1. إستبعاد الملاحظة
  2. الإدارة العامة

    صفحة منتديات زيزووم للأمن والحماية

  3. الإدارة العامة

    الصفحة الرسمية لمنتديات زيزووم للأمن والحماية الفيس بوك

  4. الإدارة العامة

    الصفحة الرسمية لمنتديات زيزووم للأمن والحماية التلكرام

physical memory 99%

الموضوع في 'منتدى مشاكـل وحلول الحـاسب' بواسطة رفـيـق الـعـمـر, بتاريخ ‏أغسطس 13, 2009.

  1. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10


    الصورة تعبر عن الف كلمه
    بامانه المشكله ليست بجهازي ابدا..
    صاحب المشكله لديه ويندوز فيستا
    الحين احنا خايفين على الجهاز ؟؟ التمس الحل منكم ؟
    [​IMG]
    :f::f:
     
  2. النقيب

    النقيب زيزوومي جديد

    إنضم إلينا في:
    ‏ديسمبر 5, 2008
    المشاركات:
    1,265
    الإعجابات :
    8
    نقاط الجائزة:
    0
    الإقامة:
    حولك حوليك
    [/FONT]
    ________________________________________________________________________________________[/FONT]
    حمل هذا البرنامج[/FONT]
    http://www.hijackthis.de/downloads/HJTInstall.exe
    شغل البرنامج[/FONT] ==> واضغط على[/FONT]
    Do a system scan and save log
    لحظات .. ويظهر لك تقرير داخل المفكرة[/FONT]==>قم بنسخه ولصقه في ردك القاادم[/FONT] ,,

     
  3. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    طيب اخي راجع لك بالتقرير
     
  4. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 6:06:12 PM, on 13/08/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v8.00 (8.00.6001.18813)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\Dwm.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\taskeng.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
    C:\Program Files\Athan\Athan.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Program Files\Windows Live\Contacts\wlcomm.exe
    C:\Windows\system32\igfxsrvc.exe
    G:\Program Files\K-Lite Codec Pack\Media Player Classic\mplayerc.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    G:\PC Cleaners\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.latrobe.edu.au/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://vaio-online.sony.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
    O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\windows sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - .DEFAULT User Startup: Audio Filter.lnk = C:\Program Files\Sony\SonicStage Mastering Studio\Audio Filter\SSMSFilter.exe (User 'Default user')
    O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O13 - Gopher Prefix:
    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS1\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS2\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS3\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS4\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS5\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS6\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS7\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS8\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS9\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS10\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS11\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS12\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS13\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
    O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\Image Converter 3\ICScsiSV.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 3\IcVzMon.exe
    O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\stacsv.exe
    O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
    O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
    O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
    O23 - Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe
    O23 - Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
    O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
    O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 12593 bytes
     
  5. النقيب

    النقيب زيزوومي جديد

    إنضم إلينا في:
    ‏ديسمبر 5, 2008
    المشاركات:
    1,265
    الإعجابات :
    8
    نقاط الجائزة:
    0
    الإقامة:
    حولك حوليك

    عطل برامج الحماية عن العمل[/FONT]

    [/FONT]

    ثم [/FONT]

    [/FONT]
    حمل الاداة التالية واحفظها على سطح المكتب[/FONT]
    [/FONT]
    http://subs.geekstogo.com/ComboFix.exe[/FONT]

    [/FONT]
    عند تشغيلها بتظهر لك رسالة ,, اضغط على [/FONT]>> Yes[/FONT]
    [/FONT]
    بعدها بتظهر لك رساله ثانيه ,, اضغط على [/FONT]>> Yes[/FONT]
    [/FONT]
    اثناء الفحص ممكن يعاد تشغيل الجهاز[/FONT]
    [/FONT]
    وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه[/FONT]
    [/FONT]
    لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي[/FONT]
    [/FONT]
    انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة[/FONT]



    بعدها تقرير هاي جاك جديد









     
  6. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    طيب ولا يهمك بيجيكك التقرير الاخر بعد الانتهاء من الكمبو فكس
     
  7. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    هذا تقرير كومبوفكس



     
  8. النقيب

    النقيب زيزوومي جديد

    إنضم إلينا في:
    ‏ديسمبر 5, 2008
    المشاركات:
    1,265
    الإعجابات :
    8
    نقاط الجائزة:
    0
    الإقامة:
    حولك حوليك
    اخوي وين التقرير ماني شايفه :q: وعندي سؤال

    صاحب الجهاز ساكن في استراليا ؟؟



     
  9. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    ComboFix 09-01-05.05 - naneee88 2009-08-13 18:57:55.2 - NTFSx86
    Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.1.1033.18.1014.190 [GMT 10:00]
    Running from: c:\users\naneee88\Desktop\ComboFix.exe
    AV: Kaspersky Internet Security *On-access scanning disabled* (Updated)
    AV: Norton Internet Security *On-access scanning enabled* (Outdated)
    FW: Norton Internet Security *enabled*
    FW: Kaspersky Internet Security *disabled*
    .
    - REDUCED FUNCTIONALITY MODE -
    .

    ((((((((((((((((((((((((( Files Created from 2009-07-13 to 2009-08-13 )))))))))))))))))))))))))))))))
    .

    2009-08-13 18:44 . 2009-08-13 18:45 219,375,903 --a------ c:\windows\MEMORY.DMP
    2009-08-12 14:35 . 2009-06-16 01:23 1,256,448 --a------ c:\windows\System32\lsasrv.dll
    2009-08-12 14:35 . 2009-06-16 01:21 499,712 --a------ c:\windows\System32\kerberos.dll
    2009-08-12 14:35 . 2009-06-16 04:20 439,896 --a------ c:\windows\System32\drivers\ksecdd.sys
    2009-08-12 14:35 . 2009-06-16 01:24 270,848 --a------ c:\windows\System32\schannel.dll
    2009-08-12 14:35 . 2009-06-16 01:22 213,504 --a------ c:\windows\System32\msv1_0.dll
    2009-08-12 14:35 . 2009-06-16 01:24 175,104 --a------ c:\windows\System32\wdigest.dll
    2009-08-12 14:35 . 2009-06-16 01:24 72,704 --a------ c:\windows\System32\secur32.dll
    2009-08-12 14:35 . 2009-06-15 22:57 9,728 --a------ c:\windows\System32\lsass.exe
    2009-08-12 06:39 . 2009-06-04 22:34 2,066,432 --a------ c:\windows\System32\mstscax.dll
    2009-08-12 06:39 . 2009-06-10 22:12 160,256 --a------ c:\windows\System32\wkssvc.dll
    2009-08-12 06:39 . 2009-06-10 22:07 91,136 --a------ c:\windows\System32\avifil32.dll
    2009-08-12 06:39 . 2009-07-18 00:35 71,680 --a------ c:\windows\System32\atl.dll
    2009-08-12 06:38 . 2009-07-14 20:59 8,147,456 --a------ c:\windows\System32\wmploc.DLL
    2009-08-12 06:38 . 2009-07-14 23:00 313,344 --a------ c:\windows\System32\wmpdxm.dll
    2009-08-12 06:38 . 2009-07-14 18:30 43,520 --a------ c:\windows\System32\msdxm.tlb
    2009-08-12 06:38 . 2009-07-14 18:30 18,432 --a------ c:\windows\System32\amcompat.tlb
    2009-08-12 06:38 . 2009-07-14 22:58 7,680 --a------ c:\windows\System32\spwmp.dll
    2009-08-12 06:38 . 2009-07-14 22:59 4,096 --a------ c:\windows\System32\msdxm.ocx
    2009-08-12 06:38 . 2009-07-14 22:59 4,096 --a------ c:\windows\System32\dxmasf.dll
    2009-08-11 14:38 . 2009-08-11 14:40 <DIR> d-------- c:\windows\System32\Adobe
    2009-07-29 21:00 . 2009-07-29 21:00 <DIR> d-------- c:\users\naneee88\AppData\Roaming\Malwarebytes
    2009-07-29 21:00 . 2009-07-29 21:00 <DIR> d-------- c:\users\All Users\Malwarebytes
    2009-07-29 21:00 . 2009-07-29 21:00 <DIR> d-------- c:\programdata\Malwarebytes
    2009-07-23 15:00 . 2009-07-23 15:00 <DIR> d-------- c:\users\naneee88\AppData\Roaming\IObit
    2009-07-20 20:27 . 2009-07-20 20:27 <DIR> d-------- c:\users\naneee88\AppData\Roaming\Ahead
    2009-07-20 20:19 . 2009-07-20 20:19 <DIR> d-------- c:\program files\Nero
    2009-07-20 20:19 . 2009-07-20 20:19 <DIR> d-------- c:\program files\Common Files\Ahead
    2009-07-15 22:21 . 2009-07-15 22:21 <DIR> d-------- c:\users\naneee88\AppData\Roaming\Nokia Multimedia Player
    2009-07-15 22:01 . 2009-07-15 22:22 <DIR> d-------- c:\users\naneee88\AppData\Roaming\Nokia
    2009-07-15 22:01 . 2009-07-15 22:01 <DIR> d-------- c:\users\naneee88\AppData\Roaming\Datalayer
    2009-07-15 21:58 . 2009-07-19 15:28 <DIR> d-------- c:\users\naneee88\Phone Browser
    2009-07-15 21:22 . 2009-07-15 21:22 <DIR> d-------- c:\program files\Common Files\Nokia
    2009-07-15 21:21 . 2009-07-15 21:24 <DIR> d-------- c:\users\naneee88\AppData\Roaming\PC Suite
    2009-07-15 21:21 . 2009-07-15 21:21 <DIR> d-------- c:\users\All Users\PC Suite
    2009-07-15 21:21 . 2009-07-15 21:21 <DIR> d-------- c:\programdata\PC Suite
    2009-07-15 21:21 . 2009-07-15 21:22 <DIR> d-------- c:\program files\Common Files\PCSuite
    2009-07-15 21:20 . 2009-07-15 21:22 <DIR> d-------- c:\program files\Nokia
    2009-07-15 21:18 . 2009-07-15 21:18 <DIR> d-------- c:\users\All Users\Downloaded Installations
    2009-07-15 21:18 . 2009-07-15 21:18 <DIR> d-------- c:\programdata\Downloaded Installations
    2009-07-15 20:46 . 2009-06-15 22:52 289,792 --a------ c:\windows\System32\atmfd.dll
    2009-07-15 20:46 . 2009-06-16 01:24 156,672 --a------ c:\windows\System32\t2embed.dll
    2009-07-15 20:46 . 2009-06-16 01:20 72,704 --a------ c:\windows\System32\fontsub.dll
    2009-07-15 20:46 . 2009-06-16 01:20 10,240 --a------ c:\windows\System32\dciman32.dll

    .
    (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2009-08-13 08:49 --------- d-----w c:\programdata\Kaspersky Lab
    2009-08-13 06:10 671,776 --sha-w c:\windows\system32\drivers\fidbox2.dat
    2009-08-13 06:10 4,424 --sha-w c:\windows\system32\drivers\fidbox2.idx
    2009-08-13 06:10 34,660 --sha-w c:\windows\system32\drivers\fidbox.idx
    2009-08-13 06:10 3,895,840 --sha-w c:\windows\system32\drivers\fidbox.dat
    2009-08-12 22:53 --------- d-----w c:\programdata\Microsoft Help
    2009-08-12 22:51 --------- d-----w c:\program files\Windows Mail
    2009-08-11 04:40 --------- d-----w c:\program files\Google
    2009-08-05 23:55 --------- d-----w c:\program files\Common Files\delet
    2009-08-01 01:02 --------- d-----w c:\program files\Microsoft Silverlight
    2009-07-21 21:52 915,456 ----a-w c:\windows\System32\wininet.dll
    2009-07-21 21:47 71,680 ----a-w c:\windows\System32\iesetup.dll
    2009-07-21 21:47 109,056 ----a-w c:\windows\System32\iesysprep.dll
    2009-07-21 20:13 133,632 ----a-w c:\windows\System32\ieUnatt.exe
    2009-07-17 03:44 737,280 ----a-w c:\windows\iun6002.exe
    2009-07-17 03:44 --------- d-----w c:\program files\Athan
    2009-07-05 04:47 94,643 ----a-w c:\windows\system32\drivers\klick.dat
    2009-07-05 04:47 33,808 ----a-w c:\windows\system32\drivers\klbg.sys
    2009-07-05 04:47 105,395 ----a-w c:\windows\system32\drivers\klin.dat
    2009-07-05 03:46 --------- d-----w c:\program files\Kaspersky Lab
    2009-07-04 13:21 --------- d-----w c:\program files\Alfa Autorun Killer 2
    2009-07-04 12:44 --------- d-----w c:\programdata\Avira
    2009-06-17 05:58 --------- d-----w c:\program files\Microsoft Works
    2009-04-04 05:08 174 --sha-w c:\program files\desktop.ini
    2008-08-31 03:20 56 ---ha-w c:\users\All Users\ezsidmv.dat
    2008-08-31 03:20 56 ---ha-w c:\programdata\ezsidmv.dat
    .

    ((((((((((((((((((((((((((((( snapshot@2009-07-25_23.00.28.57 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2009-08-13 06:09:42 4,132 ----a-w c:\windows\bthservsdp.dat
    - 2009-07-25 12:50:45 51,200 ----a-w c:\windows\inf\infpub.dat
    + 2009-08-13 08:50:02 51,200 ----a-w c:\windows\inf\infpub.dat
    - 2009-07-25 12:50:45 143,360 ----a-w c:\windows\inf\infstrng.dat
    + 2009-08-13 08:50:02 143,360 ----a-w c:\windows\inf\infstrng.dat
    + 2005-04-19 23:42:14 142,528 ----a-r c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8003\ATP.DLL
    + 2007-05-10 03:45:34 8,069,464 ----a-r c:\windows\Installer\$PatchCache$\Managed\90404A0900063D11C8EF10054038389C\11.0.8173\OWC11.DLL
    - 2009-07-16 01:15:59 1,165,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-08-12 22:52:59 1,165,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\accicons.exe
    - 2009-07-16 01:16:00 20,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    + 2009-08-12 22:52:59 20,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\cagicon.exe
    - 2009-07-16 01:15:59 159,504 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    + 2009-08-12 22:52:59 159,504 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\inficon.exe
    - 2009-07-16 01:15:59 184,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    + 2009-08-12 22:52:59 184,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\joticon.exe
    - 2009-07-16 01:16:00 217,864 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
    + 2009-08-12 22:52:59 217,864 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\misc.exe
    - 2009-07-16 01:16:00 18,704 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    + 2009-08-12 22:52:59 18,704 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\mspicons.exe
    - 2009-07-16 01:16:00 35,088 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    + 2009-08-12 22:52:59 35,088 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\oisicon.exe
    - 2009-07-16 01:16:00 845,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    + 2009-08-12 22:52:59 845,584 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\outicon.exe
    - 2009-07-16 01:16:00 922,384 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    + 2009-08-12 22:52:59 922,384 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pptico.exe
    - 2009-07-16 01:16:00 272,648 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    + 2009-08-12 22:52:59 272,648 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\pubs.exe
    - 2009-07-16 01:16:00 888,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    + 2009-08-12 22:52:59 888,080 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\wordicon.exe
    - 2009-07-16 01:15:59 1,172,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    + 2009-08-12 22:52:59 1,172,240 ----a-r c:\windows\Installer\{90120000-0030-0000-0000-0000000FF1CE}\xlicons.exe
    - 2008-08-02 23:33:14 135,168 ----a-r c:\windows\Installer\{90A40409-6000-11D3-8CFE-0150048383C9}\misc.exe
    + 2009-08-12 22:54:21 135,168 ----a-r c:\windows\Installer\{90A40409-6000-11D3-8CFE-0150048383C9}\misc.exe
    - 2009-07-16 01:17:39 1,165,584 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
    + 2009-08-12 22:53:25 1,165,584 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\accicons.exe
    - 2009-07-16 01:17:39 20,240 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
    + 2009-08-12 22:53:25 20,240 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\cagicon.exe
    - 2009-07-16 01:17:39 217,864 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
    + 2009-08-12 22:53:25 217,864 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\misc.exe
    - 2009-07-16 01:17:39 18,704 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
    + 2009-08-12 22:53:25 18,704 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\mspicons.exe
    - 2009-07-16 01:17:39 35,088 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
    + 2009-08-12 22:53:25 35,088 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\oisicon.exe
    - 2009-07-16 01:17:39 845,584 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
    + 2009-08-12 22:53:25 845,584 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\outicon.exe
    - 2009-07-16 01:17:39 922,384 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
    + 2009-08-12 22:53:25 922,384 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pptico.exe
    - 2009-07-16 01:17:39 272,648 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
    + 2009-08-12 22:53:25 272,648 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\pubs.exe
    - 2009-07-16 01:17:39 888,080 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
    + 2009-08-12 22:53:25 888,080 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\wordicon.exe
    - 2009-07-16 01:17:39 1,172,240 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
    + 2009-08-12 22:53:25 1,172,240 ----a-r c:\windows\Installer\{91120000-0031-0000-0000-0000000FF1CE}\xlicons.exe
    - 2009-07-25 12:47:48 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    + 2009-08-13 08:45:00 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
    - 2009-07-25 12:47:48 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    + 2009-08-13 08:45:00 2,048 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
    - 2009-06-23 10:50:57 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-08-09 06:43:23 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-06-23 10:50:57 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-08-09 06:43:23 32,768 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-06-23 10:50:57 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-08-09 06:43:23 16,384 --sha-w c:\windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2009-07-25 12:48:59 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat
    + 2009-08-13 08:48:18 262,144 --sha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat
    + 2009-08-13 08:48:18 262,144 ---ha-w c:\windows\ServiceProfiles\LocalService\ntuser.dat.LOG1
    - 2009-07-23 05:50:08 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-08-13 04:57:28 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-07-23 05:50:08 32,768 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-08-13 04:57:28 32,768 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-04-05 04:19:46 2,642,383 -c--a-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
    + 2009-08-13 04:45:03 2,642,383 -c--a-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareLicensing\tokens.dat
    - 2009-07-23 05:50:08 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-08-13 04:57:28 16,384 --sha-w c:\windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2009-07-25 12:49:52 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat
    + 2009-08-13 08:48:33 262,144 --sha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat
    + 2009-08-13 08:48:33 262,144 ---ha-w c:\windows\ServiceProfiles\NetworkService\ntuser.dat.LOG1
    + 2009-07-31 13:27:52 131,072 ----a-w c:\windows\System32\Adobe\Director\np32dsw.dll
    + 2009-07-31 13:41:42 206,264 ----a-w c:\windows\System32\Adobe\Director\SwDir.dll
    + 2009-07-31 13:42:36 67,000 ----a-w c:\windows\System32\Adobe\Director\SWDNLD.EXE
    + 2009-07-31 13:25:38 614,400 ----a-w c:\windows\System32\Adobe\Shockwave 11\Control.dll
    + 2009-07-31 13:04:36 1,798,144 ----a-w c:\windows\System32\Adobe\Shockwave 11\dirapi.dll
    + 2009-07-31 13:28:02 9,216 ----a-w c:\windows\System32\Adobe\Shockwave 11\DynaPlayer.dll
    + 2009-07-31 12:54:12 714,752 ----a-w c:\windows\System32\Adobe\Shockwave 11\gi.dll
    + 2009-07-31 12:54:14 1,886,320 ----a-w c:\windows\System32\Adobe\Shockwave 11\gt.exe
    + 2009-07-31 12:54:12 79,488 ----a-w c:\windows\System32\Adobe\Shockwave 11\gtapi.dll
    + 2009-07-31 13:00:22 1,011,712 ----a-w c:\windows\System32\Adobe\Shockwave 11\iml32.dll
    + 2009-07-31 13:26:54 372,736 ----a-w c:\windows\System32\Adobe\Shockwave 11\Plugin.dll
    + 2009-07-31 13:28:24 446,464 ----a-w c:\windows\System32\Adobe\Shockwave 11\Proj.dll
    + 2009-07-31 13:40:48 468,408 ----a-w c:\windows\System32\Adobe\Shockwave 11\SwHelper_1151601.exe
    + 2009-07-31 13:26:04 114,688 ----a-w c:\windows\System32\Adobe\Shockwave 11\SwInit.exe
    + 2009-07-31 13:26:00 94,208 ----a-w c:\windows\System32\Adobe\Shockwave 11\SwMenu.dll
    + 2009-07-31 12:54:12 132,472 ----a-w c:\windows\System32\Adobe\Shockwave 11\SYMCCHECKER.DLL
    + 2009-08-11 04:40:10 87,618 ----a-w c:\windows\System32\Adobe\Shockwave 11\uninstaller.exe
    - 2009-07-25 12:53:36 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    + 2009-08-13 08:47:35 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
    - 2009-07-25 12:53:36 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    + 2009-08-13 08:47:35 32,768 --sha-w c:\windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
    - 2009-07-25 12:53:36 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    + 2009-08-13 08:47:35 16,384 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
    - 2009-07-16 22:09:13 245,760 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
    + 2009-08-13 04:56:46 245,760 --sha-w c:\windows\System32\config\systemprofile\AppData\Roaming\Microsoft\Windows\IETldCache\index.dat
    - 2009-07-25 12:55:46 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
    + 2009-08-13 08:57:48 262,144 ----a-w c:\windows\System32\config\systemprofile\ntuser.dat
    - 2009-05-09 03:36:23 173,056 ----a-w c:\windows\System32\ie4uinit.exe
    + 2009-07-21 20:13:51 173,056 ----a-w c:\windows\System32\ie4uinit.exe
    - 2009-05-09 05:34:07 385,536 ----a-w c:\windows\System32\iedkcs32.dll
    + 2009-07-21 21:47:21 386,048 ----a-w c:\windows\System32\iedkcs32.dll
    - 2009-05-09 05:34:26 11,064,832 ----a-w c:\windows\System32\ieframe.dll
    + 2009-07-21 21:47:26 11,067,392 ----a-w c:\windows\System32\ieframe.dll
    - 2009-03-08 11:31:55 183,808 ----a-w c:\windows\System32\iepeers.dll
    + 2009-07-21 21:47:26 184,320 ----a-w c:\windows\System32\iepeers.dll
    - 2009-05-09 05:34:27 55,808 ----a-w c:\windows\System32\iernonce.dll
    + 2009-07-21 21:47:26 55,808 ----a-w c:\windows\System32\iernonce.dll
    - 2009-05-09 05:34:34 1,985,024 ----a-w c:\windows\System32\iertutil.dll
    + 2009-07-21 21:47:27 1,985,536 ----a-w c:\windows\System32\iertutil.dll
    - 2009-05-09 05:34:35 164,352 ----a-w c:\windows\System32\ieui.dll
    + 2009-07-21 21:47:28 164,352 ----a-w c:\windows\System32\ieui.dll
    - 2009-05-09 05:35:47 25,600 ----a-w c:\windows\System32\jsproxy.dll
    + 2009-07-21 21:47:47 25,600 ----a-w c:\windows\System32\jsproxy.dll
    + 2009-03-16 08:59:18 53,248 ----a-w c:\windows\System32\Macromed\Common\SwSupport.dll
    + 2009-07-16 11:00:30 581,632 ----a-w c:\windows\System32\Macromed\Shockwave 10\Control.dll
    + 2009-07-16 11:00:30 1,490,944 ----a-w c:\windows\System32\Macromed\Shockwave 10\dirapiX.dll
    + 2009-07-16 11:00:30 24,576 ----a-w c:\windows\System32\Macromed\Shockwave 10\DynaPlayer.dll
    + 2009-07-16 11:00:30 606,208 ----a-w c:\windows\System32\Macromed\Shockwave 10\iml32X.dll
    + 2009-07-16 11:00:30 339,968 ----a-w c:\windows\System32\Macromed\Shockwave 10\Plugin.dll
    + 2009-07-16 11:00:30 475,136 ----a-w c:\windows\System32\Macromed\Shockwave 10\PluginPing.dll
    + 2009-07-16 11:00:30 180,224 ----a-w c:\windows\System32\Macromed\Shockwave 10\Proj.dll
    + 2009-07-16 11:00:30 77,824 ----a-w c:\windows\System32\Macromed\Shockwave 10\SwInit.exe
    + 2009-07-16 11:00:30 86,016 ----a-w c:\windows\System32\Macromed\Shockwave 10\SwMenuX.dll
    + 2009-07-16 11:00:30 98,304 ----a-w c:\windows\System32\Macromed\Shockwave 10\SwOnce.dll
    - 2009-05-09 05:50:28 64,512 ----a-w c:\windows\System32\migration\WininetPlugin.dll
    + 2009-07-21 21:52:28 64,512 ----a-w c:\windows\System32\migration\WininetPlugin.dll
    - 2009-07-07 15:10:56 24,539,592 ----a-w c:\windows\System32\mrt.exe
    + 2009-07-30 00:49:14 24,281,536 ----a-w c:\windows\System32\mrt.exe
    - 2009-03-08 11:32:24 594,432 ----a-w c:\windows\System32\msfeeds.dll
    + 2009-07-21 21:48:27 594,432 ----a-w c:\windows\System32\msfeeds.dll
    - 2009-03-08 11:31:51 55,296 ----a-w c:\windows\System32\msfeedsbs.dll
    + 2009-07-21 21:48:27 55,296 ----a-w c:\windows\System32\msfeedsbs.dll
    - 2009-03-08 11:31:52 13,312 ----a-w c:\windows\System32\msfeedssync.exe
    + 2009-07-21 20:13:15 13,312 ----a-w c:\windows\System32\msfeedssync.exe
    - 2009-05-09 05:38:21 5,936,128 ----a-w c:\windows\System32\mshtml.dll
    + 2009-07-21 21:48:31 5,937,152 ----a-w c:\windows\System32\mshtml.dll
    - 2009-03-08 11:34:16 109,568 ----a-w c:\windows\System32\occache.dll
    + 2009-07-21 21:50:46 206,848 ----a-w c:\windows\System32\occache.dll
    - 2009-07-24 00:47:57 105,852 ----a-w c:\windows\System32\perfc009.dat
    + 2009-08-13 08:52:03 105,852 ----a-w c:\windows\System32\perfc009.dat
    - 2009-07-24 00:47:57 600,378 ----a-w c:\windows\System32\perfh009.dat
    + 2009-08-13 08:52:03 600,378 ----a-w c:\windows\System32\perfh009.dat
    - 2009-07-23 04:17:55 6,553,600 ----a-w c:\windows\System32\SMI\Store\Machine\schema.dat
    + 2009-08-13 06:10:15 6,553,600 ----a-w c:\windows\System32\SMI\Store\Machine\schema.dat
    - 2009-05-09 05:49:46 1,207,808 ----a-w c:\windows\System32\urlmon.dll
    + 2009-07-21 21:52:13 1,208,832 ----a-w c:\windows\System32\urlmon.dll
    - 2009-07-25 12:50:04 17,140 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2772995446-796403728-2621425064-1003_UserData.bin
    + 2009-08-13 08:49:13 17,244 ----a-w c:\windows\System32\WDI\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2772995446-796403728-2621425064-1003_UserData.bin
    - 2009-07-25 12:50:04 96,474 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    + 2009-08-13 08:49:12 100,264 ----a-w c:\windows\System32\WDI\BootPerformanceDiagnostics_SystemData.bin
    - 2009-07-24 13:26:38 5,054 ----a-w c:\windows\System32\WDI\ERCQueuedResolutions.dat
    + 2009-08-11 22:30:34 5,054 ----a-w c:\windows\System32\WDI\ERCQueuedResolutions.dat
    - 2009-07-25 12:49:52 60,294 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    + 2009-08-13 07:14:09 62,076 ----a-w c:\windows\System32\WDI\ShutdownPerformanceDiagnostics_SystemData.bin
    - 2009-07-25 12:06:05 307,812 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
    + 2009-08-10 08:50:07 332,582 ----a-w c:\windows\System32\WDI\SuspendPerformanceDiagnostics_SystemData_S3.bin
    - 2008-12-16 05:31:35 10,622,976 ----a-w c:\windows\System32\wmp.dll
    + 2009-07-14 13:00:16 10,626,048 ----a-w c:\windows\System32\wmp.dll
    - 2009-07-21 21:45:19 85,629,682 ----a-w c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin
    + 2009-08-12 04:32:18 94,064,640 ----a-w c:\windows\winsxs\ManifestCache\6.0.6002.18005_001c11ba_blobs.bin
    + 2009-07-17 14:52:41 71,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6000.16889_none_a8ec88265cc499db\atl.dll
    + 2009-07-17 14:39:28 71,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6000.21088_none_a974fcc975e35390\atl.dll
    + 2009-07-17 14:35:11 71,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6001.18293_none_aac1f52459f8aeb3\atl.dll
    + 2009-07-17 14:24:52 71,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6001.22474_none_ab6233f773052d19\atl.dll
    + 2009-07-17 13:54:43 71,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6002.18070_none_acbb07ec57117d17\atl.dll
    + 2009-07-17 14:15:48 71,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-atl_31bf3856ad364e35_6.0.6002.22179_none_ad4da751702700f0\atl.dll
    + 2009-07-21 21:52:13 1,208,832 ----a-w c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.18813_none_97c46c79ec9c8e1f\urlmon.dll
    + 2009-07-22 06:02:50 1,208,832 ----a-w c:\windows\winsxs\x86_microsoft-windows-i..ersandsecurityzones_31bf3856ad364e35_8.0.6001.22903_none_9858d93105b211f8\urlmon.dll
    + 2009-07-21 21:47:47 25,600 ----a-w c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18813_none_e4ca481bb7a5b4b2\jsproxy.dll
    + 2009-07-21 21:52:28 915,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18813_none_e4ca481bb7a5b4b2\wininet.dll
    + 2009-07-21 21:52:28 64,512 ----a-w c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.18813_none_e4ca481bb7a5b4b2\WininetPlugin.dll
    + 2009-07-22 05:58:31 25,600 ----a-w c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.22903_none_e55eb4d2d0bb388b\jsproxy.dll
    + 2009-07-22 06:03:04 915,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.22903_none_e55eb4d2d0bb388b\wininet.dll
    + 2009-07-22 06:03:04 64,512 ----a-w c:\windows\winsxs\x86_microsoft-windows-i..tocolimplementation_31bf3856ad364e35_8.0.6001.22903_none_e55eb4d2d0bb388b\WininetPlugin.dll
    + 2009-07-21 21:47:21 386,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.18813_none_5731c1176d4fd579\iedkcs32.dll
    + 2009-07-22 05:58:09 386,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-adminkitbranding_31bf3856ad364e35_8.0.6001.22903_none_57c62dce86655952\iedkcs32.dll
    + 2009-07-21 21:47:26 184,320 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.18813_none_1fa4d94d07e07d14\iepeers.dll
    + 2009-07-22 05:58:12 184,320 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-behaviors_31bf3856ad364e35_8.0.6001.22903_none_2039460420f600ed\iepeers.dll
    + 2009-07-21 21:48:27 594,432 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.18813_none_42c7deea5049076a\msfeeds.dll
    + 2009-07-22 05:59:09 594,432 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-feeds-platform_31bf3856ad364e35_8.0.6001.22903_none_435c4ba1695e8b43\msfeeds.dll
    + 2009-07-21 21:48:27 55,296 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18813_none_df2f43a7f094a691\msfeedsbs.dll
    + 2009-07-21 20:13:15 13,312 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.18813_none_df2f43a7f094a691\msfeedssync.exe
    + 2009-07-22 05:59:09 55,296 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22903_none_dfc3b05f09aa2a6a\msfeedsbs.dll
    + 2009-07-22 04:26:56 13,312 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-feedsbs_31bf3856ad364e35_8.0.6001.22903_none_dfc3b05f09aa2a6a\msfeedssync.exe
    + 2009-07-21 21:48:31 5,937,152 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.18813_none_f624673a37fc1de8\mshtml.dll
    + 2009-07-22 05:59:10 5,938,176 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-htmlrendering_31bf3856ad364e35_8.0.6001.22903_none_f6b8d3f15111a1c1\mshtml.dll
    + 2009-07-21 21:47:26 246,272 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.18813_none_731038fd60633f31\ieproxy.dll
    + 2009-07-22 05:58:12 246,272 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-ieproxy_31bf3856ad364e35_8.0.6001.22903_none_73a4a5b47978c30a\ieproxy.dll
    + 2009-07-21 21:47:28 197,632 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.18813_none_2a6e8493b00ba59f\IEShims.dll
    + 2009-07-22 05:58:13 197,632 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-ieshims_31bf3856ad364e35_8.0.6001.22903_none_2b02f14ac9212978\IEShims.dll
    + 2009-07-21 20:13:58 133,632 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18813_none_124354a72fd12395\ieUnatt.exe
    + 2009-07-21 21:53:43 638,216 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.18813_none_124354a72fd12395\iexplore.exe
    + 2009-07-22 04:27:43 133,632 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22903_none_12d7c15e48e6a76e\ieUnatt.exe
    + 2009-07-22 06:04:09 638,232 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-internetexplorer_31bf3856ad364e35_8.0.6001.22903_none_12d7c15e48e6a76e\iexplore.exe
    + 2009-07-21 21:50:46 206,848 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.18813_none_1a07bcca29f5b87d\occache.dll
    + 2009-07-22 06:01:17 206,848 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-objectcontrolviewer_31bf3856ad364e35_8.0.6001.22903_none_1a9c2981430b3c56\occache.dll
    + 2009-07-21 21:47:27 1,985,536 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18813_none_2a84fef7a256d30f\iertutil.dll
    + 2009-07-21 21:51:55 129,536 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.18813_none_2a84fef7a256d30f\sqmapi.dll
    + 2009-07-22 05:58:13 1,985,536 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.22903_none_2b196baebb6c56e8\iertutil.dll
    + 2009-07-22 06:02:33 129,536 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-runtimeutilities_31bf3856ad364e35_8.0.6001.22903_none_2b196baebb6c56e8\sqmapi.dll
    + 2009-07-21 20:13:51 173,056 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18813_none_a8b209c2744bec3a\ie4uinit.exe
    + 2009-07-21 21:47:26 55,808 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18813_none_a8b209c2744bec3a\iernonce.dll
    + 2009-07-21 21:47:27 71,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.18813_none_a8b209c2744bec3a\iesetup.dll
    + 2009-07-22 04:27:34 173,056 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22903_none_a94676798d617013\ie4uinit.exe
    + 2009-07-22 05:58:12 55,808 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22903_none_a94676798d617013\iernonce.dll
    + 2009-07-22 05:58:13 71,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-setup-support_31bf3856ad364e35_8.0.6001.22903_none_a94676798d617013\iesetup.dll
    + 2009-07-21 21:47:28 109,056 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.18813_none_fe736e6ecfcf28ff\iesysprep.dll
    + 2009-07-22 05:58:13 109,056 ----a-w c:\windows\winsxs\x86_microsoft-windows-ie-sysprep_31bf3856ad364e35_8.0.6001.22903_none_ff07db25e8e4acd8\iesysprep.dll
    + 2009-07-21 21:47:26 11,067,392 ----a-w c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18813_none_4783c13dc3f1ac15\ieframe.dll
    + 2009-07-21 21:47:28 164,352 ----a-w c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.18813_none_4783c13dc3f1ac15\ieui.dll
    + 2009-07-22 05:58:12 11,068,416 ----a-w c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.22903_none_48182df4dd072fee\ieframe.dll
    + 2009-07-22 05:58:13 164,352 ----a-w c:\windows\winsxs\x86_microsoft-windows-ieframe_31bf3856ad364e35_8.0.6001.22903_none_48182df4dd072fee\ieui.dll
    + 2009-06-15 18:12:26 408,136 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\ksecdd.sys
    + 2009-06-15 15:23:50 1,233,920 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\lsasrv.dll
    + 2009-06-15 13:10:12 7,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\lsass.exe
    + 2009-06-15 15:28:58 72,704 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.16870_none_a418a0745fdd652a\secur32.dll
    + 2009-06-15 23:20:33 408,136 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\ksecdd.sys
    + 2009-06-15 15:04:18 1,235,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\lsasrv.dll
    + 2009-06-15 12:59:08 7,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\lsass.exe
    + 2009-06-15 15:08:52 72,704 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6000.21067_none_a4b3e75378eccda6\secur32.dll
    + 2009-06-15 18:20:59 439,896 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\ksecdd.sys
    + 2009-06-15 15:23:47 1,256,448 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\lsasrv.dll
    + 2009-06-15 12:57:59 9,728 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\lsass.exe
    + 2009-06-15 15:24:05 72,704 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.18272_none_a600dfae5d0228c9\secur32.dll
    + 2009-06-15 18:40:04 439,880 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\ksecdd.sys
    + 2009-06-15 15:25:37 1,257,984 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\lsasrv.dll
    + 2009-06-15 13:03:38 9,728 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\lsass.exe
    + 2009-06-15 15:25:57 72,704 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6001.22450_none_a69e1da376115b2a\secur32.dll
    + 2009-06-15 23:15:25 439,864 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\ksecdd.sys
    + 2009-06-15 14:52:43 1,259,008 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\lsasrv.dll
    + 2009-06-15 12:48:49 9,728 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\lsass.exe
    + 2009-06-15 14:53:43 72,704 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.18051_none_a7fbf30a5a1929db\secur32.dll
    + 2009-06-15 21:17:42 439,880 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\ksecdd.sys
    + 2009-06-15 14:58:44 1,259,008 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\lsasrv.dll
    + 2009-06-15 12:51:56 9,728 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\lsass.exe
    + 2009-06-15 15:00:04 72,704 ----a-w c:\windows\winsxs\x86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.22152_none_a886901f7335e2fc\secur32.dll
    + 2009-07-14 13:01:29 4,096 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\dxmasf.dll
    + 2009-07-14 13:00:51 7,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\spwmp.dll
    + 2009-07-14 13:02:21 10,621,952 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmp.dll
    + 2009-07-14 11:11:03 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmpconfig.exe
    + 2009-07-14 11:10:52 168,960 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmplayer.exe
    + 2009-07-14 11:11:02 8,147,968 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmploc.DLL
    + 2009-07-14 11:10:35 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.16885_none_09320a57522f812d\wmpshare.exe
    + 2009-07-15 14:43:37 4,096 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\dxmasf.dll
    + 2009-07-15 14:42:54 7,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\spwmp.dll
    + 2009-07-15 14:44:19 10,622,464 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmp.dll
    + 2009-07-15 12:53:46 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmpconfig.exe
    + 2009-07-15 12:53:40 168,960 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmplayer.exe
    + 2009-07-15 12:53:41 8,147,968 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmploc.DLL
    + 2009-07-15 12:53:26 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6000.21083_none_09b97eb06b4f218b\wmpshare.exe
    + 2009-07-14 12:59:28 4,096 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\dxmasf.dll
    + 2009-07-14 12:58:44 7,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\spwmp.dll
    + 2009-07-14 13:00:16 10,626,048 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmp.dll
    + 2009-07-14 10:59:32 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmpconfig.exe

     
  10. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    + 2009-07-14 10:59:24 168,960 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmplayer.exe
    + 2009-07-14 10:59:56 8,147,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmploc.DLL
    + 2009-07-14 10:58:54 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.18289_none_0b1c4a254f52777a\wmpshare.exe
    + 2009-07-15 14:51:48 4,096 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\dxmasf.dll
    + 2009-07-15 14:51:25 7,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\spwmp.dll
    + 2009-07-15 14:52:15 10,627,584 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmp.dll
    + 2009-07-15 13:06:20 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmpconfig.exe
    + 2009-07-15 13:06:03 168,960 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmplayer.exe
    + 2009-07-15 13:07:05 8,147,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmploc.DLL
    + 2009-07-15 13:05:53 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6001.22470_none_0ba7b6286870146b\wmpshare.exe
    + 2009-07-15 12:39:40 4,096 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\dxmasf.dll
    + 2009-07-15 12:39:28 7,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\spwmp.dll
    + 2009-07-15 14:30:12 10,628,096 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmp.dll
    + 2009-07-15 12:39:51 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmpconfig.exe
    + 2009-07-15 12:39:31 168,960 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmplayer.exe
    + 2009-07-15 12:40:34 8,147,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmploc.DLL
    + 2009-07-15 12:39:22 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.18065_none_0d145ca34c6c2c87\wmpshare.exe
    + 2009-07-15 12:46:16 4,096 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\dxmasf.dll
    + 2009-07-15 12:46:03 7,680 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\spwmp.dll
    + 2009-07-15 14:36:26 10,628,096 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmp.dll
    + 2009-07-15 12:46:20 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmpconfig.exe
    + 2009-07-15 12:46:11 168,960 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmplayer.exe
    + 2009-07-15 12:47:07 8,147,456 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmploc.DLL
    + 2009-07-15 12:45:40 107,520 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-core_31bf3856ad364e35_6.0.6002.22172_none_0d9028a465949c3d\wmpshare.exe
    + 2009-07-14 13:02:21 313,344 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6000.16885_none_a2006a922ae150af\wmpdxm.dll
    + 2009-07-15 14:44:19 313,344 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6000.21083_none_a287deeb4400f10d\wmpdxm.dll
    + 2009-07-14 13:00:17 313,344 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6001.18289_none_a3eaaa60280446fc\wmpdxm.dll
    + 2009-07-15 14:52:15 313,344 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6001.22470_none_a47616634121e3ed\wmpdxm.dll
    + 2009-07-15 12:39:58 313,344 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6002.18065_none_a5e2bcde251dfc09\wmpdxm.dll
    + 2009-07-15 12:46:27 313,344 ----a-w c:\windows\winsxs\x86_microsoft-windows-mediaplayer-wmpdxm_31bf3856ad364e35_6.0.6002.22172_none_a65e88df3e466bbf\wmpdxm.dll
    + 2009-07-02 07:48:43 2,409,784 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.16889_none_f05462846e8c801b\OESpamFilter.dat
    + 2009-07-02 07:47:42 2,409,784 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6000.21088_none_f0dcd72787ab39d0\OESpamFilter.dat
    + 2009-07-02 07:47:43 2,409,784 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.18293_none_f229cf826bc094f3\OESpamFilter.dat
    + 2009-07-02 07:47:22 2,409,784 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6001.22474_none_f2ca0e5584cd1359\OESpamFilter.dat
    + 2009-07-02 07:48:37 2,409,784 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.18070_none_f422e24a68d96357\OESpamFilter.dat
    + 2009-07-02 07:47:41 2,409,784 ----a-w c:\windows\winsxs\x86_microsoft-windows-oespamfilter-dat_31bf3856ad364e35_6.0.6002.22179_none_f4b581af81eee730\OESpamFilter.dat
    + 2009-06-15 15:29:40 175,104 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.16870_none_389b60c97fc740bd\wdigest.dll
    + 2009-06-15 15:09:27 175,104 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6000.21067_none_3936a7a898d6a939\wdigest.dll
    + 2009-06-15 15:24:38 175,104 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.18272_none_3a83a0037cec045c\wdigest.dll
    + 2009-06-15 15:26:14 175,104 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6001.22450_none_3b20ddf895fb36bd\wdigest.dll
    + 2009-06-15 14:54:00 175,104 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.18051_none_3c7eb35f7a03056e\wdigest.dll
    + 2009-06-15 15:00:21 175,104 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.22152_none_3d095074931fbe8f\wdigest.dll
    + 2009-06-15 15:23:19 494,592 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.16870_none_e4a4f2ddb3dfbcec\kerberos.dll
    + 2009-06-15 15:04:01 496,640 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6000.21067_none_e54039bcccef2568\kerberos.dll
    + 2009-06-15 15:21:07 499,712 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.18272_none_e68d3217b104808b\kerberos.dll
    + 2009-06-15 15:22:24 500,736 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6001.22450_none_e72a700cca13b2ec\kerberos.dll
    + 2009-06-15 14:52:38 499,712 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.18051_none_e8884573ae1b819d\kerberos.dll
    + 2009-06-15 14:58:41 500,736 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-kerberos_31bf3856ad364e35_6.0.6002.22152_none_e912e288c7383abe\kerberos.dll
    + 2009-06-15 15:25:57 216,576 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.16870_none_7a810285659cf00c\msv1_0.dll
    + 2009-06-15 15:06:42 216,576 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6000.21067_none_7b1c49647eac5888\msv1_0.dll
    + 2009-06-15 15:22:19 213,504 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.18272_none_7c6941bf62c1b3ab\msv1_0.dll
    + 2009-06-15 15:24:20 213,504 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6001.22450_none_7d067fb47bd0e60c\msv1_0.dll
    + 2009-06-15 14:53:02 218,624 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.18051_none_7e64551b5fd8b4bd\msv1_0.dll
    + 2009-06-15 14:59:02 217,600 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.22152_none_7eeef23078f56dde\msv1_0.dll
    + 2009-06-15 15:28:56 272,384 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.16870_none_1fe460c0585503b5\schannel.dll
    + 2009-06-15 15:08:50 272,384 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6000.21067_none_207fa79f71646c31\schannel.dll
    + 2009-06-15 15:24:02 270,848 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.18272_none_21cc9ffa5579c754\schannel.dll
    + 2009-06-15 15:25:56 270,848 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6001.22450_none_2269ddef6e88f9b5\schannel.dll
    + 2009-06-15 14:53:42 270,848 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.18051_none_23c7b3565290c866\schannel.dll
    + 2009-06-15 15:00:03 270,848 ----a-w c:\windows\winsxs\x86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.22152_none_2452506b6bad8187\schannel.dll
    + 2009-06-04 12:36:48 116,736 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.16865_none_2dcbeeccc8adc633\aaclient.dll
    + 2009-06-04 12:43:35 1,871,872 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.16865_none_2dcbeeccc8adc633\mstscax.dll
    + 2009-06-04 12:47:05 36,352 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.16865_none_2dcbeeccc8adc633\tsgqec.dll
    + 2009-06-04 12:25:37 116,736 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.21061_none_2e516291e1cf33e3\aaclient.dll
    + 2009-06-04 12:31:03 1,874,432 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.21061_none_2e516291e1cf33e3\mstscax.dll
    + 2009-06-04 12:34:44 36,352 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6000.21061_none_2e516291e1cf33e3\tsgqec.dll
    + 2008-01-19 07:33:40 136,192 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18266_none_2fb32dbcc5d3707b\aaclient.dll
    + 2009-06-04 12:34:04 2,066,432 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18266_none_2fb32dbcc5d3707b\mstscax.dll
    + 2008-01-19 07:36:42 53,248 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.18266_none_2fb32dbcc5d3707b\tsgqec.dll
    + 2009-06-04 12:29:17 136,192 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22443_none_304f6b67dee38985\aaclient.dll
    + 2009-06-04 12:33:39 2,067,968 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22443_none_304f6b67dee38985\mstscax.dll
    + 2009-06-04 12:35:15 53,248 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6001.22443_none_304f6b67dee38985\tsgqec.dll
    + 2009-04-11 06:28:17 136,192 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18045_none_31ae4118c2ea718d\aaclient.dll
    + 2009-06-04 12:07:25 2,066,432 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18045_none_31ae4118c2ea718d\mstscax.dll
    + 2009-04-11 06:28:24 53,248 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.18045_none_31ae4118c2ea718d\tsgqec.dll
    + 2009-06-04 12:54:45 136,192 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22146_none_3238de2ddc072aae\aaclient.dll
    + 2009-06-04 12:56:17 2,067,968 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22146_none_3238de2ddc072aae\mstscax.dll
    + 2009-06-04 10:52:35 53,248 ----a-w c:\windows\winsxs\x86_microsoft-windows-t..s-clientactivexcore_31bf3856ad364e35_6.0.6002.22146_none_3238de2ddc072aae\tsgqec.dll
    + 2009-06-10 12:04:06 65,024 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\avicap32.dll
    + 2009-06-10 12:04:06 88,576 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\avifil32.dll
    + 2009-06-10 12:07:23 82,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\mciavi32.dll
    + 2009-06-10 12:09:46 12,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\msrle32.dll
    + 2009-06-10 12:10:12 123,904 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\msvfw32.dll
    + 2009-06-10 12:10:12 31,232 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.16868_none_9012d8998bc4efa4\msvidc32.dll
    + 2009-06-10 11:57:02 65,024 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\avicap32.dll
    + 2009-06-10 11:57:02 88,576 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\avifil32.dll
    + 2009-06-10 12:00:39 82,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\mciavi32.dll
    + 2009-06-10 12:03:16 12,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\msrle32.dll
    + 2009-06-10 12:03:19 123,904 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\msvfw32.dll
    + 2009-06-10 12:03:19 31,232 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6000.21065_none_90994ca8a4e576ab\msvidc32.dll
    + 2006-11-02 09:46:02 65,024 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\avicap32.dll
    + 2009-06-10 12:07:30 91,136 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\avifil32.dll
    + 2006-11-02 09:46:05 82,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\mciavi32.dll
    + 2006-11-02 09:46:10 12,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msrle32.dll
    + 2008-01-19 07:35:15 123,904 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msvfw32.dll
    + 2008-01-19 07:35:15 31,232 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.18270_none_91e6450388fad1ce\msvidc32.dll
    + 2009-06-10 11:52:59 65,024 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\avicap32.dll
    + 2009-06-10 11:52:59 91,136 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\avifil32.dll
    + 2009-06-10 11:56:08 82,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\mciavi32.dll
    + 2009-06-10 11:57:58 12,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\msrle32.dll
    + 2009-06-10 11:58:01 123,904 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\msvfw32.dll
    + 2009-06-10 11:58:01 31,232 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6001.22447_none_9297557ea1f9cc4d\msvidc32.dll
    + 2006-11-02 09:46:02 65,024 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\avicap32.dll
    + 2009-06-10 11:38:57 91,136 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\avifil32.dll
    + 2006-11-02 09:46:05 82,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\mciavi32.dll
    + 2006-11-02 09:46:10 12,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\msrle32.dll
    + 2008-01-19 07:35:15 123,904 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\msvfw32.dll
    + 2008-01-19 07:35:15 31,232 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.18049_none_93f62b2f8600b455\msvidc32.dll
    + 2009-06-10 11:42:57 65,024 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\avicap32.dll
    + 2009-06-10 11:42:57 91,136 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\avifil32.dll
    + 2009-06-10 11:44:07 82,944 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\mciavi32.dll
    + 2009-06-10 11:44:30 12,800 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\msrle32.dll
    + 2009-06-10 11:44:33 123,904 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\msvfw32.dll
    + 2009-06-10 11:44:33 31,232 ----a-w c:\windows\winsxs\x86_microsoft-windows-video-for-windows_31bf3856ad364e35_6.0.6002.22150_none_946bf5749f2e8c01\msvidc32.dll
    + 2009-06-10 12:16:11 156,160 ----a-w c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6000.16868_none_ca1affdbd9d49d2f\wkssvc.dll
    + 2009-06-10 12:06:21 158,208 ----a-w c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6000.21065_none_caa173eaf2f52436\wkssvc.dll
    + 2009-06-10 12:12:29 160,256 ----a-w c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6001.18270_none_cbee6c45d70a7f59\wkssvc.dll
    + 2009-06-10 12:00:00 160,256 ----a-w c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6001.22447_none_cc9f7cc0f00979d8\wkssvc.dll
    + 2009-06-10 11:42:23 160,256 ----a-w c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6002.18049_none_cdfe5271d41061e0\wkssvc.dll
    + 2009-06-10 11:46:28 160,256 ----a-w c:\windows\winsxs\x86_microsoft-windows-workstationservice_31bf3856ad364e35_6.0.6002.22150_none_ce741cb6ed3e398c\wkssvc.dll
    + 2009-07-29 11:44:17 159,032 ----a-w c:\windows\winsxs\x86_microsoft.vc90.atl_1fc8b3b9a1e18e3b_9.0.30729.4148_none_51ca66a2bbe76806\ATL90.dll
    .
    -- Snapshot reset to current date --
    .
    ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Note* empty entries & legit default entries are not shown
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
    "Sidebar"="c:\program files\windows sidebar\sidebar.exe" [2008-01-19 1233920]
    "swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-08-11 39408]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "IgfxTray"="c:\windows\system32\igfxtray.exe" [2007-09-20 141848]
    "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2007-09-20 154136]
    "Persistence"="c:\windows\system32\igfxpers.exe" [2007-09-20 137752]
    "AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-07-05 201992]
    "Athan"="c:\program files\Athan\Athan.exe" [2009-05-01 1130496]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
    "EnableUIADesktopToggle"= 0 (0x0)

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\VESWinlogon]
    2007-08-15 14:05 98304 c:\windows\System32\VESWinlogon.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
    "AppInit_DLLs"=c:\progra~1\KASPER~1\KASPER~1\mzvkbd.dll,c:\progra~1\KASPER~1\KASPER~1\adialhk.dll,c:\progra~1\KASPER~1\KASPER~1\kloehk.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "VIDC.dvsd"= c:\program files\Common Files\Sony Shared\VideoLib\sonydv.dll

    [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Bluetooth.lnk]
    path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Bluetooth.lnk
    backup=c:\windows\pss\Bluetooth.lnk.CommonStartup
    backupExtension=.CommonStartup

    [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^Unwired Launchpad.lnk]
    path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\Unwired Launchpad.lnk
    backup=c:\windows\pss\Unwired Launchpad.lnk.CommonStartup
    backupExtension=.CommonStartup

    [HKLM\~\startupfolder\C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^WinZip Quick Pick.lnk]
    path=c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\WinZip Quick Pick.lnk
    backup=c:\windows\pss\WinZip Quick Pick.lnk.CommonStartup
    backupExtension=.CommonStartup

    [HKLM\~\startupfolder\C:^Users^naneee88^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^Audio Filter.lnk]
    path=c:\users\naneee88\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Audio Filter.lnk
    backup=c:\windows\pss\Audio Filter.lnk.Startup
    backupExtension=.Startup

    [HKLM\~\startupfolder\C:^Users^naneee88^AppData^Roaming^Microsoft^Windows^Start Menu^Programs^Startup^UltimateZip Quick Start.lnk]
    path=c:\users\naneee88\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\UltimateZip Quick Start.lnk
    backup=c:\windows\pss\UltimateZip Quick Start.lnk.Startup
    backupExtension=.Startup

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
    --a------ 2009-02-27 17:10 35696 c:\program files\Adobe\Reader 9.0\Reader\reader_sl.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Apoint]
    --a------ 2007-06-10 10:12 118784 c:\program files\Apoint\Apoint.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Athan]
    --a------ 2009-05-01 20:09 1130496 c:\program files\Athan\Athan.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ehTray.exe]
    --a------ 2008-01-19 17:33 125952 c:\windows\ehome\ehtray.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
    --a------ 2008-10-25 11:44 31072 c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ISBMgr.exe]
    --a------ 2007-09-20 05:09 311296 c:\program files\Sony\ISB Utility\ISBMgr.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LifeChat]
    --a------ 2007-01-26 14:31 259440 c:\program files\Microsoft LifeChat\LifeChat.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MobileConnect]
    --a------ 2008-07-04 11:52 2072576 c:\program files\Vodafone\Vodafone Mobile Connect\Bin\MobileConnect.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MsnMsgr]
    --a------ 2009-02-06 17:51 3885408 c:\program files\Windows Live\Messenger\msnmsgr.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
    --a------ 2006-01-12 15:40 155648 c:\program files\Common Files\Ahead\Lib\NeroCheck.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
    --a------ 2006-04-26 08:29 237568 c:\progra~1\Nokia\NOKIAP~1\LAUNCH~1.EXE

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PcSync]
    --a------ 2006-04-11 17:52 1409024 c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Sidebar]
    --a------ 2008-01-19 17:33 1233920 c:\program files\Windows Sidebar\sidebar.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
    --a------ 2008-11-24 01:20 185896 c:\program files\Common Files\Real\Update_OB\realsched.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
    "{89EFB501-8F2C-4204-9854-6731656C6E2F}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
    "{B48C881D-E139-4389-B101-06461DAF6502}"= Disabled:UDP:c:\program files\Sony\VAIO Media 6.0\Vc.exe:[VAIO Media] VAIO Media
    "{3A04004D-892F-4CAB-BD86-B6F918C731EF}"= Disabled:TCP:c:\program files\Sony\VAIO Media 6.0\Vc.exe:[VAIO Media] VAIO Media
    "{A6839A80-17B3-4C5C-922E-A1DB2C73B000}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{62F14C41-6086-4E01-86D4-38B04230A2BA}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
    "{5C944FA1-3862-4CE9-9091-97932D0E4C98}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{180EF42A-17CB-4B5A-B9FD-45EF0FB6362F}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
    "{46190876-9E8D-45FF-B6E4-54DA1A3C553F}"= c:\program files\Skype\Phone\Skype.exe:Skype
    "{F98E8FF7-0B4D-46F0-9A8E-BE8C8F3F7BF0}"= c:\program files\Windows Live\Sync\WindowsLiveSync.exe:Windows Live Sync
    "TCP Query User{BEAD5E0A-E470-423A-9100-3B9EDE022386}c:\\programdata\\kaspersky lab setup files\\kaspersky internet security 2009\\english\\setup.exe"= UDP:c:\programdata\kaspersky lab setup files\kaspersky internet security 2009\english\setup.exe:Kaspersky Internet Security 2009 Setup
    "UDP Query User{F80B3413-0AEE-488C-AB54-CE06AD77183F}c:\\programdata\\kaspersky lab setup files\\kaspersky internet security 2009\\english\\setup.exe"= TCP:c:\programdata\kaspersky lab setup files\kaspersky internet security 2009\english\setup.exe:Kaspersky Internet Security 2009 Setup

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
    "EnableFirewall"= 0 (0x0)

    R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\System32\drivers\klbg.sys [2008-01-29 33808]
    R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\System32\drivers\klim6.sys [2008-03-26 20496]
    R3 btwl2cap;Bluetooth L2CAP Service;c:\windows\System32\drivers\btwl2cap.sys [2007-12-28 28464]
    R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\System32\drivers\klfltdev.sys [2008-03-13 26640]
    R3 R5U870FLx86;R5U870 UVC Lower Filter ;c:\windows\System32\drivers\R5U870FLx86.sys [2007-12-28 75008]
    R3 R5U870FUx86;R5U870 UVC Upper Filter ;c:\windows\System32\drivers\R5U870FUx86.sys [2007-12-28 43904]
    R3 SFEP;Sony Firmware Extension Parser;c:\windows\System32\drivers\SFEP.sys [2007-12-28 9344]
    R3 ti21sony;ti21sony;c:\windows\System32\drivers\ti21sony.sys [2007-12-28 812544]
    R4 BcmSqlStartupSvc;Business Contact Manager SQL Server Startup Service;c:\program files\Microsoft Small Business\Business Contact Manager\BcmSqlStartupSvc.exe [2008-01-11 30312]
    R4 regi;regi;c:\windows\System32\drivers\regi.sys [2007-04-18 11032]
    R4 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-05-19 240512]
    R4 VMCService;Vodafone Mobile Connect Service;c:\program files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe [2008-07-04 14336]
    S3 fssfltr;FssFltr;c:\windows\System32\drivers\fssfltr.sys [2009-03-08 55280]
    S3 fsssvc;Windows Live Family Safety;c:\program files\Windows Live\Family Safety\fsssvc.exe [2009-02-06 533360]
    S3 ICScsiSV;Image Converter SCSI Service;c:\program files\Sony\Image Converter 3\ICScsiSV.exe [2008-01-20 75952]
    S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\Sony\VAIO Media Integrated Server\UCLS.exe [2008-01-20 745472]
    S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe [2008-01-20 397312]
    S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe [2008-01-20 1089536]
    S3 VcmIAlzMgr;VAIO Content Metadata Intelligent Analyzing Manager;c:\program files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe [2008-01-20 292128]
    S3 VcmXmlIfHelper;VAIO Content Metadata XML Interface;c:\program files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe [2008-01-20 79136]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
    bthsvcs REG_MULTI_SZ BthServ
    HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\H]
    \shell\AutoRun\command - H:\AutoRun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{0d5754fa-b4f0-11dd-aab4-001a80a49f89}]
    \shell\AutoRun\command - c:\windows\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL h:\resycled\boot.com e:
    \shell\Open\command - h:\resycled\boot.com e:

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{115e62fa-c428-11dd-9140-001e3d3d6bf7}]
    \shell\AutoRun\command - sysinfo.exe
    \shell\explore\command - sysinfo.exe
    \shell\open\command - sysinfo.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1dcd97fb-1dc8-11dd-a8ae-001e3d3d6bf7}]
    \shell\AutoRun\command - G:\AutoRun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{1dcd9814-1dc8-11dd-a8ae-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\AutoRun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{248a71ae-1b8c-11de-b93d-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{248a71b0-1b8c-11de-b93d-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{248a71b7-1b8c-11de-b93d-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{248a71b9-1b8c-11de-b93d-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{5baa20ea-74ff-11de-badb-f8faf1e4e711}]
    \shell\AutoRun\command - J:\LaunchU3.exe -a

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ab464239-17e8-11de-98bf-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ab464240-17e8-11de-98bf-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{ab464243-17e8-11de-98bf-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cc9d4881-1e45-11de-b597-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cc9d4883-1e45-11de-b597-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cc9d4885-1e45-11de-b597-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cc9d488d-1e45-11de-b597-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{cc9d488f-1e45-11de-b597-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d64bb971-0935-11de-8677-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d64bb973-0935-11de-8677-001e3d3d6bf7}]
    \shell\AutoRun\command - I:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d64bb9a8-0935-11de-8677-001e3d3d6bf7}]
    \shell\AutoRun\command - L:\AutoRun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f55a73f2-5fdb-11dd-933b-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\AutoRun.exe

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f74939af-0869-11de-b937-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f74939b5-0869-11de-b937-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f74939d6-0869-11de-b937-001e3d3d6bf7}]
    \shell\AutoRun\command - H:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{f74939d8-0869-11de-b937-001e3d3d6bf7}]
    \shell\AutoRun\command - I:\setup_vmc_lite.exe /checkApplicationPresence

    [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{fe685ab5-52ed-11dd-9a55-001e3d3d6bf7}]
    \shell\AutoRun\command - G:\AutoRun.exe

    [HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
    "c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
    .
    Contents of the 'Scheduled Tasks' folder

    2009-08-13 c:\windows\Tasks\User_Feed_Synchronization-{B578AF6D-8A72-4DF6-AB6F-C8C05BB6E987}.job
    - c:\windows\system32\msfeedssync.exe [2009-07-22 06:13]
    .
    .
    ------- Supplementary Scan -------
    .
    uStart Page = hxxp://www.latrobe.edu.au/
    mStart Page = about:blank
    IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    IE: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
    IE: Send image to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    IE: Send page to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    TCP: {23A00904-F692-4F09-9402-3A5EE68D1BB0} = 202.124.76.98 202.124.68.130
    Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    .
    .
    ------- File Associations -------
    .
    txtfile=c:\windows\notepad.exe %1
    .

    **************************************************************************

    catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2009-08-13 18:58:36
    Windows 6.0.6001 Service Pack 1 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    - - - - - - - > 'Explorer.exe'(3208)
    c:\windows\system32\btncopy.dll
    c:\program files\Nokia\Nokia PC Suite 6\PhoneBrowser.dll
    c:\program files\Nokia\Nokia PC Suite 6\PCSCM.dll
    c:\windows\system32\ConnAPI.DLL
    c:\program files\Nokia\Nokia PC Suite 6\Lang\PhoneBrowser_eng.nlr
    c:\program files\Nokia\Nokia PC Suite 6\Resource\PhoneBrowser_Nokia.ngr
    .
    Completion time: 2009-08-13 19:02:59
    ComboFix-quarantined-files.txt 2009-08-13 09:02:44

    Pre-Run: 104,955,174,912 bytes free
    Post-Run: 104,898,428,928 bytes free

    698 --- E O F --- 2009-08-12 22:54:31​
     
  11. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    هذا تقرير الكمبوفكس مضغوط هنا

    هذا تقرير هاجيك جديد
     
  12. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:25:02 PM, on 13/08/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v8.00 (8.00.6001.18813)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\Dwm.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
    C:\Program Files\Athan\Athan.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\igfxsrvc.exe
    G:\PC Cleaners\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.latrobe.edu.au/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://vaio-online.sony.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
    O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\windows sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - .DEFAULT User Startup: Audio Filter.lnk = C:\Program Files\Sony\SonicStage Mastering Studio\Audio Filter\SSMSFilter.exe (User 'Default user')
    O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O13 - Gopher Prefix:
    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS1\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS2\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS3\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS4\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS5\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS6\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS7\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS8\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS9\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS10\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS11\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS12\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS13\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
    O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\Image Converter 3\ICScsiSV.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 3\IcVzMon.exe
    O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\stacsv.exe
    O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardwareResourceManager.exe
    O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
    O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
    O23 - Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe
    O23 - Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
    O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
    O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 12472 bytes

     
  13. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    بالراحه علي . اي صاحب الجهاز باستراليا .. :d: الله يرضى عليك.
     
  14. النقيب

    النقيب زيزوومي جديد

    إنضم إلينا في:
    ‏ديسمبر 5, 2008
    المشاركات:
    1,265
    الإعجابات :
    8
    نقاط الجائزة:
    0
    الإقامة:
    حولك حوليك

    تقرير هاي جاك جديد






     
  15. النقيب

    النقيب زيزوومي جديد

    إنضم إلينا في:
    ‏ديسمبر 5, 2008
    المشاركات:
    1,265
    الإعجابات :
    8
    نقاط الجائزة:
    0
    الإقامة:
    حولك حوليك

    ماشفت التقرير :q:



     
  16. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    فوقك تماما .. تفضل من هنا
     
  17. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 7:25:02 PM, on 13/08/2009
    Platform: Windows Vista SP1 (WinNT 6.00.1905)
    MSIE: Internet Explorer v8.00 (8.00.6001.18813)
    Boot mode: Normal

    Running processes:
    C:\Windows\system32\taskeng.exe
    C:\Windows\Explorer.EXE
    C:\Windows\system32\Dwm.exe
    C:\Windows\System32\hkcmd.exe
    C:\Windows\System32\igfxpers.exe
    C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
    C:\Program Files\Athan\Athan.exe
    C:\Program Files\Windows Live\Messenger\msnmsgr.exe
    C:\Windows\System32\mobsync.exe
    C:\Program Files\Windows Sidebar\sidebar.exe
    C:\Program Files\Windows Media Player\wmplayer.exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
    C:\Windows\system32\wbem\unsecapp.exe
    C:\Windows\system32\igfxsrvc.exe
    G:\PC Cleaners\HiJackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.latrobe.edu.au/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://vaio-online.sony.com/
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
    O1 - Hosts: ::1 localhost
    O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
    O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
    O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)
    O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
    O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
    O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\s wg.dll
    O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)
    O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
    O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
    O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
    O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
    O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
    O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
    O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
    O4 - HKCU\..\Run: [Sidebar] C:\Program Files\windows sidebar\sidebar.exe /autoRun
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNo tifier.exe
    O4 - .DEFAULT User Startup: Audio Filter.lnk = C:\Program Files\Sony\SonicStage Mastering Studio\Audio Filter\SSMSFilter.exe (User 'Default user')
    O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
    O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
    O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
    O8 - Extra context menu item: Send image to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
    O8 - Extra context menu item: Send page to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
    O9 - Extra button: Blog This - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Blog This in Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra 'Tools' menuitem: S&end to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
    O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
    O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
    O13 - Gopher Prefix:
    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS1\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS2\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS3\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS4\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS5\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS6\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS7\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS8\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS9\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS10\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS11\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS12\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O17 - HKLM\System\CS13\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130
    O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
    O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA ~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPE R~1\KASPER~1\kloehk.dll
    O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
    O23 - Service: FLEXnet Licensing Service - Macrovision Europe Ltd. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
    O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: Image Converter SCSI Service (ICScsiSV) - Sony Corporation - C:\Program Files\Sony\Image Converter 3\ICScsiSV.exe
    O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe
    O23 - Service: Image Converter video recording monitor for VAIO Entertainment - Sony Corporation - C:\Program Files\Sony\Image Converter 3\IcVzMon.exe
    O23 - Service: IviRegMgr - InterVideo - C:\Program Files\Common Files\InterVideo\RegMgr\iviRegMgr.exe
    O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
    O23 - Service: PACSPTISVR - Unknown owner - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
    O23 - Service: SigmaTel Audio Service (STacSV) - IDT, Inc. - C:\Windows\system32\stacsv.exe
    O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCs\VzHardwareResourceManager\VzHardware ResourceManager.exe
    O23 - Service: VAIO Event Service - Sony Corporation - C:\Program Files\Sony\VAIO Event Service\VESMgr.exe
    O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\VMISrv.exe
    O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\VmGateway.exe
    O23 - Service: VAIO Media Content Collection (VAIOMediaPlatform-UCLS-AppServer) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\UCLS.exe
    O23 - Service: VAIO Media Content Collection (HTTP) (VAIOMediaPlatform-UCLS-HTTP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\SV_Httpd.exe
    O23 - Service: VAIO Media Content Collection (UPnP) (VAIOMediaPlatform-UCLS-UPnP) - Sony Corporation - C:\Program Files\Sony\VAIO Media Integrated Server\Platform\UPnPFramework.exe
    O23 - Service: VAIO Content Metadata Intelligent Analyzing Manager (VcmIAlzMgr) - Sony Corporation - C:\Program Files\Sony\VCM Intelligent Analyzing Manager\VcmIAlzMgr.exe
    O23 - Service: VAIO Content Metadata XML Interface (VcmXmlIfHelper) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VcmXml\VcmXmlIfHelper.exe
    O23 - Service: VAIO Entertainment UPnP Client Adapter (Vcsw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VCSW\VCSW.exe
    O23 - Service: Vodafone Mobile Connect Service (VMCService) - Vodafone - C:\Program Files\Vodafone\Vodafone Mobile Connect\Bin\VMCService.exe
    O23 - Service: VAIO Entertainment Database Service (VzCdbSvc) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzCdbSvc.exe
    O23 - Service: VAIO Entertainment File Import Service (VzFw) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment Platform\VzCdb\VzFw.exe
    O23 - Service: XAudioService - Conexant Systems, Inc. - C:\Windows\system32\DRIVERS\xaudio.exe

    --
    End of file - 12472 bytes
     
  18. النقيب

    النقيب زيزوومي جديد

    إنضم إلينا في:
    ‏ديسمبر 5, 2008
    المشاركات:
    1,265
    الإعجابات :
    8
    نقاط الجائزة:
    0
    الإقامة:
    حولك حوليك
    احذف القيم التالية

    O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

    O2 - BHO: NCO 2.0 IE BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - (no file)

    O3 - Toolbar: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - (no file)

    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130



    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130



    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130



    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130


    O17 - HKLM\System\CCS\Services\Tcpip\..\{23A00904-F692-4F09-9402-3A5EE68D1BB0}: NameServer = 202.124.76.98 202.124.68.130





    طريقة الحذف

    [/FONT]

    [/FONT]
    [​IMG]

    [/FONT]
    [​IMG]
    [/FONT]


    [​IMG]






     
  19. رفـيـق الـعـمـر

    رفـيـق الـعـمـر داعم للمنتدى داعــــم للمنتـــــدى

    إنضم إلينا في:
    ‏ديسمبر 16, 2008
    المشاركات:
    1,463
    الإعجابات :
    148
    نقاط الجائزة:
    750
    الجنس:
    ذكر
    الإقامة:
    Oman
    برامج الحماية:
    Kaspersky
    نظام التشغيل:
    Windows 10
    جاري التطبيق ... :openmouth:k:
     
  20. النقيب

    النقيب زيزوومي جديد

    إنضم إلينا في:
    ‏ديسمبر 5, 2008
    المشاركات:
    1,265
    الإعجابات :
    8
    نقاط الجائزة:
    0
    الإقامة:
    حولك حوليك
    طيب سؤال صاحبك كم مثبت برنامج حماية :q:



     

مشاركة هذه الصفحة

جاري تحميل الصفحة...