وعليكم السلام
==============
(1)
عطل جميع برامج الحماية ,,
وحمل هذه الاداة واحفظها على سطح المكتب
عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم
بارك الله فيك أحي و أحسن اليك
و هذا هو التقريرالأول
ComboFix 08-11-24.03 - Administrateur 2008-11-25 11:29:35.1 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1256.966.1036.18.244 [GMT 1:00]
Running from: c:\documents and settings\Administrateur\Bureau\ComboFix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\system32\dao350.dll
c:\windows\system32\ExtCpt2.dll
c:\windows\system32\MCL16.dll
c:\windows\system32\msg2.dll
c:\windows\system32\PrZip2.dll
c:\windows\system32\spools.exe
c:\windows\system32\sysdm.exe
c:\windows\system32\system\
.
((((((((((((((((((((((((( Files Created from 2008-10-25 to 2008-11-25 )))))))))))))))))))))))))))))))
.
2008-11-24 16:42 . 2008-11-24 16:42 <REP> d-------- C:\output
2008-11-24 16:38 . 2008-11-25 08:14 <REP> d-------- C:\tmp
2008-11-24 16:38 . 2008-11-25 08:16 <REP> d-------- C:\Reezaa
2008-11-20 17:25 . 2008-11-20 17:25 <REP> d-------- c:\program files\way2allahTV
2008-11-17 17:13 . 2008-11-19 16:48 288 --a------ c:\windows\Aware35.mch
2008-11-17 17:11 . 2008-11-19 16:47 <REP> d-------- c:\windows\A3W_DATA
2008-11-17 17:11 . 2008-11-17 17:11 <REP> d-------- c:\program files\Fichiers communs\Macromedia
2008-11-17 11:56 . 2008-11-17 11:56 23 --a------ c:\windows\SEBRAN.INI
2008-11-17 11:55 . 2008-11-17 11:57 <REP> d-------- c:\program files\Sebran
2008-11-17 11:40 . 2008-11-17 11:40 48 --a------ c:\windows\system32\Painter.ini
2008-11-17 11:36 . 2008-11-19 16:27 <REP> d-------- c:\program files\CreativePainter
2008-11-15 11:27 . 2008-11-15 11:27 <REP> d-------- c:\program files\Webroot
2008-11-15 11:27 . 2008-11-15 11:28 <REP> d-------- c:\program files\Fichiers communs\Webroot Shared
2008-11-15 11:27 . 2008-11-15 11:27 <REP> d-------- c:\documents and settings\All Users\Application Data\Webroot
2008-11-15 11:27 . 2008-11-15 11:27 <REP> d-------- c:\documents and settings\Administrateur\Application Data\Webroot
2008-11-15 11:27 . 2007-08-09 13:56 69,960 --a------ c:\windows\Unwash6.exe
2008-11-14 16:01 . 2008-11-25 08:16 <REP> d-------- c:\program files\All2Chat
2008-11-14 09:24 . 2008-11-14 09:24 <REP> d-------- c:\program files\أحكام التجويد
2008-11-14 09:24 . 2000-04-29 18:43 90,112 --a------ c:\windows\system32\MBLink.ocx
2008-11-13 17:27 . 2008-11-13 17:46 <REP> d-------- c:\program files\Windows Live Safety Center
2008-11-13 16:00 . 2008-11-13 16:00 <REP> d--h----- c:\windows\system32\GroupPolicy
2008-11-13 15:09 . 2008-11-13 15:10 <REP> d--h-c--- c:\documents and settings\All Users\Application Data\{B46E1EF5-0B37-4DB4-A4E2-9F2B41036185}
2008-11-13 11:50 . 2008-11-13 11:50 <REP> d-------- c:\program files\IObit
2008-11-13 09:40 . 2008-10-24 12:25 455,936 -----c--- c:\windows\system32\dllcache\mrxsmb.sys
2008-11-13 09:39 . 2008-10-15 17:55 339,456 -----c--- c:\windows\system32\dllcache\netapi32.dll
2008-11-12 17:33 . 2008-11-12 17:33 <REP> d-------- c:\documents and settings\Administrateur\Application Data\CyberScrub
2008-11-12 17:32 . 2008-11-13 11:38 <REP> d-------- c:\documents and settings\Administrateur\Application Data\cleaner
2008-11-12 16:49 . 2008-11-14 09:29 <REP> d-------- c:\program files\Fichiers communs\Wise Installation Wizard
2008-10-30 11:18 . 2007-09-04 17:56 164,352 --a------ c:\windows\system32\unrar.dll
2008-10-30 11:17 . 2008-09-16 01:14 3,596,288 --a------ c:\windows\system32\qt-dx331.dll
2008-10-30 11:17 . 2008-09-24 19:41 839,680 --a------ c:\windows\system32\lameACM.acm
2008-10-30 11:17 . 2008-01-10 13:15 755,027 --a------ c:\windows\system32\xvidcore.dll
2008-10-30 11:17 . 2008-09-16 01:11 683,520 --a------ c:\windows\system32\divx.dll
2008-10-30 11:17 . 2004-01-25 17:18 217,088 --a------ c:\windows\system32\yv12vfw.dll
2008-10-30 11:17 . 2008-01-10 13:16 159,839 --a------ c:\windows\system32\xvidvfw.dll
2008-10-30 11:17 . 2007-09-21 01:52 118,784 --a------ c:\windows\system32\ac3acm.acm
2008-10-30 11:17 . 2008-09-16 01:12 81,920 --a------ c:\windows\system32\dpl100.dll
2008-10-30 11:17 . 2008-06-12 19:36 7,680 --a------ c:\windows\system32\ff_vfw.dll
2008-10-30 11:17 . 2007-07-10 17:10 547 --a------ c:\windows\system32\ff_vfw.dll.manifest
2008-10-30 11:17 . 2008-10-03 13:30 414 --a------ c:\windows\system32\lame_acm.xml
2008-10-30 11:17 . 2008-07-30 20:09 38 --a------ c:\windows\avisplitter.ini
2008-10-30 10:31 . 2008-10-30 10:31 <REP> d-------- c:\documents and settings\Administrateur\Application Data\TigerPlayer
2008-10-30 10:28 . 2008-10-30 11:08 <REP> d-------- c:\program files\MpcStar
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-25 10:31 32,800 --sha-w c:\windows\system32\drivers\fidbox2.dat
2008-11-25 10:31 2,200 --sha-w c:\windows\system32\drivers\fidbox.idx
2008-11-25 10:31 143,392 --sha-w c:\windows\system32\drivers\fidbox.dat
2008-11-25 10:31 1,192 --sha-w c:\windows\system32\drivers\fidbox2.idx
2008-11-25 10:25 --------- d-----w c:\documents and settings\Administrateur\Application Data\MegauploadToolbar
2008-11-25 08:18 --------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab
2008-11-13 15:24 --------- d-----w c:\documents and settings\Administrateur\Application Data\Thinstall
2008-11-13 10:29 --------- d-----w c:\program files\Software Informer
2008-11-12 15:00 --------- d-----w c:\documents and settings\Administrateur\Application Data\DMCache
2008-10-30 10:17 --------- d-----w c:\program files\K-Lite Codec Pack
2008-10-30 10:08 --------- d--h--w c:\program files\InstallShield Installation Information
2008-10-30 09:36 --------- d-----w c:\program files\Real
2008-10-30 08:41 --------- d-----w c:\documents and settings\Administrateur\Application Data\IDM
2008-10-24 11:25 455,936 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-17 07:51 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2008-10-16 13:51 --------- d-----w c:\program files\Messenger Plus! Live
2008-10-10 10:32 --------- dc-h--w c:\documents and settings\All Users\Application Data\{D5ABFFAD-D592-4F98-B02B-587125B4801F}
2008-10-09 08:52 --------- d-----w c:\documents and settings\Administrateur\Application Data\ooVoo Details
2008-09-30 14:51 720,896 ----a-w c:\windows\iun6002ev.exe
2008-09-30 14:42 --------- d-----w c:\documents and settings\Administrateur\Application Data\Ashampoo
2008-09-30 14:41 --------- d-----w c:\program files\Ashampoo
2008-09-30 14:41 --------- d-----w c:\documents and settings\All Users\Application Data\ashampoo
2008-09-27 11:07 --------- d-----w c:\program files\MagicISO
2008-06-09 09:16 16,384 --sha-w c:\windows\system32\config\systemprofile\s\index.dat
2008-06-09 09:16 16,384 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Historique\History.IE5\index.dat
2008-06-09 09:16 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\Temporary Internet Files\.IE5\index.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2004-08-28 25088]
"swg"="c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2008-06-10 171448]
"Camfrog"="c:\program files\Camfrog\Camfrog Video Chat\CamfrogNet.exe" [2003-09-29 36352]
"Window Washer"="c:\program files\Webroot\Washer\wwDisp.exe" [2007-08-09 1261384]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2007-08-24 33648]
"AVG8_TRAY"="c:\progra~1\AVG\AVG8\avgtray.exe" [2008-09-30 1234712]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2008-06-28 185896]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2008-04-25 201992]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" [2008-08-26 c:\windows\system32\advpack.dll]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\explorer]
"NoResolveSearch"= 1 (0x1)
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.l3acm"= l3codecp.acm
"vidc.DIV3"= DIVXc32.dll
"vidc.DIV4"= DIVXc32f.dll
"msacm.divxa32"= DivXa32.acm
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"443:TCP"= 443:TCP:*
isabledoVoo TCP المنفذ 443
"443:UDP"= 443:UDP:*isabledoVoo UDP المنفذ 443
"37674:TCP"= 37674:TCP:*isabledoVoo TCP المنفذ 37674
"37674:UDP"= 37674:UDP:*isabledoVoo UDP المنفذ 37674
"37675:UDP"= 37675:UDP:*isabledoVoo UDP المنفذ 37675
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 32784]
R0 videX32;videX32;c:\windows\system32\DRIVERS\videX32.sys [2004-08-28 9728]
R0 xfilt;VIA SATA IDE Hot-plug Driver;c:\windows\system32\DRIVERS\xfilt.sys [2004-08-28 11264]
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [2008-07-10 97928]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [2008-07-10 231704]
R2 wwEngineSvc;Window Washer Engine;c:\program files\Webroot\Washer\WasherSvc.exe [2008-11-15 388936]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\DRIVERS\klfltdev.sys [2008-03-13 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [2008-03-25 24592]
*Newly Created Service* - HELPSVC
.
s of the 'Scheduled Tasks' folder
2008-11-25 c:\windows\Tasks\MP Scheduled Scan.job
- c:\program files\Windows Defender\MpCmdRun.exe [2006-11-03 17:20]
.
- - - - ORPHANS REMOVED - - - -
Toolbar-SaveLinksOrder - (no file)
Toolbar-Locked - (no file)
Toolbar-ITBarLayout - (no file)
Toolbar-ITBarLayout - (no file)
Toolbar-ITBar7Position - (no file)
HKCU-Run-fsm - (no file)
.
------- Supplementary Scan -------
.
FireFox -: Profile - c:\documents and settings\Administrateur\Application Data\Mozilla\Firefox\Profiles\npl5hiht.default\
FireFox -: prefs.js - SEARCH.DEFAULTURL - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FireFox -: prefs.js - STARTUP.HOMEPAGE - hxxp://en-us.start.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:en-USfficial
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2008-11-25 11:32:39
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
c:\windows\TEMP\TMP0000000B8603D0DB913E4030 524288 bytes executable
**************************************************************************
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Windows Defender\MsMpEng.exe
c:\progra~1\AVG\AVG8\avgrsx.exe
c:\program files\Camfrog\Camfrog Video Chat\Camfrog Video Chat.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2008-11-25 11:36:46 - machine was rebooted
ComboFix-quarantined-files.txt 2008-11-25 10:36:42
Pre-Run: 58 046 685 184 octets libres
Post-Run: 57,983,062,016 octets libres
188 --- E O F --- 2008-10-22 18:10:03
(2)
واعمل تقرير للهايجاك
اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log
لحظات ويظهر لك تقرير ,, انسخه والصقه بردك القادم
جزاك ربي كل خير و أصلح أهلك
و هذا هو التقرير الثاني
Logfile of HijackThis v1.99.1
Scan saved at 11:39, on 25/11/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Webroot\Washer\WasherSvc.exe
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\PROGRA~1\AVG\AVG8\avgtray.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Webroot\Washer\wwDisp.exe
C:\Program Files\Camfrog\Camfrog Video Chat\Camfrog Video Chat.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\WinRAR\WinRAR.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX00.188\HijackThis.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Rar$EX01.110\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: Aide pour le lien d'Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\styler\TB\StylerTB.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Megaupload Toolbar - {4E7BD74F-2B8D-469E-CCB0-B130EEDBE97C} - C:\PROGRA~1\MEGAUP~1\MEGAUP~1.DLL
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O3 - Toolbar: @msdxmLC.dll,-1@1033,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\system32\msdxm.ocx
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [AVG8_TRAY] C:\PROGRA~1\AVG\AVG8\avgtray.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [Camfrog] "C:\Program Files\Camfrog\Camfrog Video Chat\CamfrogNet.exe" 0 C:\Program Files\Camfrog\Camfrog Video Chat\Camfrog Video Chat.exe
O4 - HKCU\..\Run: [Window Washer] C:\Program Files\Webroot\Washer\wwDisp.exe
O8 - Extra context menu item: Download all links with IDM - C:\Documents and Settings\Administrateur\Local Settings\Temp\Rar$EX00.485\IDM.v5.12\IEGetAll.htm
O8 - Extra context menu item: Download FLV video with IDM - C:\Documents and Settings\Administrateur\Local Settings\Temp\Rar$EX00.485\IDM.v5.12\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Documents and Settings\Administrateur\Local Settings\Temp\Rar$EX00.485\IDM.v5.12\IEExt.htm
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Envoyer à OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~1\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O11 - Options group: [INTERNATIONAL] International*
O11 - Options group: [TABS] Tabbed Browsing
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) -
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) -
O16 - DPF: {867E13F2-7F31-44FB-AC97-CD38E0DC46EF} -
O16 - DPF: {B7FDB0C3-4724-46D2-B8DB-6FA1DC63F7CA} (ReadUid.UserControlMacEntry) -
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash ) -
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files\Fichiers communs\Microsoft Shared\Help\hxds.dll
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Filter hijack: text/xml - {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\FICHIE~1\MICROS~1\OFFICE12\MSOXMLMF.DLL
O20 - Winlogon Notify: klogon - C:\WINDOWS\system32\klogon.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O21 - SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - C:\WINDOWS\system32\WPDShServiceObj.dll
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Kaspersky Internet Security (AVP) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" -r (file missing)
O23 - Service: Indexing Service (CiSvc) - Unknown owner - C:\WINDOWS\system32\cisvc.exe (file missing)
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Window Washer Engine (wwEngineSvc) - Webroot Software, Inc. - C:\Program Files\Webroot\Washer\WasherSvc.exe
تحياتي لكم أخي
