مشكلة ZPACK gen2

[flo0na]

السلام عليكم اخواني

انا عندي مشكلة فيروس zpack gen 2

الافيرا كل شوي يطلع انه موجود

مادري وش اسوي معه

ساعدوني جزاكم الله خير

لان سبق ولقيت احد عانا من هالمشكله بالمنتدى وتم مساعدته وحل مشكلته مع هذا الفيروس

فارجوكم لا تخذلوني واعينوني اعانكم الله

نظام جهازي windows 8

برنامج الحمايه افيرا

 

[flo0na]

تقرير hijackthis

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:53:12 ص, on 15/02/14
Platform: Unknown Windows (WinNT 6.02.1008)
MSIE: Internet Explorer v11.0 (11.00.9600.16518)
Boot mode: Normal

Running processes:
C:\WINDOWS\SysWOW64\Rundll32.exe
C:\Program Files (x86)\Samsung\Settings\sSettings.exe
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmpA6EB.exe
C:\Users\فلونــــــالرسمعلىال\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe
C:\Windows\SysWOW64\rundll32.exe
C:\Program Files (x86)\uTorrent\uTorrent.exe
C:\WINDOWS\SysWOW64\regsvr32.exe
C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe
C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe
C:\Windows\SysWOW64\SupportAppXL\AutoDect.exe
C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe
C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
C:\Users\فلونــــــالرسمعلىال\AppData\Local\VNT\vntldr.exe
C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\PcfTray.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
C:\Program Files (x86)\Safari\Safari.exe
C:\Program Files (x86)\Safari\Apple Application Support\WebKit2WebProcess.exe
C:\Program Files (x86)\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: (no name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)
F2 - REG:system.ini: UserInit=userinit.exe
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealNetworks Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\IE\rndlbrowserrecordplugin.dll
O2 - BHO: Avira SearchFree Toolbar BHO - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (file missing)
O2 - BHO: PasswordBox Helper - {5DB69B97-934B-451D-94DB-32EF802A01CD} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll
O2 - BHO: (no name) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll
O2 - BHO: iToolsBHO - {E1499FE7-129D-4B6E-B681-DDF21E14172C} - C:\Users\فلونــــــالرسمعلىال\Documents\iTools\Plugin\iToolsBHO.dll
O2 - BHO: DVDVideoSoft.WebPageAdjuster - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O3 - Toolbar: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (file missing)
O4 - HKLM\..\Run: [Intel AppUp(SM) center] "C:\Program Files (x86)\Intel\IntelAppStore\bin\ismagent.exe" --domain-id F0399437-FD0C-4A48-B101-F0314A6172E4
O4 - HKLM\..\Run: [CLMLServer_For_P2G8] "C:\Program Files (x86)\CyberLink\Power2Go8\CLMLSvc_P2G8.exe"
O4 - HKLM\..\Run: [CLVirtualDrive] "C:\Program Files (x86)\CyberLink\Power2Go8\VirtualDrive.exe" /R
O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"
O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM\..\Run: [autodetect] C:\windows\SysWOW64\SupportAppXL\AutoDect.exe
O4 - HKLM\..\Run: [vProt] "C:\Program Files (x86)\AVG SafeGuard toolbar\vprot.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [mobilegeni daemon] C:\Program Files (x86)\Mobogenie\DaemonProcess.exe
O4 - HKLM\..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM\..\Run: [ApnTBMon] "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe"
O4 - HKLM\..\Run: [VNT] C:\Program Files (x86)\VNT\vntldr.exe
O4 - HKLM\..\Run: [Baidu PC Faster 4.0.0.0] "C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\PCFaster.exe" -auto -start
O4 - HKCU\..\Run: [FLV Player] C:\Users\فلونــــــالرسمعلىال\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe
O4 - HKCU\..\Run: [BackgroundContainer] "C:\WINDOWS\SysWOW64\Rundll32.exe" "C:\Users\فلونــــــالرسمعلىال\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun
O4 - HKCU\..\Run: [IRsoft] regsvr32.exe C:\Users\فلونــــــالرسمعلىال\AppData\Local\IRsoft\lzUserLibs.dll
O4 - HKCU\..\Run: [NextLive] C:\WINDOWS\SysWOW64\rundll32.exe "C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l
O4 - HKCU\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED
O4 - HKUS\S-1-5-21-17870659-1053336804-1393933880-1001\..\Run: [FLV Player] C:\Users\UpdatusUser\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe (User '?')
O4 - HKUS\S-1-5-21-17870659-1053336804-1393933880-1001\..\Run: [uTorrent] "C:\Program Files (x86)\uTorrent\uTorrent.exe" /MINIMIZED (User '?')
O4 - HKUS\S-1-5-21-17870659-1053336804-1393933880-1001\..\Run: [BackgroundContainer] "C:\WINDOWS\SysWOW64\Rundll32.exe" "C:\Users\فلونــــــالرسمعلىال\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun (User '?')
O4 - HKUS\S-1-5-21-17870659-1053336804-1393933880-1001\..\Run: [IRsoft] regsvr32.exe C:\Users\فلونــــــالرسمعلىال\AppData\Local\IRsoft\lzUserLibs.dll (User '?')
O4 - HKUS\S-1-5-21-17870659-1053336804-1393933880-1001\..\Run: [NextLive] C:\WINDOWS\SysWOW64\rundll32.exe "C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l (User '?')
O4 - HKUS\S-1-5-21-17870659-1053336804-1393933880-1001\..\Run: [crsscmgr] C:\Users\UpdatusUser\AppData\Roaming\Adobe\crsscmgr\crssc.exe (User '?')
O4 - HKUS\S-1-5-21-17870659-1053336804-1393933880-1001\..\RunOnce: [WAB Migrate] %ProgramFiles%\Windows Mail\wab.exe /Upgrade (User '?')
O4 - HKUS\S-1-5-21-17870659-1053336804-1393933880-1002\..\Run: [FLV Player] C:\Users\فلونــــــالرسمعلىال\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe (User '?')
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\Program Files\Microsoft Office 15\Root\Office15\EXCEL.EXE/3000
O8 - Extra context menu item: Free YouTube Download - C:\Program Files (x86)\Common Files\DVDVideoSoft\plugins\freeytvdownloader.htm
O8 - Extra context menu item: Se&nd to OneNote - res://C:\Program Files\Microsoft Office 15\Root\Office15\ONBttnIE.dll/105
O9 - Extra button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)
O9 - Extra button: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O9 - Extra 'Tools' menuitem: Free YouTube Download - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - C:\Program Files (x86)\Common Files\DVDVideoSoft\bin\IEDownloadMenuAndBtns.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O13 - Gopher Prefix:
O17 - HKLM\System\CCS\Services\Tcpip\..\{43C5718E-C234-4024-86A2-6A9E69FD2FEA}: NameServer = 8.8.8.8,8.8.4.4
O18 - Protocol: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - C:\Program Files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\17.1.3\ViProtocol.dll
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: @%SystemRoot%\system32\Alg.exe,-112 (ALG) - Unknown owner - C:\WINDOWS\System32\alg.exe (file missing)
O23 - Service: Avira Mail Protection (AntiVirMailService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe
O23 - Service: Avira Scheduler (AntiVirSchedulerService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira Real-Time Protection (AntiVirService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira Web Protection (AntiVirWebService) - Avira Operations GmbH & Co. KG - C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe
O23 - Service: Ask Update Service (APNMCP) - APN LLC. - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: AtherosSvc - Qualcomm Atheros Commnucations - C:\Program Files (x86)\Bluetooth Suite\adminservice.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Intel(R) Content Protection HECI Service (cphs) - Intel Corporation - C:\WINDOWS\SysWow64\IntelCpHeciSvc.exe
O23 - Service: Easy Launcher - Samsung Electronics CO., LTD. - C:\Program Files (x86)\Samsung\Settings\CmdServer\EasyLauncher.exe
O23 - Service: @%SystemRoot%\system32\efssvc.dll,-100 (EFS) - Unknown owner - C:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: @%systemroot%\system32\fxsresm.dll,-118 (Fax) - Unknown owner - C:\WINDOWS\system32\fxssvc.exe (file missing)
O23 - Service: خدمة Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: خدمة Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
O23 - Service: @%SystemRoot%\system32\ieetwcollectorres.dll,-1000 (IEEtwCollectorService) - Unknown owner - C:\WINDOWS\system32\IEEtwCollector.exe (file missing)
O23 - Service: Intel(R) Capability Licensing Service Interface - Intel(R) Corporation - C:\Program Files\Intel\iCLS Client\HeciServer.exe
O23 - Service: Intel(R) ME Service - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\FWService\IntelMeFWService.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Intel(R) Dynamic Application Loader Host Interface Service (jhi_service) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
O23 - Service: @keyiso.dll,-100 (KeyIso) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Intel(R) Management and Security Application Local Management Service (LMS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: @comres.dll,-2797 (MSDTC) - Unknown owner - C:\WINDOWS\System32\msdtc.exe (file missing)
O23 - Service: @%SystemRoot%\System32\netlogon.dll,-102 (Netlogon) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NVIDIA Display Driver Service (nvsvc) - Unknown owner - C:\windows\system32\nvvsvc.exe (file missing)
O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
O23 - Service: Baidu PC Faster Service 4.0.0.0 (PCFasterSvc_{PCFaster_4.0.0.0}) - Baidu Inc. - C:\Program Files (x86)\Baidu Security\PC Faster\4.0.0.0\PCFasterSvc.exe
O23 - Service: RealNetworks Downloader Resolver Service - Unknown owner - C:\Program Files (x86)\RealNetworks\RealDownloader\rndlresolversvc.exe
O23 - Service: @%systemroot%\system32\Locator.exe,-2 (RpcLocator) - Unknown owner - C:\WINDOWS\system32\locator.exe (file missing)
O23 - Service: @%SystemRoot%\system32\samsrv.dll,-1 (SamSs) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\snmptrap.exe,-3 (SNMPTRAP) - Unknown owner - C:\WINDOWS\System32\snmptrap.exe (file missing)
O23 - Service: @%systemroot%\system32\spoolsv.exe,-1 (Spooler) - Unknown owner - C:\WINDOWS\System32\spoolsv.exe (file missing)
O23 - Service: @%SystemRoot%\system32\sppsvc.exe,-101 (sppsvc) - Unknown owner - C:\WINDOWS\system32\sppsvc.exe (file missing)
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O23 - Service: SW Update Service (SWUpdateService) - Samsung Electronics CO., LTD. - C:\ProgramData\Samsung\SW Update Service\SWMAgent.exe
O23 - Service: @%SystemRoot%\system32\ui0detect.exe,-101 (UI0Detect) - Unknown owner - C:\WINDOWS\system32\UI0Detect.exe (file missing)
O23 - Service: Intel(R) Management and Security Application User Notification Service (UNS) - Intel Corporation - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
O23 - Service: @%SystemRoot%\system32\vaultsvc.dll,-1003 (VaultSvc) - Unknown owner - C:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: @%SystemRoot%\system32\vds.exe,-100 (vds) - Unknown owner - C:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: @%systemroot%\system32\vssvc.exe,-102 (VSS) - Unknown owner - C:\WINDOWS\system32\vssvc.exe (file missing)
O23 - Service: vToolbarUpdater17.1.3 - AVG Secure Search - C:\Program Files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\17.1.3\ToolbarUpdater.exe
O23 - Service: @%systemroot%\system32\wbengine.exe,-104 (wbengine) - Unknown owner - C:\WINDOWS\system32\wbengine.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-320 (WdNisSvc) - Unknown owner - C:\Program Files (x86)\Windows Defender\NisSrv.exe (file missing)
O23 - Service: @%ProgramFiles%\Windows Defender\MpAsDesc.dll,-310 (WinDefend) - Unknown owner - C:\Program Files (x86)\Windows Defender\MsMpEng.exe (file missing)
O23 - Service: @%Systemroot%\system32\wbem\wmiapsrv.exe,-110 (wmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\WmiApSrv.exe (file missing)
O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe (file missing)
O23 - Service: ZAtheros Bt and Wlan Coex Agent - Atheros - C:\Program Files (x86)\Bluetooth Suite\Ath_CoexAgent.exe

--
End of file - 15785 bytes

 

[Alp Arslan]

وعليكم السلام ورحمة الله وبركاته

اخذفي من تقرير الهايجاك مايلي


R3 - URLSearchHook: (no name) - {7473b6bd-4691-4744-a82b-7854eb3d70b6} - (no file)


O2 - BHO: Avira SearchFree Toolbar BHO - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (file missing)


O2 - BHO: PasswordBox Helper - {5DB69B97-934B-451D-94DB-32EF802A01CD} - (no file)


O2 - BHO: (no name) - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)


O3 - Toolbar: Avira SearchFree Toolbar - {41564952-412D-5637-4300-7A786E7484D7} - "C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7C\Passport.dll" (file missing)


O9 - Extra button: Rich Media Downloader - {A7DF592F-6E2A-45C4-9A87-4BD217D714ED} - (no file)


+ فحص برنامج مويلويربايت ضروري
من هنا
● مالوووير بااايت ●




​

 

[flo0na]

تم حذف اللي ابلغتوني عنهم ..

وهذا تقرير المالوير بعد حذف الفيروسات اللي طلعها



Malwarebytes Anti-Malware 1.75.0.1300

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

Database version: v2014.02.15.02

Windows 8 x64 NTFS
Internet Explorer 11.0.9600.16518
فلونــــــالرسمعلىال :: FTOMOMER [administrator]

15/04/35 06:13:01 ص
MBAM-log-2014-02-15 (07-44-59).txt

Scan type: Full scan (C:\|M:\|)
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 485135
Time elapsed: 1 hour(s), 30 minute(s), 57 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 1
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> No action taken.

Registry Keys Detected: 14
HKCR\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} (PUP.Optional.DefaultTab.A) -> No action taken.
HKCR\CLSID\{67BD9EEB-AA06-4329-A940-D250019300C9} (PUP.Optional.SoftwareUpdater) -> No action taken.
HKCR\TypeLib\{A0EE0278-2986-4E5A-884E-A3BF0357E476} (PUP.Optional.SoftwareUpdater) -> No action taken.
HKCR\Interface\{9EDC0C90-2B5B-4512-953E-35767BAD5C67} (PUP.Optional.SoftwareUpdater) -> No action taken.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{99C91FC5-DB5B-4AA0-BB70-5D89C5A4DF96} (PUP.Optional.SoftwareUpdater) -> No action taken.
HKCR\Updater.AmiUpd.1 (PUP.Optional.SoftwareUpdater) -> No action taken.
HKCR\Updater.AmiUpd (PUP.Optional.SoftwareUpdater) -> No action taken.
HKCR\Typelib\{DCABB943-792E-44C4-9029-ECBEE6265AF9} (PUP.Optional.OutBrowse) -> No action taken.
HKCR\Interface\{3408AC0D-510E-4808-8F7B-6B70B1F88534} (PUP.Optional.OutBrowse) -> No action taken.
HKCR\CLSID\{3c471948-f874-49f5-b338-4f214a2ee0b1} (PUP.Optional.Conduit) -> No action taken.
HKCU\Software\AppDataLow\Software\Crossrider (PUP.Optional.CrossRider.A) -> No action taken.
HKCU\SOFTWARE\BI (PUP.Optional.FilesFrog.A) -> No action taken.
HKCU\Software\Conduit\FF (PUP.Optional.Conduit.A) -> No action taken.
HKCU\Software\Conduit\ValueApps (PUP.Optional.ValueApps.A) -> No action taken.

Registry Values Detected: 3
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|NextLive (PUP.Optional.NextLive.A) -> Data: C:\WINDOWS\SysWOW64\rundll32.exe "C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me\nengine.dll",EntryPoint -m l -> No action taken.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|BackgroundContainer (PUP.Optional.Conduit) -> Data: "C:\WINDOWS\SysWOW64\Rundll32.exe" "C:\Users\فلونــــــالرسمعلىال\AppData\Local\Conduit\BackgroundContainer\BackgroundContainer.dll",DllRun -> No action taken.
HKCU\Software\BI|ui_path_filesfrog (PUP.Optional.FilesFrog.A) -> Data: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FilesFrog Update Checker -> No action taken.

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 9
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\Adobe\crsscmgr (Trojan.Bitminer) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\OPENCANDY (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\OPENCANDY\06F18C5177014FD4B4079B2A1036DA13 (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\OPENCANDY\33610BD654594DB19825203EA858853E (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\OPENCANDY\OpenCandy_33610BD654594DB19825203EA858853E (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\DefaultTab\DefaultTab (PUP.Optional.DefaultTab.A) -> No action taken.
C:\ProgramData\Conduit\IE (PUP.Optional.Conduit.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me (PUP.Optional.NextLive.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me\cache (PUP.Optional.NextLive.A) -> No action taken.

Files Detected: 44
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me\nengine.dll (PUP.Optional.NextLive.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Local\SWVUPDATER\Updater.exe (PUP.Optional.SoftwareUpdater) -> No action taken.
C:\Program Files (x86)\Conduit\Community Alerts\Alert.dll (PUP.Optional.Conduit) -> No action taken.
C:\Program Files (x86)\Mobogenie\nengine.dll (PUP.Optional.NextLive.A) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmp192A.exe (Trojan.Agent.ED) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmp2D7D.exe (Trojan.Dorkbot.ED) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmp6160.exe (Trojan.Miuref.gen) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmp6D4A.exe (Trojan.Miuref.A) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmp7327.exe (Trojan.FakeMS) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmp9BD0.exe (Trojan.Agent) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmpD51E.exe (Trojan.Dorkbot.ED) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmpD98A.exe (Trojan.Dorkbot.ED) -> No action taken.
C:\ProgramData\Microsoft\BingDesktop\BingCore\temp\tmpEDCF.exe (Trojan.Dorkbot.ED) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Local\genienext\nengine.dll (PUP.Optional.NextLive.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Local\Mobogenie\Version\NewVersion\Mobogenie2.1.36.zip (PUP.Optional.NextLive.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\verison.dll.52d5b39e (Trojan.Agent.ED) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\OpenCandy\06F18C5177014FD4B4079B2A1036DA13\frostwire-5.6.2.windows.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\OpenCandy\OpenCandy_33610BD654594DB19825203EA858853E\LatestDLMgr.exe (PUP.Optional.OpenCandy.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Desktop\MyEgy.AVR.K\Trail Reset.exe (RiskWare.Tool.CK) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Documents\for.cs6.exe (CrackTool.Agent) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Documents\مجلد جديد\Downloads\installer_hotspot_shield.exe (PUP.BundleInstaller.BEN) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Downloads\7ZipSetup.exe (PUP.Optional.Somoto) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Downloads\Full_House_Complete_Seasons_1-8.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Downloads\Full_House_Season_3_Complete_DVD_Rip_By_Dark_Stalker.exe (PUP.Optional.OneClickDownloader.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Downloads\MyEgy.AVR.K.rar (RiskWare.Tool.CK) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Downloads\PlatinumHideIP.3.2.6.2.ouez.MaZiKa2daY.CoM.rar_31358873_52_letF.exe (Trojan.Onlinegames) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Downloads\SafariSetup-oc-jd.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Downloads\Setup.exe (PUP.Optional.InstallCore) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Downloads\SoftonicDownloader_for_realtek-hd-audio-drivers.exe (PUP.Optional.Softonic.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\Local Settings\Temp\FreeZipOpener\PIPAskToolbar\Offercast2802_ADAP_.exe (PUP.Optional.Spigot.A) -> No action taken.
M:\MyEgY.CoM.Hotspot Shield Launch v 2.04.by.bibsh_2\MyEgY.CoM.Hotspot Shield Launch v 2.04\HSS-2.04-install.exe (PUP.Optional.Conduit.A) -> No action taken.
M:\برامج\SoftonicDownloader_for_utorrent.exe (PUP.OfferBundler.ST) -> No action taken.
M:\برامج\Ultrasurf 9.3.exe (PUP.UltraReach) -> No action taken.
M:\برامج\MyEgy.CoM Internet Download Manager\الباتش القديم\استخدم هذا الباتش اولا\SnDk&p.exe (Spyware.Password) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\verison.dll (Trojan.Agent.Gen) -> No action taken.
C:\Windows\Tasks\AmiUpdXp.job (PUP.Software.Updater) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\Adobe\crsscmgr\libcurl-4.dll (Trojan.Bitminer) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\Adobe\crsscmgr\libgcc_s_dw2-1.dll (Trojan.Bitminer) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\Adobe\crsscmgr\pthreadGC2.dll (Trojan.Bitminer) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\OPENCANDY\33610BD654594DB19825203EA858853E\RegistryReviverSetup_AFF.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\OPENCANDY\33610BD654594DB19825203EA858853E\RegistryReviverSetup_AFF_p3v1.exe (PUP.Optional.OpenCandy) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\DefaultTab\DefaultTab\uninstalldt.exe (PUP.Optional.DefaultTab.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me\nengine.cookie (PUP.Optional.NextLive.A) -> No action taken.
C:\Users\فلونــــــالرسمعلىال\AppData\Roaming\newnext.me\cache\spark.bin (PUP.Optional.NextLive.A) -> No action taken.

(end)

 

[flo0na]

رفع ياليت احد يشوفلي التقرير هل راح الفيروس ؟

 

[Alp Arslan]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

اختي هل قمتي بتحديد جميع الاصابات وحذفها ؟؟ No action taken
هناك التروجان تم كشفها بالميلويربايت احذفيها واعطني تقرير جديدة
هل مازالت تظهر رسالة من افيرا وماهي الرسالة التي تظهر
بالتوفيق​

 

[flo0na]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

ايوا تم تحديدها جميعا وحذفها

لا الافيرا لم يعد يظهر اي رساله

لكنه توقف

ومحتاجه اغيره لانه انتهي تقريبا // هل تنصحني ببرنامج؟

 

[Alp Arslan]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

الشئ يعتمد على مواصفات جهازك الكاسبرسكاي ممتاز يجب اذا كان رام 4 فما فوق لن تشعر بالثقل ولكنه ثقيل على الاجهزة الضعيفة والمتوسطة

النود 32 ممتاز والأفاست ممتاز وبعده النورتن ايضا وهذا التقييم يختلف بحسب الأشخاص


بامكانك الرجوع الى هذه المواضيع

خفيف وقوي

●●▌ تشريح الوحش السلوفاكي الناعم Eset Smart Security 7▌ ●●

برنامج متكامل الخصائص للاجهزة القوية

الوحش الروسي [ Kaspersky Small Office Security 3 ] التثبيت و التفعيل و التعامل مع خصائصه ومميزاته

أو توجه يموضوع في القسم للاستفسار عن البرامج ايجابيات وسلبيات ومشاكل مع الأعضاء الذين جربوها


طلبات و إستفسارات الحماية​