Noro19
زيزوومي جديد
غير متصل
السلام عليكم ورحمة الله وبركاته
جهازي اصبح بطئ جدا كما أنه عند فتح الهوتميل يقوم بفتح ايميل غريب لا اعرفه اشعر بأنه مخترق وبعد فحصه بالهايجاك ظهرت لي نتيجة التقرير كالتالي
كيف يمكنني حل هذه المشكلة؟ ولكم جزيل الشكر
جهازي اصبح بطئ جدا كما أنه عند فتح الهوتميل يقوم بفتح ايميل غريب لا اعرفه اشعر بأنه مخترق وبعد فحصه بالهايجاك ظهرت لي نتيجة التقرير كالتالي
كود:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:10:43 م, on 26/01/12
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Users\nany\AppData\Roaming\cybelsoft.exe
C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
C:\Windows\system32\svchost.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\ProgramData\paintSched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Users\nany\AppData\Roaming\Synaptics.exe
C:\Users\nany\AppData\Roaming\Policies.exe
C:\Users\nany\AppData\Roaming\WinRAR.exe
C:\Users\nany\AppData\Roaming\ATI.exe
C:\Windows\system32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\Macromed\Flash\FlashUtil10w_ActiveX.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = [URL]http://go.microsoft.com/fwlink/?LinkId=54896[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = [URL]http://go.microsoft.com/fwlink/?LinkId=69157[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = [URL]http://go.microsoft.com/fwlink/?LinkId=54896[/URL]
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = [URL]http://go.microsoft.com/fwlink/?LinkId=54896[/URL]
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = [URL]http://go.microsoft.com/fwlink/?LinkId=69157[/URL]
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
F2 - REG:system.ini: Shell=explorer.exe, svdhalp.exe
F3 - REG:win.ini: load=C:\Users\nany\LOCALS~1\Temp\fe16e9ff0000f48b.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {2C019FED-AFC4-0DEA-FA61-045A2ADA0786} - c:\windows\system32\azcgtdlo.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrowserrecordplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [IAStorIcon] C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint2K\Apoint.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Real\RealPlayer\Update\realsched.exe" -osboot
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware (reboot)] "C:\Program Files\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKLM\..\Run: [opikndss] C:\Windows\System32\opikndss.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [AutorunRemover.exe] C:\Program Files\AutorunRemover\AutorunRemover.exe -Hide
O4 - HKLM\..\Run: [NT Kernel System] C:\Windows\TEMP\btdho.exe
O4 - HKLM\..\Run: [Windows Network System] C:\Windows\system32\config\systemprofile\AppData\Roaming\imgconvert.exe
O4 - HKLM\..\Run: [paintSched] C:\ProgramData\paintSched.exe
O4 - HKLM\..\Run: [isoexpand] C:\Windows\system32\config\systemprofile\AppData\Roaming\isoexpand.exe
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [ODBC] C:\Users\nany\AppData\Roaming\smss.exe
O4 - HKCU\..\Run: [Synaptics] C:\Users\nany\AppData\Roaming\Synaptics.exe
O4 - HKCU\..\Run: [Policies] C:\Users\nany\AppData\Roaming\Policies.exe
O4 - HKCU\..\Run: [WinRAR] C:\Users\nany\AppData\Roaming\WinRAR.exe
O4 - HKCU\..\Run: [Microsoft] C:\Users\nany\AppData\Roaming\Microsoft.exe
O4 - HKCU\..\Run: [ATI] C:\Users\nany\AppData\Roaming\ATI.exe
O4 - HKCU\..\Run: [cybelsoft] C:\Users\nany\AppData\Roaming\cybelsoft.exe
O4 - HKCU\..\Run: [paintSched] C:\ProgramData\paintSched.exe
O4 - HKCU\..\Run: [isoexpand] C:\Users\nany\AppData\Roaming\isoexpand.exe
O4 - HKLM\..\Policies\Explorer\Run: [SXC] C:\Windows\Sxc\svchost.exe
O4 - HKLM\..\Policies\Explorer\Run: [51206] C:\PROGRA~2\LOCALS~1\Temp\da2c7bff0012e9c2.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [opikndss] C:\Windows\system32\config\systemprofile\opikndss.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [isoexpand] C:\Windows\system32\config\systemprofile\AppData\Roaming\isoexpand.exe (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Policies\Explorer\Run: [ATI] C:\Windows\system32\config\systemprofile\AppData\Roaming\smss.exe (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [opikndss] C:\Windows\system32\config\systemprofile\opikndss.exe (User 'Default user')
O4 - HKUS\.DEFAULT\..\Policies\Explorer\Run: [ATI] C:\Windows\system32\config\systemprofile\AppData\Roaming\smss.exe (User 'Default user')
O4 - Startup: hadeeocj.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} ("Ma-Config.com control) - [URL]http://fichiers.touslesdrivers.com/maconfig/MaConfig_5_1_4_0.cab[/URL]
O16 - DPF: {CF84DAC5-A4F5-419E-A0BA-C01FFD71112F} (SysInfo Class) - [URL]http://content.systemrequirementslab.com.s3.amazonaws.com/global/bin/srldetect_intel_4.4.24.0.cab[/URL]
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - [URL]http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab[/URL]
O23 - Service: AMD External Events Utility - AMD - C:\Windows\system32\atiesrxx.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel(R) Corporation - C:\Program Files\Intel\WiFi\bin\EvtEng.exe
O23 - Service: Intel(R) Rapid Storage Technology (IAStorDataMgrSvc) - Intel Corporation - C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
O23 - Service: Ma-Config Service (maconfservice) - CybelSoft - C:\Program Files\ma-config.com\maconfservice.exe
O23 - Service: O2FLASH - O2Micro International - C:\Windows\system32\DRIVERS\o2flash.exe
O23 - Service: NVIDIA Update Service (ONETWO) - Unknown owner - C:\Windows\system32\config\systemprofile\AppData\Local\NVIDIA Corporation\Update\daemonupd.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel(R) Corporation - C:\Program Files\Common Files\Intel\WirelessCommon\RegSrvc.exe
O23 - Service: svclocks - Pinnacle Systems - C:\Windows\system32\drivers\svclocks.exe
--
End of file - 8832 bytesكيف يمكنني حل هذه المشكلة؟ ولكم جزيل الشكر
k:
