هذه التقارير لاكنها ليست للجهاز الذي به هذه المشاكل لاكنه يشتكي من البطء هذا الجهاز
طبعا هذا الجهاز الان غير موجود عندي إذا اتى الجهاز احظرت لك التقرير وارسلته بإذن الله ..
ComboFix 08-12-06.06 - am 12/07/2008 20:08:00.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.862 [GMT 3:00]
Running from: c:\documents and settings\am\سطح المكتب\ComboFix.exe
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\am\سطح المكتب\CCA3.2\CCARoute\_desktop.ini
c:\documents and settings\am\سطح المكتب\CCA3.2\Config\_desktop.ini
c:\documents and settings\am\سطح المكتب\CCA3.2\Config\Ping\_desktop.ini
c:\program files\Bifrost
c:\program files\IEToolbar
c:\program files\IEToolbar\Sahate Toolbar\ARROW1.CUR
c:\program files\IEToolbar\Sahate Toolbar\basis.xml
c:\program files\IEToolbar\Sahate Toolbar\clearhist.exe
c:\program files\IEToolbar\Sahate Toolbar\DRAGFOLD.CUR
c:\program files\IEToolbar\Sahate Toolbar\favicon.ico
c:\program files\IEToolbar\Sahate Toolbar\help.html
c:\program files\IEToolbar\Sahate Toolbar\icons.bmp
c:\program files\IEToolbar\Sahate Toolbar\icons.bmp_16.bmp
c:\program files\IEToolbar\Sahate Toolbar\icons.bmp_24.bmp
c:\program files\IEToolbar\Sahate Toolbar\icons.bmp_32.bmp
c:\program files\IEToolbar\Sahate Toolbar\ijl15.dll
c:\program files\IEToolbar\Sahate Toolbar\Image13.jpg
c:\program files\IEToolbar\Sahate Toolbar\Image14.jpg
c:\program files\IEToolbar\Sahate Toolbar\Image15.jpg
c:\program files\IEToolbar\Sahate Toolbar\Image16.jpg
c:\program files\IEToolbar\Sahate Toolbar\Image6.jpg
c:\program files\IEToolbar\Sahate Toolbar\Image8.jpg
c:\program files\IEToolbar\Sahate Toolbar\Image9.jpg
c:\program files\IEToolbar\Sahate Toolbar\info.txt
c:\program files\IEToolbar\Sahate Toolbar\logo.bmp
c:\program files\IEToolbar\Sahate Toolbar\logo.png
c:\program files\IEToolbar\Sahate Toolbar\mini_logo1.bmp
c:\program files\IEToolbar\Sahate Toolbar\options.html
c:\program files\IEToolbar\Sahate Toolbar\sahaPen21.exe
c:\program files\IEToolbar\Sahate Toolbar\sahate.crc
c:\program files\IEToolbar\Sahate Toolbar\sahate.dll
c:\program files\IEToolbar\Sahate Toolbar\sahate.inf
c:\program files\IEToolbar\Sahate Toolbar\tbhelper.dll
c:\program files\IEToolbar\Sahate Toolbar\tbs_include_script_013267.js
c:\program files\IEToolbar\Sahate Toolbar\uninstall.exe
c:\program files\IEToolbar\Sahate Toolbar\update.exe
c:\program files\IEToolbar\Sahate Toolbar\version.txt
c:\program files\IEToolbar\Sahate Toolbar\websave_plugin.dll
c:\program files\IEToolbar\Sahate Toolbar\your_logo.png
c:\windows\system32\kakle.dll
.
((((((((((((((((((((((((( Files Created from 2008-11-07 to 2008-12-07 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-12-07 17:08 --------- d-----w c:\documents and settings\am\Application Data\DMCache
2008-12-07 11:48 --------- d-----w c:\program files\Valve
2008-11-28 11:28 --------- d-----w c:\program files\Hotspot Shield
2008-11-24 11:42 --------- d-----w c:\documents and settings\am\Application Data\Nokia
2008-11-23 19:21 0 ---ha-w c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2008-11-23 19:21 0 ---ha-w c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2008-11-23 19:18 --------- d-----w c:\documents and settings\All Users\Application Data\Nokia
2008-11-23 19:12 --------- d-----w c:\program files\Nokia
2008-11-23 19:11 --------- d-----w c:\program files\Common Files\Nokia
2008-11-23 19:10 --------- d-----w c:\documents and settings\All Users\Application Data\Installations
2008-11-23 12:01 --------- d-----w c:\documents and settings\am\Application Data\PC Suite
2008-11-20 09:59 --------- d-----w c:\program files\Windows Live Safety Center
2008-11-12 21:15 --------- d-----w c:\documents and settings\All Users\Application Data\Microsoft Help
2008-10-27 17:41 --------- d-----w c:\program files\Internet Download Manager
2008-10-27 11:26 --------- d-----w c:\documents and settings\am\Application Data\IDM
2008-10-24 11:25 455,936 ----a-w c:\windows\system32\drivers\mrxsmb.sys
2008-10-17 18:38 --------- d-----w c:\program files\K-Lite Codec Pack
2008-10-17 18:20 --------- d-----w c:\program files\DivX
2008-10-17 18:02 --------- d-----w c:\program files\Real Alternative
2008-10-17 18:02 --------- d-----w c:\program files\Real
2008-10-17 18:02 --------- d-----w c:\program files\Common Files\Real
2008-10-17 10:19 --------- d-----w c:\documents and settings\am\Application Data\Media Player Classic
2008-10-16 11:47 --------- d-----w c:\documents and settings\am\Application Data\DivX
2008-10-16 11:13 202,776 ----a-w c:\windows\system32\wuweb.dll
2008-10-16 11:13 1,809,944 ----a-w c:\windows\system32\wuaueng.dll
2008-10-16 11:12 561,688 ----a-w c:\windows\system32\wuapi.dll
2008-10-16 11:12 323,608 ----a-w c:\windows\system32\wucltui.dll
2008-10-16 11:09 92,696 ----a-w c:\windows\system32\cdm.dll
2008-10-16 11:09 51,224 ----a-w c:\windows\system32\wuauclt.exe
2008-10-16 11:09 43,544 ----a-w c:\windows\system32\wups2.dll
2008-10-16 11:08 34,328 ----a-w c:\windows\system32\wups.dll
2008-10-16 11:06 268,648 ----a-w c:\windows\system32\mucltui.dll
2008-10-16 11:06 208,744 ----a-w c:\windows\system32\muweb.dll
2008-10-15 20:45 363,655 ----a-w c:\windows\system32\360x180° Mekan.scr
2008-10-12 17:53 --------- d-----w c:\program files\Windows Live
2008-10-12 16:49 --------- d-----w c:\program files\Common Files\Windows Live
2008-10-12 15:57 --------- d-----w c:\documents and settings\All Users\Application Data\WLInstaller
2008-10-11 11:19 339,968 ----a-w c:\windows\system32\pythoncom25.dll
2008-10-11 11:19 2,117,632 ----a-w c:\windows\system32\python25.dll
2008-10-11 11:19 114,688 ----a-w c:\windows\system32\pywintypes25.dll
2008-10-11 11:18 --------- d-----w c:\program files\AGI
2008-10-07 09:36 --------- d-----w c:\program files\Registry Repair
2008-10-07 09:35 --------- d-----w c:\documents and settings\am\Application Data\GlarySoft
2008-09-30 13:43 1,286,152 ----a-w c:\windows\system32\msxml4.dll
2008-09-29 01:37 40,960 ----a-w c:\windows\system32\SSubTmr6.dll
2008-09-20 15:33 1,930 ----a-w c:\windows\Fonts\CSTSS7.fon
2008-09-20 15:33 1,008 ----a-w c:\windows\Fonts\CSTSS5.fon
2008-09-16 16:26 1,332,197 ----a-w c:\windows\system32\pythondll.zip
2008-09-16 00:11 161,096 ----a-w c:\windows\system32\DivXCodecVersionChecker.exe
2008-09-15 15:13 1,846,784 ----a-w c:\windows\system32\win32k.sys
2008-09-15 05:56 91,136 ----a-w c:\windows\system32\nmwcdcls.dll
2008-09-15 05:56 659,968 ----a-w c:\windows\system32\nmwcdcocls.dll
2008-09-15 05:29 1,112,288 ----a-w c:\windows\system32\wdfcoinstaller01007.dll
2008-09-12 10:44 206,256 ----a-w c:\windows\system32\idmmbc.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper s\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
11/28/2008 02:23 PM 204248 --a------ c:\program files\Hotspot Shield\hssie\HssIE.dll
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [08/04/2004 01:56 AM 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [10/18/2007 11:34 AM 5724184]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [10/27/2008 08:44 PM 2606512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [06/10/2008 04:27 AM 144784]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [08/24/2007 07:00 AM 33648]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [12/10/2006 09:52 PM 49152]
"PCSuiteTrayApplication"="c:\program files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [03/23/2007 01:20 PM 227328]
"SoundMan"="SOUNDMAN.EXE" [06/20/2005 04:42 PM 77824 c:\windows\SOUNDMAN.EXE]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [08/04/2004 01:56 AM 15360]
"Nokia.PCSync"="c:\program files\Nokia\Nokia PC Suite 6\PcSync2.exe" [03/27/2007 03:58 PM 1744896]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"TSClientMSIUninstaller"="c:\windows\Installer\TSClientMsiTrans\tscuinst.vbs" [04/23/2007 07:54 AM 12451]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [08/03/2004 11:59 PM 44544]
"nltide_3"="advpack.dll" [08/26/2008 10:57 AM 124928 c:\windows\system32\advpack.dll]
c:\documents and settings\All Users\çںê، ں §ڑ\ںé ©ںê¤\ §ک ں颬نïé\
Adobe Reader Speed Launch.lnk - c:\program files\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2008-04-23 29696]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKLM\~\startupfolder\C:^Documents and Settings^All Users^قائمة ابدأ^البرامج^بدء التشغيل^HP Digital Imaging Monitor.lnk]
backup=c:\windows\pss\HP Digital Imaging Monitor.lnkCommon Startup
HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\updateMgr
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RaidTool]
-ra------ 04/26/2005 06:22 AM 589824 c:\program files\VIA\RAID\raid_tool.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTimer]
-ra------ 03/07/2005 03:33 PM 53248 c:\windows\system32\VTTimer.exe
[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VTTrayp]
-ra------ 03/11/2005 05:33 AM 147456 c:\windows\system32\VTTrayp.exe
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Valve\\hl.exe"=
"c:\\Program Files\\Valve\\hlds.exe"=
"d:\\ملفات\\البرامج\\Software_Release_7.4.1.7.0\\SpeedTouch_upgrade_wizard_R4421\\SpeedTouch_upgrade_wizard_R4421\\upgradeST.exe"=
"c:\\Documents and Settings\\am\\سطح المكتب\\SpeedTouch_upgrade_wizard_R4421\\upgradeST.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP
xpsp2res.dll,-22009
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2008-09-20 138112]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2008-09-20 8320]
S3 PRODIGY;PRODIGY;c:\windows\system32\Drivers\PRODIGY.SYS [2008-09-20 32377]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\explorer\mountpoints2\{2a027744-9f5d-11dd-a069-0019db4ae33f}]
\Shell\AutoRun\command - G:\qa8sywva.cmd
\Shell\explore\Command - G:\qa8sywva.cmd
\Shell\open\Command - G:\qa8sywva.cmd
*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
.
- - - - ORPHANS REMOVED - - - -
BHO-{36553CAC-7228-4F16-B057-28DE0A8A3839} - c:\program files\IEToolbar\Sahate Toolbar\sahate.dll
BHO-{7FF4E31C-74EB-433D-A8AA-A12A99521674} - c:\program files\IEToolbar\Sahate Toolbar\sahate.dll
Toolbar-{1A295E8E-E51B-42CE-81B2-B73614F0FCD2} - c:\program files\IEToolbar\Sahate Toolbar\sahate.dll
WebBrowser-{1A295E8E-E51B-42CE-81B2-B73614F0FCD2} - c:\program files\IEToolbar\Sahate Toolbar\sahate.dll
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uInternet Connection Wizard,ShellNext = iexplore
uInternet Settings,ProxyOverride = local
uInternet Settings,ProxyServer = 212.93.193.87:8080
IE: ت&صدير إلى Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: تحميل الكل بـ إنترنت داونلود مانيجر - c:\program files\Internet Download Manager\IEGetAll.htm
IE: تحميل بـ إنترنت داونلود مانيجر - c:\program files\Internet Download Manager\IEExt.htm
IE: تحميل محتوى فيديو (إف.إل.في) بـ إنترنت داونلود مانيجر - c:\program files\Internet Download Manager\IEGetVL.htm
IE: {1A295E8E-E51B-42CE-81B2-B73614F0FCD2} - {1A295E8E-E51B-42CE-81B2-B73614F0FCD2} - c:\program files\IEToolbar\Sahate Toolbar\sahate.dll
c:\windows\Downloaded Program Files\InstallerControl.dll - O16 -: CabBuilder
hxxp://kiw.imgag.com/imgag/kiw/toolbar/download/InstallerControl.cab
c:\windows\Downloaded Program Files\OSDC5.OSD
FireFox -: Profile - c:\documents and settings\am\Application Data\Mozilla\Firefox\Profiles\27fj29dq.default\
FF -: plugin - c:\program files\Adobe\Acrobat 7.0\Reader\browser\nppdf32.dll
FF -: plugin - c:\program files\Real\RhapsodyPlayerEngine\nprhapengine.dll
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
Rootkit scan 2008-12-07 20:10:16
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 12/07/2008 20:11:23
ComboFix-quarantined-files.txt 2008-12-07 17:10:45
Pre-Run: 14,019,149,824 bytes free
Post-Run: 14,363,996,160 bytes free
216 --- E O F --- 2008-11-12 21:15:36
وهنا تقرير الهايجاك
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:42:39 م, on 07/12/2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\notepad.exe
C:\WINDOWS\explorer.exe
C:\Program Files\internet explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\am\سطح المكتب\Zyzoom_HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.93.193.87:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [HP Software Update] C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [Nokia.PCSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'Default user')
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: تحميل الكل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى فيديو (إف.إل.في) بـ إنترنت داونلود مانيجر - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: CabBuilder -
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) -
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
--
End of file - 6234 bytes
وجزاك الله خيرا
اخوك
