مع اني ستخدم 4 eset smart security و Malwarebytes' Anti-Malware و بعمل فحص و ما بكون في فيروسات و مع هذا الجهاز بطيء و هي تقريرهيجك
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:30:21 PM, on 2/2/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Imam\Downloads\Zyzoom_HijackThis.exe
C:\Windows\system32\msfeedssync.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 9\SnagitBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 9\SnagitIEAddin.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW,SYSTRAY
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_A54B7D6FB1DA63EA.dll/cmsidewiki.html
O13 - Gopher Prefix:
O16 - DPF: CabBuilder -
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) -
O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} -
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) -
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) -
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) -
O16 - DPF: {C171FF59-8C55-4796-A398-4F5D02B4C763} (IMC_Sec Control) -
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
O16 - DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} -
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) -
O17 - HKLM\System\CCS\Services\Tcpip\..\{0A8EF111-7950-4BD0-BF75-5D9C794C7E96}: NameServer = 68.105.28.12,68.105.29.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{0A8EF111-7950-4BD0-BF75-5D9C794C7E96}: NameServer = 68.105.28.12,68.105.29.12
O17 - HKLM\System\CS2\Services\Tcpip\..\{0A8EF111-7950-4BD0-BF75-5D9C794C7E96}: NameServer = 68.105.28.12,68.105.29.12
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - AppInit_DLLs:
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\McAfee\Common Framework\FrameworkService.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 7957 byte
وهي اخرى تقرير
BitDefender QuickScan Beta 32-bit v0.9.9.0
------------------------------------------
Scan date: Tue Feb 02 23:47:00 2010
Machine ID: C22DA986
Warning: Low execution rights. Please run QuickScan/browser as Administrator.
No infection found.
---------------------
Processes
---------
<verified> ESET Smart Security 3972 C:\Program Files\ESET\ESET Smart Security\egui.exe
<verified> Firefox 3020 C:\Program Files\Mozilla Firefox\firefox.exe
<verified> HP Advisor 4032 C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
<verified> Microsoft® Windows® Operating System 3996 C:\Program Files\Windows Media Player\wmpnscfg.exe
<verified> Microsoft® Windows® Operating System 2408 C:\Program Files\Windows Sidebar\sidebar.exe
<verified> Microsoft® Windows® Operating System 3208 C:\Program Files\Windows Sidebar\sidebar.exe
<verified> Microsoft® Windows® Operating System 3056 C:\Windows\Explorer.EXE
<verified> Microsoft® Windows® Operating System 6080 C:\Windows\explorer.exe
<verified> Microsoft® Windows® Operating System 2952 C:\Windows\system32\Dwm.exe
<verified> Microsoft® Windows® Operating System 3436 C:\Windows\system32\taskeng.exe
<verified> RealPlayer (32-bit) 5504 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
<verified> TuneUp Utilities 3380 C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
Network activity
----------------
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f155.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f101.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f101.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - a72-247-77-115.deploy.akamaitechnologies.com
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f149.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f155.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - 72-20-120-224.bayarea.net
Autoruns and critical files
---------------------------
<unsigned> C:\Program Files\Mozilla Firefox\
<unsigned> CEEment C:\program files\hewlett-packard\sdp\ceement\HPCEE.exe
<verified> ESET Smart Security C:\Program Files\ESET\ESET Smart Security\egui.exe
<verified> HP Advisor C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
<verified> Intel(R) Common User Interface C:\Windows\system32\igfxdev.dll
<verified> Microsoft® Windows® Operating System C:\Program Files\Windows Media Player\wmpnscfg.exe
<verified> Microsoft® Windows® Operating System C:\Program Files\Windows Sidebar\sidebar.exe
<verified> Microsoft® Windows® Operating System C:\Windows\System32\browseui.dll
<verified> Microsoft® Windows® Operating System c:\windows\system32\userinit.exe
<verified> Microsoft® Windows® Operating System C:\Windows\System32\WPDShServiceObj.dll
<verified> Windows Live Messenger C:\Program Files\Windows Live\Messenger\msnmsgr.exe
<verified> Windows® Internet Explorer C:\Windows\system32\msfeedssync.exe
<verified> Windows® Internet Explorer C:\Windows\System32\webcheck.dll
Browser plugins
---------------
<unsigned> acroiefavclient.dll c:\program files\adobe\acrobat 6.0\acrobat\acroiefavclient.dll
<unsigned> Bonjour C:\Program Files\Bonjour\mdnsNSP.dll
<unsigned> DivX Player Netscape Plugin C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
<unsigned> dwmxpcom.dll C:\Users\Imam\AppData\Roaming\Mozilla\Firefox\Profiles/jisqgtpd.default\extensions\allglassv2@ambroos.neowin.net\components\dwmxpcom.dll
<unsigned> dwmxpcom.dllbak C:\Users\Imam\AppData\Roaming\Mozilla\Firefox\Profiles/jisqgtpd.default\extensions\allglassv2@ambroos.neowin.net\components\dwmxpcom.dllbak
<unsigned> IMCSec.dll C:\Windows\Downloaded Program Files\IMCSec.dll
<unsigned> Installer Control C:\Windows\Downloaded Program Files\InstallerControl.dll
<unsigned> Kodak Photo CD Access Developer Toolkit C:\Windows\Downloaded Program Files\pcdlib32.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfbmp13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfcmp13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfeps13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lffax13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfgif13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpcd13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpcx13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpng13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpsd13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lftga13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lftif13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltclr13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltdis13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltefx13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltfil13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltimg13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltkrn13n.dll
<unsigned> LightSurfUploadControl Module C:\Windows\Downloaded Program Files\VerizonWirelessUploadControl.dll
<unsigned> Lotuspond IMC Video&Voice Communication Control C:\Windows\Downloaded Program Files\imcv1.dll
<unsigned> MySpace Image Uploader C:\Windows\Downloaded Program Files\MySpaceUploader.ocx
<unsigned> PicLens Installer for Internet Explorer C:\Windows\Downloaded Program Files\plinstll.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll
<unsigned> RealJukebox NS Plugin C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
<unsigned> RealPlayer Version Plugin C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
<verified> AcroIEHelperShim Library c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll
<verified> Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll
<verified> Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe
<verified> Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\CONFLICT.2\FP_AX_CAB_INSTALLER.exe
<verified> Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
<verified> BitDefender QuickScan C:\Users\Imam\AppData\Roaming\Mozilla\Firefox\Profiles/jisqgtpd.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\bdqscan.dll
<verified> BitDefender QuickScan C:\Users\Imam\AppData\Roaming\Mozilla\Firefox\Profiles/jisqgtpd.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
<verified> DivX Web Player C:\Program Files\DivX\DivX Web Player\npdivx32.dll
<verified> Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\ImageUploader5.ocx
<verified> Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\PhotoUploader5.ocx
<verified> Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\PhotoUploader55.ocx
<verified> Java(TM) Platform SE 6 U17 c:\program files\java\jre6\bin\jp2ssv.dll
<verified> Microsoft Office Live Plug-in for Firefox C:\Program Files\Microsoft\Office Live\npOLW.dll
<verified> Microsoft Search Enhancement Pack c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll
<verified> Microsoft® Windows Live ID c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\mswsock.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\NapiNSP.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\nlaapi.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\pnrpnsp.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll
<verified> Mozilla Default Plug-in C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
<verified> MSN Photo Upload Control C:\Windows\Downloaded Program Files\MsnPUpld.dll
<verified> MSN Photo Upload Control C:\Windows\Downloaded Program Files\PURen-us.dll
<verified> MSN® Games by Zone.com C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll
<verified> MSN® Games by Zone.com C:\Windows\Downloaded Program Files\ZIntro.ocx
<verified> npitunes.dll C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
<verified> NPSWF32.dll C:\Windows\System32\Macromed\Flash\NPSWF32.dll
<verified> PC Pitstop C:\Windows\Downloaded Program Files\PCPitstop2.dll
<verified> RealPlayer Download and Record Plugin c:\program files\real\realplayer\rpbrowserrecordplugin.dll
<verified> RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
<verified> Silverlight Plug-In c:\Program Files\Microsoft Silverlight\3.0.50106.0\npctrl.dll
<verified> Snagit c:\program files\techsmith\snagit 9\snagitbho.dll
<verified> Snagit c:\program files\techsmith\snagit 9\snagitieaddin.dll
<verified> sprthelper Module C:\Windows\Downloaded Program Files\sshelper.exe
<verified> tgctlcm Module C:\Windows\Downloaded Program Files\tgctlcm.dll
<verified> tgctlsr Module C:\Windows\Downloaded Program Files\tgctlsr.dll
<verified> Windows Presentation Foundation c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
<verified> Windows® Internet Explorer C:\Windows\System32\ieframe.dll
Scan
----
No file uploaded.
Scan finished - communication took 3 sec
Total traffic - 0.05 MB sent, 2.85 KB recvd
Scanned 1081 files and modules - 58 seconds
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:30:21 PM, on 2/2/2010
Platform: Windows Vista SP2 (WinNT 6.00.1906)
MSIE: Internet Explorer v8.00 (8.00.6001.18882)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
C:\Windows\Explorer.EXE
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\Imam\Downloads\Zyzoom_HijackThis.exe
C:\Windows\system32\msfeedssync.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = socks=
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = plimus.com,
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
,R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 9\SnagitBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 6.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: (no name) - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - (no file)
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 9\SnagitIEAddin.dll
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [HPADVISOR] C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe view=DOCKVIEW,SYSTRAY
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_A54B7D6FB1DA63EA.dll/cmsidewiki.html
O13 - Gopher Prefix:
O16 - DPF: CabBuilder -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {44990B00-3C9D-426D-81DF-AAB636FA4345} -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {67DABFBF-D0AB-41FA-9C46-CC0F21721616} (DivXBrowserPlugin Object) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {8A0019EB-51FA-4AE5-A40B-C0496BBFC739} (Verizon Wireless Media Upload) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (MSN Games - Installer) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {C171FF59-8C55-4796-A398-4F5D02B4C763} (IMC_Sec Control) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {EAC139A9-D22D-4C29-8D1C-252BE63750F9} -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O16 - DPF: {FFB3A759-98B1-446F-BDA9-909C6EB18CC7} (PCPitstop Exam) -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O17 - HKLM\System\CCS\Services\Tcpip\..\{0A8EF111-7950-4BD0-BF75-5D9C794C7E96}: NameServer = 68.105.28.12,68.105.29.12
O17 - HKLM\System\CS1\Services\Tcpip\..\{0A8EF111-7950-4BD0-BF75-5D9C794C7E96}: NameServer = 68.105.28.12,68.105.29.12
O17 - HKLM\System\CS2\Services\Tcpip\..\{0A8EF111-7950-4BD0-BF75-5D9C794C7E96}: NameServer = 68.105.28.12,68.105.29.12
O18 - Protocol: bwfile-8876480 - {9462A756-7B47-47BC-8C80-C34B9B80B32B} - C:\Program Files\Logitech\Desktop Messenger\8876480\Program\GAPlugProtocol-8876480.dll
O20 - AppInit_DLLs:
O23 - Service: ArcSoft Connect Daemon (ACDaemon) - ArcSoft Inc. - C:\Program Files\Common Files\ArcSoft\Connection Service\Bin\ACService.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - c:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - c:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: Process Monitor (LVPrcSrv) - Logitech Inc. - C:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\McAfee\Common Framework\FrameworkService.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - c:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - c:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: @C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe,-1 (TuneUp.Defrag) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpDefragService.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 7957 byte
وهي اخرى تقرير
BitDefender QuickScan Beta 32-bit v0.9.9.0
------------------------------------------
Scan date: Tue Feb 02 23:47:00 2010
Machine ID: C22DA986
Warning: Low execution rights. Please run QuickScan/browser as Administrator.
No infection found.
---------------------
Processes
---------
<verified> ESET Smart Security 3972 C:\Program Files\ESET\ESET Smart Security\egui.exe
<verified> Firefox 3020 C:\Program Files\Mozilla Firefox\firefox.exe
<verified> HP Advisor 4032 C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
<verified> Microsoft® Windows® Operating System 3996 C:\Program Files\Windows Media Player\wmpnscfg.exe
<verified> Microsoft® Windows® Operating System 2408 C:\Program Files\Windows Sidebar\sidebar.exe
<verified> Microsoft® Windows® Operating System 3208 C:\Program Files\Windows Sidebar\sidebar.exe
<verified> Microsoft® Windows® Operating System 3056 C:\Windows\Explorer.EXE
<verified> Microsoft® Windows® Operating System 6080 C:\Windows\explorer.exe
<verified> Microsoft® Windows® Operating System 2952 C:\Windows\system32\Dwm.exe
<verified> Microsoft® Windows® Operating System 3436 C:\Windows\system32\taskeng.exe
<verified> RealPlayer (32-bit) 5504 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
<verified> TuneUp Utilities 3380 C:\Program Files\TuneUp Utilities 2010\TuneUpUtilitiesApp32.exe
Network activity
----------------
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f155.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f101.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f101.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - a72-247-77-115.deploy.akamaitechnologies.com
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f149.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - lax04s01-in-f155.1e100.net
Process firefox.exe (3020) connected on port 80 (HTTP) - 72-20-120-224.bayarea.net
Autoruns and critical files
---------------------------
<unsigned> C:\Program Files\Mozilla Firefox\
<unsigned> CEEment C:\program files\hewlett-packard\sdp\ceement\HPCEE.exe
<verified> ESET Smart Security C:\Program Files\ESET\ESET Smart Security\egui.exe
<verified> HP Advisor C:\Program Files\Hewlett-Packard\HP Advisor\HPAdvisor.exe
<verified> Intel(R) Common User Interface C:\Windows\system32\igfxdev.dll
<verified> Microsoft® Windows® Operating System C:\Program Files\Windows Media Player\wmpnscfg.exe
<verified> Microsoft® Windows® Operating System C:\Program Files\Windows Sidebar\sidebar.exe
<verified> Microsoft® Windows® Operating System C:\Windows\System32\browseui.dll
<verified> Microsoft® Windows® Operating System c:\windows\system32\userinit.exe
<verified> Microsoft® Windows® Operating System C:\Windows\System32\WPDShServiceObj.dll
<verified> Windows Live Messenger C:\Program Files\Windows Live\Messenger\msnmsgr.exe
<verified> Windows® Internet Explorer C:\Windows\system32\msfeedssync.exe
<verified> Windows® Internet Explorer C:\Windows\System32\webcheck.dll
Browser plugins
---------------
<unsigned> acroiefavclient.dll c:\program files\adobe\acrobat 6.0\acrobat\acroiefavclient.dll
<unsigned> Bonjour C:\Program Files\Bonjour\mdnsNSP.dll
<unsigned> DivX Player Netscape Plugin C:\Program Files\DivX\DivX Player\npDivxPlayerPlugin.dll
<unsigned> dwmxpcom.dll C:\Users\Imam\AppData\Roaming\Mozilla\Firefox\Profiles/jisqgtpd.default\extensions\allglassv2@ambroos.neowin.net\components\dwmxpcom.dll
<unsigned> dwmxpcom.dllbak C:\Users\Imam\AppData\Roaming\Mozilla\Firefox\Profiles/jisqgtpd.default\extensions\allglassv2@ambroos.neowin.net\components\dwmxpcom.dllbak
<unsigned> IMCSec.dll C:\Windows\Downloaded Program Files\IMCSec.dll
<unsigned> Installer Control C:\Windows\Downloaded Program Files\InstallerControl.dll
<unsigned> Kodak Photo CD Access Developer Toolkit C:\Windows\Downloaded Program Files\pcdlib32.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfbmp13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfcmp13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfeps13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lffax13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfgif13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpcd13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpcx13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpng13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lfpsd13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lftga13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\lftif13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltclr13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltdis13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltefx13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltfil13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltimg13n.dll
<unsigned> LEADTOOLS(r) DLL for Win32 C:\Windows\Downloaded Program Files\ltkrn13n.dll
<unsigned> LightSurfUploadControl Module C:\Windows\Downloaded Program Files\VerizonWirelessUploadControl.dll
<unsigned> Lotuspond IMC Video&Voice Communication Control C:\Windows\Downloaded Program Files\imcv1.dll
<unsigned> MySpace Image Uploader C:\Windows\Downloaded Program Files\MySpaceUploader.ocx
<unsigned> PicLens Installer for Internet Explorer C:\Windows\Downloaded Program Files\plinstll.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin2.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin3.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin4.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin5.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin6.dll
<unsigned> QuickTime Plug-in 7.6.5 C:\Program Files\Internet Explorer\plugins\npqtplugin7.dll
<unsigned> RealJukebox NS Plugin C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
<unsigned> RealPlayer Version Plugin C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
<verified> AcroIEHelperShim Library c:\program files\common files\adobe\acrobat\activex\acroiehelpershim.dll
<verified> Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll
<verified> Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\CONFLICT.1\FP_AX_CAB_INSTALLER.exe
<verified> Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\CONFLICT.2\FP_AX_CAB_INSTALLER.exe
<verified> Adobe® Flash® Player ActiveX C:\Windows\Downloaded Program Files\FP_AX_CAB_INSTALLER.exe
<verified> BitDefender QuickScan C:\Users\Imam\AppData\Roaming\Mozilla\Firefox\Profiles/jisqgtpd.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\bdqscan.dll
<verified> BitDefender QuickScan C:\Users\Imam\AppData\Roaming\Mozilla\Firefox\Profiles/jisqgtpd.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
<verified> DivX Web Player C:\Program Files\DivX\DivX Web Player\npdivx32.dll
<verified> Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\ImageUploader5.ocx
<verified> Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\PhotoUploader5.ocx
<verified> Facebook Photo Uploader 5 C:\Windows\Downloaded Program Files\PhotoUploader55.ocx
<verified> Java(TM) Platform SE 6 U17 c:\program files\java\jre6\bin\jp2ssv.dll
<verified> Microsoft Office Live Plug-in for Firefox C:\Program Files\Microsoft\Office Live\npOLW.dll
<verified> Microsoft Search Enhancement Pack c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll
<verified> Microsoft® Windows Live ID c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\mswsock.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\NapiNSP.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\nlaapi.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\pnrpnsp.dll
<verified> Microsoft® Windows® Operating System C:\Windows\System32\winrnr.dll
<verified> Mozilla Default Plug-in C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
<verified> MSN Photo Upload Control C:\Windows\Downloaded Program Files\MsnPUpld.dll
<verified> MSN Photo Upload Control C:\Windows\Downloaded Program Files\PURen-us.dll
<verified> MSN® Games by Zone.com C:\Windows\Downloaded Program Files\MessengerStatsPAClient.dll
<verified> MSN® Games by Zone.com C:\Windows\Downloaded Program Files\ZIntro.ocx
<verified> npitunes.dll C:\Program Files\iTunes\Mozilla Plugins\npitunes.dll
<verified> NPSWF32.dll C:\Windows\System32\Macromed\Flash\NPSWF32.dll
<verified> PC Pitstop C:\Windows\Downloaded Program Files\PCPitstop2.dll
<verified> RealPlayer Download and Record Plugin c:\program files\real\realplayer\rpbrowserrecordplugin.dll
<verified> RealPlayer(tm) G2 LiveConnect-Enabled Plug-In (32- C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
<verified> Silverlight Plug-In c:\Program Files\Microsoft Silverlight\3.0.50106.0\npctrl.dll
<verified> Snagit c:\program files\techsmith\snagit 9\snagitbho.dll
<verified> Snagit c:\program files\techsmith\snagit 9\snagitieaddin.dll
<verified> sprthelper Module C:\Windows\Downloaded Program Files\sshelper.exe
<verified> tgctlcm Module C:\Windows\Downloaded Program Files\tgctlcm.dll
<verified> tgctlsr Module C:\Windows\Downloaded Program Files\tgctlsr.dll
<verified> Windows Presentation Foundation c:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
<verified> Windows® Internet Explorer C:\Windows\System32\ieframe.dll
Scan
----
No file uploaded.
Scan finished - communication took 3 sec
Total traffic - 0.05 MB sent, 2.85 KB recvd
Scanned 1081 files and modules - 58 seconds
