• بادئ الموضوع بادئ الموضوع abo_od
  • تاريخ البدء تاريخ البدء
  • المشاهدات 1,387

abo_od

زيزوومي جديد
إنضم
10 مايو 2011
المشاركات
6
مستوى التفاعل
0
النقاط
0
غير متصل
السـلآم علـيكم .

اخبـآركم يـآ شـبآب .؟

انـآ عندي مـشكله فـي جدآر الحـمآية من قـبل اسبوعـين تقـريبآ ..

وهـذي صوره مـن المشكلـه .

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي



وهـذآ تقـرير هـآيجيك ..

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 05:25:35 ص, on 11/05/11
Platform: Windows 7 (WinNT 6.00.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16766)
Boot mode: Normal
Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Alwil Software\Avast5\AvastUI.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Windows\system32\igfxsrvc.exe
C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\DAEMON Tools Pro\DTAgent.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Windows\system32\taskhost.exe
C:\Program Files\TechSmith\Snagit 9\Snagit32.exe
C:\Program Files\TechSmith\Snagit 9\TSCHelp.exe
C:\Program Files\TechSmith\Snagit 9\SnagPriv.exe
C:\Program Files\TechSmith\Snagit 9\snagiteditor.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe
C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\wuauclt.exe
D:\ادوات حـمـايـــة\هايجيك\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 192.197.121.3:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local;<local>
R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Program Files\Greek Subtitles FileBulldog Toolbar\tbhelper.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\Snagit 9\SnagitBHO.dll
O2 - BHO: HP Print Enhancer - {0347C33E-8762-4905-BF09-768834316C61} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_printenhancer.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: Babylon toolbar helper - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: HP Smart BHO Class - {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\Snagit 9\SnagitIEAddin.dll
O3 - Toolbar: Babylon Toolbar - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll
O4 - HKLM\..\Run: [avast5] "C:\Program Files\Alwil Software\Avast5\avastUI.exe" /nogui
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 10.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [AppleSyncNotifier] C:\Program Files\Common Files\Apple\Mobile Device Support\AppleSyncNotifier.exe
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [************' Anti-Malware] "C:\Program Files\************' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [BabylonToolbar] "C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" /md I
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"
O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files\DAEMON Tools Pro\DTAgent.exe" -autorun
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - Startup: GameRanger.lnk = ADMIN\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: Snagit 9.lnk = C:\Program Files\TechSmith\Snagit 9\Snagit32.exe
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: Show or hide HP Smart Web Printing - {DDE87865-83C5-48c4-8357-2F5B1AA84522} - C:\Program Files\HP\Digital Imaging\Smart Web Printing\hpswp_BHO.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O15 - Trusted IP range:
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O15 - ESC Trusted IP range:
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (BitDefender QuickScan Control) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files\Common Files\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\Alwil Software\Avast5\AvastSvc.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: frameworkPostgreSQL - PostgreSQL Global Development Group - C:/FRAMEW~1/POSTGR~1/bin/pg_ctl.exe
O23 - Service: frameworkPostgreSQL-1 - Unknown owner - C:/FRAMEW~2/POSTGR~1/bin/pg_ctl.exe (file missing)
O23 - Service: frameworkPostgreSQL-2 - PostgreSQL Global Development Group - C:/FRAMEW~3/POSTGR~1/bin/pg_ctl.exe
O23 - Service: خدمة تحديث Google (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: MBAMService - ************ Corporation - C:\Program Files\************' Anti-Malware\mbamservice.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
--
End of file - 8673 bytes


اتمـنى الحـل .

والمعـذره لأنهـآ اول مـشآركة لـي لكـن منـتدآكم هو الانـسب لمـثل هذه المـشآكل .. :b:
 

المعذره علـى التـآخير ..


************' Anti-Malware 1.50.1.1100
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Database version: 6510
Windows 6.1.7600
Internet Explorer 8.0.7600.16385
11/05/11 05:28:47 م
mbam-log-2011-05-11 (17-28-41).txt
Scan type: Full scan (C:\|)
Objects scanned: 291838
Time elapsed: 1 hour(s), 50 minute(s), 22 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 2
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\BIFROST1.2 (Bifrose.Trace) -> No action taken.
HKEY_CURRENT_USER\SOFTWARE\BIFROXx1.3 (Backdoor.Bifrose) -> No action taken.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
c:\program files\activision\call of duty 4 - modern warfare\rzr-cod4.exe (Trojan.Agent.CK) -> No action taken.
c:\Users\ADMIN\downloads\compressed\wirelesskeyview.exe (PUP.WirelessKeyView) -> No action taken.
 
توقيع : علي همر
مشكور اخوي علـى الرد

لكـن المـشكله لآ تـزآل ..
 
اعمل تقرير رن سكنر من هنا

حمل الاداة من هذا الموضوع

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي
 
Runscanner logfile
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

* = signed file
- = file not found
General info
------------
Computer name : PC0-PC
Creation time : 12/05/11 09:40:50 م
Hosts <> 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 8.0.7600.16385
OS : Windows Seven Black Edition
OS Build : 7600
OS SP :
RunScanner Version : 2.0.0.50
User Language : العربية (السعودية)‏
User rights : Administrator
Windows folder : C:\Windows
Running processes
-----------------
* C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
* C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
* C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
* C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
* C:\Windows\System32\csrss.exe (Microsoft Corporation)
* C:\Windows\System32\csrss.exe (Microsoft Corporation)
* C:\Windows\System32\conhost.exe (Microsoft Corporation)
* C:\Windows\System32\conhost.exe (Microsoft Corporation)
* C:\Windows\System32\conhost.exe (Microsoft Corporation)
* C:\Windows\System32\conhost.exe (Microsoft Corporation)
* C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe (DT Soft Ltd)
* C:\Windows\System32\dwm.exe (Microsoft Corporation)
* C:\Program Files\Common Files\Apple\Apple Application Support\distnoted.exe (Apple Inc.)
* C:\Users\ADMIN\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
* C:\Windows\System32\hkcmd.exe (Intel Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\taskhost.exe (Microsoft Corporation)
* C:\Windows\System32\taskhost.exe (Microsoft Corporation)
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.)
* C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
* C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe (Hewlett-Packard Co.)
* C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)
* C:\Windows\System32\igfxsrvc.exe (Intel Corporation)
* C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
* C:\Program Files\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
* C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
* C:\Program Files\iTunes\iTunes.exe (Apple Inc.)
* C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
* C:\Windows\System32\lsass.exe (Microsoft Corporation)
* C:\Program Files\************' Anti-Malware\mbamservice.exe (************ Corporation)
* C:\Program Files\Common Files\Apple\Mobile Device Support\MDCrashReportTool.exe (Apple Inc.)
* C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
* C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
* C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
* C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceHelper.exe (Apple Inc.)
* C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
* C:\Windows\System32\igfxpers.exe (Intel Corporation)
C:\FRAMEW~3\POSTGR~1\bin\pg_ctl.exe (PostgreSQL Global Development Group)
* C:\Windows\System32\PnkBstrA.exe
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
* C:\Program Files\proXPN\bin\proxpn.exe (proXPN.com)
* C:\Zyzoom_Forum_Tools\zRunScanner.com (Runscanner.net)
* C:\Windows\System32\services.exe (Microsoft Corporation)
* C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
* C:\Program Files\TechSmith\Snagit 9\Snagit32.exe (TechSmith Corporation)
* C:\Program Files\TechSmith\Snagit 9\SnagitEditor.exe (TechSmith Corporation)
* C:\Program Files\TechSmith\Snagit 9\SnagPriv.exe (TechSmith Corporation)
* C:\Windows\System32\spoolsv.exe (Microsoft Corporation)
* C:\Program Files\TechSmith\Snagit 9\TscHelp.exe (TechSmith Corporation)
* C:\Windows\system32\audiodg.exe (Microsoft Corporation)
* C:\Windows\System32\WUDFHost.exe (Microsoft Corporation)
* C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
* C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
* C:\Windows\servicing\TrustedInstaller.exe (Microsoft Corporation)
* C:\Windows\System32\smss.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
C:\Zyzoom_Forum_Tools\zyzoom.exe
* C:\Windows\System32\wininit.exe (Microsoft Corporation)
* C:\Windows\System32\winlogon.exe (Microsoft Corporation)
* C:\Windows\System32\lsm.exe (Microsoft Corporation)
* C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
* C:\Windows\explorer.exe (Microsoft Corporation)
* C:\Windows\System32\taskeng.exe (Microsoft Corporation)
Unrated items
-------------
002 C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
002 C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
003 * C:\Program Files\DAEMON Tools Pro\DTAgent.exe (DT Soft Ltd)
004 * C:\Users\ADMIN\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
007 * C:\Users\ADMIN\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
011 * C:\Windows\system32\drivers\acedrv11.sys (ProtectDisc x64/x86 Hybrid Driver)
011 c:\windows\System32\Drivers\sptd.sys (sptd)
011 C:\Windows\system32\DRIVERS\tap0901.sys (tap0901)
011 * C:\Windows\system32\DRIVERS\taphss.sys (TAP-Win32 Virtual Network Driver)
011 * C:\Windows\system32\DRIVERS\VBoxNetFlt.sys (VirtualBox Bridged Networking Driver)
011 * C:\Windows\system32\DRIVERS\VBoxNetAdp.sys (VirtualBox Host-Only Network Adapter Driver)
011 * C:\Windows\system32\DRIVERS\VBoxDrv.sys (VirtualBox Support Driver)
011 * C:\Windows\system32\DRIVERS\VBoxUSBMon.sys (VirtualBox USB Monitor Driver)
040 C:\Program Files\Greek Subtitles FileBulldog Toolbar\tbhelper.dll {CA3EB689-8F09-4026-AA10-B9534C691CE0}
042 GUID / CLSID not found {DDE87865-83C5-48c4-8357-2F5B1AA84522}
060 GUID / CLSID not found {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
061 * C:\Program Files\DAEMON Tools Pro\DTShl32.dll (DT Soft Ltd) {2C7DDECF-7A8E-48A5-A744-8F45D20FB1A9}
061 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
100 ProxyOverride HKCU : *.local;<local>
100 ProxyServer HKCU : 192.197.121.3:3128
100 SearchAssistant HKLM :
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

100 Start Page HKLM :
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

104 * C:\Windows\Downloaded Program Files\qsax.dll (BitDefender LLC) {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A}
105 تحميل الكل بواسطة Internet Download Manager : C:\Program Files\Internet Download Manager\IEGetAll.htm
105 تحميل بواسطة Internet Download Manager : C:\Program Files\Internet Download Manager\IEExt.htm
105 تحميل محتوى FLV بواسطة Internet Download Manager : C:\Program Files\Internet Download Manager\IEGetVL.htm
170 {e29b6189-2e36-11e0-ac14-001e33725cc0} : I:\LaunchU3.exe -a
173 * C:\Program Files\DAEMON Tools Pro\DTShl32.dll (DT Soft Ltd) {40966797-8FFE-46C8-9EF8-7003F33CCF0F}
173 * C:\Program Files\BreakPoint Software\Hex Workshop v6\HWExt.dll (BreakPoint Software, Inc.) {DB34D5DC-D41A-482E-A5EF-8FA0F88761DA}
173 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
221 * C:\Program Files\DAEMON Tools Pro\DTShl32.dll (DT Soft Ltd) {40966797-8FFE-46C8-9EF8-7003F33CCF0F}
221 * C:\Program Files\BreakPoint Software\Hex Workshop v6\HWExt.dll (BreakPoint Software, Inc.) {DB34D5DC-D41A-482E-A5EF-8FA0F88761DA}
221 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
227 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
251 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
Missing files
-------------
010 C:
010 C:
010 C:
011 C:\Users\ADMIN\AppData\Local\Temp\Rar$EX76.464\PBDownforce.sys
045 C:\Program Files\Greek Subtitles FileBulldog Toolbar\tbcore3.dll
 
المعذره انا مسافر ادرس وداخل من مقهى وهذآ هو الـقرير


Runscanner logfile
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

* = signed file
- = file not found
General info
------------
Computer name : PC0-PC
Creation time : 25/05/11 12:27:17 ص
Hosts <> 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 8.0.7600.16385
OS : Windows Seven Black Edition
OS Build : 7600
OS SP :
RunScanner Version : 2.0.0.50
User Language : العربية (السعودية)‏
User rights : Administrator
Windows folder : C:\Windows
Running processes
-----------------
C:\Users\ADMIN\AppData\Local\Temp\windows.exe
* C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
* C:\Program Files\Alwil Software\Avast5\AvastUI.exe (AVAST Software)
* C:\Program Files\Alwil Software\Avast5\AvastSvc.exe (AVAST Software)
* C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc.)
* C:\Windows\System32\csrss.exe (Microsoft Corporation)
* C:\Windows\System32\csrss.exe (Microsoft Corporation)
* C:\Windows\System32\conhost.exe (Microsoft Corporation)
* C:\Program Files\DAEMON Tools Pro\DTShellHlp.exe (DT Soft Ltd)
* C:\Windows\System32\dwm.exe (Microsoft Corporation)
* C:\Windows\System32\hkcmd.exe (Intel Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\taskhost.exe (Microsoft Corporation)
C:\Program Files\HP\Digital Imaging\bin\hpqbam08.exe (Hewlett-Packard Co.)
C:\Program Files\HP\Digital Imaging\bin\hpqste08.exe (Hewlett-Packard Co.)
* C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett-Packard Co.)
* C:\Program Files\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe (Hewlett-Packard Co.)
* C:\Program Files\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard)
* C:\Windows\System32\igfxsrvc.exe (Intel Corporation)
* C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
* C:\Program Files\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
* C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files\Internet Explorer\iexplore.exe (Microsoft Corporation)
* C:\Program Files\iPod\bin\iPodService.exe (Apple Inc.)
* C:\Program Files\iTunes\iTunesHelper.exe (Apple Inc.)
* C:\Windows\System32\lsass.exe (Microsoft Corporation)
* C:\Program Files\************' Anti-Malware\mbamservice.exe (************ Corporation)
* C:\Windows\System32\wscript.exe (Microsoft Corporation)
* C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
* C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
* C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
* C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe (Apple Inc.)
* C:\Windows\System32\igfxpers.exe (Intel Corporation)
C:\FRAMEW~3\POSTGR~1\bin\pg_ctl.exe (PostgreSQL Global Development Group)
* C:\Windows\System32\PnkBstrA.exe
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
C:\FRAMEW~3\POSTGR~1\bin\postgres.exe (PostgreSQL Global Development Group)
* C:\Windows\System32\services.exe (Microsoft Corporation)
* C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
* C:\Program Files\TechSmith\Snagit 9\Snagit32.exe (TechSmith Corporation)
* C:\Program Files\TechSmith\Snagit 9\SnagitEditor.exe (TechSmith Corporation)
* C:\Program Files\TechSmith\Snagit 9\SnagPriv.exe (TechSmith Corporation)
* C:\Windows\System32\spoolsv.exe (Microsoft Corporation)
* C:\Program Files\TechSmith\Snagit 9\TscHelp.exe (TechSmith Corporation)
* C:\Windows\system32\audiodg.exe (Microsoft Corporation)
* C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
* C:\Program Files\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
* C:\Windows\System32\smss.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
* C:\Windows\System32\wininit.exe (Microsoft Corporation)
* C:\Windows\System32\winlogon.exe (Microsoft Corporation)
* C:\Windows\System32\lsm.exe (Microsoft Corporation)
* C:\Windows\explorer.exe (Microsoft Corporation)
Unrated items
-------------
002 C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe (Babylon Ltd.)
002 C:\Program Files\QuickTime\QTTask.exe (Apple Inc.)
002 C:\Users\ADMIN\AppData\Local\Temp\windows.exe
003 * C:\Program Files\DAEMON Tools Pro\DTAgent.exe (DT Soft Ltd)
003 C:\Users\ADMIN\AppData\Local\Temp\windows.exe
004 * C:\Users\ADMIN\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
007 * C:\Users\ADMIN\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
011 * C:\Windows\system32\drivers\acedrv11.sys (ProtectDisc x64/x86 Hybrid Driver)
011 c:\windows\System32\Drivers\sptd.sys (sptd)
011 C:\Windows\system32\DRIVERS\tap0901.sys (tap0901)
011 * C:\Windows\system32\DRIVERS\taphss.sys (TAP-Win32 Virtual Network Driver)
011 * C:\Windows\system32\DRIVERS\VBoxNetFlt.sys (VirtualBox Bridged Networking Driver)
011 * C:\Windows\system32\DRIVERS\VBoxNetAdp.sys (VirtualBox Host-Only Network Adapter Driver)
011 * C:\Windows\system32\DRIVERS\VBoxDrv.sys (VirtualBox Support Driver)
011 * C:\Windows\system32\DRIVERS\VBoxUSBMon.sys (VirtualBox USB Monitor Driver)
040 C:\Program Files\Greek Subtitles FileBulldog Toolbar\tbhelper.dll {CA3EB689-8F09-4026-AA10-B9534C691CE0}
042 GUID / CLSID not found {DDE87865-83C5-48c4-8357-2F5B1AA84522}
060 GUID / CLSID not found {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
061 * C:\Program Files\DAEMON Tools Pro\DTShl32.dll (DT Soft Ltd) {2C7DDECF-7A8E-48A5-A744-8F45D20FB1A9}
061 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
100 ProxyOverride HKCU : *.local;<local>
100 ProxyServer HKCU : 192.197.121.3:3128
100 SearchAssistant HKLM :
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

100 Start Page HKLM :
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

104 * C:\Windows\Downloaded Program Files\qsax.dll (BitDefender LLC) {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A}
105 تحميل الكل بواسطة Internet Download Manager : C:\Program Files\Internet Download Manager\IEGetAll.htm
105 تحميل بواسطة Internet Download Manager : C:\Program Files\Internet Download Manager\IEExt.htm
105 تحميل محتوى FLV بواسطة Internet Download Manager : C:\Program Files\Internet Download Manager\IEGetVL.htm
170 {e29b6189-2e36-11e0-ac14-001e33725cc0} : I:\LaunchU3.exe -a
173 * C:\Program Files\DAEMON Tools Pro\DTShl32.dll (DT Soft Ltd) {40966797-8FFE-46C8-9EF8-7003F33CCF0F}
173 * C:\Program Files\BreakPoint Software\Hex Workshop v6\HWExt.dll (BreakPoint Software, Inc.) {DB34D5DC-D41A-482E-A5EF-8FA0F88761DA}
173 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
221 * C:\Program Files\DAEMON Tools Pro\DTShl32.dll (DT Soft Ltd) {40966797-8FFE-46C8-9EF8-7003F33CCF0F}
221 * C:\Program Files\BreakPoint Software\Hex Workshop v6\HWExt.dll (BreakPoint Software, Inc.) {DB34D5DC-D41A-482E-A5EF-8FA0F88761DA}
221 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
227 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
251 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
Missing files
-------------
010 C:
010 C:
010 C:
011 C:\Users\ADMIN\AppData\Local\Temp\Rar$EX76.464\PBDownforce.sys
045 C:\Program Files\Greek Subtitles FileBulldog Toolbar\tbcore3.dll


 
عودة
أعلى