Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 06:30:17 م, on 03/08/09
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16386)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\TosBtProc.exe
C:\Windows\system32\conime.exe
C:\Program Files\Windows Media Player\wmplayer.exe
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\CManager.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\DllHost.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [zyz1] c:\zyz_auto_killer\run2.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Bluetooth Monitor.lnk = ?
O13 - Gopher Prefix:
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{81831CF2-6222-41BE-B850-946B30F1FCE4}: NameServer = 84.23.101.84 84.23.101.85
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\system32\Ati2evxx.exe
O23 - Service: BandLuxe Service (BandLuxe_Service) - BandRich Inc. - C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
--
End of file - 3510 bytes
---------------------------------------------------------------------------------------------------
<HTML><HEAD><TITLE>Virus Scan Report File</TITLE></HEAD><BODY BGCOLOR=#ffffff><H1 ALIGN=CENTER>Virus Scan Report File</H1><H2 ALIGN=CENTER><HR>Virus Scan Information<HR></H2><PRE>
McAfee VirusScan for Win32 v5.30.0
Copyright (c) 1992-2008 McAfee, Inc. All rights reserved.
(408) 988-3832 LICENSED COPY - Jun 16 2008
Scan engine v5.3.00 for Win32.
Virus data file v5670 created Jul 08 2009
Scanning for 535295 viruses, trojans and variants.
</PRE><H2 ALIGN=CENTER><HR>Virus Scan Results<HR></H2><PRE>
08/03/2009 17:14:59
Options:
/ADL /WINMEM/CLEAN /APPEND /HTML C:\NOOR_MCAFEE.HTM
Scanning C: []
Scanning C:\*.*
C:\zyz_auto_killer\restart.exe ... Found the Generic.dx trojan !!!
The file or process has been deleted.
Summary report on C:\*.*
File(s)
Total files: ........... 56580
Clean: ................. 56515
Not scanned: ........... 0
Possibly Infected: ..... 1
Cleaned: ............... 0
Deleted: ............... 1
Non-critical Error(s): 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning D: []
Scanning D:\*.*
Summary report on D:\*.*
File(s)
Total files: ........... 2815
Clean: ................. 2813
Not scanned: ........... 0
Possibly Infected: ..... 0
Cleaned: ............... 0
Non-critical Error(s): 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning E: []
Scanning E:\*.*
E:\البرامج العامة\تحويلات وتحديثات الوندووز\برنامج تحميل من الرابد شير\Universal Share Downloader\USDownloader.vir ... Found trojan or variant New Malware.hi !!!
Please send a copy of the file to McAfee
The file or process has been renamed.
E:\البرامج العامة\محول الصوتيات\record Crack.exe ... Found the Generic.dx trojan !!!
The file or process has been deleted.
Summary report on E:\*.*
File(s)
Total files: ........... 33094
Clean: ................. 33092
Not scanned: ........... 0
Possibly Infected: ..... 2
Cleaned: ............... 0
Deleted: ............... 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Time: 01:06.35
</PRE><HR><CENTER>Visit the <A HREF="
Online</A> Web Site<BR>Need some help or advice? Send <A HREF=mailto:techsupport@mcafee.com>email</A> to Technical Support.</CENTER></BODY></HTML>
=-=-=-=-=-=----------------------
وننتظر توجيهاتكم
