الحالة
مغلق و غير مفتوح للمزيد من الردود.

_Hemoo_

زيزوومى متألق
إنضم
9 أبريل 2008
المشاركات
317
مستوى التفاعل
0
النقاط
390
الإقامة
R ! Y A D H
غير متصل
السلام عليكم ورحمة الله وبركاته

شرح المشكلة : أنا دخلت موقع لعرض الالعاب حسبي الله عليه

هذا هو رابطه (
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي
)

وطلعت لي رساله في أعلى الصفحة : يقولي لازم تثبت شيء , رساله عاديه تطلع لي في أغلب المواقع

بعدها ضغطت بالزر اليمين وسويت تنصيب

من بعدها الجهاز صار من حفره لدحديره :f: :er:

الصفحة تسكرت من نفسها , وبرنامج الفيروسات صار يطلع رسائل بأنه لقى فيروسات

وكل ماعدت الكمبيوتر وشغلته تطلع لي رسالتين ورا بعض من ( NOD32 ) يقولي تراي مسكت فيروسين !! :er:

BxT38175.bmp

njv38175.bmp

وصارت تطلع لي رسائل من الويندوز بوجود أخطاء ( وأكثرها يطلع لي Host و مايكرو فيجويل .... )

وصار الثيم حق الجهاز يتغير من حاله !! يرجع لثيم الويندز القديم وبعدين يرجع طبيعي !!


الأمور الي سويتها بعد المشكلة :

نزلت أداة كاسبر سكاي , وفحصت الجهاز بالكامل , ولا لقى أي شيء !!

فحصت الجهاز بـ ( NOD32 ) ولا لقى أي شيء !! علما بأن النود ( سمارت سكيورتي )

نزلت أداة زيزوم للتنظيف , ونظف لي الجهاز , ولا زالت المشكلة قائمة !!

وفحصت الجهاز بـ AVG أنتي سباي وير ( Online ) ولا لقى إصابات قوية ( كلها إصابات طفيفة )

:.:

قولوا لي الله يخليكم , وش فيه جهازي , وش الي جااه :er: :er:

كان من أحسن مايكون !! :f:

.:.

تقرير ( هاي جاك )

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 2:51:47 PM, on 1/7/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TDispVol.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\Athan\Athan.exe
C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.saudi.net.sa:8080
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TDispVol] TDispVol.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Bluetooth Monitor.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash ******) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServerTime - Unknown owner - C:\WINDOWS\system32\atlsystem359129.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
--
End of file - 11103 bytes
 

توقيع : _Hemoo_
اهلااا بك
بعد تحميل الاداة
اغلق جميع البرامج والمتصفح ثم اعمل هذا التقرير

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


شغلها بدبل كلك ،، ثواني يظهر المفكرة وفيها تقرير ،، اعمل تحديد الكل وانسخه والصقه بمشاركتك القادمة
 
وعذرا بتحرير الرابط
 
مشكور وجزاك الله ألف خير على سرعة تجاوبكـ ,,

تفضل ( هذا الي طلبته ) :

.
--------------------------\\\ Start Report Of HijackThis ---------------
.
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 3:31:40 PM, on 1/7/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\WINDOWS\system32\TDispVol.exe
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
C:\WINDOWS\system32\TPSBattM.exe
C:\Program Files\Synaptics\SynTP\Toshiba.exe
C:\Program Files\Athan\Athan.exe
C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\QuickTime\qttask.exe
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe
C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
C:\WINDOWS\System32\svchost.exe
C:\DOCUME~1\majed\LOCALS~1\Temp\bntoz\runn.exe
C:\WINDOWS\system32\cmd.exe
C:\DOCUME~1\majed\LOCALS~1\Temp\bntoz\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.saudi.net.sa:8080
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: BitComet ClickCapture - {39F7E362-828A-4B5A-BCAF-5B79BFDFEA60} - C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [TDispVol] TDispVol.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [Athan] C:\Program Files\Athan\Athan.exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [UserFaultCheck] %systemroot%\system32\dumprep 0 -u
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: Bluetooth Monitor.lnk = ?
O8 - Extra context menu item: &D&ownload &with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddLink.htm
O8 - Extra context menu item: &D&ownload all video with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddVideo.htm
O8 - Extra context menu item: &D&ownload all with BitComet - res://C:\Program Files\BitComet\BitComet.exe/AddAllLink.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: BitComet - {D18A0B52-D63C-4ed0-AFC6-C1E3DC1AF43A} - res://C:\Program Files\BitComet\tools\BitCometBHO_1.2.8.7.dll/206 (file missing)
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {5D6F45B3-9043-443D-A792-115447494D24} (UnoCtrl Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash ******) -
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServerTime - Unknown owner - C:\WINDOWS\system32\atlsystem359129.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software GmbH - C:\WINDOWS\System32\TuneUpDefragService.exe
--
End of file - 11080 bytes
.
.
--------------------------\\\ End Report Of Of HijackThis ---------------
.
.
.
.
--------------------------\\\ Start Report Of Running Processes ---------------
.
==================================================
Process Name : smss.exe
ProcessID : 1572
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Windows NT Session Manager
Company : Microsoft Corporation
Window Title :
File Size : 50,688
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\System32\smss.exe
Base Address : 0x48580000
Created On : 11/01/30 02:17:41 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 372 K
Mem Usage Peak : 460 K
Page Faults : 215
Pagefile Usage : 164 K
Pagefile Peak Usage : 1704 K
File Attributes : A
==================================================
==================================================
Process Name : csrss.exe
ProcessID : 1700
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Client Server Runtime Process
Company : Microsoft Corporation
Window Title :
File Size : 6,144
File Created Date : 17/06/25 09:56:50 م
File Modified Date : 08/04/29 12:12:15 ص
Filename : C:\WINDOWS\system32\csrss.exe
Base Address : 0x4A680000
Created On : 11/01/30 02:17:42 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 5160 K
Mem Usage Peak : 5732 K
Page Faults : 18829
Pagefile Usage : 1884 K
Pagefile Peak Usage : 1884 K
File Attributes : A
==================================================
==================================================
Process Name : winlogon.exe
ProcessID : 1724
Priority : High
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2113)
Description : Windows NT Logon Application
Company : Microsoft Corporation
Window Title :
File Size : 507,904
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:39 ص
Filename : C:\WINDOWS\system32\winlogon.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:44 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 4176 K
Mem Usage Peak : 16772 K
Page Faults : 9862
Pagefile Usage : 6732 K
Pagefile Peak Usage : 9468 K
File Attributes : A
==================================================
==================================================
Process Name : services.exe
ProcessID : 1768
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Services and Controller app
Company : Microsoft Corporation
Window Title :
File Size : 108,544
File Created Date : 17/06/25 09:56:56 م
File Modified Date : 08/04/29 12:12:34 ص
Filename : C:\WINDOWS\system32\services.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:44 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 4164 K
Mem Usage Peak : 4232 K
Page Faults : 5434
Pagefile Usage : 1940 K
Pagefile Peak Usage : 2168 K
File Attributes : A
==================================================
==================================================
Process Name : lsass.exe
ProcessID : 1780
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2113)
Description : LSA Shell (Export Version)
Company : Microsoft Corporation
Window Title :
File Size : 13,312
File Created Date : 17/06/25 09:56:52 م
File Modified Date : 08/04/29 12:12:24 ص
Filename : C:\WINDOWS\system32\lsass.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:44 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 6632 K
Mem Usage Peak : 6980 K
Page Faults : 9557
Pagefile Usage : 4188 K
Pagefile Peak Usage : 4616 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 1972
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:44 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 5072 K
Mem Usage Peak : 5252 K
Page Faults : 1557
Pagefile Usage : 3132 K
Pagefile Peak Usage : 23548 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 2020
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:45 م
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 4604 K
Mem Usage Peak : 4696 K
Page Faults : 1341
Pagefile Usage : 2052 K
Pagefile Peak Usage : 2308 K
File Attributes : A
==================================================
==================================================
Process Name : S24EvMon.exe
ProcessID : 744
Priority : Normal
Product Name : Intel(R) PROSet/Wireless Service
Version : 11, 1, 1, 4
Description : Wireless Management Service
Company : Intel Corporation
Window Title :
File Size : 987,136
File Created Date : 16/05/28 07:48:24 ص
File Modified Date : 16/05/28 07:48:24 ص
Filename : C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:45 م
Visible Windows : 0
Hidden Windows : 2
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 12580 K
Mem Usage Peak : 12604 K
Page Faults : 5694
Pagefile Usage : 9204 K
Pagefile Peak Usage : 9248 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 1012
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:45 م
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 3700 K
Mem Usage Peak : 3908 K
Page Faults : 3384
Pagefile Usage : 1432 K
Pagefile Peak Usage : 1740 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 1272
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:45 م
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 3688 K
Mem Usage Peak : 3704 K
Page Faults : 977
Pagefile Usage : 1412 K
Pagefile Peak Usage : 1460 K
File Attributes : A
==================================================
==================================================
Process Name : spoolsv.exe
ProcessID : 1856
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-0852)
Description : Spooler SubSystem App
Company : Microsoft Corporation
Window Title :
File Size : 57,856
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\system32\spoolsv.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:45 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 5900 K
Mem Usage Peak : 5932 K
Page Faults : 1915
Pagefile Usage : 4108 K
Pagefile Peak Usage : 4380 K
File Attributes : A
==================================================
==================================================
Process Name : Explorer.EXE
ProcessID : 476
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 6.00.2900.5512 (xpsp.080413-2105)
Description : Windows Explorer
Company : Microsoft Corporation
Window Title : My Documents
File Size : 1,033,728
File Created Date : 17/06/25 09:56:50 م
File Modified Date : 08/04/29 12:12:19 ص
Filename : C:\WINDOWS\Explorer.EXE
Base Address : 0x01000000
Created On : 11/01/30 02:17:47 م
Visible Windows : 3
Hidden Windows : 40
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 16388 K
Mem Usage Peak : 31268 K
Page Faults : 64669
Pagefile Usage : 20748 K
Pagefile Peak Usage : 21720 K
File Attributes : A
==================================================
==================================================
Process Name : NDSTray.exe
ProcessID : 724
Priority : Normal
Product Name : ConfigFree(TM) Tray
Version : 6, 0, 1, 1
Description : ConfigFree(TM) Tray
Company : TOSHIBA CORPORATION
Window Title :
File Size : 978,944
File Created Date : 06/08/28 10:50:09 ص
File Modified Date : 01/10/26 12:41:04 م
Filename : C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 3
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 6292 K
Mem Usage Peak : 9024 K
Page Faults : 4224
Pagefile Usage : 9512 K
Pagefile Peak Usage : 9552 K
File Attributes :
==================================================
==================================================
Process Name : TFncKy.exe
ProcessID : 732
Priority : Normal
Product Name : TFncKy
Version : 3.21.02
Description : TFncKy
Company : TOSHIBA Corporation
Window Title :
File Size : 184,320
File Created Date : 06/08/28 10:50:29 ص
File Modified Date : 12/08/26 08:53:34 ص
Filename : C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 4420 K
Mem Usage Peak : 4420 K
Page Faults : 1246
Pagefile Usage : 1084 K
Pagefile Peak Usage : 1092 K
File Attributes : A
==================================================
==================================================
Process Name : TDispVol.exe
ProcessID : 756
Priority : Normal
Product Name : TDispVol
Version : 3, 18, 0, 0
Description : TDispVol
Company : TOSHIBA Corporation
Window Title :
File Size : 73,728
File Created Date : 06/08/28 10:50:29 ص
File Modified Date : 01/02/26 12:03:16 م
Filename : C:\WINDOWS\system32\TDispVol.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 4
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3360 K
Mem Usage Peak : 3360 K
Page Faults : 966
Pagefile Usage : 1716 K
Pagefile Peak Usage : 1716 K
File Attributes : A
==================================================
==================================================
Process Name : igfxtray.exe
ProcessID : 772
Priority : Normal
Product Name : Intel(R) Common User Interface
Version : 3.0.0.4543
Description : igfxTray Module
Company : Intel Corporation
Window Title :
File Size : 94,208
File Created Date : 06/08/28 10:48:29 ص
File Modified Date : 23/02/27 06:17:04 م
Filename : C:\WINDOWS\system32\igfxtray.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 4148 K
Mem Usage Peak : 4156 K
Page Faults : 1123
Pagefile Usage : 992 K
Pagefile Peak Usage : 2432 K
File Attributes : A
==================================================
==================================================
Process Name : hkcmd.exe
ProcessID : 752
Priority : Normal
Product Name : Intel(R) Common User Interface
Version : 3.0.0.4543
Description : hkcmd Module
Company : Intel Corporation
Window Title :
File Size : 77,824
File Created Date : 06/08/28 10:48:28 ص
File Modified Date : 23/02/27 06:13:40 م
Filename : C:\WINDOWS\system32\hkcmd.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 12
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3640 K
Mem Usage Peak : 3648 K
Page Faults : 978
Pagefile Usage : 776 K
Pagefile Peak Usage : 864 K
File Attributes : A
==================================================
==================================================
Process Name : igfxpers.exe
ProcessID : 860
Priority : Normal
Product Name : Intel(R) Common User Interface
Version : 3.0.0.4543
Description : persistence Module
Company : Intel Corporation
Window Title :
File Size : 118,784
File Created Date : 06/08/28 10:48:28 ص
File Modified Date : 23/02/27 06:17:50 م
Filename : C:\WINDOWS\system32\igfxpers.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3624 K
Mem Usage Peak : 3632 K
Page Faults : 974
Pagefile Usage : 756 K
Pagefile Peak Usage : 784 K
File Attributes : A
==================================================
==================================================
Process Name : RTHDCPL.EXE
ProcessID : 940
Priority : Normal
Product Name : Realtek HD Audio Sound Effect Manager
Version : 2.1.1.4
Description : Realtek HD Audio Control Panel
Company : Realtek Semiconductor Corp.
Window Title :
File Size : 16,062,464
File Created Date : 06/08/28 10:56:50 ص
File Modified Date : 29/11/27 08:12:24 ص
Filename : C:\WINDOWS\RTHDCPL.EXE
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 46
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 21416 K
Mem Usage Peak : 21416 K
Page Faults : 8572
Pagefile Usage : 20736 K
Pagefile Peak Usage : 20756 K
File Attributes : A
==================================================
==================================================
Process Name : SynTPEnh.exe
ProcessID : 588
Priority : Normal
Product Name : Synaptics Pointing Device Driver
Version : 8.2.13.2 02Mar06
Description : Synaptics TouchPad Enhancements
Company : Synaptics, Inc.
Window Title :
File Size : 761,948
File Created Date : 06/08/28 10:58:26 ص
File Modified Date : 02/02/27 02:02:08 م
Filename : C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 8
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 5592 K
Mem Usage Peak : 5660 K
Page Faults : 1847
Pagefile Usage : 1620 K
Pagefile Peak Usage : 1720 K
File Attributes : A
==================================================
==================================================
Process Name : ZCfgSvc.exe
ProcessID : 1040
Priority : Normal
Product Name : ZeroCfgSvc Application
Version : 11.1.1.5
Description : ZeroCfgSvc MFC Application
Company : Intel Corporation
Window Title :
File Size : 823,296
File Created Date : 16/05/28 07:51:34 ص
File Modified Date : 16/05/28 07:51:34 ص
Filename : C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 5
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 14252 K
Mem Usage Peak : 14264 K
Page Faults : 28959
Pagefile Usage : 7316 K
Pagefile Peak Usage : 8588 K
File Attributes : A
==================================================
==================================================
Process Name : ifrmewrk.exe
ProcessID : 1100
Priority : Normal
Product Name : Intel(R) PROSet/Wireless
Version : 11.1.1.1
Description : Intel Framework MFC Application
Company : Intel Corporation
Window Title :
File Size : 974,848
File Created Date : 16/05/28 07:49:20 ص
File Modified Date : 16/05/28 07:49:20 ص
Filename : C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 5
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 15736 K
Mem Usage Peak : 15748 K
Page Faults : 66014
Pagefile Usage : 9768 K
Pagefile Peak Usage : 11064 K
File Attributes : A
==================================================
==================================================
Process Name : rundll32.exe
ProcessID : 1112
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2105)
Description : Run a DLL as an App
Company : Microsoft Corporation
Window Title :
File Size : 33,280
File Created Date : 17/06/25 09:56:56 م
File Modified Date : 08/04/29 12:12:33 ص
Filename : C:\WINDOWS\system32\rundll32.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 3
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 4304 K
Mem Usage Peak : 4304 K
Page Faults : 1149
Pagefile Usage : 2316 K
Pagefile Peak Usage : 2316 K
File Attributes : A
==================================================
==================================================
Process Name : thotkey.exe
ProcessID : 1472
Priority : Normal
Product Name : THotkey
Version : 1.00.0018
Description : Hotkey Utility
Company : TOSHIBA
Window Title :
File Size : 352,256
File Created Date : 07/08/28 05:59:47 ص
File Modified Date : 06/12/26 11:02:24 ص
Filename : C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 5
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 6036 K
Mem Usage Peak : 6036 K
Page Faults : 27963
Pagefile Usage : 1984 K
Pagefile Peak Usage : 1984 K
File Attributes : A
==================================================
==================================================
Process Name : CFSServ.exe
ProcessID : 1484
Priority : Normal
Product Name : ConfigFree(TM)
Version : 6, 0, 0, 116
Description : ConfigFree(TM) Search for Wireless Devices Version 5.70
Company : TOSHIBA CORPORATION
Window Title :
File Size : 798,720
File Created Date : 06/08/28 10:50:09 ص
File Modified Date : 16/10/26 11:44:38 ص
Filename : C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 18
Hidden Windows : 20
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 6768 K
Mem Usage Peak : 19796 K
Page Faults : 16175
Pagefile Usage : 24092 K
Pagefile Peak Usage : 24092 K
File Attributes :
==================================================
==================================================
Process Name : TPSBattM.exe
ProcessID : 1492
Priority : Normal
Product Name : TOSHIBA Power Saver
Version : 1, 0, 2, 0
Description :
Company : TOSHIBA Corporation
Window Title :
File Size : 40,960
File Created Date : 06/08/28 10:56:29 ص
File Modified Date : 28/06/26 11:26:02 ص
Filename : C:\WINDOWS\system32\TPSBattM.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3248 K
Mem Usage Peak : 3248 K
Page Faults : 893
Pagefile Usage : 848 K
Pagefile Peak Usage : 848 K
File Attributes : A
==================================================
==================================================
Process Name : Toshiba.exe
ProcessID : 1500
Priority : Normal
Product Name : Synaptics Pointing Device Driver
Version : 8.2.13.2 02Mar06
Description : Toshiba Custom PlugIn Application
Company : Synaptics, Inc.
Window Title :
File Size : 151,552
File Created Date : 06/08/28 10:58:26 ص
File Modified Date : 02/02/27 01:50:52 م
Filename : C:\Program Files\Synaptics\SynTP\Toshiba.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:48 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3772 K
Mem Usage Peak : 3772 K
Page Faults : 999
Pagefile Usage : 1128 K
Pagefile Peak Usage : 1128 K
File Attributes : A
==================================================
==================================================
Process Name : Athan.exe
ProcessID : 1536
Priority : Normal
Product Name : Athan
Version : 3.04
Description : Automatic Athan (Azan) five times a day for every prayer time. It covers more than 5 million cities, towns, and villages all o
Company :
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Window Title : Athan
File Size : 1,069,056
File Created Date : 25/06/29 10:46:22 م
File Modified Date : 16/08/29 01:03:39 ص
Filename : C:\Program Files\Athan\Athan.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 1
Hidden Windows : 32
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 4668 K
Mem Usage Peak : 8636 K
Page Faults : 4199
Pagefile Usage : 3644 K
Pagefile Peak Usage : 3784 K
File Attributes : A
==================================================
==================================================
Process Name : ItSecMng.exe
ProcessID : 1284
Priority : Normal
Product Name : Bluetooth Stack for Windows by Toshiba
Version : 6, 0, 0, 0
Description : IT Security Manager for Toshiba Stack
Company : TOSHIBA CORPORATION
Window Title :
File Size : 75,136
File Created Date : 17/09/28 01:03:46 م
File Modified Date : 17/09/28 01:03:46 م
Filename : C:\Program Files\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3148 K
Mem Usage Peak : 3148 K
Page Faults : 866
Pagefile Usage : 732 K
Pagefile Peak Usage : 732 K
File Attributes : A
==================================================
==================================================
Process Name : egui.exe
ProcessID : 1688
Priority : Normal
Product Name : ESET Smart Security
Version : 3.0.672
Description : Eset GUI
Company : ESET
Window Title :
File Size : 1,447,168
File Created Date : 16/08/29 10:23:50 ص
File Modified Date : 16/08/29 10:23:50 ص
Filename : C:\Program Files\ESET\ESET Smart Security\egui.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 4
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3100 K
Mem Usage Peak : 7472 K
Page Faults : 3393
Pagefile Usage : 1924 K
Pagefile Peak Usage : 2152 K
File Attributes : A
==================================================
==================================================
Process Name : qttask.exe
ProcessID : 1684
Priority : Normal
Product Name : QuickTime
Version : 7.1
Description : QuickTime Task
Company : Apple Computer, Inc.
Window Title :
File Size : 282,624
File Created Date : 07/08/28 08:55:00 م
File Modified Date : 07/08/28 08:55:00 م
Filename : C:\Program Files\QuickTime\qttask.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3204 K
Mem Usage Peak : 3204 K
Page Faults : 885
Pagefile Usage : 716 K
Pagefile Peak Usage : 716 K
File Attributes : A
==================================================
==================================================
Process Name : LAUNCH~1.EXE
ProcessID : 1692
Priority : Normal
Product Name : PC Suite
Version : 6, 81, 61, 4
Description : PC Suite
Company : Nokia
Window Title :
File Size : 229,376
File Created Date : 19/05/27 09:36:18 ص
File Modified Date : 19/05/27 09:36:18 ص
Filename : C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 7
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 14236 K
Mem Usage Peak : 14812 K
Page Faults : 8917
Pagefile Usage : 7508 K
Pagefile Peak Usage : 9956 K
File Attributes : A
==================================================
==================================================
Process Name : realsched.exe
ProcessID : 1824
Priority : Normal
Product Name : RealPlayer (32-bit)
Version : 0.1.1.68
Description : RealNetworks Scheduler
Company : RealNetworks, Inc.
Window Title :
File Size : 185,872
File Created Date : 28/11/29 07:14:12 م
File Modified Date : 28/11/29 07:14:12 م
Filename : C:\Program Files\Common Files\Real\Update_OB\realsched.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 204 K
Mem Usage Peak : 3204 K
Page Faults : 11656
Pagefile Usage : 1000 K
Pagefile Peak Usage : 1024 K
File Attributes : A
==================================================
==================================================
Process Name : jusched.exe
ProcessID : 236
Priority : Normal
Product Name : Java(TM) Platform SE 6 U11
Version : 6.0.110.3
Description : Java(TM) Platform SE binary
Company : Sun Microsystems, Inc.
Window Title :
File Size : 136,600
File Created Date : 30/11/29 08:17:47 م
File Modified Date : 12/11/29 05:43:42 ص
Filename : C:\Program Files\Java\jre6\bin\jusched.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 0
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 4864 K
Mem Usage Peak : 4888 K
Page Faults : 1269
Pagefile Usage : 1340 K
Pagefile Peak Usage : 1372 K
File Attributes : A
==================================================
==================================================
Process Name : ctfmon.exe
ProcessID : 308
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2105)
Description : CTF Loader
Company : Microsoft Corporation
Window Title :
File Size : 15,360
File Created Date : 17/06/25 09:56:50 م
File Modified Date : 08/04/29 12:12:16 ص
Filename : C:\WINDOWS\system32\ctfmon.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 5
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3980 K
Mem Usage Peak : 3984 K
Page Faults : 1231
Pagefile Usage : 996 K
Pagefile Peak Usage : 996 K
File Attributes : A
==================================================
==================================================
Process Name : toscdspd.exe
ProcessID : 384
Priority : Normal
Product Name : CD/DVD Drive Acoustic Silencer
Version : 1, 0, 6, 0
Description : CD/DVD Drive Acoustic Silencer
Company : TOSHIBA
Window Title :
File Size : 65,536
File Created Date : 07/08/28 04:17:41 ص
File Modified Date : 03/03/26 08:26:06 ص
Filename : C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3084 K
Mem Usage Peak : 3084 K
Page Faults : 850
Pagefile Usage : 692 K
Pagefile Peak Usage : 692 K
File Attributes : A
==================================================
==================================================
Process Name : PcSync2.exe
ProcessID : 412
Priority : Normal
Product Name : PC Sync
Version : 2.00 (506)
Description : PC Sync
Company : Time Information Services Ltd.
Window Title :
File Size : 1,449,984
File Created Date : 01/06/27 01:21:14 م
File Modified Date : 01/06/27 01:21:14 م
Filename : C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 4
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 15128 K
Mem Usage Peak : 17364 K
Page Faults : 8326
Pagefile Usage : 8868 K
Pagefile Peak Usage : 11500 K
File Attributes : A
==================================================
==================================================
Process Name : TosBtMng.exe
ProcessID : 280
Priority : Normal
Product Name : Bluetooth Stack for Windows by TOSHIBA
Version : 6.00.8414.41
Description : TosBtMng
Company : TOSHIBA CORPORATION.
Window Title :
File Size : 2,979,144
File Created Date : 08/04/29 08:05:40 م
File Modified Date : 08/04/29 08:05:40 م
Filename : C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 4
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 8236 K
Mem Usage Peak : 8272 K
Page Faults : 2541
Pagefile Usage : 6752 K
Pagefile Peak Usage : 6788 K
File Attributes : A
==================================================
==================================================
Process Name : BtMon2.exe
ProcessID : 912
Priority : Normal
Product Name : Bluetooth Monitor 2.0
Version : 2, 0, 0, 1
Description : Bluetooth Monitor 2.0
Company : TOSHIBA
Window Title :
File Size : 65,536
File Created Date : 23/10/29 10:25:30 م
File Modified Date : 28/09/25 04:47:24 م
Filename : C:\Program Files\TOSHIBA\Bluetooth Monitor\BtMon2.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:49 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3908 K
Mem Usage Peak : 3908 K
Page Faults : 3120
Pagefile Usage : 2052 K
Pagefile Peak Usage : 2056 K
File Attributes : A
==================================================
==================================================
Process Name : MPAPI3s.exe
ProcessID : 1320
Priority : Normal
Product Name : Nokia Connectivity Library
Version : 6.81.161.1
Description : Mobile Phone API
Company : Nokia Corporation
Window Title :
File Size : 471,552
File Created Date : 13/05/27 07:37:18 ص
File Modified Date : 13/05/27 07:37:18 ص
Filename : C:\PROGRA~1\COMMON~1\Nokia\MPAPI\MPAPI3s.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:50 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 4036 K
Mem Usage Peak : 4048 K
Page Faults : 1101
Pagefile Usage : 868 K
Pagefile Peak Usage : 900 K
File Attributes : A
==================================================
==================================================
Process Name : TosA2dp.exe
ProcessID : 1400
Priority : Normal
Product Name : Bluetooth Stack for Windows by TOSHIBA
Version : 6.0.8513.5
Description : TosA2dp
Company : TOSHIBA CORPORATION.
Window Title :
File Size : 357,704
File Created Date : 08/05/29 03:45:04 م
File Modified Date : 08/05/29 03:45:04 م
Filename : C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:50 م
Visible Windows : 0
Hidden Windows : 6
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 5044 K
Mem Usage Peak : 5044 K
Page Faults : 1353
Pagefile Usage : 3236 K
Pagefile Peak Usage : 3236 K
File Attributes : A
==================================================
==================================================
Process Name : TosBtHid.exe
ProcessID : 1420
Priority : Normal
Product Name : Bluetooth Stack for Windows by TOSHIBA
Version : 6, 0, 0, 1
Description : TosBtHid
Company : TOSHIBA CORPORATION.
Window Title :
File Size : 83,272
File Created Date : 24/03/29 04:08:50 م
File Modified Date : 24/03/29 04:08:50 م
Filename : C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHid.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:51 م
Visible Windows : 0
Hidden Windows : 2
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 3184 K
Mem Usage Peak : 3184 K
Page Faults : 989
Pagefile Usage : 732 K
Pagefile Peak Usage : 792 K
File Attributes : A
==================================================
==================================================
Process Name : TosBtHsp.exe
ProcessID : 2060
Priority : Normal
Product Name : Bluetooth Stack for Windows by Toshiba
Version : 6.00.04.080522
Description : TosBtHSP
Company : TOSHIBA CORPORATION.
Window Title :
File Size : 288,072
File Created Date : 18/05/29 01:07:00 م
File Modified Date : 18/05/29 01:07:00 م
Filename : C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:51 م
Visible Windows : 0
Hidden Windows : 5
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 5380 K
Mem Usage Peak : 5380 K
Page Faults : 1482
Pagefile Usage : 3340 K
Pagefile Peak Usage : 3340 K
File Attributes : A
==================================================
==================================================
Process Name : TosAVRC.exe
ProcessID : 2108
Priority : Normal
Product Name : Bluetooth Stack for Windows by TOSHIBA
Version : 6.0.8513.3
Description : TosAVRC
Company : TOSHIBA CORPORATION.
Window Title :
File Size : 288,072
File Created Date : 14/05/29 02:43:20 م
File Modified Date : 14/05/29 02:43:20 م
Filename : C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosAVRC.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:51 م
Visible Windows : 0
Hidden Windows : 5
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 4464 K
Mem Usage Peak : 4464 K
Page Faults : 1210
Pagefile Usage : 2388 K
Pagefile Peak Usage : 2388 K
File Attributes : A
==================================================
==================================================
Process Name : tosOBEX.exe
ProcessID : 2168
Priority : Normal
Product Name : tosOBEX
Version : 6, 0, 0, 8425
Description : tosOBEX
Company : TOSHIBA CORPORATION.
Window Title :
File Size : 311,296
File Created Date : 19/04/29 08:31:32 ص
File Modified Date : 19/04/29 08:31:32 ص
Filename : C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:52 م
Visible Windows : 0
Hidden Windows : 3
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 7452 K
Mem Usage Peak : 7452 K
Page Faults : 1990
Pagefile Usage : 5592 K
Pagefile Peak Usage : 5676 K
File Attributes : A
==================================================
==================================================
Process Name : tosBtProc.exe
ProcessID : 2424
Priority : Normal
Product Name : TOSHIBA CORPORATION
Version : 6.00.8523.ALL
Description : TosBtProc
Company : TOSHIBA CORPORATION.
Window Title :
File Size : 2,569,544
File Created Date : 18/05/29 04:07:44 م
File Modified Date : 18/05/29 04:07:44 م
Filename : C:\Program Files\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:53 م
Visible Windows : 0
Hidden Windows : 3
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 4708 K
Mem Usage Peak : 4708 K
Page Faults : 1273
Pagefile Usage : 1716 K
Pagefile Peak Usage : 1716 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 2620
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 3320 K
Mem Usage Peak : 3328 K
Page Faults : 878
Pagefile Usage : 2200 K
Pagefile Peak Usage : 2224 K
File Attributes : A
==================================================
==================================================
Process Name : CFSvcs.exe
ProcessID : 2632
Priority : Normal
Product Name : ConfigFree(TM)
Version : 6, 0, 0, 1
Description : Service of ConfigFree.
Company : TOSHIBA CORPORATION
Window Title :
File Size : 40,960
File Created Date : 06/08/28 10:49:59 ص
File Modified Date : 07/12/25 12:38:38 م
Filename : C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 768 K
Mem Usage Peak : 3580 K
Page Faults : 1078
Pagefile Usage : 1348 K
Pagefile Peak Usage : 1360 K
File Attributes :
==================================================
==================================================
Process Name : ekrn.exe
ProcessID : 2688
Priority : Normal
Product Name : ESET Smart Security
Version : 3.0.672
Description : Eset Service
Company : ESET
Window Title :
File Size : 468,224
File Created Date : 16/08/29 10:25:10 ص
File Modified Date : 16/08/29 10:25:10 ص
Filename : C:\Program Files\ESET\ESET Smart Security\ekrn.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 3
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 44932 K
Mem Usage Peak : 57972 K
Page Faults : 133111
Pagefile Usage : 40816 K
Pagefile Peak Usage : 73296 K
File Attributes : A
==================================================
==================================================
Process Name : EvtEng.exe
ProcessID : 2712
Priority : Normal
Product Name : Intel(R) PROSet/Wireless Event Log
Version : 11.1.1.1
Description : Intel(R) PROSet/Wireless Event Log
Company : Intel Corporation
Window Title :
File Size : 647,168
File Created Date : 16/05/28 08:00:20 ص
File Modified Date : 16/05/28 08:00:20 ص
Filename : C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 12004 K
Mem Usage Peak : 12020 K
Page Faults : 3231
Pagefile Usage : 8304 K
Pagefile Peak Usage : 8576 K
File Attributes : A
==================================================
==================================================
Process Name : jqs.exe
ProcessID : 2732
Priority : Low
Product Name : Java(TM) Platform SE 6 U11
Version : 6.0.110.3
Description : Java(TM) Quick Starter Service
Company : Sun Microsystems, Inc.
Window Title :
File Size : 152,984
File Created Date : 30/11/29 08:17:46 م
File Modified Date : 12/11/29 05:43:40 ص
Filename : C:\Program Files\Java\jre6\bin\jqs.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 1392 K
Mem Usage Peak : 16532 K
Page Faults : 760330
Pagefile Usage : 2232 K
Pagefile Peak Usage : 2420 K
File Attributes : A
==================================================
==================================================
Process Name : MDM.EXE
ProcessID : 2800
Priority : Normal
Product Name : Microsoft® Visual Studio .NET
Version : 7.00.9466
Description : Machine Debug Manager
Company : Microsoft Corporation
Window Title :
File Size : 322,120
File Created Date : 19/04/24 11:25:00 م
File Modified Date : 19/04/24 11:25:00 م
Filename : C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
Base Address : 0x00400000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 2976 K
Mem Usage Peak : 2984 K
Page Faults : 797
Pagefile Usage : 1016 K
Pagefile Peak Usage : 1040 K
File Attributes : A
==================================================
==================================================
Process Name : RegSrvc.exe
ProcessID : 2836
Priority : Normal
Product Name : Intel(R) PROSet/Wireless Registry Service
Version : 11.1.1.0
Description : Intel(R) PROSet/Wireless Registry Service
Company : Intel Corporation
Window Title :
File Size : 327,680
File Created Date : 16/05/28 07:41:30 ص
File Modified Date : 16/05/28 07:41:30 ص
Filename : C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 3076 K
Mem Usage Peak : 3084 K
Page Faults : 788
Pagefile Usage : 928 K
Pagefile Peak Usage : 952 K
File Attributes : A
==================================================
==================================================
Process Name : PAStiSvc.exe
ProcessID : 2944
Priority : Normal
Product Name :
Version :
Description :
Company :
Window Title :
File Size : 53,248
File Created Date : 30/11/29 08:24:55 م
File Modified Date : 04/12/25 06:32:38 ص
Filename : C:\WINDOWS\System32\PAStiSvc.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 1004 K
Mem Usage Peak : 1008 K
Page Faults : 44419
Pagefile Usage : 212 K
Pagefile Peak Usage : 216 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 2976
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\system32\svchost.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 4408 K
Mem Usage Peak : 4488 K
Page Faults : 1301
Pagefile Usage : 2464 K
Pagefile Peak Usage : 2628 K
File Attributes : A
==================================================
==================================================
Process Name : TAPPSRV.exe
ProcessID : 2992
Priority : Normal
Product Name : TOSHIBA TAPPSRV
Version : 1, 0, 0, 13M
Description : TOSHIBA TAPPSRV
Company : TOSHIBA Corp.
Window Title :
File Size : 35,328
File Created Date : 07/08/28 05:59:47 ص
File Modified Date : 20/11/26 08:22:14 ص
Filename : C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 1736 K
Mem Usage Peak : 1736 K
Page Faults : 440
Pagefile Usage : 516 K
Pagefile Peak Usage : 516 K
File Attributes : A
==================================================
==================================================
Process Name : TosBtSrv.exe
ProcessID : 3004
Priority : Normal
Product Name : Bluetooth Stack for Windows by TOSHIBA
Version : 1, 0, 2922, 0
Description : TOSHIBA Bluetooth Service
Company : TOSHIBA CORPORATION
Window Title :
File Size : 120,168
File Created Date : 17/05/29 07:54:42 م
File Modified Date : 17/05/29 07:54:42 م
Filename : C:\Program Files\Toshiba\Bluetooth Toshiba Stack\TosBtSrv.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:56 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 2620 K
Mem Usage Peak : 2620 K
Page Faults : 670
Pagefile Usage : 828 K
Pagefile Peak Usage : 828 K
File Attributes : A
==================================================
==================================================
Process Name : ServiceLayer.exe
ProcessID : 3504
Priority : Normal
Product Name : PC Connectivity Solution
Version : 6, 81, 60, 0
Description : ServiceLayer Module
Company : Nokia.
Window Title :
File Size : 174,080
File Created Date : 09/05/27 10:59:18 ص
File Modified Date : 09/05/27 10:59:18 ص
Filename : C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
Base Address : 0x00400000
Created On : 11/01/30 02:17:59 م
Visible Windows : 0
Hidden Windows : 6
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 7340 K
Mem Usage Peak : 7412 K
Page Faults : 9343
Pagefile Usage : 3932 K
Pagefile Peak Usage : 3992 K
File Attributes : A
==================================================
==================================================
Process Name : alg.exe
ProcessID : 3828
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-0852)
Description : Application Layer Gateway Service
Company : Microsoft Corporation
Window Title :
File Size : 44,544
File Created Date : 17/06/25 09:56:48 م
File Modified Date : 08/04/29 12:12:12 ص
Filename : C:\WINDOWS\System32\alg.exe
Base Address : 0x01000000
Created On : 11/01/30 02:17:59 م
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 3696 K
Mem Usage Peak : 3728 K
Page Faults : 969
Pagefile Usage : 1224 K
Pagefile Peak Usage : 1256 K
File Attributes : A
==================================================
==================================================
Process Name : Dot1XCfg.exe
ProcessID : 3768
Priority : Normal
Product Name : Intel PROSet/Wireless
Version : 11.1.1.1
Description : Intel 802.1X Server
Company : Intel Corporation
Window Title :
File Size : 491,520
File Created Date : 16/05/28 07:45:00 ص
File Modified Date : 16/05/28 07:45:00 ص
Filename : C:\Program Files\Intel\Wireless\Bin\Dot1XCfg.exe
Base Address : 0x00400000
Created On : 11/01/30 02:18:01 م
Visible Windows : 0
Hidden Windows : 5
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 14960 K
Mem Usage Peak : 14960 K
Page Faults : 3960
Pagefile Usage : 9476 K
Pagefile Peak Usage : 9512 K
File Attributes : A
==================================================
==================================================
Process Name : svchost.exe
ProcessID : 2936
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Generic Host Process for Win32 Services
Company : Microsoft Corporation
Window Title :
File Size : 14,336
File Created Date : 17/06/25 09:56:58 م
File Modified Date : 08/04/29 12:12:36 ص
Filename : C:\WINDOWS\System32\svchost.exe
Base Address : 0x01000000
Created On : 11/01/30 02:24:23 م
Visible Windows : 0
Hidden Windows : 0
User Name : NT AUTHORITY\SYSTEM
Mem Usage : 13748 K
Mem Usage Peak : 13948 K
Page Faults : 7347
Pagefile Usage : 7924 K
Pagefile Peak Usage : 8232 K
File Attributes : A
==================================================
==================================================
Process Name : runn.exe
ProcessID : 3724
Priority : Normal
Product Name :
Version :
Description :
Company :
Window Title :
File Size : 71,680
File Created Date : 11/01/30 03:31:39 م
File Modified Date : 24/01/29 01:24:25 ص
Filename : C:\DOCUME~1\majed\LOCALS~1\Temp\bntoz\runn.exe
Base Address : 0x00400000
Created On : 11/01/30 03:31:39 م
Visible Windows : 0
Hidden Windows : 0
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 2128 K
Mem Usage Peak : 2136 K
Page Faults : 610
Pagefile Usage : 624 K
Pagefile Peak Usage : 696 K
File Attributes : A
==================================================
==================================================
Process Name : cmd.exe
ProcessID : 3628
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2111)
Description : Windows Command Processor
Company : Microsoft Corporation
Window Title :
File Size : 389,120
File Created Date : 17/06/25 09:56:50 م
File Modified Date : 08/04/29 12:12:14 ص
Filename : C:\WINDOWS\system32\cmd.exe
Base Address : 0x4AD00000
Created On : 11/01/30 03:31:39 م
Visible Windows : 0
Hidden Windows : 1
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 2916 K
Mem Usage Peak : 2980 K
Page Faults : 827
Pagefile Usage : 2060 K
Pagefile Peak Usage : 2136 K
File Attributes : A
==================================================
==================================================
Process Name : wmiprvse.exe
ProcessID : 3096
Priority : Normal
Product Name : Microsoft® Windows® Operating System
Version : 5.1.2600.5512 (xpsp.080413-2108)
Description : WMI
Company : Microsoft Corporation
Window Title :
File Size : 218,112
File Created Date : 06/08/28 10:13:31 ص
File Modified Date : 08/04/29 12:12:40 ص
Filename : C:\WINDOWS\system32\wbem\wmiprvse.exe
Base Address : 0x01000000
Created On : 11/01/30 03:31:40 م
Visible Windows : 0
Hidden Windows : 0
User Name :
Mem Usage : 5692 K
Mem Usage Peak : 5692 K
Page Faults : 1459
Pagefile Usage : 2924 K
Pagefile Peak Usage : 2924 K
File Attributes : A
==================================================
==================================================
Process Name : CProcess.exe
ProcessID : 3540
Priority : Normal
Product Name : CurrProcess
Version : 1.11
Description : CurrProcess
Company : NirSoft
Window Title :
File Size : 35,840
File Created Date : 11/01/30 03:31:38 م
File Modified Date : 08/06/26 07:46:34 ص
Filename : C:\DOCUME~1\majed\LOCALS~1\Temp\bntoz\CProcess.exe
Base Address : 0x00400000
Created On : 11/01/30 03:31:40 م
Visible Windows : 0
Hidden Windows : 0
User Name : TKT-0FA98AB3B88\majed
Mem Usage : 2260 K
Mem Usage Peak : 2348 K
Page Faults : 1156
Pagefile Usage : 924 K
Pagefile Peak Usage : 1024 K
File Attributes : A
==================================================
.
.
--------------------------\\\ End Report Of Running Processes ---------------
.
.
.
.
--------------------------\\\ Windows XP Startup List ---------------
.
HKLM\System\CurrentControlSet\Control\Session Manager\BootExecute
autocheck autochk *
autocheck autochk *
Auto Check Utility
Microsoft Corporation
5.01.2600.5512
c:\windows\system32\autochk.exe
HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd\StartupPrograms
rdpclip
rdpclip
RDP Clip Monitor
Microsoft Corporation
5.01.2600.5512
c:\windows\system32\rdpclip.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit
C:\WINDOWS\system32\userinit.exe
C:\WINDOWS\system32\userinit.exe
Userinit Logon Application
Microsoft Corporation
5.01.2600.5512
c:\windows\system32\userinit.exe
HKCU\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
Explorer.exe
Explorer.exe
Windows Explorer
Microsoft Corporation
6.00.2900.5512
c:\windows\explorer.exe
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell
Explorer.exe
Explorer.exe
Windows Explorer
Microsoft Corporation
6.00.2900.5512
c:\windows\explorer.exe
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
NDSTray.exe
NDSTray.exe
ConfigFree(TM) Tray
TOSHIBA CORPORATION
6.00.0001.0001
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
TFncKy
TFncKy.exe
TFncKy
TOSHIBA Corporation
3.22.0000.0000
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
TDispVol
TDispVol.exe
TDispVol
TOSHIBA Corporation
3.18.0000.0000
c:\windows\system32\tdispvol.exe
igfxtray
C:\WINDOWS\system32\igfxtray.exe
igfxTray Module
Intel Corporation
3.00.0000.4543
c:\windows\system32\igfxtray.exe
igfxhkcmd
C:\WINDOWS\system32\hkcmd.exe
hkcmd Module
Intel Corporation
3.00.0000.4543
c:\windows\system32\hkcmd.exe
igfxpers
C:\WINDOWS\system32\igfxpers.exe
persistence Module
Intel Corporation
3.00.0000.4543
c:\windows\system32\igfxpers.exe
RTHDCPL
RTHDCPL.EXE
Realtek HD Audio Control Panel
Realtek Semiconductor Corp.
2.01.0001.0004
c:\windows\rthdcpl.exe
SkyTel
SkyTel.EXE
Realtek Voice Manager
Realtek Semiconductor Corp.
1.00.0000.0000
c:\windows\skytel.exe
SynTPEnh
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
Synaptics TouchPad Enhancements
Synaptics, Inc.
8.02.0013.0002
c:\program files\synaptics\syntp\syntpenh.exe
IntelZeroConfig
"C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
ZeroCfgSvc MFC Application
Intel Corporation
11.01.0001.0005
c:\program files\intel\wireless\bin\zcfgsvc.exe
IntelWireless
"C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
Intel Framework MFC Application
Intel Corporation
11.01.0001.0001
c:\program files\intel\wireless\bin\ifrmewrk.exe
BluetoothAuthenticationAgent
rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
Bluetooth Control Panel Applet
Microsoft Corporation
5.01.2600.5512
c:\windows\system32\bthprops.cpl
NeroFilterCheck
C:\WINDOWS\system32\NeroCheck.exe
NeroCheck
Ahead Software Gmbh
1.00.0000.0002
c:\windows\system32\nerocheck.exe
THotkey
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
Hotkey Utility
TOSHIBA
1.00.0000.0018
c:\program files\toshiba\toshiba applet\thotkey.exe
CFSServ.exe
CFSServ.exe -NoClient
ConfigFree(TM) Search for Wireless Devices Version 5.70
TOSHIBA CORPORATION
6.00.0000.0116
C:\Program Files\TOSHIBA\ConfigFree\CFSServ.exe
Athan
C:\Program Files\Athan\Athan.exe
Automatic Athan (Azan) five times a day for every prayer time. It covers more than 5 million cities, towns, and villages all over the world.
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

3.04.0000.0000
c:\program files\athan\athan.exe
ITSecMng
%ProgramFiles%\TOSHIBA\Bluetooth Toshiba Stack\ItSecMng.exe /START
IT Security Manager for Toshiba Stack
TOSHIBA CORPORATION
6.00.0000.0000
c:\program files\toshiba\bluetooth toshiba stack\itsecmng.exe
egui
"C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
Eset GUI
ESET
3.00.0672.0000
c:\program files\eset\eset smart security\egui.exe
QuickTime Task
"C:\Program Files\QuickTime\qttask.exe" -atboottime
QuickTime Task
Apple Computer, Inc.
7.01.0000.0210
c:\program files\quicktime\qttask.exe
PCSuiteTrayApplication
C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.EXE -startup
PC Suite
Nokia
6.81.0061.0004
c:\program files\nokia\nokia pc suite 6\launchapplication.exe
TkBellExe
"C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
RealNetworks Scheduler
RealNetworks, Inc.
0.01.0001.0068
c:\program files\common files\real\update_ob\realsched.exe
Adobe Reader Speed Launcher
"C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
Adobe Acrobat SpeedLauncher
Adobe Systems Incorporated
8.00.0000.0000
c:\program files\adobe\reader 8.0\reader\reader_sl.exe
SunJavaUpdateSched
"C:\Program Files\Java\jre6\bin\jusched.exe"
Java(TM) Platform SE binary
Sun Microsystems, Inc.
6.00.0110.0003
c:\program files\java\jre6\bin\jusched.exe
UserFaultCheck
%systemroot%\system32\dumprep 0 -u
Windows Error Reporting Dump Reporting Tool
Microsoft Corporation
5.01.2600.5512
c:\windows\system32\dumprep.exe
C:\Documents and Settings\All Users\Start Menu\Programs\Startup
Adobe Gamma Loader.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Adobe Gamma Loader.lnk
Adobe Gamma Loader
Adobe Systems, Inc.
1.00.0000.0001
c:\program files\common files\adobe\calibration\adobe gamma loader.exe
Bluetooth Manager.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth Manager.lnk
TosBtMng
TOSHIBA CORPORATION.
6.00.0000.0041
c:\program files\toshiba\bluetooth toshiba stack\tosbtmng.exe
Bluetooth Monitor.lnk
C:\Documents and Settings\All Users\Start Menu\Programs\Startup\Bluetooth Monitor.lnk
Bluetooth Monitor 2.0
TOSHIBA
2.00.0000.0001
c:\program files\toshiba\bluetooth monitor\btmon2.exe
HKCU\Software\Microsoft\Windows\CurrentVersion\Run
CTFMON.EXE
C:\WINDOWS\system32\ctfmon.exe
CTF Loader
Microsoft Corporation
5.01.2600.5512
c:\windows\system32\ctfmon.exe
TOSCDSPD
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
CD/DVD Drive Acoustic Silencer
TOSHIBA
1.00.0006.0000
c:\program files\toshiba\toscdspd\toscdspd.exe
PcSync
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
PC Sync
Time Information Services Ltd.
2.00.0000.0506
c:\program files\nokia\nokia pc suite 6\pcsync2.exe
Task Scheduler
1-Click Maintenance.job
C:\Program Files\TuneUp Utilities 2008\OneClickStarter.exe /schedulestart
TuneUp OneClick Starter
TuneUp Software GmbH
7.00.8007.0322
c:\program files\tuneup utilities 2008\oneclickstarter.exe
.
.
----------- End Report ---------------
 
توقيع : _Hemoo_
اخي التقارير الى الان سليمة
عطل استعادة النظام حسب الشرح التالي

dis_sys_xp.jpg


ثم

حمل اداة الكاسبر من الرابط التالي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


بعد التحميل ،، دبل كلك وسيتم استخراج ملف الاداة الى مجلد بسطح المكتب لحظات وتبدأ الاداة بالعمل

تابع الشرح لفحص الجهاز وتنظيفه وارفاق التقرير


zyzoom-7ce8879e89.png


zyzoom-cdd75c8aa3.png


zyzoom-89156f000e.png


zyzoom-6d533c4f2e.png


zyzoom-f20f3644d0.png


ثم قم بضغط التقرير ورفعه هنا>>>>
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي
 
والله غريبه هالجهاز , وش الي جاه :er: !!

حتى الـ ( NOD32 ) فيه شيء غريب !!

اذا عدت تشغيل الجهاز تطلع لي رسالتين من البرنامج بوجود فيروسين !!

واذا سويت فحص للجهاز , مايطلع شيء !!


على العموم جاري عمل اللازم ( الي أنت قلت عليه :er: )
 
توقيع : _Hemoo_
أخوي , أنا عطلت نقطة استعادة النظام

وسويت سكان للجهاز بـ الكاسبر ( الأداة )

ولقى حوالي 9 فيروسات , بعدها الكاسبر سوا ريستارت من حاله ( لأنه في بعض الفيروسات الي مسكها يقول لازم أسوي ريستارت عشان أحذفها ) فما قدرت أخذ تقرير !! :no: ( وش السواة ؟ )

وبعد ماسوا الجهاز ريستارت , طلعت نفس الرسالتين حقت النود ؟! :cr: ( يعني كنك ياأبو زيد ماغزيت :er: )

وهذي صوره للرساله الي تطلع من الويندز بعد ماصارت المشكله :f: ( حسبي الله على هالموقع حق الألعاب :mad: ) :

644222150.jpg

بعد ما أضغط Ok أو Cancel أو X

يتغير الثيم حق الويندز ( يصير زي هذاك الثيم القديم حق ويندز 95 :hh: )

بعد دقيقه يرجع كل شيء زي ماكان ؟!!


الله يوفقك , وش الحل ؟!و وش توقعك لسبب هالمشكلة ؟!
 
توقيع : _Hemoo_
طيب اخوي اعد الفحص بالوضع الامن
 
أخوي عرفت وشلون أجيب التقرير بعد ماسوا ريستارت :smile:

تفضل :

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


.:.

وياليت تقولي شلون أسوي فحص بالوضع الأمن ؟ ( لأني ماقد دخلت عليه أبد :smile: )

وهل أشيل الصح من نقطة استعادة النظام ( يعني أرجعها زي ماكانت ) , ولا أخليها زي ماهي الى ماتنتهي المشكله ؟!

والله إني داري إني تعبتك وأدوشت راسك , بس ماعندي غير الله ثم أنتم ( ومحلات الكمبيوتر أكرها ولا أثق فيها ابد ) , فياليت تصبر علي :b:
 
توقيع : _Hemoo_
اخي الاستعادة خليها طافية الان
الكاسبر حذف عندك اصابات خطرة جدا

اعد الفحص مرة ثانية بالوضع الامن

طريقة تشغيل الجهاز في الوضع الأمن



عند تشغيل الجهاز تبدأ بالضغط على F8


بشكل متكرر حتى تظهر هذه الشاشة

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي
 
التعديل الأخير بواسطة المشرف:
اعذرني أخوي , بس والله الفحص بـ( السيف مود ) طول جدا جدا

تفضل هذا تقرير الفحص :

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي


.:.

ومشكلة الـ NOD32 لازالت قائمة ( خروج الرسائل عند بداية التشغيل التي تخبرني بأنه مسك فيروسات )

أما مشكلة رسائل الويندز ولله الحمد خفت وان شاء الله تزول تماماً

.:.

وش رأيك أخوي ؟!
 
توقيع : _Hemoo_
واضح انه تم تنظيف الجهاز بالكامل
وباقي نقول ان النود مخرف
انصحك بحذفه واعادة تثبيته او استبداله بالكاسبر الاصدار الاخير
 
يعني خطوات الصيانة خلاص انتهت , مايحتاج تقرير لـ الهاي جاك ؟
 
توقيع : _Hemoo_
لا ما يحتاج اخي
هو سليم اصلاا
 
جزاك الله ألف خير , والله يرزقك الجنه , ويوفقك للعمل الصالح , ويخليك لعين ترجيك , ويحقق لك من الخير ماتتمنى

ويزوجك الحرمه الصالحه ان شاء الله ( اذا كانك ماتزوجت :d: )

ويمكن لنا لقاء آخر , اذا استمرت خذرفة النود :hh:
 
توقيع : _Hemoo_
جزاك الله ألف خير , والله يرزقك الجنه , ويوفقك للعمل الصالح , ويخليك لعين ترجيك , ويحقق لك من الخير ماتتمنى


ويزوجك الحرمه الصالحه ان شاء الله ( اذا كانك ماتزوجت :d: )


ويمكن لنا لقاء آخر , اذا استمرت خذرفة النود :hh:

اللهم آآآآآمين واياك وكل مسلم
الله يجزاك خير ويبيض وجهك

عذرا بغلق الموضوع لانتهائه
 
الحالة
مغلق و غير مفتوح للمزيد من الردود.
عودة
أعلى