طلب متصفح اكسبلولر 7 لويندوز فيستا

[Thief heart]

كما تلاحظون اخواني في العنوان

اطلب منكم متصفح اكسبلولر 7 لويندوز فيستا

علما بأني نزلت النسخه العربيه والإنجليزيه وما قدرت انزلها

ان شاء الله القى الحل عندكم​

​

 

[KoNaMi]

حياك اخوي

حمل الاكسبلورر السابع وثبته

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

رابط التعريب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

طريقة التعريب
اغلق الاكسبلورر بعد التثبيت ثم دبل كلك على ملف التعريب وثبت بشكل عادي
​

 

[MAAX]

عزيزي الفيستا ما يجي الا اصدار سابع !

 

[Thief heart]

اخي الكريم

الرابط الي عندي نزلته وموجود مسبقآ

وعند تثبيته تظهر رساله مكتوب فيها

لا يعتمد نظام التشغيل هذا انترنت اكسبلولر 7

 

[Thief heart]

عزيزي الفيستا ما يجي الا اصدار سابع !

ايوآ يا مآكس

بس انا اللإكسبولر عندي مخبط جدن وسويت له ريست ونفس الحاله يعني مضروب

:no:

 

[Thief heart]

مثال لـ بعض الأعطال الموجوده

النآف بآر في جميع المنتديات يوجد بها خاصية البحث والخيارات السريعه لكن في المتصفح لا يظهر لي السهم بحيث تتيح ليا مشاهدة كافة الخيارات

وايضآ في صندوق ادوات التحرير في كافة المنتديات

عند تعديل الخط من حيث حجمه انو نوعه بمجرد النقر على الخانه لا تظهر

الخلاصه : اني خاصيه تظهر بالنقر لا تظهر معي


وانا حاليا اكلمكم من متصفح اوبرآ الأخير

 

[MAAX]

حمل هذا البرنامج

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم

 

[Thief heart]

تفضل اخوي ...


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:31:57 ص, on 29/05/09
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16830)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Opera\Opera.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [McAfeeUpdaterUI] "C:\Program Files\McAfee\Common Framework\udaterui.exe" /StartedFromRunKey
O4 - HKLM\..\Run: [ShStatEXE] "C:\Program Files\McAfee\VirusScan Enterprise\SHSTAT.EXE" /STANDALONE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Azkary] C:\Program Files\Azkary\Azkary
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'NETWORK SERVICE')
O4 - Startup: GIGABYTE Gamer HUD.lnk = C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Avira Firewall (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Helper Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee Engine Service (McAfeeEngineService) - Unknown owner - C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe (file missing)
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\McAfee\Common Framework\FrameworkService.exe (file missing)
O23 - Service: McAfee McShield (McShield) - Unknown owner - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe (file missing)
O23 - Service: McAfee Task Manager (McTaskManager) - Unknown owner - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe (file missing)
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Windows\system32\mfevtps.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: PnkBstrB - Unknown owner - C:\Windows\system32\PnkBstrB.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

--
End of file - 8828 bytes

 

[Thief heart]

المشآكل كثرة احس في الجهآز فآيروس معطل لي انو اركب مفتاح الأفيرآ وال الإكسبلولر مو شغآل تمام بـ اكمل وجه

والويندوز ميدا بلير لا يعمل تماما !!

 

[Thief heart]

الله يرحم والديكم شوفولي حل الله لا هينكم

 

[MAAX]

حمل هذا البرنامج

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

ثبته على الجهاز ،، ثم شغله واعمل كما الشرح التالي لفحص الجهاز وعمل تقرير

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

وبعد انتهاء الفحص اعمل التالي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

انسخ ما بداخل التقرير والصقه بمشاركتك القادمة​

 

[Thief heart]

ابشر طآل عمرك وجآآري الفحص

 

[Thief heart]

وهذا التقرير ... هل اقوم بحذف هذا التورجان ؟

توسعت اكثر فـ اكثر بحيث اني لا استطيع حتى تغيير صورة الماسنجر يطفي الجهاز وتطلع الشاشه الزرقاء والكلام



Malwarebytes' Anti-Malware 1.37
Database version: 2192
Windows 6.0.6000

29/05/09 05:35:58 م
mbam-log-2009-05-29 (17-35-58).txt

Scan type: Full Scan (C:\|D:\|)
Objects scanned: 187953
Time elapsed: 45 minute(s), 42 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\program files\clonysoft\vista x86 oneclick activator\VistaActivationCrackSetup.exe (Trojan.VB) -> Quarantined and deleted successfully.

 

[MAAX]

عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​

 

[boob77]

السلام عليكم ’ اسف اخوي على التاخير

ياريت تصور لي الرسالة الي تظهر لك اذا جيت تثبت الاكسبلورر

 

[boob77]

عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​

فديت روحك يا ماكس :q:

 

[Thief heart]

هلا والله بـ بووب دقآيق واصور لكـ


وهذا التقرير الي طلبه ماكس


ComboFix 09-05-28.07 - Hp 05/29/2009 18:30.1 - NTFSx86
Microsoft® Windows Vista™ Ultimate 6.0.6000.0.1256.966.1033.18.2303.1780 [GMT 3:00]
Running from: c:\users\Hp\Desktop\ComboFix.exe
* Created a new restore point
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\autorun.inf
D:\Autorun.inf
D:\desktop.ini

.
((((((((((((((((((((((((( Files Created from 2009-04-28 to 2009-05-29 )))))))))))))))))))))))))))))))
.

2009-05-29 15:35 . 2009-05-29 15:35 -------- d-----w c:\users\Hp\AppData\Local\temp
2009-05-29 13:25 . 2009-05-29 13:25 3371383 ----a-w c:\programdata\Malwarebytes\Malwarebytes' Anti-Malware\mbam-setup.exe
2009-05-29 13:22 . 2009-05-29 13:22 -------- d-----w c:\users\Hp\AppData\Roaming\Malwarebytes
2009-05-29 13:21 . 2009-05-26 10:19 19096 ----a-w c:\windows\system32\drivers\mbam.sys
2009-05-29 13:21 . 2009-05-26 10:20 40160 ----a-w c:\windows\system32\drivers\mbamswissarmy.sys
2009-05-29 13:21 . 2009-05-29 13:27 -------- d-----w c:\program files\Malwarebytes' Anti-Malware
2009-05-29 13:21 . 2009-05-29 13:21 -------- d-----w c:\programdata\Malwarebytes
2009-05-29 07:31 . 2009-05-29 07:31 -------- d-----w c:\program files\Trend Micro
2009-05-28 18:39 . 2009-05-28 18:39 -------- d-----w c:\programdata\BA1
2009-05-28 15:31 . 2009-05-28 15:32 -------- d-----w c:\users\Hp\AppData\Local\BearShare
2009-05-28 15:30 . 2009-05-28 15:31 -------- d-----w c:\program files\BearShare Applications
2009-05-28 10:41 . 2009-05-28 10:41 -------- d-----w c:\users\Hp\AppData\Local\Opera
2009-05-28 10:40 . 2009-05-28 10:41 -------- d-----w c:\program files\Opera
2009-05-28 10:09 . 2009-05-28 10:10 -------- d-----w c:\users\Hp\AppData\Roaming\Media Player Classic
2009-05-28 10:09 . 2009-05-28 10:09 -------- d-----w c:\users\Hp\AppData\Roaming\Avira
2009-05-28 08:19 . 2009-05-28 08:19 8854 ----a-r c:\users\Hp\AppData\Roaming\Microsoft\Installer\{84FB24B0-9973-4370-B107-7C38DDF20ABC}\UNINST_Uninstall_Gam_84FB24B099734370B1077C38DDF20ABC.exe
2009-05-28 08:19 . 2009-05-28 08:19 40960 ----a-r c:\users\Hp\AppData\Roaming\Microsoft\Installer\{84FB24B0-9973-4370-B107-7C38DDF20ABC}\NewShortcut1_84FB24B099734370B1077C38DDF20ABC.exe
2009-05-28 08:19 . 2009-05-28 08:19 40960 ----a-r c:\users\Hp\AppData\Roaming\Microsoft\Installer\{84FB24B0-9973-4370-B107-7C38DDF20ABC}\HUD.exe_84FB24B099734370B1077C38DDF20ABC.exe
2009-05-28 08:19 . 2009-05-28 08:19 1150 ----a-r c:\users\Hp\AppData\Roaming\Microsoft\Installer\{84FB24B0-9973-4370-B107-7C38DDF20ABC}\ARPPRODUCTICON.exe
2009-05-28 08:19 . 2009-05-28 08:19 -------- d-----w c:\program files\GIGABYTE
2009-05-28 08:18 . 2009-05-28 08:18 -------- d-----w c:\program files\Common Files\Wise Installation Wizard
2009-05-27 18:06 . 2009-03-30 07:33 96104 ----a-w c:\windows\system32\drivers\avipbb.sys
2009-05-27 18:06 . 2009-03-24 13:08 55640 ----a-w c:\windows\system32\drivers\avgntflt.sys
2009-05-27 18:06 . 2009-03-24 11:51 97480 ----a-w c:\windows\system32\drivers\avfwot.sys
2009-05-27 18:06 . 2009-02-24 10:06 69632 ----a-w c:\windows\system32\drivers\avfwim.sys
2009-05-27 18:06 . 2009-05-27 18:06 -------- d-----w c:\program files\Avira
2009-05-27 16:48 . 2009-05-27 16:48 0 ----a-w c:\windows\system32\cd.dat
2009-05-27 16:39 . 2009-05-27 18:06 -------- d-----w c:\programdata\Avira
2009-05-26 22:11 . 2009-05-26 22:11 -------- d-----w C:\Hotspot Shield
2009-05-26 18:21 . 2009-05-26 18:21 -------- d-----w c:\users\Hp\AppData\Local\PunkBuster
2009-05-26 11:54 . 2009-05-29 15:08 138168 ----a-w c:\windows\system32\drivers\PnkBstrK.sys
2009-05-26 11:54 . 2009-05-26 11:54 139152 ----a-w c:\users\Hp\AppData\Roaming\PnkBstrK.sys
2009-05-26 11:54 . 2009-05-29 15:07 189472 ----a-w c:\windows\system32\PnkBstrB.exe
2009-05-26 11:54 . 2009-05-26 11:54 794408 ----a-w c:\windows\system32\pbsvc.exe
2009-05-26 11:54 . 2009-05-26 11:54 75064 ----a-w c:\windows\system32\PnkBstrA.exe
2009-05-26 10:29 . 2009-05-26 10:29 -------- d-----w c:\program files\Common Files\EasyInfo
2009-05-26 10:27 . 2009-05-26 10:27 -------- d-----w c:\program files\GameSpy Arcade
2009-05-26 10:21 . 2009-05-26 10:21 -------- d-----w c:\program files\EA GAMES
2009-05-25 22:20 . 2009-05-25 21:19 4152184 ----a-w c:\windows\system32\wgaer_m.exe
2009-05-25 22:16 . 2009-05-25 22:16 28672 ----a-w c:\windows\system32\FwRemoteSvr.dll
2009-05-25 22:16 . 2009-05-25 22:16 61440 ----a-w c:\windows\system32\winipsec.dll
2009-05-25 22:16 . 2009-05-25 22:16 361984 ----a-w c:\windows\system32\IPSECSVC.DLL
2009-05-25 22:16 . 2009-05-25 22:16 272896 ----a-w c:\windows\system32\polstore.dll
2009-05-25 22:14 . 2009-05-25 22:14 87040 ----a-w c:\windows\system32\msoert2.dll
2009-05-25 22:14 . 2009-05-25 22:14 39424 ----a-w c:\windows\system32\ACCTRES.dll
2009-05-25 22:14 . 2009-05-25 22:14 205824 ----a-w c:\windows\system32\msoeacct.dll
2009-05-25 22:12 . 2009-05-25 22:12 194560 ----a-w c:\windows\system32\WebClnt.dll
2009-05-25 22:12 . 2009-05-25 22:12 110080 ----a-w c:\windows\system32\drivers\mrxdav.sys
2009-05-25 22:11 . 2009-05-25 22:11 49664 ----a-w c:\windows\system32\csrsrv.dll
2009-05-25 22:11 . 2009-05-25 22:11 376320 ----a-w c:\windows\system32\winsrv.dll
2009-05-25 22:04 . 2009-05-25 22:04 376832 ----a-w c:\windows\system32\winhttp.dll
2009-05-25 22:02 . 2009-05-25 22:02 297472 ----a-w c:\windows\system32\gdi32.dll
2009-05-25 21:59 . 2009-05-25 21:59 211456 ----a-w c:\windows\system32\drivers\mrxsmb10.sys
2009-05-25 21:57 . 2009-05-25 21:57 374456 ----a-w c:\windows\system32\mcupdate_GenuineIntel.dll
2009-05-25 21:56 . 2009-05-25 21:56 500736 ----a-w c:\windows\system32\msdtcprx.dll
2009-05-25 21:56 . 2009-05-25 21:56 30208 ----a-w c:\windows\system32\xolehlp.dll
2009-05-25 21:54 . 2009-05-25 21:54 28672 ----a-w c:\windows\system32\Apphlpdm.dll
2009-05-25 21:54 . 2009-05-25 21:54 4247552 ----a-w c:\windows\system32\GameUXLegacyGDFs.dll
2009-05-25 21:54 . 2009-05-25 21:54 1687040 ----a-w c:\windows\system32\gameux.dll
2009-05-25 21:52 . 2009-05-25 21:52 303616 ----a-w c:\windows\system32\wmpeffects.dll
2009-05-25 21:51 . 2009-05-25 21:51 2048 ----a-w c:\windows\system32\msxml3r.dll
2009-05-25 21:51 . 2009-05-25 21:51 1194496 ----a-w c:\windows\system32\msxml3.dll
2009-05-25 21:49 . 2009-05-25 21:49 414208 ----a-w c:\windows\system32\msscp.dll
2009-05-25 21:47 . 2009-05-26 22:11 -------- d-----w c:\program files\Hotspot Shield
2009-05-25 21:47 . 2009-05-25 21:47 63488 ----a-w c:\windows\system32\drivers\mpsdrv.sys
2009-05-25 21:47 . 2009-05-25 21:47 396800 ----a-w c:\windows\system32\MPSSVC.dll
2009-05-25 21:47 . 2009-05-25 21:47 392192 ----a-w c:\windows\system32\FirewallAPI.dll
2009-05-25 21:47 . 2009-05-25 21:47 86016 ----a-w c:\windows\system32\icfupgd.dll
2009-05-25 21:47 . 2009-05-25 21:47 61952 ----a-w c:\windows\system32\cmifw.dll
2009-05-25 21:47 . 2009-05-25 21:47 16896 ----a-w c:\windows\system32\wfapigp.dll
2009-05-25 21:47 . 2009-05-25 21:47 23040 ----a-w c:\windows\system32\drivers\tunnel.sys
2009-05-25 21:47 . 2009-05-25 21:47 178688 ----a-w c:\windows\system32\iphlpsvc.dll
2009-05-25 21:47 . 2009-05-25 21:47 15360 ----a-w c:\windows\system32\drivers\TUNMP.SYS
2009-05-25 21:43 . 2009-05-25 21:43 2048 ----a-w c:\windows\system32\tzres.dll
2009-05-25 21:43 . 2009-05-25 21:43 -------- d-----w c:\users\Hp\AppData\Roaming\CyberLink
2009-05-25 21:43 . 2009-05-28 14:22 -------- d-----w c:\programdata\CyberLink
2009-05-25 21:41 . 2009-05-25 21:41 8147968 ----a-w c:\windows\system32\wmploc.DLL
2009-05-25 21:41 . 2009-05-25 21:41 7680 ----a-w c:\windows\system32\spwmp.dll
2009-05-25 21:41 . 2009-05-25 21:41 4096 ----a-w c:\windows\system32\dxmasf.dll
2009-05-25 21:34 . 2009-05-25 21:34 104448 ----a-w c:\windows\system32\DWWIN.EXE
2009-05-25 21:33 . 2009-05-25 21:33 2923520 ----a-w c:\windows\explorer.exe
2009-05-25 21:29 . 2009-05-25 21:29 24064 ----a-w c:\windows\system32\netcfg.exe
2009-05-25 21:29 . 2009-05-25 21:29 216632 ----a-w c:\windows\system32\drivers\netio.sys
2009-05-25 21:29 . 2009-05-25 21:29 803328 ----a-w c:\windows\system32\drivers\tcpip.sys
2009-05-25 21:29 . 2009-05-25 21:29 22016 ----a-w c:\windows\system32\netiougc.exe
2009-05-25 21:29 . 2009-05-25 21:29 167424 ----a-w c:\windows\system32\tcpipcfg.dll
2009-05-25 21:25 . 2009-05-25 21:25 4493312 ----a-w c:\windows\system32\NlsData0010.dll
2009-05-25 21:16 . 2009-05-25 21:16 549888 ----a-w c:\windows\system32\rpcss.dll
2009-05-25 21:16 . 2009-05-25 21:16 3503584 ----a-w c:\windows\system32\ntkrnlpa.exe
2009-05-25 21:16 . 2009-05-25 21:16 3469280 ----a-w c:\windows\system32\ntoskrnl.exe
2009-05-25 21:16 . 2009-05-25 21:16 24576 ----a-w c:\windows\system32\printfilterpipelineprxy.dll
2009-05-25 21:16 . 2009-05-25 21:16 654336 ----a-w c:\windows\system32\printfilterpipelinesvc.exe
2009-05-25 21:16 . 2009-05-25 21:16 53248 ----a-w c:\windows\system32\iasads.dll
2009-05-25 21:16 . 2009-05-25 21:16 97280 ----a-w c:\windows\system32\iasrecst.dll
2009-05-25 21:16 . 2009-05-25 21:16 37888 ----a-w c:\windows\system32\iasdatastore.dll
2009-05-25 21:16 . 2009-05-25 21:16 158720 ----a-w c:\windows\system32\sdohlp.dll
2009-05-25 21:11 . 2009-05-25 21:11 9728 ----a-w c:\windows\system32\LAPRXY.DLL
2009-05-25 21:11 . 2009-05-25 21:11 223232 ----a-w c:\windows\system32\WMASF.DLL
2009-05-25 21:11 . 2009-05-25 21:11 2048 ----a-w c:\windows\system32\asferror.dll
2009-05-25 21:09 . 2009-05-25 21:09 7680 ----a-w c:\windows\system32\lsass.exe
2009-05-25 21:09 . 2009-05-25 21:09 72704 ----a-w c:\windows\system32\secur32.dll
2009-05-25 21:09 . 2009-05-25 21:09 1233408 ----a-w c:\windows\system32\lsasrv.dll
2009-05-25 21:09 . 2009-05-25 21:09 25600 ----a-w c:\windows\system32\amxread.dll
2009-05-25 21:09 . 2009-05-25 21:09 14848 ----a-w c:\windows\system32\apilogen.dll
2009-05-25 21:07 . 2009-05-25 21:07 37376 ----a-w c:\windows\system32\printcom.dll
2009-05-25 21:07 . 2009-05-25 21:07 441856 ----a-w c:\windows\system32\win32spl.dll
2009-05-25 21:05 . 2009-05-25 21:05 14848 ----a-w c:\windows\system32\wshrm.dll
2009-05-25 21:05 . 2009-05-25 21:05 113664 ----a-w c:\windows\system32\drivers\rmcast.sys
2009-05-25 21:03 . 2009-05-25 21:03 11776 ----a-w c:\windows\system32\sbunattend.exe
2009-05-25 21:01 . 2009-05-25 21:01 558080 ----a-w c:\windows\system32\oleaut32.dll
2009-05-25 21:00 . 2009-05-25 21:00 290304 ----a-w c:\windows\system32\drivers\srv.sys
2009-05-25 20:58 . 2009-05-25 20:58 83968 ----a-w c:\windows\system32\dnsrslvr.dll
2009-05-25 20:58 . 2009-05-25 20:58 24576 ----a-w c:\windows\system32\dnscacheugc.exe
2009-05-25 20:56 . 2009-05-25 20:56 269824 ----a-w c:\windows\system32\schannel.dll
2009-05-25 20:49 . 2009-05-25 20:49 97800 ----a-w c:\windows\system32\infocardapi.dll
2009-05-25 20:49 . 2009-05-25 20:49 622080 ----a-w c:\windows\system32\icardagt.exe
2009-05-25 20:49 . 2009-05-25 20:49 11264 ----a-w c:\windows\system32\icardres.dll
2009-05-25 20:49 . 2009-05-25 20:49 105016 ----a-w c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll
2009-05-25 20:49 . 2009-05-25 20:49 43544 ----a-w c:\windows\system32\PresentationHostProxy.dll
2009-05-25 20:49 . 2009-05-25 20:49 326160 ----a-w c:\windows\system32\PresentationHost.exe
2009-05-25 20:49 . 2009-05-25 20:49 781344 ----a-w c:\windows\system32\PresentationNative_v0300.dll
2009-05-25 20:30 . 2009-05-25 20:30 -------- d-----w c:\users\Hp\AppData\Roaming\COWON
2009-05-25 20:28 . 2009-05-25 20:28 96760 ----a-w c:\windows\system32\dfshim.dll
2009-05-25 20:28 . 2009-05-25 20:28 41984 ----a-w c:\windows\system32\netfxperf.dll
2009-05-25 20:28 . 2009-05-25 20:28 282112 ----a-w c:\windows\system32\mscoree.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-25 22:20 . 2006-11-02 11:18 -------- d-----w c:\program files\Windows Mail
2009-05-25 22:20 . 2006-11-02 12:35 -------- d-----w c:\program files\Windows Sidebar
2009-05-25 22:20 . 2006-11-02 10:25 665600 ----a-w c:\windows\inf\drvindex.dat
2009-05-25 21:25 . 2009-05-25 21:25 2655232 ----a-w c:\windows\system32\NlsData0011.dll
2009-05-25 20:00 . 2009-05-25 20:00 72704 ----a-w c:\windows\system32\admparse.dll
2009-05-25 20:00 . 2009-05-25 20:00 826368 ----a-w c:\windows\system32\wininet.dll
2009-05-25 20:00 . 2009-05-25 20:00 78336 ----a-w c:\windows\system32\ieencode.dll
2009-05-25 20:00 . 2009-05-25 20:00 48128 ----a-w c:\windows\system32\mshtmler.dll
2009-05-25 18:13 . 2009-05-24 20:22 680 ----a-w c:\users\Hp\AppData\Local\d3d9caps.dat
2009-05-25 17:10 . 2009-05-25 13:30 -------- d-----w c:\programdata\Apple Computer
2009-05-25 15:32 . 2006-11-02 12:35 -------- d-----w c:\program files\MSBuild
2009-05-25 13:55 . 2009-05-25 13:54 -------- d-----w c:\program files\QuickWiz
2009-05-25 13:54 . 2009-05-25 13:54 -------- d-----w c:\program files\Common Files\Accent Shared
2009-05-25 13:54 . 2009-05-25 13:54 -------- d-----w c:\program files\Common Files\GuruNet Shared
2009-05-25 13:45 . 2009-05-25 13:45 -------- d-----w c:\program files\mpegable
2009-05-25 13:45 . 2009-05-25 13:45 47104 ------w c:\windows\AKDeInstall.exe
2009-05-25 13:45 . 2009-05-25 13:45 -------- d-----w c:\program files\K-Lite Codec Pack
2009-05-25 13:31 . 2009-05-25 13:31 -------- d-----w c:\users\Hp\AppData\Roaming\Apple Computer
2009-05-25 13:31 . 2009-05-25 13:31 -------- d-----w c:\programdata\{3276BE95_AF08_429F_A64F_CA64CB79BCF6}
2009-05-25 13:31 . 2009-05-25 13:31 -------- d-----w c:\program files\iTunes
2009-05-25 13:31 . 2009-05-25 13:31 -------- d-----w c:\program files\iPod
2009-05-25 13:31 . 2009-05-25 13:31 -------- d-----w c:\program files\Bonjour
2009-05-25 13:31 . 2009-05-25 13:30 -------- d-----w c:\program files\QuickTime
2009-05-25 13:31 . 2009-05-25 13:30 -------- d-----w c:\program files\Common Files\Apple
2009-05-25 13:30 . 2009-05-25 13:30 -------- d-----w c:\program files\Apple Software Update
2009-05-20 19:54 . 2009-04-03 18:18 33840 ----a-w c:\windows\system32\drivers\HssDrv.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{74322BF9-DF26-493f-B0DA-6D2FC5E6429E}]
2009-05-04 10:56 398776 ----a-w c:\program files\BearShare Applications\BearShare\BearShareIEHelper.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2009-05-25 21:47 218160 ----a-w c:\program files\Hotspot Shield\hssie\HssIE.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2009-05-25 1232896]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 201728]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Azkary"="c:\program files\Azkary\Azkary" [X]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2008-09-06 413696]
"iTunesHelper"="c:\program files\iTunes\iTunesHelper.exe" [2008-09-08 289576]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-05-25 185896]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 144784]
"GrooveMonitor"="c:\program files\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-26 31016]
"RemoteControl"="c:\program files\CyberLink\PowerDVD\PDVDServ.exe" [2007-03-14 71216]
"LanguageShortcut"="c:\program files\CyberLink\PowerDVD\Language\Language.exe" [2007-01-08 52256]
"NeroFilterCheck"="c:\program files\Common Files\Ahead\Lib\NeroCheck.exe" [2007-03-01 153136]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2008-09-17 13580832]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2008-09-17 92704]
"avgnt"="c:\program files\Avira\AntiVir Desktop\avgnt.exe" [2009-03-02 209153]

c:\users\Hp\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
GIGABYTE Gamer HUD.lnk - c:\program files\GIGABYTE\Gamer HUD\HUD.exe [2008-7-15 1952256]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"EnableLUA"= 0 (0x0)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\McAfeeEngineService]
@="Service"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WinDefend]
@="Service"

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Svc\S-1-5-21-100929737-2577450405-1365038318-1000]
"EnableNotificationsRef"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\DomainProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\FirewallRules]
"{A24D2123-A10A-4062-B495-2BFA6FD86440}"= UDP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{815900BB-9D35-4BCC-AE9C-E0EE6507BF17}"= TCP:c:\program files\Bonjour\mDNSResponder.exe:Bonjour
"{2F004693-4B3C-462C-8513-A585337F8A9D}"= UDP:c:\program files\iTunes\iTunes.exe:iTunes
"{029ADD7B-2584-42A2-A9C9-18CB7DF53053}"= TCP:c:\program files\iTunes\iTunes.exe:iTunes
"{5F03A141-211A-4D24-947A-F1675EE5073F}"= c:\program files\MSN Messenger\livecall.exe:Windows Live Messenger 8.1 (Phone)
"{2F81EAAB-910E-49D9-B6DB-35F6B0F4CB22}"= UDP:c:\program files\McAfee\Common Framework\FrameworkService.exe:McAfee Framework Service
"{D2321D25-154D-491E-8AC7-1D1198800B1D}"= TCP:c:\program files\McAfee\Common Framework\FrameworkService.exe:McAfee Framework Service
"{E1C85411-75BF-4C62-A2EC-A2853911A8BE}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
"{B416896B-9DFC-49CC-AA2A-13882604CFBA}"= UDP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{BA3D5002-00F8-4ACC-B3B7-81129FBA908A}"= TCP:c:\program files\Microsoft Office\Office12\GROOVE.EXE:Microsoft Office Groove
"{28F0CEF5-173B-4CE8-9AD1-C3F339F49CB9}"= UDP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{B81A5A05-A0B5-4CD6-B046-A1B47E6FD041}"= TCP:c:\program files\Microsoft Office\Office12\ONENOTE.EXE:Microsoft Office OneNote
"{3E8C77EC-A1F1-4AB8-B39F-1B9A6BC302B4}"= c:\program files\CyberLink\PowerDVD\PowerDVD.EXE:CyberLink PowerDVD
"{D66E926F-8385-4B63-AB4D-443A02C4493F}"= UDP:c:\program files\EA GAMES\Battlefield 2\BF2.exe:Battlefield 2
"{C9AFD3C2-5CE9-4512-9FE2-0A1F5D7F3BC3}"= TCP:c:\program files\EA GAMES\Battlefield 2\BF2.exe:Battlefield 2
"{DF3C2066-B378-4DAF-94A1-44B9523AE213}"= UDP:c:\program files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"{8E4D98C8-0878-4422-B282-9EBFCC1FF9C7}"= TCP:c:\program files\GameSpy Arcade\Aphex.exe:GameSpy Arcade
"{3A23327A-3CBC-4599-A8F5-36268495C604}"= UDP:c:\windows\System32\PnkBstrA.exenkBstrA
"{A14FD987-60C7-4B67-A03F-BC938694DAA3}"= TCP:c:\windows\System32\PnkBstrA.exenkBstrA
"{702132BE-9881-4294-9FDD-CF140AA4DBAD}"= UDP:c:\windows\System32\PnkBstrB.exenkBstrB
"{0828BE38-1F10-4528-831C-12F33E9A7806}"= TCP:c:\windows\System32\PnkBstrB.exenkBstrB

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\PublicProfile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\RestrictedServices\Static\System]
"DFSR-1"= RPort=5722|UDP:%SystemRoot%\system32\svchost.exe|Svc=DFSR:Allow inbound TCP traffic|

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\StandardProfile]
"EnableFirewall"= 0 (0x0)

R1 avfwot;avfwot;c:\windows\System32\drivers\avfwot.sys [27/05/09 09:06 م 97480]
R2 AntiVirFirewallService;Avira Firewall;c:\program files\Avira\AntiVir Desktop\avfwsvc.exe [27/05/09 09:06 م 388865]
R2 AntiVirMailService;Avira AntiVir MailGuard;c:\program files\Avira\AntiVir Desktop\avmailc.exe [27/05/09 09:06 م 194817]
R2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\Avira\AntiVir Desktop\sched.exe [27/05/09 09:06 م 108289]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\program files\Avira\AntiVir Desktop\avwebgrd.exe [27/05/09 09:06 م 432897]
R2 HssSrv;Hotspot Shield Helper Service;c:\program files\Hotspot Shield\HssWPR\hsssrv.exe [20/05/09 10:53 م 331312]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\System32\drivers\avfwim.sys [27/05/09 09:06 م 69632]
R3 b57nd60x;Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0;c:\windows\System32\drivers\b57nd60x.sys [02/11/06 01:25 م 167936]
R3 HssDrv;Hotspot Shield Helper Miniport;c:\windows\System32\drivers\HssDrv.sys [03/04/09 09:18 م 33840]
S0 OemBiosDevice;Royalty OEM Bios Extension;c:\windows\System32\drivers\royal.sys [25/05/09 08:01 م 240128]
S2 McAfeeEngineService;McAfee Engine Service;"c:\program files\McAfee\VirusScan Enterprise\EngineServer.exe" --> c:\program files\McAfee\VirusScan Enterprise\EngineServer.exe [?]
S2 mfevtp;McAfee Validation Trust Protection Service;c:\windows\System32\mfevtps.exe [25/05/09 05:33 م 67904]
S3 HssTrayService;Hotspot Shield Tray Service;c:\program files\Hotspot Shield\bin\HssTrayService.exe [21/05/09 01:29 ص 34352]
S3 mferkdet;McAfee Inc. mferkdet;c:\windows\System32\drivers\mferkdet.sys [25/05/09 05:33 م 64432]
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-McAfeeUpdaterUI - c:\program files\McAfee\Common Framework\udaterui.exe
HKLM-Run-ShStatEXE - c:\program files\McAfee\VirusScan Enterprise\SHSTAT.EXE
SafeBoot-procexp90.Sys


.
------- Supplementary Scan -------
.
uStart Page = hxxp://search.bearshare.com/
uInternet Settings,ProxyOverride = *.local
LSP: c:\program files\Avira\AntiVir Desktop\avsda.dll
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-05-29 18:35
Windows 6.0.6000 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
.
Completion time: 2009-05-29 18:37
ComboFix-quarantined-files.txt 2009-05-29 15:37

Pre-Run: 6,807,986,176 bytes free
Post-Run: 6,774,321,152 bytes free

282 --- E O F --- 2009-05-25 22:17



ملاحظه هل اقوم بحذف التورجان ؟

 

[Thief heart]

اخوي بوب يآليت المشكله بس في الإكسبلورر

يعني وصلت انو لمن افتح اي بروقرام واخش على فايل وبعدين اضغط اوبن مجرد ما تطلع لي نافذة الي اختار منها الشي الي ابغا افتحه

يقفل الجهاز

 

[MAAX]

فديت روحك يا ماكس :q:

يسلمك ربي :b:

ملاحظه هل اقوم بحذف التورجان ؟

التروجان تم حذفه :king:

اعمل تقرير هايجاك جديد

 

[Thief heart]

طيب الملف الي كان فيه التورجان موجوود

اللي في هذا المسار c:\program files\clonysoft\vista x86 oneclick activator\VistaActivationCrackSetup.exe

رحت Run وفتحت المسار ولقيت الملف وسويت سكان والتورجان لا زال موجود


وهذا تقرير الهايجك


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 07:01:05 م, on 29/05/09
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16830)
Boot mode: Normal

Running processes:
C:\Windows\Explorer.EXE
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe
C:\Program Files\Opera\Opera.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O1 - Hosts: ::1 localhost
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: UrlHelper Class - {74322BF9-DF26-493f-B0DA-6D2FC5E6429E} - C:\Program Files\BearShare Applications\BearShare\BearShareIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: scriptproxy - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Program Files\McAfee\VirusScan Enterprise\scriptsn.dll (file missing)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O3 - Toolbar: BearShare MediaBar - {D3DEE18F-DB64-4BEB-9FF1-E1F0A5033E4A} - C:\Program Files\BearShare Applications\BearShare MediaBar\BearShareMediaBar.dll
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Azkary] C:\Program Files\Azkary\Azkary
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - Startup: GIGABYTE Gamer HUD.lnk = C:\Program Files\GIGABYTE\Gamer HUD\HUD.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\PROGRA~1\Java\JRE16~1.0_0\bin\ssv.dll
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O13 - Gopher Prefix:
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O23 - Service: Avira Firewall (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: Hotspot Shield Helper Service (HssSrv) - AnchorFree Inc. - C:\Program Files\Hotspot Shield\HssWPR\hsssrv.exe
O23 - Service: Hotspot Shield Tray Service (HssTrayService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\HssTrayService.EXE
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: Macromedia Licensing Service - Unknown owner - C:\Program Files\Common Files\Macromedia Shared\Service\Macromedia Licensing.exe
O23 - Service: McAfee Engine Service (McAfeeEngineService) - Unknown owner - C:\Program Files\McAfee\VirusScan Enterprise\EngineServer.exe (file missing)
O23 - Service: McAfee Framework Service (McAfeeFramework) - Unknown owner - C:\Program Files\McAfee\Common Framework\FrameworkService.exe (file missing)
O23 - Service: McAfee McShield (McShield) - Unknown owner - C:\Program Files\McAfee\VirusScan Enterprise\Mcshield.exe (file missing)
O23 - Service: McAfee Task Manager (McTaskManager) - Unknown owner - C:\Program Files\McAfee\VirusScan Enterprise\VsTskMgr.exe (file missing)
O23 - Service: McAfee Validation Trust Protection Service (mfevtp) - McAfee, Inc. - C:\Windows\system32\mfevtps.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\Windows\system32\nvvsvc.exe
O23 - Service: PnkBstrA - Unknown owner - C:\Windows\system32\PnkBstrA.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe

--
End of file - 7755 bytes