اخواني ساعدوني : رسالة خطاء مزعجه اتعبتني ::

المصدر: اخواني ساعدوني : رسالة خطاء مزعجه اتعبتني ::
في منتدى : منتدى مشاكـل وحلول الحـاسب

أنا عندي رسالة خطأ لها كم يوم تطلع ولاعبة بالجهاز لعب

ولما اتصفح بالأنترنت أكسبلورر وافتح أكثر من نافذة تطلع الرسالة وتتقفل النوافذ كلها

وهذه رسالة الخطأ



أتمنى المساعدة

أخـــوكم mr.smart​

 

عذرا بتعديل الموضوع ونقله للقسم المناسب

اخي افحص جهازك من ملفات السباي وير

وكذالك احذف الملفات المؤقته والملفات المحفوظه


@ بالتوفيق @

 

عملت فحص عن طريق الـ AVG Anti-Spyware

وطلع لي هذا التقرير

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 07:55:07 م 17/11/1428
+ Scan result:

:mozilla.135:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.2o7 : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@msnaccountservices.112.2o7[1].txt -> Tracking.2o7 : Cleaned.
C:\Documents and Settings\new\s\new@2o7[2].txt -> Tracking.2o7 : Cleaned.
:mozilla.145:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Adbrite : Cleaned.
:mozilla.158:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Adbrite : Cleaned.
C:\Documents and Settings\new\s\new@adbrite[2].txt -> Tracking.Adbrite : Cleaned.
:mozilla.137:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Atdmt : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@atdmt[2].txt -> Tracking.Atdmt : Cleaned.
C:\Documents and Settings\new\s\new@atdmt[2].txt -> Tracking.Atdmt : Cleaned.
:mozilla.132:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Doubleclick : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@doubleclick[1].txt -> Tracking.Doubleclick : Cleaned.
C:\Documents and Settings\new\s\new@doubleclick[2].txt -> Tracking.Doubleclick : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@fastclick[1].txt -> Tracking.Fastclick : Cleaned.
:mozilla.86:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Information : Cleaned.
:mozilla.87:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Information : Cleaned.
:mozilla.88:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Information : Cleaned.
C:\Documents and Settings\new\s\new@searchportal.information[1].txt -> Tracking.Information : Cleaned.
:mozilla.134:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Liveperson : Cleaned.
:mozilla.35:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Liveperson : Cleaned.
:mozilla.36:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Liveperson : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@server.iad.liveperson[1].txt -> Tracking.Liveperson : Cleaned.
C:\Documents and Settings\new\s\new@server.iad.liveperson[1].txt -> Tracking.Liveperson : Cleaned.
:mozilla.133:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Msn : Cleaned.
:mozilla.142:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Msn : Cleaned.
:mozilla.143:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Msn : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@auto.search.msn[1].txt -> Tracking.Msn : Cleaned.
C:\Documents and Settings\new\s\new@auto.search.msn[2].txt -> Tracking.Msn : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@ssl-hints.netflame[1].txt -> Tracking.Netflame : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@questionmarket[2].txt -> Tracking.Questionmarket : Cleaned.
:mozilla.115:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Real : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@guide.real[2].txt -> Tracking.Real : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@messagesignup.real[1].txt -> Tracking.Real : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@real[2].txt -> Tracking.Real : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@show.real[2].txt -> Tracking.Real : Cleaned.
C:\Documents and Settings\new\s\new@real[1].txt -> Tracking.Real : Cleaned.
:mozilla.33:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Skype : Cleaned.
:mozilla.46:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Skype : Cleaned.
:mozilla.47:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Skype : Cleaned.
:mozilla.48:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Skype : Cleaned.
:mozilla.49:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Skype : Cleaned.
:mozilla.74:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@news.skype[1].txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@site.skype[1].txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@skype[2].txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\Guest\s\guest@site.skype[1].txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\Guest\s\guest@skype[1].txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\new\s\new@news.skype[1].txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\new\s\new@site.skype[1].txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\new\s\new@skype[1].txt -> Tracking.Skype : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@spinbox[2].txt -> Tracking.Spinbox : Cleaned.
:mozilla.37:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Statcounter : Cleaned.
:mozilla.41:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Statcounter : Cleaned.
C:\Documents and Settings\new\s\new@statcounter[1].txt -> Tracking.Statcounter : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@weborama[1].txt -> Tracking.Weborama : Cleaned.
:mozilla.34:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Webtrends : Cleaned.
C:\Documents and Settings\new\s\new@m.webtrends[2].txt -> Tracking.Webtrends : Cleaned.
:mozilla.152:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Yieldmanager : Cleaned.
:mozilla.153:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Yieldmanager : Cleaned.
:mozilla.154:C:\Documents and Settings\new\Application Data\Mozilla\Firefox\Profiles\yhpbubmk.default\s.txt -> Tracking.Yieldmanager : Cleaned.
C:\Documents and Settings\Administrator\s\administrator@ad.yieldmanager[1].txt -> Tracking.Yieldmanager : Cleaned.
C:\Documents and Settings\new\s\new@ad.yieldmanager[1].txt -> Tracking.Yieldmanager : Cleaned.

::Report end
​

 

اخي العزيز
التقرير كان يحتوي على ملفات كوكيز وباتشات وقد تم حذفها
لا هنت اعمل تقرير ثاني عشان نتأكد انها حذفت بشكل كامل لان كميتها كانت كثيرة

واذا خلصت

حمل هذا البرنامج
http://www.zyzoom.net/soft/security/...HijackThis.exe
اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log
لحظات .. ويظهر لك تقرير ==> انسخه والصقه بردك القادم​

 

وهذا تقريري ​

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:22:09 م, on 26/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
D:\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Program Files\Creative\Shared Files\CTSched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Hotspot Shield\AnchorFree\ctrl\AFController.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\.IE5\2HH6JU1W\Zyzoom_HijackThis[1].exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\BitComet\tools\BitCometBHO_1.1.7.4.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
O2 - BHO: CEventSink Class - {B7154C4D-87C0-4A2C-AB64-DA132BAC2EE6} - D:\Hotspot Shield\AnchorFree\ie\AFBho.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Shortcut] "C:\Program Files\CyberLink\PowerDVD\\.exe"
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
O4 - HKLM\..\Run: [AVP] "c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AFProg] D:\Hotspot Shield\AnchorFree\ctrl\AFController.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [IETI] C:\Program Files\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [IETI] C:\Program Files\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Global Startup: سرعة تشغيل Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://D:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://D:\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://D:\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: ShaPlus Google Translator - res://C:\Program Files\ShaPlus Google Translator\GoogleTranslator.dll/ie.htm
O8 - Extra context menu item: إضافة إلى مضاد الشعارات - c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - D:\BitComet\tools\BitCometBHO_1.1.7.4.dll
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://qtr8.talkok.com/imscp/talka.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - D:\Hotspot Shield\bin\openvpnas.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
--
End of file - 10464 bytes​

 

اخي الكريم حدد القيم التالية واحذفها

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar2.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\sw g.dll

O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar2.dll

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll

طريقة الحذف




بعدها اذهب الى اضافة وازالة البرامج واحذف كل التولبار الموجود (toolbar)
وايضاً اذا فيه برامج بحث مثل الياهو يفضل حذفها
ثم نزل هالاداة لتنظيف الجهاز من الملفات المؤقتة

http://www.zshare.net/download/48163439400cce/

طريقة الحذف



ثم اعد تشغيل الجهاز وارفع تقرير ثاني

 

وهــذا التقرير الثاني

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:28:51 م, on 26/11/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\WLTRYSVC.EXE
C:\WINDOWS\System32\bcmwltry.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
D:\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\WINDOWS\system32\WLTRAY.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Creative\Shared Files\CTSched.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
C:\WINDOWS\system32\ctfmon.exe
D:\Hotspot Shield\AnchorFree\ctrl\AFController.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\WinZip\WZQKPICK.EXE
C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
C:\PROGRA~1\WIDCOMM\BLUETO~1\BTSTAC~1.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\.IE5\GXMN45QN\Zyzoom_HijackThis[1].exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.yahoo.com/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://us.rd.yahoo.com/customize/ie/defaults/sb/msgr8/*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://us.rd.yahoo.com/customize/ie/defaults/sp/msgr8/*http://www.yahoo.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.com/
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - D:\BitComet\tools\BitCometBHO_1.1.7.4.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: CEventSink Class - {B7154C4D-87C0-4A2C-AB64-DA132BAC2EE6} - D:\Hotspot Shield\AnchorFree\ie\AFBho.dll
O4 - HKLM\..\Run: [Broadcom Wireless Manager UI] C:\WINDOWS\system32\WLTRAY.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Program Files\Java\jre1.5.0_06\bin\jusched.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [Shortcut] "C:\Program Files\CyberLink\PowerDVD\\.exe"
O4 - HKLM\..\Run: [CreativeTaskScheduler] "C:\Program Files\Creative\Shared Files\CTSched.exe" /logon
O4 - HKLM\..\Run: [AVP] "c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [YSearchProtection] "C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [AFProg] D:\Hotspot Shield\AnchorFree\ctrl\AFController.exe
O4 - HKCU\..\Run: [YSearchProtection] C:\Program Files\Yahoo!\Search Protection\SearchProtection.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [IETI] C:\Program Files\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [IETI] C:\Program Files\Skype\Phone\IEPlugin\unins000.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZQKPICK.EXE
O4 - Global Startup: سرعة تشغيل Adobe Reader.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: &D&ownload &with BitComet - res://D:\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://D:\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://D:\BitComet\BitComet.exe/AddAllLink.htm
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: ShaPlus Google Translator - res://C:\Program Files\ShaPlus Google Translator\GoogleTranslator.dll/ie.htm
O8 - Extra context menu item: إضافة إلى مضاد الشعارات - c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: BitComet Search - {461CC20B-FB6E-4f16-8FE8-C29359DB100E} - D:\BitComet\tools\BitCometBHO_1.1.7.4.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Internet Cleaner - {45819E58-6E84-4A5D-BD65-A706981E5BE8} - C:\Documents and Settings\Administrator\سطح المكتب\ICleaner.exe (HKCU)
O9 - Extra 'Tools' menuitem: Internet Cleaner - {45819E58-6E84-4A5D-BD65-A706981E5BE8} - C:\Documents and Settings\Administrator\سطح المكتب\ICleaner.exe (HKCU)
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/eng/partner/default/kavwebscan_unicode.cab
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://qtr8.talkok.com/imscp/talka.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - c:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: GoogleDesktopManager - Google - C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - D:\Hotspot Shield\bin\openvpnas.exe
O23 - Service: NICCONFIGSVC - Dell Inc. - C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Dell Wireless WLAN Tray Service (wltrysvc) - Unknown owner - C:\WINDOWS\System32\WLTRYSVC.EXE
--
End of file - 9383 bytes
​

 

عزيزي

احذف هذين البرنامجين من عندك لانها مخله بعمل النظام لديك
1- Hotspot Shield
2- تلوبار ياهو

وشوف هل تظهر لديك الرساله من جديد ؟!

 

أخــي SUL6AN

يعطيكـ العافية على المجهود الرائع منكـ

وأول ما تطلع لي الرسالة بعطيكـ خبر

جـزاكـ الله خير وما قصرت يالغالي​

 

أخــي الرائع شسويله بعد

يعطيكـ ألف عافية وما قصرت

جزاكـ الله خير يالغالي​

 

"mr.smart"
الحمد لله على السلاامه :tongue:


نور & ابوفيصل
فديتكم ​

 

الله يسلمك زبزووم

اخــوي SUL6AN

شسويله بعد

طلعت نفس الرسالة

وفي رسالة ثانية بعد الي هي

( صادف iexplore.exe مشكلة ويجب أغلاقه )

مـــاهــــو الــحـــل ؟؟؟​

 

طيب شوف هذا الموضوع يمكن يفيدك

كل الطرق لإصلاح Internet Explorer شرح بالصور ,,،،,,

 

جربت الأداة الأخيرة الي هــي IEFIX V1.5

لكــن لما أضغط على Apply تطلع الرسالة التالية

يطلب مني اكتب المسار الموجود عليه ملف انترنت اكسبلورر

ويااريت لو تكتب لي الأمر الي اكتبه بـ Run يقلب الويندوز أصلــي

وش رأيك لو امسح الأنترنت اكسبلورر وانزله من جديد ؟؟؟؟؟؟

يعطيكـ العافية يالغالي شسويله بعد ...

​

 

اخوي انت اي اصدار اللي عندك؟؟؟؟

ولو تحذفه وتركبه من جديد يكون افضل

 

شسويله بعد

الأصدار الي عندي السادس

ولا يهمكـ بحذفه بس على الله تزبط ولا ترجع المشكلة

بس ما قلت لي الأمر الي اكتبه بــ Run يخلي الويندوز أصلي​

 

قبل كل شيء اعمل الوندوز اصلي من هذا الموضوع

ويندوز اكس بي والفيستا اصلي بضغطة زر Activate Windows Vista / XP In One Click

وبعدين ركب الاكسبلورر السابع من هذا الموضوع

( الانترنت اكسبلورر 7 نسخه نهائيه ) شرح بالصور ( تركيب + اعدادات خاصه للغة العربيه )

وان شاء الله تختفي المشكلة​

 

ما عليش اخــوي شسويله

بس انا جربت اكسبلورر 7 ثقيل ويخلي الجهاز بطيء

الرجــو الأفــادة

يعطيكـ العافية ​

 

لا اسمحلي انت غلطان في هذا الكلام
يمكن انك جربت النسخ التجريبية وكان هذا الكلام صحيح
لكن بالموضوع اللي اعطيتك فيه نسخة نهائية واعدادات خاصة من زيزوووم وبتحس بفرق كبير


نصيحة اخوية عليك بالاصدار السابع

 

جـــزاكـ الله خير أخــوي شسويله بعد

ما قصرت مشكور على المساعدة و الفايدة ووقتكـ معي

يعطيكـ العافية

جااااري التحميل ​