تم حل المشكلة مشكله في برنامج الياهو +سكايبي

[السامرائي]

السلام عليكم رحمة الله وبركاته

بعد التحية والسلام يامعاشر ال زيزووم

لدينا مشكله والحقيقه جدا اتعبتني والبركه فيكم ان شاء الله

وهذه صور المشكله + التقارير

الصورة الاخير تعرض برامج بدء التشغبل

التقارير
الرن سكنر

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

......................
النضام وبرامجه



====== معلومات نظام التشغيل ======

X86 WIN_7 7601 Service Pack 1


====== قائمة البرامج المثبتة ======

Adobe Flash Player 11 ActiveX
Adobe Flash Player 11 Plugin
Adobe Shockwave Player 11.5
Ashampoo Burning Studio Elements 10.0.9
CCleaner
CometBird 11.0 (x86 en-US)
FastStone Capture 6.9
FormatFactory 2.95
Foxit Reader v5.0.1 Build 0523
Golden Al-Wafi Translator
HijackThis 2.0.2
Internet Download Manager
Java Auto Updater
Java(TM) 6 Update 26
K-Lite Codec Pack 7.1.0 (Full)
Light Image Resizer 4.0.4.8
Maxthon 3
Microsoft .NET Framework 4.5
Microsoft .NET Framework 4.5
Microsoft Application Error Reporting
Microsoft Office Access MUI (Arabic) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (Arabic) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (Arabic) 2007
Microsoft Office InfoPath MUI (Arabic) 2007
Microsoft Office OneNote MUI (Arabic) 2007
Microsoft Office Outlook Connector
Microsoft Office Outlook MUI (Arabic) 2007
Microsoft Office PowerPoint MUI (Arabic) 2007
Microsoft Office Proof (Arabic) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proofing (Arabic) 2007
Microsoft Office Publisher MUI (Arabic) 2007
Microsoft Office Shared MUI (Arabic) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Word MUI (Arabic) 2007
Microsoft Silverlight
Microsoft Text-to-Speech Engine 4.0 (English)
Nimbuzz 2.3.1
NVIDIA 3D Vision Controller Driver 301.42
NVIDIA 3D Vision Driver 301.42
NVIDIA Graphics Driver 301.42
NVIDIA PhysX
NVIDIA PhysX System Software 9.12.0213
NVIDIA Stereoscopic 3D Driver
NVIDIA Update 1.8.15
REALTEK Wireless LAN Driver and Utility
Skype Click to Call
Skype™ 5.10
WinRAR 4.20 (32-بت)
Yahoo! Messenger
Your.Uninstaller 7.3.2011.02

..........................................................

تقرير الهايجاك

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 09:41:14 م, on 14/09/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\System32\runouce.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Zyzoom_Forum_Tools\zRunScanner.com
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Zyzoom_Forum_Tools\zHijak.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {a1e75a0e-4397-4ba8-bb50-e19fb66890f4} - (no file)
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GR469A~1.DLL
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O4 - HKLM\..\Run: [Runonce] C:\Windows\system32\runouce.exe
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-21-2221176230-18032491-2675471121-1001\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'UpdatusUser')
O4 - HKUS\S-1-5-21-2221176230-18032491-2675471121-1001\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'UpdatusUser')
O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GRA32A~1.DLL
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\Windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Realtek87B - Realtek - C:\Program Files\REALTEK\RTL8187 Wireless LAN Utility\RtlService.exe
O23 - Service: Skype C2C Service - Skype Technologies S.A. - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe
O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Program Files\Skype\Updater\Updater.exe
O23 - Service: NVIDIA Stereoscopic 3D Driver Service (Stereo Service) - NVIDIA Corporation - C:\Program Files\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

--
End of file - 5747 bytes
..............................................

والبركــــه في الشباب ان شاء الله

ومن الله التوفيق
​

 

[الخفـوق]

اخوي المشكله مو بالبرنامج


الياهو تم منعه عندنا ف ما ادري بالنسبه للعراق :d:




........


من الصوره الاولى فضلا ً اضغط على تفاصيل والصق رقم الخطأ


...


من الصوره الثانيه // يلزمك اعادة تثبيت برنامج Smileys




>>>>>>


احتمال حتى الفيس بوك راح يلحقهم :hh:


نتيجة للحاصل




جاري تحليل تقرير الرن سكنر


​

 

[الخفـوق]

+


اعمل هذا الفحص فضلا ً


اعمل فحص ببرنامج

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

​

 

[السامرائي]

Problem Event Name: APPCRASH
Application Name: IELowutil.exe
Application Version: 8.0.7600.16385
Application Timestamp: 476635a6
Fault Module Name: IELowutil.exe
Fault Module Version: 8.0.7600.16385
Fault Module Timestamp: 476635a6
Exception Code: 80000003
Exception Offset: 0002615f
OS Version: 6.1.7601.2.1.0.256.1
Locale ID: 2049
Additional Information 1: a9f7
Additional Information 2: a9f71671e0c5b1c9bb7f7dd4205adfe5
Additional Information 3: 925b
Additional Information 4: 925bd629155f034bc4f2a958d35313f4
​

 

[السامرائي]

من الصوره الثانيه // يلزمك اعادة تثبيت برنامج Smileys ??

ماهو هذا البرنامج هل عندك معلومات عنه ؟؟؟​

 

[السامرائي]

حبيبي نورتني وكل الهلا بيك بدووون اخوانا في السعوديه وين نروح



هذا تقرير المالوير بايت


Malwarebytes' Anti-Malware 1.51.2.1300

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Database version: 912091407

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

15/09/2012 05:52:37 ص
mbam-log-2012-09-15 (05-52-37).txt

Scan type: Full scan (C:\|D:\|E:\|F:\|G:\|)
Objects scanned: 276700
Time elapsed: 21 minute(s), 0 second(s)

Memory Processes Infected: 1
Memory Modules Infected: 0
Registry Keys Infected: 1
Registry Values Infected: 1
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 41

Memory Processes Infected:
c:\Windows\System32\runouce.exe (Worm.Runouce) -> 2332 -> Unloaded process successfully.

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\IEINSTAL.EXE (Virus.Chir) -> Quarantined and deleted successfully.

Registry Values Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\Runonce (Worm.Runouce) -> Value: Runonce -> Quarantined and deleted successfully.

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\Users\windows-7\Desktop\برنآمج زخرٍفه الكـَآبه.exe (Trojan.Logger) -> Quarantined and deleted successfully.
c:\NVIDIA\displaydriver\301.42\winvista_win7\English\setup.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\NVIDIA\displaydriver\301.42\winvista_win7\English\display.driver\dbinstaller.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\NVIDIA\displaydriver\301.42\winvista_win7\English\display.update\comupdatus.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\NVIDIA\displaydriver\301.42\winvista_win7\English\display.update\daemonu.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\NVIDIA\displaydriver\301.42\winvista_win7\English\nv3dvision\3dvision_301.42.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\program files\internet explorer\ieinstal.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\program files\internet explorer\ielowutil.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\program files\Ashampoo\ashampoo burning studio elements\cancelautoplay.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\program files\common files\microsoft shared\ink\mip.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\program files\common files\microsoft shared\ink\shapecollector.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\program files\common files\microsoft shared\ink\TabTip.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\program files\dvd maker\DVDMaker.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\programdata\Yahoo!\YUpdater\yupdater.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\Windows\write.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
c:\Windows\System32\write.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-ie-ielowutil_31bf3856ad364e35_8.0.7600.16385_none_2106a98149904819\ielowutil.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-ieinstal_31bf3856ad364e35_8.0.7601.17514_none_055d8a4166e66f09\ieinstal.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-m..ommandlineutilities_31bf3856ad364e35_6.1.7600.16385_none_7cf343cac8a829ec\attrib.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-o..calmediadisc-wizard_31bf3856ad364e35_6.1.7600.16385_none_1a620ef7a9388190\DVDMaker.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-security-secedit_31bf3856ad364e35_6.1.7600.16385_none_aebd843e13122315\SecEdit.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-t..etpc-mathinputpanel_31bf3856ad364e35_6.1.7601.17514_none_cca8ed03af2d8a7b\mip.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-t..nputpersonalization_31bf3856ad364e35_6.1.7600.16385_none_3f82691927a7cab9\shapecollector.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-tabletpc-inputpanel_31bf3856ad364e35_6.1.7601.17514_none_13967fb1d5c46629\TabTip.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-writewin_31bf3856ad364e35_6.1.7600.16385_none_db699b3f5190c6d8\write.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
c:\Windows\winsxs\x86_microsoft-windows-write_31bf3856ad364e35_6.1.7600.16385_none_5f5928533e6b72c0\write.exe (Trojan.FakeMS) -> Quarantined and deleted successfully.
d:\790ab2f6c9dd34e3d931\Setup.exe (Virus.Chir) -> Quarantined and deleted successfully.
d:\790ab2f6c9dd34e3d931\setuputility.exe (Virus.Chir) -> Quarantined and deleted successfully.
e:\cayas.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.
e:\$RECYCLE.BIN\s-1-5-21-2221176230-18032491-2675471121-1000\$RVSKC1X.exe (Virus.Chir) -> Quarantined and deleted successfully.
e:\قسم البرامج بانواعه\البرامج الجديده\البرامج الغير المضغوطه\opera_1200_int_setup.exe (Virus.Chir) -> Quarantined and deleted successfully.
e:\قسم البرامج بانواعه\البرامج الجديده\البرامج الغير المضغوطه\flash player10 plugin& active x.exe (Virus.Chir) -> Quarantined and deleted successfully.
e:\قسم البرامج بانواعه\البرامج الجديده\البرامج الغير المضغوطه\maax_idm_605b14_2.exe (Virus.Chir) -> Quarantined and deleted successfully.
e:\قسم البرامج بانواعه\البرامج الجديده\البرامج الغير المضغوطه\install_flash_player_ax.exe (Virus.Chir) -> Quarantined and deleted successfully.
e:\قسم البرامج بانواعه\البرامج الجديده\البرامج الغير المضغوطه\wrar420a.exe (Virus.Chir) -> Quarantined and deleted successfully.
e:\قسم البرامج بانواعه\البرامج الجديده\البرامج الغير المضغوطه\ymsgr1100_2009_us.exe (Virus.Chir) -> Quarantined and deleted successfully.
f:\rutdwr.pif (Malware.Packer.Gen) -> Quarantined and deleted successfully.
f:\العاب\games (289).exe (Virus.Chir) -> Quarantined and deleted successfully.
f:\جديد\mf4010_mfdrivers_win_x32_en_7\Setup.exe (Virus.Chir) -> Quarantined and deleted successfully.
f:\جديد\mf4010_mfdrivers_win_x32_en_7\misc\DelDrv.exe (Virus.Chir) -> Quarantined and deleted successfully.
c:\Windows\System32\runouce.exe (Worm.Runouce) -> Delete on reboot.
​

 

[السامرائي]

شباب وينكم ياااريت احد يساعدني في حل مشكله برنامج الياهوو في كل الاصدارات تضهر نفس المشكله ​

 

[الخفـوق]

انت ياغالي مُـصاب ب دودة الكترونيه
تنتشر عن طريق الايميل ـ اسمها


Worm.Runouce

Email-Worm:W32/Runouce​

​

​

​

​

​

[FONT=Arial, Verdana, Helvetica, sans-serif]المالوير بايت قام بالواجب[/FONT]
[FONT=Arial, Verdana, Helvetica, sans-serif]
[/FONT]
[FONT=Arial, Verdana, Helvetica, sans-serif]بس للاطمئنان طبق الفحص بالاداه التاليه لازالتها //[/FONT]
[FONT=Arial, Verdana, Helvetica, sans-serif]

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

[/FONT]
[FONT=Arial, Verdana, Helvetica, sans-serif]

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

[/FONT]

​

 

[السامرائي]

حبيبي الخفوق المشكله في الصوره الاولى انحلت بس بقت عندي مشكله برنامج الياهو في هذه الصوره

يااخوي والله حرت وجربت اكثر الاصدارات ونفس المشكله تضهر ​

 

[السامرائي]

up​

 

[الخفـوق]

اخوي الصوره تقول يجب عليك اعادة تثبيت برنامج السمايلات​

Smiley

التابع ل الياهو لان حصل له تلف

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

[/URL]​

 

[السامرائي]

k:​

 

[السامرائي]

تسلم يل الغلا اخوي الخفوق اني اصلا حذفت وندوز 7 ونصبت وندوز 8 واختفت المشكله .. ولو رجعت راح جرب تنصيب برنامج السمــايـلـ

جــزاك الله خـــيــرا وبـــارك الله فــيك واحــسنـ اليــكــ وتم حل المشكله بنجاح

k: k:​

​

 

[مـوآدع]

يغلق
​