السلام عليكم
ياخبراء
جهازي يعلق مرررره انا اكتب لكم وكل حرف ياخذ وقت لين يظهر
وفيه فايروسات ومخترق متأكد لان ماسنجري انسرق برضو
وفحصت الجهاز بطريقة الموضوع المثبت هنا وتبين لي انه
مخترق
ساعدووووني
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10
05 PM, on 16/02/2012
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16982)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\Common Files\****\**** Update\jusched.exe
C:\Program Files\Real\RealPlayer\Update\realsched.e xe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Windows\ehome\ehtray.exe
C:\Users\hp\AppData\Local\Google\Update\ GoogleUpdate.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\ehome\ehmsas.exe
C:\Program Files\Google\Chrome\Application\chrome.e xe
C:\Program Files\Google\Chrome\Application\chrome.e xe
C:\Program Files\Google\Chrome\Application\chrome.e xe
C:\Program Files\Google\Chrome\Application\chrome.e xe
C:\Windows\system32\wuauclt.exe
C:\Windows\system32\rundll32.exe
C:\Program Files\Google\Chrome\Application\chrome.e xe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Users\hp\AppData\Local\Google\Google Talk Plugin\googletalkplugin.exe
C:\Program Files\Google\Chrome\Application\chrome.e xe
C:\Windows\system32\taskeng.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://search.conduit.com?SearchSour...ctid=CT3150609
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
http://us.rd.yahoo.com/customize/ie/...ch/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.yahoo.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {1392b8d2-5c05-419f-a8f6-b9f15a596612} - (no file)
R3 - URLSearchHook: (no name) - {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - (no file)
R3 - URLSearchHook: Viral Tube Toolbar - {93c338de-5fb5-4fb5-ab4e-0eedc0bd9f3a} - C:\Program Files\Viral_Tube\prxtbVira.dll
O2 - BHO: Crunchdeal - {01FEFC77-1031-43C6-BA9A-FEC28E75607C} - C:\Program Files\Crunchdeal\0.0.2.7\crunchdll.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: ????? ???? Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper .dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRe cordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Viral Tube - {93c338de-5fb5-4fb5-ab4e-0eedc0bd9f3a} - C:\Program Files\Viral_Tube\prxtbVira.dll
O2 - BHO: ****(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\****\jre6\bin\jp2ssv.dll
O3 - Toolbar: Viral Tube Toolbar - {93c338de-5fb5-4fb5-ab4e-0eedc0bd9f3a} - C:\Program Files\Viral_Tube\prxtbVira.dll
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [Sun****UpdateSched] "C:\Program Files\Common Files\****\**** Update\jusched.exe"
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.e xe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanup******
O4 - HKCU\..\Run: [Itibiti.exe] C:\Program Files\Itibiti Soft Phone\Itibiti.exe
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehome\ehTray.exe
O4 - HKCU\..\Run: [Google Update] "C:\Users\hp\AppData\Local\Google\Update \GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Weather] C:\Program Files\AWS\WeatherBug\Weather.exe 1
O4 - Global Startup: ???? ????? Adobe Reader.lnk
O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.d ll
O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.d ll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.D LL
O15 - Trusted Zone: *.netzero.com
O15 - Trusted Zone: *.netzero.net
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{AC5EB 493-7444-4619-87B2-86C391CD97E6}: NameServer = 10.7.160.1
O20 - AppInit_DLLs: c:\PROGRA~1\WI371A~1\Datamngr\datamngr.d ll c:\PROGRA~1\WI371A~1\Datamngr\IEBHO.dll
O23 - Service: AddFiltr - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\HP Quick Launch Buttons\AddFiltr.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSv c.exe
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLCapSvc.ex e
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - C:\Program Files\HP\QuickPlay\Kernel\TV\CLSched.exe
O23 - Service: Symantec Lic NetConnect service (CLTNetCnService) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: HP Health Check Service - Hewlett-Packard - C:\Program Files\Hewlett-Packard\HP Health Check\hphc_service.exe
O23 - Service: hpqwmiex - Hewlett-Packard Development Company, L.P. - C:\Program Files\Hewlett-Packard\Shared\hpqwmiex.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Roxio\Roxio MyDVD Basic v9\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: LightScribeService Direct Disc Labeling Service (LightScribeService) - Hewlett-Packard Company - C:\Program Files\Common Files\LightScribe\LSSrvc.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.E XE
O23 - Service: LiveUpdate Notice Service Ex (LiveUpdate Notice Ex) - Unknown owner - c:\Program Files\Common Files\Symantec Shared\ccSvcHst.exe (file missing)
O23 - Service: LiveUpdate Notice Service - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe
--
End of file - 12583 bytes
تستطيع المشاركة هنا والرد على الموضوع ومشاركة رأيك عبر حسابك في الفيس بوك