Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:10:01 م, on 10/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
F:\WINDOWS\System32\smss.exe
F:\WINDOWS\system32\winlogon.exe
F:\WINDOWS\system32\services.exe
F:\WINDOWS\system32\lsass.exe
F:\WINDOWS\system32\svchost.exe
F:\WINDOWS\System32\svchost.exe
F:\WINDOWS\Explorer.EXE
F:\WINDOWS\system32\spoolsv.exe
F:\Program Files\MouseLaunch\Launcher.exe
F:\Program Files\Azkary\Azkary.exe
F:\Program Files\ClockWise\ClockWise.exe
F:\Program Files\Internet Download Manager\IDMan.exe
F:\Program Files\BandwidthMonitor\BWMonitor.exe
F:\Program Files\Ela-Salaty\Salaty.exe
F:\Documents and Settings\Administrator\Desktop\Virus Removal Tool\is-6M68N\is-6M68N.exe
F:\Program Files\Common Files\Microsoft Shared\VS7Debug\mdm.exe
F:\WINDOWS\system32\wscntfy.exe
F:\Program Files\Internet Download Manager\IEMonitor.exe
F:\WINDOWS\system32\wuauclt.exe
F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
F:\WINDOWS\system32\wuauclt.exe
F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
F:\Documents and Settings\Administrator\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
F:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - F:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - F:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - F:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O4 - HKLM\..\Run: [USB Antivirus] F:\Program Files\USB Disk Security\USBGuard.exe
O4 - HKLM\..\Run: [MouseLaunch] "F:\Program Files\MouseLaunch\Launcher.exe"
O4 - HKLM\..\Run: [Azkary] F:\Program Files\Azkary\Azkary
O4 - HKCU\..\Run: [ClockWise] F:\Program Files\ClockWise\ClockWise.exe
O4 - HKCU\..\Run: [IDMan] F:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [BandwidthMonitor] F:\Program Files\BandwidthMonitor\BWMonitor.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] F:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Ela-Salaty.lnk = F:\Program Files\Ela-Salaty\Salaty.exe
O4 - Startup: is-6M68N.lnk = F:\Documents and Settings\Administrator\Desktop\Virus Removal Tool\is-6M68N\startup.exe
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - F:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - F:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - F:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - F:\Program Files\Messenger\msmsgs.exe
O12 - Plugin for .spop: F:\Program Files\Internet Explorer\Plugins\NPDocBox.dll
O23 - Service: NMIndexingService - Unknown owner - F:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe (file missing)
--
End of file - 4306 bytes
