عندي مشكله

مجنون الزعيم · 14 نوفمبر 2008

السلام عليكم ورحمة الله وبركاته

عندي مشكله في جهازي وهي عباره عن خطا في النظام وخاصه عندما اسوي ايقاف التشغيل
واليكم الصوره

السّاجد لله · 14 نوفمبر 2008

من ابدأ ختر run واكتب الامر التالي

msconfig

ثم اوكي

ستظهر شاشة التطبيق

system configuration utility

اعمل كما يلي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

ثم وافق على اعادة التغشيل

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

بعدها

عطل جميع برامج الحماية ,,
وحمل هذه الاداة واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم

اعمل تقرير للهايجاك

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log
لحظات .. ويظهر لك تقرير اعمل تحديد الكل ==> انسخه والصقه بردك القادم

مجنون الزعيم · 14 نوفمبر 2008

ComboFix 08-11-12.01 - Admin 11/14/2008 2:18:45.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.680 [GMT 3:00]
Running from: c:\documents and settings\Admin\سطح المكتب\ComboFix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\Bifrost
c:\program files\bifrost\server.exe
c:\windows\IE4 Error Log.txt
c:\windows\system32\msiexeca.exe
.
((((((((((((((((((((((((( Files Created from 2008-10-13 to 2008-11-13 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-13 23:22 286,752 --sha-w c:\windows\system32\drivers\fidbox2.dat
2008-11-13 23:22 2,060 --sha-w c:\windows\system32\drivers\fidbox2.idx
2008-11-13 23:22 16,396 --sha-w c:\windows\system32\drivers\fidbox.idx
2008-11-13 23:22 1,960,480 --sha-w c:\windows\system32\drivers\fidbox.dat
2008-11-13 23:13 --------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab
2008-11-13 22:11 --------- d-----w c:\documents and settings\All Users\Application Data\Babylon
2008-11-11 22:24 --------- d-----w c:\documents and settings\Admin\Application Data\ShimMapiSeek
2008-11-11 22:23 --------- d-----w c:\documents and settings\All Users\Application Data\Gpl ooze view load
2008-11-11 22:21 --------- d-----w c:\program files\ShimMapiSeek
2008-11-10 23:11 --------- d-----w c:\program files\MSXML 6.0
2008-11-08 15:10 --------- d-----w c:\documents and settings\Admin\Application Data\Babylon
2008-11-07 20:39 --------- d-----w c:\documents and settings\All Users\Application Data\comp two long internet
2008-11-07 20:28 --------- d-----w c:\program files\Kaspersky Lab
2008-11-07 20:09 96,976 ----a-w c:\windows\system32\drivers\klin.dat
2008-11-07 20:09 87,855 ----a-w c:\windows\system32\drivers\klick.dat
2008-11-07 19:30 --------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2008-11-04 17:36 --------- d-----w c:\program files\DCETools
2008-11-03 23:13 --------- d--h--w c:\program files\InstallShield Installation Information
2008-10-30 22:53 --------- d-----w c:\program files\myBabylon_English
2008-10-30 22:51 --------- d-----w c:\program files\Babylon
2008-10-27 23:55 --------- d-----w c:\program files\SWiSH Max2
2008-10-27 23:45 --------- d-----w c:\program files\Elmokadim Flash Player
2008-10-27 21:11 --------- d-----w c:\program files\Sony
2008-10-27 21:11 --------- d-----w c:\documents and settings\All Users\Application Data\Sony
2008-10-25 17:52 --------- d-----w c:\program files\MSBuild
2008-10-25 17:47 --------- d-----w c:\program files\Reference Assemblies
2008-10-25 12:25 --------- d-----w c:\program files\Sony Setup
2008-10-25 12:25 --------- d-----w c:\documents and settings\Admin\Application Data\Sony Setup
2008-10-23 02:28 --------- d-----w c:\program files\K-Lite Codec Pack
2008-10-23 01:11 --------- d-----w c:\program files\MyCentria
2008-10-22 20:39 --------- d-----w c:\program files\HP
2008-10-21 18:58 64,502 ----a-w c:\windows\BricoPackUninst.cmd
2008-10-21 18:58 6,106 ----a-w c:\windows\BricoPackFoldersDelete.cmd
2008-10-21 18:28 126,976 ----a-w c:\windows\system32\msiexec.exe
2008-10-21 18:21 218,624 ----a-w c:\windows\system32\uxtheme.dll
2008-10-17 21:01 --------- d-----w c:\documents and settings\Admin\Application Data\Nokia Multimedia Player
2008-10-15 20:59 --------- d-----w c:\documents and settings\Admin\Application Data\vlc
2008-10-13 20:23 --------- d-----w c:\documents and settings\All Users\Application Data\HP
2008-10-13 20:14 --------- d-----w c:\documents and settings\All Users\Application Data\WEBREG
2008-10-13 20:14 --------- d-----w c:\documents and settings\Admin\Application Data\HP
2008-10-13 20:09 --------- d-----w c:\program files\Common Files\Hewlett-Packard
2008-10-13 20:02 --------- d-----w c:\documents and settings\All Users\Application Data\Hewlett-Packard
2008-10-13 19:44 --------- d-----w c:\program files\Common Files\Adobe
2008-09-23 04:00 --------- d-----w c:\program files\Windows Live Messenger Khalid Edition v5.5 Arabic
2008-09-19 18:18 81,920 ----a-w c:\documents and settings\Admin\Application Data\ezpinst.exe
2008-09-19 18:18 47,360 ----a-w c:\documents and settings\Admin\Application Data\pcouffin.sys
2008-09-19 18:18 --------- d-----w c:\documents and settings\Admin\Application Data\Vso
2008-09-15 15:37 1,845,888 ----a-w c:\windows\system32\win32k.sys
2008-09-15 00:39 --------- d-----w c:\documents and settings\Admin\Application Data\Datalayer
2008-09-13 04:16 --------- d-----w c:\program files\Golden Al-Wafi Translator
2002-07-09 09:10 98,304 ----a-w c:\program files\internet explorer\plugins\DjVuControl.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
"{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}"= "c:\program files\myBabylon_English\tbmyBa.dll" [08/20/2008 11:03 PM 1780248]
[HKEY_CLASSES_ROOT\clsid\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}]
[HKEY_LOCAL_MACHINE\~\Browser Helper s\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}]
08/20/2008 11:03 PM 1780248 --a------ c:\program files\myBabylon_English\tbmyBa.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}"= "c:\program files\myBabylon_English\tbmyBa.dll" [08/20/2008 11:03 PM 1780248]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{B2E293EE-FD7E-4C71-A714-5F4750D8D7B7}"= "c:\program files\myBabylon_English\tbmyBa.dll" [08/20/2008 11:03 PM 1780248]
[HKEY_CLASSES_ROOT\clsid\{b2e293ee-fd7e-4c71-a714-5f4750d8d7b7}]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MSConfig"="c:\windows\PCHealth\HelpCtr\Binaries\MSConfig.exe" [08/04/2004 12:56 AM 158208]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [04/25/2008 06:21 PM 201992]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [08/04/2004 12:56 AM 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"VIDC.3iv2"= c:\progra~1\K-LITE~1\codecs\3IVXVF~1.DLL
"VIDC.VP60"= c:\progra~1\K-LITE~1\codecs\vp6vfw.dll
"VIDC.VP61"= c:\progra~1\K-LITE~1\codecs\vp6vfw.dll
"VIDC.VP62"= c:\progra~1\K-LITE~1\codecs\vp6vfw.dll
"VIDC.VP70"= c:\progra~1\K-LITE~1\codecs\vp7vfw.dll
"VIDC.VP31"= c:\progra~1\K-LITE~1\codecs\vp31vfw.dll
"VIDC.FFDS"= c:\progra~1\K-LITE~1\ffdshow\ff_vfw.dll
"msacm.ac3acm"= c:\progra~1\K-LITE~1\codecs\ac3acm.acm
"msacm.l3fhg"= c:\progra~1\K-LITE~1\codecs\l3codecp.acm
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^Adobe Gamma Loader.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\Adobe Gamma Loader.lnk
backup=c:\windows\pss\Adobe Gamma Loader.lnkCommon Startup
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^Bluetooth.lnk]
path=c:\documents and settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\Bluetooth.lnk
backup=c:\windows\pss\Bluetooth.lnkCommon Startup
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KernelFaultCheck]
c:\windows\system32\dumprep 0 -k [X]
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Adobe Reader Speed Launcher]
--a------ 05/11/2007 03:06 AM 40048 c:\program files\Adobe\Reader 8.0\Reader\reader_sl.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Babylon Client]
--a------ 09/01/2008 12:59 PM 3563232 c:\program files\Babylon\Babylon-Pro\Babylon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}]
--a------ 12/16/2005 01:57 PM 94208 c:\program files\Common Files\Ahead\Lib\NMBgMonitor.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CTFMON.EXE]
--a------ 08/04/2004 12:56 AM 15360 c:\windows\system32\ctfmon.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\DWPersistentQueuedReporting]
--a------ 04/25/2005 01:45 PM 36040 c:\program files\Common Files\Microsoft Shared\DW\DWTRIG20.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HotKeysCmds]
--a------ 11/15/2007 02:32 PM 166424 c:\windows\system32\hkcmd.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\IgfxTray]
--a------ 11/15/2007 02:33 PM 141848 c:\windows\system32\igfxtray.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Listbalm]
--a------ 11/12/2008 01:21 AM 489984 c:\docume~1\Admin\APPLIC~1\SHIMMA~1\Slow Plan.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroFilterCheck]
--a------ 07/09/2001 11:50 AM 155648 c:\windows\system32\NeroCheck.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
--a------ 06/15/2006 12:36 PM 229376 c:\progra~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Persistence]
--a------ 11/15/2007 02:33 PM 137752 c:\windows\system32\igfxpers.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RemoteControl]
--a------ 11/02/2004 08:24 PM 32768 c:\program files\CyberLink\PowerDVD\PDVDServ.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\TkBellExe]
--a------ 05/03/2008 09:38 AM 185896 c:\program files\Common Files\Real\Update_OB\realsched.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SigmatelSysTrayApp]
--a------ 05/06/2007 05:10 PM 405504 c:\windows\stsystra.exe
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live Messenger Khalid Edition v5.5 Arabic\\msnmsgr.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"37478:TCP"= 37478:TCP

ORT_37478
"39172:TCP"= 39172:TCP

ORT_39172
"21618:TCP"= 21618:TCP

ORT_21618
"39879:TCP"= 39879:TCP

ORT_39879
"57395:TCP"= 57395:TCP

ORT_57395
"37083:TCP"= 37083:TCP

ORT_37083
"57808:TCP"= 57808:TCP

ORT_57808
"36165:TCP"= 36165:TCP

ORT_36165
"20380:TCP"= 20380:TCP

ORT_20380
"58498:TCP"= 58498:TCP

ORT_58498
"60273:TCP"= 60273:TCP

ORT_60273
"30738:TCP"= 30738:TCP

ORT_30738
"43000:TCP"= 43000:TCP

ORT_43000
"38105:TCP"= 38105:TCP

ORT_38105
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [01/29/2008 06:29 PM 32784]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\DRIVERS\klfltdev.sys [03/13/2008 07:02 PM 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [03/25/2008 08:07 PM 24592]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{d3e73a32-9f9c-11dd-8e64-001fe1c90f38}]
\Shell\AutoRun\command - v0s.cmd
\Shell\explore\Command - v0s.cmd
\Shell\open\Command - v0s.cmd
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{FDF82575-910D-5425-2D81-F6277B7DD49E}]
c:\program files\Bifrost\server.exe s
.
s of the 'Scheduled Tasks' folder
2008-11-13 c:\windows\Tasks\A5A81EE0918B9838.job
- c:\docume~1\admin\applic~1\shimma~1\CopyTeamThis.exe [11/12/2008 01:24 AM]
.
- - - - ORPHANS REMOVED - - - -
MSConfigStartUp-Setup - c:\windows\system32\msiexeca.exe

.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.com.sa/
O8 -: &تصدير إلى Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 -: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 -: Translate with &Babylon - c:\program files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Translate.htm
O16 -: Microsoft XML Parser for Java -