عندي بعض المشاكل في جهازي

[mehrez01]

مساء الخير عليكم جميعا
عندي بعض المشاكل في جهازي اولها ان النات اصبح بطئ عندي مع انني سرعة النات 2 ميقا
ثانيا جهازي بطئ نوعا ما
ثالثا اصبح يضهر لدي مجلدات لم تكن عندي من قبل و هذه صورة لها
هذه تقرير هليجاك
مع الشكر


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 14:04:50, on 31/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\LEXPPS.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\alg.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\SuperCopier2\SuperCopier2.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\WINDOWS\system32\wbem\wmiprvse.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [USB Antivirus] C:\Program Files\USB Disk Security\USBGuard.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKCU\..\RunOnce: [Privacy Suite] "C:\Documents and Settings\user\Application Data\cleaner\CSPSeraser.exe" "/R:C:\Documents and Settings\user\Application Data\CyberScrub\Privacy Suite"
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Babuki.lnk = C:\Program Files\Babuki\Babuki.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

--
End of file - 4860 bytes

رابط الصور--

مع الشكر علما وانني استعملت اداة لالكمبوفيكسو ادوات التنظيف التي تستعملنها

 

[أعتز بك]

يا الغلا المجلدات هي خاصه بالنظام

قم بعمل أخفاء من نفس أيقونة الأدوات >> أخفاء الملفات

جاري تحليل التقرير

 

[mehrez01]

شكرا لك لكنها لم تكن موجودة بالاول

 

[mehrez01]

ثانيا لم افهم كيف اخفيها لان جهازي لغته الفرنسية

 

[أعتز بك]

طيب تابع الشرح ولكن أختار

( عدم أظهار الملفات والمجلدات المخفية )

 

[أعتز بك]

أعمل كما في الشرح

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

وهات التقرير حق الأداة في الشرح

بالآآنتظآآر ,,

 

[mehrez01]

شكر جزيلا لك لقد تمت العملية بنجاح
ولكن بالنسبة لتقريري هل هو سليم و ماذا عن النات

 

[أعتز بك]

شكر جزيلا لك لقد تمت العملية بنجاح
ولكن بالنسبة لتقريري هل هو سليم و ماذا عن النات

العفو يا الغلا

بالنسبه للتقرير وبط الجهاز

أعمل كما في الشرح

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

وهات التقرير حق الأداة في الشرح

بالآآنتظآآر ,,​

 

[mehrez01]

تفضل اخي التقرير
Engine Version : 5300.2777
Engine Load Time : 27329 milliseconds
AV DAT Version : 5492.0000 488805 detections Built dimanche 11 janvier 2009
Extra DAT : 0 detections

Memory : Clean
Please wait ... building list of critical files to scan

Critical : Clean
Scanning the computer's cookie directories
Cookies : Clean
c:\pagefile.sys : Scan Failed
c:\Documents and Settings\LocalService\NTUSER.DAT : Scan Failed
c:\Documents and Settings\LocalService\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\NetworkService\NTUSER.DAT : Scan Failed
c:\Documents and Settings\NetworkService\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\user\NTUSER.DAT : Scan Failed
c:\Documents and Settings\user\ntuser.dat.LOG : Scan Failed
c:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\eqnigg3n.default\parent.lock : Scan Failed
c:\Documents and Settings\user\Application Data\Mozilla\Firefox\Profiles\eqnigg3n.default\places.sqlite-journal : Scan Failed
c:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat : Scan Failed
c:\Documents and Settings\user\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG : Scan Failed
c:\Documents and Settings\user\Local Settings\Temp\etilqs_2ChEYBsMWTKsqdOMQJra : Scan Failed
c:\Documents and Settings\user\Local Settings\Temp\etilqs_2ChEYBsMWTKsqdOMQJra-journal : Scan Failed
c:\Documents and Settings\user\Local Settings\Temp\etilqs_KBazD9NHriq1iREfRd6L : Scan Failed
c:\Documents and Settings\user\Local Settings\Temp\Perflib_Perfdata_888.dat : Scan Failed
c:\WINDOWS\system32\CatRoot2\edb.log : Scan Failed
c:\WINDOWS\system32\CatRoot2\tmp.edb : Scan Failed
c:\WINDOWS\system32\config\default : Scan Failed
c:\WINDOWS\system32\config\default.LOG : Scan Failed
c:\WINDOWS\system32\config\SAM : Scan Failed
c:\WINDOWS\system32\config\SAM.LOG : Scan Failed
c:\WINDOWS\system32\config\SECURITY : Scan Failed
c:\WINDOWS\system32\config\SECURITY.LOG : Scan Failed
c:\WINDOWS\system32\config\software : Scan Failed
c:\WINDOWS\system32\config\software.LOG : Scan Failed
c:\WINDOWS\system32\config\system : Scan Failed
c:\WINDOWS\system32\config\system.LOG : Scan Failed
Scanning the registry
Registry : Clean

Summary :-
FilesFound : 33157
FilesScanned : 22552
FilesNotScanned : 10605

ObjectsFound : 102684
ObjectsInfected : 0
ObjectsCleaned : 0
ObjectsDeleted : 0

FilesInfected : 0
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 0

Started at : 14:41:13 dimanche 31 mai 2009
Ended at : 15:19:11 dimanche 31 mai 2009
Duration : 37 minutes 58 seconds
4034 MB scanned in 2278 seconds = 1813 KB/s
Engine Version : 5300.2777
Engine Load Time : 30796 milliseconds
AV DAT Version : 5492.0000 488805 detections Built dimanche 11 janvier 2009
Extra DAT : 0 detections


Summary :-
FilesFound : 1225
FilesScanned : 535
FilesNotScanned : 690

ObjectsFound : 2496
ObjectsInfected : 0
ObjectsCleaned : 0
ObjectsDeleted : 0

FilesInfected : 0
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 0

Started at : 15:19:46 dimanche 31 mai 2009
Ended at : 15:22:30 dimanche 31 mai 2009
Duration : 2 minutes 44 seconds
295 MB scanned in 164 seconds = 1843 KB/s
Engine Version : 5300.2777
Engine Load Time : 30140 milliseconds
AV DAT Version : 5492.0000 488805 detections Built dimanche 11 janvier 2009
Extra DAT : 0 detections

e:\Setup.skin : Scan Failed
e:\Crack\pes6.exe : Scan Failed

Summary :-
FilesFound : 27
FilesScanned : 24
FilesNotScanned : 3

ObjectsFound : 28
ObjectsInfected : 0
ObjectsCleaned : 0
ObjectsDeleted : 0

FilesInfected : 0
FilesCleaned : 0
FilesMoved : 0
FilesDeleted : 0

Started at : 15:23:03 dimanche 31 mai 2009
Ended at : 15:23:25 dimanche 31 mai 2009
Duration : 22 seconds
4 MB scanned in 22 seconds = 231 KB/s

 

[أعتز بك]

كيف وضع الجهاز الآن

 

[أعتز بك]

وقم بعمل التالي

عطل برامج الحماية لديك

نزل هذه الاداة

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
انتظر حتى يظهر لك تقرير ،، وبذلك يكون الفحص انتهى الصق التقرير بردك الاول

ثانيا


حمل هذا البرنامج
​

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك الثاني
​

 

[mehrez01]

ComboFix 09-05-30.06 - user 31/05/2009 17:43.2 - NTFSx86
Microsoft Windows XP Professionnel 5.1.2600.2.1256.216.1036.18.478.108 [GMT 2:00]
Running from: c:\documents and settings\user\Bureau\ComboFix.exe
AV: ESET Smart Security 4.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ESET Personal firewall *enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((( Files Created from 2009-04-28 to 2009-05-31 )))))))))))))))))))))))))))))))
.

2009-05-30 22:12 . 2009-05-30 22:12 -------- d-----w- C:\RegSupreme
2009-05-30 13:21 . 2009-05-30 13:21 -------- d-----w- c:\program files\ZD Soft
2009-05-30 13:01 . 2009-05-30 13:01 -------- d-----w- c:\program files\KONAMI
2009-05-29 19:01 . 2009-05-29 19:01 98304 ----a-w- c:\windows\system32\CmdLineExt.dll
2009-05-29 18:32 . 2009-05-29 18:32 -------- d-----w- c:\documents and settings\user\Application Data\Big Fish Games
2009-05-29 18:32 . 2009-05-29 18:32 -------- d-----w- c:\program files\Azada
2009-05-29 17:41 . 2009-05-30 22:13 -------- d-----w- c:\windows\system32\dllcache
2009-05-29 17:37 . 2009-05-29 17:37 -------- d-----w- c:\documents and settings\Administrateur\Local Settings\Application Data\Mozilla
2009-05-29 13:07 . 2009-05-29 14:59 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-05-29 12:47 . 2009-05-29 13:04 -------- d-----w- c:\windows\system32\CatRoot_bak
2009-05-28 20:31 . 2008-06-14 17:59 272768 ------w- c:\windows\system32\drivers\bthport.sys
2009-05-28 18:00 . 2004-08-03 20:58 5504 ----a-w- c:\windows\system32\drivers\MSTEE.sys
2009-05-28 18:00 . 2004-08-03 21:10 10880 ----a-w- c:\windows\system32\drivers\NdisIP.sys
2009-05-28 18:00 . 2004-08-03 21:10 15360 ----a-w- c:\windows\system32\drivers\StreamIP.sys
2009-05-28 18:00 . 2004-08-03 21:10 11136 ----a-w- c:\windows\system32\drivers\SLIP.sys
2009-05-28 18:00 . 2004-08-03 21:10 19328 ----a-w- c:\windows\system32\drivers\WSTCODEC.SYS
2009-05-28 18:00 . 2004-08-03 21:10 85376 ----a-w- c:\windows\system32\drivers\NABTSFEC.sys
2009-05-28 18:00 . 2004-08-03 21:10 17024 ----a-w- c:\windows\system32\drivers\CCDECODE.sys
2009-05-28 18:00 . 2004-08-19 14:09 54784 ----a-w- c:\windows\system32\vfwwdm32.dll
2009-05-28 17:59 . 2007-11-02 09:07 6656 ----a-w- c:\windows\system32\CoInst_071102.dll
2009-05-28 17:59 . 2007-10-25 16:31 616064 ----a-w- c:\windows\system32\drivers\PFC027.SYS
2009-05-28 17:59 . 2007-10-04 15:42 48128 ----a-w- c:\windows\system32\Remove.exe
2009-05-28 17:59 . 2009-05-28 17:59 -------- d-----w- c:\program files\Fichiers communs\PAC207
2009-05-28 17:59 . 2009-05-28 17:59 -------- d-----w- c:\windows\PixArt
2009-05-28 17:59 . 2006-10-12 09:57 14336 ----a-w- c:\windows\system32\P207USD.dll
2009-05-28 12:38 . 2009-05-28 12:38 -------- d--h--w- c:\windows\PIF
2009-05-27 19:53 . 2009-05-27 19:54 -------- d-----w- c:\program files\Hotspot Shield
2009-05-27 18:42 . 2009-05-27 18:42 -------- d-----w- c:\documents and settings\LocalService\Local Settings\Application Data\ESET
2009-05-27 10:01 . 2009-05-27 10:01 -------- d-----w- c:\documents and settings\majid\Application Data\ESET
2009-05-26 19:18 . 2009-05-26 19:18 -------- d-----w- c:\program files\Nero
2009-05-26 18:55 . 2009-05-26 18:55 -------- d-----w- c:\documents and settings\user\Application Data\Apple Computer
2009-05-26 18:52 . 2009-05-26 18:53 -------- d-----w- c:\program files\QuickTime
2009-05-26 18:52 . 2009-05-26 18:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple Computer
2009-05-26 18:52 . 2009-05-26 18:52 -------- d-----w- c:\documents and settings\user\Local Settings\Application Data\Apple
2009-05-26 18:52 . 2009-05-26 18:52 -------- d-----w- c:\program files\Apple Software Update
2009-05-26 18:52 . 2009-05-26 18:52 -------- d-----w- c:\documents and settings\All Users\Application Data\Apple
2009-05-26 18:52 . 2009-05-26 18:52 -------- d-----w- c:\documents and settings\user\Local Settings\Application Data\Apple Computer
2009-05-26 18:45 . 2009-05-30 22:07 -------- d-----w- c:\program files\SuperCopier2
2009-05-26 17:40 . 2009-05-26 17:40 -------- d-----w- c:\documents and settings\user\Application Data\Babuki.7FFE1EF3C0EAF397E48071BD36BB45EFAE41A826.1
2009-05-26 12:30 . 2009-05-28 17:29 -------- d-----w- c:\documents and settings\user\Application Data\U3
2009-05-25 19:16 . 2009-05-25 19:17 -------- d-----w- c:\program files\USB Disk Security
2009-05-25 10:36 . 2009-05-25 10:36 -------- d-----w- c:\program files\Fichiers communs\xing shared
2009-05-25 10:36 . 2009-05-25 10:36 499712 ----a-w- c:\windows\system32\msvcp71.dll
2009-05-25 10:36 . 2009-05-25 10:36 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-05-25 10:36 . 2009-05-25 10:36 -------- d-----w- c:\program files\Real
2009-05-25 10:36 . 2009-05-25 10:36 -------- d-----w- c:\program files\Fichiers communs\Real
2009-05-25 10:32 . 2008-09-16 19:23 168448 ----a-w- c:\windows\system32\unrar.dll
2009-05-25 10:32 . 2009-05-25 10:32 -------- d-----w- c:\program files\K-Lite Codec Pack
2009-05-24 19:41 . 2004-08-19 14:09 4096 ----a-w- c:\documents and settings\All Users\Application Data\Microsoft\USMT\iconlib.dll
2009-05-24 19:23 . 2009-05-24 19:23 -------- d-----w- c:\program files\Microsoft Office Outlook Connector
2009-05-24 19:23 . 2009-05-24 19:23 -------- d-----w- c:\program files\MSECache
2009-05-24 17:48 . 2009-05-24 17:48 -------- d-----w- c:\program files\Trend Micro
2009-05-24 17:32 . 2009-05-24 17:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage
2009-05-24 16:39 . 2008-07-09 07:40 26488 ----a-w- c:\windows\system32\spupdsvc.exe
2009-05-24 16:39 . 2009-05-29 15:19 -------- d--h--w- c:\windows\$hf_mig$
2009-05-24 16:34 . 2009-05-24 16:34 0 ----a-w- c:\windows\nsreg.dat
2009-05-24 16:34 . 2009-05-24 16:34 -------- d-----w- c:\documents and settings\user\Local Settings\Application Data\Mozilla
2009-05-24 16:12 . 2009-05-24 19:33 89976 ----a-w- c:\documents and settings\user\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-24 15:07 . 2004-08-03 21:04 76288 ----a-w- c:\windows\system32\uniime.dll
2009-05-24 15:05 . 2001-09-28 12:00 6656 ----a-w- c:\windows\system32\c_is2022.dll
2009-05-24 15:02 . 2001-08-17 21:59 3072 ----a-w- c:\windows\system32\drivers\audstub.sys
2009-05-24 15:02 . 2004-08-19 16:09 21504 ----a-w- c:\windows\system32\hidserv.dll
2009-05-24 15:02 . 2004-08-19 15:54 58496 ----a-w- c:\windows\system32\drivers\redbook.sys
2009-05-24 15:01 . 2004-08-19 16:09 77312 ----a-w- c:\windows\system32\usbui.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-05-31 13:36 . 2009-05-24 13:51 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-31 11:33 . 2009-05-29 20:35 -------- d-----w- c:\program files\DkZ Studio
2009-05-30 22:14 . 2009-05-30 22:14 -------- d-----w- c:\documents and settings\user\Application Data\CyberScrub
2009-05-30 22:14 . 2009-05-30 22:14 -------- d-----w- c:\documents and settings\user\Application Data\cleaner
2009-05-29 16:57 . 2001-09-28 12:00 49462 ----a-w- c:\windows\system32\perfc00C.dat
2009-05-29 16:57 . 2001-09-28 12:00 370344 ----a-w- c:\windows\system32\perfh00C.dat
2009-05-28 20:12 . 2009-05-24 14:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-05-25 19:01 . 2009-05-24 13:38 86331 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-05-24 14:06 . 2009-05-24 14:06 -------- d-----w- c:\program files\Microsoft Works
2009-05-24 14:06 . 2009-05-24 14:06 -------- d-----w- c:\program files\MSBuild
2009-05-24 13:55 . 2009-05-24 13:55 1915520 ----a-w- c:\documents and settings\user\Application Data\Macromedia\Flash Player\

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

2009-05-24 13:51 . 2009-05-24 13:51 -------- d-----w- c:\program files\Analog Devices
2009-05-24 13:49 . 2009-05-24 13:49 -------- d-----w- c:\program files\Dell
2009-05-24 13:39 . 2009-05-24 13:39 -------- d-----w- c:\program files\microsoft frontpage
2009-05-24 13:38 . 2009-05-24 13:38 -------- d-----w- c:\program files\Services en ligne
2009-05-24 13:36 . 2009-05-24 13:36 21892 ----a-w- c:\windows\system32\emptyregdb.dat
2009-05-24 13:23 . 2009-05-24 13:23 -------- d-----w- c:\documents and settings\user\Application Data\ESET
2009-05-24 13:21 . 2009-05-24 13:21 -------- d-----w- c:\program files\ESET
2009-05-24 13:21 . 2009-05-24 13:21 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2009-05-24 13:09 . 2009-05-24 13:09 -------- d-----w- c:\program files\Lexmark 1200 Series
2009-05-24 13:01 . 2009-05-24 12:56 -------- d-----w- c:\program files\ATI Technologies
2009-05-24 12:55 . 2009-05-24 13:49 -------- d-----w- c:\program files\Fichiers communs\InstallShield
2009-05-24 12:53 . 2009-05-24 12:53 -------- d-----w- c:\program files\Broadcom
2009-05-14 13:49 . 2009-05-14 13:49 55768 ----a-w- c:\windows\system32\drivers\epfwtdi.sys
2009-05-14 13:49 . 2009-05-14 13:49 33096 ----a-w- c:\windows\system32\drivers\epfwndis.sys
2009-05-14 13:49 . 2009-05-14 13:49 133000 ----a-w- c:\windows\system32\drivers\epfw.sys
2009-05-14 13:47 . 2009-05-14 13:47 107256 ----a-w- c:\windows\system32\drivers\ehdrv.sys
2009-05-14 13:41 . 2009-05-14 13:41 114472 ----a-w- c:\windows\system32\drivers\eamon.sys
2009-03-06 14:46 . 2004-08-19 14:09 286208 ----a-w- c:\windows\system32\pdh.dll
.

((((((((((((((((((((((((((((( SnapShot@2009-05-30_22.06.30 )))))))))))))))))))))))))))))))))))))))))
.
+ 2009-05-31 13:36 . 2009-05-31 13:36 10134 c:\windows\Installer\{EBB794ED-D282-4334-92FB-254481EFF514}\ARPPRODUCTICON.exe
- 2009-05-30 13:04 . 2009-05-30 13:04 10134 c:\windows\Installer\{EBB794ED-D282-4334-92FB-254481EFF514}\ARPPRODUCTICON.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}]
2009-05-27 19:53 204248 ----a-w- c:\program files\Hotspot Shield\HssIE\HssIE.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\ctfmon.exe" [2004-08-19 15360]
"MSMSGS"="c:\program files\Messenger\msmsgs.exe" [2004-08-19 1667584]
"SuperCopier2.exe"="c:\program files\SuperCopier2\SuperCopier2.exe" [2005-03-13 1057280]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" [2004-08-03 208952]
"PHIME2002ASync"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-03 455168]
"PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-03 455168]
"SoundMAXPnP"="c:\program files\Analog Devices\Core\smax4pnp.exe" [2006-05-01 843776]
"ATICCC"="c:\program files\ATI Technologies\ATI.ACE\cli.exe" [2006-01-02 45056]
"Lexmark 1200 Series"="c:\program files\Lexmark 1200 Series\lxczbmgr.exe" [2006-07-13 57344]
"egui"="c:\program files\ESET\ESET Smart Security\egui.exe" [2009-05-14 2029640]
"TkBellExe"="c:\program files\Fichiers communs\Real\Update_OB\realsched.exe" [2009-05-25 198160]
"USB Antivirus"="c:\program files\USB Disk Security\USBGuard.exe" [2008-09-23 798720]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2009-01-05 413696]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-19 15360]

[HKEY_USERS\.default\software\microsoft\windows\currentversion\policies\system]
"NoConfigPage"= 0 (0x0)
"NoDevMgrPage"= 0 (0x0)
"NoFileSysPage"= 0 (0x0)
"NoVirtMemPage"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\Microsoft Office\\Office12\\OUTLOOK.EXE"=

R0 atiide;atiide;c:\windows\system32\drivers\atiide.sys [24/05/2009 14:54 3456]
R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [14/05/2009 15:47 107256]
R2 ekrn;ESET Service;c:\program files\ESET\ESET Smart Security\ekrn.exe [14/05/2009 15:47 731840]
R3 scrcap;scrcap;c:\windows\system32\drivers\scrcap.sys [17/11/2006 16:15 9006]
S3 PAC207;Eye 110;c:\windows\system32\drivers\PFC027.SYS [28/05/2009 19:59 616064]

--- Other Services/Drivers In Memory ---

*Deregistered* - mchInjDrv
.
Contents of the 'Scheduled Tasks' folder

2009-05-26 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2008-07-30 10:34]
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-Win32BaseServiceMOD - (no file)
HKLM-Run-raVe - (no file)
HKLM-Run-SystemInit - (no file)
HKLM-Run-Karen - (no file)
HKLM-Run-startIE - (no file)


.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.elebda3.net
IE: E&xporter vers Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\user\Application Data\Mozilla\Firefox\Profiles\eqnigg3n.default\
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - plugin: c:\program files\Mozilla Firefox\plugins\npOGAPlugin.dll
.
.
------- File Associations -------
.
txtfile=NOTEPAD %1
vbefile\shell\edit\command=c:\windows\Notepad.exe %1
vbsfile\shell\edit\command=c:\windows\Notepad.exe %1
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-05-31 17:45
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\mchInjDrv]
"ImagePath"="\??\c:\docume~1\user\LOCALS~1\Temp\mc21.tmp"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(2260)
c:\windows\system32\msi.dll
.
Completion time: 2009-05-31 17:47
ComboFix-quarantined-files.txt 2009-05-31 15:47
ComboFix2.txt 2009-05-30 22:07

Pre-Run: 81 647 636 480 octets libres
Post-Run: 81 709 801 472 octets libres

200 --- E O F --- 2009-05-29 21:31

 

[mehrez01]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 17:48:11, on 31/05/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\LEXBCES.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\LEXPPS.EXE
C:\Program Files\ESET\ESET Smart Security\ekrn.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Analog Devices\Core\smax4pnp.exe
C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe
C:\Program Files\Lexmark 1200 Series\lxczbmon.exe
C:\Program Files\ESET\ESET Smart Security\egui.exe
C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\explorer.exe
C:\WINDOWS\system32\notepad.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Hotspot Shield Class - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - C:\Program Files\Hotspot Shield\hssie\HssIE.dll
O4 - HKLM\..\Run: [IMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Program Files\Analog Devices\Core\smax4pnp.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Program Files\ATI Technologies\ATI.ACE\cli.exe" runtime -Delay
O4 - HKLM\..\Run: [Lexmark 1200 Series] "C:\Program Files\Lexmark 1200 Series\lxczbmgr.exe"
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET Smart Security\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Fichiers communs\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [USB Antivirus] C:\Program Files\USB Disk Security\USBGuard.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O4 - HKCU\..\Run: [SuperCopier2.exe] C:\Program Files\SuperCopier2\SuperCopier2.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Babuki.lnk = C:\Program Files\Babuki\Babuki.exe
O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET Smart Security\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Program Files\ESET\ESET Smart Security\ekrn.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: LexBce Server (LexBceS) - Lexmark International, Inc. - C:\WINDOWS\system32\LEXBCES.EXE

--
End of file - 4525 bytes

 

[أعتز بك]

تفضل هذه الحلول وبعدها ان شاء الله يكون الجهاز تمام التمام

حمل هذه الأداءة ...

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

دبل كليك عليها ...

أتركها لين تخلص شغل ...

و بعدها ريستارد للجهاز

وأيضاً

أعمل هذا الشرح لتتنجنب بطء فتح وأغلاق القوائم

وتفضل هذا الموضوع لكي تحافظ على سرعت جهازك

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

ويا ليت تشوف كيف الوضع بعد التطبيق

موفق

 

[mehrez01]

شكرا لك اصبح الجهاز احسن لكن النات بطئ

 

[أعتز بك]

شكرا لك اصبح الجهاز احسن لكن النات بطئ

العفو يا غاالي

النت يكون من نفس سرعة أتصالك أو قد يكون فيه شبكة أخرى معك

وتقوم بالتحميل ذلك يكون النت بطئ عندك

موفق