مشكلة باختطاف المتصفح

[alsare]

مشكلة باختطاف المتصفح(تم حل المشكله والف شكر للاخوان الي ساعدوني)

السلام عليكم ورحمة الله وبركاته​

اخواني انا حصلت لي مشكله وعقدتني بالجهاز
اذا فتحت اي صفح بالنت تفتح معي الصفحه هذي

وبصراحه طولت معي وطفشتني بالحييييل
وقلت خلني احمل المطلوب تحميله بس لما حملته شكيت فيه وقلت بسالكم قبل ما اسوي تثبيت ع الجهاز​

وبعدها ما صارت تطلع نفس الصفحه
صارت تطلع الصفحه هذي​

يا ليت تساعدوني في هالمشكله​

وعلى فكره​

انا مسوي بحث بالكاسبر ولا حصل شي
وحملت دكتور سباي وير ولا سوى شي​

تحياتي ِ​

 

[alsare]

ComboFix 08-07-31.06 - user 08/03/2008 2:28:51.3 - NTFSx86 MINIMAL
Running from: C:\Documents and Settings\user\My Documents\Downloads\Programs\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\Documents and Settings\user\Local Settings\Application Data\aekkycy.dat
C:\Documents and Settings\user\Local Settings\Application Data\aekkycy.exe
C:\Documents and Settings\user\Local Settings\Application Data\aekkycy_nav.dat
C:\Documents and Settings\user\Local Settings\Application Data\aekkycy_navps.dat
C:\WINDOWS\system32\drivers\npf.sys
C:\WINDOWS\system32\kakle.dll
C:\WINDOWS\system32\packet.dll
C:\WINDOWS\system32\pthreadVC.dll
C:\WINDOWS\system32\WanPacket.dll
C:\WINDOWS\system32\winitn.dll
C:\WINDOWS\system32\wpcap.dll
.
---- Previous Run -------
.
C:\WINDOWS\system32\nvs2.inf
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_NPF

((((((((((((((((((((((((( Files Created from 2008-07-02 to 2008-08-02 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-08-02 23:37 633,888 --sha-w C:\WINDOWS\system32\drivers\fidbox2.dat
2008-08-02 23:36 --------- d-----w C:\Documents and Settings\user\Application Data\DMCache
2008-08-02 23:35 19,498,784 --sha-w C:\WINDOWS\system32\drivers\fidbox.dat
2008-08-02 23:18 60,404 --sha-w C:\WINDOWS\system32\drivers\fidbox2.idx
2008-08-02 23:18 262,172 --sha-w C:\WINDOWS\system32\drivers\fidbox.idx
2008-08-02 23:00 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-08-02 21:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\Prevx
2008-08-02 07:35 --------- d-----w C:\Documents and Settings\user\Application Data\IDM
2008-08-02 00:55 --------- d-----w C:\Program Files\Enigma Software Group
2008-07-31 20:19 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-07-27 17:21 --------- d-----w C:\Documents and Settings\user\Application Data\Hide IP NG
2008-07-26 01:41 --------- d-----w C:\Program Files\Spyware Doctor
2008-07-25 23:11 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-07-25 22:43 --------- d-----w C:\Program Files\Virtual Earth 3D
2008-07-24 02:39 --------- d-----w C:\Program Files\Smart PC Solutions
2008-07-23 20:29 96,559 ----a-w C:\WINDOWS\system32\drivers\klin.dat
2008-07-23 20:29 87,855 ----a-w C:\WINDOWS\system32\drivers\klick.dat
2008-07-23 20:29 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-07-23 20:29 --------- d-----w C:\Program Files\inKline Global
2008-07-23 18:28 --------- d-----w C:\Program Files\Video Convert Master
2008-07-22 11:27 --------- d-----w C:\Documents and Settings\user\Application Data\PC Tools
2008-07-22 06:16 --------- d-----w C:\Program Files\Windows Sidebar
2008-07-22 06:14 --------- d-----w C:\Program Files\Alky for Applications
2008-07-21 00:06 --------- d-----w C:\Program Files\Nokia
2008-07-15 04:10 --------- d-----w C:\Program Files\Magic Photo Editor
2008-07-14 12:16 --------- d-----w C:\Documents and Settings\All Users\Application Data\Grisoft
2008-07-14 00:31 --------- d-----w C:\Documents and Settings\user\Application Data\MiniDm
2008-07-13 07:04 --------- d-----w C:\Program Files\TechSmith
2008-07-13 07:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\TechSmith
2008-07-13 04:49 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-07-12 23:38 --------- d-----w C:\Program Files\MSXML 6.0
2008-07-12 15:33 --------- d-----w C:\Program Files\Conduit
2008-07-11 06:03 --------- d-----w C:\Program Files\Windows Media Connect 2
2008-07-11 03:45 --------- d-----w C:\Program Files\Reference Assemblies
2008-07-08 23:22 737,280 ----a-w C:\WINDOWS\iun6002.exe
2008-07-08 01:19 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-07-08 01:11 --------- d-----w C:\Program Files\Paltalk Messenger
2008-07-06 01:04 --------- d-----w C:\Program Files\LtUcx
2008-07-05 15:28 --------- d-----w C:\Program Files\Zeallsoft
2008-07-05 14:03 --------- d-----w C:\Documents and Settings\All Users\Application Data\Office Genuine Advantage
2008-07-05 04:43 --------- d-----w C:\Program Files\Google
2008-07-05 00:18 --------- d-----w C:\Program Files\Real
2008-07-05 00:18 --------- d-----w C:\Program Files\Common Files\xing shared
2008-07-05 00:18 --------- d-----w C:\Program Files\Common Files\Real
2008-06-30 18:35 81,920 ----a-w C:\Documents and Settings\user\Application Data\ezpinst.exe
2008-06-30 18:35 47,360 ----a-w C:\WINDOWS\system32\drivers\pcouffin.sys
2008-06-30 18:35 47,360 ----a-w C:\Documents and Settings\user\Application Data\pcouffin.sys
2008-06-30 18:35 --------- d-----w C:\Documents and Settings\user\Application Data\Vso
2008-06-30 16:40 --------- d-----w C:\Program Files\Internet Download Manager
2008-06-30 02:13 --------- d-----w C:\Program Files\Unlocker
2008-06-30 01:54 21,275 ----a-w C:\WINDOWS\system32\drivers\AegisP.sys
2008-06-30 01:53 --------- d-----w C:\Program Files\Intel
2008-06-30 01:50 --------- d-----w C:\Documents and Settings\user\Application Data\Leadertech
2008-06-28 16:36 --------- d-----w C:\Program Files\IEPro
2008-06-28 16:36 --------- d-----w C:\Documents and Settings\user\Application Data\IEPro
2008-06-28 16:35 --------- d-----w C:\Program Files\IE7Pro
2008-06-28 16:24 --------- d-----w C:\Documents and Settings\user\Application Data\IE7Pro
2008-06-28 00:17 112,144 ----a-w C:\WINDOWS\system32\drivers\kl1.sys
2008-06-21 22:13 --------- d-----w C:\Documents and Settings\user\Application Data\NSeries
2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-19 23:46 --------- d-----w C:\Program Files\Launch Manager
2008-06-19 23:13 --------- d-----w C:\Documents and Settings\user\Application Data\Intel
2008-06-19 22:47 --------- d-----w C:\Program Files\WinPCap
2008-06-19 22:46 --------- d-----w C:\Documents and Settings\All Users\Application Data\Intel
2008-06-19 22:43 --------- d-----w C:\Documents and Settings\user\Application Data\Acer
2008-06-19 22:43 --------- d-----w C:\Documents and Settings\All Users\Application Data\Acer
2008-06-19 22:26 --------- d-----w C:\Program Files\Golden Al-Wafi Translator
2008-06-14 17:59 271,616 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-10 18:22 81,288 ----a-w C:\WINDOWS\system32\drivers\iksyssec.sys
2008-06-02 12:19 66,952 ----a-w C:\WINDOWS\system32\drivers\iksysflt.sys
2008-06-02 12:19 42,376 ----a-w C:\WINDOWS\system32\drivers\ikfilesec.sys
2008-06-02 12:19 29,576 ----a-w C:\WINDOWS\system32\drivers\kcom.sys
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [08/16/2007 04:19 PM 5728112]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [08/04/2004 11:56 AM 15360]
"IDMan"="C:\Program Files\Internet Download Manager\IDMan.exe" [06/30/2008 07:40 PM 2566656]
"MSMSGS"="C:\Program Files\Messenger\msmsgs.exe" [10/13/2004 07:24 PM 1694208]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AzMixerSel"="C:\Program Files\Realtek\InstallShield\AzMixerSel.exe" [08/25/2005 03:21 PM 53248]
"SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [01/08/2005 08:17 AM 102491]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [01/08/2005 08:16 AM 692315]
"LManager"="C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE" [03/30/2006 02:56 PM 471040]
"RemoteControl"="C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe" [11/02/2004 08:24 PM 32768]
"LVCOMSX"="C:\WINDOWS\system32\LVCOMSX.EXE" [04/06/2006 07:22 PM 225280]
"LogitechCameraAssistant"="C:\Program Files\Acer\OrbiCam\CameraAssistant.exe" [04/06/2006 07:00 PM 331776]
"LogitechVideo[inspector]"="C:\Program Files\Acer\OrbiCam\InstallHelper.exe" [04/06/2006 07:06 PM 73728]
"LogitechCameraService(E)"="C:\WINDOWS\system32\ElkCtrl.exe" [11/01/2004 06:22 PM 262144]
"DAEMON Tools"="C:\Program Files\DAEMON Tools\daemon.exe" [12/10/2005 05:57 PM 133016]
"eDataSecurity Loader"="C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe" [10/19/2005 09:30 AM 69632]
"ADMTray.exe"="C:\Acer\Empowering Technology\admtray.exe" [10/24/2005 04:45 PM 2462208]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [11/28/2005 11:41 AM 667718]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [11/28/2005 11:41 AM 602182]
"EOUApp"="C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe" [11/28/2005 11:47 AM 569413]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [07/05/2008 03:17 AM 185896]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [11/28/2005 01:55 PM 98304]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [11/28/2005 01:52 PM 77824]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [11/28/2005 01:55 PM 118784]
"AVP"="C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe" [12/18/2007 12:43 AM 227856]
"RTHDCPL"="RTHDCPL.EXE" [02/27/2006 06:28 PM 16005120 C:\WINDOWS\RTHDCPL.exe]
"AGRSMMSG"="AGRSMMSG.exe" [03/16/2006 06:24 PM 88204 C:\WINDOWS\AGRSMMSG.exe]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [08/04/2004 11:56 AM 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.YV12"= yv12vfw.dll
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\English\\setup.exe"=
"C:\\Program Files\\IEPro\\MiniDM.exe"=
R1 OsaFsLoc;OsaFsLoc;C:\WINDOWS\system32\drivers\OsaFsLoc.sys [10/15/2005 06:20 PM]
R2 EpmPsd;Acer EPM Power Scheme Driver;C:\WINDOWS\system32\drivers\epm-psd.sys [04/22/2005 04:57 PM]
R2 EpmShd;Acer EPM System Hardware Driver;C:\WINDOWS\system32\drivers\epm-shd.sys [04/22/2005 04:57 PM]
R2 osaio;osaio;C:\WINDOWS\system32\drivers\osaio.sys [06/30/2005 04:58 PM]
R2 osanbm;osanbm;C:\WINDOWS\system32\drivers\osanbm.sys [01/14/2005 03:57 PM]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\WINDOWS\system32\DRIVERS\klim5.sys [12/13/2007 01:28 PM]
R3 lv321av;Logitech USB PC Camera (VC0321);C:\WINDOWS\system32\DRIVERS\lv321av.sys [04/06/2006 06:46 PM]
R3 LVPrcMon;Logitech LVPrcMon Driver;C:\WINDOWS\system32\drivers\LVPrcMon.sys [04/06/2006 07:30 PM]
R3 NdisFilt;OSA NdisFilter Protocol;C:\WINDOWS\system32\Drivers\NdisFilt.sys [09/13/2005 03:34 PM]
S1 SLEE_13_DRIVER;Steganos Live Encryption Engine 13 [Driver];C:\WINDOWS\system32\drivers\SLEE13.sys []
S3 br3gmdm;BandLuxe 3.5G HSDPA Adapter - USB;C:\WINDOWS\system32\DRIVERS\br3gmdm.sys []
S3 tapvpn;TAP VPN Adapter;C:\WINDOWS\system32\DRIVERS\tapvpn.sys [01/24/2008 12:25 AM]
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{e0d915f3-46c1-11dd-bb99-0016367724ef}]
\Shell\AutoRun\command - G:\r.cmd
\Shell\explore\Command - G:\r.cmd
\Shell\open\Command - G:\r.cmd
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
"C:\Program Files\Windows Sidebar\sidebar.exe" /RegServer
.
- - - - ORPHANS REMOVED - - - -
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)
HKCU-Run-Adaware Bootup - C:\Program Files\Ad-aware 4.0\Ad-aware.exe
HKLM-Run-TXP - c:\program files\topthemesxp\txp.exe
Notify-WgaLogon - (no file)

.
------- Supplementary Scan -------
.
FireFox -: Profile - C:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\0qxyiyfs.default\
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://www.google.com.sa/

**************************************************************************
catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2008-08-03 02:36:32
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Common Files\Logitech\LVMVFM\LVPrcSrv.exe
C:\Acer\Empowering Technology\admServ.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\WINDOWS\system32\wbem\wmiadap.exe
.
**************************************************************************
.
Completion time: 08/03/2008 2:39:58 - machine was rebooted [user]
ComboFix-quarantined-files.txt 2008-08-02 23:39:51
Pre-Run: 22,958,776,320 bytes free
Post-Run: 23,016,501,248 bytes free
219 --- E O F --- 2008-08-02 06:49:11

 

[alsare]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:48:16 ص, on 03/08/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16674)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Acer\Empowering Technology\admServ.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\WINDOWS\AGRSMMSG.exe
C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
C:\WINDOWS\system32\ElkCtrl.exe
C:\Program Files\DAEMON Tools\daemon.exe
C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
C:\Acer\Empowering Technology\admtray.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxext.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
D:\Downloads\Programs\Zyzoom_HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: IE7Pro - {00011268-E188-40DF-A514-835FCD78B1BF} - C:\Program Files\IEPro\iepro.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 9\SnagItBHO.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 9\SnagItIEAddin.dll
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [LManager] C:\PROGRA~1\LAUNCH~1\QtZgAcer.EXE
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechCameraAssistant] C:\Program Files\Acer\OrbiCam\CameraAssistant.exe
O4 - HKLM\..\Run: [LogitechVideo[inspector]] C:\Program Files\Acer\OrbiCam\InstallHelper.exe /inspect
O4 - HKLM\..\Run: [LogitechCameraService(E)] C:\WINDOWS\system32\ElkCtrl.exe /automation
O4 - HKLM\..\Run: [DAEMON Tools] "C:\Program Files\DAEMON Tools\daemon.exe" -lang 1033
O4 - HKLM\..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\eDSloader.exe
O4 - HKLM\..\Run: [ADMTray.exe] "C:\Acer\Empowering Technology\admtray.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [EOUApp] "C:\Program Files\Intel\Wireless\Bin\EOUWiz.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: تحميل الكل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى فيديو (إف.إل.في) بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra 'Tools' menuitem: IE7Pro Preferences - {0026439F-A980-4f18-8C95-4F1CBBF9C1D8} - C:\Program Files\IEPro\iepro.dll
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra button: Internet Cleaner - {45819E58-6E84-4A5D-BD65-A706981E5BE8} - D:\Downloads\Programs\ICleaner.exe (HKCU)
O9 - Extra 'Tools' menuitem: Internet Cleaner - {45819E58-6E84-4A5D-BD65-A706981E5BE8} - D:\Downloads\Programs\ICleaner.exe (HKCU)
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: AdminWorks Agent X6 (AWService) - Avocent Inc. - C:\Acer\Empowering Technology\admServ.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Logitech Process Monitor (LVPrcSrv) - Logitech - c:\program files\common files\logitech\lvmvfm\LVPrcSrv.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor\pctsSvc.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
--
End of file - 9712 bytes

 

[dяăģôŋ]

هل مازالت المشكه قائمه

 

[alsare]

اخوي اعتقد الموقع الي كان يفتح لي ومسوي لي الازعاج ما عاد يفتح زي اول

بالعكس شكله انحذف لانه ما انفتح للحين
وبالعاده اول ما افتح المتصفح يطلع على طول
وبانتظار رايك بالتقارير


تحياتي

 

[dяăģôŋ]

القيم سليمه اخوى

 

[alsare]

هل مازالت المشكه قائمه

لا اخوي المشكله اختفت

والله يعطيك العافيه اخوي على مساعدتك لي

وانا عاجز عن شكرك وعلى تعبك معاي

بس اخوي عندي الكاسبر 7
قفل معي وله مشاكل من قبل

ابي نصيحتك ورايك اخوي
وش تنصحني احمل برنامج حمايه من ناحية القوه والخفه ع الجهاز

تحياتي

 

[alsare]

وعليكم السلام

أخوي أنت مصاب بتروجان دعائي !!

وأفضل برنامج يخلصك منه هو سباي هنتر

وحمله من هنا من موضوع اخوي عزام

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

حدثه بالاول ثم فحص كامل للجهاز ..

واحذف اي شي مصاب بجهازك ..

واعد تشغيله ..

ولاتنسى تقرير الهايجاك .. الصقه في ردك القادم ويفيدونك الاخوان ان شاء الله !!

مشكور يالغالي على مشاركتك ومساعدتك لي بالمشكله
بس البرنامج ما افادني بالمشكله المذكوره
وطلع لي فيروسات غير وحذفتها

تحياتي

 

[dяăģôŋ]

اخوى الكاسبر2009 قوى جدا اذا كانت امكانيات جهازك جيده ركبه

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

 

[alsare]

اخوي عليك باهذه

أداة smitfraudfix هي مخصصة لحذف السباي وير الذي عادة يكون في شريط المهام SpyLocked يستخدم معها ملف لتعديل الريجستري ​

smitfraudfix_2.rar
(802.54 KB)​

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

او

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

وملف الريجستري الريجستري التابع لهذه الأداة

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

مشكور يالغلا ع المساعده والمشاركه في حل المشكله


تحياتي

 

[alsare]

اخوى الكاسبر2009 قوى جدا اذا كانت امكانيات جهازك جيده ركبه

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

انشالله بحمله الحين

والف شكر لك يالغالي على المساعده والشرح الخرافي


تحياتي