خطأ يطلع لي اذا فتحت جهاز الكمبيوتر !!

المصدر: خطأ يطلع لي اذا فتحت جهاز الكمبيوتر !!
في منتدى : منتدى مشاكـل وحلول الحـاسب

السلام عليكم

عندي مشكلة اذا فتحت اي قرص سواء الهارديسك الخارجي أو اللي موجود بالجهاز .. تطلع معي هالرساله أحياناً





واذا ضغطت close يعلق الجهاز ثانتين ويرجع من جديد وهو مسكر كل المجلدات

مدري وش علته :/

 

حمل هذا البرنامج
www.zyzoom.net/shswelh/Zyzoom_HijackThis.exe
بعدها اغلق جميع البرامج وخصوصا الانترنت اكسبلورر والماسنجر
شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم

 

حمل هذا البرنامج
www.zyzoom.net/shswelh/Zyzoom_HijackThis.exe
بعدها اغلق جميع البرامج وخصوصا الانترنت اكسبلورر والماسنجر
شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم​

 

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:50:09 ص, on 03/04/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Common Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft
Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Sony Ericsson\Sony Ericsson PC
Suite\SupServ.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Common
Files\Real\Update_OB\realsched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\Program Files\DivX\DivX Update\DivXUpdate.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\PROGRA~1\MI3AA1~1\wcescomm.exe
C:\Program Files\Internet Download
Manager\IDMan.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Sony Ericsson\Sony Ericsson PC
Suite\SEPCSuite.exe
C:\PROGRA~1\MI3AA1~1\rapimgr.exe
C:\Program Files\TechSmith\SnagIt 9\Snagit32.exe
C:\Program Files\VerbAce Research\VerbAce-
Pro\VerbAce-Pro.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\iPod\bin\iPodService.exe
C:\Program Files\TechSmith\SnagIt 9\TSCHelp.exe
C:\Program Files\Internet Download
Manager\IEMonitor.exe
C:\Program Files\TechSmith\SnagIt 9\SnagPriv.exe
C:\Program Files\TechSmith\SnagIt 9
\snagiteditor.exe
C:\Program Files\Skype\Plugin
Manager\skypePM.exe
C:\Program Files\Java\jre6\bin\jucheck.exe
C:\Documents and Settings\user\My
Documents\Downloads\Programs\Zyzoom_HijackThi
s_3.exe
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Page_URL =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Default_Search_URL =
http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet
Explorer\Main,Search Page =
http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet
Explorer\Main,Start Page =
http://go.microsoft.com/fwlink/?LinkId=69157
R1 -
HKCU\Software\Microsoft\Windows\CurrentVersion\I
nternet Settings,ProxyOverride = local;*.local
O2 - BHO: IDM Helper - {0055C089-8582-441B-
A0BF-17B458C2A3A8} - C:\Program Files\Internet
Download Manager\IDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-
C502-44C8-8409-FCE54AD9C208} - C:\Program
Files\TechSmith\Snagit 9\SnagitBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper -
{06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -
C:\Program Files\Common
Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin
for Internet Explorer - {3049C3E9-B461-4BC5-8870
-4C09146192CA} - C:\Program
Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Windows Live Sign-in Helper -
{9030D464-4C02-4ABF-8ECC-5164760863C6} -
C:\Program Files\Common Files\Microsoft
Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper -
{DBC80044-A445-435b-BC74-9C25C1C588A9} -
C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-
17CE-4C07-BC86-EABFE594F69C} - C:\Program
Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E
-D2AAB95CABE3} - C:\Program
Files\TechSmith\Snagit 9\SnagitIEAddin.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE
C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program
Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program
Files\Common Files\Real\Update_OB\realsched.exe"
-osboot
O4 - HKLM\..\Run: [avgnt] "C:\Program
Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched]
"C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [DivXUpdate] "C:\Program
Files\DivX\DivX Update\DivXUpdate.exe"
/CHECKNOW
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program
Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program
Files\iTunes\iTunesHelper.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program
Files\Windows Live\Messenger\msnmsgr.exe"
/background
O4 - HKCU\..\Run: [ctfmon.exe]
C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program
Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [H/PC Connection Agent]
"C:\PROGRA~1\MI3AA1~1\wcescomm.exe"
O4 - HKCU\..\Run: [IDMan] C:\Program
Files\Internet Download Manager\IDMan.exe
/onboot
O4 - HKCU\..\Run: [Skype] "C:\Program
Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [Sony Ericsson PC Suite]
"C:\Program Files\Sony Ericsson\Sony Ericsson PC
Suite\SEPCSuite.exe" /systray /nologon
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate]
C:\WINDOWS\system32
\Macromed\Flash\NPSWF32_FlashUtil.exe -p
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User
'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [RunNarrator]
Narrator.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE]
C:\WINDOWS\system32\CTFMON.EXE (User 'Default
user')
O4 - HKUS\.DEFAULT\..\RunOnce: [RunNarrator]
Narrator.exe (User 'Default user')
O4 - Global Startup: Snagit 9.lnk = C:\Program
Files\TechSmith\SnagIt 9\Snagit32.exe
O4 - Global Startup: VerbAce-Pro Startup Agent.lnk
= C:\Program Files\VerbAce Research\VerbAce-
Pro\VerbAce-Pro.exe
O8 - Extra context menu item: E&xport to Microsoft
Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11
\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki... -
res://C:\Program Files\Google\Google
Toolbar\Component\GoogleToolbarDynamic_mui_en
_60D6097707281E79.dll/cmsidewiki.html
O8 - Extra context menu item: تحميل الكل بواسطة
Internet Download Manager - C:\Program
Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة
Internet Download Manager - C:\Program
Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى FLV
بواسطة Internet Download Manager - C:\Program
Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: Create Mobile Favorite -
{2EAF5BB1-070F-11D3-9307-00C04FAE2D4F} -
C:\PROGRA~1\MI3AA1~1\INetRepl.dll
O9 - Extra button: (no name) - {2EAF5BB2-070F-
11D3-9307-00C04FAE2D4F} - C:\PROGRA~1
\MI3AA1~1\INetRepl.dll
O9 - Extra 'Tools' menuitem: Create Mobile
Favorite... - {2EAF5BB2-070F-11D3-9307-
00C04FAE2D4F} - C:\PROGRA~1\MI3AA1~1
\INetRepl.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-
B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2
\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-
4134-82b7-f2ba38496583} - C:\WINDOWS\Network
Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 -
{e2e2dd38-d088-4134-82b7-f2ba38496583} -
C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-
11d2-BB9E-00C04F795683} - C:\Program
Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger -
{FB5F1910-F110-11d2-BB9E-00C04F795683} -
C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF:
START_PAGE_URL=http://www.google.com
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-
2D05CB959537} (MSN Photo Upload Tool) -
http://gfx2.hotmail.com/mail/w3/resources/MSNPUpl
d.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-
AC9BF37916A7} -
http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp
.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-
4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1
\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Avira AntiVir Scheduler
(AntiVirSchedulerService) - Avira GmbH -
C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) -
Avira GmbH - C:\Program Files\Avira\AntiVir
Desktop\avguard.exe
O23 - Service: Apple Mobile Device - Apple Inc. -
C:\Program Files\Common Files\Apple\Mobile Device
Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. -
C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FLEXnet Licensing Service - Acresso
Software Inc. - C:\Program Files\Common
Files\Macrovision Shared\FLEXnet
Publisher\FNPLicensingService.exe
O23 - Service: Hotspot Shield Tray Service
(HssTrayService) - Unknown owner - C:\Program
Files\Hotspot Shield\bin\HssTrayService.EXE (file
missing)
O23 - Service: iPod Service - Apple Inc. -
C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter
(JavaQuickStarterService) - Sun Microsystems, Inc. -
C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service
(NVSvc) - NVIDIA Corporation -
C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Sony Ericsson OMSI download
service (OMSI download service) - Unknown owner
- C:\Program Files\Sony Ericsson\Sony Ericsson PC
Suite\SupServ.exe
O23 - Service: Zwunzi Service - Unknown owner -
C:\Documents and Settings\All Users\Application
Data\Zwunzi\zwunzi135.exe (file missing)
--
End of file - 9299 bytes

 

عزيزي نزل هذا البرنامج

Everything search engine

بعد تثبيته اكتب اسم هذا الملف لكي يجده لك boot.ini

بعد ذلك افتحه وغير هذا السطر

noexecute=optin

الى

noexecute=AlwaysOff

ثم اعمل save واعد تشغيل الكمبيوتر

ماتم عمله هو ايقاف طريقة للحماية يستعملها الويندوز ضد بعض طرق الفيروسات ولكن للاسف بعض البرامج السليمة تستعمل هذه الطريقة لذلك يحدث هذا الامر لذلك من باب الحرص ادخل بعد ذلك الى هذا الموقع لفحص جهازك

Windows Live OneCare

بالتوفيق