לוג ל HijackThis

פורסם 2006 בינואר 3119 שנים

Logfile of HijackThis v1.99.1

Scan saved at 4:19:03 PM, on 1/31/2006

Platform: Windows XP SP1 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:

C:\WINDOWS\System32\smss.exe

C:\WINDOWS\system32\winlogon.exe

C:\WINDOWS\system32\services.exe

C:\WINDOWS\system32\lsass.exe

C:\WINDOWS\system32\svchost.exe

C:\WINDOWS\System32\svchost.exe

D:\fire\smc.exe

C:\WINDOWS\Explorer.EXE

C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

C:\WINDOWS\System32\gsicon.exe

C:\Program Files\GlobespanVirata\Adsl\dslagent.exe

C:\WINDOWS\System32\Smtray.exe

C:\WINDOWS\System32\ctfmon.exe

C:\WINDOWS\system32\spoolsv.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe

C:\WINDOWS\System32\shell386.exe

D:\nero\Nero\nero.exe

C:\WINDOWS\System32\imapi.exe

C:\Program Files\Internet Explorer\IEXPLORE.EXE

D:\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = nov

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = nov

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = nov

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hwzone.co.il/

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = nov

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = nov

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =

O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll

O2 - BHO: winapi32.MyBHO - {B439D5EB-0A61-4ED9-8C8F-EC4148BB23F7} - C:\WINDOWS\System32\winapi32.dll

O2 - BHO: AddressBar Class - {f65b197f-8260-4d52-909a-f70118e646eb} - C:\WINDOWS\system32\iasada.dll (file missing)

O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP

O4 - HKLM\..\Run: [AVG7_EMC] C:\PROGRA~1\Grisoft\AVGFRE~1\avgemc.exe

O4 - HKLM\..\Run: [GSICONEXE] gsicon.exe

O4 - HKLM\..\Run: [DSLAGENTEXE] C:\Program Files\GlobespanVirata\Adsl\dslagent.exe

O4 - HKLM\..\Run: [smapp] Smtray.exe

O4 - HKLM\..\Run: [iMONTRAY] C:\Program Files\Intel\Intel® Active Monitor\imontray.exe

O4 - HKLM\..\Run: [iCQ Lite] D:\??????\ICQLite\ICQLite.exe -minimize

O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe

O4 - HKLM\..\Run: [Win32.Exploit.A] C:\WINDOWS\System32\exa32.exe

O4 - HKLM\..\Run: [Win32.Virus.Smart32] C:\WINDOWS\System32\adsmart.exe

O4 - HKLM\..\Run: [smcService] D:\fire\smc.exe -startgui

O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe

O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\MSMSGS.EXE" /background

O4 - HKCU\..\Run: [services32] C:\Program Files\Common Files\Windows\mc-110-12-0000234.exe

O4 - HKCU\..\RunOnce: [iCQ Lite] D:\??????\ICQLite\ICQLite.exe -trayboot

O9 - Extra button: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\??????\ICQLite\ICQLite.exe (file missing)

O9 - Extra 'Tools' menuitem: ICQ Lite - {B863453A-26C3-4e1f-A54D-A2CD196348E9} - D:\??????\ICQLite\ICQLite.exe (file missing)

O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE

O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\MSMSGS.EXE

O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{6B019785-91E6-4B03-BA8A-5FAA79FE973F}: NameServer = 62.90.133.233 212.150.48.169

O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgamsvr.exe

O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVGFRE~1\avgupsvc.exe

O23 - Service: Intel® Active Monitor (imonNT) - Intel Corp. - C:\Program Files\Intel\Intel® Active Monitor\imonnt.exe

O23 - Service: Sygate Personal Firewall (SmcService) - Sygate Technologies, Inc. - D:\fire\smc.exe

המחשב מתפרק......

ציטוט

פורסם 2006 בינואר 3119 שנים

http://hijackthis.de/

ציטוט

פורסם 2006 בינואר 3119 שנים

תעדכן את הווינדוס ואיתו את האספלורר, אבל לפמי תעשה את זה:

כנס לסייף מוד

תסמן שם את הדברים הבאים ותסיר אותם: