جهازي ينطفي لوحده بعد فترة من التشغيل ويظهر شاشة زرقاء

[وحيد_الليل]

جهازي ينطفي لوحده بعد فترة من التشغيل دون اي سابق انذار وايضا احيانا تنطفي الشاشة وتظهر مره اخرى وتاتي رسالة تم استعادة برنامج تشغيل الشاشة ثم تاتي شاشة زرقاء ويبدا بفحص الذاكرة ثم يعلق الجهاز على الشاشة الزرقاء ويصدر صوت


هذه جميع التقارير

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

 

[M.$py.M]

السلام عليكم ورحمة الله وبركاته اخي

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

تقرير هايجاك لو سمحت

 

[M.$py.M]

اخي امحي هذه القيم من هايجاك

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O2 - BHO: Ask Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll


O3 - Toolbar: Ask Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll

 

[M.$py.M]

لحذف القيم المطلوب منك حذفها اتبع التالي

ضع اشارة الصح على كل القيم المطلوب منك حذفها حسب الشرح التالي

 

[البارون]

طبق

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

 

[وحيد_الليل]

Malwarebytes' Anti-Malware 1.51.2.1300

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

Database version: 7622
Windows 6.1.7600 Service Pack 1
Internet Explorer 9.0.8112.16421
12/30/2011 6:50:40 PM
mbam-log-2011-12-30 (18-50-40).txt
Scan type: Full scan (C:\|)
Objects scanned: 303462
Time elapsed: 51 minute(s), 14 second(s)
Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 26
Memory Processes Infected:
(No malicious items detected)
Memory Modules Infected:
(No malicious items detected)
Registry Keys Infected:
HKEY_CURRENT_USER\SOFTWARE\Bifrost (Bifrose.Trace) -> Quarantined and deleted successfully.
Registry Values Infected:
(No malicious items detected)
Registry Data Items Infected:
(No malicious items detected)
Folders Infected:
(No malicious items detected)
Files Infected:
c:\program files\wireless wep key password spy\WKey.exe (HackTool.Agent) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP110\A0061937.exe (Trojan.Banker) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP110\A0061988.exe (PUP.Joke.RJLSoftware) -> Not selected for removal.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP110\A0062058.exe (Joke.VV) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP110\A0062153.exe (Adware.UCMore) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP110\A0062176.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP110\A0062610.exe (Trojan.Banker) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP111\A0064922.exe (Trojan.Banker) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP111\A0065356.exe (Trojan.Agent) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP111\A0065379.exe (Adware.UCMore) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP111\A0065474.exe (Joke.VV) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP111\A0065544.exe (PUP.Joke.RJLSoftware) -> Not selected for removal.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP111\A0065595.exe (Trojan.Banker) -> Quarantined and deleted successfully.
c:\system volume information\_restore{26b8cb1e-22f8-4056-bc88-be06f62aba45}\RP111\A0066181.exe (Trojan.Banker) -> Quarantined and deleted successfully.
c:\Users\yah\AppData\Roaming\thinstall\adobe photoshop cs3\1000000800002i\svchost.exe (Trojan.IRCBot) -> Quarantined and deleted successfully.
c:\Users\yah\AppData\Roaming\thinstall\adobe photoshop cs3\4000005700003i\mdnsresponder.exe (Trojan.IRCBot) -> Quarantined and deleted successfully.
c:\Users\yah\AppData\Roaming\thinstall\adobe photoshop cs3\400000b1b00002i\Bridge.exe (Trojan.IRCBot) -> Quarantined and deleted successfully.
c:\Users\yah\AppData\Roaming\thinstall\recovery toolbox for rar 1.1\%local appdata%\thinstall\Cache\Stubs\f3b5484cd345b8449f73e74638e18f581826a\recoverytoolboxforrar.exe.97c988.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Users\yah\AppData\Roaming\thinstall\recovery toolbox for rar 1.1\%local appdata%\thinstall\Cache\Stubs\f3b5484cd345b8449f73e74638e18f581826a\recoverytoolboxforrar.exe.9e87e0.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Users\yah\AppData\Roaming\thinstall\recovery toolbox for rar 1.1\%local appdata%\thinstall\Cache\Stubs\f3b5484cd345b8449f73e74638e18f581826a\recoverytoolboxforrar.exe.df8dfc.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Users\yah\AppData\Roaming\thinstall\recovery toolbox for rar 1.1\%local appdata%\thinstall\Cache\Stubs\f3b5484cd345b8449f73e74638e18f581826a\recoverytoolboxforrar.exe.f4cf48.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Users\yah\AppData\Roaming\thinstall\recovery toolbox for rar 1.1\%local appdata%\thinstall\Cache\Stubs\f3b5484cd345b8449f73e74638e18f581826a\recoverytoolboxforrar.exe.fe0c8.tmp (Trojan.Backdoor) -> Quarantined and deleted successfully.
c:\Users\yah\downloads\compressed\win7-activate\تنشيط ويندوز 7\removewat.exe (HackTool.Wpakill) -> Quarantined and deleted successfully.
c:\Users\yah\downloads\compressed\الباتشcw_0.9\CW.eXe (Hacktool.ChewWGA) -> Quarantined and deleted successfully.
c:\Users\yah\downloads\compressed\swish.max.v2.0\swish.max.v2.0.2007.11.02\swish.max.v2.0.2007.11.02.winall.proper.cracked-nope\ptch\swish.max.v2.0.2007.11.02.ptch.exe (Trojan.Downloader) -> Quarantined and deleted successfully.
c:\Users\yah\downloads\compressed\portable recovery toolbox for rar 1.1.8.17\portable recovery toolbox for rar 1.1.8.17.exe (Trojan.Agent) -> Quarantined and deleted successfully.

 

[البارون]

تقرير هايجاك جديد

 

[وحيد_الليل]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:57:58 PM, on 12/30/2011
Platform: Windows 7 SP1 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Program Files\proXPN\bin\proxpn.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Ask.com\Updater\Updater.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Nimbuzz\Nimbuzz.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\proXPN\bin\openvpn.exe
C:\Windows\system32\conhost.exe
C:\Program Files\Paltalk Messenger\paltalk.exe
C:\Users\yah\AppData\Local\Pandion\Application\pandion.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Hotspot Shield\bin\openvpntray.exe
C:\Program Files\SmartCam\SmartCam.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Zyzoom_Forum_Tools\zHijak.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: GomPicker - {F0181C6E-9218-4792-9F3C-E8DF52B2F1AC} - C:\Program Files\GRETECH\GomPicker\GomPickerBHO.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [ApnUpdater] "C:\Program Files\Ask.com\Updater\Updater.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Users\yah\AppData\Local\Temp\zxq2\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Nimbuzz] C:\Program Files\Nimbuzz\Nimbuzz.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\yah\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Google Update] "C:\Users\yah\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Pandion.lnk = C:\Users\yah\AppData\Local\Pandion\Application\pandion.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: ???C? ??? OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: ??&?C? ??? OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Atomic Email Hunter - {491A6C2B-1046-486b-8A8F-7D26BCB79A9B} - C:\Program Files\AtomPark\Atomic Email Hunter\ie.htm (HKCU)
O9 - Extra 'Tools' menuitem: Atomic Email Hunter - {491A6C2B-1046-486b-8A8F-7D26BCB79A9B} - C:\Program Files\AtomPark\Atomic Email Hunter\ie.htm (HKCU)
O9 - Extra button: Email Extractor - {AFA7DB99-3E4D-4396-94F8-B0B135BCB472} - res://C:\Program%20Files\Advanced%20Email%20Extractor%20PRO\AeePMsie.dll/page.html (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Advanced Email Extractor - {AFA7DB99-3E4D-4396-94F8-B0B135BCB472} - res://C:\Program%20Files\Advanced%20Email%20Extractor%20PRO\AeePMsie.dll/page.html (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7253A666-804A-1108-A4DC-00E04C504788} (BMChat Control) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {CAFECAFE-0013-0001-0029-ABCDEFABCDEF} (JInitiator 1.3.1.29) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O17 - HKLM\System\CCS\Services\Tcpip\..\{16ADA023-E7A1-4444-9F25-8BC167151A0A}: NameServer = 10.68.88.1
O17 - HKLM\System\CCS\Services\Tcpip\..\{4311910F-BDE1-4DC2-BE11-7BF7579A9EF9}: NameServer = 86.51.35.24 86.51.34.24
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Realtime Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (hshld) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: Installer Service - Unknown owner - C:\ProgramData\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{DB24A9E5-A068-43DD-88D0-B51BED3C0B99}\Installer\InstallerService.exe
O23 - Service: Nakido - Nakido - C:\Program Files\Nakido\nakido.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
--
End of file - 9236 bytes

 

[البارون]

تقرير البرامج المثبته

 

[وحيد_الليل]

====== معلومات نظام التشغيل ======
X86 WIN_7 7600 Service Pack 1

====== قائمة البرامج المثبتة ======
Update for Microsoft Office 2007 (KB2508958)
µTorrent
Adobe Flash Player 10 Plugin
Adobe Flash Player 11 ActiveX
Adobe Photoshop CS
Advanced Email Extractor PRO
Advanced Mass Sender 4.3
Anonymail Pro V-10 Free Edition + XXX-Player
Ashampoo ClipFinder 1.55
Ask Toolbar
Atomic Email Hunter 4.60
Avira Free Antivirus
AviSynth 2.5
Blaze Audio Voice Cloak Plus Trial
Cheat Engine 6.1
D3DX10
Diamond Scheduler 6
DietMP3 4.03.00
EmailSenderDeluxe
EmailSpider Gold 11
Emex 3
Facebook Video Calling 1.0.0.8953
FlashShare Flash Optimizer 1.0
Free YouTube to MP3 Converter version 3.10.11.923
GOM PICKER
GOM Player
GOM Video Converter
Google Talk Plugin
Google Update Helper
HotFile AutoDownloader
Hotspot Shield 2.21
Internet Download Manager
iVocalize Web Conference 4
iWASEL
Java Auto Updater
Java(TM) 6 Update 29
Java(TM) 6 Update 4
JDownloads 9.00
LameACM
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Extended
Microsoft Application Error Reporting
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (Arabic) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (Arabic) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (Arabic) 2007
Microsoft Office InfoPath MUI (Arabic) 2007
Microsoft Office OneNote MUI (Arabic) 2007
Microsoft Office Outlook MUI (Arabic) 2007
Microsoft Office PowerPoint MUI (Arabic) 2007
Microsoft Office Proof (Arabic) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proofing (Arabic) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (Arabic) 2007
Microsoft Office Shared MUI (Arabic) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Word MUI (Arabic) 2007
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft_VC100_CRT_SP1_x86
MiPony 1.4.0
Mobily Connect Card
Mobiola Web Camera for S60 3Ed 1.0
Mozilla Firefox 8.0 (x86 ar)
MP3 To Ringtone Gold 7.70
MPEG2 Codec(libmpeg2/mad)
MSVC80_x86_v2
MSVC90_x86
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
Nakido
NASA World Wind 1.4
NetCut 2.08
Nimbuzz 2.0.1
Nokia Connectivity Cable Driver
Nokia Suite
Nokia Suite
Oracle JInitiator 1.3.1.29
paltalk 10.389
Paltalk Messenger
Pandion
PC Connectivity Solution
proXPN 2.4.11
RAR Repair Tool v.4.0.1
Recovery Toolbox for RAR 1.1
SecondLifeViewer2 (remove only)
SmartCam -- Smart Phone Camera
SWiSH Max2
SWiSH Max4
TeamViewer 7
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Outlook 2007 Junk Email Filter (KB2596560)
uTorrentBar Toolbar
Video GIF Converter v1.3.02 - Free Version
VoiceMaskPro
WebM Media Foundation Components
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Messenger
Windows Live Messenger
Windows Live Movie Maker
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
WinPcap 4.1.1
WinRAR 4.01 (32-بت)
Wireless WEP Key Password Spy
برنامج المصروفات الاصدار الرابع
تحديث لـ Microsoft Office Excel 2007 Help (KB963678)
تحديث لـ Microsoft Office Powerpoint 2007 Help (KB963669)
تحديث لـ Microsoft Office Word 2007 Help (KB963665)
حزمة برامج تشغيل Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
معرض صور Windows Live

 

[البارون]

من اضافة وازالة البرامج احذف التالي (( اغلق المتصفحات قبل الحذف ))

GOM PICKER
Ask Toolbar
Atomic Email Hunter 4.60
Avira Free Antivirus
Hotspot Shield 2.21
uTorrentBar Toolbar
Wireless WEP Key Password Spy

ثم اعمل هذا

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

واعمل بعد ذلك

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

 

[وحيد_الليل]

Runscanner logfile

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

* = signed file
- = file not found
General info
------------
Computer name : YAH-PC
Creation time : 12/30/2011 7:57:24 PM
Hosts <> 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 9.0.8112.16421
OS : Windows 7 Ultimate
OS Build : 7600
OS SP : Service Pack 1
RunScanner Version : 2.0.0.50
User Language : العربية (السعودية)‏
User rights : Administrator
Windows folder : C:\Windows
Running processes
-----------------
* C:\Program Files\uTorrent\uTorrent.exe (BitTorrent, Inc.)
* C:\Windows\System32\csrss.exe (Microsoft Corporation)
* C:\Windows\System32\csrss.exe (Microsoft Corporation)
* C:\Windows\System32\dwm.exe (Microsoft Corporation)
* C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\svchost.exe (Microsoft Corporation)
* C:\Windows\System32\taskhost.exe (Microsoft Corporation)
* C:\Program Files\Internet Download Manager\IDMan.exe (Tonec Inc.)
* C:\Program Files\Internet Download Manager\IEMonitor.exe (Tonec Inc.)
* C:\Program Files\Common Files\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
* C:\Windows\System32\lsass.exe (Microsoft Corporation)
* C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe (Nokia)
* C:\Windows\System32\SearchFilterHost.exe (Microsoft Corporation)
* C:\Windows\System32\SearchIndexer.exe (Microsoft Corporation)
* C:\Windows\System32\SearchProtocolHost.exe (Microsoft Corporation)
* C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
* C:\Program Files\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
C:\Program Files\Nakido\nakido.exe (Nakido)
C:\Program Files\Nimbuzz\Nimbuzz.exe
* C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe (Nokia)
* C:\Program Files\Paltalk Messenger\paltalk.exe (AVM Software Inc.)
C:\Users\yah\AppData\Local\Pandion\Application\pandion.exe (Pandion)
* C:\Zyzoom_Forum_Tools\zRunScanner.com (Runscanner.net)
* C:\Program Files\PC Connectivity Solution\ServiceLayer.exe (Nokia)
* C:\Windows\System32\services.exe (Microsoft Corporation)
C:\Program Files\SmartCam\SmartCam.exe
* C:\Windows\System32\spoolsv.exe (Microsoft Corporation)
* C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer GmbH)
* C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe (Nokia)
* C:\Windows\System32\audiodg.exe (Microsoft Corporation)
* C:\Program Files\Windows Live\Messenger\msnmsgr.exe (Microsoft Corporation)
* C:\Windows\System32\smss.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
* C:\Windows\System32\wbem\WmiPrvSE.exe (Microsoft Corporation)
C:\Zyzoom_Forum_Tools\zyzoom.exe
* C:\Windows\System32\wininit.exe (Microsoft Corporation)
C:\Windows\System32\winlogon.exe (Microsoft Corporation)
* C:\Windows\System32\lsm.exe (Microsoft Corporation)
* C:\Windows\System32\sppsvc.exe (Microsoft Corporation)
* C:\Program Files\Google\Update\GoogleUpdate.exe (Google Inc.)
* C:\Windows\explorer.exe (Microsoft Corporation)
* C:\Windows\System32\taskeng.exe (Microsoft Corporation)
* C:\Windows\System32\taskeng.exe (Microsoft Corporation)
Unrated items
-------------
003 C:\Program Files\Nimbuzz\Nimbuzz.exe
004 C:\Users\yah\AppData\Local\Pandion\Application\pandion.exe (Pandion)
005 C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
005 * C:\Program Files\Paltalk Messenger\paltalk.exe (AVM Software Inc.)
006 C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
006 * C:\Program Files\Paltalk Messenger\paltalk.exe (AVM Software Inc.)
007 C:\Users\yah\AppData\Local\Pandion\Application\pandion.exe (Pandion)
010 C:\ProgramData\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{DB24A9E5-A068-43DD-88D0-B51BED3C0B99}\Installer\InstallerService.exe (InstallerService.exe)
010 C:\Program Files\Nakido\nakido.exe (Nakido)
010 * C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe (TeamViewer Remote Control Application)
011 * C:\Windows\system32\DRIVERS\taphss.sys (TAP-Win32 Virtual Network Driver)
011 C:\Windows\system32\DRIVERS\tap0901.sys (TAP-Win32 Virtual Network Driver)
011 C:\Windows\system32\DRIVERS\BTCamDrv.sys (WDM Video Capture Driver)
042 * C:\Program Files\Paltalk Messenger\Paltalk.exe (AVM Software Inc.) {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE}
042 GUID / CLSID not found {92780B25-18CC-41C8-B9BE-3C9C571A8263}
042 GUID / CLSID not found {2670000A-7350-4f3c-8081-5663EE0C6C49}
043 GUID / CLSID not found {491A6C2B-1046-486b-8A8F-7D26BCB79A9B}
043 GUID / CLSID not found {AFA7DB99-3E4D-4396-94F8-B0B135BCB472}
060 GUID / CLSID not found {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
061 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
064 C:\Windows\system32\user32.dll (Microsoft Corporation)
100 Start Page HKLM :

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

104 C:\Windows\DOWNLO~1\bmchat.ocx {7253A666-804A-1108-A4DC-00E04C504788}
104 C:\Program Files\Oracle\JInitiator 1.3.1.29\bin\npjinit13129.dll (Oracle Corporation) {CAFECAFE-0013-0001-0029-ABCDEFABCDEF}
105 تحميل الكل بواسطة Internet Download Manager : C:\Program Files\Internet Download Manager\IEGetAll.htm
105 تحميل بواسطة Internet Download Manager : C:\Program Files\Internet Download Manager\IEExt.htm
120 NameServer {4311910F-BDE1-4DC2-BE11-7BF7579A9EF9} : 86.51.35.24 86.51.34.24
170 {e6294879-e52d-11e0-97ea-001fe1f222e2} : G:\AutoRun.exe
170 G : G:\AutoRun.exe
173 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
221 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
227 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
251 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
Missing files
-------------
002 C:\Users\yah\AppData\Local\Temp\zxq2\mbam.exe
011 C:\Users\yah\AppData\Local\Temp\cpuz135\cpuz135_x32.sys
011 C:\Windows\system32\drivers\mbamswissarmy.sys
011 System32\drivers\rdvgkmd.sys
011 System32\drivers\synth3dvsc.sys
011 C:\Windows\system32\drivers\tsusbhub.sys
223 C:\Users\yah\AppData\Local\Temp\zxq2\mbamext.dll
225 C:\Users\yah\AppData\Local\Temp\zxq2\mbamext.dll
225 C:\Users\yah\AppData\Local\Temp\zxq2\mbamext.dll

 

[البارون]

اخوي ركز في طريقة حفظ الملف

حمل الاداة التالية واتبع الشرح لعمل تقرير ورفعه​

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

​

​

اعمل كما الصورة لبدء الفحص​

​

ثم اعمل التالي لحفظ ملف التقريرر​

​

هذا هو التقرير المطلوب​

بعد حفظه قم بضغط الملف >>>

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

وارفع الملف هنا​

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

​

 

[وحيد_الليل]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

 

[وحيد_الليل]

تم عمل المطلوب اخوي ماذا افعل بعدها

 

[M.$py.M]

امحي هذه القيمة من الهايجاك

C:\Program Files\Ask.com\Updater\Updater.exe

 

[وحيد_الليل]

كيف اقوم بمحوها

 

[M.$py.M]

عفون على تأخيري

تفضل اخي

لحذف القيم المطلوب منك حذفها اتبع التالي

ضع اشارة الصح على كل القيم المطلوب منك حذفها حسب الشرح التالي

موفق

 

[وحيد_الليل]

اخوي لم اجد هذه القيمة في الهايجاك

 

[وحيد_الليل]

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 11:57:56 PM, on 12/31/2011
Platform: Windows 7 SP1 (WinNT 6.00.3504)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\proXPN\bin\proxpn.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Nimbuzz\Nimbuzz.exe
C:\Program Files\uTorrent\uTorrent.exe
C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Paltalk Messenger\paltalk.exe
C:\Users\yah\AppData\Local\Pandion\Application\pandion.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\SmartCam\SmartCam.exe
C:\Program Files\PC Connectivity Solution\Transports\NclMSBTSrvEx.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil11e_ActiveX.exe
C:\Windows\system32\taskeng.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Zyzoom_Forum_Tools\zHijak.com
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Users\yah\AppData\Local\Temp\zxq2\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Nimbuzz] C:\Program Files\Nimbuzz\Nimbuzz.exe
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKCU\..\Run: [Facebook Update] "C:\Users\yah\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
O4 - HKCU\..\Run: [NokiaSuite.exe] C:\Program Files\Nokia\Nokia Suite\NokiaSuite.exe -tray
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Google Update] "C:\Users\yah\AppData\Local\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - Startup: Pandion.lnk = C:\Users\yah\AppData\Local\Pandion\Application\pandion.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: ???C? ??? OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: ??&?C? ??? OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~4\Office12\ONBttnIE.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~4\Office12\REFIEBAR.DLL
O9 - Extra button: Atomic Email Hunter - {491A6C2B-1046-486b-8A8F-7D26BCB79A9B} - C:\Program Files\AtomPark\Atomic Email Hunter\ie.htm (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Atomic Email Hunter - {491A6C2B-1046-486b-8A8F-7D26BCB79A9B} - C:\Program Files\AtomPark\Atomic Email Hunter\ie.htm (file missing) (HKCU)
O9 - Extra button: Email Extractor - {AFA7DB99-3E4D-4396-94F8-B0B135BCB472} - res://C:\Program%20Files\Advanced%20Email%20Extractor%20PRO\AeePMsie.dll/page.html (file missing) (HKCU)
O9 - Extra 'Tools' menuitem: Advanced Email Extractor - {AFA7DB99-3E4D-4396-94F8-B0B135BCB472} - res://C:\Program%20Files\Advanced%20Email%20Extractor%20PRO\AeePMsie.dll/page.html (file missing) (HKCU)
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O16 - DPF: {7253A666-804A-1108-A4DC-00E04C504788} (BMChat Control) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {CAFECAFE-0013-0001-0029-ABCDEFABCDEF} (JInitiator 1.3.1.29) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O17 - HKLM\System\CCS\Services\Tcpip\..\{4311910F-BDE1-4DC2-BE11-7BF7579A9EF9}: NameServer = 86.51.35.24 86.51.34.24
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Google Update Service (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Service (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Installer Service - Unknown owner - C:\ProgramData\NokiaInstallerCache\ProductCache\{D5878294-C113-43c5-A24F-FC333C52015A}\{DB24A9E5-A068-43DD-88D0-B51BED3C0B99}\Installer\InstallerService.exe
O23 - Service: Nakido - Nakido - C:\Program Files\Nakido\nakido.exe
O23 - Service: Remote Packet Capture Protocol v.0 (experimental) (rpcapd) - CACE Technologies, Inc. - C:\Program Files\WinPcap\rpcapd.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TeamViewer 7 (TeamViewer7) - TeamViewer GmbH - C:\Program Files\TeamViewer\Version7\TeamViewer_Service.exe
--
End of file - 7741 bytes