هل الجهاز مصاب يوجد تقرير

[فديتني]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:16:26 ص, on 2009-04-29
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Java\jre6\bin\jusched.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\PC Tools Firewall Plus\FWService.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Documents and Settings\Administrator\سطح المكتب\تعلم الهايجك.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\ir_ext_temp_0\autorun.exe
C:\Documents and Settings\Administrator\سطح المكتب\Zyzoom_HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Ask.com Toolbar BHO - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Ask.com Toolbar - {D4027C7F-154A-4066-A1AD-4243D8127440} - C:\Program Files\Ask.com\GenericAskToolbar.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [Service Terminal Control] %windir%\system32\wfrmgr.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: PalTalk.lnk = C:\Program Files\Paltalk Messenger\paltalk.exe
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\ie_banner_deny.htm
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: Web Anti-Virus statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\SCIEPlgn.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Kaspersky Internet Security 7.0 (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 7.0\avp.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: PC Tools Firewall Plus (PCToolsFirewallPlus) - PC Tools - C:\Program Files\PC Tools Firewall Plus\FWService.exe
--
End of file - 6563 bytes

 

[فديتني]

اذا نسخته بدخل على موقع الهايجك الموقع هذا

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

تجيني اشاره وهي الصوره هذي

 

[Demo-dashDemo-dash is verified member.]

اهلااا بك اخي
وعذرا بنقله للقسم المناسب للمتابعة
هذا القسم خاص بتحليل تقارير برامج الحماية ،، وباقي التقارير تكون عند الطلب فقط

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

​

 

[Demo-dashDemo-dash is verified member.]

عطل جميع برامج الحماية ,,
وحمل هذه الاداة واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
انتظر حتى الاداة تنتهي من فحص جهازك ,,, وبشكل تلقائي يعاد تشغيل جهازك ,,
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ,, انسخه والصقه بردك القادم​

​

 

[فديتني]

مشكور حبيب قلبي جاري الفحص !

 

[فديتني]

ComboFix 09-04-28.03 - Administrator 04/29/2009 14:56.3 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.1.1025.18.758.497 [GMT 3:00]
Running from: c:\documents and settings\Administrator\سطح المكتب\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated)
FW: Kaspersky Internet Security *disabled*
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\windows\IE4 Error Log.txt
c:\windows\system32\systeminfo.dll
.
---- Previous Run -------
.
C:\037589.log
C:\Autorun.inf
c:\documents and settings\Administrator\قائمة ابدأ\البرامج\بدء التشغيل\~.exe.4456234.exe
C:\pagefile.pif
c:\windows\system32\1243344.log
c:\windows\system32\1287313.log
c:\windows\system32\78594.log
c:\windows\system32\com\lsass.exe
c:\windows\system32\com\netcfg.000
c:\windows\system32\com\netcfg.dll
c:\windows\system32\com\smss.exe
c:\windows\system32\dnsq.dll
c:\windows\system32\drivers\alg.exe
c:\windows\system32\drivers\npf.sys
c:\windows\system32\packet.dll
c:\windows\system32\pthreadVC.dll
c:\windows\system32\systeminfo.dll
c:\windows\system32\wpcap.dll
.
((((((((((((((((((((((((( Files Created from 2009-05-28 to 2009-4-29 )))))))))))))))))))))))))))))))
.
2009-04-29 08:02 . 2009-04-29 08:02 -------- d-----w c:\program files\MSN Messenger
2009-04-28 16:19 . 2009-04-28 17:33 -------- d-----w c:\program files\GVR
2009-04-28 14:41 . 2009-04-28 14:41 -------- d-----w c:\program files\Doblon
2009-04-28 13:27 . 2009-04-28 13:27 -------- d-----w c:\documents and settings\Administrator\Application Data\Xilisoft Corporation
2009-04-27 15:24 . 2009-04-27 15:24 -------- d-----w c:\documents and settings\Administrator\Application Data\IObit
2009-04-25 16:20 . 2009-04-25 16:20 -------- d--h--w c:\windows\system32\GroupPolicy
2009-04-25 13:23 . 2009-04-25 13:25 -------- d-----w c:\documents and settings\Administrator\Local Settings\Application Data\AskToolbar
2009-04-24 16:19 . 2009-04-24 16:20 -------- d-----w c:\program files\Ask.com
2009-04-24 16:17 . 2009-04-24 16:22 -------- d-----w c:\documents and settings\Administrator\Application Data\Desktopicon
2009-04-24 16:16 . 2009-04-24 16:17 -------- d-----w c:\program files\FormatFactory
2009-04-23 13:26 . 2001-09-18 10:38 12160 ----a-w c:\windows\system32\drivers\mouhid.sys
2009-04-23 13:26 . 2001-08-17 11:02 9600 ----a-w c:\windows\system32\drivers\hidusb.sys
2009-04-23 10:58 . 2009-04-23 10:57 720896 ----a-w c:\windows\iun6002.exe
2009-04-23 10:58 . 2009-04-23 10:58 -------- d-----w c:\program files\Abadisoft
2009-04-22 20:43 . 2009-04-22 20:42 410984 ----a-w c:\windows\system32\deploytk.dll
2009-04-22 14:18 . 2009-04-22 14:18 -------- d-----w c:\program files\Ask Search Assistant
2009-04-22 13:47 . 2009-04-29 11:45 -------- d-----w c:\documents and settings\Administrator\Tracing
2009-04-22 13:43 . 2009-04-22 13:43 -------- d-----w c:\program files\Microsoft Sync Framework
2009-04-22 13:42 . 2006-11-29 10:06 3426072 ----a-w c:\windows\system32\d3dx9_32.dll
2009-04-22 13:42 . 2009-04-22 13:42 -------- d-----w c:\program files\Microsoft SQL Server Compact Edition
2009-04-22 13:41 . 2006-10-16 13:10 23856 ----a-w c:\windows\system32\spupdsvc.exe
2009-04-22 13:40 . 2009-04-22 13:40 -------- d-----w c:\program files\Microsoft
2009-04-22 13:40 . 2009-04-22 13:40 -------- d-----w c:\program files\Windows Live SkyDrive
2009-04-22 13:16 . 2009-04-22 13:16 -------- d-----w c:\program files\Common Files\Windows Live
2009-04-21 16:15 . 2004-03-29 12:23 90112 ----a-w c:\windows\unvise32.exe
2009-04-21 16:15 . 2009-04-21 16:15 -------- d-----w c:\program files\SWiSHmax
2009-04-20 14:37 . 2004-08-04 08:55 221184 ----a-w c:\windows\system32\wmpns.dll
2009-04-19 17:11 . 2009-04-19 17:11 -------- d-----w c:\program files\InCode Solutions
2009-04-19 14:35 . 2009-04-19 16:32 101287 ----a-w c:\windows\system32\drivers\klin.dat
2009-04-19 14:35 . 2009-04-19 16:32 89601 ----a-w c:\windows\system32\drivers\klick.dat
2009-04-19 14:35 . 2009-04-29 11:59 3157536 --sha-w c:\windows\system32\drivers\fidbox.dat
2009-04-19 14:35 . 2009-04-29 11:59 122912 --sha-w c:\windows\system32\drivers\fidbox2.dat
2009-04-19 14:35 . 2009-04-19 14:35 -------- d-----w c:\program files\Kaspersky Lab
2009-04-19 14:35 . 2009-04-29 11:47 -------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-04-17 15:01 . 2009-04-21 16:36 -------- d-----w c:\program files\Common Files\Adobe
2009-04-17 15:01 . 2003-04-29 18:07 306688 ----a-w c:\windows\IsUninst.exe
2009-04-17 14:12 . 2009-04-17 14:12 -------- d-----w c:\documents and settings\Administrator\Local Settings\Application Data\Identities
2009-04-17 14:07 . 2009-04-17 14:07 -------- d-----w c:\program files\TeamViewer
2009-04-16 16:30 . 2009-04-16 16:30 -------- d-----w c:\program files\DynGate
2009-04-16 16:28 . 2009-04-17 13:52 -------- d-----w c:\documents and settings\Administrator\Application Data\TeamViewer
2009-04-16 16:28 . 2009-04-24 14:02 -------- d-----w c:\documents and settings\Administrator\temp
2009-04-16 15:47 . 2009-04-16 15:47 -------- d-----w c:\windows\system32\LogFiles
2009-04-16 15:02 . 2009-04-16 15:02 -------- d-----w c:\windows\Sun
2009-04-16 14:59 . 2009-04-22 22:04 -------- d-----w c:\documents and settings\Administrator\Application Data\Thinstall
2009-04-16 14:16 . 2009-04-16 14:16 -------- d-----w c:\documents and settings\Administrator\Local Settings\Application Data\ESET
2009-04-16 14:00 . 2009-04-16 14:00 -------- d-----w c:\documents and settings\Administrator\Application Data\PCToolsFirewallPlus
2009-04-16 13:57 . 2009-04-29 09:33 -------- d---a-w c:\documents and settings\All Users\Application Data\TEMP
2009-04-16 13:56 . 2009-04-29 09:34 -------- d-----w c:\program files\Common Files\PC Tools
2009-04-16 13:08 . 2009-04-16 13:08 -------- d-s---w c:\documents and settings\Administrator\UserData
2009-04-16 08:46 . 2009-04-16 08:46 -------- d-----w c:\documents and settings\Administrator\Local Settings\Application Data\ACD Systems
2009-04-16 08:46 . 2009-04-16 08:46 -------- d-----w c:\documents and settings\Administrator\Application Data\ACD Systems
2009-04-16 08:45 . 2009-04-27 15:14 -------- d-----w c:\documents and settings\Administrator\Application Data\IDM
2009-04-16 08:45 . 2009-04-29 11:56 -------- d-----w c:\documents and settings\Administrator\Application Data\DMCache
2009-04-16 08:45 . 2009-04-19 13:26 -------- d-----w c:\program files\Internet Download Manager
2009-04-16 08:28 . 2009-04-16 08:28 -------- d-----w c:\documents and settings\Administrator\Application Data\Media Player Classic
2009-04-16 07:44 . 2009-04-16 07:56 -------- d-----w c:\documents and settings\Administrator\Contacts
2009-04-16 07:30 . 2009-04-21 17:48 -------- d-----w c:\documents and settings\All Users\Application Data\Messenger Plus!
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-04-29 11:49 . 2001-09-19 12:00 40316 ----a-w c:\windows\system32\perfc001.dat
2009-04-29 11:49 . 2001-09-19 12:00 251946 ----a-w c:\windows\system32\perfh001.dat
2009-04-29 10:37 . 2009-04-19 14:35 52868 --sha-w c:\windows\system32\drivers\fidbox.idx
2009-04-29 10:37 . 2009-04-19 14:35 15224 --sha-w c:\windows\system32\drivers\fidbox2.idx
2009-04-22 20:42 . 2009-04-15 19:16 -------- d-----w c:\program files\Java
2009-04-22 14:17 . 2009-04-15 19:17 -------- d-----w c:\program files\Messenger Plus! Live
2009-04-22 13:45 . 2009-04-15 18:38 132648 ----a-w c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-04-22 13:43 . 2009-04-15 19:15 -------- d-----w c:\program files\Windows Live
2009-04-19 16:32 . 2007-10-31 10:41 112144 ----a-w c:\windows\system32\drivers\kl1.sys
2009-04-19 14:22 . 2009-04-19 14:10 172 ----a-w C:\curr_ver.tmp
2009-04-17 15:23 . 2009-04-15 18:30 86327 ----a-w c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-04-15 19:18 . 2009-04-15 19:18 -------- d-----w c:\program files\Common Files\InstallShield
2009-04-15 19:18 . 2009-04-15 19:18 -------- d-----w c:\program files\Paltalk Messenger
2009-04-15 19:16 . 2009-04-15 19:16 -------- d-----w c:\program files\Common Files\Java
2009-04-15 19:14 . 2009-04-15 19:14 -------- d-----w c:\program files\The KMPlayer
2009-04-15 19:14 . 2009-04-15 19:14 -------- d-----w c:\program files\K-Lite Codec Pack
2009-04-15 19:13 . 2009-04-15 19:13 -------- d-----w c:\program files\Webteh
2009-04-15 19:13 . 2009-04-15 19:13 -------- d-----w c:\program files\Common Files\xing shared
2009-04-15 19:13 . 2009-04-15 19:13 -------- d-----w c:\program files\Real
2009-04-15 19:13 . 2009-04-15 19:13 -------- d-----w c:\program files\Common Files\Real
2009-04-15 19:13 . 2009-04-15 19:13 499712 ----a-w c:\windows\system32\msvcp71.dll
2009-04-15 19:13 . 2009-04-15 19:13 348160 ----a-w c:\windows\system32\msvcr71.dll
2009-04-15 19:12 . 2009-04-15 19:12 -------- d-----w c:\program files\GRETECH
2009-04-15 19:11 . 2009-04-15 19:11 -------- d-----w c:\program files\DVD X Studios
2009-04-15 19:11 . 2009-04-15 19:11 -------- d-----w c:\program files\Common Files\ACD Systems
2009-04-15 19:11 . 2009-04-15 19:11 -------- d-----w c:\program files\CCleaner
2009-04-15 19:11 . 2009-04-15 19:11 -------- d-----w c:\program files\ACD Systems
2009-04-15 19:06 . 2009-04-15 19:06 -------- d-----w c:\program files\Microsoft.NET
2009-04-15 19:05 . 2009-04-15 19:05 -------- d-----w c:\program files\Microsoft Works
2009-04-15 18:59 . 2009-04-15 18:59 -------- d-----w c:\program files\CONEXANT
2009-04-15 18:40 . 2009-04-15 18:40 -------- d--h--w c:\program files\InstallShield Installation Information
2009-04-15 18:32 . 2009-04-15 18:32 -------- d-----w c:\program files\microsoft frontpage
2009-04-15 18:31 . 2001-09-19 12:00 67 --sha-w c:\windows\Fonts\desktop.ini
2009-04-15 18:28 . 2009-04-15 18:28 22144 ----a-w c:\windows\system32\emptyregdb.dat
2009-03-26 15:35 . 2009-04-03 13:24 210352 ----a-w c:\windows\system32\idmmbc.dll
2009-02-06 16:43 . 2009-02-06 16:43 307576 ----a-w c:\windows\WLXPGSS.SCR
2009-02-06 15:52 . 2009-02-06 15:52 49504 ----a-w c:\windows\system32\sirenacm.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
2009-04-02 16:50 809864 ----a-w c:\program files\Ask.com\GenericAskToolbar.dll
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Toolbar]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-04-02 809864]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Toolbar\Webbrowser]
"{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files\Ask.com\GenericAskToolbar.dll" [2009-04-02 809864]
[HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
[HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
[HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2009-04-03 2794928]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre6\bin\jusched.exe" [2009-04-22 148888]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-04-27 198160]
"Service Terminal Control"="c:\windows\system32\wfrmgr.exe" [2008-09-22 246662]
"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2004-08-04 110592]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]
c:\documents and settings\All Users\çں‍ê، ں §ڑ\ںé ©ںê¤\ §ک ں颬نïé\
Adobe Gamma Loader.lnk - c:\program files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe [2009-4-17 113664]
PalTalk.lnk - c:\program files\Paltalk Messenger\paltalk.exe [2009-1-28 10950144]
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
"UacDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc]
"AntiVirusOverride"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"FirewallDisableNotify"=dword:00000001
"FirewallOverride"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"UacDisableNotify"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Paltalk Messenger\\paltalk.exe"=
"c:\\WINDOWS\\system32\\dwwin.exe"=
"c:\\WINDOWS\\system32\\netsh.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
R3 abp470n5;abp470n5; [x]
S2 SeaPort;SeaPort;c:\program files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe [2009-01-14 226656]
S3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\DRIVERS\klim5.sys [2007-12-13 24592]
.
Contents of the 'Scheduled Tasks' folder
2009-04-29 c:\windows\Tasks\Scheduled Update for Ask Toolbar.job
- c:\program files\Ask.com\UpdateTask.exe [2009-04-02 16:50]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com.sa/
IE: &تصدير إلى Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: تحميل الكل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetAll.htm
IE: تحميل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEExt.htm
IE: تحميل محتوى FLV بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetVL.htm
.
.
------- File Associations -------
.
txtfile=c:\windows\notepad.exe %1
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-04-29 14:59
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):45,23,09,8a,a0,b9,ef,0d,83,44,dc,4a,87,80,c4,c1,32,30,71,d0,7b,
4b,5d,ff,4c,2d,27,2d,65,8e,02,b6,9e,40,57,f3,64,30,07,e2,00,00,00,00,00,00,\
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{bab9a4bf-3579-4b56-bb38-a074a85b2b78}]
@Denied: (Full) (Everyone)
"Model"=dword:00000076
"Therad"=dword:0000000e
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'winlogon.exe'(1264)
c:\windows\system32\klogon.dll
.
Completion time: 2009-04-29 15:00
ComboFix-quarantined-files.txt 2009-04-29 12:00
Pre-Run: 24,632,340,480 bytes free
Post-Run: 24,907,632,640 bytes free
239

 

[Demo-dashDemo-dash is verified member.]

ايه مصاب حبيب قلبي

حمل اداة دكتور ويب للفحص والتنظيف وهي محدثه بتاريخ اليوم (( الرابط متجدد من الشركة ))

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

(( اذا كنت تستخدم كاسبر أعمل له خروج من جوار الساعه أولاً ))

شرح عمل الاداة ::

بعد التحميل نقوم بتشغيلها .. ونعمل كما بالصور ::

ثم

ثم ننتظر قليلاً يتم فحص الذاكرة فقط ..

وبعد الانتهاء نعمل كما بالصوره للفحص الشامل للجهاز

وفي حال العثور على فايروس أثناء الفحص وظهرت هذه الرساله

نعمل الاتي لحذف الاصابه وتنظيفها ::

ثم ننتظر أنتهاء الفحص الشامل (( قد يتأخر الفحص على حسب حجم ملفاتك على الجهاز ))

وعند الانتهاء نعمل الاتي ::

ثم نقوم بحذف الفايروسات المكتشفه ::

(( ثم أعد تشغيل الجهاز ))
​

​

 

[فديتني]

مشكور حبيب قلبي


وبيض الله وجهك !!!