تقرير هايجاك + طلب تعليم

محروم.كوم · #1 09-10-2010, 07:41 AM

السلام عليكم .. أولا أعرض بين يديكم تقرير الهـاي جاك ، و أتمنى منك مشكورًا غيــر مـأمور أن تقرأ طلبي في آخر الصفحة

بارك الله فيك
و يا ليت أحد يبي لي هل جهازي فيه اختراق أو محاولات أو ملفات تجسس و غيرها

التقرير
إقتباس:
logfile of trend micro hijackthis v2.0.2
scan saved at 6:26:43 pm, on 9/9/2010
platform: Windows xp sp3 (winnt 5.01.2600)
msie: Internet explorer v6.00 sp3 (6.00.2900.5512)
boot mode: Normal

running processes:
C:\windows\system32\smss.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\services.exe
c:\windows\system32\lsass.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\program files\alwil software\avast4\aswupdsv.exe
c:\program files\alwil software\avast4\ashserv.exe
c:\windows\rthdcpl.exe
c:\windows\system32\igfxtray.exe
c:\windows\system32\hkcmd.exe
c:\windows\system32\igfxpers.exe
c:\program files\lg software\ip operator\ip operator.exe
c:\program files\lg software\lg magnifier\magnifyingglass.exe
c:\program files\system control manager\mgsysctrl.exe
c:\program files\common files\java\java update\jusched.exe
c:\program files\toshiba\bluetooth toshiba stack\itsecmng.exe
c:\progra~1\alwils~1\avast4\ashdisp.exe
c:\program files\common files\adobe\arm\1.0\adobearm.exe
c:\program files\common files\real\update_ob\realsched.exe
c:\program files\divx\divx update\divxupdate.exe
c:\program files\srs labs\wowhd and tsxt driver\srstrayapp.exe
c:\windows\system32\ctfmon.exe
c:\program files\windows live\messenger\msnmsgr.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\logitech\setpoint\setpoint.exe
c:\program files\common files\logishrd\khal2\khalmnpr.exe
c:\windows\system32\spoolsv.exe
c:\program files\bonjour\mdnsresponder.exe
c:\program files\java\jre6\bin\jqs.exe
c:\program files\system control manager\msiservice.exe
c:\program files\srs labs\wowhd and tsxt driver\srs_postinstaller.exe
c:\windows\system32\svchost.exe
c:\program files\toshiba\bluetooth toshiba stack\tosbtsrv.exe
c:\program files\alwil software\avast4\ashwebsv.exe
c:\windows\system32\wbem\unsecapp.exe
c:\program files\alwil software\avast4\ashmaisv.exe
c:\program files\lg_swupdate\gilautouc.exe
c:\windows\system32\wuauclt.exe
c:\program files\common files\java\java update\jucheck.exe
c:\program files\windows live\contacts\wlcomm.exe

c:\windows\explorer.exe
c:\program files\mozilla firefox\firefox.exe
c:\program files\mozilla firefox\plugin-container.exe
c:\program files\trend micro\hijackthis\hijackthis.exe

r1 - hkcu\software\microsoft\internet explorer\main,search page = http://search.live.com
r0 - hkcu\software\microsoft\internet explorer\main,start page = http://go.microsoft.com/fwlink/?linkid=69157
r0 - hklm\software\microsoft\internet explorer\search,searchassistant = http://search.live.com/sphome.aspx
o2 - bho: Acroiehelperstub - {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\acroiehelper shim.dll
o2 - bho: Realplayer download and record plugin for internet explorer - {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\documents and settings\all users\application data\real\realplayer\browserrecordplugin \ie\rpbrowserrecordplugin.dll
o2 - bho: Windows live sign-in helper - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
o2 - bho: Skypeiepluginbho - {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
o2 - bho: Java(tm) plug-in 2 ssv helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
o2 - bho: Jqsiestartdetectorimpl - {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_pl ugin.dll
o4 - hklm\..\run: [lg intelligent update] "c:\program files\lg_swupdate\autoupdate.exe" gilautouc
o4 - hklm\..\run: [rthdcpl] rthdcpl.exe
o4 - hklm\..\run: [alcmtr] alcmtr.exe
o4 - hklm\..\run: [igfxtray] c:\windows\system32\igfxtray.exe
o4 - hklm\..\run: [hotkeyscmds] c:\windows\system32\hkcmd.exe
o4 - hklm\..\run: [persistence] c:\windows\system32\igfxpers.exe
o4 - hklm\..\run: [syntpenh] c:\program files\synaptics\syntp\syntpenh.exe
o4 - hklm\..\run: [ucam_menu] "c:\program files\cyberlink\youcam\muitransfer\muist artmenu.exe" "c:\program files\cyberlink\youcam" update "software\cyberlink\youcam\1.0"
o4 - hklm\..\run: [ipo3] "c:\program files\lg software\ip operator\ip operator.exe" -autostartfromreg
o4 - hklm\..\run: [lg magnifier] "c:\program files\lg software\lg magnifier\magnifyingglass.exe"
o4 - hklm\..\run: [mgsysctrl] c:\program files\system control manager\mgsysctrl.exe
o4 - hklm\..\run: [sunjavaupdatesched] "c:\program files\common files\java\java update\jusched.exe"
o4 - hklm\..\run: [itsecmng] %programfiles%\toshiba\bluetooth toshiba stack\itsecmng.exe /start
o4 - hklm\..\run: [imjpmig8.1] "c:\windows\ime\imjp8_1\imjpmig.exe" /spoil /remadvdef /migration32
o4 - hklm\..\run: [mspy2002] c:\windows\system32\ime\pintlgnt\imscins t.exe /sync
o4 - hklm\..\run: [phime2002async] c:\windows\system32\ime\tintlgnt\tintset p.exe /sync
o4 - hklm\..\run: [phime2002a] c:\windows\system32\ime\tintlgnt\tintset p.exe /imename
o4 - hklm\..\run: [avast!] c:\progra~1\alwils~1\avast4\ashdisp.exe
o4 - hklm\..\run: [adobe reader speed launcher] "c:\program files\adobe\reader 9.0\reader\reader_sl.exe"
o4 - hklm\..\run: [adobe arm] "c:\program files\common files\adobe\arm\1.0\adobearm.exe"
o4 - hklm\..\run: [kernel and hardware abstraction layer] khalmnpr.exe
o4 - hklm\..\run: [quicktime task] "c:\program files\quicktime\qttask.exe" -atboottime
o4 - hklm\..\run: [tkbellexe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot
o4 - hklm\..\run: [divxupdate] "c:\program files\divx\divx update\divxupdate.exe" /checknow
o4 - hkcu\..\run: [srstrayapp] c:\program files\srs labs\wowhd and tsxt driver\srstrayapp.exe
o4 - hkcu\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe
o4 - hkcu\..\run: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
o4 - hkcu\..\run: [skype] "c:\program files\skype\phone\skype.exe" /nosplash /minimized
o4 - startup: Ela-salaty.lnk = c:\program files\ela-salaty\salaty.exe
o4 - global startup: Logitech setpoint.lnk = c:\program files\logitech\setpoint\setpoint.exe
o9 - extra button: Skype add-on for internet explorer - {898ea8c8-e7ff-479b-8935-aec46303b9e5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
o9 - extra 'tools' menuitem: Skype add-on for internet explorer - {898ea8c8-e7ff-479b-8935-aec46303b9e5} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
o9 - extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - c:\windows\network diagnostic\xpnetdiag.exe
o9 - extra 'tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - c:\windows\network diagnostic\xpnetdiag.exe
o9 - extra button: Messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o9 - extra 'tools' menuitem: Windows messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o16 - dpf: {6414512b-b978-451d-a0d8-fcfdf33e833c} (wuwebcontrol class) - http://update.microsoft.com/windowsu...?1277794737369
o18 - protocol: Skype-ie-addon-data - {91774881-d725-4e58-b298-07617b9b86a8} - c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
o18 - protocol: Skype4com - {ffc8b962-9b40-4dff-9458-1830c7dd7f5d} - c:\progra~1\common~1\skype\skype4~1.dll
o23 - service: Avast! Iavs4 control service (aswupdsv) - alwil software - c:\program files\alwil software\avast4\aswupdsv.exe
o23 - service: Avast! Antivirus - alwil software - c:\program files\alwil software\avast4\ashserv.exe

o23 - service: Avast! Mail scanner - alwil software - c:\program files\alwil software\avast4\ashmaisv.exe
o23 - service: Avast! Web scanner - alwil software - c:\program files\alwil software\avast4\ashwebsv.exe
o23 - service: Bonjour service - apple inc. - c:\program files\bonjour\mdnsresponder.exe
o23 - service: Ipod service - apple inc. - c:\program files\ipod\bin\ipodservice.exe
o23 - service: Java quick starter (javaquickstarterservice) - sun microsystems, inc. - c:\program files\java\jre6\bin\jqs.exe
o23 - service: Logitech bluetooth service (lbtserv) - logitech, inc. - c:\program files\common files\logishrd\bluetooth\lbtserv.exe
o23 - service: Micro star scm - unknown owner - c:\program files\system control manager\msiservice.exe
o23 - service: Srs postinstaller service (srs_postinstaller) - srs labs, inc. - c:\program files\srs labs\wowhd and tsxt driver\srs_postinstaller.exe
o23 - service: Toshiba bluetooth service - toshiba corporation - c:\program files\toshiba\bluetooth toshiba stack\tosbtsrv.exe

--
end of file - 8725 bytes

الطلب

أريد أن أتعلم أن أصون جهـازي و أن أفهمه بطريقة جيدة ، اعتقد أنه من المهم لكل شخص يعمل على حاسوب أن يعرف كيف يحمي نفسه و معلوماته من أي هجوم أو وسائل هجوم و ما شابه ، لا أريد أن يقول لي أحد عليك بالبرنامج الفلاني .. أود أن اعرف ماهي برامج الصيانة و الحمـاية المهمة للحاسب ، و ماذا يميز مضاد فيروسات عن مضاد فيروسات آخر ..

هل من الممكن أن توضحوا لي أو على الأقل تحيلوني لموضوع آخر ؟

بارك الله فيكم جميعـــًا
__DEFINE_LIKE_SHARE__