عندي مشكلة واجد الحل عندكم

  • بادئ الموضوع بادئ الموضوع abdu555
  • تاريخ البدء تاريخ البدء
  • المشاهدات 612
A

abdu555

زيزوومي جديد
إنضم
1 مارس 2009
المشاركات
39
مستوى التفاعل
0
النقاط
40
غير متصل
السلام عليكم ورحمة الله وبركاته

كيف حال الجميع

ارجو من ادارتكم مساعدتي في حل مشكلتي مع جهازي
انا فرمت الجهاز قبل فترة وجيزة وبعد الفرمته كل مرة اشغل الجهاز يكون بداية التشغيل بطي جدا
وانا تعبت جدا من كثر الانتظار ثم بعد الاحيان يعلق الجهاز فترات طويل
علما بان لدي برنامج حماية نورتن 2005

ارجو ا المساعدة من ادارة المنتدى ومنسويبها الله يخليكم وهذا هو التقرير

تحياتي
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:02:31 ص, on 13/06/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\Program Files\system.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\Program Files\Norton AntiVirus\navapsvc.exe
C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\system32\wscntfy.exe
C:\HEROSOFT\HERO2001\SYSEXPLR.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\Program Files\Launch Manager\LaunchAp.exe
C:\Program Files\Launch Manager\HotkeyApp.exe
C:\Program Files\Launch Manager\OSDCtrl.exe
C:\Program Files\Launch Manager\Wbutton.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Program Files\Windows Live\Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Yahoo! IE Services Button - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.3572\swg.dll
O2 - BHO: NAV Helper - {BDF3E430-B101-42AD-A544-FADC6B084872} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_219B3E1547538286.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\YTSingleInstance.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - C:\Program Files\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~1\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [SysExplr] C:\HEROSOFT\HERO2001\SYSEXPLR.EXE
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [LaunchAp] "C:\Program Files\Launch Manager\LaunchAp.exe"
O4 - HKLM\..\Run: [LManager] "C:\Program Files\Launch Manager\HotkeyApp.exe"
O4 - HKLM\..\Run: [CtrlVol] "C:\Program Files\Launch Manager\CtrlVol.exe"
O4 - HKLM\..\Run: [LMgrOSD] "C:\Program Files\Launch Manager\OSDCtrl.exe"
O4 - HKLM\..\Run: [Wbutton] "C:\Program Files\Launch Manager\Wbutton.exe"
O4 - HKLM\..\Run: [Symantec NetDriver Monitor] C:\PROGRA~1\SYMNET~1\SNDMon.exe /Consumer
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [MSNMSGR.exe] C:\Program Files\system.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Send To &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O8 - Extra context menu item: تحميل محتوى FLV بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetVL.htm
O9 - Extra button: Yahoo! Services - {5BAB4B5B-68BC-4B02-94D6-2FC0DE4A7897} - C:\Program Files\Yahoo!\Common\yiesrvc.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-4017 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation (ccPwdSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: Norton AntiVirus Auto-Protect Service (navapsvc) - Symantec Corporation - C:\Program Files\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton AntiVirus Firewall Monitor Service (NPFMntor) - Symantec Corporation - C:\Program Files\Norton AntiVirus\IWP\NPFMntor.exe
O23 - Service: SAVScan - Symantec Corporation - C:\Program Files\Norton AntiVirus\SAVScan.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - C:\PROGRA~1\COMMON~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
--
End of file - 9532 bytes
 

ترتيب حسب التاريخ ترتيب حسب الأصوات
2005 حرم عليك حنا2009
عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​
​
​
 
توقيع : algnral
تأييد 0
ComboFix 09-06-12.02 - Mubark 06/13/2009 0:38.2 - NTFSx86
Running from: c:\documents and settings\Mubark\My Documents\Downloads\Programs\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((( Files Created from 2009-05-12 to 2009-06-12 )))))))))))))))))))))))))))))))
.
2009-06-12 21:02 . 2009-06-12 21:02 -------- d-----w- c:\program files\Trend Micro
2009-06-12 14:31 . 2009-06-12 10:55 14787 ------w- c:\program files\system.exe
2009-06-12 10:10 . 2009-06-12 10:10 -------- d-----w- c:\windows\system32\LogFiles
2009-06-11 11:22 . 2009-06-11 11:22 -------- d-----w- c:\program files\DVD X Studios
2009-06-10 22:48 . 2009-06-10 22:48 -------- d--h--w- c:\windows\system32\wa13
2009-06-08 17:22 . 2009-06-08 17:22 -------- d-----w- c:\documents and settings\Mubark\Local Settings\Application Data\Yahoo
2009-06-08 17:21 . 2009-06-08 17:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-06-08 17:19 . 2009-05-26 16:50 607472 ----a-w- c:\documents and settings\All Users\Application Data\Yahoo!\YUpdater\yupdater.exe
2009-06-08 13:35 . 2009-06-08 13:35 -------- d-----w- c:\documents and settings\Mubark\Local Settings\Application Data\Zain
2009-06-08 13:33 . 2009-06-11 00:00 164408 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-06-08 13:27 . 2009-06-08 13:27 -------- d-----w- c:\windows\system32\XPSViewer
2009-06-08 13:27 . 2009-06-08 13:27 -------- d-----w- c:\program files\Reference Assemblies
2009-06-08 13:16 . 2006-10-16 13:10 23856 ----a-w- c:\windows\system32\spupdsvc.exe
2009-06-07 15:34 . 2004-08-03 20:01 25856 -c--a-w- c:\windows\system32\dllcache\usbprint.sys
2009-06-07 15:34 . 2004-08-03 20:01 25856 ----a-w- c:\windows\system32\drivers\usbprint.sys
2009-06-06 14:20 . 2009-06-06 14:20 -------- d--h--w- c:\windows\system32\GroupPolicy
2009-06-06 14:13 . 2009-06-06 14:13 -------- d-----w- c:\documents and settings\Mubark\Local Settings\Application Data\Google
2009-06-06 14:05 . 2009-06-06 14:05 -------- d-----w- c:\program files\Common Files\xing shared
2009-06-06 14:03 . 2009-06-06 14:04 -------- d-----w- c:\program files\Google
2009-06-05 19:20 . 2009-06-05 19:20 -------- d-----w- c:\documents and settings\Mubark\Local Settings\Application Data\Identities
2009-06-03 19:38 . 2009-06-03 19:38 -------- d-----w- c:\documents and settings\LocalService\Application Data\Symantec
2009-06-02 22:05 . 2009-06-02 22:07 -------- d-----w- c:\program files\The KMPlayer
2009-06-02 22:04 . 2009-06-07 22:04 -------- d-----w- c:\windows\system32\temp
2009-06-02 21:19 . 2009-06-08 17:21 -------- d--h--r- c:\documents and settings\Mubark\Application Data\yahoo!
2009-06-02 20:44 . 2004-08-03 20:08 26496 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2009-06-02 18:55 . 2009-06-02 18:55 -------- d-----w- c:\windows\system32\CatRoot_bak
2009-06-02 18:53 . 2009-06-02 18:54 -------- d-----w- C:\f3a70c2d696d38931e2adeb9
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-12 21:42 . 2009-06-02 16:30 -------- d-----w- c:\documents and settings\Mubark\Application Data\DMCache
2009-06-12 21:37 . 2001-09-19 12:00 59878 ----a-w- c:\windows\system32\perfc001.dat
2009-06-12 21:37 . 2001-09-19 12:00 331342 ----a-w- c:\windows\system32\perfh001.dat
2009-06-12 21:30 . 2009-06-12 14:45 6701 ----a-w- c:\program files\system
2009-06-12 10:24 . 2009-06-02 16:30 -------- d-----w- c:\documents and settings\Mubark\Application Data\IDM
2009-06-11 17:56 . 2009-06-02 14:39 -------- d-----w- c:\program files\Common Files\Symantec Shared
2009-06-08 17:20 . 2009-06-02 15:51 -------- d-----w- c:\program files\Yahoo!
2009-06-08 17:19 . 2009-06-02 15:53 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo!
2009-06-08 13:35 . 2009-06-02 14:17 80176 ----a-w- c:\documents and settings\Mubark\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-06-06 14:05 . 2009-06-02 14:54 -------- d-----w- c:\program files\Common Files\Real
2009-06-02 16:33 . 2009-06-02 16:30 -------- d-----w- c:\program files\Internet Download Manager
2009-06-02 16:30 . 2009-06-02 16:30 181680 ----a-w- c:\documents and settings\Mubark\Application Data\IDM\idmmzcc2\components\idmmzcc.dll
2009-06-02 15:16 . 2009-06-02 14:40 -------- d-----w- c:\program files\Norton AntiVirus
2009-06-02 15:14 . 2009-06-02 14:39 -------- d-----w- c:\program files\Symantec
2009-06-02 15:14 . 2009-06-02 15:14 -------- d-----w- c:\program files\SymNetDrv
2009-06-02 15:10 . 2009-06-02 15:10 390664 ----a-w- c:\documents and settings\Mubark\Application Data\Real\RealPlayer\Update\RealPlayer11.exe
2009-06-02 15:08 . 2009-06-02 15:08 -------- d-----w- c:\program files\Launch Manager
2009-06-02 15:08 . 2009-06-02 15:08 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-06-02 15:08 . 2009-06-02 15:08 -------- d-----w- c:\program files\Common Files\InstallShield
2009-06-02 15:02 . 2009-06-02 15:02 -------- d-----w- c:\program files\WIDCOMM
2009-06-02 14:57 . 2009-06-02 14:57 -------- d-----w- c:\program files\CONEXANT
2009-06-02 14:54 . 2009-06-02 14:54 -------- d-----w- c:\program files\Real
2009-06-02 14:53 . 2009-06-02 14:53 -------- d-----w- c:\program files\mpegable
2009-06-02 14:53 . 2009-06-02 14:53 47104 ------w- c:\windows\AKDeInstall.exe
2009-06-02 14:52 . 2009-06-02 14:51 -------- d-----w- c:\documents and settings\Mubark\Application Data\BSplayer Pro
2009-06-02 14:51 . 2009-06-02 14:51 -------- d-----w- c:\program files\Webteh
2009-06-02 14:51 . 2009-06-02 14:51 414272 ----a-w- c:\windows\system32\DivXc32f.dll
2009-06-02 14:51 . 2009-06-02 14:51 414272 ----a-w- c:\windows\system32\DivXc32.dll
2009-06-02 14:49 . 2009-06-02 14:49 -------- d-----w- c:\program files\Windows Live
2009-06-02 14:45 . 2009-06-02 14:39 -------- d-----w- c:\documents and settings\Mubark\Application Data\Symantec
2009-06-02 14:44 . 2009-06-02 14:39 -------- d-----w- c:\documents and settings\All Users\Application Data\Symantec
2009-06-02 14:40 . 2009-06-02 14:40 4608 ----a-w- c:\windows\system32\drivers\symlcbrd.sys
2009-06-02 14:36 . 2009-06-02 14:36 -------- d-----w- c:\program files\Microsoft.NET
2009-06-02 14:13 . 2009-06-02 13:48 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-06-02 13:49 . 2009-06-02 13:49 -------- d-----w- c:\program files\microsoft frontpage
2009-06-02 13:45 . 2009-06-02 13:45 22144 ----a-w- c:\windows\system32\emptyregdb.dat
2009-05-24 23:40 . 2009-06-12 14:31 2122328 ----a-w- c:\program files\157.wmv
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\Windows Live\Messenger\MsnMsgr.Exe" [2007-08-16 5728112]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2009-06-02 2745776]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [2009-05-26 4351216]
"swg"="c:\program files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2009-06-06 39408]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SysExplr"="c:\herosoft\HERO2001\SYSEXPLR.EXE" [2009-06-02 106496]
"LaunchAp"="c:\program files\Launch Manager\LaunchAp.exe" [2005-07-25 32768]
"LManager"="c:\program files\Launch Manager\HotkeyApp.exe" [2006-04-20 69632]
"CtrlVol"="c:\program files\Launch Manager\CtrlVol.exe" [2003-09-16 20480]
"LMgrOSD"="c:\program files\Launch Manager\OSDCtrl.exe" [2005-07-25 241664]
"Wbutton"="c:\program files\Launch Manager\Wbutton.exe" [2006-04-20 86016]
"Symantec NetDriver Monitor"="c:\progra~1\SYMNET~1\SNDMon.exe" [2009-06-02 100056]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-06-06 198160]
"ccApp"="c:\program files\Common Files\Symantec Shared\ccApp.exe" [2007-01-09 58984]
"SoundMan"="SOUNDMAN.EXE" - c:\windows\SOUNDMAN.EXE [2005-04-15 77824]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusDisableNotify"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
R1 mailKmd;mailKmd; [x]
R3 AMoniterDriver;Antiy Labs Process creation detector.;c:\program files\Antiy Labs\AModule\AMonitorDriver.sys [x]
R3 Antiy-Product-Protect;Antiy-Product-Protect;c:\program files\Antiy Labs\AModule\ProAntiy.sys [x]
R3 AntiyFirewall;AntiyFirewall;c:\windows\system32\drivers\AntiyFW.sys [x]

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{6A634652-0ECB-6975-EDB4-D08253E38A14}]
c:\program files\system.exe
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{D0092FBB-1D25-0FE6-602C-9AF7560E5B6E}]
c:\windows\system32\wa13\wand774 s
.
Contents of the 'Scheduled Tasks' folder
2009-06-02 c:\windows\Tasks\Norton AntiVirus - Scan my computer - Mubark.job
- c:\progra~1\NORTON~1\Navw32.exe [2004-08-18 09:20]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com.sa/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
mStart Page = hxxp://www.yahoo.com/
mSearch Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

uInternet Settings,ProxyOverride = local
uSearchURL,(Default) = hxxp://us.rd.yahoo.com/customize/ie/defaults/su/msgr9/*
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

IE: &تصدير إلى Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
IE: Send To &Bluetooth - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
IE: تحميل الكل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetAll.htm
IE: تحميل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEExt.htm
IE: تحميل محتوى FLV بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetVL.htm
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,
يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-06-13 00:42
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'explorer.exe'(3720)
c:\windows\system32\msi.dll
.
Completion time: 2009-06-12 0:43
ComboFix-quarantined-files.txt 2009-06-12 21:43
Pre-Run: 23,567,994,880 bytes free
Post-Run: 23,595,139,072 bytes free
160
 
تأييد 0
توقيع : algnral
تأييد 0
ما فهمت قصدك يا اخي ايش احذف بالظبط
 
تأييد 0
احذف نورتن 2005
 
توقيع : algnral
تأييد 0
عزيزي ممكن تقرير هايجاك جديد​
 
توقيع : فارس الملاك
تأييد 0
يجب تسجيل الدخول أو التسجيل كي تتمكن من الرد هنا.
عودة
أعلى