[ تم حل المشكلة ] مايفتح معي الدوس..

هذا التقرير أخوي

اسفه على تاخير كان بسبب الفحص

http://www.7ammil.com/download.php?id=08BXJ8TPXV

 

هل الجهاز يدخل طبيعي الآن ...؟

وتقرير هايجاك جديد لا هنتي

 

الحين ادخل طبيعي للحمدلله

هذا التقرير هايجاك


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:58:51 م, on 08/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Documents and Settings\البحر\سطح المكتب\HiJackThis.exe
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: IEVkbdBHO Class - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: is-DOAPB.lnk = ?
O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: avp - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
--
End of file - 3711 bytes

 

قومي بحذف هذه القيمه

O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

وبعدها حملي هذه الأداة للتنظيف وبعدها بأذن الله جهاز رائع كصابحته


http://rapidshare.com/files/182463291/Zyzoom.org.McAfee.exe

وأغلق جميع البرامج

قم بتعطيل استعادة النظام كما في الشرح



شغلها فتظهر لك واجهة الاداة

اختر خيار التنظيف فتظهر شاشة الدوس للفحص

اتركها حتى تنتهي ويظهر التقرير

انسخه والصقه بمشاركتك القادمة

بالتوفيق يا الغلا

 

متاسفه على التاخير أخوي الكثير ...

ان شاءلله بعمل التقرير باسرع وقت ...

 

هذا التقرير المطلوب

Engine Version : 5300.2777
Engine Load Time : 17968 milliseconds
AV DAT Version : 5492.0000 488805 detections Built 15 محرم, 1430
Extra DAT : 0 detections

Memory : Clean
Please wait ... building list of critical files to scan
Critical : Clean
Scanning the computer's cookie directories
Cookies : Clean
c:\pagefile.sys : Scan Failed
c:\Documents and Settings\All Users.WINDOWS\Application Data\Kaspersky Lab\AVP8\Data\av6.tmp : Scan Failed
File : c:\Documents and Settings\JTX\سطح المكتب\Virus Removal Tool\is-M9FK9\startup.exe : contains "Trojan" called "Generic PWS.y" (Deleted )
c:\Documents and Settings\JTX\سطح المكتب\Virus Removal Tool\is-M9FK9\startup.exe : Deleted
File : c:\Documents and Settings\JTX\سطح المكتب\Virus Removal Tool1\is-A1S7I\startup.exe : contains "Trojan" called "Generic PWS.y" (Deleted )
c:\Documents and Settings\JTX\سطح المكتب\Virus Removal Tool1\is-A1S7I\startup.exe : Deleted
c:\Documents and Settings\LocalService.NT AUTHORITY\NTUSER.DAT : Scan Failed
c:\Documents and Settings\LocalService.NT AUTHORITY\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\LocalService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\NetworkService.NT AUTHORITY\NTUSER.DAT : Scan Failed
c:\Documents and Settings\NetworkService.NT AUTHORITY\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\NetworkService.NT AUTHORITY\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\البحر\NTUSER.DAT : Scan Failed
c:\Documents and Settings\البحر\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\البحر\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\البحر\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\البحر\Local Settings\Temp\Perflib_Perfdata_c30.dat : Scan Failed
File : c:\RECYCLER\S-1-5-21-527237240-1647877149-839522115-1003\Dc102\is-S6FBU\startup.exe : contains "Trojan" called "Generic PWS.y" (Deleted )
c:\RECYCLER\S-1-5-21-527237240-1647877149-839522115-1003\Dc102\is-S6FBU\startup.exe : Deleted
c:\WINDOWS\system32\config\default : Scan Failed
c:\WINDOWS\system32\config\default.LOG : Scan Failed
c:\WINDOWS\system32\config\SAM : Scan Failed
c:\WINDOWS\system32\config\SAM.LOG : Scan Failed
c:\WINDOWS\system32\config\SECURITY : Scan Failed
c:\WINDOWS\system32\config\SECURITY.LOG : Scan Failed
c:\WINDOWS\system32\config\software : Scan Failed
c:\WINDOWS\system32\config\software.LOG : Scan Failed
c:\WINDOWS\system32\config\system : Scan Failed
c:\WINDOWS\system32\config\system.LOG : Scan Failed
c:\WINDOWS\system32\drivers\fidbox.dat : Scan Failed
c:\WINDOWS\system32\drivers\fidbox.idx : Scan Failed
c:\WINDOWS\system32\drivers\fidbox2.dat : Scan Failed
c:\WINDOWS\system32\drivers\fidbox2.idx : Scan Failed
c:\WINDOWS\temp\cch~e7a5dda09.htp : Scan Failed
c:\WINDOWS\temp\cch~e7a5ddf53.htp : Scan Failed
Scanning the registry
Registry : Clean

Summary :-
FilesFound : 41503
FilesScanned : 20157
FilesNotScanned : 21346

ObjectsFound : 70283
ObjectsInfected : 3
ObjectsCleaned : 0
ObjectsDeleted : 3

FilesInfected : 3
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 3

Started at : 01:13:50 ص 15 جمادى الأولى, 1430
Ended at : 01:39:18 ص 15 جمادى الأولى, 1430
Duration : 25 minutes 28 seconds
3233 MB scanned in 1528 seconds = 2 MB/s
Engine Version : 5300.2777
Engine Load Time : 18953 milliseconds
AV DAT Version : 5492.0000 488805 detections Built 15 محرم, 1430
Extra DAT : 0 detections

File : d:\اناشيد\المفاتيح العشرة.exe : contains "Trojan" called "Generic.dx" (Deleted )
d:\اناشيد\المفاتيح العشرة.exe : Deleted
File : d:\اناشيد\خمسون معلومة.exe : contains "Trojan" called "Generic.dx" (Deleted )
d:\اناشيد\خمسون معلومة.exe : Deleted

Summary :-
FilesFound : 10970
FilesScanned : 7975
FilesNotScanned : 2995

ObjectsFound : 12305
ObjectsInfected : 2
ObjectsCleaned : 0
ObjectsDeleted : 2

FilesInfected : 2
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 2

Started at : 01:39:38 ص 15 جمادى الأولى, 1430
Ended at : 01:41:29 ص 15 جمادى الأولى, 1430
Duration : 1 minutes 50 seconds
444 MB scanned in 110 seconds = 4 MB/s
Engine Version : 5300.2777
Engine Load Time : 18594 milliseconds
AV DAT Version : 5492.0000 488805 detections Built 15 محرم, 1430
Extra DAT : 0 detections


Summary :-
FilesFound : 7
FilesScanned : 5
FilesNotScanned : 2

ObjectsFound : 7
ObjectsInfected : 0
ObjectsCleaned : 0
ObjectsDeleted : 0

FilesInfected : 0
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 0

Started at : 01:41:49 ص 15 جمادى الأولى, 1430
Ended at : 01:41:50 ص 15 جمادى الأولى, 1430
Duration : 0 seconds

 

اوقي

كيف الأوضاع الآن

وهل تواجهي اي مشاكل

 

للحين للحمدلله كل شئ تمااااااااااام

يعطيكم العافيه جميعاااا على مساعدتي طول هذا الايام >>> اطول موضوع وربي فشله هههههههههههه

ان شاءالله يكون في موازين ااعمالكم ..

 

الله يعاافيكي ويحميكي

ونحن هنا بالخدمه

بالتوفيق

 

شكرااااا لكم جميعااا :d: ..

 

العفو أختي ...

و أن شالله ما تشوف شر لا أنتي ولا جهازك ...

[ عذراً بأغلاق الموضوع ] ...

<< تم حل المشكلة ...

في أمان الله ...