
- 20 يناير 2009
- المشاركات
- 84
- مستوى التفاعل
- 0
- النقاط
- 80
غير متصل
من فضلك قم بتحديث الصفحة لمشاهدة المحتوى المخفي
السلام عليكم
يا خوان كان عندي النود 4 وفجاة بطل يعمل
نزلت الكاسبر وعلى الفاضي
ولا انتي فايروس راضي ينزل عندي
هي تقرير الهجاك
يا خوان كان عندي النود 4 وفجاة بطل يعمل
نزلت الكاسبر وعلى الفاضي
ولا انتي فايروس راضي ينزل عندي
هي تقرير الهجاك
logfile of trend micro hijackthis v2.0.2
scan saved at 05:53:39 م, on 05/05/2009
platform: Windows xp sp2 (winnt 5.01.2600)
msie: Internet explorer v6.00 sp2 (6.00.2900.2180)
boot mode: Normal
running processes:
C:\windows\system32\smss.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\services.exe
c:\windows\system32\lsass.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\spoolsv.exe
c:\windows\explorer.exe
c:\program files\vmware\vmware workstation\vmware-tray.exe
c:\program files\common files\real\update_ob\realsched.exe
c:\windows\system32\ctfmon.exe
c:\documents and settings\user\local settings\application data\google\update\googleupdate.exe
c:\program files\nokia\nokia pc suite 6\pcsuite.exe
c:\windows\system32\svchost.exe
c:\program files\java\jre6\bin\jqs.exe
c:\program files\norton ghost\agent\vprosvc.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\pnkbstra.exe
c:\windows\system32\pnkbstrb.exe
c:\program files\alcohol soft\alcohol 120\starwind\starwindservice.exe
c:\program files\uniblue\diskrescue\ubdiskrescuesrv.exe
c:\program files\vmware\vmware workstation\vmware-authd.exe
c:\program files\common files\vmware\vmware virtual image editing\vmount2.exe
c:\windows\system32\vmnat.exe
c:\windows\system32\vmnetdhcp.exe
c:\program files\pc connectivity solution\servicelayer.exe
c:\windows\system32\msiexec.exe
c:\program files\pc connectivity solution\transports\nclusbsrv.exe
c:\program files\pc connectivity solution\transports\nclrssrv.exe
c:\windows\system32\msiexec.exe
c:\windows\system32\msiexec.exe
c:\program files\mozilla firefox\firefox.exe
e:\البرامج\صيانة الكمبيوتر\لعمل تقارير\zyzoom_hijackthis.exe
r0 - hkcu\software\microsoft\internet explorer\main,start page =يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي
r1 - hklm\software\microsoft\internet explorer\main,default_search_url =يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي
r0 - hklm\software\microsoft\internet explorer\search,searchassistant =يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي
r1 - hkcu\software\microsoft\internet explorer\main,window title = microsoft internet explorer
r3 - urlsearchhook: Defaultsearchhook class - {c94e154b-1459-4a47-966b-4b843befc7db} - c:\program files\asksearch\bin\defaultsearch.dll
o1 - hosts: 5.136.166.206 pes09pcgate-e.winning-eleven.net
o1 - hosts: 5.175.129.170 pes2009web.winning-eleven.net
o1 - hosts: Stun.xten.com pes7stun-e.winning-eleven.net
o2 - bho: Idm helper - {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\idmiecc.dll
o2 - bho: (no name) - {02478d38-c3f9-4efb-9b51-7695eca05670} - (no file)
o2 - bho: Realplayer download and record plugin for internet explorer - {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
o2 - bho: Ievkbdbho - {59273ab4-e7d3-40f9-a1a8-6fa9cca1862c} - c:\program files\kaspersky lab\kaspersky internet security 2009\ievkbd.dll
o2 - bho: مساعد تسجيل الدخول إلى windows live - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
o2 - bho: Java(tm) plug-in 2 ssv helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
o2 - bho: Jqsiestartdetectorimpl - {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
o3 - toolbar: Stylertoolbar - {d2f8f919-690b-4ea2-9fa7-a203d1e04f75} - c:\program files\styler\tb\stylertb.dll
o4 - hklm\..\run: [nvcpldaemon] rundll32.exe c:\windows\system32\nvcpl.dll,nvstartup
o4 - hklm\..\run: [vmware-tray] c:\program files\vmware\vmware workstation\vmware-tray.exe
o4 - hklm\..\run: [tkbellexe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
o4 - hklm\..\run: [avp] "c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe"
o4 - hkcu\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe
o4 - hkcu\..\run: [google update] "c:\documents and settings\user\local settings\application data\google\update\googleupdate.exe" /c
o4 - hkcu\..\run: [pc suite tray] "c:\program files\nokia\nokia pc suite 6\pcsuite.exe" -onlytray
o4 - hkus\s-1-5-19\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'local service')
o4 - hkus\s-1-5-20\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'network service')
o8 - extra context menu item: &تصدير إلى microsoft excel - res://c:\progra~1\micros~2\office11\excel.exe/3000
o8 - extra context menu item: تحميل الكل بواسطة internet download manager - c:\program files\internet download manager\iegetall.htm
o8 - extra context menu item: تحميل بواسطة internet download manager - c:\program files\internet download manager\ieext.htm
o8 - extra context menu item: تحميل محتوى flv بواسطة internet download manager - c:\program files\internet download manager\iegetvl.htm
o9 - extra button: Web traffic protection statistics - {1f460357-8a94-4d71-9ca3-aa4acf32ed8e} - c:\program files\kaspersky lab\kaspersky internet security 2009\scieplgn.dll
o9 - extra button: بحث - {92780b25-18cc-41c8-b9be-3c9c571a8263} - c:\progra~1\micros~2\office11\refiebar.dll
o9 - extra button: Messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o9 - extra 'tools' menuitem: Windows messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o10 - unknown file in winsock lsp: C:\windows\system32\nwprovau.dll
o17 - hklm\system\ccs\services\tcpip\..\{22cb5682-de5b-40fe-b9f2-ce754d80db55}: Nameserver = 10.0.0.138
o17 - hklm\system\cs2\services\tcpip\..\{22cb5682-de5b-40fe-b9f2-ce754d80db55}: Nameserver = 10.0.0.138
o17 - hklm\system\cs3\services\tcpip\..\{22cb5682-de5b-40fe-b9f2-ce754d80db55}: Nameserver = 10.0.0.138
o18 - protocol: Skype4com - {ffc8b962-9b40-4dff-9458-1830c7dd7f5d} - c:\progra~1\common~1\skype\skype4~1.dll
o20 - appinit_dlls: C:\progra~1\kasper~1\kasper~1\mzvkbd.dll,c:\progra~1\kasper~1\kasper~1\mzvkbd3.dll,c:\progra~1\kasper~1\kasper~1\adialhk.dll,c:\progra~1\kasper~1\kasper~1\kloehk.dll
o23 - service: Asp.net state service aspnet_stateclr_optimization_v2.0.50727_32 (aspnet_stateclr_optimization_v2.0.50727_32) - unknown owner - c:\windows\system32\agcpanelspanishh.exe
o23 - service: Automatic liveupdate scheduler - unknown owner - c:\program files\symantec\liveupdate\aluschedulersvc.exe
o23 - service: Kaspersky internet security (avp) - kaspersky lab - c:\program files\kaspersky lab\kaspersky internet security 2009\avp.exe
o23 - service: Flexnet licensing service - macrovision europe ltd. - c:\program files\common files\macrovision shared\flexnet publisher\fnplicensingservice.exe
o23 - service: Installdriver table manager (idrivert) - macrovision corporation - c:\program files\common files\installshield\driver\1150\intel 32\idrivert.exe
o23 - service: Iis admin (iisadmin) - unknown owner - c:\windows\system32\inetsrv\inetinfo.exe (file missing)
o23 - service: Java quick starter (javaquickstarterservice) - sun microsystems, inc. - c:\program files\java\jre6\bin\jqs.exe
o23 - service: Liveupdate - symantec corporation - c:\progra~1\symantec\liveup~1\lucoms~1.exe
o23 - service: Net control 2 remote desktop server service (nc2remotedesktop) - unknown owner - c:\program files\net control 2\ncvserver.exe (file missing)
o23 - service: Norton ghost - symantec corporation - c:\program files\norton ghost\agent\vprosvc.exe
o23 - service: Nvidia display driver service (nvsvc) - nvidia corporation - c:\windows\system32\nvsvc32.exe
o23 - service: Pnkbstra - unknown owner - c:\windows\system32\pnkbstra.exe
o23 - service: Pnkbstrb - unknown owner - c:\windows\system32\pnkbstrb.exe
o23 - service: Servicelayer - nokia. - c:\program files\pc connectivity solution\servicelayer.exe
o23 - service: Starwind iscsi service (starwindservice) - rocket division software - c:\program files\alcohol soft\alcohol 120\starwind\starwindservice.exe
o23 - service: Vmware agent service (ufad-ws60) - vmware, inc. - c:\program files\vmware\vmware workstation\vmware-ufad.exe
o23 - service: Uniblue diskrescue - uniblue - c:\program files\uniblue\diskrescue\ubdiskrescuesrv.exe
o23 - service: Vmware authorization service (vmauthdservice) - vmware, inc. - c:\program files\vmware\vmware workstation\vmware-authd.exe
o23 - service: Vmware dhcp service (vmnetdhcp) - vmware, inc. - c:\windows\system32\vmnetdhcp.exe
o23 - service: Vmware virtual mount manager extended (vmount2) - vmware, inc. - c:\program files\common files\vmware\vmware virtual image editing\vmount2.exe
o23 - service: Vmware nat service - vmware, inc. - c:\windows\system32\vmnat.exe
--
end of file - 8714 bytes
