يقول لي أحذف بعض الملفات .. مع أنه المساحة كبيرة جداً

المصدر: يقول لي أحذف بعض الملفات .. مع أنه المساحة كبيرة جداً
في منتدى : منتدى مشاكـل وحلول الحـاسب

السلام عليكم ورحمة الله وبركاته
كيف حالكم حبايبي
عندي مشكلة غريبه عجيبه
عندي هاردسك 1 تيرا
المساحة الفارغة فيه مثل مافي الصورة


جيت انقل ملف حمه 20 قيقا تقريباً
يقولي لازم تحذف ملفات !__!
شوفو الصورة



شنو التحشيش اللي صار ؟

 

عادي- عادي مستر ديو/ تصير في اقدع العائلات:d:
بس مو لهالدرجه

 

???
up

 

حياك اخوي

عادي يالغلاا اضغط علىdisk cleanup

وخليه ينظف القرص وبعدين جرب تنسخ

 

اخوي الغالي
ارجوا ان تكون ردودك معبره ومفيده
وغير كذا غير مقبول
بالتوفيق

 

جربت يالغلا ..
ضغطت مثل ماقلت
لكن مانفع >__<​

 

طيب اخوي اعمل الاتي

حمل هذا البرنامج
http://www.hijackthis.de/downloads/HJTInstall.exe
شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم​

 

تفضل يالغلا ...





Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 6:18:21 PM, on 11/17/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\VerbAce Research\VerbAce-Pro\VerbAce-Pro.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\mIRC\mirc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://devid.drp.su/?dev=VEN_14F1&DEV_2F30
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: ??C?I E???? C?II?? ??? Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avp] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: VerbAce-Pro Startup Agent.lnk = C:\Program Files\VerbAce Research\VerbAce-Pro\VerbAce-Pro.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: &???E ??CE?? UC???E - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: ??? ??C??? C???C?? (URL) - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1253821349984
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 6634 bytes
​

 

الحين اعمل الاتي

عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​

 

تفضل يالغلا ..







ComboFix 09-11-17.03 - winxp 11/17/2009 18:38.1.2 - x86
Microsoft Windows XP Professional 5.1.2600.3.1256.966.1033.18.3071.2527 [GMT 3:00]
Running from: c:\documents and settings\winxp\Desktop\ComboFix.exe
AV: برنامج Kaspersky لأمان الإنترنت *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: برنامج Kaspersky لأمان الإنترنت *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\jestertb.dll
.
((((((((((((((((((((((((( Files Created from 2009-10-17 to 2009-11-17 )))))))))))))))))))))))))))))))
.
2009-11-17 15:38 . 2008-04-13 21:10 96512 -c--a-w- c:\windows\system32\dllcache\atapi.sys
2009-11-17 15:38 . 2008-04-13 21:10 96512 ----a-w- c:\windows\system32\drivers\atapi.sys
2009-11-17 15:23 . 2009-11-17 15:23 -------- d-----w- c:\windows\speech
2009-11-17 15:21 . 2009-11-17 15:24 172032 ------w- c:\windows\Setup1.exe
2009-11-17 15:21 . 2009-11-17 15:24 73216 ----a-w- c:\windows\ST6UNST.EXE
2009-11-11 22:54 . 2009-11-11 22:54 -------- d-----w- c:\documents and settings\winxp\Local Settings\Application Data\www.doom9.net
2009-11-11 22:46 . 2009-11-16 22:19 -------- d-----w- c:\program files\megui
2009-11-11 22:41 . 2006-04-02 12:47 630784 ----a-w- c:\windows\system32\vp7vfw.dll
2009-11-11 22:41 . 2004-05-18 18:16 39936 ----a-w- c:\windows\system32\huffyuv.dll
2009-11-11 22:41 . 2004-01-25 16:18 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2009-11-11 22:41 . 2009-05-29 21:37 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2009-11-11 22:41 . 2009-05-29 21:31 881664 ----a-w- c:\windows\system32\xvidcore.dll
2009-11-11 22:41 . 2009-11-09 18:00 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-11-11 22:41 . 2009-11-11 22:42 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-11-10 23:28 . 2009-11-10 23:28 -------- d-----w- c:\documents and settings\All Users\Application Data\FLEXnet
2009-11-10 23:27 . 2009-11-10 23:27 -------- d-----w- c:\windows\system32\Adobe
2009-11-10 23:20 . 2009-11-10 23:20 -------- d-----w- c:\program files\Adobe Media Player
2009-11-10 23:13 . 2009-11-10 23:13 -------- d-----w- c:\program files\Common Files\Macrovision Shared
2009-11-09 18:24 . 2009-11-09 18:24 -------- d-----w- c:\program files\win32
2009-11-08 09:35 . 2009-11-08 09:35 -------- d-----w- c:\documents and settings\winxp\Application Data\Yahoo!
2009-11-07 11:30 . 2009-11-07 11:30 -------- d-----w- c:\program files\Trend Micro
2009-11-07 11:23 . 2009-11-07 11:23 -------- d-----w- c:\documents and settings\All Users\Application Data\MemeoCommon
2009-11-07 11:17 . 2009-11-07 11:17 -------- d-----w- c:\documents and settings\winxp\Application Data\Memeo
2009-11-07 11:12 . 2009-11-07 11:12 -------- d-----w- c:\program files\Western Digital
2009-11-07 11:12 . 2009-11-07 11:12 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\ServiceTest
2009-11-07 11:12 . 2009-11-07 11:12 -------- d-----w- c:\documents and settings\winxp\Local Settings\Application Data\temp
2009-11-07 11:12 . 2009-11-07 11:40 -------- d-----w- c:\program files\Common Files\eSellerate
2009-11-06 13:14 . 2009-11-06 13:14 -------- d-----w- c:\program files\Aegisub
2009-11-05 13:18 . 2009-11-07 17:32 -------- d-----w- c:\program files\The KMPlayer
2009-11-03 21:04 . 2009-11-03 21:04 152576 ----a-w- c:\documents and settings\winxp\Application Data\Sun\Java\jre1.6.0_17\lzma.dll
2009-11-03 16:14 . 2009-11-17 15:44 -------- d-----w- c:\documents and settings\winxp\Tracing
2009-11-03 16:09 . 2009-11-03 16:09 3119320 ----a-w- c:\documents and settings\winxp\Application Data\IDM\idmupdt.exe
2009-10-28 16:55 . 2009-10-28 16:55 64804 ----a-w- c:\windows\BricoPackUninst.cmd
2009-10-28 16:50 . 2009-10-28 16:55 6114 ----a-w- c:\windows\BricoPackFoldersDelete.cmd
2009-10-28 16:49 . 2009-10-28 16:49 -------- d-----w- c:\windows\BricoPacks
2009-10-24 14:43 . 2009-10-24 14:43 -------- d-----w- c:\documents and settings\All Users\Application Data\TechSmith
2009-10-22 07:46 . 2009-10-22 07:46 580114 ----a-w- c:\windows\system32\x264vfw.dll
2009-10-22 07:46 . 2009-10-22 07:46 -------- d-----w- c:\program files\x264
2009-10-22 07:01 . 2009-11-11 22:34 -------- d-----w- c:\program files\Combined Community Codec Pack
2009-10-22 06:43 . 2009-10-22 06:43 -------- d-----w- c:\program files\Real Alternative
2009-10-22 06:43 . 2009-10-22 06:43 -------- d-----w- c:\documents and settings\winxp\Local Settings\Application Data\Real
2009-10-21 23:19 . 2009-10-21 23:19 -------- d-----w- c:\documents and settings\winxp\Local Settings\Application Data\Identities
2009-10-20 14:41 . 2009-10-20 14:41 38208 ----a-w- c:\documents and settings\winxp\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-10-20 14:41 . 2009-10-20 14:41 38208 ----a-w- c:\documents and settings\Default User\Application Data\Macromedia\Flash Player\www.macromedia.com\bin\airappinstaller\airappinstaller.exe
2009-10-20 14:41 . 2009-10-20 14:41 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-10-20 14:40 . 2009-11-10 23:44 -------- d-----w- c:\documents and settings\winxp\Local Settings\Application Data\Adobe
2009-10-20 14:40 . 2009-10-20 14:40 86016 ----a-w- c:\documents and settings\All Users\Application Data\NOS\Adobe_Downloads\arh.exe
2009-10-20 14:40 . 2009-10-20 14:50 -------- d-----w- c:\documents and settings\All Users\Application Data\NOS
2009-10-20 14:03 . 2009-10-20 14:03 -------- d--h--w- c:\windows\PIF
2009-10-20 13:56 . 2009-10-20 13:56 -------- d-----w- c:\documents and settings\winxp\Local Settings\Application Data\Mozilla
2009-10-20 12:20 . 2009-10-20 12:20 -------- d-----w- c:\windows\SHELLNEW
2009-10-20 11:31 . 2009-10-20 11:31 -------- d-----w- c:\program files\MSECache
2009-10-20 09:46 . 2009-11-17 05:43 -------- d-----w- c:\documents and settings\winxp\Application Data\uTorrent
2009-10-20 04:26 . 2009-10-20 04:26 -------- d-----w- c:\documents and settings\All Users\Application Data\DAEMON Tools Lite
2009-10-20 04:22 . 2009-10-20 04:22 721904 ----a-w- c:\windows\system32\drivers\sptd.sys
2009-10-20 04:21 . 2009-10-20 04:27 -------- d-----w- c:\documents and settings\winxp\Application Data\DAEMON Tools Lite
2009-10-20 03:18 . 2009-10-20 03:18 0 ----a-w- c:\windows\nsreg.dat
2009-10-20 03:18 . 2009-10-20 03:18 -------- d-----w- c:\documents and settings\winxp\Local Settings\Application Data\Flock
2009-10-20 03:18 . 2009-10-20 03:18 -------- d-----w- c:\documents and settings\winxp\Application Data\Flock
2009-10-19 12:29 . 2009-10-11 01:17 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-10-19 12:29 . 2009-11-03 21:22 -------- d-----w- c:\program files\Java
2009-10-19 12:29 . 2009-10-19 12:29 152576 ----a-w- c:\documents and settings\winxp\Application Data\Sun\Java\jre1.6.0_16\lzma.dll
2009-10-19 11:52 . 2009-10-19 11:52 -------- d-----w- c:\program files\Microsoft Works
2009-10-19 11:51 . 2009-10-19 11:51 -------- d-----w- c:\program files\Microsoft.NET
2009-10-19 11:50 . 2009-10-19 11:50 -------- d-----w- c:\documents and settings\winxp\Local Settings\Application Data\Microsoft Help
2009-10-19 11:50 . 2009-10-20 12:22 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-10-19 11:50 . 2009-10-19 11:50 -------- d-----r- C:\MSOCache
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-11-17 15:44 . 2009-09-24 20:15 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-11-17 15:44 . 2009-10-09 12:56 28672 ----a-w- c:\documents and settings\winxp\Application Data\IDM\NP_IDM5.dll
2009-11-17 15:44 . 2009-10-09 12:56 28672 ----a-w- c:\documents and settings\winxp\Application Data\IDM\NP_IDM4.dll
2009-11-17 15:44 . 2009-10-09 12:56 28672 ----a-w- c:\documents and settings\winxp\Application Data\IDM\NP_IDM3.dll
2009-11-17 15:44 . 2009-09-25 09:44 -------- d-----w- c:\documents and settings\winxp\Application Data\IDM
2009-11-17 15:44 . 2009-10-09 12:56 28672 ----a-w- c:\documents and settings\winxp\Application Data\IDM\NP_IDM2.dll
2009-11-17 15:44 . 2009-10-09 12:56 28672 ----a-w- c:\documents and settings\winxp\Application Data\IDM\NP_IDM1.dll
2009-11-17 15:43 . 2009-09-25 09:44 -------- d-----w- c:\documents and settings\winxp\Application Data\DMCache
2009-11-17 15:34 . 2009-10-01 10:19 -------- d-----w- c:\documents and settings\winxp\Application Data\mIRC
2009-11-17 14:25 . 2009-10-01 10:19 -------- d-----w- c:\program files\mIRC
2009-11-15 10:27 . 2009-09-28 07:44 -------- d-----w- c:\documents and settings\winxp\Application Data\Aegisub
2009-11-15 10:13 . 2009-09-24 07:31 359848 ----a-w- c:\documents and settings\winxp\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-11-10 23:39 . 2009-09-24 08:24 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-11-10 23:22 . 2009-09-28 06:54 -------- d-----w- c:\program files\Common Files\Adobe
2009-11-03 16:12 . 2009-09-25 09:55 -------- d-----w- c:\program files\Internet Download Manager
2009-11-02 12:18 . 2009-09-26 05:39 -------- d-----w- c:\program files\Opera
2009-10-28 17:20 . 2009-10-14 21:39 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-10-28 16:55 . 2008-04-14 03:42 218624 ----a-w- c:\windows\system32\uxtheme.dll
2009-10-20 09:46 . 2009-09-25 02:39 -------- d-----w- c:\program files\uTorrent
2009-10-14 21:38 . 2009-10-14 21:38 -------- d-----w- c:\program files\CoreAAC
2009-10-14 20:55 . 2009-09-24 20:16 95259 ----a-w- c:\windows\system32\drivers\klick.dat
2009-10-14 20:55 . 2009-09-24 20:16 108059 ----a-w- c:\windows\system32\drivers\klin.dat
2009-10-07 00:13 . 2009-10-07 00:13 2196853 ----a-w- c:\documents and settings\winxp\Application Data\IDM\DwnlData\winxp\Enterprise_136\Enterprise.exe
2009-10-02 19:20 . 2009-10-02 19:20 -------- d-----w- c:\program files\VerbAce Research
2009-09-28 11:41 . 2009-09-28 11:41 -------- d-----w- c:\documents and settings\winxp\Application Data\GlobalSCAPE
2009-09-28 11:41 . 2009-09-28 11:41 -------- d-----w- c:\program files\GlobalSCAPE
2009-09-28 11:41 . 2009-09-24 08:10 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-09-28 11:40 . 2009-09-24 08:13 -------- d-----w- c:\program files\Common Files\InstallShield
2009-09-28 10:27 . 2009-09-28 10:27 1793 ----a-w- c:\windows\unins000.dat
2009-09-28 10:27 . 2009-09-28 10:27 695642 ----a-w- c:\windows\unins000.exe
2009-09-28 08:05 . 2009-09-28 08:05 554024 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-09-28 08:04 . 2009-09-28 08:04 -------- d-----w- c:\program files\MSBuild
2009-09-28 08:04 . 2009-09-28 08:04 -------- d-----w- c:\program files\Reference Assemblies
2009-09-28 07:50 . 2009-09-28 07:50 -------- d-----w- c:\program files\WMV9_VCM
2009-09-28 07:50 . 2009-09-28 07:50 -------- d-----w- c:\program files\AviSynth 2.5
2009-09-26 20:02 . 2009-09-26 20:02 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-09-26 19:10 . 2009-09-26 19:10 -------- d-----w- c:\program files\Messenger Plus! Live
2009-09-26 19:09 . 2009-09-26 19:08 -------- d-----w- c:\program files\Windows Live
2009-09-26 19:08 . 2009-09-26 19:08 -------- d-----w- c:\program files\Microsoft
2009-09-26 19:08 . 2009-09-26 19:08 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-09-26 19:01 . 2009-09-26 19:01 -------- d-----w- c:\program files\Common Files\Windows Live
2009-09-26 09:42 . 2009-09-24 07:03 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-09-25 12:09 . 2009-09-25 12:09 932368 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\profiles-1-6.dll
2009-09-25 12:09 . 2009-09-25 12:09 678416 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\content_interpreter-1-1.dll
2009-09-25 12:09 . 2009-09-25 12:09 604688 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\gsg-3-9.dll
2009-09-25 12:09 . 2009-09-25 12:09 1096208 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\filtration-4-6.dll
2009-09-25 12:09 . 2009-09-25 12:09 522768 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\KasFlt\Plugins\database-1-5.dll
2009-09-25 12:09 . 2009-09-25 12:09 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
2009-09-25 11:56 . 2009-09-25 11:56 59920 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.459\mzvkbd.dll
2009-09-25 11:56 . 2009-09-25 11:56 109072 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.459\mzvkbd3.dll
2009-09-25 11:56 . 2009-09-25 11:56 264720 ----a-w- c:\documents and settings\All Users\Application Data\Kaspersky Lab\AVP9\Data\Updater\Temporary Files\temporaryFolder\AutoPatches\kav9exec\9.0.0.459\klwtbbho.dll
2009-09-25 11:48 . 2009-09-24 20:15 9612 --sha-w- c:\windows\system32\drivers\fidbox.idx
2009-09-25 11:48 . 2009-09-24 20:15 555552 --sha-w- c:\windows\system32\drivers\fidbox.dat
2009-09-25 11:48 . 2009-09-24 20:15 1528 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2009-09-25 11:48 . 2009-09-24 20:15 131104 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2009-09-25 11:10 . 2009-09-24 20:15 -------- d-----w- c:\program files\Kaspersky Lab
2009-09-25 11:02 . 2009-09-24 20:11 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-09-25 10:49 . 2009-09-25 10:49 -------- d-----w- c:\documents and settings\winxp\Application Data\Media Player Classic
2009-09-25 09:58 . 2009-09-25 09:56 198064 ----a-w- c:\documents and settings\winxp\Application Data\IDM\idmmzcc3\components\idmmzcc.dll
2009-09-24 08:31 . 2009-09-24 08:30 16608 ----a-w- c:\windows\gdrv.sys
2009-09-24 08:24 . 2009-09-24 08:24 -------- d-----w- c:\program files\AGEIA Technologies
2009-09-24 08:13 . 2009-09-24 08:10 -------- d-----w- c:\program files\Realtek
2009-09-24 07:56 . 2009-09-24 07:56 -------- d-----w- c:\program files\Intel
2009-09-24 07:04 . 2009-09-24 07:04 -------- d-----w- c:\program files\microsoft frontpage
2009-09-24 07:01 . 2009-09-24 07:01 21640 ----a-w- c:\windows\system32\emptyregdb.dat
2009-09-09 10:43 . 2009-10-15 06:09 210352 ----a-w- c:\windows\system32\idmmbc.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2009-11-03 3134896]
"uTorrent"="c:\program files\uTorrent\uTorrent.exe" [2009-10-20 289072]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-10-07 13574144]
"WinSys2"="c:\windows\system32\winsys2.exe" [2008-10-21 208896]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-10-07 86016]
"avp"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" [2009-07-03 303376]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2009-10-03 35696]
"Adobe ARM"="c:\program files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2009-09-04 935288]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-10-11 149280]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2009-02-17 17508864]
"nwiz"="nwiz.exe" - c:\windows\system32\nwiz.exe [2008-10-07 1630208]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-9-28 113664]
VerbAce-Pro Startup Agent.lnk - c:\program files\VerbAce Research\VerbAce-Pro\VerbAce-Pro.exe [2009-10-2 606208]
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^Snagit 9.lnk]
path=c:\documents and settings\All Users\Start Menu\Programs\Startup\Snagit 9.lnk
backup=c:\windows\pss\Snagit 9.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [1/29/2008 6:29 PM 33808]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [4/30/2008 6:06 PM 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [5/16/2009 8:59 PM 19472]
S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [9/24/2009 11:13 AM 1684736]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com.sa/
mStart Page = about:blank
uInternet Connection Wizard,ShellNext = hxxp://devid.drp.su/?dev=VEN_14F1%26DEV_2F30%20
uInternet Settings,ProxyOverride = local
uSearchURL,(Default) = hxxp://www.google.com/keyword/%s
IE: Add to Anti-Banner - c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
IE: Download all links with IDM - c:\program files\Internet Download Manager\IEGetAll.htm
IE: Download FLV video content with IDM - c:\program files\Internet Download Manager\IEGetVL.htm
IE: Download with IDM - c:\program files\Internet Download Manager\IEExt.htm
.
- - - - ORPHANS REMOVED - - - -
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)

**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2009-11-17 18:43
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'explorer.exe'(2216)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Java\jre6\bin\jqs.exe
c:\windows\system32\nvsvc32.exe
c:\windows\system32\wscntfy.exe
c:\windows\system32\RUNDLL32.EXE
c:\program files\Internet Download Manager\IEMonitor.exe
.
**************************************************************************
.
Completion time: 2009-11-17 18:46 - machine was rebooted
ComboFix-quarantined-files.txt 2009-11-17 15:46
Pre-Run: 70,758,506,496 bytes free
Post-Run: 84,645,666,816 bytes free
- - End Of File - - 09BFE43578EB94127C4E59882BE8B4B9
​

 

الحين هاجيك جديد لاهنت

 

تفضل



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 7:26:14 PM, on 11/17/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16876)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\VerbAce Research\VerbAce-Pro\VerbAce-Pro.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://devid.drp.su/?dev=VEN_14F1&DEV_2F30
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: ??C?I E???? C?II?? ??? Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [WinSys2] C:\WINDOWS\system32\winsys2.exe
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [avp] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: VerbAce-Pro Startup Agent.lnk = C:\Program Files\VerbAce Research\VerbAce-Pro\VerbAce-Pro.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: &???E ??CE?? UC???E - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: ??? ??C??? C???C?? (URL) - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1253821349984
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
--
End of file - 6325 bytes
​

 

احذف التالي اخوي

O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - (no file)

طريقه الحذف​

​

​

بعدها اذهب الى اضافة وازالة البرامج واحذف التولبار الموجود عندك (toolbar)>> ممكن ما يكون موجود​

ثم نزل هذه الاداة واتبع الشرح التالي​

www.zyzoom.net/shswelh/Zyzoom_CyberScrub_Privacy_Suite_2.exe​

التوافق : ويندوز اكسبيفقط ​

شرح الاستخدام ,,,,,,
دبل كلك على الاداة واصبر حتى تنتهي جميع النوافذ وتقف عند هذه النافذة​

​

وعند ظهور هذه الشاشه ,, اضغط على Close ليتم اعادة تشغيل جهازك (( لتكملة عملية التنظيف ))​

​

وبلغنا بالنتائج

 

أوكي ياغالي ..
بخلي الأداة تشتغل وراح أرجع بعد ساعة إلى ربع تقريباً ^^" << مشوار ضروري -____-

 

للاسف لم ينجح الأمر =__=​

 

طبق الشرح التالي اخوي

[ملف صغير ينظف الكثير] + [طريقة تنظيف ملفات استعادة النظام لتوفير مساحة] ‏

 

تم استخدام الأداة

 

كيف الاوضاع عندك اخوي ؟؟؟

 

المشكله بسبب نظام الملفات fat32

حول إلى نظام ntfs وراح تنحل المشكله

 

نفس المشكلة -__-

وش هذا ؟
كيف أحولها ^^ ؟
​