يعلق بعد شاشه الترحيب!!

المصدر: يعلق بعد شاشه الترحيب!!
في منتدى : منتدى مشاكـل وحلول الحـاسب

تعبت و انا احاول اكتب موضوع مو راضي ينزل


المهم السلام عليكم و رحمه الله و بركاته


انا احب هالمنتدى حيل دايم القى فيه اللي ابيه

ما اطول عليكم

المشكله يا اللي الله يطول بعمرمكم


جهازي يشتغل اوك

مره دخلت على التاسك منجر و سويت انهاء لوحده من العمليات <<جبت العيد

و بعدها طفيت و جيت بعدين شغلته


طلعت لي صفحه الجهاز بعدين الويندوز بعدين شاشه الترحيب بعدها تطلع شاشه سودا و المؤشر بالنص


انتظر انتظر مافيه امل

سويت اعاده تشغيل و دخلت بالسيف مود و دخل عادي و فتح

و دخلت عندكم هنا و سويت تقرير بالاداه وانا بالسيف مود و هذا التقرير بالاسفل


علما بأني حاولت ادخل اكثر من مره لكن دايم يعلق

اترككم مع التقرير:

كود:

Deckard's System Scanner v20071014.68
Run by Dk on 2009-01-18 00:14:58
Computer is in Safe Mode with Networking.
--------------------------------------------------------------------------------
[COLOR=red]Total Physical Memory: 503 MiB (512 MiB recommended).[/COLOR]
 
-- HijackThis Clone ------------------------------------------------------------
 
Emulating logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2009-01-18 00:14:59
Platform: Windows XP Service Pack 2 (5.01.2600)
MSIE: Internet Explorer (6.00.2900.2180)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\system32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Dk\سطح المكتب\dss.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = [URL]http://www.google.com/ie[/URL]
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [URL]http://www.google.com[/URL]
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = [URL]http://www.google.com.sa/[/URL]
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [URL]http://www.google.com/ie[/URL]
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) = [URL]http://www.google.com/search?q=%s[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [URL]http://www.google.com/ie[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,Default_Search_URL = [URL]http://www.google.com/ie[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = [URL]http://www.google.com/ie[/URL]
O1 - Hosts: 127.1 localhost
O1 - Hosts: 127.1 [URL="http://www.hxg001.cn"]www.hxg001.cn[/URL]
O1 - Hosts: 127.1 [URL="http://www.hxg002.cn"]www.hxg002.cn[/URL]-01-02 18:40:12    249856 --a------ C:\WINDOWS\system32\ALOQuickTimeFile.dll <Not Verified; Online 20 ------------

:q:

 

اهلااا بك

حمل الاداة التالية

http://siri.urz.free.fr/Softs/RHosts.exe

استخدمها ثم
حمل هذا البرنامج
http://www.zyzoom.net/soft/security/...HijackThis.exe
شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم

 

اهلين اخوي


حملت الاداه الاولى و شغلتها

طلع لي مربع ضغطت منه Restaurer

بعدها طلع مربع صغير ضغطت منه اوك

و عملت تقرير كالتالي::

كود:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:30:32 ص, on 18/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Documents and Settings\Dk\سطح المكتب\Zyzoom_HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [Boob Idle Software Acid] C:\Documents and Settings\All Users\Application Data\Part Long Boob Idle\that amok.exe
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HBService32] System.exe
O4 - HKLM\..\Run: [3PMmUpdate] rundll32 "C:\WINDOWS\Update.dll",Main
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [build bash] C:\DOCUME~1\Dk\APPLIC~1\BINSLO~1\bend phone.exe
O4 - HKLM\..\Policies\Explorer\Run: [MPMKrnl] rundll32 "C:\WINDOWS\MKMKrnl.dll",KMainProc
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - [URL]http://arabsgate.emkanat.com:1998/cp/files/talk5.cab[/URL]
O16 - DPF: {C171FF59-8C55-4796-A398-4F5D02B4C763} (IMC_Sec Control) - [URL]http://ksacam.saudi4voice.com/saudi1999/talks3n.cab[/URL]
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - [URL]http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab[/URL]
O20 - AppInit_DLLs: fikmjcac.dll,gmlceoga.dll,kfppbfhg.dll,hnhmgffg.dll,fhjdkkon.dll,cadlkoop.dll,dggajnci.dll,engeemod.dll,pokfphbm.dll,lebkmkgd.dll,npheihoa.dll,npkjkeeb.dll,chdebgcl.dll,ljjalgea.dll,aohhcnim.dll,mpjnljbk.dll,mpkpacoo.dll,lcdmgcgd.dll
O21 - SSODL: msnmsg - {DA191DE0-AA86-4ED0-4B87-293D48B2AE99} - C:\Program Files\Messenger\msgmr.dll
O21 - SSODL: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll (file missing)
O21 - SSODL: F2463CAC - {F2463CAC-14D4-4CF7-BB53-DE3B185E272E} - C:\WINDOWS\system32\fikmjcac.dll
O21 - SSODL: 065CE80A - {065CE80A-4A96-46D3-89B5-B79AD4A16E0A} - C:\WINDOWS\system32\gmlceoga.dll
O21 - SSODL: 4F99BF10 - {4F99BF10-2FC6-44F2-8213-5EB94DFE5FE0} - C:\WINDOWS\system32\kfppbfhg.dll
O21 - SSODL: 17160FF0 - {17160FF0-31B5-4B6B-B210-9D8D9B7AD67C} - C:\WINDOWS\system32\hnhmgffg.dll
O21 - SSODL: F13D4487 - {F13D4487-B45E-4AA6-A3FC-661493F9A3DA} - C:\WINDOWS\system32\fhjdkkon.dll
O21 - SSODL: CAD54889 - {CAD54889-8C9A-465E-85AB-D1678DEA8511} - C:\WINDOWS\system32\cadlkoop.dll
O21 - SSODL: D00A37C2 - {D00A37C2-BA81-409B-82BC-C4EC7C8B4605} - C:\WINDOWS\system32\dggajnci.dll
O21 - SSODL: E70EE68D - {E70EE68D-FBCC-4603-AE6F-0B3EAF17FBF9} - C:\WINDOWS\system32\engeemod.dll
O21 - SSODL: 984F91B6 - {984F91B6-B971-486B-9025-FE6067413F69} - C:\WINDOWS\system32\pokfphbm.dll
O21 - SSODL: 5EB4640D - {5EB4640D-DEEF-42EF-A346-7A0E160859B3} - C:\WINDOWS\system32\lebkmkgd.dll
O21 - SSODL: 791E218A - {791E218A-D951-4D34-9002-F9C8098272C5} - C:\WINDOWS\system32\npheihoa.dll
O21 - SSODL: 79434EEB - {79434EEB-6F9A-458E-8CA6-9B6CAB2C0421} - C:\WINDOWS\system32\npkjkeeb.dll
O21 - SSODL: C1DEB0C5 - {C1DEB0C5-E31E-4F0A-95BB-19E09EF83F92} - C:\WINDOWS\system32\chdebgcl.dll
O21 - SSODL: 533A50EA - {533A50EA-CF5C-4159-BE82-C01E137A2AEC} - C:\WINDOWS\system32\ljjalgea.dll
O21 - SSODL: A811C726 - {A811C726-DAD5-4524-A9D8-2A39E4D2790C} - C:\WINDOWS\system32\aohhcnim.dll
O21 - SSODL: 693753B4 - {693753B4-97DF-4E9E-BFBF-AD0BB83A0575} - C:\WINDOWS\system32\mpjnljbk.dll
O21 - SSODL: 6949AC88 - {6949AC88-3986-4117-849A-76A6D35B1E4A} - C:\WINDOWS\system32\mpkpacoo.dll
O21 - SSODL: 5CD60C0D - {5CD60C0D-D614-4DFC-90AD-780556CF2012} - C:\WINDOWS\system32\lcdmgcgd.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 7189 bytes

 

تمااااام

عطل استعادة النظام حسب الشرح التالي


​

حمل اداة الكاسبر من الرابط التالي

http://dnl-eu6.kaspersky-labs.com/devbuilds/AVPTool/

بعد التحميل ،، دبل كلك وسيتم استخراج ملف الاداة الى مجلد بسطح المكتب لحظات وتبدأ الاداة بالعمل

تابع الشرح لفحص الجهاز وتنظيفه وارفاق التقرير












ثم قم بضغط التقرير ورفعه هنا>>>>شرح الضغط

http://www.zyzoom.net/vb_up/index.php​

 

جالس يحمل اداه الكاسبر الان و بالنسبه لايقاف استعاده النظام لقيت عليها صح من اول


بعد التحميل و عمل المطلوب سأوافيك بالتقرير


لكن!! موقع زيزوم للرفع فيه خطأ



اداه الكاسبر جالسه تفحص الحين و مطوله مره يعني على الصبح تقريبا او الظهر يكون التقرير موجود باذن الله <<< احلف:hh:

 

اخوي الغالي

انا سويت سكان و طلعت و جيت لقيته بالوضع عادي شغال من حاله

اما بالنسبه لتقرير الكاسبر يوم جيت لقيته مسوي شغال و خالص و مقفل البرنامج اذا بغيت اطلع تقرير جديد الا اسوي سكان من جديد و يطول على ما يخلص

عموما انا سويت تقرير بالهايجاك واذا في شي خطا انا راضي دامه اشتغل يالغلا و اسف على تعبك معاي

كود:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:24:32 ص, on 18/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\RunDll32.exe
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\Dk\سطح المكتب\Zyzoom_HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - [URL]http://arabsgate.emkanat.com:1998/cp/files/talk5.cab[/URL]
O16 - DPF: {C171FF59-8C55-4796-A398-4F5D02B4C763} (IMC_Sec Control) - [URL]http://ksacam.saudi4voice.com/saudi1999/talks3n.cab[/URL]
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - [URL]http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab[/URL]
O20 - AppInit_DLLs: fikmjcac.dll,mpjnljbk.dll,gmlceoga.dll,kfppbfhg.dll,hnhmgffg.dll,fhjdkkon.dll,cadlkoop.dll,dggajnci.dll,engeemod.dll,pokfphbm.dll,lebkmkgd.dll,npheihoa.dll,npkjkeeb.dll,chdebgcl.dll,ljjalgea.dll,aohhcnim.dll,mpkpacoo.dll,lcdmgcgd.dll
O21 - SSODL: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll (file missing)
O21 - SSODL: F2463CAC - {F2463CAC-14D4-4CF7-BB53-DE3B185E272E} - C:\WINDOWS\system32\fikmjcac.dll
O21 - SSODL: 4F99BF10 - {4F99BF10-2FC6-44F2-8213-5EB94DFE5FE0} - C:\WINDOWS\system32\kfppbfhg.dll (file missing)
O21 - SSODL: 17160FF0 - {17160FF0-31B5-4B6B-B210-9D8D9B7AD67C} - C:\WINDOWS\system32\hnhmgffg.dll (file missing)
O21 - SSODL: F13D4487 - {F13D4487-B45E-4AA6-A3FC-661493F9A3DA} - C:\WINDOWS\system32\fhjdkkon.dll (file missing)
O21 - SSODL: CAD54889 - {CAD54889-8C9A-465E-85AB-D1678DEA8511} - C:\WINDOWS\system32\cadlkoop.dll (file missing)
O21 - SSODL: D00A37C2 - {D00A37C2-BA81-409B-82BC-C4EC7C8B4605} - C:\WINDOWS\system32\dggajnci.dll (file missing)
O21 - SSODL: E70EE68D - {E70EE68D-FBCC-4603-AE6F-0B3EAF17FBF9} - C:\WINDOWS\system32\engeemod.dll (file missing)
O21 - SSODL: 984F91B6 - {984F91B6-B971-486B-9025-FE6067413F69} - C:\WINDOWS\system32\pokfphbm.dll (file missing)
O21 - SSODL: 5EB4640D - {5EB4640D-DEEF-42EF-A346-7A0E160859B3} - C:\WINDOWS\system32\lebkmkgd.dll (file missing)
O21 - SSODL: 791E218A - {791E218A-D951-4D34-9002-F9C8098272C5} - C:\WINDOWS\system32\npheihoa.dll (file missing)
O21 - SSODL: 79434EEB - {79434EEB-6F9A-458E-8CA6-9B6CAB2C0421} - C:\WINDOWS\system32\npkjkeeb.dll (file missing)
O21 - SSODL: C1DEB0C5 - {C1DEB0C5-E31E-4F0A-95BB-19E09EF83F92} - C:\WINDOWS\system32\chdebgcl.dll (file missing)
O21 - SSODL: 533A50EA - {533A50EA-CF5C-4159-BE82-C01E137A2AEC} - C:\WINDOWS\system32\ljjalgea.dll (file missing)
O21 - SSODL: A811C726 - {A811C726-DAD5-4524-A9D8-2A39E4D2790C} - C:\WINDOWS\system32\aohhcnim.dll (file missing)
O21 - SSODL: 693753B4 - {693753B4-97DF-4E9E-BFBF-AD0BB83A0575} - C:\WINDOWS\system32\mpjnljbk.dll
O21 - SSODL: 6949AC88 - {6949AC88-3986-4117-849A-76A6D35B1E4A} - C:\WINDOWS\system32\mpkpacoo.dll (file missing)
O21 - SSODL: 5CD60C0D - {5CD60C0D-D614-4DFC-90AD-780556CF2012} - C:\WINDOWS\system32\lcdmgcgd.dll (file missing)
O21 - SSODL: 065CE80A - {065CE80A-4A96-46D3-89B5-B79AD4A16E0A} - C:\WINDOWS\system32\gmlceoga.dll (file missing)
O21 - SSODL: msnmsg - {DA191DE0-AA86-4ED0-4B87-293D48B2AE99} - C:\Program Files\Messenger\msgmr.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 7631 bytes

 

بعد ما سويت اعاده تشغيل رجعت لي نفس المشكله لكن هالمره صار يعلق مرات على شاشه الترحيب و مرات تطلع الايقونات و قبل لا تطلع كلمه ابدا يعلق الشريط الازرق


عموما التقرير مرفق فوق في حاله انه كان شغال قبل لا اعيد تشغيله و هذا تقرير بعد ما اعدت تشغيله

كود:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:25:23 ص, on 18/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Dk\سطح المكتب\Virus Removal Tool\is-4PTR7\is-4PTR7.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dk\سطح المكتب\Zyzoom_HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll (file missing)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: is-4PTR7.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - [URL]http://arabsgate.emkanat.com:1998/cp/files/talk5.cab[/URL]
O16 - DPF: {C171FF59-8C55-4796-A398-4F5D02B4C763} (IMC_Sec Control) - [URL]http://ksacam.saudi4voice.com/saudi1999/talks3n.cab[/URL]
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - [URL]http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab[/URL]
O20 - AppInit_DLLs: fikmjcac.dll,mpjnljbk.dll,gmlceoga.dll,kfppbfhg.dll,hnhmgffg.dll,fhjdkkon.dll,cadlkoop.dll,dggajnci.dll,engeemod.dll,pokfphbm.dll,lebkmkgd.dll,npheihoa.dll,npkjkeeb.dll,chdebgcl.dll,ljjalgea.dll,aohhcnim.dll,mpkpacoo.dll,lcdmgcgd.dll
O21 - SSODL: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - C:\WINDOWS\Downloaded Program Files\ThunderAdvise.dll (file missing)
O21 - SSODL: F2463CAC - {F2463CAC-14D4-4CF7-BB53-DE3B185E272E} - C:\WINDOWS\system32\fikmjcac.dll
O21 - SSODL: 4F99BF10 - {4F99BF10-2FC6-44F2-8213-5EB94DFE5FE0} - C:\WINDOWS\system32\kfppbfhg.dll (file missing)
O21 - SSODL: 17160FF0 - {17160FF0-31B5-4B6B-B210-9D8D9B7AD67C} - C:\WINDOWS\system32\hnhmgffg.dll (file missing)
O21 - SSODL: F13D4487 - {F13D4487-B45E-4AA6-A3FC-661493F9A3DA} - C:\WINDOWS\system32\fhjdkkon.dll (file missing)
O21 - SSODL: CAD54889 - {CAD54889-8C9A-465E-85AB-D1678DEA8511} - C:\WINDOWS\system32\cadlkoop.dll (file missing)
O21 - SSODL: D00A37C2 - {D00A37C2-BA81-409B-82BC-C4EC7C8B4605} - C:\WINDOWS\system32\dggajnci.dll (file missing)
O21 - SSODL: E70EE68D - {E70EE68D-FBCC-4603-AE6F-0B3EAF17FBF9} - C:\WINDOWS\system32\engeemod.dll (file missing)
O21 - SSODL: 984F91B6 - {984F91B6-B971-486B-9025-FE6067413F69} - C:\WINDOWS\system32\pokfphbm.dll (file missing)
O21 - SSODL: 5EB4640D - {5EB4640D-DEEF-42EF-A346-7A0E160859B3} - C:\WINDOWS\system32\lebkmkgd.dll (file missing)
O21 - SSODL: 791E218A - {791E218A-D951-4D34-9002-F9C8098272C5} - C:\WINDOWS\system32\npheihoa.dll (file missing)
O21 - SSODL: 79434EEB - {79434EEB-6F9A-458E-8CA6-9B6CAB2C0421} - C:\WINDOWS\system32\npkjkeeb.dll (file missing)
O21 - SSODL: C1DEB0C5 - {C1DEB0C5-E31E-4F0A-95BB-19E09EF83F92} - C:\WINDOWS\system32\chdebgcl.dll (file missing)
O21 - SSODL: 533A50EA - {533A50EA-CF5C-4159-BE82-C01E137A2AEC} - C:\WINDOWS\system32\ljjalgea.dll (file missing)
O21 - SSODL: A811C726 - {A811C726-DAD5-4524-A9D8-2A39E4D2790C} - C:\WINDOWS\system32\aohhcnim.dll (file missing)
O21 - SSODL: 693753B4 - {693753B4-97DF-4E9E-BFBF-AD0BB83A0575} - C:\WINDOWS\system32\mpjnljbk.dll
O21 - SSODL: 6949AC88 - {6949AC88-3986-4117-849A-76A6D35B1E4A} - C:\WINDOWS\system32\mpkpacoo.dll (file missing)
O21 - SSODL: 5CD60C0D - {5CD60C0D-D614-4DFC-90AD-780556CF2012} - C:\WINDOWS\system32\lcdmgcgd.dll (file missing)
O21 - SSODL: 065CE80A - {065CE80A-4A96-46D3-89B5-B79AD4A16E0A} - C:\WINDOWS\system32\gmlceoga.dll (file missing)
O21 - SSODL: msnmsg - {DA191DE0-AA86-4ED0-4B87-293D48B2AE99} - C:\Program Files\Messenger\msgmr.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 7054 bytes

انا سويت له سكان الحين و بروح عندي محاضره و عسا اجي و القا التقرير و اكتبه لك

انت اخر امل لي بعد الله قبل لا اكسر الجهاز :er:

 

الله يعطيك العافية

احذف هذه القيمة بالبداية

O20 - AppInit_DLLs: fikmjcac.dll,mpjnljbk.dll,gmlceoga.dll,kfppbfhg.dll,hnhmgffg.dll,fhjdkkon.dll,ca dlkoop.dll,dggajnci.dll,engeemod.dll,pokfphbm.dll,lebkmkgd.dll,npheihoa.dll,npkj keeb.dll,chdebgcl.dll,ljjalgea.dll,aohhcnim.dll,mpkpacoo.dll,lcdmgcgd.dll

طريقة الحذف

​

اعد تشغيل الجهاز وارفع تقرير ثاني​

 

معليش اخوي اسف على التأخير


بس كنت انتظر الشيخ الكاسبر يسوي سكان اخذ له اسبوع كامل


و هذا تقرير الكاسبر لكن نفس المشكله حتى بعد ما سويت اعاده تشغيل انا بجرب اللي قلته انت الحين و ارد لك خبر

تقرير الكاسبر::

كود:

Scan
----
Scanned: 168613
Detected: 440
Untreated: 0
Start time: 22/01/1430 08:22:41 ص
Duration: 4 days 00:22:24
Finish time: 26/01/1430 08:45:05 ص
 
Scanner\20090118000134\backup\DOCUME~1\Dk\LOCALS~1\Temp\dump_wmimmc.sys 13.3 KB

بعد هالتقرير حسيت اني مسوي عشا للفيروسات :y:

 

حذفت القيمه المذكوره ولكن نفس المشكله ما زالت

و كل ما سويت سكان بعد تطلع لي نفسها كأنها ما انحذفت قبل شوي:hh:


التقرير::

كود:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:26:20 ص, on 22/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Documents and Settings\Dk\سطح المكتب\Zyzoom_HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HBService32] System.exe
O4 - HKLM\..\Run: [3PMmUpdate] rundll32 "C:\WINDOWS\Update.dll",Main
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: is-4PTR7.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - [URL]http://arabsgate.emkanat.com:1998/cp/files/talk5.cab[/URL]
O16 - DPF: {C171FF59-8C55-4796-A398-4F5D02B4C763} (IMC_Sec Control) - [URL]http://ksacam.saudi4voice.com/saudi1999/talks3n.cab[/URL]
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - [URL]http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab[/URL]
O20 - AppInit_DLLs: dcmmbikh.dll,jlfaeojn.dll,mconkdcc.dll,ckhmhihh.dll,fhencoki.dll,eplfhebp.dll,ejebjlbn.dll,eldmgngo.dll,hekpojnb.dll,dfkcgeap.dll,efnpojae.dll,mamjnfme.dll,cjgnpahn.dll,cacoengd.dll,oeahggkb.dll,gibahadd.dll,aodkalnj.dll,ikcgojcn.dll
O21 - SSODL: 4F99BF10 - {4F99BF10-2FC6-44F2-8213-5EB94DFE5FE0} - C:\WINDOWS\system32\kfppbfhg.dll (file missing)
O21 - SSODL: 17160FF0 - {17160FF0-31B5-4B6B-B210-9D8D9B7AD67C} - C:\WINDOWS\system32\hnhmgffg.dll (file missing)
O21 - SSODL: F13D4487 - {F13D4487-B45E-4AA6-A3FC-661493F9A3DA} - C:\WINDOWS\system32\fhjdkkon.dll (file missing)
O21 - SSODL: CAD54889 - {CAD54889-8C9A-465E-85AB-D1678DEA8511} - C:\WINDOWS\system32\cadlkoop.dll (file missing)
O21 - SSODL: D00A37C2 - {D00A37C2-BA81-409B-82BC-C4EC7C8B4605} - C:\WINDOWS\system32\dggajnci.dll (file missing)
O21 - SSODL: E70EE68D - {E70EE68D-FBCC-4603-AE6F-0B3EAF17FBF9} - C:\WINDOWS\system32\engeemod.dll (file missing)
O21 - SSODL: 984F91B6 - {984F91B6-B971-486B-9025-FE6067413F69} - C:\WINDOWS\system32\pokfphbm.dll (file missing)
O21 - SSODL: 5EB4640D - {5EB4640D-DEEF-42EF-A346-7A0E160859B3} - C:\WINDOWS\system32\lebkmkgd.dll (file missing)
O21 - SSODL: 791E218A - {791E218A-D951-4D34-9002-F9C8098272C5} - C:\WINDOWS\system32\npheihoa.dll (file missing)
O21 - SSODL: 79434EEB - {79434EEB-6F9A-458E-8CA6-9B6CAB2C0421} - C:\WINDOWS\system32\npkjkeeb.dll (file missing)
O21 - SSODL: C1DEB0C5 - {C1DEB0C5-E31E-4F0A-95BB-19E09EF83F92} - C:\WINDOWS\system32\chdebgcl.dll (file missing)
O21 - SSODL: 533A50EA - {533A50EA-CF5C-4159-BE82-C01E137A2AEC} - C:\WINDOWS\system32\ljjalgea.dll (file missing)
O21 - SSODL: A811C726 - {A811C726-DAD5-4524-A9D8-2A39E4D2790C} - C:\WINDOWS\system32\aohhcnim.dll (file missing)
O21 - SSODL: 6949AC88 - {6949AC88-3986-4117-849A-76A6D35B1E4A} - C:\WINDOWS\system32\mpkpacoo.dll (file missing)
O21 - SSODL: 5CD60C0D - {5CD60C0D-D614-4DFC-90AD-780556CF2012} - C:\WINDOWS\system32\lcdmgcgd.dll (file missing)
O21 - SSODL: 065CE80A - {065CE80A-4A96-46D3-89B5-B79AD4A16E0A} - C:\WINDOWS\system32\gmlceoga.dll (file missing)
O21 - SSODL: 021F3EF4 - {021F3EF4-3733-49E7-A865-67E6186ADCBD} - C:\WINDOWS\system32\gihfjefk.dll (file missing)
O21 - SSODL: 9232B29B - {9232B29B-4999-48BA-BF10-907121989846} - C:\WINDOWS\system32\pijibipb.dll (file missing)
O21 - SSODL: C4B7EDF2 - {C4B7EDF2-AC4C-4789-9F30-67148743AFFC} - C:\WINDOWS\system32\ckbnedfi.dll (file missing)
O21 - SSODL: F7E70555 - {F7E70555-43F0-4869-A601-87E61705C4D7} - C:\WINDOWS\system32\fnenglll.dll (file missing)
O21 - SSODL: E95F1EB9 - {E95F1EB9-CB98-4C7C-A191-AA70EC6D76FF} - C:\WINDOWS\system32\eplfhebp.dll
O21 - SSODL: E3EB35B7 - {E3EB35B7-10E5-4E74-BB7E-1135FBD8C17C} - C:\WINDOWS\system32\ejebjlbn.dll
O21 - SSODL: E5D60708 - {E5D60708-6876-434E-89D2-4F18DD05FD88} - C:\WINDOWS\system32\eldmgngo.dll
O21 - SSODL: 1E49837B - {1E49837B-07DB-45AB-B959-5D63594E26FB} - C:\WINDOWS\system32\hekpojnb.dll
O21 - SSODL: DF4C0EA9 - {DF4C0EA9-841C-46F2-BE71-E5A23A078B51} - C:\WINDOWS\system32\dfkcgeap.dll
O21 - SSODL: EF7983AE - {EF7983AE-DDC0-4471-B37D-D636758FF539} - C:\WINDOWS\system32\efnpojae.dll
O21 - SSODL: 6A637F6E - {6A637F6E-F446-4E18-8E3B-E5453FEF3F2E} - C:\WINDOWS\system32\mamjnfme.dll
O21 - SSODL: C3079A17 - {C3079A17-22CC-40FC-97C0-958E6DBBB335} - C:\WINDOWS\system32\cjgnpahn.dll
O21 - SSODL: CAC8E70D - {CAC8E70D-FFF9-4D83-A6D2-FABA60D32CEC} - C:\WINDOWS\system32\cacoengd.dll
O21 - SSODL: 8EA1004B - {8EA1004B-D6A2-4A19-934F-7D3DC61E2670} - C:\WINDOWS\system32\oeahggkb.dll
O21 - SSODL: 02BA1ADD - {02BA1ADD-EF76-43FA-835C-A963160C2A6E} - C:\WINDOWS\system32\gibahadd.dll
O21 - SSODL: A8D4A573 - {A8D4A573-9716-42AE-BB5E-ABE2CB2A6DBB} - C:\WINDOWS\system32\aodkalnj.dll
O21 - SSODL: 24C083C7 - {24C083C7-A138-4235-BC61-BFACD097D18B} - C:\WINDOWS\system32\ikcgojcn.dll
O21 - SSODL: DC66B241 - {DC66B241-C629-4359-8A66-18B6B6741B5E} - C:\WINDOWS\system32\dcmmbikh.dll
O21 - SSODL: 35FAE837 - {35FAE837-1316-4125-8DD7-777F2BD90750} - C:\WINDOWS\system32\jlfaeojn.dll
O21 - SSODL: 6C874DCC - {6C874DCC-77B9-44FA-8D65-F5728C0E1BAA} - C:\WINDOWS\system32\mconkdcc.dll
O21 - SSODL: C4161211 - {C4161211-B3B7-47C3-825D-C8A183E17A54} - C:\WINDOWS\system32\ckhmhihh.dll
O21 - SSODL: F1E7C842 - {F1E7C842-DCE6-4E7C-ADD2-B4C9ABE33876} - C:\WINDOWS\system32\fhencoki.dll
O21 - SSODL: msnmsg - {DA191DE0-AA86-4ED0-4B87-293D48B2AE99} - C:\Program Files\Messenger\msgmr.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 8762 bytes

 

اخي ارفع ملف تقرير الكاسبر على موقع الرفع

 

التحميل من هنا

 

تم التنظيف

كيف الاوضاع عندك ؟

 

نفس ما هي يطول عند الترحيب و يعلق بعدها

​

 

والقيمه اللي قلتلي احذفها رقم 20 كل ما احذفها و ارجع اسوي سكان القاها موجوده

 

عندي سي دي الويندوز و ابي اسألك هل repier او اصلاح (ماعرف اكتب انجليزي) يستطيح حل المشكله ؟؟

 

طيب اخوي اعمل فحص بهذه الاداة

اختبارات ... على اداة المكافي انتربرايز 8.7 ( تحديث & فحص وتنظيف & تقرير ) تلقائي ‏

تو مجربها وهي في غاية القوة
وانتظر تقريرها

قبل الفحص نظف جهازك بهذه الاداة

www.zyzoom.net/shswelh/Zyzoom_CyberScrub_Privacy_Suite_2.exe​

التوافق : ويندوز اكسبيفقط ​

شرح الاستخدام ,,,,,,
دبل كلك على الاداة واصبر حتى تنتهي جميع النوافذ وتقف عند هذه النافذة​

​

وعند ظهور هذه الشاشه ,, اضغط على Close ليتم اعادة تشغيل جهازك (( لتكملة عملية التنظيف ))​

 

حاضر......

 

سويت كل شي قلت لي عليه و نفس المشكله

و هذا تقرير توني سويته

::التقرير::

كود:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 05:13:52 ص, on 24/01/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Safe mode with network support
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\Dk\سطح المكتب\Zyzoom_HijackThis.exe
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: ThunderAdvise - {97421D0D-E07F-40DF-8F07-99597B9585AD} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [CmUsbSound] RunDll32 cmcnfgu.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [HBService32] System.exe
O4 - HKLM\..\Run: [3PMmUpdate] rundll32 "C:\WINDOWS\Update.dll",Main
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\RunOnce: [Privacy Suite] "C:\Documents and Settings\Dk\Application Data\cleaner\CSPSeraser.exe" "/R:C:\Documents and Settings\Dk\Application Data\CyberScrub\Privacy Suite" 
O4 - HKCU\..\RunOnce: [ClearPageFileAtShutDown] "C:\Documents and Settings\Dk\Application Data\cleaner\CSPSeraser.exe" -XP
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: is-4PTR7.lnk = ?
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - [URL]http://arabsgate.emkanat.com:1998/cp/files/talk5.cab[/URL]
O16 - DPF: {C171FF59-8C55-4796-A398-4F5D02B4C763} (IMC_Sec Control) - [URL]http://ksacam.saudi4voice.com/saudi1999/talks3n.cab[/URL]
O16 - DPF: {CF40ACC5-E1BB-4AFF-AC72-04C2F616BCA7} (get_atlcom Class) - [URL]http://wwwimages.adobe.com/www.adobe.com/products/acrobat/nos/gp.cab[/URL]
O20 - AppInit_DLLs: dcmmbikh.dll,jlfaeojn.dll,mconkdcc.dll,ckhmhihh.dll,fhencoki.dll,eplfhebp.dll,ejebjlbn.dll,eldmgngo.dll,hekpojnb.dll,dfkcgeap.dll,efnpojae.dll,mamjnfme.dll,cjgnpahn.dll,cacoengd.dll,oeahggkb.dll,gibahadd.dll,aodkalnj.dll,ikcgojcn.dll,dleehdmi.dll
O21 - SSODL: 4F99BF10 - {4F99BF10-2FC6-44F2-8213-5EB94DFE5FE0} - C:\WINDOWS\system32\kfppbfhg.dll (file missing)
O21 - SSODL: 17160FF0 - {17160FF0-31B5-4B6B-B210-9D8D9B7AD67C} - C:\WINDOWS\system32\hnhmgffg.dll (file missing)
O21 - SSODL: F13D4487 - {F13D4487-B45E-4AA6-A3FC-661493F9A3DA} - C:\WINDOWS\system32\fhjdkkon.dll (file missing)
O21 - SSODL: CAD54889 - {CAD54889-8C9A-465E-85AB-D1678DEA8511} - C:\WINDOWS\system32\cadlkoop.dll (file missing)
O21 - SSODL: D00A37C2 - {D00A37C2-BA81-409B-82BC-C4EC7C8B4605} - C:\WINDOWS\system32\dggajnci.dll (file missing)
O21 - SSODL: E70EE68D - {E70EE68D-FBCC-4603-AE6F-0B3EAF17FBF9} - C:\WINDOWS\system32\engeemod.dll (file missing)
O21 - SSODL: 984F91B6 - {984F91B6-B971-486B-9025-FE6067413F69} - C:\WINDOWS\system32\pokfphbm.dll (file missing)
O21 - SSODL: 5EB4640D - {5EB4640D-DEEF-42EF-A346-7A0E160859B3} - C:\WINDOWS\system32\lebkmkgd.dll (file missing)
O21 - SSODL: 791E218A - {791E218A-D951-4D34-9002-F9C8098272C5} - C:\WINDOWS\system32\npheihoa.dll (file missing)
O21 - SSODL: 79434EEB - {79434EEB-6F9A-458E-8CA6-9B6CAB2C0421} - C:\WINDOWS\system32\npkjkeeb.dll (file missing)
O21 - SSODL: C1DEB0C5 - {C1DEB0C5-E31E-4F0A-95BB-19E09EF83F92} - C:\WINDOWS\system32\chdebgcl.dll (file missing)
O21 - SSODL: 533A50EA - {533A50EA-CF5C-4159-BE82-C01E137A2AEC} - C:\WINDOWS\system32\ljjalgea.dll (file missing)
O21 - SSODL: A811C726 - {A811C726-DAD5-4524-A9D8-2A39E4D2790C} - C:\WINDOWS\system32\aohhcnim.dll (file missing)
O21 - SSODL: 6949AC88 - {6949AC88-3986-4117-849A-76A6D35B1E4A} - C:\WINDOWS\system32\mpkpacoo.dll (file missing)
O21 - SSODL: 5CD60C0D - {5CD60C0D-D614-4DFC-90AD-780556CF2012} - C:\WINDOWS\system32\lcdmgcgd.dll (file missing)
O21 - SSODL: 065CE80A - {065CE80A-4A96-46D3-89B5-B79AD4A16E0A} - C:\WINDOWS\system32\gmlceoga.dll (file missing)
O21 - SSODL: 021F3EF4 - {021F3EF4-3733-49E7-A865-67E6186ADCBD} - C:\WINDOWS\system32\gihfjefk.dll (file missing)
O21 - SSODL: 9232B29B - {9232B29B-4999-48BA-BF10-907121989846} - C:\WINDOWS\system32\pijibipb.dll (file missing)
O21 - SSODL: C4B7EDF2 - {C4B7EDF2-AC4C-4789-9F30-67148743AFFC} - C:\WINDOWS\system32\ckbnedfi.dll (file missing)
O21 - SSODL: F7E70555 - {F7E70555-43F0-4869-A601-87E61705C4D7} - C:\WINDOWS\system32\fnenglll.dll (file missing)
O21 - SSODL: E95F1EB9 - {E95F1EB9-CB98-4C7C-A191-AA70EC6D76FF} - (no file)
O21 - SSODL: E3EB35B7 - {E3EB35B7-10E5-4E74-BB7E-1135FBD8C17C} - (no file)
O21 - SSODL: E5D60708 - {E5D60708-6876-434E-89D2-4F18DD05FD88} - (no file)
O21 - SSODL: 1E49837B - {1E49837B-07DB-45AB-B959-5D63594E26FB} - (no file)
O21 - SSODL: DF4C0EA9 - {DF4C0EA9-841C-46F2-BE71-E5A23A078B51} - C:\WINDOWS\system32\dfkcgeap.dll
O21 - SSODL: EF7983AE - {EF7983AE-DDC0-4471-B37D-D636758FF539} - C:\WINDOWS\system32\efnpojae.dll
O21 - SSODL: 6A637F6E - {6A637F6E-F446-4E18-8E3B-E5453FEF3F2E} - (no file)
O21 - SSODL: C3079A17 - {C3079A17-22CC-40FC-97C0-958E6DBBB335} - C:\WINDOWS\system32\cjgnpahn.dll
O21 - SSODL: CAC8E70D - {CAC8E70D-FFF9-4D83-A6D2-FABA60D32CEC} - (no file)
O21 - SSODL: 8EA1004B - {8EA1004B-D6A2-4A19-934F-7D3DC61E2670} - C:\WINDOWS\system32\oeahggkb.dll
O21 - SSODL: 02BA1ADD - {02BA1ADD-EF76-43FA-835C-A963160C2A6E} - C:\WINDOWS\system32\gibahadd.dll
O21 - SSODL: A8D4A573 - {A8D4A573-9716-42AE-BB5E-ABE2CB2A6DBB} - C:\WINDOWS\system32\aodkalnj.dll
O21 - SSODL: 24C083C7 - {24C083C7-A138-4235-BC61-BFACD097D18B} - C:\WINDOWS\system32\ikcgojcn.dll
O21 - SSODL: DC66B241 - {DC66B241-C629-4359-8A66-18B6B6741B5E} - C:\WINDOWS\system32\dcmmbikh.dll
O21 - SSODL: 35FAE837 - {35FAE837-1316-4125-8DD7-777F2BD90750} - C:\WINDOWS\system32\jlfaeojn.dll
O21 - SSODL: 6C874DCC - {6C874DCC-77B9-44FA-8D65-F5728C0E1BAA} - C:\WINDOWS\system32\mconkdcc.dll
O21 - SSODL: C4161211 - {C4161211-B3B7-47C3-825D-C8A183E17A54} - C:\WINDOWS\system32\ckhmhihh.dll
O21 - SSODL: F1E7C842 - {F1E7C842-DCE6-4E7C-ADD2-B4C9ABE33876} - C:\WINDOWS\system32\fhencoki.dll
O21 - SSODL: msnmsg - {DA191DE0-AA86-4ED0-4B87-293D48B2AE99} - (no file)
O21 - SSODL: D5EE1D62 - {D5EE1D62-2EF4-4B40-9C73-D75E0F9BE0AF} - C:\WINDOWS\system32\dleehdmi.dll
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\getPlus_HelperSvc.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 9016 bytes

 

بارك الله فيك
تقرير اداة المكافي وين ؟