مشكلة في تنصيب بعض البرامج

[بلوغرانا]

على سبيل المثال : برنامج الريل بلير قمت بتثبيته من السيدي ومن الجهاز ومن الفلاشة وكله لم ينفع تظهرت لي هذه الرسالة

مشكورين سلف والله يعطيكم العافية

 

[MAAX]

اهلاا بك
من اي موضوع حملت الريل بلاير مثلاا

 

[بلوغرانا]

من هنا أخي الفاضل

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

النسخ التي اقوم بتثبيتها مختلفة ليست نفس الاصدار

وشكرا لتعاونك ، جزاك الله خيرا

 

[بلوغرانا]

up


up


up


up

 

[MAAX]

اخي المشكلة من نفس النسخة
انا سالتك من وين حملتها لانه يظهر اسم المصمم بالرسالة
اعد تحميل النسخة او جرب نسخة مختلفة

 

[بلوغرانا]

اشكرك من كل قلبي لتواصلك ، ممنونك .

جربت غير نسخة وكلها نفس المشكلة

اتوقع في خطأ بالرجستري لاحظ الصورة عندما حاولت اثبت برنامج K-Lite Codes Pack

وشكرا لك مرة اخرى

 

[MAAX]

الله يحييك اخوي
حمل هذا البرنامج

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم

 

[بلوغرانا]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:23:38 م, on 03/04/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.20935)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\VistaDrive\VistaDrive.exe
C:\Program Files\Unlocker\UnlockerAssistant.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\WINDOWS\vsnpstd3.exe
C:\WINDOWS\tsnpstd3.exe
C:\Program Files\Autorun Eater\oldmcdonald.exe
C:\Program Files\RocketDock\RocketDock.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\WINDOWS\system32\WISPTIS.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\JetAudio\JetAudio.exe
C:\Program Files\All2Chat\All2Chat.exe
C:\Program Files\Opera\opera.exe
C:\Program Files\Autorun Eater\billy.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\WINDOWS\system32\msiexec.exe
C:\Documents and Settings\مكتبة النصـر\Desktop\Zyzoom_HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 9\SnagItBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~3\Office12\GRA8E1~1.DLL
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre6\bin\ssv.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: StylerToolBar - {D2F8F919-690B-4EA2-9FA7-A203D1E04F75} - C:\Program Files\Styler\TB\StylerTB.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 9\SnagItIEAddin.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [VistaDrive] C:\WINDOWS\VistaDrive\VistaDrive.exe
O4 - HKLM\..\Run: [UnlockerAssistant] C:\Program Files\Unlocker\UnlockerAssistant.exe -H
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [snpstd3] C:\WINDOWS\vsnpstd3.exe
O4 - HKLM\..\Run: [tsnpstd3] C:\WINDOWS\tsnpstd3.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Autorun Eater] C:\Program Files\Autorun Eater\oldmcdonald.exe
O4 - HKCU\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKUS\S-1-5-20\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [RocketDock] "C:\Program Files\RocketDock\RocketDock.exe" (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O8 - Extra context menu item: Add to Banner Ad Blocker - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{CAD70A67-B00E-474C-8F06-D659FDB822C4}: NameServer = 82.137.200.83,82.137.200.86
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~3\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~1\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll,wbsys.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe

--
End of file - 7894 bytes

 

[Corporation]

عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​

 

[MAAX]

حمل

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

(( محمول ))

ثم

ثم

^^

اعمل هالخطوه مرتين ثلاث الين ماعاد تطلع لك القيم

ثم جرب ..

 

[بلوغرانا]

عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​

ComboFix 09-04-01.01 - مكتبة النصـر 04/03/2009 20:21:33.1 - FAT32x86
Microsoft Windows XP Professional 5.1.2600.3.1256.1.1033.18.767.504 [GMT 3:00]
Running from: c:\documents and settings\مكتبة النصـر\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated)
FW: Kaspersky Internet Security *disabled*
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2009-03-03 to 2009-04-03 )))))))))))))))))))))))))))))))
.

No new files created in this timespan

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-03 17:24 --------- d-----w c:\program files\microsoft frontpage
2009-04-03 17:23 32 --sha-w c:\windows\system32\drivers\fidbox2.idx
2009-04-03 17:23 32 --sha-w c:\windows\system32\drivers\fidbox2.dat
2009-04-03 17:23 32 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-04-03 17:23 32 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-04-03 16:21 --------- d--h--w c:\documents and settings\All Users\Application Data\{8CC5CF4A-124E-41BA-B58C-A41F05BE09CC}
2009-03-31 13:24 --------- d-----w c:\documents and settings\All Users\Application Data\Apple Computer
2009-03-31 08:02 --------- d-----w c:\program files\Xilisoft
2009-03-31 08:02 --------- d-----w c:\program files\QuickTime
2009-03-30 08:47 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo!
2009-03-30 03:42 --------- d-----w c:\program files\Autorun Eater
2009-03-29 09:27 --------- d-----w c:\program files\Common Files\Adobe AIR
2009-03-29 09:23 --------- d-----w c:\program files\Common Files\Adobe
2009-03-29 06:56 --------- d-----w c:\program files\Yahoo!
2009-03-29 03:11 --------- d-----w c:\documents and settings\مكتبة النصـر\Application Data\IDM
2009-03-29 03:11 --------- d-----w c:\documents and settings\مكتبة النصـر\Application Data\DMCache
2009-03-29 03:10 --------- d-----w c:\program files\Internet Download Manager
2009-03-29 02:49 --------- d-----w c:\documents and settings\مكتبة النصـر\Application Data\ViStart
2009-03-29 02:22 218,624 ----a-w c:\windows\system32\uxtheme.dll
2009-03-29 02:16 --------- d-----w c:\program files\Start Magic
2009-03-28 23:58 --------- d-----w c:\documents and settings\مكتبة النصـر\Application Data\GRETECH
2009-03-28 23:57 --------- d-----w c:\program files\GRETECH
2009-03-28 20:30 --------- d-----w c:\documents and settings\All Users\Application Data\CenerTCPMessenger
2009-03-28 04:11 --------- d-----w c:\program files\Logon Loader
2009-03-28 03:53 --------- d-----w c:\program files\TechSmith
2009-03-28 03:53 --------- d-----w c:\documents and settings\All Users\Application Data\TechSmith
2009-03-28 03:51 --------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-03-27 17:53 --------- d-----w c:\program files\Common Files\snpstd3
2009-03-26 10:43 --------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-03-26 10:39 --------- d-----w c:\program files\Messenger Plus! Live
2009-03-26 10:39 --------- d-----w c:\program files\Circle Devlopement
2009-03-26 09:44 --------- d-----w c:\documents and settings\مكتبة النصـر\Application Data\Media Player Classic
2009-03-26 08:44 89,601 ----a-w c:\windows\system32\drivers\klick.dat
2009-03-26 08:44 33,808 ----a-w c:\windows\system32\drivers\klbg.sys
2009-03-26 08:44 101,287 ----a-w c:\windows\system32\drivers\klin.dat
2009-02-06 15:52 49,504 ----a-w c:\windows\system32\sirenacm.dll
2009-01-22 14:49 206,256 ----a-w c:\windows\system32\idmmbc.dll
2003-01-01 05:14 32,768 --sha-w c:\windows\system32\config\systemprofile\Local Settings\History\History.IE5\MSHist012003010120030102\index.dat
.

------- Sigcheck -------

04/14/2008 11:00 AM 578048 894b313c52589628bb996e175b581e3a c:\windows\system32\user32.dll
04/14/2008 11:00 AM 578560 b26b135ff1b9f60c9388b4a7d16f600b c:\windows\NiwradSoft Shell Pack\Backup\user32.dll

12/22/2008 09:12 PM 894464 5f3462dfeb44f5d03fcc92cbd190a313 c:\windows\system32\wininet.dll
12/22/2008 09:12 PM 827904 0d5b75171ff51775b630a431b6c667e8 c:\windows\NiwradSoft Shell Pack\Backup\wininet.dll

12/22/2008 09:12 PM 361600 038ca45522fe9b756efb90dbfa9141ea c:\windows\system32\drivers\tcpip.sys

12/22/2008 09:19 PM 2227328 8854cfaea4802e4dba1a500aed2feeed c:\windows\system32\ntkrnlpa.exe
12/22/2008 09:19 PM 2227200 ef5680965129c44d907a66f94fcc20dc c:\windows\NiwradSoft Shell Pack\Backup\ntkrnlpa.exe

12/22/2008 09:12 PM 2350464 ba1dc9c75bb8ba0913c461d1c845645d c:\windows\system32\ntoskrnl.exe
12/22/2008 09:12 PM 2350336 eb81346c3442562354234cbb8750ed72 c:\windows\NiwradSoft Shell Pack\Backup\ntoskrnl.exe

12/09/2008 10:34 PM 1540096 415a149b42d9e6016adec28f2a7aecd7 c:\windows\explorer.exe
12/09/2008 10:34 PM 1805824 69d1729c25955b4f386ccaa2038cf069 c:\windows\NiwradSoft Shell Pack\Backup\explorer.exe

04/14/2008 11:00 AM 40448 c1d50243355a290cb3aa684fd8b38170 c:\windows\system32\ctfmon.exe
04/14/2008 11:00 AM 15360 5f1d5f88303d4a4dbc8e5f97ba967cc3 c:\windows\NiwradSoft Shell Pack\Backup\ctfmon.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [09/02/2007 01:58 PM 495616]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [02/06/2009 06:53 PM 3885408]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [05/27/2008 09:58 PM 4269296]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [04/14/2008 11:00 AM 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [04/14/2008 11:00 AM 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [04/14/2008 11:00 AM 455168]
"VistaDrive"="c:\windows\VistaDrive\VistaDrive.exe" [10/05/2006 08:56 PM 280779]
"UnlockerAssistant"="c:\program files\Unlocker\UnlockerAssistant.exe" [05/02/2008 12:15 AM 15872]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [01/01/2003 05:23 AM 136600]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [01/01/2003 11:16 PM 206088]
"snpstd3"="c:\windows\vsnpstd3.exe" [05/10/2007 01:18 PM 835584]
"tsnpstd3"="c:\windows\tsnpstd3.exe" [04/21/2007 09:37 AM 270336]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [06/12/2008 02:38 AM 34672]
"Autorun Eater"="c:\program files\Autorun Eater\oldmcdonald.exe" [11/27/2008 02:19 AM 501768]
"SoundMan"="SOUNDMAN.EXE" [10/24/2005 09:45 AM 90112 c:\windows\SOUNDMAN.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"RocketDock"="c:\program files\RocketDock\RocketDock.exe" [09/02/2007 01:58 PM 495616]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"ShowDeskFix"="shell32" [X]
"_nltide_3"="advpack.dll" [12/22/2008 09:12 PM 124928 c:\windows\system32\advpack.dll]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\Resources\Themes\LogonUI\logonui.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\WBSrv]
09/16/2008 08:44 AM 174328 c:\program files\Stardock\Object Desktop\WindowBlinds\WbSrv.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"msacm.divxa32"= msaud32_divx.acm

[HKLM\~\startupfolder\C:^Documents and Settings^مكتبة النصـر^Start Menu^Programs^Startup^Styler.lnk]
path=c:\documents and settings\مكتبة النصـر\Start Menu\Programs\Startup\Styler.lnk
backup=c:\windows\pss\Styler.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\FixCamera]
--a------ 07/11/2007 04:09 PM 20480 c:\windows\FixCamera.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\GrooveMonitor]
--a------ 10/27/2006 12:47 AM 31016 c:\program files\Microsoft Office\Office12\GrooveMonitor.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LClock]
--a------ 09/19/2004 12:27 PM 65536 c:\program files\LClock\LClock.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
--a------ 02/06/2009 06:53 PM 3885408 c:\program files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Program Files\\Microsoft Office\\Office12\\ONENOTE.EXE"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"5876:TCP"= 5876:TCP:qvuke

R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [2008-01-29 33808]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [2008-03-13 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [2008-04-30 24592]
S2 yqsjw;Manager Support;c:\windows\system32\svchost.exe -k netsvcs [2008-04-14 14336]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
yqsjw

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D58F39FF-953E-4F45-898F-59F243B9A523}]
RUNDLL32 advpack.dll,LaunchINFSection Sidebar.inf,Register
.
Contents of the 'Scheduled Tasks' folder

2009-04-02 c:\windows\Tasks\User_Feed_Synchronization-{1F58F997-4583-4279-A629-1BE1CA2F37AB}.job
- c:\windows\system32\msfeedssync.exe [08/13/2007 06:36 PM]
.
- - - - ORPHANS REMOVED - - - -

WebBrowser-{8FF5E180-ABDE-46EB-B09E-D2AAB95CABE3} - (no file)


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
uInternet Settings,ProxyOverride = local
IE: ت&صدير إلى Microsoft Excel - c:\progra~1\MICROS~3\Office12\EXCEL.EXE/3000
IE: تحميل الكل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetAll.htm
IE: تحميل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEExt.htm
IE: تحميل محتوى FLV بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetVL.htm
LSP: c:\windows\system32\idmmbc.dll
TCP: {CAD70A67-B00E-474C-8F06-D659FDB822C4} = 82.137.200.83,82.137.200.86
FF - ProfilePath - c:\documents and settings\مكتبة النصـر\Application Data\Mozilla\Firefox\Profiles\6kv3493e.default\
FF - prefs.js: browser.startup.homepage -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

.

**************************************************************************

catchme 0.3.1375 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-04-03 20:25:30
Windows 5.1.2600 Service Pack 3 FAT NTAPI

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\yqsjw]
"ServiceDll"="c:\windows\system32\xpwho.dll"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-1491950412-2009852829-4049741679-1004\Software\Microsoft\Windows\CurrentVersion\Explorer\Clsid]
@Denied: (Full) (LocalSystem)
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1004)
c:\windows\system32\SETUPAPI.dll
c:\windows\system32\sfc_os.dll
c:\windows\system32\COMRes.dll
c:\windows\system32\cscui.dll
c:\program files\Stardock\Object Desktop\WindowBlinds\WBSrv.dll

- - - - - - - > 'lsass.exe'(1068)
c:\windows\system32\SETUPAPI.dll
c:\windows\system32\idmmbc.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\JAVA\JRE6\BIN\JQS.EXE
.
**************************************************************************
.
Completion time: 04/03/2009 20:27:24 - machine was rebooted [مكتبة النصـر]
ComboFix-quarantined-files.txt 2009-04-03 17:27:22

Pre-Run: 10,730,520,576 bytes free
Post-Run: 10,659,102,720 bytes free

198



====================

كثر الله خيرك أخي ..

 

[بلوغرانا]

أخي maax عملت بنصيحتك ولم تنفع

شكرا لتعاونكم وجزاكم الله خيرا

 

[MAAX]

اعمل التالي للتاكد من خلو الجهاز من الدود الالكتروني

عطل استعادة النظام حسب الشرح التالي

ثم

حمل الاداة التالية

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

شغلها فتظهر لك واجهة الاداة
احتر خيار التنظيف فتظهر شاشة الدوس للفحص
اتركها حتى تنتهي ويظهر التقرير
انسخه والصقه بمشاركتك القادمة​

 

[بلوغرانا]

Engine Version : 5300.2777
Engine Load Time : 31828 milliseconds
AV DAT Version : 5492.0000 488805 detections Built 11 كانون*الثاني, 2009
Extra DAT : 0 detections

Process : C:\Program Files\Autorun Eater\billy.exe : contains "Trojan" called "Generic.dx" (Deleted )
Memory : Deleted
Please wait ... building list of critical files to scan

Critical : Clean
Scanning the computer's cookie directories
Cookies : Clean
c:\pagefile.sys : Scan Failed
c:\hiberfil.sys : Scan Failed
c:\WINDOWS\system32\config\system.LOG : Scan Failed
c:\WINDOWS\system32\config\software.LOG : Scan Failed
c:\WINDOWS\system32\config\default.LOG : Scan Failed
c:\WINDOWS\system32\config\SAM.LOG : Scan Failed
c:\WINDOWS\system32\config\SECURITY.LOG : Scan Failed
c:\WINDOWS\system32\config\SECURITY : Scan Failed
c:\WINDOWS\system32\config\SOFTWARE : Scan Failed
c:\WINDOWS\system32\config\SYSTEM : Scan Failed
c:\WINDOWS\system32\config\DEFAULT : Scan Failed
c:\WINDOWS\system32\config\SAM : Scan Failed
c:\WINDOWS\system32\drivers\fidbox.dat : Scan Failed
c:\WINDOWS\system32\drivers\fidbox.idx : Scan Failed
c:\WINDOWS\system32\drivers\fidbox2.dat : Scan Failed
c:\WINDOWS\system32\drivers\fidbox2.idx : Scan Failed
c:\WINDOWS\Temp\Perflib_Perfdata_63c.dat : Scan Failed
c:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\av34.tmp : Scan Failed
c:\Documents and Settings\LocalService\ntuser.dat : Scan Failed
c:\Documents and Settings\LocalService\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\NetworkService\NTUSER.DAT : Scan Failed
c:\Documents and Settings\NetworkService\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\مكتبة النصـر\NTUSER.DAT : Scan Failed
c:\Documents and Settings\مكتبة النصـر\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\مكتبة النصـر\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\مكتبة النصـر\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\مكتبة النصـر\Local Settings\temp\Perflib_Perfdata_39c.dat : Scan Failed
Scanning the registry
Registry : Clean

Summary :-
FilesFound : 39626
FilesScanned : 22303
FilesNotScanned : 17323

ObjectsFound : 83334
ObjectsInfected : 1
ObjectsCleaned : 0
ObjectsDeleted : 1

FilesInfected : 0
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 0

Started at : 11:16:32 م 03 نيسان, 2009
Ended at : 11:37:27 م 03 نيسان, 2009
Duration : 20 minutes 55 seconds
3225 MB scanned in 1255 seconds = 2 MB/s
Engine Version : 5300.2777
Engine Load Time : 32047 milliseconds
AV DAT Version : 5492.0000 488805 detections Built 11 كانون*الثاني, 2009
Extra DAT : 0 detections

Memory : Clean
Please wait ... building list of critical files to scan

Critical : Clean
Scanning the computer's cookie directories
Cookies : Clean
c:\pagefile.sys : Scan Failed
c:\hiberfil.sys : Scan Failed
c:\WINDOWS\system32\config\system.LOG : Scan Failed
c:\WINDOWS\system32\config\software.LOG : Scan Failed
c:\WINDOWS\system32\config\default.LOG : Scan Failed
c:\WINDOWS\system32\config\SAM.LOG : Scan Failed
c:\WINDOWS\system32\config\SECURITY.LOG : Scan Failed
c:\WINDOWS\system32\config\SECURITY : Scan Failed
c:\WINDOWS\system32\config\SOFTWARE : Scan Failed
c:\WINDOWS\system32\config\SYSTEM : Scan Failed
c:\WINDOWS\system32\config\DEFAULT : Scan Failed
c:\WINDOWS\system32\config\SAM : Scan Failed
c:\WINDOWS\system32\drivers\fidbox.dat : Scan Failed
c:\WINDOWS\system32\drivers\fidbox.idx : Scan Failed
c:\WINDOWS\system32\drivers\fidbox2.dat : Scan Failed
c:\WINDOWS\system32\drivers\fidbox2.idx : Scan Failed
c:\WINDOWS\Temp\Perflib_Perfdata_63c.dat : Scan Failed
c:\Documents and Settings\All Users\Application Data\Kaspersky Lab\AVP8\Data\av34.tmp : Scan Failed
c:\Documents and Settings\LocalService\ntuser.dat : Scan Failed
c:\Documents and Settings\LocalService\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\NetworkService\NTUSER.DAT : Scan Failed
c:\Documents and Settings\NetworkService\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\مكتبة النصـر\NTUSER.DAT : Scan Failed
c:\Documents and Settings\مكتبة النصـر\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\مكتبة النصـر\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\مكتبة النصـر\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\مكتبة النصـر\Local Settings\temp\Perflib_Perfdata_c68.dat : Scan Failed
Scanning the registry
Registry : Clean

Summary :-
FilesFound : 39638
FilesScanned : 22312
FilesNotScanned : 17326

ObjectsFound : 83355
ObjectsInfected : 0
ObjectsCleaned : 0
ObjectsDeleted : 0

FilesInfected : 0
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 0

Started at : 11:43:03 م 03 نيسان, 2009
Ended at : 12:05:58 ص 04 نيسان, 2009
Duration : 22 minutes 55 seconds
3225 MB scanned in 1375 seconds = 2 MB/s
Engine Version : 5300.2777
Engine Load Time : 33391 milliseconds
AV DAT Version : 5492.0000 488805 detections Built 11 كانون*الثاني, 2009
Extra DAT : 0 detections

File : d:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0018758.exe : contains "Trojan" called "Generic.dx" (Deleted )
d:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0018758.exe : Deleted
File : d:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0018759.exe : contains "Trojan" called "Generic.dx" (Deleted )
d:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0018759.exe : Deleted
File : d:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0018760.exe : contains "Trojan" called "Generic.dx" (Deleted )
d:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0018760.exe : Deleted
File : d:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0018761.exe : contains "Trojan" called "Generic.dx" (Deleted )
d:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0018761.exe : Deleted

Summary :-
FilesFound : 4482
FilesScanned : 2878
FilesNotScanned : 1604

ObjectsFound : 5312
ObjectsInfected : 4
ObjectsCleaned : 0
ObjectsDeleted : 4

FilesInfected : 4
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 4

Started at : 12:12:36 ص 04 نيسان, 2009
Ended at : 12:15:15 ص 04 نيسان, 2009
Duration : 2 minutes 39 seconds
571 MB scanned in 159 seconds = 3 MB/s
Engine Version : 5300.2777
Engine Load Time : 34532 milliseconds
AV DAT Version : 5492.0000 488805 detections Built 11 كانون*الثاني, 2009
Extra DAT : 0 detections

File : e:\شـــــــــــــاوي\09عبد الرزاق الجبو ري ايا م الحصاد\Desktop_.ini : contains "Virus" called "W32/Fujacks.ini" (Deleted )
e:\شـــــــــــــاوي\09عبد الرزاق الجبو ري ايا م الحصاد\Desktop_.ini : Deleted
File : e:\شـــــــــــــاوي\01فادي اليو نس هيدي هيدي\Desktop_.ini : contains "Virus" called "W32/Fujacks.ini" (Deleted )
e:\شـــــــــــــاوي\01فادي اليو نس هيدي هيدي\Desktop_.ini : Deleted
File : e:\شـــــــــــــاوي\12كامل يوسف الملثم\Desktop_.ini : contains "Virus" called "W32/Fujacks.ini" (Deleted )
e:\شـــــــــــــاوي\12كامل يوسف الملثم\Desktop_.ini : Deleted

Summary :-
FilesFound : 3487
FilesScanned : 652
FilesNotScanned : 2835

ObjectsFound : 3490
ObjectsInfected : 3
ObjectsCleaned : 0
ObjectsDeleted : 3

FilesInfected : 3
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 3

Started at : 12:15:50 ص 04 نيسان, 2009
Ended at : 12:16:48 ص 04 نيسان, 2009
Duration : 57 seconds
162 MB scanned in 57 seconds = 2 MB/s
Engine Version : 5300.2777
Engine Load Time : 37641 milliseconds
AV DAT Version : 5492.0000 488805 detections Built 11 كانون*الثاني, 2009
Extra DAT : 0 detections

File : f:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0019757.exe : contains "Trojan" called "Generic.dx" (Deleted )
f:\System Volume Information\_restore{57C4213B-BAE0-47C5-8CE0-F29E60A49155}\RP16\A0019757.exe : Deleted

Summary :-
FilesFound : 2305
FilesScanned : 1177
FilesNotScanned : 1128

ObjectsFound : 2458
ObjectsInfected : 1
ObjectsCleaned : 0
ObjectsDeleted : 1

FilesInfected : 1
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 1

Started at : 12:17:27 ص 04 نيسان, 2009
Ended at : 12:18:51 ص 04 نيسان, 2009
Duration : 1 minutes 24 seconds
361 MB scanned in 84 seconds = 4 MB/s

 

[Corporation]

الحين أيش برامج الملتاميديا ؟

 

[بلوغرانا]

عندي صيغ ما تشتغل الا بـ realplayer فا المطلوب برنامج real_player وجربت كود ال ريل ما ضبط


والله عذبتكم معاي ، جزاكم الله كل خيرا

 

[Corporation]

شوف الكود يستحسن يتنصب لوحدة بالجهاز بدون ريل بلير ويدعم أغلب الصيغ بس يكون فل ,,

K-Lite full

بس االحين في برامج صوتيات على جهازك والا بعد ما قدرت تنصب ولا واحد ..​

 

[MAAX]

حمل هذا الملف

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

فك الضغط وشغل الملف ووافق على الرسائل واعد تشغيل الجهاز