أرجوكم أريد الحل في أسرع وقت

[mohannad maklad]

بسم الله
​

يا جماااااااااعة أنا جهازي كل اما اجي افتح اي بارتشن يفتحلي صفحة search أرجوكم الحل في أسرع وقت

 

[Demo-dashDemo-dash is verified member.]

بسيطه

اعمل التالي خل نشوف جهازك

عطل جميع برامج الحماية ,,
وحمل هذه الاداة واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم


اعمل تقرير للهايجاك

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على do a system scan and save log
لحظات .. ويظهر لك تقرير اعمل تحديد الكل ==> انسخه والصقه بردك القادم
​

 

[mohannad maklad]

يا ريت طريقة اسهل علشان مش راضي يحمل معايه

 

[السّاجد لله]

اخي يجب تجربة الادوات الي عطاكياها استاذنا الغالي ديموو لانها علاج اكيد لمشكلتك ان شاء الله
​

 

[Demo-dashDemo-dash is verified member.]

هذي اسهل طريقه ,, والمشكله معروفه وسببها فايروس الأوتورن
ومعاك حق الرابط خربان

هذا رابط اخر شغال

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

ولاتنسى ان تعطل برنامج
الحمايه ثم
عند تشغيلها بتظهر لك رسالة ,, اضغط على >> yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم

​

 

[mohannad maklad]

بس أنا لعبت في file types

 

[Demo-dashDemo-dash is verified member.]

انت اعمل هذي الخطوه

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

ولاتنسى ان تعطل برنامج
الحمايه ثم
عند تشغيلها بتظهر لك رسالة ,, اضغط على >> yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم

وماراح يسير خاطرك الى طيب
​

 

[mohannad maklad]

ComboFix 08-11-12.01 - MoHaNNaD MaKlAD 2008-11-13 22:01:18.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.3.1256.20.1033.18.181 [GMT 2:00]
Running from: c:\documents and settings\MoHaNNaD MaKlAD\My Documents\Downloads\Programs\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@134@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@134@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@86C@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@86C@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@9DC@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@9DC@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@9E4@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@9E4@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@ABC@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@ABC@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@C04@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@C04@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@C8C@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@C8C@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@CC0@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@CC0@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@CE4@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@CE4@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@D44@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@D44@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@DD4@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@DD4@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@E74@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@E74@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@ED0@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@ED0@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@FA4@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@FA4@3939E0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@FCC@3939D0.###
c:\documents and settings\MoHaNNaD MaKlAD\Application Data\.#\MBX@FCC@3939E0.###
c:\windows\system32\h@tkeysh@@k.dll
d:\recycler\قلب الوحوش.mp3

.
((((((((((((((((((((((((( Files Created from 2008-10-13 to 2008-11-13 )))))))))))))))))))))))))))))))
.

2008-11-13 21:12 . 2008-11-13 21:27 1,549 --a------ c:\windows\ata live update.ini
2008-11-13 21:08 . 2008-11-13 21:08 <DIR> d-------- c:\windows\speech
2008-11-13 21:05 . 2008-11-13 21:05 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\LogoMaker
2008-11-13 21:04 . 2008-11-13 21:04 <DIR> d-------- c:\program files\Studio V5
2008-11-12 20:18 . 2008-11-12 20:18 <DIR> d--hs---- C:\FOUND.010
2008-11-12 14:12 . 2008-10-24 13:21 455,296 --------- c:\windows\system32\dllcache\mrxsmb.sys
2008-11-12 14:11 . 2008-09-04 19:15 1,106,944 --------- c:\windows\system32\dllcache\msxml3.dll
2008-11-12 07:45 . 2008-11-12 07:45 <DIR> d-------- c:\program files\TeamViewer3
2008-11-12 07:45 . 2008-11-12 07:45 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\temp
2008-11-12 07:45 . 2008-11-12 07:46 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\TeamViewer
2008-11-12 07:31 . 2008-11-12 07:31 <DIR> d--hs---- C:\FOUND.009
2008-11-11 17:28 . 2008-11-11 17:28 <DIR> d-------- c:\program files\Google
2008-11-11 13:40 . 2008-11-11 13:40 <DIR> d-------- c:\documents and settings\All Users\Application Data\Yahoo!
2008-11-10 14:36 . 2008-04-13 20:39 5,504 --a------ c:\windows\system32\drivers\MSTEE.sys
2008-11-10 14:35 . 2008-04-14 02:12 91,136 --a------ c:\windows\system32\kswdmcap.ax
2008-11-10 14:35 . 2008-04-13 20:46 85,248 --a------ c:\windows\system32\drivers\NABTSFEC.sys
2008-11-10 14:35 . 2008-04-14 02:12 61,952 --a------ c:\windows\system32\kstvtune.ax
2008-11-10 14:35 . 2008-04-14 02:12 53,760 --a------ c:\windows\system32\vfwwdm32.dll
2008-11-10 14:35 . 2008-04-14 02:12 43,008 --a------ c:\windows\system32\ksxbar.ax
2008-11-10 14:35 . 2008-04-14 02:12 20,992 --a------ c:\windows\system32\dshowext.ax
2008-11-10 14:35 . 2008-04-13 20:46 19,200 --a------ c:\windows\system32\drivers\WSTCODEC.SYS
2008-11-10 14:35 . 2008-04-13 20:46 17,024 --a------ c:\windows\system32\drivers\CCDECODE.sys
2008-11-10 14:35 . 2008-04-14 02:12 16,384 --a------ c:\windows\system32\ipsink.ax
2008-11-10 14:35 . 2008-04-13 20:46 15,232 --a------ c:\windows\system32\drivers\StreamIP.sys
2008-11-10 14:35 . 2008-04-13 20:46 11,136 --a------ c:\windows\system32\drivers\SLIP.sys
2008-11-10 14:35 . 2008-04-13 20:46 10,880 --a------ c:\windows\system32\drivers\NdisIP.sys
2008-11-10 14:09 . 2008-11-10 14:09 <DIR> d-------- c:\program files\GoldWave
2008-11-10 05:43 . 2008-11-10 05:43 <DIR> d--hs---- C:\FOUND.008
2008-11-10 05:41 . 2008-11-10 05:41 <DIR> d--hs---- C:\FOUND.007
2008-11-09 19:15 . 2008-11-09 19:15 <DIR> d-------- c:\program files\K-Lite Codec Pack
2008-11-09 17:59 . 2008-11-09 17:59 <DIR> d-------- c:\program files\Common Files\Adobe
2008-11-08 12:42 . 2008-11-08 12:42 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\Avira
2008-11-08 12:38 . 2008-11-08 12:38 <DIR> d-------- c:\program files\Avira
2008-11-08 12:38 . 2008-05-07 14:20 71,592 --a------ c:\windows\system32\drivers\avfwot.sys
2008-11-08 12:38 . 2008-05-07 10:51 71,464 --a------ c:\windows\system32\drivers\avfwim.sys
2008-11-07 14:02 . 2008-11-07 14:02 <DIR> d-------- c:\program files\Common Files\xing shared
2008-11-07 14:02 . 2008-11-07 14:02 499,712 --a------ c:\windows\system32\msvcp71.dll
2008-11-07 14:00 . 2008-11-07 14:00 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\Media Player Classic
2008-11-07 13:59 . 2008-11-07 14:02 348,160 --a------ c:\windows\system32\msvcr71.dll
2008-11-07 09:37 . 2008-11-07 09:37 <DIR> d--hs---- C:\FOUND.006
2008-11-06 21:38 . 2008-11-06 21:38 <DIR> d--hs---- C:\FOUND.005
2008-11-05 17:28 . 2008-11-05 17:28 <DIR> d-------- c:\program files\Winamp
2008-11-05 17:28 . 2008-11-05 17:28 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\Winamp
2008-11-05 17:25 . 2008-11-05 17:25 <DIR> d--hs---- C:\FOUND.004
2008-11-04 18:16 . 2008-05-09 12:53 512,000 --------- c:\windows\system32\dllcache\jscript.dll
2008-11-04 18:16 . 2008-05-09 12:53 430,080 --------- c:\windows\system32\dllcache\vbscript.dll
2008-11-04 18:16 . 2008-05-09 12:53 180,224 --------- c:\windows\system32\dllcache\scrobj.dll
2008-11-04 18:16 . 2008-05-09 12:53 172,032 --------- c:\windows\system32\dllcache\scrrun.dll
2008-11-04 18:16 . 2008-05-08 13:24 155,648 --------- c:\windows\system32\dllcache\wscript.exe
2008-11-04 18:16 . 2008-05-09 10:45 135,168 --------- c:\windows\system32\dllcache\cscript.exe
2008-11-04 18:16 . 2008-05-09 12:53 90,112 --------- c:\windows\system32\dllcache\wshext.dll
2008-11-04 17:58 . 2008-11-04 17:58 <DIR> d--hs---- C:\FOUND.003
2008-11-04 13:11 . 2008-11-04 13:11 <DIR> d-------- c:\windows\system32\xircom
2008-11-04 13:11 . 2008-11-04 13:11 <DIR> d-------- c:\windows\srchasst
2008-11-04 13:11 . 2008-11-04 13:11 <DIR> d-------- c:\program files\microsoft frontpage
2008-11-04 07:41 . 2008-11-04 07:41 <DIR> d-------- c:\windows\system32\scripting
2008-11-04 07:41 . 2008-11-04 07:41 <DIR> d-------- c:\windows\system32\bits
2008-11-04 07:41 . 2008-11-04 07:41 <DIR> d-------- c:\windows\l2schemas
2008-11-04 07:38 . 2008-11-04 07:38 <DIR> d-------- c:\windows\ServicePackFiles
2008-11-03 23:09 . 2008-04-14 02:12 4,274,816 --------- c:\windows\system32\nv4_disp.dll
2008-11-03 21:20 . 2008-11-03 21:20 <DIR> d--hs---- C:\FOUND.002
2008-11-03 18:19 . 2008-11-10 17:45 196 --a------ c:\windows\CAPTUR~1.INI
2008-11-03 13:45 . 2008-10-03 19:41 6,066,176 --------- c:\windows\system32\dllcache\ieframe.dll
2008-11-03 13:45 . 2007-04-17 11:32 2,455,488 --------- c:\windows\system32\dllcache\ieapfltr.dat
2008-11-03 13:45 . 2007-03-08 07:10 991,232 --------- c:\windows\system32\dllcache\ieframe.dll.mui
2008-11-03 13:45 . 2008-08-26 09:24 459,264 --------- c:\windows\system32\dllcache\msfeeds.dll
2008-11-03 13:45 . 2008-08-26 09:24 383,488 --------- c:\windows\system32\dllcache\ieapfltr.dll
2008-11-03 13:45 . 2008-08-26 09:24 267,776 --------- c:\windows\system32\dllcache\iertutil.dll
2008-11-03 13:45 . 2008-08-26 09:24 63,488 --------- c:\windows\system32\dllcache\icardie.dll
2008-11-03 13:45 . 2008-08-26 09:24 52,224 --------- c:\windows\system32\dllcache\msfeedsbs.dll
2008-11-03 13:45 . 2008-08-25 10:38 13,824 --------- c:\windows\system32\dllcache\ieudinit.exe
2008-11-02 18:04 . 2008-11-02 18:04 <DIR> d-------- C:\Zone Labs
2008-11-02 15:34 . 2008-11-02 15:41 4,212 --ah----- c:\windows\system32\zllictbl.dat
2008-11-02 15:33 . 2008-11-02 15:33 <DIR> d-------- c:\windows\Internet Logs
2008-11-02 10:41 . 2008-11-02 10:41 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\FileDownloader
2008-11-02 10:40 . 2008-11-02 10:40 <DIR> d-------- c:\program files\FDN
2008-11-02 07:35 . 2008-11-02 07:35 <DIR> d-------- c:\program files\Ashampoo
2008-11-01 21:53 . 2008-11-01 21:53 <DIR> d--hs---- C:\FOUND.001
2008-11-01 18:56 . 2008-11-01 18:57 <DIR> d-------- c:\program files\Yahoo!
2008-11-01 14:07 . 2008-11-01 14:07 <DIR> d-------- c:\program files\MSXML 6.0
2008-11-01 14:06 . 2008-11-01 14:06 <DIR> d-------- c:\program files\MSXML 4.0
2008-11-01 14:05 . 2008-11-01 14:05 <DIR> d--h----- c:\windows\$hf_mig$
2008-11-01 14:05 . 2007-08-10 20:46 26,488 --a------ c:\windows\system32\spupdsvc.exe
2008-11-01 14:03 . 2008-11-01 14:03 <DIR> d--hs---- C:\FOUND.000
2008-10-31 22:03 . 2008-08-14 12:11 2,189,184 --------- c:\windows\system32\dllcache\ntoskrnl.exe
2008-10-31 22:03 . 2008-08-14 12:09 2,145,280 --------- c:\windows\system32\dllcache\ntkrnlmp.exe
2008-10-31 22:03 . 2008-07-07 22:26 253,952 --------- c:\windows\system32\dllcache\es.dll
2008-10-31 22:02 . 2008-08-14 11:33 2,066,048 --------- c:\windows\system32\dllcache\ntkrnlpa.exe
2008-10-31 22:02 . 2008-08-14 11:33 2,023,936 --------- c:\windows\system32\dllcache\ntkrpamp.exe
2008-10-31 21:44 . 2008-06-24 18:43 74,240 --------- c:\windows\system32\dllcache\mscms.dll
2008-10-31 21:41 . 2008-05-07 07:12 1,288,192 --------- c:\windows\system32\dllcache\quartz.dll
2008-10-31 21:20 . 2006-12-07 07:29 2,374,472 --------- c:\windows\system32\dllcache\wmvcore.dll
2008-10-31 21:02 . 2008-06-13 13:05 272,128 --------- c:\windows\system32\drivers\bthport.sys
2008-10-31 21:02 . 2008-06-13 13:05 272,128 --------- c:\windows\system32\dllcache\bthport.sys
2008-10-31 20:58 . 2008-08-14 12:04 138,496 --------- c:\windows\system32\dllcache\afd.sys
2008-10-31 20:55 . 2008-09-08 12:41 333,824 --------- c:\windows\system32\dllcache\srv.sys
2008-10-31 20:53 . 2008-09-15 14:12 1,846,400 --------- c:\windows\system32\dllcache\win32k.sys
2008-10-31 20:31 . 2008-05-08 16:02 203,136 --------- c:\windows\system32\dllcache\rmcast.sys
2008-10-31 20:25 . 2008-05-01 16:33 331,776 --------- c:\windows\system32\dllcache\msadce.dll
2008-10-31 20:23 . 2008-04-11 21:04 691,712 --------- c:\windows\system32\dllcache\inetcomm.dll
2008-10-31 20:16 . 2008-10-31 20:16 <DIR> d-------- c:\program files\Real
2008-10-31 20:16 . 2008-10-31 20:16 <DIR> d-------- c:\program files\Common Files\Real
2008-10-31 20:13 . 2008-10-15 18:34 337,408 --------- c:\windows\system32\dllcache\netapi32.dll
2008-10-31 18:35 . 2008-10-31 18:35 <DIR> d--hs---- c:\documents and settings\MoHaNNaD MaKlAD\UserData
2008-10-31 17:15 . 2008-10-31 17:15 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\Thinstall
2008-10-31 16:35 . 2008-10-31 16:35 <DIR> d-------- c:\program files\FormatFactory
2008-10-31 16:35 . 2008-10-31 16:35 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\vlc
2008-10-31 16:34 . 2008-10-31 16:34 <DIR> d-------- c:\program files\VideoLAN
2008-10-31 16:31 . 2008-10-31 16:31 <DIR> d-------- c:\program files\Folder Lock
2008-10-31 16:31 . 2004-05-10 12:42 110,592 --a------ c:\windows\system32\suppdll.dll
2008-10-31 16:31 . 2008-03-09 16:02 81,632 --a------ c:\windows\system32\FLKill.exe
2008-10-31 16:31 . 2008-10-31 16:31 35,363 --a------ c:\windows\system32\windrvNT.sys
2008-10-31 16:10 . 2008-11-13 21:08 231 --a------ c:\windows\wininit.ini
2008-10-31 16:01 . 2008-10-31 16:01 <DIR> d-------- c:\program files\Golden Al-Wafi Translator
2008-10-31 15:38 . 2008-10-31 15:38 <DIR> d-------- c:\program files\Your Uninstaller 2008
2008-10-31 15:38 . 2008-10-31 15:38 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\URSoft
2008-10-31 15:38 . 2008-10-31 15:38 <DIR> d-------- c:\documents and settings\All Users\Application Data\TEMP
2008-10-31 15:37 . 2000-12-08 21:59 122,880 --a------ c:\windows\UnGins.exe
2008-10-31 15:28 . 2008-10-31 15:28 <DIR> d--hs---- C:\Recycled
2008-10-31 14:47 . 2006-12-14 10:44 85,120 -ra------ c:\windows\system32\drivers\Rtnicxp.sys
2008-10-31 14:43 . 2008-10-31 14:43 <DIR> d-------- c:\program files\Internet Download Manager
2008-10-31 14:43 . 2008-10-31 14:43 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\IDM
2008-10-31 14:43 . 2008-10-31 14:43 <DIR> d-------- c:\documents and settings\MoHaNNaD MaKlAD\Application Data\DMCache
2008-10-31 14:43 . 2008-10-31 14:43 0 --a------ c:\windows\nsreg.dat
2008-10-31 14:38 . 2008-10-31 14:38 <DIR> d-------- c:\program files\directx

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-10-24 11:21 455,296 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-09-30 14:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-15 12:12 1,846,400 ----a-w c:\windows\system32\win32k.sys
2008-09-10 01:14 1,307,648 ----a-w c:\windows\system32\msxml6.dll
2008-09-10 01:14 1,307,648 ------w c:\windows\system32\dllcache\msxml6.dll
2008-09-05 21:30 241,704 ------w c:\windows\system32\dllcache\wgaLogon.dll
2008-09-05 21:29 917,032 ------w c:\windows\system32\dllcache\WgaTray.exe
2008-09-04 17:15 1,106,944 ----a-w c:\windows\system32\msxml3.dll
2008-08-27 11:54 3,593,216 ----a-w c:\windows\system32\dllcache\mshtml.dll
2008-08-25 08:38 70,656 ------w c:\windows\system32\dllcache\ie4uinit.exe
2008-08-23 05:56 635,848 ------w c:\windows\system32\dllcache\iexplore.exe
2008-08-23 05:54 161,792 ------w c:\windows\system32\dllcache\ieakui.dll
2008-08-14 10:11 2,189,184 ----a-w c:\windows\system32\ntoskrnl.exe
2008-08-14 09:33 2,066,048 ----a-w c:\windows\system32\ntkrnlpa.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-11-04 2606512]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2008-04-14 1695232]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2008-11-05 4347120]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-02-26 131072]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-02-26 155648]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-02-26 131072]
"WinampAgent"="c:\program files\Winamp\winampa.exe" [2008-08-04 36352]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-11-07 185872]
"avgnt"="c:\program files\Avira\Avira Premium Security Suite\avgnt.exe" [2008-06-12 266497]
"SigmatelSysTrayApp"="sttray.exe" [2007-05-06 c:\windows\sttray.exe]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nlsf"="move" [X]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-03 44544]

c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-11-09 113664]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoSMHelp"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveTrack"= 1 (0x1)
"NoSMHelp"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"vidc.3ivx"= 3ivxVfWCodec.dll
"vidc.3iv2"= 3ivxVfWCodec.dll
"msacm.divxa32"= divxa32.acm
"VIDC.HFYU"= huffyuv.dll
"VIDC.i263"= i263_32.drv
"msacm.imc"= imc32.acm
"VIDC.VP31"= vp31vfw.dll

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=

R1 avfwot;avfwot;c:\windows\system32\DRIVERS\avfwot.sys [2008-05-07 71592]
R2 AntiVirFirewallService;Avira Premium Security Suite Firewall;c:\program files\Avira\Avira Premium Security Suite\avfwsvc.exe [2008-05-16 344321]
R2 AntiVirMailService;Avira Premium Security Suite MailGuard;c:\program files\Avira\Avira Premium Security Suite\avmailc.exe [2008-07-11 164097]
R2 antivirwebservice;Avira Premium Security Suite WebGuard;c:\program files\Avira\Avira Premium Security Suite\AVWEBGRD.EXE [2008-06-12 258305]
R2 AVEService;Avira Premium Security Suite MailGuard helper service;c:\program files\Avira\Avira Premium Security Suite\avesvc.exe [2008-05-09 41217]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\DRIVERS\avfwim.sys [2008-05-07 71464]

*Newly Created Service* - PROCEXP90
.
- - - - ORPHANS REMOVED - - - -

MSConfigStartUp-DLD - c:\program files\Download Direct\DLD.exe


.
------- Supplementary Scan -------
.
FireFox -: Profile - c:\documents and settings\MoHaNNaD MaKlAD\Application Data\Mozilla\Firefox\Profiles\tpjzmfg4.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.com.eg
FF -: plugin - c:\program files\Yahoo!\Shared\npYState.dll
.

**************************************************************************

catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2008-11-13 22:03:14
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...


C:\sccfg.sys 8192 bytes

scan completed successfully
hidden files: 1

**************************************************************************
.
Completion time: 2008-11-13 22:03:53
ComboFix-quarantined-files.txt 2008-11-13 20:03:50

Pre-Run: 7,962,411,008 bytes free
Post-Run: 7,952,179,200 bytes free

267 --- E O F --- 2008-11-12 12:31:50

 

[mohannad maklad]

ايه يا جماعة

 

[السّاجد لله]

الله يكون بعون جهازك مليان فايروسات ؟؟ تابع مع الغالي ديموو
​

 

[mohannad maklad]

الله يكون بعون جهازك مليان فايروسات ؟؟ تابع مع الغالي ديموو
​

خوفتني أنا عندي الافيراااا

 

[السّاجد لله]

لا تخاف اخي الان اعمل تقرير هايجاك


اعمل تقرير للهايجاك

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log
لحظات .. ويظهر لك تقرير اعمل تحديد الكل ==> انسخه والصقه بردك القادم
​

 

[Demo-dashDemo-dash is verified member.]

بالظبط كما قال الغالي هشام ,, جهازك فيه اصابات ,,

استخدم اداه الكاسبر وارق لنا تقريرها

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

​

 

[mohannad maklad]

اعمل ايه يا جماعة

 

[Demo-dashDemo-dash is verified member.]

اعمل ايه يا جماعة

بسيطه ان شاء الله

انت اعمل تقرير هاي جاك اول مثل ماقال الغالي هشام وبعد كذا اعمل فحص بجهاز باداه الكاسبر

 

[mohannad maklad]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:17, on 11/13/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\Avira Premium Security Suite\sched.exe
C:\WINDOWS\sttray.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Winamp\winampa.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Avira\Avira Premium Security Suite\avguard.exe
C:\Program Files\Avira\Avira Premium Security Suite\avesvc.exe
C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\Avira Premium Security Suite\avmailc.exe
C:\Program Files\Avira\Avira Premium Security Suite\AVWEBGRD.EXE
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\WINDOWS\system32\taskmgr.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Winamp\winamp.exe
C:\Program Files\Avira\Avira Premium Security Suite\avscan.exe
C:\Documents and Settings\MoHaNNaD MaKlAD\My Documents\Downloads\Programs\Zyzoom_HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O4 - HKLM\..\Run: [SigmatelSysTrayApp] sttray.exe
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\Avira Premium Security Suite\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [nlsf] cmd.exe /C move /Y "%SystemRoot%\System32\syssetub.dll" "%SystemRoot%\System32\syssetup.dll" (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O23 - Service: Avira Premium Security Suite Firewall (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\Avira Premium Security Suite\avfwsvc.exe
O23 - Service: Avira Premium Security Suite MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\Avira Premium Security Suite\avmailc.exe
O23 - Service: Avira Premium Security Suite Scheduler (AntiVirScheduler) - Avira GmbH - C:\Program Files\Avira\Avira Premium Security Suite\sched.exe
O23 - Service: Avira Premium Security Suite Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\Avira Premium Security Suite\avguard.exe
O23 - Service: Avira Premium Security Suite WebGuard (antivirwebservice) - Avira GmbH - C:\Program Files\Avira\Avira Premium Security Suite\AVWEBGRD.EXE
O23 - Service: Avira Premium Security Suite MailGuard helper service (AVEService) - Avira GmbH - C:\Program Files\Avira\Avira Premium Security Suite\avesvc.exe
O23 - Service: SigmaTel Audio Service (STacSV) - SigmaTel, Inc. - C:\Program Files\SigmaTel\C-Major Audio\WDM\STacSV.exe

--
End of file - 6057 bytes

 

[mohannad maklad]

وبعدييييييين

 

[السّاجد لله]

بالظبط كما قال الغالي هشام ,, جهازك فيه اصابات ,,

استخدم اداه الكاسبر وارق لنا تقريرها

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

​

معذرة اخي الحبيب لم ارى ردك الكريم :king:
​

 

[Demo-dashDemo-dash is verified member.]

معذرة اخي الحبيب لم ارى ردك الكريم :king:
​

مايبغالها شي اخويه هشام ,, :king:
كلنا واحد k:

 

[السّاجد لله]

بس صبرك علينا
​