[ تم حل المشكلة] مشكلة مع فايرس win32.hllw.gavir.ini

[رحــــــــــال]

السلام عليكم ورحمة الله وبركاتة

أخواني الأعضاء عملت فحص للجهاز بواسطة أداة دكتور ويب
وطلعلي هاذا الفايرس طبعا الفايرس هاذا موجود بجهاز الكمبيوتر والهادرسك الخارجي
ولاهو راضي ينحذف وش الحل..

بنتضار حلولكم ...

 

[غَـسّـان]

حمل الاداة التالية

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

او من هنا رابط بديل

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

وانتظر حتى تنتهي من عمل التقرير

انسخ محتوى التقرير والصقه بمشاركتك القادمة


واعمل

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

​

​

 

[رحــــــــــال]

هاذا تقرير الهايجك
أخي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

ـــــــــــــــــــــــــــــــــــــــــــــــــــــ

*********** تقرير الهايجاك ***********
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:42:01 ص, on 16/10/2010
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\r7aal\سطح المكتب\Zyzoom_Report_Tool.exe
C:\DOCUME~1\r7aal\LOCALS~1\Temp\Ht.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~4\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Avira FireWall (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe

--
End of file - 6319 bytes


*********** تقرير مسجل النظام ***********

"Silent Runners.vbs", revision 60,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Operating System: Windows XP SP3
Search enabled of all directories on local fixed drives for DESKTOP.INI
DLL launch points
Output limited to non-default values, except where indicated by "{++}"


Startup items buried in registry:
---------------------------------

HKCU\Software\Microsoft\Windows\CurrentVersion\Run\ {++}
"CTFMON.EXE" = "C:\WINDOWS\system32\ctfmon.exe" [MS]
"IDMan" = "C:\Program Files\Internet Download Manager\IDMan.exe /onboot" ["Tonec Inc."]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\ {++}
"SoundMan" = "SOUNDMAN.EXE" ["Realtek Semiconductor Corp."]
"avgnt" = ""C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min" ["Avira GmbH"]
"SunJavaUpdateSched" = ""C:\Program Files\Common Files\Java\Java Update\jusched.exe"" ["Sun Microsystems, Inc."]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\

{0055C089-8582-441B-A0BF-17B458C2A3A8}\(Default) = "IDM Helper"
-> {HKLM...CLSID} = "IDMIEHlprObj Class"
\InProcServer32\(Default) = "C:\Program Files\Internet Download Manager\IDMIECC.dll" ["Tonec Inc."]

{6EBF7485-159F-4bff-A14F-B9E3AAC4465B}\(Default) = "Search Helper"
-> {HKLM...CLSID} = "Search Helper"
\InProcServer32\(Default) = "C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll" [MS]

{9030D464-4C02-4ABF-8ECC-5164760863C6}\(Default) = (no title provided)
-> {HKLM...CLSID} = "مساعد تسجيل الدخول إلى Windows Live"
\InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll" [MS]

{DBC80044-A445-435b-BC74-9C25C1C588A9}\(Default) = (no title provided)
-> {HKLM...CLSID} = "Java(tm) Plug-In 2 SSV Helper"
\InProcServer32\(Default) = "C:\Program Files\Java\jre6\bin\jp2ssv.dll" ["Sun Microsystems, Inc."]

{E15A8DC0-8516-42A1-81EA-DC94EC1ACF10}\(Default) = (no title provided)
-> {HKLM...CLSID} = "Windows Live Toolbar Helper"
\InProcServer32\(Default) = "C:\Program Files\Windows Live\Toolbar\wltcore.dll" [MS]

{E7E6F031-17CE-4C07-BC86-EABFE594F69C}\(Default) = "JQSIEStartDetectorImpl"
-> {HKLM...CLSID} = "JQSIEStartDetectorImpl Class"
\InProcServer32\(Default) = "C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll" ["Sun Microsystems, Inc."]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\

"{42071714-76d4-11d1-8b24-00a0c9068ff3}" = "ملحق Display Panning CPL"
-> {HKLM...CLSID} = "ملحق Display Panning CPL"
\InProcServer32\(Default) = "deskpan.dll" [file not found]

"{88895560-9AA2-1069-930E-00AA0030EBC8}" = "HyperTerminal Icon Ext"
-> {HKLM...CLSID} = "HyperTerminal Icon Ext"
\InProcServer32\(Default) = "C:\WINDOWS\system32\hticons.dll" ["Hilgraeve, Inc."]

"{EFA24E62-B078-11d0-89E4-00C04FC9E26E}" = "History Band"
-> {HKLM...CLSID} = "History Band"
\InProcServer32\(Default) = "C:\WINDOWS\system32\shdocvw.dll" [MS]

"{44440D00-FF19-4AFC-B765-9A0970567D97}" = "TuneUp Theme Extension"
-> {HKLM...CLSID} = "TuneUp Theme Extension"
\InProcServer32\(Default) = "C:\WINDOWS\System32\uxtuneup.dll" ["TuneUp Software"]

"{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}" = "TuneUp Shredder Shell Extension"
-> {HKLM...CLSID} = "TuneUp Shredder Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\TuneUp Utilities 2009\SDShelEx-win32.dll" ["TuneUp Software"]

"{4838CD50-7E5D-4811-9B17-C47A85539F28}" = "TuneUp Disk Space Explorer Shell Extension"
-> {HKLM...CLSID} = "TuneUp Disk Space Explorer Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\TuneUp Utilities 2009\DseShExt-x86.dll" ["TuneUp Software"]

"{B41DB860-8EE4-11D2-9906-E49FADC173CA}" = "WinRAR shell extension"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

"{00020D75-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Desktop Icon Handler"
-> {HKLM...CLSID} = "Microsoft Office Outlook"
\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\OFFICE11\MLSHEXT.DLL" [MS]

"{0006F045-0000-0000-C000-000000000046}" = "Microsoft Office Outlook Custom Icon Handler"
-> {HKLM...CLSID} = "Outlook File Icon Extension"
\InProcServer32\(Default) = "C:\PROGRA~1\MICROS~4\OFFICE11\OLKFSTUB.DLL" [MS]

"{42042206-2D85-11D3-8CFF-005004838597}" = "Microsoft Office HTML Icon Handler"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Microsoft Office\OFFICE11\msohev.dll" [MS]

"{45AC2688-0253-4ED8-97DE-B5370FA7D48A}" = "Shell Extension for Malware scanning"
-> {HKLM...CLSID} = "Shell Extension for Malware scanning"
\InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir Desktop\shlext.dll" ["Avira GmbH"]

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad\

"WPDShServiceObj" = "{AAA288BA-9A4C-45B0-95D7-94D524869DB5}"
-> {HKLM...CLSID} = "WPDShServiceObj Class"
\InProcServer32\(Default) = "C:\WINDOWS\system32\WPDShServiceObj.dll" [MS]

HKLM\SOFTWARE\Classes\PROTOCOLS\Filter\

<<!>> text/xml\CLSID = "{807553E5-5146-11D5-A672-00B0D022E945}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\Program Files\Common Files\Microsoft Shared\OFFICE11\MSOXMLMF.DLL" [MS]

HKLM\SOFTWARE\Classes\PROTOCOLS\Handler\

<<!>> livecall\CLSID = "{828030A1-22C1-4009-854F-8E305202313F}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL" [MS]

<<!>> msnim\CLSID = "{828030A1-22C1-4009-854F-8E305202313F}"
-> {HKLM...CLSID} = (no title provided)
\InProcServer32\(Default) = "C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL" [MS]

<<!>> mso-offdap\CLSID = "{3D9F03FA-7A94-11D3-BE81-0050048385D1}"
-> {HKLM...CLSID} = "Data Page Pluggable Protocol mso-offdap Handler"
\InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\10\OWC10.DLL" [MS]

<<!>> mso-offdap11\CLSID = "{32505114-5902-49B2-880A-1F7738E5A384}"
-> {HKLM...CLSID} = "Data Page Plugable Protocal mso-offdap11 Handler"
\InProcServer32\(Default) = "C:\PROGRA~1\COMMON~1\MICROS~1\WEBCOM~1\11\OWC11.DLL" [MS]

HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\

Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"
-> {HKLM...CLSID} = "Shell Extension for Malware scanning"
\InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir Desktop\shlext.dll" ["Avira GmbH"]

TuneUp Shredder Shell Extension\(Default) = "{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}"
-> {HKLM...CLSID} = "TuneUp Shredder Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\TuneUp Utilities 2009\SDShelEx-win32.dll" ["TuneUp Software"]

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\

TuneUp Disk Space Explorer Shell Extension\(Default) = "{4838CD50-7E5D-4811-9B17-C47A85539F28}"
-> {HKLM...CLSID} = "TuneUp Disk Space Explorer Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\TuneUp Utilities 2009\DseShExt-x86.dll" ["TuneUp Software"]

TuneUp Shredder Shell Extension\(Default) = "{4858E7D9-8E12-45a3-B6A3-1CD128C9D403}"
-> {HKLM...CLSID} = "TuneUp Shredder Shell Extension"
\InProcServer32\(Default) = "C:\Program Files\TuneUp Utilities 2009\SDShelEx-win32.dll" ["TuneUp Software"]

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\SOFTWARE\Classes\Directory\shellex\DragDropHandlers\

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\SOFTWARE\Classes\Folder\shellex\ContextMenuHandlers\

Shell Extension for Malware scanning\(Default) = "{45AC2688-0253-4ED8-97DE-B5370FA7D48A}"
-> {HKLM...CLSID} = "Shell Extension for Malware scanning"
\InProcServer32\(Default) = "C:\Program Files\Avira\AntiVir Desktop\shlext.dll" ["Avira GmbH"]

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]

HKLM\SOFTWARE\Classes\Folder\shellex\DragDropHandlers\

WinRAR\(Default) = "{B41DB860-8EE4-11D2-9906-E49FADC173CA}"
-> {HKLM...CLSID} = "WinRAR"
\InProcServer32\(Default) = "C:\Program Files\WinRAR\rarext.dll" [null data]


Active Desktop and Wallpaper:
-----------------------------

Active Desktop may be disabled at this entry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellState

Displayed if Active Desktop enabled and wallpaper not set by Group Policy:
HKCU\Software\Microsoft\Internet Explorer\Desktop\General\
"Wallpaper" = "C:\WINDOWS\web\wallpaper\Bliss.bmp"

Displayed if Active Desktop disabled and wallpaper not set by Group Policy:
HKCU\Control Panel\Desktop\
"Wallpaper" = "C:\WINDOWS\web\wallpaper\Bliss.bmp"


Enabled Screen Saver:
---------------------

HKCU\Control Panel\Desktop\
"SCRNSAVE.EXE" = "C:\WINDOWS\System32\logon.scr" [MS]


*********** جميع عمليات الذاكرة ***********

C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Avira\AntiVir Desktop\sched.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
C:\Program Files\Avira\AntiVir Desktop\avguard.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Avira\AntiVir Desktop\avshadow.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\r7aal\سطح المكتب\Zyzoom_Report_Tool.exe


*********** عمليات الذاكره الغير موقعه رقميا _ بدون عمليات النظام _ ***********

C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Documents and Settings\r7aal\سطح المكتب\Zyzoom_Report_Tool.exe


*********** المجلدات والملفات التي تم انشاؤها في آخر شهر ***********

2010-10-16 03:41:18 ----A---- C:\zzlog.txt
2010-10-16 03:41:18 ----A---- C:\WINDOWS\system32\Gif89.dll
2010-10-15 00:36:30 ----D---- C:\Documents and Settings\r7aal\Application Data\Macromedia
2010-10-15 00:36:29 ----D---- C:\Documents and Settings\r7aal\Application Data\Adobe
2010-10-15 00:35:10 ----D---- C:\Documents and Settings\r7aal\Application Data\IDM
2010-10-15 00:35:09 ----D---- C:\Documents and Settings\r7aal\Application Data\DMCache
2010-10-15 00:34:46 ----D---- C:\Program Files\Internet Download Manager
2010-10-14 23:50:09 ----D---- C:\WINDOWS\system32\LogFiles
2010-10-14 23:47:57 ----D---- C:\Program Files\Avira
2010-10-14 23:47:57 ----D---- C:\Documents and Settings\All Users\Application Data\Avira
2010-10-14 23:33:48 ----A---- C:\WINDOWS\system32\h323log.txt
2010-10-14 23:30:34 ----A---- C:\WINDOWS\system32\usbui.dll
2010-10-14 23:30:02 ----A---- C:\WINDOWS\system32\ksuser.dll
2010-10-14 23:26:59 ----A---- C:\WINDOWS\imsins.BAK
2010-10-14 23:26:53 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2010-10-14 23:26:52 ----SHD---- C:\WINDOWS\Installer
2010-10-14 23:26:51 ----D---- C:\Program Files\Common Files\ODBC
2010-10-14 23:26:51 ----A---- C:\WINDOWS\ODBCINST.INI
2010-10-14 23:26:43 ----D---- C:\Program Files\Common Files\SpeechEngines
2010-10-14 23:26:43 ----D---- C:\Program Files\Common Files\Microsoft Shared
2010-10-14 23:26:42 ----RD---- C:\Program Files
2010-10-14 23:26:42 ----D---- C:\Program Files\Common Files
2010-10-14 23:26:09 ----RA---- C:\WINDOWS\system32\kbdtuq.dll
2010-10-14 23:26:09 ----RA---- C:\WINDOWS\system32\kbdtuf.dll
2010-10-14 23:26:09 ----RA---- C:\WINDOWS\system32\kbdazel.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdycc.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbduzb.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdur.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdtat.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdru1.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdru.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdmon.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdkyr.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdkaz.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdbu.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdblr.dll
2010-10-14 23:26:07 ----RA---- C:\WINDOWS\system32\kbdaze.dll
2010-10-14 23:26:05 ----RA---- C:\WINDOWS\system32\kbdhept.dll
2010-10-14 23:26:05 ----RA---- C:\WINDOWS\system32\kbdhela3.dll
2010-10-14 23:26:05 ----RA---- C:\WINDOWS\system32\kbdhela2.dll
2010-10-14 23:26:05 ----RA---- C:\WINDOWS\system32\kbdhe319.dll
2010-10-14 23:26:05 ----RA---- C:\WINDOWS\system32\kbdhe220.dll
2010-10-14 23:26:05 ----RA---- C:\WINDOWS\system32\kbdhe.dll
2010-10-14 23:26:05 ----RA---- C:\WINDOWS\system32\kbdgkl.dll
2010-10-14 23:26:03 ----RA---- C:\WINDOWS\system32\kbdlv1.dll
2010-10-14 23:26:03 ----RA---- C:\WINDOWS\system32\kbdlv.dll
2010-10-14 23:26:03 ----RA---- C:\WINDOWS\system32\kbdlt1.dll
2010-10-14 23:26:03 ----RA---- C:\WINDOWS\system32\kbdlt.dll
2010-10-14 23:26:03 ----RA---- C:\WINDOWS\system32\kbdest.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdycl.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdsl1.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdsl.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdro.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdpl1.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdpl.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdhu1.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdhu.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdcz2.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdcz1.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdcz.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\kbdcr.dll
2010-10-14 23:26:01 ----RA---- C:\WINDOWS\system32\KBDAL.DLL
2010-10-14 23:25:56 ----RA---- C:\WINDOWS\system32\kbdgeo.dll
2010-10-14 23:25:56 ----RA---- C:\WINDOWS\system32\kbdarmw.dll
2010-10-14 23:25:56 ----RA---- C:\WINDOWS\system32\kbdarme.dll
2010-10-14 23:25:56 ----A---- C:\WINDOWS\system32\Thawbrkr.dll
2010-10-14 23:25:55 ----RA---- C:\WINDOWS\system32\kbdintel.dll
2010-10-14 23:25:55 ----RA---- C:\WINDOWS\system32\kbdinpun.dll
2010-10-14 23:25:55 ----RA---- C:\WINDOWS\system32\kbdinkan.dll
2010-10-14 23:25:55 ----RA---- C:\WINDOWS\system32\kbdinguj.dll
2010-10-14 23:25:54 ----RA---- C:\WINDOWS\system32\kbdintam.dll
2010-10-14 23:25:54 ----RA---- C:\WINDOWS\system32\kbdinmar.dll
2010-10-14 23:25:54 ----RA---- C:\WINDOWS\system32\kbdinhin.dll
2010-10-14 23:25:54 ----RA---- C:\WINDOWS\system32\kbdindev.dll
2010-10-14 23:25:54 ----A---- C:\WINDOWS\system32\c_iscii.dll
2010-10-14 23:25:53 ----RA---- C:\WINDOWS\system32\kbdvntc.dll
2010-10-14 23:25:51 ----RA---- C:\WINDOWS\system32\kbdsyr2.dll
2010-10-14 23:25:50 ----RA---- C:\WINDOWS\system32\kbdurdu.dll
2010-10-14 23:25:50 ----RA---- C:\WINDOWS\system32\kbdsyr1.dll
2010-10-14 23:25:50 ----RA---- C:\WINDOWS\system32\kbdfa.dll
2010-10-14 23:25:50 ----RA---- C:\WINDOWS\system32\kbddiv2.dll
2010-10-14 23:25:50 ----RA---- C:\WINDOWS\system32\kbddiv1.dll
2010-10-14 23:25:50 ----A---- C:\WINDOWS\system32\kbdusa.dll
2010-10-14 23:25:45 ----RA---- C:\WINDOWS\system32\kbdheb.dll
2010-10-14 23:25:35 ----RA---- C:\WINDOWS\system32\kbdth3.dll
2010-10-14 23:25:35 ----RA---- C:\WINDOWS\system32\kbdth2.dll
2010-10-14 23:25:35 ----RA---- C:\WINDOWS\system32\kbdth1.dll
2010-10-14 23:25:35 ----RA---- C:\WINDOWS\system32\kbdth0.dll
2010-10-14 23:25:34 ----A---- C:\WINDOWS\system32\ftlx041e.dll
2010-10-14 23:25:30 ----A---- C:\WINDOWS\system32\irclass.dll
2010-10-14 23:25:30 ----A---- C:\WINDOWS\system32\dgsetup.dll
2010-10-14 23:25:30 ----A---- C:\WINDOWS\system32\dgrpsetu.dll
2010-10-14 23:25:29 ----A---- C:\WINDOWS\system32\spxcoins.dll
2010-10-14 23:25:29 ----A---- C:\WINDOWS\system32\EqnClass.Dll
2010-10-14 23:25:27 ----N---- C:\WINDOWS\system32\CONFIG.TMP
2010-10-14 23:25:27 ----A---- C:\WINDOWS\TASKMAN.EXE
2010-10-14 23:25:26 ----A---- C:\WINDOWS\system32\batt.dll
2010-10-14 23:25:26 ----A---- C:\WINDOWS\NOTEPAD.EXE
2010-10-14 23:25:24 ----A---- C:\WINDOWS\system32\storprop.dll
2010-10-14 23:25:09 ----ASH---- C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\desktop.ini
2010-10-14 23:25:09 ----ASH---- C:\Documents and Settings\All Users\Application Data\desktop.ini
2010-10-14 23:22:44 ----RA---- C:\WINDOWS\SET8.tmp
2010-10-14 23:22:38 ----RA---- C:\WINDOWS\SET4.tmp
2010-10-14 23:22:34 ----RA---- C:\WINDOWS\SET3.tmp
2010-10-14 23:22:25 ----D---- C:\WINDOWS\system32\CatRoot2
2010-10-14 23:22:25 ----D---- C:\WINDOWS\system32\CatRoot
2010-10-14 23:22:18 ----SD---- C:\Documents and Settings\All Users\Application Data\Microsoft
2010-10-14 23:21:05 ----A---- C:\WINDOWS\setuplog.txt
2010-10-14 23:20:31 ----D---- C:\Documents and Settings
2010-10-14 23:20:20 ----SHD---- C:\System Volume Information
2010-10-14 23:19:19 ----SH---- C:\boot.ini
2010-10-14 23:19:16 ----A---- C:\WINDOWS\system32\$winnt$.inf
2010-10-14 23:12:28 ----D---- C:\WINDOWS\WinSxS
2010-10-14 23:12:28 ----D---- C:\WINDOWS\WBEM
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\usmt
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\oobe
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\inetsrv
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\IME
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\ar-sa
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\ar
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\3com_dmi
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\3076
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\2052
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\1054
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\1042
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\1041
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\1037
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\1033
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\1031
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\1028
2010-10-14 23:12:28 ----D---- C:\WINDOWS\system32\1025
2010-10-14 23:12:28 ----D---- C:\WINDOWS\Resources
2010-10-14 23:12:28 ----D---- C:\WINDOWS\Provisioning
2010-10-14 23:12:28 ----D---- C:\WINDOWS\PeerNet
2010-10-14 23:12:28 ----D---- C:\WINDOWS\pchealth
2010-10-14 23:12:28 ----D---- C:\WINDOWS\Offline Web Pages
2010-10-14 23:12:28 ----D---- C:\WINDOWS\NLDRV
2010-10-14 23:12:28 ----D---- C:\WINDOWS\Network Diagnostic
2010-10-14 23:12:28 ----D---- C:\WINDOWS\mui
2010-10-14 23:12:28 ----D---- C:\WINDOWS\L2Schemas
2010-10-14 23:12:28 ----D---- C:\WINDOWS\ime
2010-10-14 23:12:28 ----D---- C:\WINDOWS\ehome
2010-10-14 23:12:28 ----D---- C:\WINDOWS\Downloaded Program Files
2010-10-14 23:12:27 ----RSHDC---- C:\WINDOWS\system32\dllcache
2010-10-14 23:12:27 ----RSD---- C:\WINDOWS\Fonts
2010-10-14 23:12:27 ----RD---- C:\WINDOWS\Web
2010-10-14 23:12:27 ----HD---- C:\WINDOWS\inf
2010-10-14 23:12:27 ----D---- C:\WINDOWS\twain_32
2010-10-14 23:12:27 ----D---- C:\WINDOWS\Temp
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\wins
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\wbem
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\spool
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\ShellExt
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\Setup
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\ras
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\npp
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\mui
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\icsxml
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\ias
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\export
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\drivers
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\dhcp
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32\config
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system32
2010-10-14 23:12:27 ----D---- C:\WINDOWS\system
2010-10-14 23:12:27 ----D---- C:\WINDOWS\security
2010-10-14 23:12:27 ----D---- C:\WINDOWS\repair
2010-10-14 23:12:27 ----D---- C:\WINDOWS\msapps
2010-10-14 23:12:27 ----D---- C:\WINDOWS\msagent
2010-10-14 23:12:27 ----D---- C:\WINDOWS\Media
2010-10-14 23:12:27 ----D---- C:\WINDOWS\java
2010-10-14 23:12:27 ----D---- C:\WINDOWS\Help
2010-10-14 23:12:27 ----D---- C:\WINDOWS\Driver Cache
2010-10-14 23:12:27 ----D---- C:\WINDOWS\Debug
2010-10-14 23:12:27 ----D---- C:\WINDOWS\Cursors
2010-10-14 23:12:27 ----D---- C:\WINDOWS\Connection Wizard
2010-10-14 23:12:27 ----D---- C:\WINDOWS\Config
2010-10-14 23:12:27 ----D---- C:\WINDOWS\AppPatch
2010-10-14 23:12:27 ----D---- C:\WINDOWS\addins
2010-10-14 23:12:27 ----D---- C:\WINDOWS
2010-10-14 22:51:25 ----D---- C:\WINDOWS\system32\NtmsData
2010-10-14 22:48:41 ----D---- C:\Documents and Settings\r7aal\Application Data\Avira
2010-10-14 22:44:33 ----D---- C:\Program Files\Driver-Soft
2010-10-14 22:38:46 ----D---- C:\Documents and Settings\r7aal\Application Data\DeviceDoctorSoftware
2010-10-14 22:32:41 ----D---- C:\Program Files\Common Files\Java
2010-10-14 22:31:44 ----A---- C:\WINDOWS\system32\javaws.exe
2010-10-14 22:31:44 ----A---- C:\WINDOWS\system32\javaw.exe
2010-10-14 22:31:44 ----A---- C:\WINDOWS\system32\java.exe
2010-10-14 22:01:12 ----A---- C:\WINDOWS\ODBC.INI
2010-10-14 22:00:53 ----A---- C:\WINDOWS\system32\mdimon.dll
2010-10-14 21:54:20 ----D---- C:\Program Files\Common Files\DESIGNER
2010-10-14 21:52:51 ----D---- C:\WINDOWS\SHELLNEW
2010-10-14 21:52:23 ----D---- C:\Program Files\Microsoft.NET
2010-10-14 21:52:23 ----D---- C:\Program Files\Microsoft Office
2010-10-14 21:38:39 ----N---- C:\WINDOWS\system32\spmsg.dll
2010-10-14 21:38:24 ----HDC---- C:\WINDOWS\$NtUninstallMSCompPackV1$
2010-10-14 21:38:06 ----A---- C:\WINDOWS\system32\wmpns.dll
2010-10-14 21:37:29 ----HDC---- C:\WINDOWS\$NtUninstallwmp11$
2010-10-14 21:35:39 ----HDC---- C:\WINDOWS\$NtUninstallWMFDist11$
2010-10-14 21:34:23 ----D---- C:\Documents and Settings\All Users\Application Data\Windows Genuine Advantage
2010-10-14 21:32:55 ----D---- C:\Documents and Settings\r7aal\Application Data\URSoft
2010-10-14 21:32:52 ----AD---- C:\Documents and Settings\All Users\Application Data\TEMP
2010-10-14 21:32:44 ----D---- C:\Program Files\Your Uninstaller 2008
2010-10-14 21:32:02 ----A---- C:\WINDOWS\system32\WgaTray.exe
2010-10-14 21:32:02 ----A---- C:\WINDOWS\system32\WgaLogon.dll
2010-10-14 21:32:01 ----A---- C:\WINDOWS\system32\LegitCheckControl.dll
2010-10-14 21:31:56 ----D---- C:\Documents and Settings\All Users\Application Data\Sun
2010-10-14 21:31:13 ----A---- C:\WINDOWS\system32\deployJava1.dll
2010-10-14 21:30:11 ----D---- C:\Program Files\Java
2010-10-14 21:28:17 ----D---- C:\Documents and Settings\r7aal\Application Data\Sun
2010-10-14 21:27:07 ----A---- C:\WINDOWS\system32\rmoc3260.dll
2010-10-14 21:27:07 ----A---- C:\WINDOWS\system32\pndx5032.dll
2010-10-14 21:27:07 ----A---- C:\WINDOWS\system32\pndx5016.dll
2010-10-14 21:27:07 ----A---- C:\WINDOWS\system32\pncrt.dll
2010-10-14 21:27:02 ----A---- C:\WINDOWS\system32\unrar.dll
2010-10-14 21:27:00 ----A---- C:\WINDOWS\avisplitter.ini
2010-10-14 21:26:55 ----A---- C:\WINDOWS\system32\yv12vfw.dll
2010-10-14 21:26:54 ----A---- C:\WINDOWS\system32\xvidvfw.dll
2010-10-14 21:26:54 ----A---- C:\WINDOWS\system32\xvidcore.dll
2010-10-14 21:26:49 ----A---- C:\WINDOWS\system32\qt-dx331.dll
2010-10-14 21:26:49 ----A---- C:\WINDOWS\system32\dpl100.dll
2010-10-14 21:26:48 ----A---- C:\WINDOWS\system32\divx.dll
2010-10-14 21:26:38 ----A---- C:\WINDOWS\system32\ff_vfw.dll.manifest
2010-10-14 21:26:38 ----A---- C:\WINDOWS\system32\ff_vfw.dll
2010-10-14 21:26:32 ----A---- C:\WINDOWS\system32\msvcr71.dll
2010-10-14 21:26:32 ----A---- C:\WINDOWS\system32\msvcp71.dll
2010-10-14 21:26:30 ----D---- C:\Program Files\K-Lite Codec Pack
2010-10-14 21:25:27 ----D---- C:\Program Files\WinRAR
2010-10-14 21:25:05 ----D---- C:\Program Files\Messenger Plus! Live
2010-10-14 21:22:54 ----D---- C:\Program Files\Microsoft Sync Framework
2010-10-14 21:21:38 ----D---- C:\Program Files\Microsoft
2010-10-14 21:21:15 ----D---- C:\Program Files\Windows Live SkyDrive
2010-10-14 21:21:00 ----D---- C:\Program Files\Windows Live
2010-10-14 21:17:28 ----D---- C:\Program Files\Common Files\Windows Live
2010-10-14 21:10:52 ----RSD---- C:\WINDOWS\assembly
2010-10-14 21:08:46 ----D---- C:\WINDOWS\Microsoft.NET
2010-10-14 21:05:36 ----D---- C:\Documents and Settings\r7aal\Application Data\Mozilla
2010-10-14 21:05:17 ----D---- C:\Program Files\Mozilla Firefox
2010-10-14 20:57:32 ----A---- C:\WINDOWS\system32\TUProgSt.exe
2010-10-14 20:57:30 ----A---- C:\WINDOWS\system32\uxtuneup.dll
2010-10-14 20:57:29 ----A---- C:\WINDOWS\system32\TuneUpDefragService.exe
2010-10-14 20:57:25 ----D---- C:\Documents and Settings\r7aal\Application Data\TuneUp Software
2010-10-14 20:56:42 ----D---- C:\Documents and Settings\All Users\Application Data\TuneUp Software
2010-10-14 20:56:41 ----D---- C:\Program Files\TuneUp Utilities 2009
2010-10-14 20:55:53 ----SHD---- C:\Documents and Settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2010-10-14 20:31:20 ----SHD---- C:\RECYCLER
2010-10-14 20:06:37 ----D---- C:\Documents and Settings\r7aal\Application Data\Identities
2010-10-14 20:06:15 ----HD---- C:\Program Files\Uninstall Information
2010-10-14 20:05:59 ----ASH---- C:\Documents and Settings\r7aal\Application Data\desktop.ini
2010-10-14 20:05:58 ----ASH---- C:\Documents and Settings\r7aal\قائمة ابدأ\البرامج\بدء التشغيل\desktop.ini
2010-10-14 20:05:57 ----SD---- C:\Documents and Settings\r7aal\Application Data\Microsoft
2010-10-14 20:02:10 ----D---- C:\WINDOWS\SoftwareDistribution
2010-10-14 20:02:05 ----D---- C:\WINDOWS\Prefetch
2010-10-14 20:02:04 ----SD---- C:\WINDOWS\system32\Microsoft
2010-10-14 20:02:04 ----A---- C:\WINDOWS\SchedLgU.Txt
2010-10-14 19:52:22 ----D---- C:\WINDOWS\system32\xircom
2010-10-14 19:52:22 ----D---- C:\Program Files\xerox
2010-10-14 19:52:22 ----D---- C:\Program Files\microsoft frontpage
2010-10-14 19:50:25 ----N---- C:\WINDOWS\system32\xpsp4res.dll
2010-10-14 19:48:24 ----A---- C:\WINDOWS\system32\spupdsvc.exe
2010-10-14 19:47:10 ----HDC---- C:\WINDOWS\ie8
2010-10-14 19:45:04 ----HD---- C:\WINDOWS\$hf_mig$
2010-10-14 19:44:44 ----D---- C:\Program Files\MSXML 4.0
2010-10-14 19:44:17 ----A---- C:\WINDOWS\control.ini
2010-10-14 19:44:17 ----A---- C:\AUTOEXEC.BAT
2010-10-14 19:43:45 ----A---- C:\WINDOWS\OEWABLog.txt
2010-10-14 19:43:36 ----A---- C:\WINDOWS\system32\mapi32.dll
2010-10-14 19:41:03 ----RAH---- C:\WINDOWS\system32\logonui.exe.manifest
2010-10-14 19:40:52 ----RAH---- C:\WINDOWS\system32\cdplayer.exe.manifest
2010-10-14 19:40:36 ----HD---- C:\Program Files\WindowsUpdate
2010-10-14 19:40:29 ----D---- C:\Program Files\Online Services
2010-10-14 19:39:46 ----D---- C:\WINDOWS\system32\DirectX
2010-10-14 19:39:32 ----A---- C:\WINDOWS\system32\atrace.dll
2010-10-14 19:39:28 ----A---- C:\WINDOWS\system32\desktop.ini
2010-10-14 19:39:28 ----A---- C:\WINDOWS\desktop.ini
2010-10-14 19:39:18 ----A---- C:\WINDOWS\system32\nmevtmsg.dll
2010-10-14 19:39:16 ----D---- C:\Program Files\Common Files\Services
2010-10-14 19:39:16 ----A---- C:\WINDOWS\system32\acctres.dll
2010-10-14 19:39:10 ----SD---- C:\WINDOWS\Tasks
2010-10-14 19:39:10 ----A---- C:\WINDOWS\system32\icfgnt5.dll
2010-10-14 19:39:08 ----D---- C:\Program Files\Common Files\MSSoap
2010-10-14 19:39:00 ----D---- C:\WINDOWS\srchasst
2010-10-14 19:38:58 ----D---- C:\WINDOWS\system32\Macromed
2010-10-14 19:38:55 ----A---- C:\WINDOWS\system32\wuweb.dll
2010-10-14 19:38:55 ----A---- C:\WINDOWS\system32\wucltui.dll
2010-10-14 19:38:55 ----A---- C:\WINDOWS\system32\wuauserv.dll
2010-10-14 19:38:54 ----A---- C:\WINDOWS\system32\wups.dll
2010-10-14 19:38:54 ----A---- C:\WINDOWS\system32\wuaueng1.dll
2010-10-14 19:38:54 ----A---- C:\WINDOWS\system32\wuaueng.dll
2010-10-14 19:38:53 ----A---- C:\WINDOWS\system32\wuauclt1.exe
2010-10-14 19:38:53 ----A---- C:\WINDOWS\system32\wuauclt.exe
2010-10-14 19:38:53 ----A---- C:\WINDOWS\system32\wuapi.dll
2010-10-14 19:38:52 ----A---- C:\WINDOWS\system32\qmgrprxy.dll
2010-10-14 19:38:52 ----A---- C:\WINDOWS\system32\qmgr.dll
2010-10-14 19:38:52 ----A---- C:\WINDOWS\system32\bitsprx4.dll
2010-10-14 19:38:52 ----A---- C:\WINDOWS\system32\bitsprx3.dll
2010-10-14 19:38:52 ----A---- C:\WINDOWS\system32\bitsprx2.dll
2010-10-14 19:38:45 ----D---- C:\Program Files\Movie Maker
2010-10-14 19:38:07 ----A---- C:\WINDOWS\system32\safrslv.dll
2010-10-14 19:38:07 ----A---- C:\WINDOWS\system32\safrdm.dll
2010-10-14 19:38:07 ----A---- C:\WINDOWS\system32\safrcdlg.dll
2010-10-14 19:38:07 ----A---- C:\WINDOWS\system32\racpldlg.dll
2010-10-14 19:38:00 ----A---- C:\WINDOWS\system32\fltMc.exe
2010-10-14 19:38:00 ----A---- C:\WINDOWS\system32\fltlib.dll
2010-10-14 19:37:59 ----D---- C:\WINDOWS\system32\Restore
2010-10-14 19:37:59 ----A---- C:\WINDOWS\system32\srsvc.dll
2010-10-14 19:37:59 ----A---- C:\WINDOWS\system32\srrstr.dll
2010-10-14 19:37:59 ----A---- C:\WINDOWS\system32\srclient.dll
2010-10-14 19:37:58 ----A---- C:\WINDOWS\system32\ils.dll
2010-10-14 19:37:57 ----A---- C:\WINDOWS\system32\nmmkcert.dll
2010-10-14 19:37:57 ----A---- C:\WINDOWS\system32\mnmdd.dll
2010-10-14 19:37:57 ----A---- C:\WINDOWS\system32\isrdbg32.dll
2010-10-14 19:37:56 ----A---- C:\WINDOWS\system32\msconf.dll
2010-10-14 19:37:56 ----A---- C:\WINDOWS\system32\mnmsrvc.exe
2010-10-14 19:37:51 ----D---- C:\Program Files\NetMeeting
2010-10-14 19:37:50 ----A---- C:\WINDOWS\system32\msoert2.dll
2010-10-14 19:37:50 ----A---- C:\WINDOWS\system32\msoeacct.dll
2010-10-14 19:37:49 ----A---- C:\WINDOWS\system32\inetres.dll
2010-10-14 19:37:48 ----A---- C:\WINDOWS\system32\inetcomm.dll
2010-10-14 19:37:45 ----D---- C:\Program Files\Outlook Express
2010-10-14 19:37:45 ----A---- C:\WINDOWS\system32\schedsvc.dll
2010-10-14 19:37:45 ----A---- C:\WINDOWS\system32\mstinit.exe
2010-10-14 19:37:44 ----A---- C:\WINDOWS\system32\mstask.dll
2010-10-14 19:37:44 ----A---- C:\WINDOWS\system32\icwphbk.dll
2010-10-14 19:37:43 ----A---- C:\WINDOWS\system32\isign32.dll
2010-10-14 19:37:43 ----A---- C:\WINDOWS\system32\inetcfg.dll
2010-10-14 19:37:43 ----A---- C:\WINDOWS\system32\icwdial.dll
2010-10-14 19:37:31 ----D---- C:\Program Files\Common Files\System
2010-10-14 19:37:28 ----D---- C:\Program Files\Internet Explorer
2010-10-14 19:35:56 ----D---- C:\Program Files\ComPlus Applications
2010-10-14 19:35:54 ----A---- C:\WINDOWS\vbaddin.ini
2010-10-14 19:35:54 ----A---- C:\WINDOWS\vb.ini
2010-10-14 19:35:46 ----D---- C:\WINDOWS\Registration
2010-10-14 19:35:07 ----D---- C:\Program Files\Windows Media Connect 2
2010-10-14 19:35:06 ----D---- C:\Program Files\Windows Media Player
2010-10-14 19:35:03 ----D---- C:\Program Files\Messenger
2010-10-14 19:34:55 ----D---- C:\Program Files\MSN Gaming Zone
2010-10-14 19:34:55 ----A---- C:\WINDOWS\system32\write.exe
2010-10-14 19:34:33 ----A---- C:\WINDOWS\system32\sndvol32.exe
2010-10-14 19:34:33 ----A---- C:\WINDOWS\system32\hticons.dll
2010-10-14 19:34:32 ----A---- C:\WINDOWS\system32\avwav.dll
2010-10-14 19:34:32 ----A---- C:\WINDOWS\system32\avtapi.dll
2010-10-14 19:34:32 ----A---- C:\WINDOWS\system32\avmeter.dll
2010-10-14 19:34:31 ----A---- C:\WINDOWS\system32\winchat.exe
2010-10-14 19:34:17 ----A---- C:\WINDOWS\system32\getuname.dll
2010-10-14 19:34:16 ----A---- C:\WINDOWS\system32\charmap.exe
2010-10-14 19:34:16 ----A---- C:\WINDOWS\system32\calc.exe
2010-10-14 19:34:15 ----A---- C:\WINDOWS\system32\winmine.exe
2010-10-14 19:34:15 ----A---- C:\WINDOWS\system32\sol.exe
2010-10-14 19:34:14 ----A---- C:\WINDOWS\system32\usrlogon.cmd
2010-10-14 19:34:14 ----A---- C:\WINDOWS\system32\reset.exe
2010-10-14 19:34:14 ----A---- C:\WINDOWS\system32\mshearts.exe
2010-10-14 19:34:14 ----A---- C:\WINDOWS\system32\freecell.exe
2010-10-14 19:34:13 ----A---- C:\WINDOWS\system32\tsshutdn.exe
2010-10-14 19:34:13 ----A---- C:\WINDOWS\system32\tslabels.ini
2010-10-14 19:34:13 ----A---- C:\WINDOWS\system32\tskill.exe
2010-10-14 19:34:13 ----A---- C:\WINDOWS\system32\tsdiscon.exe
2010-10-14 19:34:13 ----A---- C:\WINDOWS\system32\tscon.exe
2010-10-14 19:34:13 ----A---- C:\WINDOWS\system32\shadow.exe
2010-10-14 19:34:13 ----A---- C:\WINDOWS\system32\rwinsta.exe
2010-10-14 19:34:12 ----A---- C:\WINDOWS\system32\regini.exe
2010-10-14 19:34:12 ----A---- C:\WINDOWS\system32\rdpcfgex.dll
2010-10-14 19:34:12 ----A---- C:\WINDOWS\system32\qwinsta.exe
2010-10-14 19:34:12 ----A---- C:\WINDOWS\system32\qappsrv.exe
2010-10-14 19:34:12 ----A---- C:\WINDOWS\system32\msg.exe
2010-10-14 19:34:12 ----A---- C:\WINDOWS\system32\logoff.exe
2010-10-14 19:34:11 ----A---- C:\WINDOWS\system32\msdtcprf.ini
2010-10-14 19:34:11 ----A---- C:\WINDOWS\system32\cdmodem.dll
2010-10-14 19:33:59 ----A---- C:\WINDOWS\system32\wmimgmt.msc
2010-10-14 19:33:57 ----A---- C:\WINDOWS\system32\accwiz.exe
2010-10-14 19:33:56 ----A---- C:\WINDOWS\system32\sndrec32.exe
2010-10-14 19:33:56 ----A---- C:\WINDOWS\system32\mplay32.exe
2010-10-14 19:33:56 ----A---- C:\WINDOWS\system32\hypertrm.dll
2010-10-14 19:33:55 ----D---- C:\Program Files\Windows NT
2010-10-14 19:33:55 ----A---- C:\WINDOWS\system32\mspaint.exe
2010-10-14 19:33:54 ----A---- C:\WINDOWS\system32\spider.exe
2010-10-14 19:33:54 ----A---- C:\WINDOWS\system32\clipbrd.exe
2010-10-14 19:33:52 ----A---- C:\WINDOWS\system32\tscfgwmi.dll
2010-10-14 19:33:51 ----A---- C:\WINDOWS\system32\tsgqec.dll
2010-10-14 19:33:51 ----A---- C:\WINDOWS\system32\rhttpaa.dll
2010-10-14 19:33:50 ----A---- C:\WINDOWS\system32\mstscax.dll
2010-10-14 19:33:50 ----A---- C:\WINDOWS\system32\aaclient.dll
2010-10-14 19:33:49 ----A---- C:\WINDOWS\system32\remotepg.dll
2010-10-14 19:33:49 ----A---- C:\WINDOWS\system32\rdshost.exe
2010-10-14 19:33:49 ----A---- C:\WINDOWS\system32\rdsaddin.exe
2010-10-14 19:33:49 ----A---- C:\WINDOWS\system32\mstsc.exe
2010-10-14 19:33:48 ----A---- C:\WINDOWS\system32\termsrv.dll
2010-10-14 19:33:48 ----A---- C:\WINDOWS\system32\sessmgr.exe
2010-10-14 19:33:48 ----A---- C:\WINDOWS\system32\rdpwsx.dll
2010-10-14 19:33:48 ----A---- C:\WINDOWS\system32\rdchost.dll
2010-10-14 19:33:47 ----A---- C:\WINDOWS\system32\rdpsnd.dll
2010-10-14 19:33:47 ----A---- C:\WINDOWS\system32\rdpclip.exe
2010-10-14 19:33:47 ----A---- C:\WINDOWS\system32\qprocess.exe
2010-10-14 19:33:47 ----A---- C:\WINDOWS\system32\icaapi.dll
2010-10-14 19:33:47 ----A---- C:\WINDOWS\system32\cfgbkend.dll
2010-10-14 19:33:46 ----D---- C:\WINDOWS\system32\MsDtc
2010-10-14 19:33:46 ----A---- C:\WINDOWS\system32\mtxoci.dll
2010-10-14 19:33:46 ----A---- C:\WINDOWS\system32\msdtcuiu.dll
2010-10-14 19:33:46 ----A---- C:\WINDOWS\system32\msdtcprx.dll
2010-10-14 19:33:45 ----A---- C:\WINDOWS\system32\xolehlp.dll
2010-10-14 19:33:45 ----A---- C:\WINDOWS\system32\msdtctm.dll
2010-10-14 19:33:45 ----A---- C:\WINDOWS\system32\msdtclog.dll
2010-10-14 19:33:44 ----A---- C:\WINDOWS\system32\msdtc.exe
2010-10-14 19:33:43 ----A---- C:\WINDOWS\system32\dcomcnfg.exe
2010-10-14 19:33:42 ----D---- C:\WINDOWS\system32\Com
2010-10-14 19:33:42 ----A---- C:\WINDOWS\system32\mtxlegih.dll
2010-10-14 19:33:42 ----A---- C:\WINDOWS\system32\mtxex.dll
2010-10-14 19:33:42 ----A---- C:\WINDOWS\system32\mtxdm.dll
2010-10-14 19:33:42 ----A---- C:\WINDOWS\system32\colbact.dll
2010-10-14 19:33:41 ----A---- C:\WINDOWS\system32\stclient.dll
2010-10-14 19:33:41 ----A---- C:\WINDOWS\system32\comrepl.dll
2010-10-14 19:33:41 ----A---- C:\WINDOWS\system32\comaddin.dll
2010-10-14 19:33:41 ----A---- C:\WINDOWS\system32\catsrvps.dll
2010-10-14 19:33:40 ----A---- C:\WINDOWS\system32\clbcatex.dll
2010-10-14 19:33:40 ----A---- C:\WINDOWS\system32\catsrvut.dll
2010-10-14 19:33:40 ----A---- C:\WINDOWS\system32\catsrv.dll
2010-10-14 19:33:39 ----A---- C:\WINDOWS\system32\comuid.dll
2010-10-14 19:33:39 ----A---- C:\WINDOWS\system32\comsvcs.dll
2010-10-14 19:33:39 ----A---- C:\WINDOWS\system32\comsnap.dll
2010-10-14 19:33:38 ----A---- C:\WINDOWS\system32\clbcatq.dll
2010-10-14 19:33:25 ----A---- C:\WINDOWS\system32\servdeps.dll
2010-10-14 19:33:25 ----A---- C:\WINDOWS\system32\mmfutil.dll
2010-10-14 19:33:25 ----A---- C:\WINDOWS\system32\licwmi.dll
2010-10-14 19:33:24 ----A---- C:\WINDOWS\system32\cmprops.dll
2010-10-14 18:41:46 ----RA---- C:\WINDOWS\system32\RTLCPAPI.dll
2010-10-14 18:41:46 ----RA---- C:\WINDOWS\Alcrmv.exe
2010-10-14 18:41:40 ----RA---- C:\WINDOWS\system32\RTLCPL.EXE
2010-10-14 18:41:31 ----RA---- C:\WINDOWS\SOUNDMAN.EXE





---------------------------------------------------------------------

This Report Created By Zyzoom.org Tools & Silent Runners & HijackThis

 

[غَـسّـان]

التقرير سليم
:b:


​

 

[رحــــــــــال]

أجل حذقته أداة دكتر ويب
على العموم الله يعطيك ألف عافيه
أخ

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

على تعاونك

يغلق