عاجل : تقرير الهاي جاك بالعافية فتحت الموضوع لأكتب
Logfile of Trend Micro HijackThis v2.0.2Scan saved at 02:11:40 ص, on 6/27/2013Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\Program Files\AVG\AVG2013\avgrsx.exeC:\Program Files\AVG\AVG2013\avgcsrvx.exeC:\WINDOWS\system32\ winlogon.exeC:\WINDOWS\system32\services.exeC:\WIN DOWS\system32\lsass.exeC:\WINDOWS\system32\svchost .exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\syst em32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\ WINDOWS\Explorer.EXEC:\Program Files\AVG\AVG2013\avgfws.exeC:\Program Files\Vista Drive Icon\DrvIcon.exeC:\Program Files\AVG\AVG2013\avgidsagent.exeC:\Program Files\AVG\AVG2013\avgwdsvc.exeC:\Program Files\Baidu Security\Cloud Security\BAVSvc.exeC:\WINDOWS\system32\hkcmd.exeC: \WINDOWS\system32\igfxpers.exeC:\WINDOWS\system32\ igfxsrvc.exeC:\Program Files\AVG\AVG2013\avgui.exeC:\Program Files\AVG Secure Search\vprot.exeC:\Program Files\Baidu Security\PC Faster\3.2.0.25\PCFaster.exeC:\WINDOWS\system32\ct fmon.exeC:\Program Files\DefaultTab\DefaultTabSearch.exeC:\Program Files\ViStart\ViStart.exeC:\Documents and Settings\elfakhrany\Application Data\DefaultTab\DefaultTab\DTUpdate.exeC:\Program Files\AVG\AVG2013\avgnsx.exeC:\Program Files\WWW.HOSTJSC.NET\Internet Download Manager\IDMan.exeC:\Program Files\AVG\AVG2013\avgemcx.exeC:\PROGRA~1\Yahoo!\ME SSEN~1\YahooMessenger.exeC:\Program Files\Rainmeter\Rainmeter.exeC:\Program Files\FilesFrog Update Checker\update_checker.exeC:\Program Files\Baidu Security\PC Faster\3.2.0.25\PCFasterSvc.exeC:\Documents and Settings\elfakhrany\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exeC:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exeC:\Program Files\Photodex\ProShow Producer\ScsiAccess.exeC:\WINDOWS\system32\svchost .exeC:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exeC: \Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exeC:\P rogram Files\WWW.HOSTJSC.NET\Internet Download Manager\IEMonitor.exeC:\Program Files\Google\Chrome\Application\chrome.exeC:\Progr am Files\Google\Chrome\Application\chrome.exeC:\Progr am Files\Google\Chrome\Application\chrome.exeC:\Progr am Files\AVG\AVG2013\avgcsrvx.exeC:\Program Files\Google\Chrome\Application\chrome.exeC:\Progr am Files\Mozilla Firefox\firefox.exeC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\Google\Chrome\Application\chrome.exeC:\Progr am Files\Google\Chrome\Application\chrome.exeC:\Progr am Files\Skype\Phone\Skype.exeC:\Program Files\Google\Chrome\Application\chrome.exeC:\PROGR A~1\Yahoo!\MESSEN~1\YahooMessenger.exeC:\Program Files\Mozilla Firefox\plugin-container.exeC:\Program Files\AVG\AVG2013\avgcsrvx.exeC:\Program Files\AVG\AVG2013\avgcsrvx.exeC:\Program Files\Trend Micro\HijackThis\HijackThis.exeR1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = (1) Search - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = Search - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = Search Microsoft.com - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Search Microsoft.com - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Search Microsoft.com - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = Search Microsoft.com - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch = O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\WWW.HOSTJSC.NET\Internet Download Manager\IDMIECC.dllO2 - BHO: DefaultTabBHO - {7F6AFBF1-E065-4627-A2FD-810366367D01} - C:\Documents and Settings\elfakhrany\Application Data\DefaultTab\DefaultTab\DefaultTabBHO.dllO2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dllO2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dllO4 - HKLM\..\Run: [DrvIcon] C:\Program Files\Vista Drive Icon\DrvIcon.exeO4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXEO4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXEO4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exeO4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exeO4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exeO4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -kO4 - HKLM\..\Run: [googletalk] C:\Program Files\Google\Google Talk\googletalk.exe /autostartO4 - HKLM\..\Run: [pdfFactory Pro Dispatcher v3] "C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\fppdis 3a.exe" /source=HKLMO4 - HKLM\..\Run: [AVG_UI] "C:\Program Files\AVG\AVG2013\avgui.exe" /TRAYONLYO4 - HKLM\..\Run: [vProt] "C:\Program Files\AVG Secure Search\vprot.exe"O4 - HKLM\..\Run: [Baidu PC Faster 3.2.0.25] "C:\Program Files\Baidu Security\PC Faster\3.2.0.25\PCFaster.exe" -auto -startO4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscriptO4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exeO4 - HKCU\..\Run: [ViStart] C:\Program Files\ViStart\ViStart.exeO4 - HKCU\..\Run: [IDMan] C:\Program Files\WWW.HOSTJSC.NET\Internet Download Manager\IDMan.exe /onbootO4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\MESSEN~1\YahooMessenger.ex e" -quietO4 - HKCU\..\Run: [Rainmeter] C:\Program Files\Rainmeter\Rainmeter.exeO4 - HKCU\..\Run: [SDP] C:\Program Files\FilesFrog Update Checker\update_checker.exe /auto O4 - HKCU\..\Run: [Facebook Update] "C:\Documents and Settings\elfakhrany\Local Settings\Application Data\Facebook\Update\FacebookUpdate.exe" /c /nocrashserverO4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exeO8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\WWW.HOSTJSC.NET\Internet Download Manager\IEGetAll.htmO8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\WWW.HOSTJSC.NET\Internet Download Manager\IEExt.htmO8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - C:\Program Files\WWW.HOSTJSC.NET\Internet Download Manager\IEGetVL.htmO9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dllO9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exeO13 - Gopher Prefix: O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dllO18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLLO18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files\Common Files\AVG Secure Search\ViProtocolInstaller\15.2.0\ViProtocol.dllO2 0 - AppInit_DLLs: O20 - Winlogon Notify: RailNotification - C:\WINDOWS\O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpda teService.exeO23 - Service: AVG Firewall (avgfws) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgfws.exeO23 - Service: AVGIDSAgent - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgidsagent.exeO23 - Service: AVG WatchDog (avgwd) - AVG Technologies CZ, s.r.o. - C:\Program Files\AVG\AVG2013\avgwdsvc.exeO23 - Service: Baidu Antivirus Service (BAVSvc) - Baidu, Inc. - C:\Program Files\Baidu Security\Cloud Security\BAVSvc.exeO23 - Service: DefaultTabSearch - Unknown owner - C:\Program Files\DefaultTab\DefaultTabSearch.exeO23 - Service: DefaultTabUpdate - Unknown owner - C:\Documents and Settings\elfakhrany\Application Data\DefaultTab\DefaultTab\DTUpdate.exeO23 - Service: خدمة Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exeO23 - Service: خدمة Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exeO23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exeO23 - Service: Baidu PC Faster Service 3.2.0.25 (PCFasterSvc_{PCFaster_3.2.0.25}) - Baidu Inc. - C:\Program Files\Baidu Security\PC Faster\3.2.0.25\PCFasterSvc.exeO23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - PC Tools - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exeO23 - Service: ScsiAccess - Unknown owner - C:\Program Files\Photodex\ProShow Producer\ScsiAccess.exeO23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exeO23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exeO23 - Service: vToolbarUpdater15.2.0 - AVG Secure Search - C:\Program Files\Common Files\AVG Secure Search\vToolbarUpdater\15.2.0\ToolbarUpdater.exeO2 3 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe--End of file - 10746 bytes
تعليق