• بادئ الموضوع بادئ الموضوع ned(11)ved
  • تاريخ البدء تاريخ البدء
  • المشاهدات 2,178

ned(11)ved

زيزوومى فضى
إنضم
17 يناير 2008
المشاركات
3,406
مستوى التفاعل
615
النقاط
945
غير متصل
السلام عليكم ورحمة الله وبركاته

عندي فايروس وهذا صوره مع تقارير

المنتدي هذا شامخ بالاداره و الاعضاء

ومهم حصل سيظل الاول

عندي فايروس وهذا الصوره

81018852.jpg


BitDefender QuickScan

PHP:
QuickScan Beta 32-bit v0.9.9.23
-------------------------------
Scan date:  Tue Jun 29 15:48:12 2010
Machine ID: D06D9BAB



No infection found.
-------------------



Processes
---------
<unsigned>  newadmin.exe                              624    C:\Program Files\1st Security Agent\newadmin.exe
<unsigned>  Print2PDF                                 640    C:\Program Files\Software602\Print2PDF\Print2PDF.exe

<verified>  Firefox                                  2284    C:\Program Files\Mozilla Firefox\firefox.exe
<verified>  IEMonitor Application                    2608    C:\Program Files\Internet Download Manager\IEMonitor.exe
<verified>  Intel(R) Common User Interface            596    C:\WINDOWS\system32\hkcmd.exe
<verified>  Intel(R) Common User Interface            608    C:\WINDOWS\system32\igfxpers.exe
<verified>  Intel(R) Common User Interface            588    C:\WINDOWS\system32\igfxtray.exe
<verified>  IObit Security 360                       2452    C:\Program Files\IObit\IObit Security 360\is360.exe
<verified>  IObit Security 360                       2008    C:\Program Files\IObit\IObit Security 360\IS360srv.exe
<verified>  IObit Security 360                        688    C:\Program Files\IObit\IObit Security 360\IS360tray.exe
<verified>  Java(TM) Platform SE 6 U20               2032    C:\Program Files\Java\jre6\bin\jqs.exe
<verified>  Java(TM) Platform SE Auto Updater 2 0     576    C:\Program Files\Common Files\Java\Java Update\jusched.exe
<verified>  McAfee Agent                              216    C:\Program Files\McAfee\Common Framework\FrameworkService.exe
<verified>  McAfee Agent                             1236    C:\Program Files\McAfee\Common Framework\naPrdMgr.exe
<verified>  McAfee Agent                              660    C:\Program Files\McAfee\Common Framework\udaterui.exe
<verified>  McAfee Common Framework                   412    C:\Program Files\McAfee\Common Framework\McTray.exe
<verified>  Microsoft® Windows® Operating System      520    C:\WINDOWS\Explorer.EXE
<verified>  Microsoft® Windows® Operating System     1372    C:\WINDOWS\System32\alg.exe
<verified>  Microsoft® Windows® Operating System      844    C:\WINDOWS\system32\csrss.exe
<verified>  Microsoft® Windows® Operating System      772    C:\WINDOWS\system32\ctfmon.exe
<verified>  Microsoft® Windows® Operating System      924    C:\WINDOWS\system32\lsass.exe
<verified>  Microsoft® Windows® Operating System      912    C:\WINDOWS\system32\services.exe
<verified>  Microsoft® Windows® Operating System      788    C:\WINDOWS\System32\smss.exe
<verified>  Microsoft® Windows® Operating System      312    C:\WINDOWS\system32\spoolsv.exe
<verified>  Microsoft® Windows® Operating System     1092    C:\WINDOWS\system32\svchost.exe
<verified>  Microsoft® Windows® Operating System     1152    C:\WINDOWS\system32\svchost.exe
<verified>  Microsoft® Windows® Operating System     1576    C:\WINDOWS\System32\svchost.exe
<verified>  Microsoft® Windows® Operating System     1752    C:\WINDOWS\system32\svchost.exe
<verified>  Microsoft® Windows® Operating System     1944    C:\WINDOWS\system32\svchost.exe
<verified>  Microsoft® Windows® Operating System      476    C:\WINDOWS\system32\svchost.exe
<verified>  Microsoft® Windows® Operating System      868    C:\WINDOWS\system32\winlogon.exe
<verified>  PC Tools Auxiliary Service               1308    C:\Program Files\Spyware Doctor\pctsAuxs.exe
<verified>  PC Tools Security Service                1836    C:\Program Files\Spyware Doctor\pctsSvc.exe
<verified>  PC Tools Tray Application                 736    C:\Program Files\Spyware Doctor\pctsTray.exe
<verified>  Runscanner                               2820    C:\Documents and Settings\User\Desktop\RunScanner.exe
<verified>  Skype Toolbars                           1180    C:\Program Files\Skype\Toolbars\Shared\SkypeNames2.exe
<verified>  SYSCORE.14.1.0.484.x86                   1220    C:\WINDOWS\system32\mfevtps.exe
<verified>  Threat Expert Ltd. Browser Defender      2660    C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
<verified>  USBGuard Application                      712    C:\Program Files\USB Disk Security\USBGuard.exe
<verified>  VirusScan Enterprise                      668    C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
<verified>  VirusScan Enterprise                      928    C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
<verified>  VMware Workstation                       1272    C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
<verified>  VMware Workstation                       2064    C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
<verified>  VMware Workstation                       1356    C:\WINDOWS\system32\vmnat.exe
<verified>  VMware Workstation                       2308    C:\WINDOWS\system32\vmnetdhcp.exe
<verified>  VSCORE.14.1.0.447.x86                     148    C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe
<verified>  VSCORE.14.1.0.447.x86                    1496    C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
<verified>  VSCORE.14.1.0.447.x86                    2100    C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe


Network activity
----------------
Process svchost.exe (1152) listens on ports: 135 (RPC)
Process vmware-authd.exe (2064) listens on ports: 912


Autoruns and critical files
---------------------------
<unsigned>  newadmin.exe                             C:\Program Files\1st Security Agent\newadmin.exe
<unsigned>  Print2PDF                                C:\Program Files\Software602\Print2PDF\Print2PDF.exe

<verified>  Adobe Acrobat                            C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe
<verified>  Intel(R) Common User Interface           C:\WINDOWS\system32\hkcmd.exe
<verified>  Intel(R) Common User Interface           C:\WINDOWS\system32\igfxdev.dll
<verified>  Intel(R) Common User Interface           C:\WINDOWS\system32\igfxpers.exe
<verified>  Intel(R) Common User Interface           C:\WINDOWS\system32\igfxtray.exe
<verified>  IObit Security 360                       C:\Program Files\IObit\IObit Security 360\IS360tray.exe
<verified>  Java(TM) Platform SE Auto Updater 2 0    C:\Program Files\Common Files\Java\Java Update\jusched.exe
<verified>  McAfee Agent                             C:\Program Files\McAfee\Common Framework\udaterui.exe
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\browseui.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\crypt32.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\cryptnet.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\cscdll.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\ctfmon.exe
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\dumprep.exe
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\logonui.exe
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\sclgntfy.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\shell32.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\stobject.dll
<verified>  Microsoft® Windows® Operating System     c:\windows\system32\userinit.exe
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\wlnotify.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\WPDShServiceObj.dll
<verified>  PC Tools Tray Application                C:\Program Files\Spyware Doctor\pctsTray.exe
<verified>  USBGuard Application                     C:\Program Files\USB Disk Security\USBGuard.exe
<verified>  VirusScan Enterprise                     C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
<verified>  Windows® Internet Explorer               C:\WINDOWS\system32\webcheck.dll


Browser plugins
---------------
<unsigned>  fgiebar Module                           c:\program files\flashget\fgiebar.dll
<unsigned>  FlashGet                                 C:\Program Files\FlashGet\flashget.exe
<unsigned>  GetFlash Module                          c:\program files\flashget\getflash.dll
<unsigned>  RealJukebox NS Plugin                    C:\Program Files\Final Codecs\MozillaPlugins\nprjplug.dll
<unsigned>  RealPlayer Version Plugin                C:\Program Files\Final Codecs\MozillaPlugins\nprpjplug.dll

<verified>  AcroIEHelperShim Library                 C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
<verified>  Adobe Acrobat                            C:\Program Files\Internet Explorer\plugins\nppdf32.dll
<verified>  BitDefender QuickScan                    C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\9l7ijki0.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\components\qscanff.dll
<verified>  BitDefender QuickScan                    C:\Documents and Settings\User\Application Data\Mozilla\Firefox\Profiles\9l7ijki0.default\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}\plugins\npqscan.dll
<verified>  ieflash.dll                              c:\program files\flashfxp\ieflash.dll
<verified>  Internet Download Manager Module         C:\Program Files\Internet Download Manager\IDMIECC.dll
<verified>  Java Deployment Toolkit 6.0.200.2        C:\Program Files\Mozilla Firefox\plugins\npdeployJava1.dll
<verified>  Java(TM) Platform SE 6 U20               c:\program files\java\jre6\bin\jp2ssv.dll
<verified>  Java(TM) Platform SE 6 U20               c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
<verified>  Messenger                                C:\Program Files\Messenger\msmsgs.exe
<verified>  Microsoft® Windows Live Login Helper     c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\mswsock.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\rsvpsp.dll
<verified>  Microsoft® Windows® Operating System     C:\WINDOWS\system32\winrnr.dll
<verified>  Move Streaming Media Player              C:\Documents and Settings\User\Application Data\Move Networks\plugins\npqmp071700000016.dll
<verified>  Mozilla Default Plug-in                  C:\Program Files\Mozilla Firefox\plugins\npnul32.dll
<verified>  NPSWF32.dll                              C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
<verified>  RealPlayer(tm) G2 LiveConnect-Enabled P  C:\Program Files\Final Codecs\MozillaPlugins\nppl3260.dll
<verified>  Skype Toolbars                           c:\program files\skype\toolbars\internet explorer\skypeieplugin.dll
<verified>  Threat Expert Ltd. Browser Defender      c:\program files\spyware doctor\bdt\pctbrowserdefender.dll
<verified>  VMware Workstation                       C:\Program Files\VMware\VMware Workstation\vsocklib.dll
<verified>  VSCORE.14.1.0.447.x86                    C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll
<verified>  Windows® Internet Explorer               C:\WINDOWS\system32\ieframe.dll


Missing files
-------------
File not found: C:\WINDOWS\System32\hidserv.dll
 referenced in: HKLM\System\ControlSet001\services\HidServ\Parameters\"ServiceDll"

File not found: C:\WINDOWS\system32\ozgblwf.dll
 referenced in: HKLM\System\ControlSet001\services\zypdsb\Parameters\"ServiceDll"


Scan
----
<unsigned>  MD5: 833459d7420f814e5d564be315587a8a  C:\Program Files\1st Security Agent\newadmin.exe
<unsigned>  MD5: 57d45a7b4dd0ddc1dd3f3fbf78dcf6f8  C:\Program Files\7-Zip\7-zip.dll
<unsigned>  MD5: 985eff8b21f8f825aa156b2bd268f2b9  C:\Program Files\Final Codecs\MozillaPlugins\nprjplug.dll
<unsigned>  MD5: 30257426f6da31808c6698ec01de2d97  C:\Program Files\Final Codecs\MozillaPlugins\nprpjplug.dll
<unsigned>  MD5: 8fa3b8b4ecffde790da2173210c80a85  c:\program files\flashget\fgiebar.dll
<unsigned>  MD5: d444062d0e8267830c6d69986c1e1fbb  C:\Program Files\FlashGet\flashget.exe
<unsigned>  MD5: c281625e4775f8ad88448c50afeb4561  c:\program files\flashget\getflash.dll
<unsigned>  MD5: 80f2765699c830afac48b9c8212d3485  C:\Program Files\IObit\IObit Security 360\is360mon.dll
<unsigned>  MD5: fb5200b314747963d1530d166755aa89  C:\Program Files\IObit\IObit Security 360\madbasic_.bpl
<unsigned>  MD5: 155734ba4f8408328656f35269b9eb83  C:\Program Files\IObit\IObit Security 360\maddisAsm_.bpl
<unsigned>  MD5: dd82eb68d97944b192c7803eb585b03c  C:\Program Files\IObit\IObit Security 360\rtl120.bpl
<unsigned>  MD5: 773ebd87010a6f644869a59d98792c9c  C:\Program Files\IObit\IObit Security 360\vcl120.bpl
<unsigned>  MD5: 86f1895ae8c5e8b17d99ece768a70732  C:\Program Files\Java\jre6\bin\msvcr71.dll
<unsigned>  MD5: e851bf9ec4d1f3949389e41a44684f68  C:\Program Files\McAfee\Common Framework\boost_thread-vc71-mt-1_32.dll
<unsigned>  MD5: 9d7ef8e7dd3ba8a73ca25e4658ae84b9  C:\Program Files\McAfee\Common Framework\cryptocme2.dll
<unsigned>  MD5: df71bfaf0a7c35a6c68c0fd57ba1ea60  C:\Program Files\McAfee\VirusScan Enterprise\wmain.dll
<unsigned>  MD5: 9a4e6eb27517d1e3005c493ca093f31e  C:\Program Files\Mozilla Firefox\freebl3.dll
<unsigned>  MD5: ec9e5b1a8a5088fef71a17220430fc4a  C:\Program Files\Mozilla Firefox\nssdbm3.dll
<unsigned>  MD5: 1bcb8b8ab1605fc0b98b634f42b91ded  C:\Program Files\Mozilla Firefox\softokn3.dll
<unsigned>  MD5: 3fbf683ee326e1eb3f73e1047afec206  C:\Program Files\Software602\Print2PDF\Print2PDF.exe
<unsigned>  MD5: f24b4891059a2c213912f2a7f3a30366  C:\Program Files\Software602\Print2PDF\Print602.dll
<unsigned>  MD5: b33b7439545775dd1103c95616f485ff  C:\Program Files\Software602\Print2PDF\wc.dll
<unsigned>  MD5: 2e69d764ecb4087e67da5124c208e323  C:\Program Files\Software602\Print2PDF\wcs.dll
<unsigned>  MD5: 22796e9bba509c141ba9c3ed6971b213  C:\Program Files\Spyware Doctor\PCToolsComponents.bpl
<unsigned>  MD5: ee4751299febfab77e689c60721ef218  C:\Program Files\Spyware Doctor\rtl100.bpl
<unsigned>  MD5: aa2baee9c50ab6fed72de7c8867dff49  C:\Program Files\Spyware Doctor\vcl100.bpl
<unsigned>  MD5: 19f660f424d5bce99928886f86ebee34  C:\Program Files\SuperCopier2\SC2ShellExt.dll
<unsigned>  MD5: da66ceaf1def4da337f1542e0308483d  C:\Program Files\Unlocker\UnlockerCOM.dll
<unsigned>  MD5: 4847639d852763ee39415c929470f672  C:\Program Files\Unlocker\UnlockerDriver5.sys
<unsigned>  MD5: 023707d932ba31314210e6844d33d500  C:\Program Files\WinRAR\RarExt.dll
<unsigned>  MD5: bc1d8115ac54f256caf3409cf8d260e3  C:\WINDOWS\system32\cdintf400.dll
<unsigned>  MD5: b3511383c8be3a8c5b88a78971fc1141  C:\WINDOWS\system32\dfshim.dll
<unsigned>  MD5: 45e7a5e6963fa9d69cb85f50a271e3df  C:\WINDOWS\system32\drivers\ADIHdAud.sys
<unsigned>  MD5: 3a3a82ffd268bcfb7ae6a48cecf00ad9  C:\WINDOWS\system32\DRIVERS\b57xp32.sys
<unsigned>  MD5: 3fcc124b6e08ee0e9351f717dd136939  C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
<unsigned>  MD5: 2b85237f904c5bdf7ad386f0ede19bd3  C:\WINDOWS\system32\drivers\PMEMNT.SYS
<unsigned>  MD5: cf0376023360aadd55c89ba50564afdc  C:\WINDOWS\system32\mdimon.dll
<unsigned>  MD5: 19d02521959829a39820512dced78c5c  C:\WINDOWS\system32\mscoree.dll
<unsigned>  MD5: 561fa2abb31dfa8fab762145f81667c2  C:\WINDOWS\system32\msvcp71.dll
<unsigned>  MD5: 86f1895ae8c5e8b17d99ece768a70732  C:\WINDOWS\system32\msvcr71.dll
<unsigned>  MD5: e3fe88a28e369e49b3c8a74ce18f098c  C:\WINDOWS\system32\ShellExt\UniUpShl.dll
<unsigned>  MD5: f40f1f15d774eade6e747587deade4d1  C:\WINDOWS\system32\spool\drivers\w32x86\3\acpdf300.dll
<unsigned>  MD5: 4f74dfd20bad8abb52e1eb7269e23387  C:\WINDOWS\system32\spool\drivers\w32x86\3\acpdfui300.dll
<unsigned>  MD5: 58e13a2292839321d3cdc918d5a4f5ae  C:\WINDOWS\system32\spool\prtprocs\w32x86\mdippr.dll
<unsigned>  MD5: 4c8a880eabc0b4d462cc4b2472116ea1  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcp80.dll
<unsigned>  MD5: e4fece18310e23b1d8fee993e35e7a6f  C:\WINDOWS\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700\msvcr80.dll

Using HTTP proxy: 212.102.0.102:8080


No file uploaded.

Scan finished - communication took 6 sec
Total traffic - 0.08 MB sent, 3.25 KB recvd
Scanned 1276 files and modules - 219 seconds

==============================================================================

hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:57:26 م, on 29/06/2010
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\1st Security Agent\newadmin.exe
C:\Program Files\Software602\Print2PDF\Print2PDF.exe
C:\Program Files\McAfee\Common Framework\udaterui.exe
C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE
C:\Program Files\IObit\IObit Security 360\IS360tray.exe
C:\Program Files\USB Disk Security\USBGuard.exe
C:\Program Files\Spyware Doctor\pctsTray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\IObit\IObit Security 360\IS360srv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe
C:\Program Files\McAfee\Common Framework\FrameworkService.exe
C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
C:\WINDOWS\system32\mfevtps.exe
C:\Program Files\McAfee\Common Framework\naPrdMgr.exe
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Program Files\McAfee\Common Framework\McTray.exe
C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
C:\WINDOWS\system32\vmnat.exe
C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
C:\Program Files\McAfee\VirusScan Enterprise\mfeann.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\WINDOWS\System32\alg.exe
C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
C:\Program Files\IObit\IObit Security 360\is360.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Downloads\Zyzoom_HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.102.0.102:8080
O2 - BHO: IDMIEHlprObj Class - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Link Helper - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Browser Defender BHO - {2A0F3D1B-0909-4FF4-B272-609CCE6054E7} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: FlashFXP Helper for Internet Explorer - {E5A1691B-D188-4419-AD02-90002030B8EE} - C:\PROGRA~1\FlashFXP\IEFlash.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: gFlash Class - {F156768E-81EF-470C-9057-481BA8380DBA} - C:\PROGRA~1\FlashGet\getflash.dll
O3 - Toolbar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\fgiebar.dll
O3 - Toolbar: PC Tools Browser Guard - {472734EA-242A-422B-ADF8-83D1E48CC825} - C:\Program Files\Spyware Doctor\BDT\PCTBrowserDefender.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [00saskda] "C:\Program Files\1st Security Agent\newadmin.exe" saskda
O4 - HKLM\..\Run: [Print2PDF Print Monitor] "C:\Program Files\Software602\Print2PDF\Print2PDF.exe" /server
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [IObit Security 360] "C:\Program Files\IObit\IObit Security 360\IS360tray.exe" /autostart
O4 - HKLM\..\Run: [USB Antivirus] C:\Program Files\USB Disk Security\USBGuard.exe
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKLM\..\Run: [ISTray] "C:\Program Files\Spyware Doctor\pctsTray.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Toolbars\Restrictions present
O8 - Extra context menu item: Download All by FlashGet - C:\Program Files\FlashGet\jc_all.htm
O8 - Extra context menu item: Download using FlashGet - C:\Program Files\FlashGet\jc_link.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: تحميل الكل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى فيديو (إف.إل.في) بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: تحميل ملفات (إف.إل.في) الـ 10 الأخيرة بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetVL2.htm
O9 - Extra button: Print2PDF - {5B7027AD-AA6D-40df-8F56-9560F277D2A5} - C:\Program Files\Software602\Print2PDF\Print602.dll
O9 - Extra 'Tools' menuitem: Print2PDF - {5B7027AD-AA6D-40df-8F56-9560F277D2A5} - C:\Program Files\Software602\Print2PDF\Print602.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra 'Tools' menuitem: &FlashGet - {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - C:\PROGRA~1\FlashGet\flashget.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O10 - Unknown file in Winsock LSP: c:\program files\vmware\vmware workstation\vsocklib.dll
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O17 - HKLM\System\CCS\Services\Tcpip\..\{73A3A952-4271-4E92-9F7B-77F6E3864EE0}: NameServer = 212.102.0.10,212.102.0.11
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Browser Defender Update Service - Threat Expert Ltd. - C:\Program Files\Spyware Doctor\BDT\BDTUpdateService.exe
O23 - Service: IS360service - IObit - C:\Program Files\IObit\IObit Security 360\IS360srv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Engine Service (McAfeeEngineService) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe
O23 - Service: McAfee Framework Service (McAfeeFramework) - McAfee, Inc. - C:\Program Files\McAfee\Common Framework\FrameworkService.exe
O23 - Service: McAfee McShield (McShield) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe
O23 - Service: McAfee Task Manager (McTaskManager) - McAfee, Inc. - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\WINDOWS\system32\mfevtps.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files\VMware\VMware Workstation\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files\Common Files\VMware\USB\vmware-usbarbitrator.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:\WINDOWS\system32\vmnat.exe

--
End of file - 11109 bytes

runscanner

تقرير

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


المشكله في فايروس في الصوره اروح على مكان الفايروس ما اشوف اسمه
 

توقيع : ned(11)ved
قبل ما اعمل ردك يا اخي
ابو شبر

كان مايشتغل الفايروال للويندوز الان اشتغل واظن الى الان النتائج جميله يعطيك العافيه بجرب الكمبيوتر اليوم واذا فيه مشكله بطرحها وربما لم يذهب الفايروس الله اعلم يعطيك العافيه
 

توقيع : ned(11)ved
إحذف

Spyware Doctor 2010 7.0.0.545 Final

USB Disk Security5.3.0.36

************' Anti-Malware 1.46
اخر اصدار محدث

IObit Security 360

ونظف الجهاز بهذه الأداة

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


ثم

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


و إفحص النظام بـ


يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

 
توقيع : إكس زيرو
اخي الكريم انا سويت كلام ابو شبر والى الان لم يخرج الفايروس والرقعه الامنيه جابت نتيجه الى الان
بنتظر فتره بعدين بسوي باقي الاشياء لا نريد عمل كل شي في وقت واحد وبعدين مانعرف اي الاشياء اللي حلت الموضوع

بخصوص حذف البرامج هذا هي سيئه او ماذا انا لا اجد بطى في تشغيل الجهاز كل شي سليم عندي وضح لماذا احذف البرامج لكي يستفيد الاخرين من علمك


بخصوص اداه kaspersky tool

انا ركبت برنامج kaspersky internet security 2011 v. 11.0.0.232 Final

وقمت بعمل بعمل سيدي بوت منه وقمت بعمل سكان وقد صاد اشياء في السابق لكن لم يحذف هذا الفايروس ربما يختلف البوت سيدي عن الاداه انت والخبراء اعلم بذلك مني

يوجد لدي بوت من gdata 2011
و بت فندر 2010 هل اقوم بعمل سكان عن طريقهم من الدوس او اتركهم

حاليا الجهاز جديد

وسوف انتظر قليل انا لا اريد برامج تثبت في الجهاز وابحث عنها بورتبل لان اجهزه الشركات لايمكن تركيب عليها اي برامج لان الصلاحيات منزوعه لكن انا الحمدلله الصلاحيات موجوده

من لديه اي علم لا يبخل على وعلى الاعضاء لان الموضوع محل استفاده الجميع لانه ربما ياتي لك في الايام القادمه

وشكرا
 
توقيع : ned(11)ved
عودة
أعلى