- بادئ الموضوع البرازي
- تاريخ البدء
- 957
dяăģôŋ
ذيبان
غير متصل
عطل برامج الحمايه
حمل هذه الاداة واحفظها على سطح المكتب
عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم
--------------------------------------------
( 2 )
واعمل تقرير للهايجاك
اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log
لحظات ويظهر لك تقرير ,, انسخه والصقه بردك القادم
حمل هذه الاداة واحفظها على سطح المكتب
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم
--------------------------------------------
( 2 )
واعمل تقرير للهايجاك
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log
لحظات ويظهر لك تقرير ,, انسخه والصقه بردك القادم
تأييد
0
المنتصر بإذن الله
زيزوومى مبدع
غير متصل
أخي حطلنا صور عشان نفهم الطريقة
توقيع : المنتصر بإذن الله
تأييد
0
البرازي
زيزوومي جديد
غير متصل
ComboFix 08-11-17.06 - user 11/18/2008 21:31:40.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.166 [GMT 3:00]
Running from: c:\documents and settings\user\سطح المكتب\ComboFix.exe
* Created a new restore point
* Resident AV is active
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\kakle.dll
.
((((((((((((((((((((((((( Files Created from 2008-10-18 to 2008-11-18 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-18 05:49 --------- d-----w c:\program files\Real_SC
2008-11-18 05:41 --------- d-----w c:\program files\Circle Developement
2008-11-12 20:09 --------- d-----w c:\program files\FWT Wireless Connect
2008-11-12 08:21 --------- d-----w c:\program files\DIFX
2008-11-12 08:21 --------- d-----w c:\program files\Common Files\PCSuite
2008-11-12 08:21 --------- d-----w c:\program files\Common Files\Nokia
2008-11-12 08:21 --------- d-----w c:\documents and settings\All Users\Application Data\PC Suite
2008-11-12 08:20 --------- d-----w c:\program files\Nokia
2008-11-12 08:20 --------- d-----w c:\documents and settings\user\Application Data\PC Suite
2008-11-11 15:39 --------- d-----w c:\program files\Common Files\Adobe
2008-11-11 15:36 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-11 15:18 --------- d-----w c:\program files\Microsoft.NET
2008-11-11 15:17 --------- d-----w c:\program files\Microsoft Works
2008-11-11 15:13 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2008-11-11 15:09 --------- d-----w c:\program files\ESET
2008-11-11 15:09 --------- d-----w c:\program files\Common Files\Ahead
2008-11-11 15:09 --------- d-----w c:\documents and settings\All Users\Application Data\ESET
2008-11-11 15:01 --------- d-----w c:\documents and settings\user\Application Data\Ahead
2008-11-11 14:59 --------- d-----w c:\program files\Nero
2008-11-11 14:57 155,995 ----a-w c:\windows\java\Packages\M4C5JPZ7.ZIP
2008-11-11 14:54 90,112 ----a-w c:\windows\system32\agsaami.dll
2008-11-11 14:54 73,216 ----a-w c:\windows\ST6UNST.EXE
2008-11-11 14:54 610,304 ----a-w c:\windows\system32\agsaamg.dll
2008-11-11 14:54 372,736 ----a-w c:\windows\system32\agsaamc.dll
2008-11-11 14:54 2,535,424 ----a-w c:\windows\system32\agsaamj.dll
2008-11-11 14:54 196,608 ----a-w c:\windows\system32\maag.dll
2008-11-11 14:54 172,032 ------w c:\windows\Setup1.exe
2008-11-11 14:54 1,986,560 ----a-w c:\windows\system32\akll.dll
2008-11-11 14:54 1,245,184 ----a-w c:\windows\system32\bkll.dll
2008-11-11 14:54 1,212,416 ----a-w c:\windows\system32\ckll.dll
2008-11-11 14:54 --------- d-----w c:\program files\Golden Al-Wafi Translator
2008-11-11 14:53 --------- d-----w c:\program files\Common Files\ACD Systems
2008-11-11 14:53 --------- d-----w c:\documents and settings\user\Application Data\ACD Systems
2008-11-11 14:52 --------- d-----w c:\program files\ACD Systems
2008-11-11 14:52 --------- d-----w c:\documents and settings\All Users\Application Data\ACD Systems
2008-11-11 14:51 --------- d-----w c:\program files\The KMPlayer
2008-11-11 14:50 --------- d-----w c:\documents and settings\user\Application Data\vlc
2008-11-11 14:27 --------- d-----w c:\program files\VideoLAN
2008-11-11 14:26 --------- d-----w c:\program files\Common Files\xing shared
2008-11-11 14:26 --------- d-----w c:\documents and settings\user\Application Data\BSplayer
2008-11-11 14:25 --------- d-----w c:\program files\Webteh
2008-11-11 14:25 --------- d-----w c:\program files\K-Lite Codec Pack
2008-11-11 14:25 --------- d-----w c:\program files\Common Files\Real
2008-11-11 14:25 --------- d-----w c:\program files\BS.Player ControlBar
2008-11-11 14:25 --------- d-----w c:\documents and settings\user\Application Data\BSplayer Pro
2008-11-11 14:24 499,712 ----a-w c:\windows\system32\msvcp71.dll
2008-11-11 14:24 348,160 ----a-w c:\windows\system32\msvcr71.dll
2008-11-11 14:24 --------- d-----w c:\program files\Winamp
2008-11-11 14:24 --------- d-----w c:\program files\Real
2008-11-11 14:24 --------- d-----w c:\documents and settings\user\Application Data\GRETECH
2008-11-11 14:24 --------- d-----w c:\documents and settings\All Users\Application Data\GRETECH
2008-11-11 14:23 --------- d-----w c:\program files\GRETECH
2008-11-11 14:22 47,104 ------w c:\windows\AKDeInstall.exe
2008-11-11 14:22 --------- d-----w c:\program files\mpegable
2008-11-11 14:22 --------- d-----w c:\program files\JetAudio
2008-11-11 14:21 --------- d-----w c:\program files\DivX
2008-11-11 14:19 --------- d-----w c:\program files\Messenger Plus! Live
2008-11-11 14:18 --------- d-----w c:\program files\Windows Live
2008-11-11 14:17 --------- d-----w c:\program files\Skype
2008-11-11 14:17 --------- d-----w c:\program files\Common Files\Skype
2008-11-11 14:17 --------- d-----w c:\documents and settings\user\Application Data\Skype
2008-11-11 14:17 --------- d-----w c:\documents and settings\All Users\Application Data\Skype
2008-11-11 14:15 --------- d-----w c:\program files\Yahoo!
2008-11-11 14:15 --------- d-----w c:\program files\Paltalk Messenger
2008-11-11 14:15 --------- d-----w c:\documents and settings\user\Application Data\Paltalk
2008-11-11 14:15 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo!
2008-11-11 14:10 --------- d-----w c:\program files\Launch Manager
2008-11-11 14:07 --------- d-----w c:\program files\WIDCOMM
2008-11-11 14:04 --------- d-----w c:\program files\Common Files\InstallShield
2008-11-11 14:03 --------- d-----w c:\program files\Synaptics
2008-11-11 14:01 --------- d-----w c:\program files\Realtek
2008-11-11 13:59 --------- d-----w c:\program files\Intel
2008-11-11 13:46 --------- d-----w c:\program files\microsoft frontpage
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [08/04/2004 12:56 AM 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [08/16/2007 04:19 PM 5728112]
"PcSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [06/27/2006 04:21 PM 1449984]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="c:\windows\system32\igfxtray.exe" [11/28/2005 02:55 PM 98304]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [11/28/2005 02:52 PM 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [11/28/2005 02:55 PM 118784]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [08/25/2005 03:21 PM 53248]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [01/08/2005 08:17 AM 102491]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [01/08/2005 08:16 AM 692315]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [03/30/2006 02:56 PM 471040]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [11/11/2008 05:24 PM 185896]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [12/21/2007 08:21 AM 1443072]
"PCSuiteTrayApplication"="c:\progra~1\Nokia\NOKIAP~1\LAUNCH~1.EXE" [06/15/2006 12:36 PM 229376]
"RTHDCPL"="RTHDCPL.EXE" [02/27/2006 06:28 PM 16005120 c:\windows\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [03/16/2006 06:24 PM 88204 c:\windows\AGRSMMSG.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [08/04/2004 12:56 AM 15360]
c:\documents and settings\All Users\çںê، ں §ڑ\ںé ©ںê¤\ §ک ں颬نïé\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-11-11 113664]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-01-05 618557]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm
"VIDC.ACDV"= ACDV.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^PalTalk.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\PalTalk.lnk
backup=c:\windows\pss\PalTalk.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^WinZip Quick Pick.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\WinZip Quick Pick.lnk
backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 01/12/2006 03:40 PM 155648 c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 05/30/2008 03:54 PM 21718312 c:\program files\Skype\Phone\Skype.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 03/10/2006 08:45 PM 35328 c:\program files\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
--a------ 01/19/2007 12:49 PM 4670968 c:\program files\Yahoo!\Messenger\YahooMessenger.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
R1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R3 lv321av;Logitech USB PC Camera (VC0321);c:\windows\system32\Drivers\lv321av.sys [2008-11-11 1088896]
*Newly Created Service* - PROCEXP90
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.com.sa/
IE: &تصدير إلى Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O16 -: Microsoft XML Parser for Java -
c:\windows\Downloaded Program Files\Microsoft XML Parser for Java.osd
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2008-11-18 21:33:42
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 11/18/2008 21:34:19
ComboFix-quarantined-files.txt 2008-11-18 18:34:15
Pre-Run: 15,429,804,032 bytes free
Post-Run: 15,885,008,896 bytes free
177
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.166 [GMT 3:00]
Running from: c:\documents and settings\user\سطح المكتب\ComboFix.exe
* Created a new restore point
* Resident AV is active
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\kakle.dll
.
((((((((((((((((((((((((( Files Created from 2008-10-18 to 2008-11-18 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-18 05:49 --------- d-----w c:\program files\Real_SC
2008-11-18 05:41 --------- d-----w c:\program files\Circle Developement
2008-11-12 20:09 --------- d-----w c:\program files\FWT Wireless Connect
2008-11-12 08:21 --------- d-----w c:\program files\DIFX
2008-11-12 08:21 --------- d-----w c:\program files\Common Files\PCSuite
2008-11-12 08:21 --------- d-----w c:\program files\Common Files\Nokia
2008-11-12 08:21 --------- d-----w c:\documents and settings\All Users\Application Data\PC Suite
2008-11-12 08:20 --------- d-----w c:\program files\Nokia
2008-11-12 08:20 --------- d-----w c:\documents and settings\user\Application Data\PC Suite
2008-11-11 15:39 --------- d-----w c:\program files\Common Files\Adobe
2008-11-11 15:36 --------- d--h--w c:\program files\InstallShield Installation Information
2008-11-11 15:18 --------- d-----w c:\program files\Microsoft.NET
2008-11-11 15:17 --------- d-----w c:\program files\Microsoft Works
2008-11-11 15:13 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2008-11-11 15:09 --------- d-----w c:\program files\ESET
2008-11-11 15:09 --------- d-----w c:\program files\Common Files\Ahead
2008-11-11 15:09 --------- d-----w c:\documents and settings\All Users\Application Data\ESET
2008-11-11 15:01 --------- d-----w c:\documents and settings\user\Application Data\Ahead
2008-11-11 14:59 --------- d-----w c:\program files\Nero
2008-11-11 14:57 155,995 ----a-w c:\windows\java\Packages\M4C5JPZ7.ZIP
2008-11-11 14:54 90,112 ----a-w c:\windows\system32\agsaami.dll
2008-11-11 14:54 73,216 ----a-w c:\windows\ST6UNST.EXE
2008-11-11 14:54 610,304 ----a-w c:\windows\system32\agsaamg.dll
2008-11-11 14:54 372,736 ----a-w c:\windows\system32\agsaamc.dll
2008-11-11 14:54 2,535,424 ----a-w c:\windows\system32\agsaamj.dll
2008-11-11 14:54 196,608 ----a-w c:\windows\system32\maag.dll
2008-11-11 14:54 172,032 ------w c:\windows\Setup1.exe
2008-11-11 14:54 1,986,560 ----a-w c:\windows\system32\akll.dll
2008-11-11 14:54 1,245,184 ----a-w c:\windows\system32\bkll.dll
2008-11-11 14:54 1,212,416 ----a-w c:\windows\system32\ckll.dll
2008-11-11 14:54 --------- d-----w c:\program files\Golden Al-Wafi Translator
2008-11-11 14:53 --------- d-----w c:\program files\Common Files\ACD Systems
2008-11-11 14:53 --------- d-----w c:\documents and settings\user\Application Data\ACD Systems
2008-11-11 14:52 --------- d-----w c:\program files\ACD Systems
2008-11-11 14:52 --------- d-----w c:\documents and settings\All Users\Application Data\ACD Systems
2008-11-11 14:51 --------- d-----w c:\program files\The KMPlayer
2008-11-11 14:50 --------- d-----w c:\documents and settings\user\Application Data\vlc
2008-11-11 14:27 --------- d-----w c:\program files\VideoLAN
2008-11-11 14:26 --------- d-----w c:\program files\Common Files\xing shared
2008-11-11 14:26 --------- d-----w c:\documents and settings\user\Application Data\BSplayer
2008-11-11 14:25 --------- d-----w c:\program files\Webteh
2008-11-11 14:25 --------- d-----w c:\program files\K-Lite Codec Pack
2008-11-11 14:25 --------- d-----w c:\program files\Common Files\Real
2008-11-11 14:25 --------- d-----w c:\program files\BS.Player ControlBar
2008-11-11 14:25 --------- d-----w c:\documents and settings\user\Application Data\BSplayer Pro
2008-11-11 14:24 499,712 ----a-w c:\windows\system32\msvcp71.dll
2008-11-11 14:24 348,160 ----a-w c:\windows\system32\msvcr71.dll
2008-11-11 14:24 --------- d-----w c:\program files\Winamp
2008-11-11 14:24 --------- d-----w c:\program files\Real
2008-11-11 14:24 --------- d-----w c:\documents and settings\user\Application Data\GRETECH
2008-11-11 14:24 --------- d-----w c:\documents and settings\All Users\Application Data\GRETECH
2008-11-11 14:23 --------- d-----w c:\program files\GRETECH
2008-11-11 14:22 47,104 ------w c:\windows\AKDeInstall.exe
2008-11-11 14:22 --------- d-----w c:\program files\mpegable
2008-11-11 14:22 --------- d-----w c:\program files\JetAudio
2008-11-11 14:21 --------- d-----w c:\program files\DivX
2008-11-11 14:19 --------- d-----w c:\program files\Messenger Plus! Live
2008-11-11 14:18 --------- d-----w c:\program files\Windows Live
2008-11-11 14:17 --------- d-----w c:\program files\Skype
2008-11-11 14:17 --------- d-----w c:\program files\Common Files\Skype
2008-11-11 14:17 --------- d-----w c:\documents and settings\user\Application Data\Skype
2008-11-11 14:17 --------- d-----w c:\documents and settings\All Users\Application Data\Skype
2008-11-11 14:15 --------- d-----w c:\program files\Yahoo!
2008-11-11 14:15 --------- d-----w c:\program files\Paltalk Messenger
2008-11-11 14:15 --------- d-----w c:\documents and settings\user\Application Data\Paltalk
2008-11-11 14:15 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo!
2008-11-11 14:10 --------- d-----w c:\program files\Launch Manager
2008-11-11 14:07 --------- d-----w c:\program files\WIDCOMM
2008-11-11 14:04 --------- d-----w c:\program files\Common Files\InstallShield
2008-11-11 14:03 --------- d-----w c:\program files\Synaptics
2008-11-11 14:01 --------- d-----w c:\program files\Realtek
2008-11-11 13:59 --------- d-----w c:\program files\Intel
2008-11-11 13:46 --------- d-----w c:\program files\microsoft frontpage
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [08/04/2004 12:56 AM 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [08/16/2007 04:19 PM 5728112]
"PcSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [06/27/2006 04:21 PM 1449984]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"igfxtray"="c:\windows\system32\igfxtray.exe" [11/28/2005 02:55 PM 98304]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [11/28/2005 02:52 PM 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [11/28/2005 02:55 PM 118784]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [08/25/2005 03:21 PM 53248]
"SynTPLpr"="c:\program files\Synaptics\SynTP\SynTPLpr.exe" [01/08/2005 08:17 AM 102491]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [01/08/2005 08:16 AM 692315]
"LManager"="c:\progra~1\LAUNCH~1\QtZgAcer.EXE" [03/30/2006 02:56 PM 471040]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [11/11/2008 05:24 PM 185896]
"egui"="c:\program files\ESET\ESET NOD32 Antivirus\egui.exe" [12/21/2007 08:21 AM 1443072]
"PCSuiteTrayApplication"="c:\progra~1\Nokia\NOKIAP~1\LAUNCH~1.EXE" [06/15/2006 12:36 PM 229376]
"RTHDCPL"="RTHDCPL.EXE" [02/27/2006 06:28 PM 16005120 c:\windows\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [03/16/2006 06:24 PM 88204 c:\windows\AGRSMMSG.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [08/04/2004 12:56 AM 15360]
c:\documents and settings\All Users\çںê، ں §ڑ\ںé ©ںê¤\ §ک ں颬نïé\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2008-11-11 113664]
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-01-05 618557]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm
"VIDC.ACDV"= ACDV.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^PalTalk.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\PalTalk.lnk
backup=c:\windows\pss\PalTalk.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^WinZip Quick Pick.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\WinZip Quick Pick.lnk
backup=c:\windows\pss\WinZip Quick Pick.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 01/12/2006 03:40 PM 155648 c:\program files\Common Files\Ahead\Lib\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
-ra------ 05/30/2008 03:54 PM 21718312 c:\program files\Skype\Phone\Skype.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
--a------ 03/10/2006 08:45 PM 35328 c:\program files\Winamp\winampa.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
--a------ 01/19/2007 12:49 PM 4670968 c:\program files\Yahoo!\Messenger\YahooMessenger.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
R1 epfwtdir;epfwtdir;c:\windows\system32\DRIVERS\epfwtdir.sys [2007-12-21 33800]
R3 lv321av;Logitech USB PC Camera (VC0321);c:\windows\system32\Drivers\lv321av.sys [2008-11-11 1088896]
*Newly Created Service* - PROCEXP90
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://google.com.sa/
IE: &تصدير إلى Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O16 -: Microsoft XML Parser for Java -
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
c:\windows\Downloaded Program Files\Microsoft XML Parser for Java.osd
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
Rootkit scan 2008-11-18 21:33:42
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 11/18/2008 21:34:19
ComboFix-quarantined-files.txt 2008-11-18 18:34:15
Pre-Run: 15,429,804,032 bytes free
Post-Run: 15,885,008,896 bytes free
177
تأييد
0
البرازي
زيزوومي جديد
غير متصل
هذا تقرير الهايجاك
Logfile of HijackThis v1.99.1
Scan saved at 11:18:20 ص, on 19/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Common Files\PCSuite\Services\NclBTHandler.exe
C:\Program Files\Nokia\Nokia PC Suite 6\OneTouchAccess.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\user\سطح المكتب\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 ME\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O17 - HKLM\System\CCS\Services\Tcpip\..\{FC6565E9-96AF-4CC7-95F1-3AA750BA4A16}: NameServer = 84.235.114.209 84.235.114.197
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
Logfile of HijackThis v1.99.1
Scan saved at 11:18:20 ص, on 19/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\AGRSMMSG.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Common Files\PCSuite\Services\NclBTHandler.exe
C:\Program Files\Nokia\Nokia PC Suite 6\OneTouchAccess.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\user\سطح المكتب\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0 ME\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Program Files\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O17 - HKLM\System\CCS\Services\Tcpip\..\{FC6565E9-96AF-4CC7-95F1-3AA750BA4A16}: NameServer = 84.235.114.209 84.235.114.197
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: igfxcui - C:\WINDOWS\SYSTEM32\igfxdev.dll
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
تأييد
0
dяăģôŋ
ذيبان
غير متصل
ارجو ان تكون المشكله انتهت
هناك ملاحظات
برنامج النود اما معطوب او معطل اثناء اخذ التقرير قم بستبداله ببرنامج حمايه اخر
وجدار الحمايه مغلق اعد تشغيله
...............................................
حدد القيم التاليه
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{FC6565E9-96AF-4CC7-95F1-3AA750BA4A16}: NameServer =
طريقة الحذف
ثم نزل هذه الاداة واتبع الشرح التالي
هناك ملاحظات
برنامج النود اما معطوب او معطل اثناء اخذ التقرير قم بستبداله ببرنامج حمايه اخر
وجدار الحمايه مغلق اعد تشغيله
...............................................
حدد القيم التاليه
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O3 - Toolbar: BS.Player ControlBar - {2C688203-7EB3-4327-9995-1CB417BA23F9} - C:\Program Files\BS.Player ControlBar\BSToolbar.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{FC6565E9-96AF-4CC7-95F1-3AA750BA4A16}: NameServer =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
طريقة الحذف
ثم نزل هذه الاداة واتبع الشرح التالي
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
التوافق : ويندوز اكسبي فقط
شرح الاستخدام ,,,,,,
عند تشغيل ملف الاداة تظهر لك هذه الشاشه ,, انتظر ( وتابع مع الصور )
وعند ظهور هذه الشاشه ,, اضغط على Close ليتم اعادة تشغيل جهازك (( لتكملة عملية التنظيف ))
بنتظار النتائج
التعديل الأخير بواسطة المشرف:
تأييد
0
ياخيو استخدم الكاسبر الاصدار السابع او الثامن 2009
وهذي روابط التحميل
وبالتوفيق للجميع
وهذي روابط التحميل
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
وبالتوفيق للجميع
تأييد
0