( فلاش يو آس بي ) لايمكن النسخ او اللصق (محمي ضد الكتابه ) !!

[Mr.SaUdI]

السلام عليكم ورحمة الله وبركاته


كيفكم أخواني ؟!


مشكلتي واضحه بعنوان الموضوع عند فتح البرامج في فلاش يو أس بي أو نسخ أو لصق وهذي صوره لتوضيح المشكله :-

بالإنتظار​

 

[KoNaMi]

حياك اخوي

طيب يالغلاا هل المشكله في جهازك فقط ؟؟؟
​

 

[ابـــو عــبــد الــلــه]

يوجد في بعض الفلاشات مفتاح صغير يعمل write protection لحماية الملفات و الفلاش من الكتابة عليها. تأكد من انه في الوضع الذي يسمح بالكتابة عليه ..

...


حمل هذا الآداة

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم
أتمنى منك الصبر حتى يتم تحليل التقرير
​

 

[ابـــو عــبــد الــلــه]

حياك اخوي ​

طيب يالغلاا هل المشكله في جهازك فقط ؟؟؟​

اسف استاذي...:b:​

 

[KoNaMi]

اسف استاذي...:b:​

:er:
​

 

[Mr.SaUdI]

حياك اخوي

طيب يالغلاا هل المشكله في جهازك فقط ؟؟؟
​

جربتها على جهااز فيه فيستا وحملت عليها ونسخت وشغاله 100%​

 

[KoNaMi]

طيب يالغلااا طبق مشاركة الغالي ابو ريما
​

 

[Mr.SaUdI]

يوجد في بعض الفلاشات مفتاح صغير يعمل write protection لحماية الملفات و الفلاش من الكتابة عليها. تأكد من انه في الوضع الذي يسمح بالكتابة عليه ..

...


حمل هذا الآداة

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم
أتمنى منك الصبر حتى يتم تحليل التقرير
​

تقرير هايجاكـ


Logfile of HijackThis v1.99.1
Scan saved at 06:46:46 ص, on 16/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe
C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Program Files\Messenger\msmsgs.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\Program Files\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Program Files\BitDefender\BitDefender 2009\seccenter.exe
C:\Program Files\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Atheer\سطح المكتب\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.93.193.74:8080
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: BitDefender Toolbar - {381FFDE8-2394-4f90-B10D-FC6124A40F8C} - C:\Program Files\BitDefender\BitDefender 2009\IEToolbar.dll
O4 - HKLM\..\Run: [High Definition Audio Property Page Shortcut] HDAShCut.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [BDAgent] "C:\Program Files\BitDefender\BitDefender 2009\bdagent.exe"
O4 - HKLM\..\Run: [BitDefender Antiphishing Helper] "C:\Program Files\BitDefender\BitDefender 2009\IEShow.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [PC Suite Tray] "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WINDOW~4\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files\Windows Live\Mail\mailcomm.dll
O23 - Service: BitDefender Arrakis Server (Arrakis3) - Unknown owner - C:\Program Files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Program Files\Common Files\BitDefender\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Program Files\BitDefender\BitDefender 2009\vsserv.exe" /service (file missing)​

 

[KoNaMi]

التقرير ناقص يالغلااا تأكد من نسخه كااامل
​

 

[ابـــو عــبــد الــلــه]

اشبك الفلاش في الجهاز ثم

اعمل التالي

عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​

 

[Mr.SaUdI]

التقرير ناقص يالغلااا تأكد من نسخه كااامل
​

أخوي حمود

هو نفس التقرير يطلع لي كل مرره​

 

[Mr.SaUdI]

اشبك الفلاش في الجهاز ثم

اعمل التالي

عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​

شبكت الفلاش وتشغيل اداة كمبو فيـكس وهذا التقرير :-

ComboFix 09-05-14.03 - Atheer 05/16/2009 6:58.5 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.966.1025.18.990.474 [GMT 3:00]
Running from: D:\ComboFix.exe
AV: BitDefender Antivirus *On-access scanning disabled* (Updated) {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
FW: BitDefender Firewall *enabled* {4055920F-2E99-48A8-A270-4243D2B8F242}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2009-04-16 to 2009-05-16 )))))))))))))))))))))))))))))))
.

2009-05-15 22:39 . 2009-05-15 22:40 -------- d-----w c:\program files\Messenger Plus! Live
2009-05-15 21:20 . 2009-05-15 21:20 -------- d-----w c:\documents and settings\Atheer\Application Data\BitDefender
2009-05-15 21:20 . 2009-05-15 21:22 -------- d-----w c:\documents and settings\All Users\Application Data\BitDefender
2009-05-15 21:20 . 2009-05-15 21:20 -------- d-----w c:\program files\Common Files\BitDefender
2009-05-15 20:30 . 2009-05-15 20:32 -------- d-----w c:\documents and settings\photo
2009-05-15 17:13 . 2009-05-15 17:13 -------- d-----w c:\program files\Trend Micro
2009-05-15 06:49 . 2009-05-15 21:20 -------- d-----w c:\program files\BitDefender
2009-05-15 06:41 . 2009-05-15 22:57 -------- d-----w c:\documents and settings\Atheer\.VirtualBox
2009-05-15 04:34 . 2009-05-15 04:34 -------- d-s---w c:\windows\Cookies
2009-05-15 03:44 . 2009-05-15 03:44 -------- d-----w c:\windows\SxsCaPendDel
2009-05-14 21:51 . 2009-02-16 14:46 100560 ----a-w c:\windows\system32\drivers\VBoxDrv.sys
2009-05-14 21:51 . 2009-02-16 14:47 129552 ----a-w c:\windows\system32\VBoxNetFltNotify.dll
2009-05-14 21:51 . 2009-02-16 14:47 87568 ----a-w c:\windows\system32\drivers\VBoxNetFlt.sys
2009-05-14 21:50 . 2009-02-16 14:47 41744 ----a-w c:\windows\system32\drivers\VBoxUSBMon.sys
2009-05-14 21:50 . 2009-05-14 21:52 -------- d-----w c:\program files\Sun xVM VirtualBox
2009-05-14 21:34 . 2009-05-14 21:34 -------- d-----w c:\program files\7-Zip
2009-05-14 19:45 . 2009-05-14 19:45 -------- d-----w c:\program files\MSXML 4.0
2009-05-14 19:41 . 2009-05-14 19:58 -------- d-----w c:\documents and settings\Atheer\Local Settings\Application Data\Runscanner.net
2009-05-14 17:43 . 2008-10-16 11:06 208744 ----a-w c:\windows\system32\muweb.dll
2009-05-14 17:43 . 2008-10-16 11:06 268648 ----a-w c:\windows\system32\mucltui.dll
2009-05-14 03:39 . 2000-05-01 20:02 110592 ----a-w c:\windows\system32\ccrpbds6.dll
2009-05-14 03:39 . 2009-05-14 03:39 -------- d-----w c:\program files\PIXresizer
2009-05-14 01:06 . 2009-05-15 22:40 -------- d-----w c:\documents and settings\Atheer\Tracing
2009-05-14 00:59 . 2006-11-29 10:06 3426072 ----a-w c:\windows\system32\d3dx9_32.dll
2009-05-14 00:58 . 2009-05-14 00:58 -------- d-----w c:\program files\Microsoft SQL Server Compact Edition
2009-05-14 00:57 . 2009-05-14 00:57 -------- d-----w c:\program files\Microsoft
2009-05-14 00:57 . 2009-05-14 00:57 -------- d-----w c:\program files\Windows Live SkyDrive
2009-05-14 00:30 . 2009-05-14 00:30 16 ----a-w c:\windows\system32\asdict.dat
2009-05-14 00:30 . 2009-05-14 00:30 4 ----a-w c:\windows\system32\aspdict-en.dat
2009-05-13 23:54 . 2009-05-13 23:54 0 ----a-w c:\windows\system32\wsbl.dat
2009-05-13 23:54 . 2009-05-13 23:54 0 ----a-w c:\windows\system32\ph_summ.dat
2009-05-13 23:54 . 2009-05-13 23:54 0 ----a-w c:\windows\system32\pcwords.dat
2009-05-13 23:54 . 2009-05-13 23:54 0 ----a-w c:\windows\system32\ph_black.dat
2009-05-13 23:54 . 2009-05-13 23:54 0 ----a-w c:\windows\system32\ph_white.dat
2009-05-13 23:45 . 2009-05-13 23:45 -------- d-----w c:\windows\system32\logs
2009-05-13 23:44 . 2009-05-13 23:44 -------- d-----w c:\windows\system32\URTTemp
2009-05-10 12:19 . 2009-05-10 12:19 -------- d--h--w c:\windows\PIF
2009-05-10 10:12 . 2009-05-10 10:12 -------- d-----w c:\program files\Common Files\Windows Live
2009-05-09 11:28 . 2003-02-28 15:26 139536 ----a-w c:\windows\system32\javaee.dll
2009-05-08 21:04 . 2009-05-08 21:04 -------- d-----w C:\tmp
2009-05-08 16:51 . 2009-05-08 16:51 -------- d-----w c:\windows\system32\LogFiles
2009-05-08 14:00 . 2009-05-10 09:02 -------- d-----w c:\documents and settings\Atheer\Local Settings\Application Data\Adobe
2009-05-08 13:58 . 2009-05-08 13:58 -------- d-----w c:\program files\l3arbi2
2009-05-08 13:57 . 2009-05-08 13:58 -------- d-----w c:\program files\l3arbi2Adobe Photoshop CS4
2009-05-08 12:01 . 2009-05-08 12:01 105608 ----a-w c:\windows\system32\drivers\bdhv.sys
2009-05-08 02:53 . 2009-05-08 02:53 -------- d-----w c:\documents and settings\Atheer\Application Data\vlc
2009-05-07 08:49 . 2006-03-17 00:38 28672 ------w c:\windows\system32\verclsid.exe
2009-05-07 08:44 . 2009-02-09 11:48 2059264 -c----w c:\windows\system32\dllcache\ntkrnlpa.exe
2009-05-07 08:44 . 2009-02-09 11:48 2017280 -c----w c:\windows\system32\dllcache\ntkrpamp.exe
2009-05-07 08:44 . 2009-02-09 11:48 2182016 -c----w c:\windows\system32\dllcache\ntoskrnl.exe
2009-05-07 08:44 . 2009-02-09 11:48 2137600 -c----w c:\windows\system32\dllcache\ntkrnlmp.exe
2009-05-07 07:55 . 2008-06-14 17:59 271616 -c----w c:\windows\system32\dllcache\bthport.sys
2009-05-07 07:55 . 2008-06-14 17:59 271616 ------w c:\windows\system32\drivers\bthport.sys
2009-05-07 07:52 . 2008-07-09 07:34 26488 ----a-w c:\windows\system32\spupdsvc.exe
2009-05-07 07:52 . 2009-05-14 18:15 -------- d--h--w c:\windows\$hf_mig$
2009-05-07 00:12 . 2004-08-04 00:55 221184 ----a-w c:\windows\system32\wmpns.dll
2009-05-06 12:03 . 2009-05-06 12:03 -------- d-----w c:\windows\Sun
2009-05-06 11:59 . 2009-05-06 11:58 410984 ----a-w c:\windows\system32\deploytk.dll
2009-05-06 11:21 . 2009-05-06 11:23 203776 ----a-w c:\windows\system32\clrviddc.dll
2009-05-06 11:14 . 2009-05-06 11:14 -------- d-----w c:\program files\Common Files\xing shared
2009-05-06 08:32 . 2009-05-06 08:32 -------- d-----w c:\documents and settings\Atheer\Local Settings\Application Data\TechSmith
2009-05-06 08:28 . 2008-07-10 10:56 107864 ----a-w c:\windows\system32\tsccvid.dll
2009-05-06 08:28 . 2009-05-06 08:28 -------- d-----w c:\windows\system32\QuickTime
2009-05-06 08:28 . 2009-05-06 08:28 -------- d-----w c:\documents and settings\All Users\Application Data\TechSmith
2009-05-06 08:27 . 2009-05-06 08:27 -------- d-----w c:\program files\Common Files\TechSmith Shared
2009-05-06 08:27 . 2009-05-06 08:27 -------- d-----w c:\program files\TechSmith
2009-05-06 07:07 . 2009-05-06 07:07 -------- d-----w c:\program files\Common Files\PCSuite
2009-05-06 07:07 . 2009-05-06 07:07 -------- d-----w c:\program files\Common Files\Nokia
2009-05-06 07:06 . 2008-08-26 07:26 18816 ----a-w c:\windows\system32\drivers\pccsmcfd.sys
2009-05-06 07:06 . 2009-05-06 07:06 -------- d-----w c:\program files\PC Connectivity Solution
2009-05-05 21:13 . 2009-05-15 21:36 81984 ----a-w c:\windows\system32\bdod.bin
2009-05-05 20:43 . 2009-05-05 20:43 -------- d-s---w c:\documents and settings\Atheer\UserData
2009-05-05 20:02 . 2009-05-05 20:02 0 ----a-w c:\windows\nsreg.dat
2009-05-05 20:02 . 2009-05-05 20:02 -------- d-----w c:\documents and settings\Atheer\Local Settings\Application Data\Mozilla
2009-05-05 19:55 . 2009-05-05 19:55 -------- d-----w c:\documents and settings\Atheer\Local Settings\Application Data\Google
2009-05-05 19:53 . 2009-05-07 05:31 -------- d-----w c:\documents and settings\Atheer\Contacts
2009-05-05 19:49 . 2009-05-05 19:49 0 ----a-w c:\windows\ativpsrm.bin
2009-05-05 19:48 . 2008-08-20 18:05 593920 ------w c:\windows\system32\ati2sgag.exe
2009-05-05 19:47 . 2009-05-15 20:30 -------- d-s---w C:\ATI
2009-05-05 19:47 . 2004-08-03 20:08 26496 -c--a-w c:\windows\system32\dllcache\usbstor.sys
2009-05-05 18:06 . 2004-08-04 00:41 57216 ----a-w c:\windows\system32\drivers\redbook.sys
2009-05-05 18:06 . 2004-08-04 00:55 73728 ----a-w c:\windows\system32\usbui.dll
2009-05-05 18:05 . 2009-05-15 21:21 -------- d-sh--w c:\windows\Installer
2009-05-05 18:03 . 2003-01-27 20:30 13312 -c--a-w c:\windows\system32\dllcache\irclass.dll
2009-05-05 18:02 . 2009-05-15 20:30 -------- d-----w C:\Documents and Settings
2009-05-05 18:02 . 2009-05-05 15:13 -------- d-----w c:\documents and settings\All Users
2009-05-05 18:02 . 2009-05-15 03:48 -------- d--h--w c:\documents and settings\Default User

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-14 20:00 . 2009-05-05 15:36 -------- d-----w c:\program files\GRETECH
2009-05-14 19:46 . 2003-01-27 20:31 52754 ----a-w c:\windows\system32\perfc001.dat
2009-05-14 19:46 . 2003-01-27 20:31 318370 ----a-w c:\windows\system32\perfh001.dat
2009-05-14 01:01 . 2009-05-05 15:30 95216 ----a-w c:\documents and settings\Atheer\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-14 00:59 . 2009-05-05 15:34 -------- d-----w c:\program files\Windows Live
2009-05-08 13:59 . 2009-05-05 16:01 -------- d-----w c:\program files\Common Files\Adobe
2009-05-07 22:25 . 2009-05-05 16:00 -------- d-----w c:\program files\Common Files\InstallShield
2009-05-06 11:14 . 2009-05-05 15:37 -------- d-----w c:\program files\Common Files\Real
2009-05-06 07:07 . 2009-05-05 15:49 -------- d-----w c:\program files\Nokia
2009-05-05 20:41 . 2009-05-05 15:36 -------- d-----w c:\program files\Google
2009-05-05 19:48 . 2009-05-05 16:01 -------- d--h--w c:\program files\InstallShield Installation Information
2009-05-05 15:49 . 2009-05-05 15:49 -------- d-----w c:\program files\DIFX
2009-05-05 15:37 . 2009-05-05 15:37 -------- d-----w c:\program files\Real
2009-05-05 15:35 . 2009-05-05 15:35 -------- d-----w c:\program files\VideoLAN
2009-05-05 15:35 . 2009-05-05 15:35 -------- d-----w c:\program files\mpegable
2009-05-05 15:35 . 2009-05-05 15:35 47104 ------w c:\windows\AKDeInstall.exe
2009-05-05 15:35 . 2009-05-05 15:35 -------- d-----w c:\program files\K-Lite Codec Pack
2009-05-05 15:33 . 2009-05-05 15:33 -------- d-----w c:\program files\Microsoft.NET
2009-05-05 15:32 . 2009-05-05 15:32 -------- d-----w c:\program files\Microsoft Works
2009-05-05 15:14 . 2009-05-05 15:14 -------- d-----w c:\program files\microsoft frontpage
2009-05-05 15:10 . 2009-05-05 15:10 22144 ----a-w c:\windows\system32\emptyregdb.dat
2009-03-06 14:44 . 2004-08-04 00:55 282624 ----a-w c:\windows\system32\pdh.dll
2009-02-20 08:29 . 2004-08-04 00:55 657920 ----a-w c:\windows\system32\wininet.dll
2009-02-20 08:29 . 2004-08-04 00:55 81920 ----a-w c:\windows\system32\ieencode.dll
2009-05-12 18:11 . 2009-05-13 23:47 45056 ----a-w c:\program files\mozilla firefox\components\bdaphff3.dll
2009-03-05 15:08 . 2009-05-15 21:22 49664 ----a-w c:\program files\mozilla firefox\components\FFComm.dll
.

------- Sigcheck -------

[-] 2004-08-04 00:56 14336 0ECD0853CADB84AE5DF7DA9BD1731CC7 c:\windows\system32\svchost.exe
[-] 2004-08-04 00:56 14336 0ECD0853CADB84AE5DF7DA9BD1731CC7 c:\windows\system32\dllcache\svchost.exe

[-] 2005-03-02 18:19 576512 C287C8218DAC8EE3AEF1FB2018064699 c:\windows\$hf_mig$\KB890859\SP2QFE\user32.dll
[-] 2007-03-08 15:48 577536 ADC5A589D00030F03FC315F18EACF05F c:\windows\$hf_mig$\KB925902\SP2QFE\user32.dll
[-] 2004-08-04 00:55 576512 EDE1D5F29B2752953F3D5D11004154C1 c:\windows\$NtUninstallKB890859$\user32.dll
[-] 2005-03-02 18:09 576512 48A5A51EBCD5056A245397E1EA1F78EE c:\windows\$NtUninstallKB925902$\user32.dll
[-] 2005-03-02 18:09 576512 48A5A51EBCD5056A245397E1EA1F78EE c:\windows\SoftwareDistribution\Download\225553c78bae20470bb22afca58225d3\sp2gdr\user32.dll
[-] 2005-03-02 18:19 576512 C287C8218DAC8EE3AEF1FB2018064699 c:\windows\SoftwareDistribution\Download\225553c78bae20470bb22afca58225d3\sp2qfe\user32.dll
[-] 2007-03-08 15:36 577024 9A432140628841A7D5B489A4AC2EB154 c:\windows\SoftwareDistribution\Download\63aa74bc05a906bda217828e539b1f4b\sp2gdr\user32.dll
[-] 2007-03-08 15:48 577536 ADC5A589D00030F03FC315F18EACF05F c:\windows\SoftwareDistribution\Download\63aa74bc05a906bda217828e539b1f4b\sp2qfe\user32.dll
[-] 2007-03-08 15:36 577024 9A432140628841A7D5B489A4AC2EB154 c:\windows\system32\user32.dll
[-] 2007-03-08 15:36 577024 9A432140628841A7D5B489A4AC2EB154 c:\windows\system32\dllcache\user32.dll

[-] 2004-08-04 00:56 82944 C3B9FD7B0D0824FC224684B73302A0FD c:\windows\system32\ws2_32.dll
[-] 2004-08-04 00:56 82944 C3B9FD7B0D0824FC224684B73302A0FD c:\windows\system32\dllcache\ws2_32.dll

[-] 2009-02-20 08:14 666624 B154F178CCA32FF0E56AF89567477B02 c:\windows\$hf_mig$\KB963027\SP2QFE\wininet.dll
[-] 2009-02-20 08:09 664576 4CCA22CDD450C498A634E8759D12A493 c:\windows\$hf_mig$\KB963027\SP3GDR\wininet.dll
[-] 2009-02-20 07:51 666112 C2538A0FCF4642462D40E3216791E6CB c:\windows\$hf_mig$\KB963027\SP3QFE\wininet.dll
[-] 2004-08-04 00:55 654848 1E1CEF80A11BDAB92B2A83F885D214D5 c:\windows\$NtUninstallKB963027$\wininet.dll
[-] 2009-02-20 08:29 657920 93420320370C40E0E5301A746986A2E1 c:\windows\SoftwareDistribution\Download\d32690a437ee844eb4d7ee73ed563581\sp2gdr\wininet.dll
[-] 2009-02-20 08:14 666624 B154F178CCA32FF0E56AF89567477B02 c:\windows\SoftwareDistribution\Download\d32690a437ee844eb4d7ee73ed563581\sp2qfe\wininet.dll
[-] 2009-02-20 08:09 664576 4CCA22CDD450C498A634E8759D12A493 c:\windows\SoftwareDistribution\Download\d32690a437ee844eb4d7ee73ed563581\sp3gdr\wininet.dll
[-] 2009-02-20 07:51 666112 C2538A0FCF4642462D40E3216791E6CB c:\windows\SoftwareDistribution\Download\d32690a437ee844eb4d7ee73ed563581\sp3qfe\wininet.dll
[-] 2009-02-20 08:29 657920 93420320370C40E0E5301A746986A2E1 c:\windows\system32\wininet.dll
[-] 2009-02-20 08:29 657920 93420320370C40E0E5301A746986A2E1 c:\windows\system32\dllcache\wininet.dll

[-] 2008-06-20 10:44 360960 744E57C99232201AE98C49168B918F48 c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
[-] 2008-06-20 11:59 361600 AD978A1B783B5719720CFF204B666C8E c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
[-] 2004-08-03 23:14 359040 9F4B36614A0FC234525BA224957DE55C c:\windows\$NtUninstallKB951748$\tcpip.sys
[-] 2008-06-20 10:45 360320 2A5554FC5B1E04E131230E3CE035C3F9 c:\windows\SoftwareDistribution\Download\77d40fc9473e388a3d9833a56a4d281f\sp2gdr\tcpip.sys
[-] 2008-06-20 10:44 360960 744E57C99232201AE98C49168B918F48 c:\windows\SoftwareDistribution\Download\77d40fc9473e388a3d9833a56a4d281f\sp2qfe\tcpip.sys
[-] 2008-06-20 11:51 361600 9AEFA14BD6B182D61E3119FA5F436D3D c:\windows\SoftwareDistribution\Download\77d40fc9473e388a3d9833a56a4d281f\sp3gdr\tcpip.sys
[-] 2008-06-20 11:59 361600 AD978A1B783B5719720CFF204B666C8E c:\windows\SoftwareDistribution\Download\77d40fc9473e388a3d9833a56a4d281f\sp3qfe\tcpip.sys
[-] 2008-06-20 10:45 360320 2A5554FC5B1E04E131230E3CE035C3F9 c:\windows\system32\dllcache\tcpip.sys
[-] 2008-06-20 10:45 360320 2A5554FC5B1E04E131230E3CE035C3F9 c:\windows\system32\drivers\tcpip.sys

[-] 2004-08-04 00:56 501248 BA4E08425B62BE257AE4557DA058F1AA c:\windows\system32\winlogon.exe
[-] 2004-08-04 00:56 501248 BA4E08425B62BE257AE4557DA058F1AA c:\windows\system32\dllcache\winlogon.exe

[-] 2004-08-03 23:14 182912 558635D3AF1C7546D26067D5D9B6959E c:\windows\system32\dllcache\ndis.sys
[-] 2004-08-03 23:14 182912 558635D3AF1C7546D26067D5D9B6959E c:\windows\system32\drivers\ndis.sys

[-] 2004-08-03 23:00 29056 4448006B6BC60E6C027932CFC38D6855 c:\windows\system32\dllcache\ip6fw.sys
[-] 2004-08-03 23:00 29056 4448006B6BC60E6C027932CFC38D6855 c:\windows\system32\drivers\ip6fw.sys

[-] 2005-03-02 18:12 2058496 D4BD251B437E841CE93C4AFA19B9B788 c:\windows\$hf_mig$\KB890859\SP2QFE\ntkrnlpa.exe
[-] 2009-02-09 11:41 2064512 76D4AE381DB33DED1A38D541887BD1F0 c:\windows\$hf_mig$\KB956572\SP2QFE\ntkrnlpa.exe
[-] 2009-02-10 16:03 2067584 A4C3645FF33495D60C9210EF94113DEA c:\windows\$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe
[-] 2009-02-09 11:14 2067712 BF87F187CEBD49FA80AEF07431295048 c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[-] 2008-03-22 08:18 2016768 0CBE3942657196CB871738E5D4A9DA79 c:\windows\$NtUninstallKB890859$\ntkrnlpa.exe
[-] 2005-03-02 18:06 2016768 FACBCF4A5490EA352AD39971C45075F2 c:\windows\$NtUninstallKB956572$\ntkrnlpa.exe
[-] 2009-02-09 11:48 2059264 F053586033C0F793F80F95F8376CEA05 c:\windows\Driver Cache\i386\ntkrnlpa.exe
[-] 2005-03-02 18:06 2058368 0AF9CC70EE796F6FA4B074C1C3A22E1E c:\windows\SoftwareDistribution\Download\225553c78bae20470bb22afca58225d3\sp2gdr\ntkrnlpa.exe
[-] 2005-03-02 18:12 2058496 D4BD251B437E841CE93C4AFA19B9B788 c:\windows\SoftwareDistribution\Download\225553c78bae20470bb22afca58225d3\sp2qfe\ntkrnlpa.exe
[-] 2009-02-09 11:48 2059264 F053586033C0F793F80F95F8376CEA05 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP2GDR\ntkrnlpa.exe
[-] 2009-02-09 11:41 2064512 76D4AE381DB33DED1A38D541887BD1F0 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP2QFE\ntkrnlpa.exe
[-] 2009-02-10 16:03 2067584 A4C3645FF33495D60C9210EF94113DEA c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP3GDR\ntkrnlpa.exe
[-] 2009-02-09 11:14 2067712 BF87F187CEBD49FA80AEF07431295048 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP3QFE\ntkrnlpa.exe
[-] 2009-02-09 11:48 2017280 68A0E2F6A8B6E9AB1D461686EC15CB3F c:\windows\system32\ntkrnlpa.exe
[-] 2009-02-09 11:48 2059264 F053586033C0F793F80F95F8376CEA05 c:\windows\system32\dllcache\ntkrnlpa.exe

[-] 2005-03-02 18:12 2181120 C7D8DB9C1F072D6E22D9A2B354CCE5B2 c:\windows\$hf_mig$\KB890859\SP2QFE\ntoskrnl.exe
[-] 2009-02-09 11:41 2187648 63B601A19C76DE3DFFB48C9153E5FB15 c:\windows\$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe
[-] 2009-02-09 11:22 2190592 BAC3C70CE9AAE5129516FEBFE001C873 c:\windows\$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe
[-] 2009-02-10 16:13 2190720 6140520CDCCE0CCC733DD19262411952 c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[-] 2004-08-04 00:48 2149888 10AC039A4734D143A84763AEBACBCD89 c:\windows\$NtUninstallKB890859$\ntoskrnl.exe
[-] 2005-03-02 18:06 2137088 69E84522A4F67E3ED23D416FB08888E6 c:\windows\$NtUninstallKB956572$\ntoskrnl.exe
[-] 2009-02-09 11:48 2182016 8B35F1EDF5C5BA099BE4CA639DD84C47 c:\windows\Driver Cache\i386\ntoskrnl.exe
[-] 2005-03-02 18:06 2180864 26797C3DB913D1048A447DF5394F67A5 c:\windows\SoftwareDistribution\Download\225553c78bae20470bb22afca58225d3\sp2gdr\ntoskrnl.exe
[-] 2005-03-02 18:12 2181120 C7D8DB9C1F072D6E22D9A2B354CCE5B2 c:\windows\SoftwareDistribution\Download\225553c78bae20470bb22afca58225d3\sp2qfe\ntoskrnl.exe
[-] 2009-02-09 11:48 2182016 8B35F1EDF5C5BA099BE4CA639DD84C47 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP2GDR\ntoskrnl.exe
[-] 2009-02-09 11:41 2187648 63B601A19C76DE3DFFB48C9153E5FB15 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP2QFE\ntoskrnl.exe
[-] 2009-02-09 11:22 2190592 BAC3C70CE9AAE5129516FEBFE001C873 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP3GDR\ntoskrnl.exe
[-] 2009-02-10 16:13 2190720 6140520CDCCE0CCC733DD19262411952 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP3QFE\ntoskrnl.exe
[-] 2009-02-09 11:48 2137600 C1D2802B726CDFD99860CBC5600D5808 c:\windows\system32\ntoskrnl.exe
[-] 2009-02-09 11:48 2182016 8B35F1EDF5C5BA099BE4CA639DD84C47 c:\windows\system32\dllcache\ntoskrnl.exe

[-] 2007-06-13 13:22 1030656 4E877303248A09847FB303EE173FBD70 c:\windows\explorer.exe
[-] 2007-06-13 13:10 1030656 D0DC9258122F39129966649085F45880 c:\windows\$hf_mig$\KB938828\SP2QFE\explorer.exe
[-] 2004-08-04 00:56 1029632 932F97B77F2625F7FF7DFC97552548F8 c:\windows\$NtUninstallKB938828$\explorer.exe
[-] 2007-06-13 13:22 1030656 4E877303248A09847FB303EE173FBD70 c:\windows\SoftwareDistribution\Download\3a3a1b0e39ca29cf149573255dab4592\sp2gdr\explorer.exe
[-] 2007-06-13 13:10 1030656 D0DC9258122F39129966649085F45880 c:\windows\SoftwareDistribution\Download\3a3a1b0e39ca29cf149573255dab4592\sp2qfe\explorer.exe
[-] 2007-06-13 13:22 1030656 4E877303248A09847FB303EE173FBD70 c:\windows\system32\dllcache\explorer.exe

[-] 2009-02-09 09:50 110592 7BD0C03478A331554FF67E4559BD308E c:\windows\$hf_mig$\KB956572\SP2QFE\services.exe
[-] 2009-02-09 11:21 110592 1427365EFF6F4758DDC88388045E8400 c:\windows\$hf_mig$\KB956572\SP3GDR\services.exe
[-] 2009-02-09 11:14 110592 7FB6B5705BBDD9B92B2A99FFA25E4CE3 c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
[-] 2004-08-04 00:56 108032 706B1ED77D90DFAFC71AC86AFCC1CC03 c:\windows\$NtUninstallKB956572$\services.exe
[-] 2009-02-09 10:05 110592 E157D81294EDEC6F42792AB6551A3F93 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP2GDR\services.exe
[-] 2009-02-09 09:50 110592 7BD0C03478A331554FF67E4559BD308E c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP2QFE\services.exe
[-] 2009-02-09 11:21 110592 1427365EFF6F4758DDC88388045E8400 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP3GDR\services.exe
[-] 2009-02-09 11:14 110592 7FB6B5705BBDD9B92B2A99FFA25E4CE3 c:\windows\SoftwareDistribution\Download\83061d86781db0b4e8791439303ae788\SP3QFE\services.exe
[-] 2009-02-09 10:05 110592 E157D81294EDEC6F42792AB6551A3F93 c:\windows\system32\services.exe
[-] 2009-02-09 10:05 110592 E157D81294EDEC6F42792AB6551A3F93 c:\windows\system32\dllcache\services.exe

[-] 2004-08-04 00:56 13312 E0C58B25FA2A8AC9EA18A0A5ABB8A932 c:\windows\system32\lsass.exe
[-] 2004-08-04 00:56 13312 E0C58B25FA2A8AC9EA18A0A5ABB8A932 c:\windows\system32\dllcache\lsass.exe

[-] 2004-08-04 00:56 15360 B87D2319441038F62BDDAEEB6BCE156D c:\windows\system32\ctfmon.exe
[-] 2004-08-04 00:56 15360 B87D2319441038F62BDDAEEB6BCE156D c:\windows\system32\dllcache\ctfmon.exe

[-] 2005-06-11 00:17 57856 AD3D9D191AEA7B5445FE1D82FFBB4788 c:\windows\$hf_mig$\KB896423\SP2QFE\spoolsv.exe
[-] 2004-08-04 00:56 57856 5917EF4B63693507C1BE9D1986D2E1DB c:\windows\$NtUninstallKB896423$\spoolsv.exe
[-] 2005-06-10 23:53 57856 DA81EC57ACD4CDC3D4C51CF3D409AF9F c:\windows\SoftwareDistribution\Download\e69f291f34652883d9fcc5fa69bcdc16\sp2gdr\spoolsv.exe
[-] 2005-06-11 00:17 57856 AD3D9D191AEA7B5445FE1D82FFBB4788 c:\windows\SoftwareDistribution\Download\e69f291f34652883d9fcc5fa69bcdc16\sp2qfe\spoolsv.exe
[-] 2005-06-10 23:53 57856 DA81EC57ACD4CDC3D4C51CF3D409AF9F c:\windows\system32\spoolsv.exe
[-] 2005-06-10 23:53 57856 DA81EC57ACD4CDC3D4C51CF3D409AF9F c:\windows\system32\dllcache\spoolsv.exe

[-] 2004-08-04 00:56 24576 E5B1BAFAC265460493B1A12B65C1CF52 c:\windows\system32\userinit.exe
[-] 2004-08-04 00:56 24576 E5B1BAFAC265460493B1A12B65C1CF52 c:\windows\system32\dllcache\userinit.exe

[-] 2004-08-04 00:55 295424 4D42FE6F795DEA7917F329A40A175294 c:\windows\system32\termsrv.dll
[-] 2004-08-04 00:55 295424 4D42FE6F795DEA7917F329A40A175294 c:\windows\system32\dllcache\termsrv.dll

[-] 2004-08-04 00:55 17408 A8C31D5B403B48E98F352DCBCFCEEB9E c:\windows\system32\powrprof.dll
[-] 2004-08-04 00:55 17408 A8C31D5B403B48E98F352DCBCFCEEB9E c:\windows\system32\dllcache\powrprof.dll

[-] 2004-08-04 00:55 110080 E3FE07E893352F48748790DA6FD04A42 c:\windows\system32\imm32.dll
[-] 2004-08-04 00:55 110080 E3FE07E893352F48748790DA6FD04A42 c:\windows\system32\dllcache\imm32.dll

[-] 2008-03-22 08:19 1547776 DABAD58A8BA625B241B90FB1A81154ED c:\windows\system32\sfcfiles.dll
.
((((((((((((((((((((((((((((( SnapShot@2009-05-15_03.47.19 )))))))))))))))))))))))))))))))))))))))))
.
+ 2008-07-29 05:05 . 2008-07-29 05:05 62976 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90rus.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 46080 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90kor.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 46592 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90jpn.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 64512 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90ita.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 66048 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90fra.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esp.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 65024 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90esn.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 56832 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90enu.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 66560 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90deu.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 39936 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90cht.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 38912 c:\windows\WinSxS\x86_Microsoft.VC90.MFCLOC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_b0db7d03\mfc90chs.dll
+ 2008-07-29 03:07 . 2008-07-29 03:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90u.dll
+ 2008-07-29 03:07 . 2008-07-29 03:07 59904 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfcm90.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80KOR.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 49152 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80JPN.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ITA.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80FRA.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 61440 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ESP.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 57344 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80ENU.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 65536 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80DEU.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 45056 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHT.dll
+ 2006-12-01 21:08 . 2006-12-01 21:08 40960 c:\windows\WinSxS\x86_Microsoft.VC80.MFCLOC_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_91481303\mfc80CHS.dll
+ 2008-10-06 15:16 . 2008-10-06 15:16 82696 c:\windows\system32\drivers\BDVEDISK.sys
+ 2004-08-04 00:56 . 2007-06-13 13:22 68188 c:\windows\rar\Dr-Crypter.exe
+ 2009-05-05 21:06 . 2009-05-15 21:21 57344 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\texticon.exe
- 2009-05-05 21:06 . 2009-05-05 21:06 57344 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\texticon.exe
- 2009-05-05 21:06 . 2009-05-05 21:06 22486 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\register_icon.exe
+ 2009-05-05 21:06 . 2009-05-15 21:21 22486 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\register_icon.exe
+ 2009-05-05 21:06 . 2009-05-15 21:21 32768 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\maintenance_icon.exe
- 2009-05-05 21:06 . 2009-05-05 21:06 32768 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\maintenance_icon.exe
+ 2009-05-05 21:06 . 2009-05-15 21:21 61440 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\helpicon.exe
- 2009-05-05 21:06 . 2009-05-05 21:06 61440 c:\windows\Installer\{46E0C50A-1F67-46B9-B4A6-B153245ECFE7}\helpicon.exe
+ 2009-05-15 04:34 . 2009-05-15 03:44 16384 c:\windows\Cookies\index.dat
+ 2009-05-15 19:41 . 2009-05-15 20:31 6692 c:\windows\rar\logg.dat
+ 2008-07-29 05:05 . 2008-07-29 05:05 655872 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcr90.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 572928 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcp90.dll
+ 2008-07-29 00:54 . 2008-07-29 00:54 225280 c:\windows\WinSxS\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_6f74963e\msvcm90.dll
+ 2007-01-31 11:50 . 2007-01-31 11:50 913408 c:\windows\system32\xreglib.dll
+ 2008-10-09 13:31 . 2008-10-09 13:31 192512 c:\windows\system32\txmlutil.dll
+ 2008-12-10 17:42 . 2008-12-10 17:42 242184 c:\windows\system32\drivers\bdfsfltr.sys
+ 2009-02-12 13:52 . 2009-02-12 13:52 104328 c:\windows\system32\drivers\bdfndisf.sys
+ 2008-09-18 09:09 . 2008-09-18 09:09 111112 c:\windows\system32\drivers\bdfm.sys
+ 2008-07-29 05:05 . 2008-07-29 05:05 3783672 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90u.dll
+ 2008-07-29 05:05 . 2008-07-29 05:05 3768312 c:\windows\WinSxS\x86_Microsoft.VC90.MFC_1fc8b3b9a1e18e3b_9.0.30729.1_x-ww_405b0943\mfc90.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-04 15360]
"PC Suite Tray"="c:\program files\Nokia\Nokia PC Suite 7\PCSuite.exe" [2009-03-20 1312256]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-10-13 1694208]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-05-06 198160]
"BDAgent"="c:\program files\BitDefender\BitDefender 2009\bdagent.exe" [2009-04-08 778240]
"BitDefender Antiphishing Helper"="c:\program files\BitDefender\BitDefender 2009\IEShow.exe" [2009-02-23 69632]
"High Definition Audio Property Page Shortcut"="HDAShCut.exe" - c:\windows\system32\HDAShCut.exe [2008-03-22 61952]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-04 15360]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2004-08-04 99840]

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
"UpdatesDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

R1 BIOS;BIOS;c:\windows\system32\drivers\BIOS.sys [05/05/2009 06:51 م 13696]
R1 VBoxDrv;VirtualBox Service;c:\windows\system32\drivers\VBoxDrv.sys [15/05/2009 12:51 ص 100560]
R1 VBoxUSBMon;VirtualBox USB Monitor Driver;c:\windows\system32\drivers\VBoxUSBMon.sys [15/05/2009 12:50 ص 41744]
R2 BDVEDISK;BDVEDISK;c:\program files\BitDefender\BitDefender 2009\BDVEDISK.sys [06/10/2008 06:16 م 82696]
R3 bdfm;BDFM;c:\windows\system32\drivers\bdfm.sys [18/09/2008 12:09 م 111112]
R3 Bdfndisf;BitDefender Firewall NDIS Filter Service;c:\windows\system32\drivers\bdfndisf.sys [12/02/2009 04:52 م 104328]
R3 VBoxNetFlt;VBoxNetFlt Service;c:\windows\system32\drivers\VBoxNetFlt.sys [15/05/2009 12:51 ص 87568]
S3 Arrakis3;BitDefender Arrakis Server;c:\program files\Common Files\BitDefender\BitDefender Arrakis Server\bin\Arrakis3.exe [20/01/2009 07:16 م 172032]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - 3BDAEE17
*NewlyCreated* - 43B1F6AA
*Deregistered* - 3bdaee17
*Deregistered* - 43b1f6aa

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
bdx REG_MULTI_SZ scan
.
.
------- Supplementary Scan -------
.
uInternet Connection Wizard,ShellNext = hxxp://www.google.com/
uInternet Settings,ProxyServer = 212.93.193.74:8080
IE: &تصدير إلى Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
FF - ProfilePath - c:\documents and settings\Atheer\Application Data\Mozilla\Firefox\Profiles\pg4jfz6s.default\
FF - component: c:\program files\Mozilla Firefox\components\bdaphff3.dll
FF - component: c:\program files\Mozilla Firefox\components\FFComm.dll
FF - component: c:\program files\Nokia\Nokia PC Suite 7\bkmrksync\components\BkMrkExt.dll
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\Windows Live\Photo Gallery\NPWLPG.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-05-16 07:01
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1128)
c:\windows\system32\Ati2evxx.dll

- - - - - - - > 'explorer.exe'(2156)
c:\program files\BitDefender\BitDefender 2009\BitDefender InnerFire\midas32-v1_17\leaktests.m32
.
Completion time: 2009-05-16 7:03
ComboFix-quarantined-files.txt 2009-05-16 04:03
ComboFix2.txt 2009-05-15 20:49
ComboFix3.txt 2009-05-15 07:04
ComboFix4.txt 2009-05-15 03:51
ComboFix5.txt 2009-05-16 03:57

Pre-Run: 19,547,504,640 bytes free
Post-Run: 19,547,185,152 bytes free

364 --- E O F --- 2009-05-15 12:10
​

 

[ابـــو عــبــد الــلــه]

الحل منقول ::: مكانيكي كمبيوتر




الحل انك تفتح Run و تكتب Regedit علشان تشغل محرر الرجستري

حلو ؟ قولوا حلو

في الرجستري تروح فين ؟

خد العنوان دا


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\StorageDevicePolicies


في العنوان دا ها تلاقي الاسم دا WriteProtect في الناحية اليمين

تغير القيمة بتاعته من 1 إلى صفر

ممكن تلاقي برضه حاجة بالصورة دي

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet001\Con trol\StorageDevicePolicies

أو بالصورة دي

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet002\Con trol\StorageDevicePolicies

اعمل معاها زي اللي فوق


اقول لكم

ممكن تبحث في الرجستري عن WriteProtect و كل ما تلاقيها تحت مفتاح زي اللي مذكورين فوق خللي قيمتها صفر​

 

[Mr.SaUdI]

الحل منقول ::: مكانيكي كمبيوتر




الحل انك تفتح Run و تكتب Regedit علشان تشغل محرر الرجستري

حلو ؟ قولوا حلو

في الرجستري تروح فين ؟

خد العنوان دا


HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\StorageDevicePolicies


في العنوان دا ها تلاقي الاسم دا WriteProtect في الناحية اليمين

تغير القيمة بتاعته من 1 إلى صفر

ممكن تلاقي برضه حاجة بالصورة دي

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet001\Con trol\StorageDevicePolicies

أو بالصورة دي

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet002\Con trol\StorageDevicePolicies

اعمل معاها زي اللي فوق


اقول لكم

ممكن تبحث في الرجستري عن WriteProtect و كل ما تلاقيها تحت مفتاح زي اللي مذكورين فوق خللي قيمتها صفر​

شوف ياعزيزي

القيمه هذي ماوجدتها StorageDevicePolicies​

 

[ابـــو عــبــد الــلــه]

ممكن تبحث في الرجستري عن WriteProtect​

 

[Mr.SaUdI]

ممكن تبحث في الرجستري عن WriteProtect​

ياعزيزي , بالنسبه للمفتاح

WriteProtect

من تحرير سويت بحث عنه اللي يطلع لي :-

تم انتهاء البحث في التسجبل ​

 

[ابـــو عــبــد الــلــه]

جرب كلك يمين على الفلاش ثم اختر خصائص ثم اختر الاجهزة اختر الفلاش في كافة محركات الاقراص ثم اختر خصائص عدل استخدام الجهاز على تمكين اذا كان على تعطيل ...



​

 

[format]

طيب ياخوي هو بيعمل معاك فقط على كمبيوترك ولا جربته في كمبيوتر تاني برضو نفس المشكله​

 

[Mr.SaUdI]

:king:​

 

[ابـــو عــبــد الــلــه]

كيف الوضع معك ...