تم حل المشكلة مُشكلة غريبه !

[الحنش الأسود]

السَلام عَلِيكم ورَحمة الله وبركَاتِه

أسعد الله / مسآءكم " صباحكم ..

لاهنتمْ يالغوالِي " أمس حملت مقطع فديُو من أحد المواقع..

بعد هـ التحميل الجهاز تلخبط معي

يعلق + ثقل وخاصه متصفح قوقل كروم وأكسبلور

مستحيل افتح اي موقع فيهم

< يستخدم حاليا فايرفوكس 4 ..



للمعلومية : عندي برنامح حماية نورتن وسويت فحص شامل للجهاز وماطلع شي

والمقطع الفديو حذفته من الجهاز

بس التعليق والثقل بالجهاز وبطئ النت معاي شي غريب لحد الحين

يآريت القىَ منكم حل ..

لأن فكرت اسوي فورمات للجهاز !

بـ إنتظاركم

:er:


​

 

[rd-19]

وعليكم السلام

حمل الاداة من هذا الموضوع

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

واعمل تقرير هايجاك + قائمة البرامج المثبتة

------------------

​

 

[الحنش الأسود]

تفضل "




تقرير الهايجاك


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 01:24:34 ص, on 14/04/11
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Program Files\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\TechSmith\Snagit 10\Snagit32.exe
C:\Program Files\TechSmith\Snagit 10\TSCHelp.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\TechSmith\Snagit 10\SnagPriv.exe
C:\Program Files\TechSmith\Snagit 10\snagiteditor.exe
C:\Program Files\Hotspot Shield\bin\openvpntray.exe
C:\Windows\system32\wuauclt.exe
C:\Users\jl\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\Paltalk Messenger\paltalk.exe
C:\Users\jl\AppData\Local\Google\Chrome\Application\chrome.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Zyzoom_Forum_Tools\zHijak.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 10\SnagitBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\IPS\IPSBHO.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: MessengerPlusLive Saudi Arabia TB - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll
O3 - Toolbar: (no name) - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 10\SnagitIEAddin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Ywenamunu] rundll32.exe "C:\Users\jl\AppData\Local\WMe201.dll",Startup
O4 - HKCU\..\Run: [Google Update] "C:\Users\jl\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
O4 - Global Startup: Snagit 10.lnk = C:\Program Files\TechSmith\Snagit 10\Snagit32.exe
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open Link Target in Firefox - file://C:\Users\jl\AppData\Roaming\Mozilla\Firefox\Profiles\07zvfu20.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewlink.html
O8 - Extra context menu item: View This Page in Firefox - file://C:\Users\jl\AppData\Roaming\Mozilla\Firefox\Profiles\07zvfu20.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewpage.html
O8 - Extra context menu item: تحميل الكل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى فيديو (إف.إل.في) بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: تدوين هذا في المدونة - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &تدوين هذا في Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O15 - Trusted Zone:

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O17 - HKLM\System\CCS\Services\Tcpip\..\{E5CE06D9-A4BD-4139-AA7A-89E9766020F2}: NameServer = 10.86.24.1
O23 - Service: Hotspot Shield Service (hshld) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe

--
End of file - 8645 bytes






تقرير البرامج المُثبًته "


====== معلومات نظام التشغيل ======

X86 WIN_7 7600


====== قائمة البرامج المثبتة ======

Adobe Flash Player 10 Plugin
Adobe Reader 9.4.1
Adobe® Flash® Player 10 ActiveX
AIMP2
Ask Toolbar
Ask.com Search Assistant 1.0.2
Conduit Engine
GetGo YouTube Downloader
Glary Utilities Pro 2.33.0.1158
GOM Player
Hotspot Shield 2.02
Internet Download Manager
Java Auto Updater
Java(TM) 6 Update 23
Java(TM) 6 Update 7
Junk Mail filter update
K-Lite Mega Codec Pack 4.1.7
Messenger Plus! 5
Microsoft .NET Framework 1.1
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile ARA Language Pack
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Office Professional Edition 2003
Microsoft Search Enhancement Pack
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Sync Framework Runtime Native v1.0 (x86)
Microsoft Sync Framework Services Native v1.0 (x86)
Microsoft Visual C++ 2008 ATL Update kb973924 - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Mozilla Firefox 4.0 (x86 ar)
MSVCRT
MTA:SA v1.0.4
Norton Internet Security
PaltalkScene
Perfect Uninstaller v6.3.3.8
RealPlayer
RealUpgrade 1.0
SixaxisDriver 0.91
Snagit 10
Unlocker 1.8.9
VLC media player 1.0.0
Windows Installer Clean Up
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Messenger
Windows Live Toolbar
Windows Live Writer
Windows Media Player Firefox Plugin
WinRAR archiver
أداة التحميل Windows Live Upload Tool
أمان العائلة في Windows Live
بريد Windows Live
حزمة اللغة العربية لـ Microsoft .NET Framework 4
صانع الأفلام من Windows Live
مساعد تسجيل الدخول إلى Windows Live
معرض صور Windows Live


​

 

[rd-19]

اعمل فحص بهذا

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

 

[الحنش الأسود]

المعذره ع التـأخيرَ حآليآ خلص الفحص لمدة ساعتين تقريبا !


************' Anti-Malware 1.50.1.1100

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Database version: 6321

Windows 6.1.7600
Internet Explorer 8.0.7600.16385

14/04/11 03:01:43 ص
mbam-log-2011-04-14 (03-01-43).txt

Scan type: Full scan (C:\|D:\|E:\|)
Objects scanned: 237792
Time elapsed: 53 minute(s), 19 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 1
Registry Keys Infected: 3
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 4
Files Infected: 24

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
c:\Users\jl\AppData\Local\WMe201.dll (Trojan.Hiloti) -> Delete on reboot.

Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47A3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\FunWebProducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Ywenamunu (Trojan.Hiloti) -> Value: Ywenamunu -> Delete on reboot.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
c:\program files\funwebproducts (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\1.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\2.bin (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Files Infected:
c:\Users\jl\AppData\Local\WMe201.dll (Trojan.Hiloti) -> Delete on reboot.
c:\Users\jl\AppData\Local\Temp\setup1075126384.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup117412864.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup1414526420.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup1665303344.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\8C71.tmp (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup3119692256.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup3172863872.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup3560326000.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup3639738304.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup2000490312.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup2279094864.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup2354828752.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup2498778448.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup2733424836.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup2842250080.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup4081647312.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup4268924928.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\Users\jl\AppData\Local\Temp\setup6257664.exe (Rootkit.TDSS) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\1.bin\F3EZSETP.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\program files\WinRAR\Patch.exe (Malware.Tool) -> Quarantined and deleted successfully.
c:\Windows\System32\secushr.dat (Malware.Trace) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\1.bin\F3PLUGIN.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.
c:\program files\funwebproducts\Installr\1.bin\NPFUNWEB.DLL (Adware.MyWebSearch) -> Quarantined and deleted successfully.

 

[rd-19]

تقرير هايجاك جديد لاهنت

 

[الحنش الأسود]

أبشرَ ..

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 03:11:24 ص, on 14/04/11
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16722)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Program Files\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\TechSmith\Snagit 10\Snagit32.exe
C:\Program Files\TechSmith\Snagit 10\TSCHelp.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\TechSmith\Snagit 10\SnagPriv.exe
C:\Program Files\TechSmith\Snagit 10\snagiteditor.exe
C:\Program Files\Hotspot Shield\bin\openvpntray.exe
C:\Windows\system32\wuauclt.exe
C:\Users\jl\AppData\Local\Google\Update\1.2.183.39\GoogleCrashHandler.exe
C:\Program Files\Paltalk Messenger\paltalk.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Zyzoom_Forum_Tools\zHijak.com

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
R3 - URLSearchHook: (no name) - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 10\SnagitBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O2 - BHO: Symantec NCO BHO - {602ADB0E-4AFF-4217-8AA1-95DAC4DFA408} - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll
O2 - BHO: Symantec Intrusion Prevention - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\IPS\IPSBHO.DLL
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: MessengerPlusLive Saudi Arabia TB - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll
O3 - Toolbar: (no name) - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)
O3 - Toolbar: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 10\SnagitIEAddin.dll
O3 - Toolbar: Norton Toolbar - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\coIEPlg.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Program Files\Unlocker\UnlockerAssistant.exe"
O4 - HKLM\..\Run: [************' Anti-Malware (reboot)] "C:\Users\jl\AppData\Local\Temp\zxq1\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Google Update] "C:\Users\jl\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [Ywenamunu] rundll32.exe "C:\Users\jl\AppData\Local\WMe201.dll",Startup
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\RunOnce: [] (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\RunOnce: [] (User 'Default user')
O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
O4 - Global Startup: Snagit 10.lnk = C:\Program Files\TechSmith\Snagit 10\Snagit32.exe
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open Link Target in Firefox - file://C:\Users\jl\AppData\Roaming\Mozilla\Firefox\Profiles\07zvfu20.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewlink.html
O8 - Extra context menu item: View This Page in Firefox - file://C:\Users\jl\AppData\Roaming\Mozilla\Firefox\Profiles\07zvfu20.default\extensions\{5D558C43-550F-4b12-84AB-0D8ABDA9F975}\firefoxviewpage.html
O8 - Extra context menu item: تحميل الكل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى فيديو (إف.إل.في) بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: تدوين هذا في المدونة - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &تدوين هذا في Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O15 - Trusted Zone:

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O17 - HKLM\System\CCS\Services\Tcpip\..\{E5CE06D9-A4BD-4139-AA7A-89E9766020F2}: NameServer = 10.86.24.1
O23 - Service: Hotspot Shield Service (hshld) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: Norton Internet Security (NIS) - Symantec Corporation - C:\Program Files\Norton Internet Security\Engine\18.5.0.125\ccSvcHst.exe

--
End of file - 8737 bytes

 

[rd-19]

من الحذف و الإضافة .. نحذف التالي ..

Ask Toolbar

Ask.com Search Assistant 1.0.2


ثم الأن نحدد القيم التالية
R3 - URLSearchHook: UrlSearchHook Class - {00000000-6E41-4FD3-8538-502F5495E5FC} - C:\Program Files\Ask.com\GenericAskToolbar.dll

R3 - URLSearchHook: (no name) - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)

O2 - BHO: Conduit Engine - {30F9B915-B755-4826-820B-08FBA6BD249D} - C:\Program Files\ConduitEngine\ConduitEngine.dll

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O2 - BHO: MessengerPlusLive Saudi Arabia TB - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)

O3 - Toolbar: (no name) - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - (no file)


O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

O15 - Trusted Zone:

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

<< طريقة التنظيف .. اضغط


ثم يالحبيب ..

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

<< اضغط هناا ثم نظف جهازك


ثم بشرنا

 

[الحنش الأسود]

عزِيزي " rd_19

بالنـسبة لـ ثقل الجهاز والتصفح ابشرك أفضل من قبل ..

لكنْ مُشكلة تعلِيق متصفح قُوقل كروم لحد الحين مستمر ..

طبعًا بعد ماسويت اللي طلبته مني .. تنظيف قيم الهايجاك ومخلفات الجهاز ..

سويت أعادة تشغيل للجهاز بعد ماحطيت باسبورد جهازي

.. طلعت لي شاشة زرقاء مآفيها أي كلمة ..

أظطريت أعيد تشغيل الجهاز مره ثانية والحمدلله ماطلعت

..

بس طلعت هـ الصوره هذي على سطح المكتب

للمعلُومية عزيزي لمن أستخدمت برنامج

Your Uninstaller 2010

فيه أكثر من ملف مـ أنحذف مع الملفات الباقِية

هل فيها أشكآلية أو مايهم



..


سآمحني ثقلت عليك
​

 

[rd-19]

هلا بك اخوي

عطني تقرير من هذي >>

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

بالنسبه Your Uninstaller مو مشكله

يعلق + ثقل وخاصه متصفح قوقل كروم وأكسبلور

بالنسبه للأكسبلور كيف وضعه الحين ..

اما بالنسبه لـ متصفح كروم احذفه و كامل مكوناته , ثم اعد تحميله مره اخرى :d:

 

[الحنش الأسود]

عزيزي ..

بالنسبة للتقرير انحفظ بالجهاز بصيغة html

كيف أرفعه بالرد ؟

 

[rd-19]

عزيزي ..

بالنسبة للتقرير انحفظ بالجهاز بصيغة html

كيف أرفعه بالرد ؟

اعمل تحديد كل ثم انسخه والصقه هنا :y:

 

[الحنش الأسود]

سـم ..




Start-Up Items; List generated by Start-Up Tool.

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

msnmsgr

Name:msnmsgr Command:"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background Reg_Path:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:Windows Live Messenger Company:Microsoft Corporation

Sidebar

Name:Sidebar Command:C:\Program Files\Windows Sidebar\sidebar.exe /autoRun Reg_Path:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:��������� ������ ��� ��� ������ �� Windows Company:Microsoft Corporation

IDMan

Name:IDMan Command:C:\Program Files\Internet Download Manager\IDMan.exe /onboot Reg_Path:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:Internet Download Manager (IDM) Company:Tonec Inc.

Google Update

Name:Google Update

 

[rd-19]

هذا بس

عطني صوره من نفس الاداة لاهنت

 

[الحنش الأسود]

المعذره ع الغلط

"


[SIZE=-1]Start-Up Items; List generated by Start-Up Tool.

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

[/SIZE]
[SIZE=-1] msnmsgr[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:msnmsgr Command:"C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background Reg_Path:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:Windows Live Messenger Company:Microsoft Corporation[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Sidebar[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:Sidebar Command:C:\Program Files\Windows Sidebar\sidebar.exe /autoRun Reg_Path:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:��������� ������ ��� ��� ������ �� Windows Company:Microsoft Corporation[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] IDMan[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:IDMan Command:C:\Program Files\Internet Download Manager\IDMan.exe /onboot Reg_Path:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:Internet Download Manager (IDM) Company:Tonec Inc.[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Google Update[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:Google Update Command:"C:\Users\jl\AppData\Local\Google\Update\GoogleUpdate.exe" /c Reg_Path:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:������ Google Company:Google Inc.[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Ywenamunu[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:Ywenamunu Command:rundll32.exe "C:\Users\jl\AppData\Local\WMe201.dll",Startup Reg_Path:HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:n/a Company:n/a[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] TkBellExe[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:TkBellExe Command:"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot Reg_Path:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:RealNetworks Scheduler Company:RealNetworks, Inc.[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] SunJavaUpdateSched[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:SunJavaUpdateSched Command:"C:\Program Files\Common Files\Java\Java Update\jusched.exe" Reg_Path:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:Java(TM) Update Scheduler Company:Sun Microsystems, Inc.[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Adobe Reader Speed Launcher[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:Adobe Reader Speed Launcher Command:"C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe" Reg_Path:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:Adobe Acrobat SpeedLauncher Company:Adobe Systems Incorporated[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Adobe ARM[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:Adobe ARM Command:"C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe" Reg_Path:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:Adobe Reader and Acrobat Manager Company:Adobe Systems Incorporated[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] UnlockerAssistant[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:UnlockerAssistant Command:"C:\Program Files\Unlocker\UnlockerAssistant.exe" Reg_Path:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:n/a Company:n/a[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] ************' Anti-Malware (reboot)[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:************' Anti-Malware (reboot) Command:"C:\Users\jl\AppData\Local\Temp\zxq1\mbam.exe" /runcleanupscript Reg_Path:HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run Status:enabled Description:n/a Company:n/a[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] PalTalk.lnk[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] NamealTalk.lnk Command:C:\PROGRA~1\PALTAL~1\paltalk.exenas LinkPath:C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\PalTalk.lnk Status:enabled Descriptionaltalk Messenger Company:AVM Software Inc.[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Snagit 10.lnk[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] Name:Snagit 10.lnk Command:C:\PROGRA~1\TECHSM~1\SNAGIT~1\Snagit32.exe LinkPath:C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Snagit 10.lnk Status:enabled Description:Snagit Company:TechSmith Corporation[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1] وهذي صورة[/SIZE]
[SIZE=-1] [/SIZE]
[SIZE=-1]

[/SIZE]
[SIZE=-1] [/SIZE]​

 

[rd-19]

اي اشوا :hh:

يالله يالحبيب الحين اي شي كتب اسمه لك تشيل الصح منه

Ywenamunu

Google Update

ثم اضغط على زر apply


ثم عيد تشغيل الجهاز وشوف وش يصير معاك

ثم ببرنامج Your Uninstaller احذف متصفح قوقل كروم

ثم حمله من هنا

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

 

[الحنش الأسود]

أبشرك إِنحَلت مُشكِلَة

من ناَحية قُوقِل كرُوم لـَ حد الحِين

حَذفته عن طريق برنامج Your Uninstaller
وحملته من موقع قوقل ..
بس الغريب بعد ماثبته المواقع اللي حاطها بالمفضله باقيه !

 

[الحنش الأسود]

سُبحَانْ الله وَبِحمَدهْ

 

[rd-19]

هلا حنش !!

هل باقي شي ..

 

[الحنش الأسود]

من ناَحية قُوقِل كرُوم لـَ حد الحِين

حَذفته عن طريق برنامج Your Uninstaller
وحملته من موقع قوقل ..
بس الغريب بعد ماثبته المواقع اللي حاطها بالمفضله باقيه !
والتعلِيق لسه نفس ماهُو ..



بالنسبة للبرنامج اللي طلبت مني احذفه
ask toolbar ماقدرت احذفه من الجهاز

يطلع هـ الشي !

​