مشكلة في بعض درايفرات الهارديسك

][_القيصرٍ_][ · 23 سبتمبر 2008

السلام عليكم ورحمة الله وبركاته

اخواني انا عندي مشكلة صارت لي بالهارديسك ومدري شلون حلها انا عندي هارديسكين بالجهاز

واحد شغال تمام كل الدرايفرات الي فيه

ولكن الثاني فيه درايفرين ماتنفتح وكل مافتحها تجيني رسالة وفيها ملفات ضرورية احتاجها ودرايفر شغال تمام ماعليه خلاف

اتمنى اذا تقدرون تساعدوني في نسخ الملفات الي بداخل الدرايفرات او حل المشكلة بالدرايفرات

وهذه الصورة اللي تظهر لي اذا فتحت واحد من الدرايفرين

:er:

Dr_Osama · 23 سبتمبر 2008

جرب كدة تدخل من خلال اسطوانة لايف سى دى
بس باعتقد ان الموضوع صعب بعد ظهور هذه الرسالة

السّاجد لله · 23 سبتمبر 2008

اعمل التالي

عطل جميع برامج الحماية ,,
وحمل هذه الاداة واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم

اعمل تقرير للهايجاك

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log
لحظات .. ويظهر لك تقرير اعمل تحديد الكل ==> انسخه والصقه بردك القادم

][_القيصرٍ_][ · 24 سبتمبر 2008

يعطيكم العافية اخواني على ردودكم ومساعدتكم وهذا هو التقرير اخووي

ComboFix 08-09-22.06 - AL-Qysr 09/24/2008 1:51:06.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.525 [GMT 3:00]
Running from: C:\Documents and Settings\AL-Qysr\سطح المكتب\ComboFix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@11B8@14539D0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@11B8@14539E0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@1668@14739D0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@1668@14739E0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@1780@14739D0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@1780@14739E0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@5038@14739D0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@5038@14739E0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@A60@14539D0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@A60@14539E0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@D84@14539D0.###
C:\Documents and Settings\AL-Qysr\Application Data\.#\MBX@D84@14539E0.###
C:\windows\system32\kakle.dll
.
((((((((((((((((((((((((( Files Created from 2008-08-23 to 2008-09-23 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-09-23 23:23 26,424,864 --sha-w C:\windows\system32\drivers\fidbox.dat
2008-09-23 23:20 1,399,584 --sha-w C:\windows\system32\drivers\fidbox2.dat
2008-09-23 23:19 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\DMCache
2008-09-23 23:08 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-09-23 23:04 --------- d-sh--w C:\Documents and Settings\AL-Qysr\Application Data\.#
2008-09-23 23:02 383,000 --sha-w C:\windows\system32\drivers\fidbox.idx
2008-09-23 23:02 142,628 --sha-w C:\windows\system32\drivers\fidbox2.idx
2008-09-23 23:00 17,580 ----a-w C:\Documents and Settings\AL-Qysr\catchme.zip
2008-09-23 22:41 --------- d-----w C:\Documents and Settings\All Users\Application Data\Kaspersky Lab
2008-09-23 11:11 20 ----a-w C:\sccfg.sys
2008-09-23 09:54 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\BinarySense
2008-09-23 09:53 --------- d-----w C:\Program Files\Common Files\BinarySense
2008-09-23 09:53 --------- d-----w C:\Program Files\BinarySense
2008-09-23 04:08 --------- d-----w C:\Program Files\PowerArchiver
2008-09-23 04:04 --------- d-----w C:\Documents and Settings\All Users\Application Data\NOS
2008-09-23 04:03 --------- d-----w C:\Program Files\NOS
2008-09-13 09:39 --------- d-----w C:\Program Files\Athan
2008-09-13 09:38 737,280 ----a-w C:\windows\iun6002.exe
2008-09-12 07:13 1,788 ----a-w C:\windows\system32\PerfStringBackup.TMP
2008-08-30 16:33 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\tor
2008-08-30 15:48 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\Vidalia
2008-08-30 02:12 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\Crystal Player
2008-08-30 02:09 --------- d-----w C:\Program Files\Crystal Player
2008-08-30 02:00 --------- d-----w C:\Program Files\Gabest
2008-08-29 16:56 15,781 ----a-w C:\windows\system32\drivers\mdc8021x.sys
2008-08-28 15:01 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\IDM
2008-08-25 20:34 --------- d-----w C:\Program Files\Advanced IP Scanner
2008-08-23 21:40 --------- d-----w C:\Program Files\Vidalia Bundle
2008-08-21 15:24 --------- d-----w C:\Program Files\Windows Live Safety Center
2008-08-20 12:32 --------- d-----w C:\Program Files\LtUcx
2008-08-17 15:20 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\cleaner
2008-08-16 01:34 --------- d-----w C:\Program Files\ibraheem_tech
2008-08-15 20:22 --------- d-----w C:\Program Files\Messenger Plus! Live
2008-08-15 16:48 --------- d-----w C:\Program Files\Ares
2008-08-14 10:25 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\PC Suite
2008-08-12 09:48 --------- d-----w C:\Program Files\swfscanner
2008-08-12 04:32 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\Nokia
2008-08-06 19:23 96,976 ----a-w C:\windows\system32\drivers\klin.dat
2008-08-04 08:26 --------- d-----w C:\Program Files\TechSmith
2008-08-04 08:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\TechSmith
2008-08-04 08:25 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2008-08-04 04:37 --------- d-----w C:\Program Files\MSXML 6.0
2008-08-03 12:31 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\Image Zone Express
2008-08-02 23:34 --------- d-----w C:\Documents and Settings\AL-Qysr\Application Data\HP
2008-08-02 06:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\PC Suite
2008-08-02 06:06 0 ---ha-w C:\windows\system32\drivers\MsftWdf_Kernel_01005_Coinstaller_Critical.Wdf
2008-08-02 06:06 0 ---ha-w C:\windows\system32\drivers\Msft_Kernel_ccdcmb_01005.Wdf
2008-08-02 06:01 --------- d-----w C:\Program Files\PC Connectivity Solution
2008-08-02 06:01 --------- d-----w C:\Program Files\Nokia
2008-08-02 06:01 --------- d-----w C:\Program Files\DIFX
2008-08-02 06:01 --------- d-----w C:\Program Files\Common Files\PCSuite
2008-08-02 06:01 --------- d-----w C:\Program Files\Common Files\Nokia
2008-08-02 05:59 --------- d-----w C:\Documents and Settings\All Users\Application Data\Installations
2008-08-02 05:56 --------- d-----w C:\Documents and Settings\All Users\Application Data\Downloaded Installations
2008-08-02 03:58 499,712 ----a-w C:\windows\system32\msvcp71.dll
2008-08-02 03:58 348,160 ----a-w C:\windows\system32\msvcr71.dll
2008-08-02 03:58 --------- d-----w C:\Program Files\Real
2008-08-02 03:58 --------- d-----w C:\Program Files\Common Files\xing shared
2008-08-02 03:58 --------- d-----w C:\Program Files\Common Files\Real
2008-08-01 00:15 --------- d-----w C:\Program Files\SWiSH v2.01
2008-07-24 10:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\McAfee
2008-07-24 09:54 87,855 ----a-w C:\windows\system32\drivers\klick.dat
2008-07-19 09:31 16,299,862 ------w C:\Persi0.sys
2008-07-19 08:47 71,429 ----a-w C:\windows\BricoPackUninst.cmd
2008-07-19 08:47 5,300 ----a-w C:\windows\BricoPackFoldersDelete.cmd
2008-07-12 11:00 218,624 ----a-w C:\windows\system32\uxtheme.dll
2008-07-11 23:34 73,216 ----a-w C:\windows\ST6UNST.EXE
2008-07-11 23:34 172,032 ------w C:\windows\Setup1.exe
2008-07-11 23:31 90,112 ----a-w C:\windows\system32\agsaami.dll
2008-07-11 23:31 610,304 ----a-w C:\windows\system32\agsaamg.dll
2008-07-11 23:31 372,736 ----a-w C:\windows\system32\agsaamc.dll
2008-07-11 23:31 2,535,424 ----a-w C:\windows\system32\agsaamj.dll
2008-07-11 23:31 196,608 ----a-w C:\windows\system32\maag.dll
2008-07-11 23:31 1,986,560 ----a-w C:\windows\system32\akll.dll
2008-07-11 23:31 1,245,184 ----a-w C:\windows\system32\bkll.dll
2008-07-11 23:31 1,212,416 ----a-w C:\windows\system32\ckll.dll
2008-07-11 15:44 155,995 ----a-w C:\windows\java\Packages\SOIQT3F3.ZIP
.
------- Sigcheck -------
06/13/2007 04:22 PM 974336 b9e4d85290e9ca0b404f6f137f8d8a0d C:\windows\explorer.exe
06/13/2007 04:10 PM 1030656 d0dc9258122f39129966649085f45880 C:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
08/03/2004 11:56 PM 1029632 932f97b77f2625f7ff7dfc97552548f8 C:\windows\$NtUninstallKB938828$\explorer.exe
06/13/2007 04:22 PM 974336 b9e4d85290e9ca0b404f6f137f8d8a0d C:\windows\system32\dllcache\explorer.exe
07/30/2007 07:19 PM 68440 84d9a61860272d6177d46c86b8431557 C:\windows\system32\wuauclt.exe
07/30/2007 07:19 PM 68440 84d9a61860272d6177d46c86b8431557 C:\windows\system32\dllcache\wuauclt.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [10/18/2007 11:34 AM 5724184]
"IDMan"="C:\Program Files\Internet Download Manager\IDMan.exe" [07/12/2008 03:39 AM 2594224]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [07/28/2007 04:53 PM 1230848]
"ctfmon.exe"="C:\windows\system32\ctfmon.exe" [08/03/2004 11:56 PM 15360]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DrvIcon"="C:\Program Files\VistaDriveIcon\DrvIcon.exe" [07/11/2008 07:12 AM 45056]
"TkBellExe"="C:\Program Files\Common Files\Real\Update_OB\realsched.exe" [08/02/2008 06:58 AM 185896]
"Athan"="C:\Program Files\Athan\Athan.exe" [08/18/2008 04:02 AM 1089536]
"SoundMan"="SOUNDMAN.EXE" [04/15/2005 06:01 AM 77824 C:\WINDOWS\SOUNDMAN.EXE]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [08/03/2004 11:56 PM 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="C:\\WINDOWS\\system32\\logonui.exe"
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\Antiwpa]
07/22/2006 11:49 PM 5376 C:\WINDOWS\system32\antiwpa.dll
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\DfLogon]
10/25/2007 04:28 PM 65536 C:\WINDOWS\system32\LogonDll.dll
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^HP Digital Imaging Monitor.lnk]
path=C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\HP Digital Imaging Monitor.lnk
backup=C:\WINDOWS\pss\HP Digital Imaging Monitor.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^Privoxy.lnk]
path=C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\Privoxy.lnk
backup=C:\windows\pss\Privoxy.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AFProg]
--a------ 06/26/2006 05:26 AM 118784 C:\Program Files\Hotspot Shield\AnchorFree\ctrl\AFController.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 08/03/2004 11:56 PM 15360 C:\WINDOWS\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
-ra------ 11/02/2004 03:59 AM 126976 C:\WINDOWS\system32\hkcmd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HP Software Update]
--a------ 05/11/2005 11:12 PM 49152 C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
-ra------ 11/02/2004 04:03 AM 155648 C:\WINDOWS\system32\igfxtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Nokia.PCSync]
--a------ 06/17/2008 04:00 PM 1249280 C:\Program Files\Nokia\Nokia PC Suite 7\PcSync2.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PC Suite Tray]
--a------ 06/18/2008 02:31 PM 1122816 C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 08/02/2008 06:58 AM 185896 C:\Program Files\Common Files\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Vidalia]
--a------ 08/26/2007 09:02 AM 11852288 C:\Program Files\Vidalia Bundle\Vidalia\vidalia.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"C:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 7.0.1.325\\English\\setup.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqste08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpofxm08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposfx08.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hposid01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqscnvw.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqkygrp.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpqCopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpfccopy.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpzwiz01.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\Unload\\HpqPhUnl.exe"=
"C:\\Program Files\\HP\\Digital Imaging\\bin\\hpoews01.exe"=
"C:\\AppServ\\Apache2\\bin\\Apache.exe"=
"C:\\AppServ\\www\\DigiChat Server.exe"=
"C:\\Program Files\\Ares\\Ares.exe"=
"C:\\Program Files\\Kaspersky Lab\\Kaspersky Internet Security 7.0\\avp.exe"=
R0 DeepFrz;DeepFrz;C:\windows\system32\drivers\DeepFrz.sys [10/25/2007 04:32 PM 131472]
R2 AVPNStarter;Steganos Anonym VPN Starter Service;C:\Program Files\Steganos Internet Anonym VPN\AVPNStarter.exe [02/25/2008 12:52 PM 21504]
R2 DigiChat_4.0_Server;DigiChat 4.0 Server;C:\AppServ\www\DIGICH~2.EXE [07/14/2008 03:26 PM 319488]
R2 HDDlife HDD Access service;HDDlife HDD Access service;C:\Program Files\Common Files\BinarySense\hldasvc.exe [02/15/2008 02:17 PM 832760]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;C:\windows\system32\DRIVERS\klim5.sys [12/13/2007 01:28 PM 24592]
R3 tapvpn;TAP VPN Adapter;C:\windows\system32\DRIVERS\tapvpn.sys [12/16/2006 11:37 PM 27136]
S3 getPlus(R) Helper;getPlus(R) Helper;C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [08/29/2008 10:00 AM 33752]
S3 tapavpn;Steganos Anonym VPN Adapter;C:\windows\system32\DRIVERS\tapavpn.sys [10/19/2007 11:50 AM 24320]
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
"C:\Program Files\Windows Sidebar\sidebar.exe" /RegServer
.
- - - - ORPHANS REMOVED - - - -
WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)

.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = about:blank
R1 -: HKCU-Internet Connection Wizard,ShellNext = hxxp://www.viruslist.com/ar/search?VN=Email-Worm.Win32.Runouce.b&referer=kis
R1 -: HKCU-Internet Settings,ProxyServer = ftp=127.0.0.1:8118;http=127.0.0.1:8118;https=127.0.0.1:8118;socks=127.0.0.1:9051
O8 -: &تصدير إلى Microsoft Excel - C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 -: تحميل الكل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 -: تحميل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEExt.htm
O8 -: تحميل محتوى فيديو (إف.إل.في) بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetVL.htm
O17 -: HKLM\CCS\Interface\{63C9E935-8FC0-4398-8FE6-8A88A375DF18}: NameServer = 212.19.48.14
O18 -: Handler: hddlife - {BD758015-47D9-477A-8873-4B688A2BC0E2} - C:\Program Files\Common Files\BinarySense\hlAPP.dll
O16 -: Microsoft XML Parser for Java -