s.a.w
زيزوومي نشيط
غير متصل
- بادئ الموضوع s.a.w
- تاريخ البدء
- 3,154
s.a.w
زيزوومي نشيط
غير متصل
اخـــــوي
لكن لا اعلم ان كانت المشكله قد زالت من الجهاز او لا
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
قمت بتجربة الاداة وتم العثور على الكثير من الفيروسات ولله الحمدلكن لا اعلم ان كانت المشكله قد زالت من الجهاز او لا
توقيع : s.a.w
تأييد
0
s.a.w
زيزوومي نشيط
غير متصل
أخواني قمت بالعمل على جميع الادوات ولكن المشكله لم تزل بالجهاز بعد حيث انني لو ثبت بعض البرامج
وذهبت لكافه البرامج لا اجدها وبعدها قمت بعمل فورمات للجهاز ودون جدوى من ذلك وبعد الفرومات
فحصت الجهاز عن طريق المكافي واتضح هذا التقرير التالي ...
16/02/1429 02:36:09 ص Engine version =5200.2160
16/02/1429 02:36:09 ص AntiVirus DAT version =5195.0000
16/02/1429 02:36:09 ص Number of detection signatures in EXTRA.DAT =None
16/02/1429 02:36:09 ص Names of detection signatures in EXTRA.DAT =None
16/02/1429 02:36:02 ص Scan Started S-2ACAEA6B2D334\s.a.w On-Demand Scan
16/02/1429 02:36:47 ص Deleted s.a.w HKEY_USERS\S-1-5-21-861567501-2139871995-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|SUPERHIDDEN W32/Autorun.worm.g(Virus)
16/02/1429 02:36:54 ص Deleted s.a.w SUPERHIDDEN W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Cleaned s.a.w HKCR\.REG| W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Cleaned s.a.w HKCR\.VBS| W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Deleted s.a.w C:\WINDOWS\KILLER.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Deleted s.a.w C:\WINDOWS\killer.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Cleaned s.a.w HKCR\.REG| W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Cleaned s.a.w HKCR\.VBS| W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Deleted s.a.w HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Runonce W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Deleted s.a.w C:\WINDOWS\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Deleted s.a.w C:\WINDOWS\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w c:\autorun.inf Generic!atr(Trojan)
16/02/1429 02:38:21 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w C:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w c:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w C:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w c:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:38:23 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:23 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:23 ص Deleted s.a.w C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\STARTUP\LSASS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:38:23 ص Deleted s.a.w c:\Documents and Settings\All Users\Start Menu\Programs\Startup\lsass.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:39:25 ص Not scanned (The file is encrypted) s.a.w c:\Documents and Settings\s.a.w\Local Settings\Temp\pinfect.zip\KILLER.EXE
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes scanned : 1276
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes detected : 15
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes cleaned : 8
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors scanned : 4
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors detected: 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors cleaned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files scanned : 1592
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files with detections: 4
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w File detections : 13
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files cleaned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files deleted : 4
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files not scanned : 14
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary (Registry Scanning)
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys scanned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys detected : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys cleaned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys deleted : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary ( Scanning)
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w s scanned : 7
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w s detected : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w s cleaned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w s deleted : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Run time : 0:03:46
16/02/1429 02:39:48 ص Scan Terminated S-2ACAEA6B2D334\s.a.w On-Demand Scan
16/02/1429 02:48:16 ص Engine version =5200.2160
16/02/1429 02:48:16 ص AntiVirus DAT version =5195.0000
16/02/1429 02:48:16 ص Number of detection signatures in EXTRA.DAT =None
16/02/1429 02:48:16 ص Names of detection signatures in EXTRA.DAT =None
16/02/1429 02:48:08 ص Scan Started S-2ACAEA6B2D334\s.a.w On-Demand Scan
16/02/1429 02:48:49 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:48:50 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:48:50 ص Cleaned s.a.w HKCR\.REG| W32/Autorun.worm.g(Virus)
16/02/1429 02:48:50 ص Cleaned s.a.w HKCR\.VBS| W32/Autorun.worm.g(Virus)
16/02/1429 02:48:51 ص Deleted s.a.w HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Runonce W32/Autorun.worm.g(Virus)
16/02/1429 02:48:51 ص Deleted s.a.w G:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:48:52 ص Deleted s.a.w G:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:50:29 ص Deleted s.a.w c:\autorun.inf Generic!atr(Trojan)
16/02/1429 02:50:31 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:31 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Deleted s.a.w C:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Deleted s.a.w c:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Deleted s.a.w C:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Deleted s.a.w c:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:50:37 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:37 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:37 ص Deleted s.a.w C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\STARTUP\LSASS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:50:37 ص Deleted s.a.w c:\Documents and Settings\All Users\Start Menu\Programs\Startup\lsass.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:51:55 ص Not scanned (The file is encrypted) s.a.w c:\Documents and Settings\s.a.w\Local Settings\Temp\pinfect.zip\AUTORUN.INF
16/02/1429 02:52:42 ص Not scanned (The file is encrypted) s.a.w c:\Documents and Settings\s.a.w\My Documents\pinfect.zip\AUTORUN.INF
16/02/1429 02:53:36 ص Not scanned (The file is encrypted) s.a.w c:\Program Files\JetAudio\jetUpdate.dat\_TUPROJ.DAT
16/02/1429 02:55:58 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP10\A0000469.inf Generic!atr(Trojan)
16/02/1429 02:56:08 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000568.inf Generic!atr(Trojan)
16/02/1429 02:56:08 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000570.inf Generic!atr(Trojan)
16/02/1429 02:56:09 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:09 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000571.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000571.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000572.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000572.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000573.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000573.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000581.inf Generic!atr(Trojan)
16/02/1429 02:56:12 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000582.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000582.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000583.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000583.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000584.inf Generic!atr(Trojan)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000603.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000603.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000604.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000604.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000605.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000605.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000606.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000606.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000612.inf Generic!atr(Trojan)
16/02/1429 02:56:14 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000613.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000613.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:57:05 ص Deleted s.a.w c:\WINDOWS\autorun.inf Generic!atr(Trojan)
16/02/1429 02:57:06 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Deleted s.a.w C:\WINDOWS\FUNNY UST SCANDAL.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Deleted s.a.w c:\WINDOWS\Funny UST Scandal.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Deleted s.a.w C:\WINDOWS\KILLER.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Deleted s.a.w c:\WINDOWS\killer.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:57:08 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:08 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:08 ص Deleted s.a.w C:\WINDOWS\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:57:08 ص Deleted s.a.w c:\WINDOWS\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:05:53 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:05:53 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:05:54 ص Deleted s.a.w D:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:05:54 ص Deleted s.a.w d:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:05:54 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:05:54 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:05:55 ص Deleted s.a.w D:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:05:55 ص Deleted s.a.w d:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:05:55 ص Deleted s.a.w d:\autorun.inf\autorun.inf Generic!atr(Trojan)
16/02/1429 03:10:31 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:10:32 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w D:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000691.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w d:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000691.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w D:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000692.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w d:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000692.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w d:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000693.inf Generic!atr(Trojan)
16/02/1429 03:11:02 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:02 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Deleted s.a.w E:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Deleted s.a.w e:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Deleted s.a.w E:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Deleted s.a.w e:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:11:04 ص Deleted s.a.w e:\autorun.inf\autorun.inf Generic!atr(Trojan)
16/02/1429 03:11:51 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w E:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000694.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w e:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000694.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w E:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000695.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w e:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000695.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w e:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000696.inf Generic!atr(Trojan)
16/02/1429 03:12:58 ص Deleted s.a.w g:\autorun.inf Generic!atr(Trojan)
16/02/1429 03:12:59 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:12:59 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:12:59 ص Deleted s.a.w G:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:13:01 ص Deleted s.a.w g:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:13:48 ص Deleted (Clean failed because the detection isn't cleanable) s.a.w g:\New Folder\Q.BoyZ.exe New Win32(Virus)
16/02/1429 03:15:03 ص
Del-439(Trojan)
16/02/1429 03:16:55 ص Not scanned (The file is encrypted) s.a.w g:\للكاسـبر\zyzoom_kis7.0.1.321_original-key.exe\CLICK1.OGG
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes scanned : 658
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes detected : 7
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes cleaned : 4
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors scanned : 5
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors detected: 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors cleaned : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files scanned : 24737
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files with detections: 41
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w File detections : 117
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files cleaned : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files deleted : 41
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files not scanned : 30
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary (Registry Scanning)
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys scanned : 17019
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys detected : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys cleaned : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys deleted : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary ( Scanning)
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w s scanned : 7
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w s detected : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w s cleaned : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w s deleted : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Run time : 0:30:02
16/02/1429 03:18:10 ص Scan Complete S-2ACAEA6B2D334\s.a.w On-Demand Scan
وذهبت لكافه البرامج لا اجدها وبعدها قمت بعمل فورمات للجهاز ودون جدوى من ذلك وبعد الفرومات
فحصت الجهاز عن طريق المكافي واتضح هذا التقرير التالي ...
16/02/1429 02:36:09 ص Engine version =5200.2160
16/02/1429 02:36:09 ص AntiVirus DAT version =5195.0000
16/02/1429 02:36:09 ص Number of detection signatures in EXTRA.DAT =None
16/02/1429 02:36:09 ص Names of detection signatures in EXTRA.DAT =None
16/02/1429 02:36:02 ص Scan Started S-2ACAEA6B2D334\s.a.w On-Demand Scan
16/02/1429 02:36:47 ص Deleted s.a.w HKEY_USERS\S-1-5-21-861567501-2139871995-725345543-1003\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced|SUPERHIDDEN W32/Autorun.worm.g(Virus)
16/02/1429 02:36:54 ص Deleted s.a.w SUPERHIDDEN W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Cleaned s.a.w HKCR\.REG| W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Cleaned s.a.w HKCR\.VBS| W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Deleted s.a.w C:\WINDOWS\KILLER.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:36:55 ص Deleted s.a.w C:\WINDOWS\killer.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Cleaned s.a.w HKCR\.REG| W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Cleaned s.a.w HKCR\.VBS| W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Deleted s.a.w HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Runonce W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Deleted s.a.w C:\WINDOWS\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:36:57 ص Deleted s.a.w C:\WINDOWS\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w c:\autorun.inf Generic!atr(Trojan)
16/02/1429 02:38:21 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w C:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w c:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w C:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:38:21 ص Deleted s.a.w c:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:38:23 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:23 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:38:23 ص Deleted s.a.w C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\STARTUP\LSASS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:38:23 ص Deleted s.a.w c:\Documents and Settings\All Users\Start Menu\Programs\Startup\lsass.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:39:25 ص Not scanned (The file is encrypted) s.a.w c:\Documents and Settings\s.a.w\Local Settings\Temp\pinfect.zip\KILLER.EXE
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes scanned : 1276
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes detected : 15
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes cleaned : 8
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors scanned : 4
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors detected: 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors cleaned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files scanned : 1592
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files with detections: 4
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w File detections : 13
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files cleaned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files deleted : 4
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files not scanned : 14
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary (Registry Scanning)
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys scanned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys detected : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys cleaned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys deleted : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary ( Scanning)
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w s scanned : 7
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w s detected : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w s cleaned : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w s deleted : 0
16/02/1429 02:39:48 ص Scan Summary S-2ACAEA6B2D334\s.a.w Run time : 0:03:46
16/02/1429 02:39:48 ص Scan Terminated S-2ACAEA6B2D334\s.a.w On-Demand Scan
16/02/1429 02:48:16 ص Engine version =5200.2160
16/02/1429 02:48:16 ص AntiVirus DAT version =5195.0000
16/02/1429 02:48:16 ص Number of detection signatures in EXTRA.DAT =None
16/02/1429 02:48:16 ص Names of detection signatures in EXTRA.DAT =None
16/02/1429 02:48:08 ص Scan Started S-2ACAEA6B2D334\s.a.w On-Demand Scan
16/02/1429 02:48:49 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:48:50 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:48:50 ص Cleaned s.a.w HKCR\.REG| W32/Autorun.worm.g(Virus)
16/02/1429 02:48:50 ص Cleaned s.a.w HKCR\.VBS| W32/Autorun.worm.g(Virus)
16/02/1429 02:48:51 ص Deleted s.a.w HKCU\Software\Microsoft\Windows\CurrentVersion\Run|Runonce W32/Autorun.worm.g(Virus)
16/02/1429 02:48:51 ص Deleted s.a.w G:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:48:52 ص Deleted s.a.w G:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:50:29 ص Deleted s.a.w c:\autorun.inf Generic!atr(Trojan)
16/02/1429 02:50:31 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:31 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Deleted s.a.w C:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Deleted s.a.w c:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Deleted s.a.w C:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:50:32 ص Deleted s.a.w c:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:50:37 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:37 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:50:37 ص Deleted s.a.w C:\DOCUMENTS AND SETTINGS\ALL USERS\START MENU\PROGRAMS\STARTUP\LSASS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:50:37 ص Deleted s.a.w c:\Documents and Settings\All Users\Start Menu\Programs\Startup\lsass.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:51:55 ص Not scanned (The file is encrypted) s.a.w c:\Documents and Settings\s.a.w\Local Settings\Temp\pinfect.zip\AUTORUN.INF
16/02/1429 02:52:42 ص Not scanned (The file is encrypted) s.a.w c:\Documents and Settings\s.a.w\My Documents\pinfect.zip\AUTORUN.INF
16/02/1429 02:53:36 ص Not scanned (The file is encrypted) s.a.w c:\Program Files\JetAudio\jetUpdate.dat\_TUPROJ.DAT
16/02/1429 02:55:58 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP10\A0000469.inf Generic!atr(Trojan)
16/02/1429 02:56:08 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000568.inf Generic!atr(Trojan)
16/02/1429 02:56:08 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000570.inf Generic!atr(Trojan)
16/02/1429 02:56:09 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:09 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000571.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000571.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000572.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000572.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000573.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:10 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000573.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000581.inf Generic!atr(Trojan)
16/02/1429 02:56:12 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000582.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000582.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000583.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000583.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:12 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000584.inf Generic!atr(Trojan)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000603.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000603.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000604.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000604.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:13 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000605.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000605.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000606.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000606.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000612.inf Generic!atr(Trojan)
16/02/1429 02:56:14 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w C:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000613.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:56:14 ص Deleted s.a.w c:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000613.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:57:05 ص Deleted s.a.w c:\WINDOWS\autorun.inf Generic!atr(Trojan)
16/02/1429 02:57:06 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Deleted s.a.w C:\WINDOWS\FUNNY UST SCANDAL.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Deleted s.a.w c:\WINDOWS\Funny UST Scandal.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Deleted s.a.w C:\WINDOWS\KILLER.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:57:06 ص Deleted s.a.w c:\WINDOWS\killer.exe W32/Autorun.worm.g(Virus)
16/02/1429 02:57:08 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:08 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 02:57:08 ص Deleted s.a.w C:\WINDOWS\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 02:57:08 ص Deleted s.a.w c:\WINDOWS\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:05:53 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:05:53 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:05:54 ص Deleted s.a.w D:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:05:54 ص Deleted s.a.w d:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:05:54 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:05:54 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:05:55 ص Deleted s.a.w D:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:05:55 ص Deleted s.a.w d:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:05:55 ص Deleted s.a.w d:\autorun.inf\autorun.inf Generic!atr(Trojan)
16/02/1429 03:10:31 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:10:32 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w D:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000691.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w d:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000691.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w D:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000692.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w d:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000692.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:10:33 ص Deleted s.a.w d:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000693.inf Generic!atr(Trojan)
16/02/1429 03:11:02 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:02 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Deleted s.a.w E:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Deleted s.a.w e:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Deleted s.a.w E:\SMSS.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:11:03 ص Deleted s.a.w e:\smss.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:11:04 ص Deleted s.a.w e:\autorun.inf\autorun.inf Generic!atr(Trojan)
16/02/1429 03:11:51 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w E:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000694.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w e:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000694.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w E:\SYSTEM VOLUME INFORMATION\_RESTORE{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000695.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w e:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000695.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:11:51 ص Deleted s.a.w e:\System Volume Information\_restore{3D6B0ED3-6201-4C59-A2AA-055AD84A9E6F}\RP11\A0000696.inf Generic!atr(Trojan)
16/02/1429 03:12:58 ص Deleted s.a.w g:\autorun.inf Generic!atr(Trojan)
16/02/1429 03:12:59 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:12:59 ص Cleaned s.a.w HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon|l W32/Autorun.worm.g(Virus)
16/02/1429 03:12:59 ص Deleted s.a.w G:\FUNNY UST SCANDAL.AVI.EXE W32/Autorun.worm.g(Virus)
16/02/1429 03:13:01 ص Deleted s.a.w g:\Funny UST Scandal.avi.exe W32/Autorun.worm.g(Virus)
16/02/1429 03:13:48 ص Deleted (Clean failed because the detection isn't cleanable) s.a.w g:\New Folder\Q.BoyZ.exe New Win32(Virus)
16/02/1429 03:15:03 ص
Del-439(Trojan)
16/02/1429 03:16:55 ص Not scanned (The file is encrypted) s.a.w g:\للكاسـبر\zyzoom_kis7.0.1.321_original-key.exe\CLICK1.OGG
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes scanned : 658
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes detected : 7
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Processes cleaned : 4
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors scanned : 5
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors detected: 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Boot sectors cleaned : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files scanned : 24737
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files with detections: 41
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w File detections : 117
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files cleaned : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files deleted : 41
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Files not scanned : 30
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary (Registry Scanning)
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys scanned : 17019
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys detected : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys cleaned : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Keys deleted : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Scan Summary ( Scanning)
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w s scanned : 7
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w s detected : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w s cleaned : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w s deleted : 0
16/02/1429 03:18:10 ص Scan Summary S-2ACAEA6B2D334\s.a.w Run time : 0:30:02
16/02/1429 03:18:10 ص Scan Complete S-2ACAEA6B2D334\s.a.w On-Demand Scan
توقيع : s.a.w
تأييد
0
s.a.w
زيزوومي نشيط
غير متصل
اخـــي ENGRAMI هذا هو التقرير بعد الفحص بالاداة
16 صفر 1429 03:29:02 => Scanning HKCR\vbefile\l\open\command
16 صفر 1429 03:29:02 => Scanning HKCR\wshfile\l\open\command
16 صفر 1429 03:29:02 => Scanning HKCR\wsffile\l\open\command
16 صفر 1429 03:29:03 => ** Value in HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\main/Start Page =
16 صفر 1429 03:29:03 => ** Value in HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\main/Start Page =
16 صفر 1429 03:29:03 => ***** Scanning System32 Folders *****
16 صفر 1429 03:29:03 => Scanning C:\WINDOWS Directory
16 صفر 1429 03:29:03 => [Scanning Folder: C:\WINDOWS]
16 صفر 1429 03:29:05 => Scanning C:\WINDOWS\system32 Directory
16 صفر 1429 03:29:05 => [Scanning Folder: C:\WINDOWS\system32]
16 صفر 1429 03:30:01 => Scanning C:\DOCUME~1\SA2644~1.W\LOCALS~1\Temp Directory
16 صفر 1429 03:30:01 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\Temp]
16 صفر 1429 03:30:08 => Scanning C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5 Directory
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5]
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5\HI7FRQ51]
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5\13ASH14M]
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5\FJC5SV40]
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5\GXW7O7KD]
16 صفر 1429 03:30:08 => ***** Checking for specific ITW Viruses *****
16 صفر 1429 03:30:08 => Checking for Welchia Virus...
16 صفر 1429 03:30:08 => Checking for LovGate Virus...
16 صفر 1429 03:30:08 => Checking for CodeRed Virus...
16 صفر 1429 03:30:08 => Checking for OpaServ Virus...
16 صفر 1429 03:30:08 => Checking for Sobig.e Virus...
16 صفر 1429 03:30:08 => Checking for Winupie Virus...
16 صفر 1429 03:30:08 => Checking for Swen Virus...
16 صفر 1429 03:30:08 => Checking for JS.Fortnight Virus...
16 صفر 1429 03:30:08 => Checking for Novarg Virus...
16 صفر 1429 03:30:08 => Checking for Pagabot Virus...
16 صفر 1429 03:30:08 => Checking for Parite.b Virus...
16 صفر 1429 03:30:08 => Checking for Parite.a Virus...
16 صفر 1429 03:30:08 => Checking for Adware.SeekSeek Virus...
16 صفر 1429 03:30:08 => ***** Scanning complete. *****
16 صفر 1429 03:30:08 => Total Objects Scanned: 35675
16 صفر 1429 03:30:08 => Total Critical Objects: 4
16 صفر 1429 03:30:08 => Total Disinfected Objects: 0
16 صفر 1429 03:30:08 => Total Objects Renamed: 0
16 صفر 1429 03:30:08 => Total Deleted Objects: 5
16 صفر 1429 03:30:08 => Total Errors: 2
16 صفر 1429 03:30:08 => Time Elapsed: 00:02:28
16 صفر 1429 03:30:08 => Virus Database Date: 20 Feb 2008
16 صفر 1429 03:30:08 => Virus Database Count: 573496
16 صفر 1429 03:30:08 => Scan Completed.
16 صفر 1429 03:29:02 => Scanning HKCR\vbefile\l\open\command
16 صفر 1429 03:29:02 => Scanning HKCR\wshfile\l\open\command
16 صفر 1429 03:29:02 => Scanning HKCR\wsffile\l\open\command
16 صفر 1429 03:29:03 => ** Value in HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\main/Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
16 صفر 1429 03:29:03 => ** Value in HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\main/Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
16 صفر 1429 03:29:03 => ***** Scanning System32 Folders *****
16 صفر 1429 03:29:03 => Scanning C:\WINDOWS Directory
16 صفر 1429 03:29:03 => [Scanning Folder: C:\WINDOWS]
16 صفر 1429 03:29:05 => Scanning C:\WINDOWS\system32 Directory
16 صفر 1429 03:29:05 => [Scanning Folder: C:\WINDOWS\system32]
16 صفر 1429 03:30:01 => Scanning C:\DOCUME~1\SA2644~1.W\LOCALS~1\Temp Directory
16 صفر 1429 03:30:01 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\Temp]
16 صفر 1429 03:30:08 => Scanning C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5 Directory
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5]
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5\HI7FRQ51]
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5\13ASH14M]
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5\FJC5SV40]
16 صفر 1429 03:30:08 => [Scanning Folder: C:\DOCUME~1\SA2644~1.W\LOCALS~1\TEMPOR~1\.IE5\GXW7O7KD]
16 صفر 1429 03:30:08 => ***** Checking for specific ITW Viruses *****
16 صفر 1429 03:30:08 => Checking for Welchia Virus...
16 صفر 1429 03:30:08 => Checking for LovGate Virus...
16 صفر 1429 03:30:08 => Checking for CodeRed Virus...
16 صفر 1429 03:30:08 => Checking for OpaServ Virus...
16 صفر 1429 03:30:08 => Checking for Sobig.e Virus...
16 صفر 1429 03:30:08 => Checking for Winupie Virus...
16 صفر 1429 03:30:08 => Checking for Swen Virus...
16 صفر 1429 03:30:08 => Checking for JS.Fortnight Virus...
16 صفر 1429 03:30:08 => Checking for Novarg Virus...
16 صفر 1429 03:30:08 => Checking for Pagabot Virus...
16 صفر 1429 03:30:08 => Checking for Parite.b Virus...
16 صفر 1429 03:30:08 => Checking for Parite.a Virus...
16 صفر 1429 03:30:08 => Checking for Adware.SeekSeek Virus...
16 صفر 1429 03:30:08 => ***** Scanning complete. *****
16 صفر 1429 03:30:08 => Total Objects Scanned: 35675
16 صفر 1429 03:30:08 => Total Critical Objects: 4
16 صفر 1429 03:30:08 => Total Disinfected Objects: 0
16 صفر 1429 03:30:08 => Total Objects Renamed: 0
16 صفر 1429 03:30:08 => Total Deleted Objects: 5
16 صفر 1429 03:30:08 => Total Errors: 2
16 صفر 1429 03:30:08 => Time Elapsed: 00:02:28
16 صفر 1429 03:30:08 => Virus Database Date: 20 Feb 2008
16 صفر 1429 03:30:08 => Virus Database Count: 573496
16 صفر 1429 03:30:08 => Scan Completed.
توقيع : s.a.w
تأييد
0
طيب ياغالي ,,
شغل الملفات التي تعيد الاصابه :hh:
بعدها اعدد تشغيل جهازك ,, واضغط الملفات التي باللون الاحمر
C:\WINDOWS\smss.exe
C:\FUNNY UST SCANDAL.AVI.EXE
c:\WINDOWS\Funny UST Scandal.exe
C:\WINDOWS\killer.exe
وارفعها على هذا الموقع
والرابط ارسله برسالة مستعجله ,,
شغل الملفات التي تعيد الاصابه :hh:
بعدها اعدد تشغيل جهازك ,, واضغط الملفات التي باللون الاحمر
C:\WINDOWS\smss.exe
C:\FUNNY UST SCANDAL.AVI.EXE
c:\WINDOWS\Funny UST Scandal.exe
C:\WINDOWS\killer.exe
وارفعها على هذا الموقع
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
والرابط ارسله برسالة مستعجله ,,
تأييد
0
الاداة ذي ,, تستخدم الكاسبر سكي للفحص اليدوي
والتقرير نظيف ,,
لأني اعتقد ان الكاسبر ما يكتشفه هذه الفيروسات بحكم انها جديده !!!
ارجو رفع الملفات التي طلبتها منك ,, حتى ارسالها لشركة الكاسبر ,, وخلاال 24 ساعة تكون
في قاعدة بيانات الفيروسات
تأييد
0
- الحالة