View Single Post
Old 11-16-2012, 08:00 PM   #1
 
Join Date: Oct 2007
Location: ÑÇß æÇáÚÇáã æÑÇß
Age: 34
Posts: 4,470
Default ãÔßáÉ ÇÎÊÑÇÞ ÌåÇÒ*

<div>

ÇáÓáÇã Úá*ßã
ÇäÇ ÍãáÊ ÈÑäÇãÌ æÔÛáÊå ÝÊÓÈÈ Ý* ÇÎÊÑÇÞ ÌåÇÒ*
æÇäÊåÈÊ Çáì Çäå ãÎÊÑÞ ÚäÏãÇ ÓÑÞ ÚÖæ*É ÇáãäÊÏì ÇáÏ* ÍãáÊ ãä ÇáÈÑäÇãÌ
æÞÇã ÈäÔÑ ãæÇÖ*Ú ÈÇÓã ÚÖæ*Ê* áäÝÓ ÇáÈÑäÇãÌ
æßäÊ ÞÏ ÝÍÕÊ ÇáÈÑäÇãÌ ÈÜ ãÇáæææ*Ñ ÈÇÇÇ*Ê
æáã *ÙåÑ Ô*ìÁ.
ÇáÂä ÇäÇ ÞãÊ ÈÇÓÊÚãÇá ÚÏÉ ÇÏæÇÊ áãÓÍ ÇáÝ*ÑæÓÇÊ
áßä áÇ ÇÚÑÝ ÇÏÇ ÍÏÝÊ ÇáãáÝ ÇáãÓÄæá Úä ÇáÇÎÊÑÇÞ Çæ áÇ

ÇáÊÞÑ*Ñ
ÇÞÊÈÇÓ:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 01:22:24 Õ, on 16/11/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Fichiers communs\Comodo\launcher_service.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Fichiers communs\Comodo\GeekBuddyRSP.exe
C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\WINDOWS\System32\UsbService.exe
C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe
C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Comodo\GeekBuddy\unit_manager.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Comodo\GeekBuddy\unit.exe
C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\IEUM.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Mozilla Firefox\plugin-container.exe
C:\Program Files\Comodo\Dragon\dragon_updater.exe
C:\Program Files\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\osk.exe
C:\WINDOWS\system32\MSSWCHX.EXE
C:\Documents and Settings\Administrateur\Bureau\HijackThis.exe

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyServer = 127.0.0.1:9666
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\ssv.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jp2ssv.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Fichiers communs\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [TrojanScanner] C:\Program Files\Trojan Remover\Trjscan.exe /boot
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Program Files\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [tvncontrol] "C:\Program Files\Fichiers communs\Comodo\tvnserver.exe" -controlservice -slave
O4 - HKCU\..\Run: [REVAService] C:\Program Files\LG Electronics\LG EV-DO Rev.A USB Modem\Modem Software\REVAService.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{E202F497-BA84-4AD1-9E50-E554AD93839A}: NameServer = 192.168.60.58 192.168.50.55
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\aspn et_state.exe (file missing)
O23 - Service: COMODO LPS Launcher (CLPSLauncher) - Comodo Security Solutions Inc. - C:\Program Files\Fichiers communs\Comodo\launcher_service.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Program Files\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Service d'administration du Gestionnaire de disque logique (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: COMODO Dragon Update Service (DragonUpdater) - Unknown owner - C:\Program Files\Comodo\Dragon\dragon_updater.exe
O23 - Service: Journal des événements (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: GeekBuddy Remote Screen Protocol (GeekBuddyRSP) - Comodo Security Solutions, Inc. - C:\Program Files\Fichiers communs\Comodo\GeekBuddyRSP.exe
O23 - Service: Service COM de gravage de CD IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Oracle Corporation - C:\Program Files\Oracle\JavaFX 2.1 Runtime\bin\jqs.exe
O23 - Service: MBAMScheduler - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Partage de Bureau * distance NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Plug-and-Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Gestionnaire de session d'aide sur le Bureau * distance (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Carte * puce (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Journaux et alertes de performance (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Telnet (TlntSvr) - Unknown owner - C:\WINDOWS\system32\tlntsvr.exe
O23 - Service: Eltima Usb to Ethernet Connector (UsbService) - Unknown owner - C:\WINDOWS\System32\UsbService.exe
O23 - Service: Cliché instantané de volume (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.16\bin\mysqld.exe
O23 - Service: Carte de performance WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 5451 bytes
æÈÇáäÓÈÉ ááÈÑäÇãÌ ÇáÏ* ÊÓÈÈ Ý* ÇáÇÎÊÑÇÞ
ÝåÏÇ åæ ÑÇÈØå : http://www.mediafire.com/?8qk3lvd5v96v2k9

ÇÏÇ Çãßä ÇÍÏ ÇáÎÈÑÇÁ *Íááå æ*ÚÑÝ äæÚ ÇáÇÎÊÑÇÞ ÇáÏ* Êã
æ*ÚØ*ä* ÇÓãÇÁ ÇáãáÝÇÊ ÇáÊ* äÔÑåÇ ÈÌåÇÒ* ÍÊì ÇÞæã ÈÍÏÝåÇ
ÈäÊ ÑÇß is offline   Reply With Quote