مشكلتي مع الشاشه زرقاء

  • بادئ الموضوع بادئ الموضوع walid ali
  • تاريخ البدء تاريخ البدء
  • المشاهدات 1,983
walid ali

walid ali

زيزوومى محترف
إنضم
13 يونيو 2008
المشاركات
2,399
مستوى التفاعل
63
النقاط
740
الإقامة
ارض الله
غير متصل
السلام عليكم ورحمة الله وبركاته

الرجاء المساعده في مشكلة الشاشه الزرقاء

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 04:02:43 ?, on 02/01/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Zyzoom_Forum_Tools\zHijak.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
R3 - URLSearchHook: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll
O1 - Hosts: 74.208.10.249 gs.apple.com
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
O2 - BHO: Hotspot Shield - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [NSU_agent] "C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1851646003-2863220358-1690656889-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1851646003-2863220358-1690656889-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: DfLogon - LogonDll.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: ???? Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ???? Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (hshld) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Intel Corporation - C:\Windows\system32\IProsetMonitor.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe

--
End of file - 11164 bytes

​
 

توقيع : walid ali
ترتيب حسب التاريخ ترتيب حسب الأصوات
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

تقرير هايجيك + البرامج المثبته + سجلات النظام والاخطاء
​
 
توقيع : techno
تأييد 0
====== ??????? ???? ??????? ======

X86 WIN_7 7601 Service Pack 1


====== ????? ??????? ??????? ======

Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Alcor Micro USB Card Reader
Alcor Micro USB Card Reader
Apple Application Support
Apple Mobile Device Support
Apple Software Update
avast! Internet Security
Bing Bar
Bonjour
D3DX10
Fuse Drivers
Google Chrome
Google Update Helper
HKS-1000 iVMS(For DS-40XX Series)
HKS-1000 iVMS(For DS-40XX Series)
Hotspot Shield 2.23
Hotspot Shield Toolbar
HWK Suite
HWK Support Suite
Intel(R) Network Connections 16.6.126.0
Intel(R) Network Connections 16.6.126.0
iTunes
Java Auto Updater
Java(TM) 6 Update 30
Junk Mail filter update
Mesh Runtime
Messenger Companion
Messenger Companion
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile
Microsoft Antimalware
Microsoft Application Error Reporting
Microsoft IntelliPoint 8.2
Microsoft IntelliPoint 8.2
Microsoft Office File Validation Add-In
Microsoft Office Outlook Connector
Microsoft Office Outlook Connector
Microsoft Office Professional Edition 2003
Microsoft Security Client
Microsoft Security Essentials
Microsoft Silverlight
Microsoft SQL Server 2005 Compact Edition [ENU]
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.30319
Mozilla Firefox 9.0.1 (x86 en-GB)
MSVC80_x86
MSVC90_x86
MSVCRT
MSXML 4.0 SP2 (KB954430)
MSXML 4.0 SP2 (KB973688)
MSXML 4.0 SP3 Parser
MSXML 4.0 SP3 Parser (KB973685)
Nokia Connectivity Cable Driver
Nokia Flashing Cable Driver
Nokia PC Suite
Nokia PC Suite
Nokia Software Updater
NVIDIA 3D Vision Controller Driver 285.62
NVIDIA 3D Vision Driver 285.62
NVIDIA Control Panel 285.62
NVIDIA Display Control Panel
NVIDIA Drivers
NVIDIA Graphics Driver 285.62
NVIDIA Install Application
NVIDIA PhysX
NVIDIA PhysX System Software 9.11.0621
NVIDIA Stereoscopic 3D Driver
NVIDIA Update 1.5.20
NVIDIA Update Components
PC Connectivity Solution
Phoenix Service Software
Phoenix Service Software 2011.02.000.44842
PL-2303 USB-to-Serial
Qualcomm Atheros Fast Reconnect
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
RealUpgrade 1.1
Registry Mechanic 10.0
Samsung Mobile phone USB driver Drive Software
Samsung New PC Studio
Samsung New PC Studio
Samsung PC Studio 3 USB Driver Installer
SAMSUNG USB Driver for Mobile Phones
Security Update for Microsoft .NET Framework 4 Client Profile (KB2518870)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2539636)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2572078)
Security Update for Microsoft .NET Framework 4 Client Profile (KB2656351)
Skype Click to Call
Skype™ 5.5
Update for Microsoft .NET Framework 4 Client Profile (KB2468871)
Update for Microsoft .NET Framework 4 Client Profile (KB2533523)
uTorrentBar Toolbar
Windows Driver Package - Nokia Modem (02/25/2011 4.7)
Windows Driver Package - Nokia Modem (02/25/2011 7.01.0.9)
Windows Driver Package - Nokia Modem (03/05/2008 3.7)
Windows Driver Package - Nokia Modem (03/13/2008 6.86.0.1)
Windows Driver Package - Nokia pccsmcfd (08/22/2008 7.0.0.0)
Windows Driver Package - SarasSoft UFSx Driver Package (05/18/2011 3.08.14)
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Essentials
Windows Live Family Safety
Windows Live Family Safety
Windows Live Family Safety
Windows Live ID Sign-in Assistant
Windows Live Installer
Windows Live Mail
Windows Live Mail
Windows Live Mesh
Windows Live Mesh
Windows Live Mesh
Windows Live Mesh ActiveX Control for Remote Connections
Windows Live Messenger
Windows Live Messenger
Windows Live Messenger
Windows Live Messenger Companion Core
Windows Live MIME IFilter
Windows Live Movie Maker
Windows Live Movie Maker
Windows Live Movie Maker
Windows Live Photo Common
Windows Live Photo Common
Windows Live Photo Common
Windows Live Photo Gallery
Windows Live Photo Gallery
Windows Live PIMT Platform
Windows Live Remote Client
Windows Live Remote Client Resources
Windows Live Remote Client Resources
Windows Live Remote Service
Windows Live Remote Service Resources
Windows Live Remote Service Resources
Windows Live SOXE
Windows Live SOXE Definitions
Windows Live UX Platform
Windows Live UX Platform Language Pack
Windows Live UX Platform Language Pack
Windows Live Writer
Windows Live Writer
Windows Live Writer
Windows Live Writer
Windows Live Writer Resources
Windows Live Writer Resources
WinRAR 4.10 beta 1 (32-bit)
Yahoo! Messenger
Yahoo! Software Update
Yahoo! Toolbar
???? Windows Live
???? ???? ActiveX ????? ?? Windows Live Mesh ????????? ???????
???? ??? Windows Live
 
توقيع : walid ali
تأييد 0
====== ??? ????? ?????? ======

Computer Name: walidgrey-PC
Event Code: 7030
Message: The FsUsbExService service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Record Number: 771
Source Name: Service Control Manager
Time Written: 20111208141419.495117-000
Event Type: Error
User:

Computer Name: walidgrey-PC
Event Code: 4001
Message: WLAN AutoConfig service has successfully stopped.

Record Number: 574
Source Name: Microsoft-Windows-WLAN-AutoConfig
Time Written: 20111208135142.877773-000
Event Type: Warning
User: NT AUTHORITY\SYSTEM

Computer Name: walidgrey-PC
Event Code: 7030
Message: The ServiceLayer service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Record Number: 545
Source Name: Service Control Manager
Time Written: 20111208134958.132656-000
Event Type: Error
User:

Computer Name: walidgrey-PC
Event Code: 7030
Message: The ServiceLayer service is marked as an interactive service. However, the system is configured to not allow interactive services. This service may not function properly.
Record Number: 534
Source Name: Service Control Manager
Time Written: 20111208134003.363125-000
Event Type: Error
User:

Computer Name: walidgrey-PC
Event Code: 1014
Message: Name resolution for the name teredo.ipv6.microsoft.com timed out after none of the configured DNS servers responded.
Record Number: 485
Source Name: Microsoft-Windows-DNS-Client
Time Written: 20111208132327.593375-000
Event Type: Warning
User: NT AUTHORITY\NETWORK SERVICE



===== ??? ????? ??????? =====

Computer Name: walidgrey-PC
Event Code: 33
Message: Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL". Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for detailed diagnosis.
Record Number: 216
Source Name: SideBySide
Time Written: 20111208134014.000000-000
Event Type: Error
User:

Computer Name: walidgrey-PC
Event Code: 33
Message: Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL". Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for detailed diagnosis.
Record Number: 215
Source Name: SideBySide
Time Written: 20111208134014.000000-000
Event Type: Error
User:

Computer Name: walidgrey-PC
Event Code: 33
Message: Activation context generation failed for "C:\Windows\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.762_none_0c178a139ee2a7ed\MFC80U.DLL". Dependent Assembly Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0" could not be found. Please use sxstrace.exe for detailed diagnosis.
Record Number: 214
Source Name: SideBySide
Time Written: 20111208134013.000000-000
Event Type: Error
User:

Computer Name: walidgrey-PC
Event Code: 1008
Message: The Windows Search Service is starting up and attempting to remove the old search index {Reason: Full Index Reset}.

Record Number: 138
Source Name: Microsoft-Windows-Search
Time Written: 20111208132431.000000-000
Event Type: Warning
User:

Computer Name: walidgrey-PC
Event Code: 10
Message: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Record Number: 136
Source Name: Microsoft-Windows-WMI
Time Written: 20111208232242.000000-000
Event Type: Error
User:



===== ????? ?????? =====

Computer Name: 37L4247F27-08
Event Code: 4672
Message: Special privileges assigned to new logon.

Subject:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7

Privileges: SeAssignPrimaryTokenPrivilege
SeTcbPrivilege
SeSecurityPrivilege
SeTakeOwnershipPrivilege
SeLoadDriverPrivilege
SeBackupPrivilege
SeRestorePrivilege
SeDebugPrivilege
SeAuditPrivilege
SeSystemEnvironmentPrivilege
SeImpersonatePrivilege
Record Number: 5
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111208231706.531250-000
Event Type: Audit Success
User:

Computer Name: 37L4247F27-08
Event Code: 4624
Message: An account was successfully logged on.

Subject:
Security ID: S-1-5-18
Account Name: 37L4247F27-08$
Account Domain: WORKGROUP
Logon ID: 0x3e7

Logon Type: 5

New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x1d8
Process Name: C:\Windows\System32\services.exe

Network Information:
Workstation Name:
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: Advapi
Authentication Package: Negotiate
Transited Services: -
Package Name (NTLM only): -
Key Length: 0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 4
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111208231706.531250-000
Event Type: Audit Success
User:

Computer Name: 37L4247F27-08
Event Code: 4902
Message: The Per-user audit policy table was created.

Number of Elements: 0
Policy ID: 0x269e4
Record Number: 3
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111208231706.125000-000
Event Type: Audit Success
User:

Computer Name: 37L4247F27-08
Event Code: 4624
Message: An account was successfully logged on.

Subject:
Security ID: S-1-0-0
Account Name: -
Account Domain: -
Logon ID: 0x0

Logon Type: 0

New Logon:
Security ID: S-1-5-18
Account Name: SYSTEM
Account Domain: NT AUTHORITY
Logon ID: 0x3e7
Logon GUID: {00000000-0000-0000-0000-000000000000}

Process Information:
Process ID: 0x4
Process Name:

Network Information:
Workstation Name: -
Source Network Address: -
Source Port: -

Detailed Authentication Information:
Logon Process: -
Authentication Package: -
Transited Services: -
Package Name (NTLM only): -
Key Length: 0

This event is generated when a logon session is created. It is generated on the computer that was accessed.

The subject fields indicate the account on the local system which requested the logon. This is most commonly a service such as the Server service, or a local process such as Winlogon.exe or Services.exe.

The logon type field indicates the kind of logon that occurred. The most common types are 2 (interactive) and 3 (network).

The New Logon fields indicate the account for whom the new logon was created, i.e. the account that was logged on.

The network fields indicate where a remote logon request originated. Workstation name is not always available and may be left blank in some cases.

The authentication information fields provide detailed information about this specific logon request.
- Logon GUID is a unique identifier that can be used to correlate this event with a KDC event.
- Transited services indicate which intermediate services have participated in this logon request.
- Package name indicates which sub-protocol was used among the NTLM protocols.
- Key length indicates the length of the generated session key. This will be 0 if no session key was requested.
Record Number: 2
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111208231704.484375-000
Event Type: Audit Success
User:

Computer Name: 37L4247F27-08
Event Code: 4608
Message: Windows is starting up.

This event is logged when LSASS.EXE starts and the auditing subsystem is initialized.
Record Number: 1
Source Name: Microsoft-Windows-Security-Auditing
Time Written: 20111208231704.328125-000
Event Type: Audit Success
User:



===== ????? ?????? ??????? =====

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 08/12/2011 06:05:45 ?
User Name : All Users
Exception Code : 0xc0000005
Exception Offset : 0x71ba6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_11fb3f02425f449cecde0a6c4d7106a30c7c9dc_0535bbf9\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 08/12/2011 06:02:58 ?
User Name : All Users
Exception Code : 0xc0000005
Exception Offset : 0x6bfc6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_6d316251799bbab9a6b77e63ee55f6611b026_08473657\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 08/12/2011 06:03:14 ?
User Name : All Users
Exception Code : 0xc0000005
Exception Offset : 0x6bfc6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_6d316251799bbab9a6b77e63ee55f6611b026_0a076d94\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 12/12/2011 04:19:18 ?
User Name : All Users
Exception Code : 0xc0000005
Exception Offset : 0x6d4b6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_d6dcc01518e17a193cec358e3b7fec0118310ab_0a79e569\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 12/12/2011 04:18:51 ?
User Name : All Users
Exception Code : 0xc0000005
Exception Offset : 0x6d4b6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_d6dcc01518e17a193cec358e3b7fec0118310ab_0b6187a9\Report.wer
==================================================

==================================================
Process File : regsvr32.exe
Event Name : Stopped working
Event Time : 15/12/2011 05:08:45 ?
User Name : All Users
Exception Code : 0xc0000005
Exception Offset : 0x0001d33d
Fault Module Name : msvcrt.dll
Fault Module Version: 7.0.7600.16385
Process Path : C:\Windows\system32\regsvr32.exe
Report File Size : 10,192
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_regsvr32.exe_cf37e599958e55d2f84ee226ede059ed58adba9_08dade4d\Report.wer
==================================================

==================================================
Process File : tinyumbrella-5.10.00.exe
Event Name : Stopped working
Event Time : 18/12/2011 05:50:44 ?
User Name : All Users
Exception Code : 0xc0000005
Exception Offset : 0x000567c9
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : C:\Users\walid grey\Downloads\tinyumbrella-5.10.00.exe
Report File Size : 14,490
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_tinyumbrella-5.1_2edddeaebec1ab51a14cd5d9fcea5259a511ae_02612089\Report.wer
==================================================

==================================================
Process File : tinyumbrella-5.10.00.exe
Event Name : Stopped working
Event Time : 18/12/2011 05:50:42 ?
User Name : All Users
Exception Code : 0xc0000005
Exception Offset : 0x000567c9
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : C:\Users\walid grey\Downloads\tinyumbrella-5.10.00.exe
Report File Size : 14,490
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\AppCrash_tinyumbrella-5.1_2edddeaebec1ab51a14cd5d9fcea5259a511ae_08c51aad\Report.wer
==================================================

==================================================
Process File : WerFault.exe
Event Name : Shut down unexpectedly
Event Time : 27/12/2011 07:32:17 ?
User Name : All Users
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Windows\System32\WerFault.exe
Report File Size : 4,686
Report File Path : C:\Users\All Users\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_0ba17f0e\Report.wer
==================================================

==================================================
Process File : iexplore.exe
Event Name : Stopped working
Event Time : 28/12/2011 05:18:03 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x65510fd0
Fault Module Name : SeaNote.dll_unloaded
Fault Module Version: 0.0.0.0
Process Path : C:\Program Files\Internet Explorer\iexplore.exe
Report File Size : 18,548
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_iexplore.exe_2c1262bac78892b87eea505a48e8485051df58a_1d2e4615\Report.wer
==================================================

==================================================
Process File : iexplore.exe
Event Name : Stopped working
Event Time : 28/12/2011 03:16:44 ?
User Name : walid grey
Exception Code : 0xc0000374
Exception Offset : 0x000c37b7
Fault Module Name : StackHash_a376
Fault Module Version: 6.1.7601.17514
Process Path : C:\Program Files\Internet Explorer\iexplore.exe
Report File Size : 17,074
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_iexplore.exe_86d3de62a48c36ce7411ece4a63443d3d08cba3d_1ed75062\Report.wer
==================================================

==================================================
Process File : iexplore.exe
Event Name : Stopped working
Event Time : 18/12/2011 06:03:52 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x71f40fd0
Fault Module Name : SeaNote.dll_unloaded
Fault Module Version: 0.0.0.0
Process Path : C:\Program Files\Internet Explorer\iexplore.exe
Report File Size : 13,458
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_iexplore.exe_b9bb9a97207198b1edb44a58788d7988681811c_0ea529d5\Report.wer
==================================================

==================================================
Process File : iTunes.exe
Event Name : Stopped working
Event Time : 19/12/2011 06:34:08 ?
User Name : walid grey
Exception Code : 0xc000000d
Exception Offset : 0x0001e44a
Fault Module Name : MSVCR80.dll
Fault Module Version: 8.0.50727.6195
Process Path : C:\Program Files\iTunes\iTunes.exe
Report File Size : 24,682
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_iTunes.exe_e7b8167beb51f93424c5747ade791323efc942d6_05af6129\Report.wer
==================================================

==================================================
Process File : MTB_NK.EXE
Event Name : Stopped working
Event Time : 12/12/2011 04:32:29 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset :
Fault Module Name : StackHash_0a9e
Fault Module Version: 0.0.0.0
Process Path : C:\Program Files\GriffinTeam\MT-Box\MTB_NK.EXE
Report File Size : 7,390
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_MTB_NK.EXE_3a8d675effc5fafc277b1a4298aabeb5354273_0e5df974\Report.wer
==================================================

==================================================
Process File : phoenix.exe
Event Name : Stopped working
Event Time : 14/12/2011 09:44:03 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00055f1b
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : C:\Program Files\Nokia\Phoenix\phoenix.exe
Report File Size : 20,460
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_phoenix.exe_829f7a5cb46c91bae332d3674d2d5d90cb9c1d71_11531027\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 05:57:17 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00258aea
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : J:\iphone )walid\redsn0w_win_0.9.9b1\redsn0w.exe
Report File Size : 6,732
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_33166299f8e7998320ec74ecbc351d345635a_087c0817\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 05:57:13 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00258aea
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : J:\iphone )walid\redsn0w_win_0.9.9b1\redsn0w.exe
Report File Size : 6,732
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_33166299f8e7998320ec74ecbc351d345635a_08a3f7ea\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 05:57:24 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00258aea
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : J:\iphone )walid\redsn0w_win_0.9.9b1\redsn0w.exe
Report File Size : 6,732
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_33166299f8e7998320ec74ecbc351d345635a_09ec21c9\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 15/12/2011 02:50:32 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )walid\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 10,564
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_01745cae\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 05:00:30 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )walid\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 10,564
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_09441870\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 05:38:19 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 10,810
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_09c3020f\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 04:51:36 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )walid\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 13,804
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_0c082557\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 05:31:40 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 10,234
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_0c449d38\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 17/12/2011 06:16:08 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )walid\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 10,264
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_0c815622\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 05:10:39 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )walid\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 10,564
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_0cb98305\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 17/12/2011 06:17:50 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 10,234
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_0e06e08b\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 17/12/2011 05:10:00 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )walid\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 10,564
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_34708688735682f27fb694c8e4b258262c64768_159ce1b1\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 28/12/2011 12:03:49 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x0025edaa
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : C:\Users\walid grey\Desktop\redsn0w_win_0.9.9b8\redsn0w.exe
Report File Size : 6,930
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_37f6bb265136d6317a58f55b4cf0caa7df70e640_07fb9619\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 28/12/2011 12:04:02 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x0025edaa
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : C:\Users\walid grey\Desktop\redsn0w_win_0.9.9b8\redsn0w.exe
Report File Size : 6,930
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_37f6bb265136d6317a58f55b4cf0caa7df70e640_085bc557\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 18/12/2011 06:12:30 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x0025edaa
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : C:\Users\WALIDG~1\AppData\Local\Temp\Rar$EXa0.281\redsn0w_win_0.9.9b8\redsn0w.exe
Report File Size : 6,930
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_37f6bb265136d6317a58f55b4cf0caa7df70e640_0a49102c\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 18/12/2011 07:40:31 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x0025edaa
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : C:\Users\walid grey\Desktop\redsn0w_win_0.9.9b8\redsn0w.exe
Report File Size : 6,798
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_37f6bb265136d6317a58f55b4cf0caa7df70e640_1419a4e5\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 28/12/2011 12:04:08 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x0025edaa
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : C:\Users\walid grey\Desktop\redsn0w_win_0.9.9b8\redsn0w.exe
Report File Size : 6,930
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_37f6bb265136d6317a58f55b4cf0caa7df70e640_162bdd92\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 18/12/2011 06:11:48 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x0025edaa
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : C:\Users\WALIDG~1\AppData\Local\Temp\Rar$EXa0.413\redsn0w_win_0.9.9b8\redsn0w.exe
Report File Size : 6,930
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_37f6bb265136d6317a58f55b4cf0caa7df70e640_1640695d\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 18/12/2011 06:12:16 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x0025edaa
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : C:\Users\walid grey\Desktop\redsn0w_win_0.9.9b8\redsn0w.exe
Report File Size : 6,798
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_37f6bb265136d6317a58f55b4cf0caa7df70e640_177ce880\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 18/12/2011 06:12:09 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x0025edaa
Fault Module Name : redsn0w.exe
Fault Module Version: 0.0.0.0
Process Path : C:\Users\walid grey\Desktop\redsn0w_win_0.9.9b8\redsn0w.exe
Report File Size : 6,798
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_37f6bb265136d6317a58f55b4cf0caa7df70e640_17d4bf0e\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 15/12/2011 02:45:58 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d94
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )walid\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 14,032
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_68e4d4b349e384f9e8a9af4ec053a382b09bba2d_0b88392c\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 19/12/2011 05:35:58 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d94
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )\redsn0w_win_0.9.6b5\redsn0w.exe
Report File Size : 13,774
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_68e4d4b349e384f9e8a9af4ec053a382b09bba2d_0d0c84da\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 28/12/2011 01:48:23 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00052d37
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : J:\iphone )\redsn0w_win_0.9.6rc14\redsn0w.exe
Report File Size : 10,608
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_b7bcd9b6d1d0ff5d4b8958cf9a653fe021f1b042_16027624\Report.wer
==================================================

==================================================
Process File : redsn0w.exe
Event Name : Stopped working
Event Time : 28/12/2011 12:02:16 ?
User Name : walid grey
Exception Code : 0xc0000005
Exception Offset : 0x00009cc6
Fault Module Name : msvcrt.dll
Fault Module Version: 7.0.7600.16385
Process Path : J:\iphone )walid\redsn0w_win_0.9.9b1\redsn0w.exe
Report File Size : 7,376
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_redsn0w.exe_cd72611f641e33574f81af26953ac3a331ff85_0a7631b7\Report.wer
==================================================

==================================================
Process File : firefox.exe
Event Name : Stopped responding and was closed
Event Time : 24/12/2011 12:32:17 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Mozilla Firefox\firefox.exe
Report File Size : 16,448
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppHang_firefox.exe_135e4f1a97822366accbfb2584189c72e0632_0645440d\Report.wer
==================================================

==================================================
Process File : phoenix.exe
Event Name : Stopped responding and was closed
Event Time : 10/12/2011 06:09:25 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Nokia\Phoenix\phoenix.exe
Report File Size : 20,924
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppHang_phoenix.exe_b32fd734a6b93cf4352c6126d7de151e82bd78_11bc24e5\Report.wer
==================================================

==================================================
Process File : phoenix.exe
Event Name : Stopped responding and was closed
Event Time : 25/12/2011 03:52:33 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Nokia\Phoenix\phoenix.exe
Report File Size : 21,348
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppHang_phoenix.exe_e189d3227d83739e2dfac4ca225af44eaeced3_132cc9bc\Report.wer
==================================================

==================================================
Process File : BingBar.exe
Event Name : BingBarAppError
Event Time : 28/12/2011 05:58:47 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft\BingBar\BingBar.exe
Report File Size : 1,830
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_7.0.619.0_2821d992f97ec985bb7f3b8bf011b2ce76a079f3_0ce3c5e0\Report.wer
==================================================

==================================================
Process File : BingBar.exe
Event Name : BingBarAppError
Event Time : 24/12/2011 12:30:09 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft\BingBar\BingBar.exe
Report File Size : 1,830
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_7.0.619.0_2821d992f97ec985bb7f3b8bf011b2ce76a079f3_0dc33178\Report.wer
==================================================

==================================================
Process File : BingBar.exe
Event Name : BingBarAppError
Event Time : 28/12/2011 03:15:57 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft\BingBar\BingBar.exe
Report File Size : 1,830
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_7.0.619.0_2821d992f97ec985bb7f3b8bf011b2ce76a079f3_17be92ee\Report.wer
==================================================

==================================================
Process File : BingBar.exe
Event Name : BingBarAppError
Event Time : 28/12/2011 03:16:25 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft\BingBar\BingBar.exe
Report File Size : 1,830
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_7.0.619.0_2821d992f97ec985bb7f3b8bf011b2ce76a079f3_17def0be\Report.wer
==================================================

==================================================
Process File : BingBar.exe
Event Name : BingBarAppError
Event Time : 28/12/2011 05:58:47 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft\BingBar\BingBar.exe
Report File Size : 1,830
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_7.0.619.0_e8c59c19d6ace7a387c61f14c5b0152b66afb8_0ce3c5e0\Report.wer
==================================================

==================================================
Process File : BingBar.exe
Event Name : BingBarAppError
Event Time : 24/12/2011 12:30:08 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft\BingBar\BingBar.exe
Report File Size : 1,830
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_7.0.619.0_e8c59c19d6ace7a387c61f14c5b0152b66afb8_0dc3309e\Report.wer
==================================================

==================================================
Process File : BingBar.exe
Event Name : BingBarAppError
Event Time : 28/12/2011 03:15:52 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft\BingBar\BingBar.exe
Report File Size : 1,830
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_7.0.619.0_e8c59c19d6ace7a387c61f14c5b0152b66afb8_17be9000\Report.wer
==================================================

==================================================
Process File : BingBar.exe
Event Name : BingBarAppError
Event Time : 28/12/2011 03:16:25 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft\BingBar\BingBar.exe
Report File Size : 1,830
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_7.0.619.0_e8c59c19d6ace7a387c61f14c5b0152b66afb8_17def031\Report.wer
==================================================

==================================================
Process File : iexplore.exe
Event Name : Webpage display problem
Event Time : 08/12/2011 03:42:19 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Internet Explorer\iexplore.exe
Report File Size : 1,712
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_iexplore.exe_12df8271b62395a348f102b12959f9768e2baf9_0d47c41e\Report.wer
==================================================

==================================================
Process File : msseces.exe
Event Name : MSSecurityClient
Event Time : 17/12/2011 05:56:52 ?
User Name : walid grey
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Program Files\Microsoft Security Client\msseces.exe
Report File Size : 2,098
Report File Path : C:\Users\walid grey\AppData\Local\Microsoft\Windows\WER\ReportArchive\NonCritical_msseces.exe_377ea9a5914802254a6727d468dc5a5c9cadfb_0f3bad04\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 08/12/2011 06:05:45 ?
User Name :
Exception Code : 0xc0000005
Exception Offset : 0x71ba6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_11fb3f02425f449cecde0a6c4d7106a30c7c9dc_0535bbf9\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 08/12/2011 06:02:58 ?
User Name :
Exception Code : 0xc0000005
Exception Offset : 0x6bfc6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_6d316251799bbab9a6b77e63ee55f6611b026_08473657\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 08/12/2011 06:03:14 ?
User Name :
Exception Code : 0xc0000005
Exception Offset : 0x6bfc6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_6d316251799bbab9a6b77e63ee55f6611b026_0a076d94\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 12/12/2011 04:19:18 ?
User Name :
Exception Code : 0xc0000005
Exception Offset : 0x6d4b6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_d6dcc01518e17a193cec358e3b7fec0118310ab_0a79e569\Report.wer
==================================================

==================================================
Process File : explorer.exe
Event Name : Stopped working
Event Time : 12/12/2011 04:18:51 ?
User Name :
Exception Code : 0xc0000005
Exception Offset : 0x6d4b6c6a
Fault Module Name : StackHash_b4ee
Fault Module Version: 0.0.0.0
Process Path : C:\Windows\explorer.exe
Report File Size : 6,410
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_explorer.exe_d6dcc01518e17a193cec358e3b7fec0118310ab_0b6187a9\Report.wer
==================================================

==================================================
Process File : regsvr32.exe
Event Name : Stopped working
Event Time : 15/12/2011 05:08:45 ?
User Name :
Exception Code : 0xc0000005
Exception Offset : 0x0001d33d
Fault Module Name : msvcrt.dll
Fault Module Version: 7.0.7600.16385
Process Path : C:\Windows\system32\regsvr32.exe
Report File Size : 10,192
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_regsvr32.exe_cf37e599958e55d2f84ee226ede059ed58adba9_08dade4d\Report.wer
==================================================

==================================================
Process File : tinyumbrella-5.10.00.exe
Event Name : Stopped working
Event Time : 18/12/2011 05:50:44 ?
User Name :
Exception Code : 0xc0000005
Exception Offset : 0x000567c9
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : C:\Users\walid grey\Downloads\tinyumbrella-5.10.00.exe
Report File Size : 14,490
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_tinyumbrella-5.1_2edddeaebec1ab51a14cd5d9fcea5259a511ae_02612089\Report.wer
==================================================

==================================================
Process File : tinyumbrella-5.10.00.exe
Event Name : Stopped working
Event Time : 18/12/2011 05:50:42 ?
User Name :
Exception Code : 0xc0000005
Exception Offset : 0x000567c9
Fault Module Name : ntdll.dll
Fault Module Version: 6.1.7601.17514
Process Path : C:\Users\walid grey\Downloads\tinyumbrella-5.10.00.exe
Report File Size : 14,490
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\AppCrash_tinyumbrella-5.1_2edddeaebec1ab51a14cd5d9fcea5259a511ae_08c51aad\Report.wer
==================================================

==================================================
Process File : WerFault.exe
Event Name : Shut down unexpectedly
Event Time : 27/12/2011 07:32:17 ?
User Name :
Exception Code :
Exception Offset :
Fault Module Name :
Fault Module Version:
Process Path : C:\Windows\System32\WerFault.exe
Report File Size : 4,686
Report File Path : C:\ProgramData\Microsoft\Windows\WER\ReportArchive\Kernel_0_0_cab_0ba17f0e\Report.wer
==================================================




===== ????? ?????? ??????? =====

==================================================
Dump File : 122711-23781-01.dmp
Crash Time : 27/12/2011 07:31:12 ?
Bug Check String : IRQL_NOT_LESS_OR_EQUAL
Bug Check Code : 0x0000000a
Parameter 1 : 0x000000b4
Parameter 2 : 0x00000002
Parameter 3 : 0x00000000
Parameter 4 : 0x82c9efd9
Caused By Driver :
Caused By Address :
File Description :
Product Name :
Company :
File Version :
Processor : 32-bit
Computer Name :
Full Path : C:\Windows\Minidump\122711-23781-01.dmp
Processors Count : 4
Major Version : 15
Minor Version : 7601
Dump File Size : 131,072
==================================================
 
توقيع : walid ali
تأييد 0
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 05:33:47 ?, on 02/01/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskhost.exe
C:\Program Files\Microsoft Security Client\msseces.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Microsoft IntelliPoint\ipoint.exe
C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
C:\Program Files\AVAST Software\Avast\AvastUI.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Hotspot Shield\bin\openvpntray.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\NOTEPAD.EXE
C:\Zyzoom_Forum_Tools\zHijak.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
R3 - URLSearchHook: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll
O1 - Hosts: 74.208.10.249 gs.apple.com
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
O2 - BHO: Hotspot Shield - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll
O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll
O3 - Toolbar: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll
O4 - HKLM\..\Run: [MSC] "C:\Program Files\Microsoft Security Client\msseces.exe" -hide -runkey
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [IntelliPoint] "c:\Program Files\Microsoft IntelliPoint\ipoint.exe"
O4 - HKLM\..\Run: [AmIcoSinglun] C:\Program Files\AmIcoSingLun\AmIcoSinglun.exe
O4 - HKLM\..\Run: [SSDMonitor] C:\Program Files\Common Files\PC Tools\sMonitor\SSDMonitor.exe
O4 - HKLM\..\Run: [avast] "C:\Program Files\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [NSU_agent] "C:\Program Files\Nokia\Nokia Software Updater\nsu3ui_agent.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [AutoStartNPSAgent] C:\Program Files\Samsung\Samsung New PC Studio\NPSAgent.exe
O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\PROGRA~1\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-1851646003-2863220358-1690656889-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-1851646003-2863220358-1690656889-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O9 - Extra button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O20 - Winlogon Notify: DfLogon - LogonDll.dll (file missing)
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Program Files\AVAST Software\Avast\AvastSvc.exe
O23 - Service: avast! Firewall - AVAST Software - C:\Program Files\AVAST Software\Avast\afwServ.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: FsUsbExService - Teruten - C:\Windows\system32\FsUsbExService.Exe
O23 - Service: ???? Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: ???? Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (hshld) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Routing Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: Hotspot Shield Monitoring Service (HssWd) - Unknown owner - C:\Program Files\Hotspot Shield\bin\hsswd.exe
O23 - Service: Intel(R) PROSet Monitoring Service - Intel Corporation - C:\Windows\system32\IProsetMonitor.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe
O23 - Service: PC Tools Startup and Shutdown Monitor service (PCToolsSSDMonitorSvc) - Unknown owner - C:\Program Files\Common Files\PC Tools\sMonitor\StartManSvc.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
O23 - Service: ZAtheros Wlan Agent - Atheros - C:\Program Files\Qualcomm Atheros Fast Reconnect\Ath_WlanAgent.exe

--
End of file - 11343 bytes
 
توقيع : walid ali
تأييد 0
حبيبي وليد احذف هذه القيم من الهايجاك

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي
 
توقيع : M.$py.M
تأييد 0
توقيع : walid ali
تأييد 0
سؤال اخي العزيز وليد متى ظهرت الشاشه واخر برنامج قمت بتنصيبه
سيما وجود برنامج الافاست ومايكروسوفت اسانسيال
​
 
توقيع : techno
تأييد 0
techno قال:
سؤال اخي العزيز وليد متى ظهرت الشاشه واخر برنامج قمت بتنصيبه
سيما وجود برنامج الافاست ومايكروسوفت اسانسيال
​
أنقر للتوسيع...
HSS-2.23-install-p14-263-conduit
Hotspot Shield.
 
توقيع : walid ali
تأييد 0
توقيع : techno
تأييد 0
بالهايجيك احذف التالي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


R3 - URLSearchHook: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll

R3 - URLSearchHook: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll

O1 - Hosts: 74.208.10.249 gs.apple.com

O2 - BHO: uTorrentBar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll

O2 - BHO: Hotspot Shield - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll

O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\HssIE\HssIE.dll

O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\YTSingl eInstance.dll

O3 - Toolbar: uTorrentBar Toolbar - {bf7380fa-e3b4-4db2-af3e-9d8783a45bfc} - C:\Program Files\uTorrentBar\prxtbuTor.dll

O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)

O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn0\yt.dll

O3 - Toolbar: Hotspot Shield Toolbar - {c95a4e8e-816d-4655-8c79-d736da1adb6d} - C:\Program Files\Hotspot_Shield\prxtbHots.dll

O20 - Winlogon Notify: DfLogon - LogonDll.dll (file missing)

حمل هذا البرنامج
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


واحذف التاليه اسمائهم

Bing Bar
Bonjour
Hotspot Shield 2.23
Hotspot Shield Toolbar
uTorrentBar Toolbar

لحذف برنامج مايكروسوفت للحمايه اتبع التالي
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


ثم طبق التالي
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


بعد اعادة التشغيل خبرنا بالنتائج
:smile:


















​
 
توقيع : techno
تأييد 0
يجب تسجيل الدخول أو التسجيل كي تتمكن من الرد هنا.
عودة
أعلى