1. إستبعاد الملاحظة
  2. الإدارة العامة

    صفحة منتديات زيزووم للأمن والحماية

  3. الإدارة العامة

    الصفحة الرسمية لمنتديات زيزووم للأمن والحماية الفيس بوك

  4. الإدارة العامة

    الصفحة الرسمية لمنتديات زيزووم للأمن والحماية التلكرام

تقرير هايجك

الموضوع في 'منتدى مشاكـل وحلول الحـاسب' بواسطة kerbalaa, بتاريخ ‏يونيو 5, 2009.

  1. kerbalaa

    kerbalaa زيزوومي جديد

    إنضم إلينا في:
    ‏مارس 13, 2009
    المشاركات:
    47
    الإعجابات :
    0
    نقاط الجائزة:
    40
    الإقامة:
    في بلدي
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 7


    مرحبا
    انا مشترك بشبكة وايرليس والانترنت غير مستمر فعندما ينقطع
    اقوم بسحب الـ USB للواير ليس وادخاله مرة ثانية يعمل الانترنت
    وهذا تقرير الهايجك

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 08:40:05 م, on 05/06/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\acs.exe
    C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
    C:\WINDOWS\system32\svchost.exe
    D:\Program Files\Nero 7\InCD\InCDsrv.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\Explorer.EXE
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    C:\Program Files\WLAN\ACU.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    D:\Program Files\Nero 7\InCD\NBHGui.exe
    D:\Program Files\Nero 7\InCD\InCD.exe
    C:\WINDOWS\VM303_STI.EXE
    C:\WINDOWS\system32\ctfmon.exe
    D:\Program Files\Internet Download Manager\IDMan.exe
    D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    D:\Program Files\TechniSat DVB\bin\Server4PC.exe
    D:\Program Files\Internet Download Manager\IEMonitor.exe
    D:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    D:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R3 - URLSearchHook: DeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - D:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - D:\Program Files\Save Flash\SaveFlash.dll
    O4 - HKLM\..\Run: [ACU] "C:\Program Files\WLAN\ACU.exe" -nogui
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
    O4 - HKLM\..\Run: [GEST] m‘|\ü
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [RemoteControl] "D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LanguageShortcut] "D:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [SecurDisc] D:\Program Files\Nero 7\InCD\NBHGui.exe
    O4 - HKLM\..\Run: [InCD] D:\Program Files\Nero 7\InCD\InCD.exe
    O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe /onboot
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Server4PC.lnk = D:\Program Files\TechniSat DVB\bin\Server4PC.exe
    O8 - Extra context menu item: إضافة إلى حاجب إعلان الشعار - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
    O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - D:\Program Files\Internet Download Manager\IEGetAll.htm
    O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - D:\Program Files\Internet Download Manager\IEExt.htm
    O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - D:\Program Files\Internet Download Manager\IEGetVL.htm
    O9 - Extra button: إحصائيات حماية حركة زيارة الويب - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
    O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
    O23 - Service: WLAN Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
    O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
    O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Program Files\Nero 7\InCD\InCDsrv.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NBService - Nero AG - D:\Program Files\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Unknown owner - D:\Program Files\Nero 7\InCD\NBHRegInCDSrv.exe (file missing)
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    --
    End of file - 9173 bytes
     
  2. kemo_2009

    kemo_2009 زيزوومى مميز

    إنضم إلينا في:
    ‏مايو 12, 2009
    المشاركات:
    875
    الإعجابات :
    8
    نقاط الجائزة:
    520
    الإقامة:
    اممم هذا سؤال صعب
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 7
    طيب وش المشكلة الحين
    وبالنسبة للتقرير احذف التالي
    كود PHP:
    R3 URLSearchHookDeviceVM Url Search Hook - {0063BF63-BFFF-4B8F-9D26-4267DF7F17DD} - C:\WINDOWS\system32\dvmurl.dll
    كود PHP:
    O2 BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    طريقة الحذف



    [​IMG]





    [​IMG]
     
    آخر تعديل بواسطة المشرف: ‏مايو 12, 2014
  3. kerbalaa

    kerbalaa زيزوومي جديد

    إنضم إلينا في:
    ‏مارس 13, 2009
    المشاركات:
    47
    الإعجابات :
    0
    نقاط الجائزة:
    40
    الإقامة:
    في بلدي
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 7
    مشكور اخي كيموقمت بحذف ماذكرته ولعل المشكلة تنحل
    (( مشكلتي هي الانترنت ينقطع وعند اخراج اليو بي اس للواير ليس واعادته يرجع الانترنت ))
    هل هذه فايروسات ام ملفات تجسس وهل هي من البرامج ام من التصفح في الانترنت
     
  4. AbOdy

    AbOdy عضو شرف

    إنضم إلينا في:
    ‏سبتمبر 17, 2007
    المشاركات:
    6,866
    الإعجابات :
    91
    نقاط الجائزة:
    840
    الجنس:
    ذكر
    برامج الحماية:
    Norton
    نظام التشغيل:
    Windows 7
    هلا بك


    هلا بك

    عطل برامج الحماية وشغل الأداة

    [​IMG]


    عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
    بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes


    اثناء الفحص ممكن يعاد تشغيل الجهاز


    وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
    انتظر حتى يظهر لك تقرير ،، وبذلك يكون الفحص انتهى


    وعطني تقرير هايجاك جديد
     
  5. kemo_2009

    kemo_2009 زيزوومى مميز

    إنضم إلينا في:
    ‏مايو 12, 2009
    المشاركات:
    875
    الإعجابات :
    8
    نقاط الجائزة:
    520
    الإقامة:
    اممم هذا سؤال صعب
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 7
    يمكن يكون من الـ DSL اللي تلقط منه
    يا اما اشارته ضعيفة
    او فيه حوائط بينك وبينه
    او كل شوي واحد يعدي من قدامه
    فيه طريقة اسهل من انك تفكه كل شوي
    اضغط على اتصال الوايرليس بزر الماوس اليمين ( تجده قرب الساعة ) => ثم اضغط اصلاح ( وسيستغرق دقيقتين يمكن )
    [​IMG]
    وبعديها اضغط اغلاق للشاشة اللي ظهرت
    واتصفح من جديد عادي
     
  6. kerbalaa

    kerbalaa زيزوومي جديد

    إنضم إلينا في:
    ‏مارس 13, 2009
    المشاركات:
    47
    الإعجابات :
    0
    نقاط الجائزة:
    40
    الإقامة:
    في بلدي
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 7
    هذا تقرير الكمبوفكس واخر للهايجك
    ولكن مامعنى هذه العبارة في تقرير الكمبوفكس
    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED


    ComboFix

    ComboFix 09-06-05.07 - abdullah abbas 06/06/2009 7:33.1 - NTFSx86
    Microsoft Windows XP Professional 5.1.2600.2.1256.964.1033.18.2046.1586 [GMT 4:00]
    Running from: c:\documents and settings\abdullah abbas\Desktop\ComboFix.exe
    AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
    FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .
    ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
    .
    c:\windows\system32\OGACheckControl.dll
    .
    ((((((((((((((((((((((((( Files Created from 2009-05-06 to 2009-06-06 )))))))))))))))))))))))))))))))
    .
    No new files created in this timespan
    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-06-06 03:39 . 2009-06-05 10:27 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\DMCache
    2009-06-06 03:38 . 2009-06-05 08:05 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab
    2009-06-06 03:37 . 2009-06-05 07:07 16608 ----a-w- c:\windows\gdrv.sys
    2009-06-06 03:36 . 2009-06-05 08:05 2940 --sha-w- c:\windows\system32\drivers\fidbox2.idx
    2009-06-06 03:36 . 2009-06-05 08:05 237600 --sha-w- c:\windows\system32\drivers\fidbox2.dat
    2009-06-06 03:36 . 2009-06-05 08:05 14248 --sha-w- c:\windows\system32\drivers\fidbox.idx
    2009-06-06 03:36 . 2009-06-05 08:05 1283104 --sha-w- c:\windows\system32\drivers\fidbox.dat
    2009-06-06 03:13 . 2009-06-05 08:18 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\HPAppData
    2009-06-05 10:59 . 2009-06-05 07:31 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
    2009-06-05 10:48 . 2009-06-05 10:48 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\Ahead
    2009-06-05 10:46 . 2009-06-05 06:43 99496 ----a-w- c:\documents and settings\abdullah abbas\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    2009-06-05 10:45 . 2009-06-05 10:45 -------- d-----w- c:\documents and settings\All Users\Application Data\Technisat
    2009-06-05 10:45 . 2009-06-05 10:45 -------- d-----w- c:\program files\DVBViewerTE
    2009-06-05 10:45 . 2009-06-05 10:45 -------- d-----w- c:\documents and settings\All Users\Application Data\CMUV
    2009-06-05 10:44 . 2009-06-05 10:44 -------- d-----w- c:\program files\MainConcept
    2009-06-05 10:41 . 2009-06-05 09:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
    2009-06-05 10:41 . 2009-06-05 10:41 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\CyberLink
    2009-06-05 10:41 . 2009-06-05 10:41 -------- d-----w- c:\documents and settings\All Users\Application Data\CyberLink
    2009-06-05 10:39 . 2009-06-05 10:29 -------- d-----w- c:\program files\Common Files\Ahead
    2009-06-05 10:37 . 2009-06-05 09:46 -------- d-----w- c:\program files\Yahoo!
    2009-06-05 10:35 . 2009-06-05 10:35 -------- d-----w- c:\documents and settings\All Users\Application Data\Ahead
    2009-06-05 10:34 . 2009-06-05 10:34 -------- d-----w- c:\program files\Windows Live
    2009-06-05 10:31 . 2009-06-05 10:32 410984 ----a-w- c:\windows\system32\deploytk.dll
    2009-06-05 10:31 . 2009-06-05 10:31 -------- d-----w- c:\program files\Java
    2009-06-05 10:29 . 2009-06-05 10:29 -------- d-----w- c:\documents and settings\All Users\Application Data\Nero
    2009-06-05 10:28 . 2009-06-05 10:27 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\IDM
    2009-06-05 10:24 . 2009-06-05 10:19 172032 ------w- c:\windows\Setup1.exe
    2009-06-05 10:24 . 2009-06-05 10:19 73216 ----a-w- c:\windows\ST6UNST.EXE
    2009-06-05 10:21 . 2009-06-05 10:21 -------- d-----w- c:\program files\CyberLink
    2009-06-05 10:19 . 2009-06-05 09:54 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
    2009-06-05 10:11 . 2009-06-05 10:11 0 ----a-w- c:\windows\nsreg.dat
    2009-06-05 10:08 . 2009-06-05 10:08 -------- d-----w- c:\program files\Common Files\Adobe
    2009-06-05 10:08 . 2009-06-05 10:08 -------- d-----w- c:\program files\Microsoft Works
    2009-06-05 10:08 . 2009-06-05 10:08 -------- d-----w- c:\program files\MSBuild
    2009-06-05 10:07 . 2009-06-05 10:07 -------- d-----w- c:\program files\Microsoft.NET
    2009-06-05 10:06 . 2009-06-05 10:06 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\ACD Systems
    2009-06-05 10:06 . 2009-06-05 10:06 -------- d-----w- c:\program files\Common Files\ACD Systems
    2009-06-05 10:06 . 2009-06-05 10:06 -------- d-----w- c:\documents and settings\All Users\Application Data\ACD Systems
    2009-06-05 10:05 . 2009-06-05 10:05 -------- d-----w- c:\program files\Microsoft Visual Studio 8
    2009-06-05 09:54 . 2009-06-05 09:54 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\Yahoo!
    2009-06-05 09:49 . 2009-06-05 09:49 -------- d-----w- c:\program files\Vimicro
    2009-06-05 09:49 . 2009-06-05 07:05 -------- d--h--w- c:\program files\InstallShield Installation Information
    2009-06-05 09:49 . 2009-06-05 07:04 -------- d-----w- c:\program files\Common Files\InstallShield
    2009-06-05 08:11 . 2008-01-29 13:29 33808 ----a-w- c:\windows\system32\drivers\klbg.sys
    2009-06-05 08:11 . 2009-06-05 08:05 94643 ----a-w- c:\windows\system32\drivers\klick.dat
    2009-06-05 08:11 . 2009-06-05 08:05 105395 ----a-w- c:\windows\system32\drivers\klin.dat
    2009-06-05 08:05 . 2009-06-05 08:05 -------- d-----w- c:\program files\Kaspersky Lab
    2009-06-05 08:03 . 2009-06-05 08:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
    2009-06-05 07:27 . 2009-06-05 07:27 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\HP
    2009-06-05 07:27 . 2009-06-05 07:27 -------- d-----w- c:\documents and settings\All Users\Application Data\WEBREG
    2009-06-05 07:27 . 2009-06-05 07:20 173520 ----a-w- c:\windows\hpoins27.dat
    2009-06-05 07:25 . 2009-06-05 07:25 -------- d-----w- c:\documents and settings\All Users\Application Data\HP
    2009-06-05 07:25 . 2009-06-05 07:25 -------- d-----w- c:\documents and settings\All Users\Application Data\HP Product Assistant
    2009-06-05 07:25 . 2009-06-05 07:25 -------- d-----w- c:\program files\Hewlett-Packard
    2009-06-05 07:25 . 2009-06-05 07:25 -------- d-----w- c:\program files\Common Files\Hewlett-Packard
    2009-06-05 07:24 . 2009-06-05 07:24 -------- d-----w- c:\program files\Common Files\HP
    2009-06-05 07:24 . 2009-06-05 07:24 -------- d-----w- c:\documents and settings\All Users\Application Data\Hewlett-Packard
    2009-06-05 07:22 . 2009-06-05 07:22 -------- d-----w- c:\program files\HP
    2009-06-05 07:18 . 2009-06-05 07:18 -------- d-----w- c:\program files\AGEIA Technologies
    2009-06-05 07:17 . 2009-06-05 07:17 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
    2009-06-05 07:13 . 2009-06-05 07:11 -------- d-----w- c:\program files\Realtek
    2009-06-05 07:13 . 2009-06-05 07:13 -------- d-----w- c:\docume~1\ABDULL~1\APPLIC~1\InstallShield
    2009-06-05 07:11 . 2009-06-05 07:11 315392 ----a-w- c:\windows\HideWin.exe
    2009-06-05 07:08 . 2009-06-05 07:08 -------- d-----w- c:\program files\Intel
    2009-06-05 07:08 . 2009-06-05 07:08 -------- d-----w- c:\program files\Browser Configuration Utility
    2009-06-05 07:08 . 2009-06-05 07:08 -------- d-----w- c:\program files\Gigabyte
    2009-06-05 07:05 . 2009-06-05 07:05 17801 ----a-w- c:\windows\system32\drivers\AegisP.sys
    2009-06-05 07:05 . 2009-06-05 07:05 -------- d-----w- c:\program files\WLAN
    2009-06-05 07:02 . 2009-06-05 07:02 -------- d-----w- c:\documents and settings\All Users\Application Data\VistaCodecs
    2009-06-05 07:00 . 2009-06-05 07:00 -------- d-----w- c:\program files\Windows Media Connect 2
    2009-06-05 06:40 . 2009-06-05 06:33 166455 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
    2009-06-05 06:34 . 2009-06-05 06:34 -------- d-----w- c:\program files\microsoft frontpage
    2009-06-05 06:30 . 2009-06-05 06:30 21640 ----a-w- c:\windows\system32\emptyregdb.dat
    2009-03-26 15:35 . 2009-05-27 10:22 210352 ----a-w- c:\windows\system32\idmmbc.dll
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4
    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-05-23 15360]
    "IDMan"="d:\program files\Internet Download Manager\IDMan.exe" [2009-06-05 2815408]
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "GEST"="m‘|\ü" [X]
    "ACU"="c:\program files\WLAN\ACU.exe" [2006-01-05 303104]
    "NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
    "NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
    "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-06-05 206088]
    "GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
    "RemoteControl"="d:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216]
    "LanguageShortcut"="d:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
    "NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2008-02-27 570664]
    "SecurDisc"="d:\program files\Nero 7\InCD\NBHGui.exe" [2008-02-18 1629480]
    "InCD"="d:\program files\Nero 7\InCD\InCD.exe" [2008-02-18 1057064]
    "BigDog303"="c:\windows\VM303_STI.EXE" [2005-12-16 61440]
    "Adobe Reader Speed Launcher"="d:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
    "SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-06-05 148888]
    "RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.exe [2008-02-13 16857600]
    "nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-10-07 1630208]
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-05-23 15360]
    c:\documents and settings\All Users\Start Menu\Programs\Startup\
    HP Digital Imaging Monitor.lnk - d:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-10-14 214360]
    Server4PC.lnk - d:\program files\TechniSat DVB\bin\Server4PC.exe [2009-6-5 328968]
    [HKEY_LOCAL_MACHINE\software\microsoft\security center]
    "UpdatesDisableNotify"=dword:00000001
    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
    "DisableMonitoring"=dword:00000001
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)
    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqtra08.exe"=
    "d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
    "d:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
    "d:\\Program Files\\HP\\Digital Imaging\\bin\\hpiscnapp.exe"=
    "d:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
    "c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
    "c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
    "d:\\Program Files\\CyberLink\\PowerDVD\\PowerDVD.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
    "d:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
    R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29/01/2008 05:29 م 33808]
    R2 ES lite Service;ES lite Service for program management.;c:\program files\Gigabyte\EasySaver\essvr.exe [05/06/2009 11:08 ص 80392]
    R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [13/03/2008 06:02 م 26640]
    R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [30/04/2008 05:06 م 24592]
    S2 NeroRegInCDSrv;Nero Registry InCD Service;d:\program files\Nero 7\InCD\NBHRegInCDSrv.exe --> d:\program files\Nero 7\InCD\NBHRegInCDSrv.exe [?]
    S3 SKYNETU2;TechniSat DVB-PC TV Star USB 2;c:\windows\system32\drivers\SkyNETU2.sys [05/06/2009 02:43 م 420880]
    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
    hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
    "c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
    .
    - - - - ORPHANS REMOVED - - - -
    SafeBoot-procexp90.Sys

    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.google.com/
    IE: إضافة إلى حاجب إعلان الشعار - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
    IE: ت&صدير إلى Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    IE: تحميل الكل بواسطة Internet Download Manager - d:\program files\Internet Download Manager\IEGetAll.htm
    IE: تحميل بواسطة Internet Download Manager - d:\program files\Internet Download Manager\IEExt.htm
    IE: تحميل محتوى FLV بواسطة Internet Download Manager - d:\program files\Internet Download Manager\IEGetVL.htm
    FF - ProfilePath - c:\docume~1\ABDULL~1\APPLIC~1\Mozilla\Firefox\Profiles\hjfuxx8g.default\
    FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
    FF - component: c:\documents and settings\abdullah abbas\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
    FF - plugin: d:\program files\Adobe\Reader 8.0\Reader\browser\nppdf32.dll
    FF - plugin: d:\program files\Vista Codecs 5.0.7\rm\browser\plugins\nppl3260.dll
    FF - plugin: d:\program files\Vista Codecs 5.0.7\rm\browser\plugins\nprpjplug.dll
    .
    **************************************************************************
    catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-06-06 07:39
    Windows 5.1.2600 Service Pack 2 NTFS
    scanning hidden processes ...
    scanning hidden autostart entries ...
    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    BigDog303 = c:\windows\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)????????????????0?????????@??????????????
    scanning hidden files ...
    scan completed successfully
    hidden files: 0
    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------
    - - - - - - - > 'explorer.exe'(3680)
    c:\windows\system32\msi.dll
    c:\windows\system32\ieframe.dll
    c:\windows\system32\webcheck.dll
    c:\windows\system32\WPDShServiceObj.dll
    c:\windows\system32\PortableDeviceTypes.dll
    c:\windows\system32\PortableDeviceApi.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    c:\windows\system32\acs.exe
    d:\program files\Nero 7\InCD\InCDsrv.exe
    c:\program files\Java\jre6\bin\jqs.exe
    c:\windows\system32\nvsvc32.exe
    c:\program files\CyberLink\Shared Files\RichVideo.exe
    c:\program files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    c:\windows\system32\rundll32.exe
    d:\program files\HP\Digital Imaging\bin\hpqste08.exe
    d:\program files\HP\Digital Imaging\bin\hpqbam08.exe
    .
    **************************************************************************
    .
    Completion time: 2009-06-06 7:41 - machine was rebooted
    ComboFix-quarantined-files.txt 2009-06-06 03:40
    Pre-Run: 10,237,927,424 bytes free
    Post-Run: 10,213,392,384 bytes free
    212

    hijackthis







    ..
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 07:54:44 ص, on 06/06/2009
    Platform: Windows XP SP2 (WinNT 5.01.2600)
    MSIE: Internet Explorer v8.00 (8.00.6001.18702)
    Boot mode: Normal
    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\WINDOWS\system32\acs.exe
    C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
    C:\WINDOWS\system32\svchost.exe
    D:\Program Files\Nero 7\InCD\InCDsrv.exe
    C:\Program Files\Java\jre6\bin\jqs.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\nvsvc32.exe
    C:\WINDOWS\System32\svchost.exe
    C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\WLAN\ACU.exe
    C:\WINDOWS\RTHDCPL.EXE
    C:\WINDOWS\system32\RUNDLL32.EXE
    C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
    D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
    D:\Program Files\Nero 7\InCD\NBHGui.exe
    D:\Program Files\Nero 7\InCD\InCD.exe
    C:\WINDOWS\VM303_STI.EXE
    D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe
    C:\Program Files\Java\jre6\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    D:\Program Files\Internet Download Manager\IDMan.exe
    D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    D:\Program Files\TechniSat DVB\bin\Server4PC.exe
    C:\WINDOWS\system32\wuauclt.exe
    D:\Program Files\Internet Download Manager\IEMonitor.exe
    D:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
    D:\Program Files\Trend Micro\HijackThis\HijackThis.exe
    D:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - D:\Program Files\Internet Download Manager\IDMIECC.dll
    O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - D:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
    O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
    O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
    O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
    O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
    O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - D:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
    O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - D:\Program Files\Save Flash\SaveFlash.dll
    O4 - HKLM\..\Run: [ACU] "C:\Program Files\WLAN\ACU.exe" -nogui
    O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
    O4 - HKLM\..\Run: [GEST] m‘|\ü
    O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
    O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
    O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
    O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
    O4 - HKLM\..\Run: [RemoteControl] "D:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
    O4 - HKLM\..\Run: [LanguageShortcut] "D:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
    O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
    O4 - HKLM\..\Run: [SecurDisc] D:\Program Files\Nero 7\InCD\NBHGui.exe
    O4 - HKLM\..\Run: [InCD] D:\Program Files\Nero 7\InCD\InCD.exe
    O4 - HKLM\..\Run: [BigDog303] C:\WINDOWS\VM303_STI.EXE VIMICRO USB PC Camera (ZC0301PLH)
    O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "D:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
    O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [IDMan] D:\Program Files\Internet Download Manager\IDMan.exe /onboot
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = D:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: Server4PC.lnk = D:\Program Files\TechniSat DVB\bin\Server4PC.exe
    O8 - Extra context menu item: إضافة إلى حاجب إعلان الشعار - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
    O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - D:\Program Files\Internet Download Manager\IEGetAll.htm
    O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - D:\Program Files\Internet Download Manager\IEExt.htm
    O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - D:\Program Files\Internet Download Manager\IEGetVL.htm
    O9 - Extra button: إحصائيات حماية حركة زيارة الويب - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
    O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: HP Smart Select - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - D:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
    O23 - Service: WLAN Configuration Service (ACS) - Unknown owner - C:\WINDOWS\system32\acs.exe
    O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
    O23 - Service: ES lite Service for program management. (ES lite Service) - Unknown owner - C:\Program Files\Gigabyte\EasySaver\ESSVR.EXE
    O23 - Service: InCD Helper (InCDsrv) - Nero AG - D:\Program Files\Nero 7\InCD\InCDsrv.exe
    O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
    O23 - Service: NBService - Nero AG - D:\Program Files\Nero 7\Nero BackItUp\NBService.exe
    O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Unknown owner - D:\Program Files\Nero 7\InCD\NBHRegInCDSrv.exe (file missing)
    O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
    O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
    O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
    O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
    --
    End of file - 8886 bytes
     

مشاركة هذه الصفحة

جاري تحميل الصفحة...