ممكن مساعدة (مشكلة في بداية التشغيل)

[الزين كول]

أخوتي الأعزاء حياكم الله بتواجدكم معي في هذا الموضوع

المشكلة وما فيها هي عند الدخول للويندوز يعلق الجهاز ولا يقبل الا أعادة تشغيله من جديد ولا حل غير ذلك حتى عند أعادة تشغيله يمكن يعلق أكثر من مرة
وفي بعض الأحيان يشتغل على طول بدون تعليق أو مشاكل
طبعاً انا صورت لكم الشاشة عند التعليق وكيف يصبح شكل الشاشة

وكذلك يوجد مقطع فيديو

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

طبعاًَ هذه خصائص جهازي

وأشكر كل من مر على مشكلتي وحاول أن يساعدني بقدر ما يستطيع
بارك الله في الجميع وجزاكم الله كل خير​

 

[البارون]

حمل هالاداة واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log

لحظات ويظهر لك تقرير ، انسخه كاملا والصقه بردك القادم

 

[الزين كول]

بارك الله فيك أخي البارون
وهذا التقرير​

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01:47:20 ص, on 20/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\windows\Explorer.EXE
C:\windows\system32\rundll32.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\windows\system32\svchost.exe
C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Documents and Settings\S\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\CaptureWiz\Pro\CaptureWiz.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [QUAD Windows service] C:\Program Files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe -h
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_deny.htm
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\windows\system32\Shdocvw.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\windows\system32\Shdocvw.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {B0067CA5-2C37-4C6B-AAEC-5E2CE8635061} (FontDown Class) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd.dll,C:\PROGRA~1\KASPER~1\KASPER~2\adialhk.dll,C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: خدمة تحديث Google (gupdate1c98d38b70f26a) (gupdate1c98d38b70f26a) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Uniblue DiskRescue - Uniblue - C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
O24 - Desktop Component 1: (no name) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

--
End of file - 7893 bytes​

 

[البارون]

قفل برنامج الحماية عندك

حمل الاداة التالية واحفظها على سطح المكتب

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة
​

​

​

 

[الزين كول]

بارك الله فيك أخي البارون
وهذا التقرير​

ComboFix 09-06-18.02 - S 06/20/2009 1:58.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1256.966.1033.18.1919.1482 [GMT 3:00]
Running from: c:\documents and settings\S\Desktop\ComboFix.exe
AV: Kaspersky Internet Security *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Internet Security *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}
* Created a new restore point
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\documents and settings\S\Application Data\QUAD Backups
c:\documents and settings\S\Start Menu\Programs\QUAD Utilities
c:\program files\QUAD Utilities
c:\documents and settings\S\Application Data\QUAD Backups\05.30.2009,00-57-04\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\05.30.2009,01-08-56\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\05.30.2009,15-47-14\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\05.30.2009,23-48-53\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.01.2009,17-52-54\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.02.2009,19-11-22\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.04.2009,01-17-05\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.06.2009,23-35-14\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.08.2009,23-07-04\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.09.2009,15-49-13\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.10.2009,01-52-07\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.10.2009,22-06-24\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.11.2009,03-34-49\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.13.2009,00-39-08\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.13.2009,00-44-11\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.14.2009,15-40-32\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.15.2009,13-28-09\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.15.2009,14-32-49\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.15.2009,14-35-09\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.16.2009,15-06-22\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.18.2009,14-50-17\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.18.2009,20-23-55\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.19.2009,13-42-03\Automatic.reg
c:\documents and settings\S\Application Data\QUAD Backups\06.20.2009,00-12-53\Automatic.reg
c:\documents and settings\S\Desktop\QUAD Registry Cleaner.lnk
c:\documents and settings\S\Start Menu\Programs\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner website.lnk
c:\documents and settings\S\Start Menu\Programs\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.lnk
c:\documents and settings\S\Start Menu\Programs\QUAD Utilities\QUAD Registry Cleaner\Uninstall QUAD Registry Cleaner.lnk
c:\program files\QUAD Utilities\QUAD Registry Cleaner\key.reg
c:\program files\QUAD Utilities\QUAD Registry Cleaner\program.log
c:\program files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner website.url
c:\program files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe
c:\program files\QUAD Utilities\QUAD Registry Cleaner\QUAD Scheduler.exe
c:\program files\QUAD Utilities\QUAD Registry Cleaner\Styles\Vista.cjstyles
c:\program files\QUAD Utilities\QUAD Registry Cleaner\uninst.exe
c:\program files\QUAD Utilities\QUAD Registry Cleaner\Vista Scheduler.dll
c:\windows\system32\1.txt
c:\windows\system32\2.txt
c:\windows\system32\WgaLogon.dll
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_NPF​

((((((((((((((((((((((((( Files Created from 2009-05-19 to 2009-06-19 )))))))))))))))))))))))))))))))
.
2009-06-18 10:14 . 2009-06-18 10:14 -------- d-----w- c:\documents and settings\مجلد\Teenage Spermaholics
2009-06-17 23:31 . 2009-06-17 23:31 -------- d-----w- C:\DVDVideoSoft
2009-06-17 20:06 . 2009-06-17 20:16 -------- d-----w- c:\documents and settings\مجلد\Super.Moms.XXX.DVDRip.XviD-NYMPHO
2009-06-17 20:05 . 2009-06-17 20:15 -------- d-----w- c:\documents and settings\مجلد\Born.2.Porn.2.2009.XXX.DVDRip.XviD-CiCXXX
2009-06-16 21:45 . 2009-06-16 21:45 -------- d-----w- c:\documents and settings\مجلد\Raven Riley -Floor Laptop (211) -RR
2009-06-16 19:22 . 2009-06-16 19:22 -------- d-----w- c:\documents and settings\مجلد\MICST
2009-06-13 13:36 . 2009-06-15 22:19 -------- d-----w- c:\program files\NoClone
2009-06-13 12:04 . 2009-06-13 12:04 0 ----a-w- c:\windows\nsreg.dat
2009-06-13 12:04 . 2009-06-13 12:04 -------- d-----w- c:\documents and settings\S\Local Settings\Application Data\Mozilla
2009-06-13 03:17 . 2009-06-13 03:19 -------- d-----w- c:\documents and settings\مجلد\Decameron_1995_by_El_Bajon
2009-06-12 21:07 . 2007-03-22 10:46 126976 ----a-w- c:\documents and settings\S\Application Data\GRETECH\GomPlayer\GrLauncher.exe
2009-06-12 15:44 . 2009-06-12 15:45 -------- d-----w- c:\documents and settings\Brooke Adams
2009-06-10 14:54 . 2009-06-10 14:54 -------- d-----w- c:\documents and settings\S\Application Data\GRETECH
2009-06-09 22:06 . 2009-06-09 22:06 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-05-28 19:25 . 2009-06-18 17:14 -------- d-----w- c:\documents and settings\مجلد
2009-05-27 14:34 . 2009-05-27 14:34 -------- d-----w- c:\documents and settings\S\Application Data\COWON
2009-05-27 14:32 . 2009-05-27 14:33 -------- d-----w- c:\program files\Common Files\COWON
2009-05-27 14:32 . 2009-05-27 14:33 -------- d-----w- c:\program files\JetAudio
2009-05-27 14:31 . 2009-05-27 14:31 -------- d-----w- c:\documents and settings\S\Application Data\InstallShield
2009-05-25 15:37 . 2009-05-25 15:37 -------- d-----w- c:\windows\system32\wbem\Repository
2009-05-24 18:26 . 2009-05-28 21:50 -------- d-----w- c:\documents and settings\S\Application Data\Smart PC Solutions
2009-05-24 16:22 . 2009-06-18 16:46 856168 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-05-23 14:34 . 2009-05-23 14:35 -------- d-----w- c:\program files\Common Files\delet
2009-05-23 13:32 . 2009-05-23 13:32 -------- d-----w- c:\program files\Trend Micro
2009-05-22 21:12 . 2009-05-22 21:12 -------- d-----w- c:\program files\Common Files\xing shared
2009-05-22 21:07 . 2009-05-22 21:10 390664 ----a-w- c:\documents and settings\S\Application Data\Real\RealPlayer\setup\AU_setup6.exe
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-06-19 23:04 . 2007-12-18 19:05 -------- d-----w- c:\documents and settings\S\Application Data\DMCache
2009-06-19 23:01 . 2008-07-07 22:01 639008 ----a-w- c:\windows\system32\drivers\fidbox2.dat
2009-06-19 23:01 . 2008-07-07 22:01 4312 ----a-w- c:\windows\system32\drivers\fidbox2.idx
2009-06-19 23:01 . 2008-07-07 22:01 2587680 ----a-w- c:\windows\system32\drivers\fidbox.dat
2009-06-19 23:01 . 2008-07-07 22:01 22344 ----a-w- c:\windows\system32\drivers\fidbox.idx
2009-06-19 20:57 . 2008-07-07 22:01 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-06-15 22:17 . 2007-12-18 10:29 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-06-13 15:42 . 2008-12-16 20:00 -------- d-----w- c:\documents and settings\S\Application Data\IDM
2009-06-10 22:57 . 2007-12-17 13:35 -------- d-----w- c:\program files\CCleaner
2009-06-10 22:31 . 2007-12-17 13:42 -------- d-----w- c:\program files\Bug Doctor
2009-06-10 19:07 . 2009-05-12 20:07 -------- d-----r- c:\program files\Skype
2009-06-10 19:07 . 2009-05-12 20:07 -------- d-----w- c:\documents and settings\All Users\Application Data\Skype
2009-06-10 14:54 . 2008-05-01 16:45 -------- d-----w- c:\program files\GRETECH
2009-06-03 19:50 . 2009-05-15 17:22 -------- d-----w- c:\program files\ProgDVB
2009-06-03 19:35 . 2007-12-17 05:37 105688 -c--a-w- c:\documents and settings\S\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-05-27 14:32 . 2007-12-16 21:24 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-05-25 15:32 . 2008-02-21 22:32 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-05-22 21:12 . 2007-12-17 13:36 -------- d-----w- c:\program files\Common Files\Real
2009-05-22 21:11 . 2006-07-11 15:35 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-05-20 12:23 . 2008-07-07 22:02 94643 ----a-w- c:\windows\system32\drivers\klick.dat
2009-05-20 12:23 . 2008-07-07 22:02 105395 ----a-w- c:\windows\system32\drivers\klin.dat
2009-05-18 21:09 . 2009-05-14 21:46 -------- d-----w- c:\program files\Spyware Terminator
2009-05-18 14:16 . 2009-02-19 18:59 -------- d-----w- c:\documents and settings\All Users\Application Data\DriverScanner
2009-05-18 14:13 . 2009-02-19 18:53 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{66E2F539-12B6-4870-A500-7689CDE75C5E}
2009-05-18 14:13 . 2009-05-16 18:34 -------- d-----w- c:\program files\Uniblue
2009-05-18 14:13 . 2009-02-19 18:59 -------- d-----w- c:\documents and settings\S\Application Data\Uniblue
2009-05-16 20:09 . 2009-05-16 20:07 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}
2009-05-16 18:45 . 2009-05-16 18:45 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{92E7A367-8E12-4830-AA70-29C32E331A81}
2009-05-16 18:34 . 2009-05-16 18:34 -------- dc-h--w- c:\documents and settings\All Users\Application Data\{8A09CD83-59E1-4DB1-AAFC-E25174FC6706}
2009-05-16 17:22 . 2008-01-27 15:01 -------- d-----w- c:\program files\GameHouse
2009-05-16 17:22 . 2007-12-28 01:17 -------- d-----w- c:\program files\Hotspot Shield
2009-05-13 10:44 . 2009-05-12 20:12 -------- d-----w- c:\documents and settings\S\Application Data\skypePM
2009-05-12 20:55 . 2009-05-12 20:55 6507872 ----a-w- c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\794AA91C407043A88DAD4B086A865B2C\SetupCuckuBackup.exe
2009-05-12 20:55 . 2009-05-12 20:55 12080 ----a-w- c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\794AA91C407043A88DAD4B086A865B2C\CuckuSPMLaunch.exe
2009-05-12 20:55 . 2009-05-12 20:55 103728 ----a-w- c:\documents and settings\All Users\Application Data\Skype\Plugins\Plugins\794AA91C407043A88DAD4B086A865B2C\RunAs.exe
2009-05-12 20:12 . 2009-05-12 20:12 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-05-12 20:07 . 2009-05-12 20:07 -------- d-----w- c:\program files\Common Files\Skype
2009-05-11 14:00 . 2008-05-11 12:41 -------- d-----w- c:\program files\DVBViewerTE
2009-05-11 13:50 . 2008-05-11 12:41 -------- d-----w- c:\program files\TechniSat DVB
2009-05-10 13:24 . 2009-05-10 13:24 2232 ----a-w- c:\windows\java\Packages\Data\H3TV97V3.DAT
2009-05-10 13:24 . 2009-05-10 13:24 155995 ----a-w- c:\windows\java\Packages\MOCNLV7T.ZIP
2009-05-10 13:24 . 2009-05-10 13:24 2678 ----a-w- c:\windows\java\Packages\Data\7LN9BPJD.DAT
2009-05-10 13:24 . 2009-05-10 13:24 2678 ----a-w- c:\windows\java\Packages\Data\YV7PNBDZ.DAT
2009-05-10 13:24 . 2009-05-10 13:24 2678 ----a-w- c:\windows\java\Packages\Data\CVPBFH7Z.DAT
2009-05-10 13:24 . 2009-05-10 13:24 2678 ----a-w- c:\windows\java\Packages\Data\8SFHR7ZH.DAT
2009-05-10 13:24 . 2009-05-10 13:24 2678 ----a-w- c:\windows\java\Packages\Data\M53L3B93.DAT
2009-05-08 20:32 . 2009-01-11 18:23 -------- d-----w- c:\documents and settings\S\Application Data\cleaner
2009-05-08 19:58 . 2009-04-21 14:45 -------- d-----w- c:\documents and settings\S\Application Data\DeskSoft
2009-05-07 15:32 . 2004-08-04 07:56 345600 ----a-w- c:\windows\system32\localspl.dll
2009-05-04 08:46 . 2009-05-16 20:09 2835656 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\speedupmypc2009.exe
2009-04-29 09:45 . 2009-05-16 20:09 845128 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\58D97068\B74607BA\System.Data.SQLite.dll
2009-04-29 09:45 . 2009-05-16 20:09 771368 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\9966075F\B74607BA\UBSysMan.dll
2009-04-29 09:45 . 2009-05-16 20:09 614696 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\7AEFAE8C\B74607BA\Launcher.exe
2009-04-29 09:45 . 2009-05-16 20:09 54608 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\D720648F\B74607BA\Interop.IWshRuntimeLibrary.dll
2009-04-29 09:45 . 2009-05-16 20:09 519168 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\78B94F67\B74607BA\IsLicense40.dll
2009-04-29 09:45 . 2009-05-16 20:09 474408 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\62A3297F\B74607BA\AvalonCommon.dll
2009-04-29 09:45 . 2009-05-16 20:09 395048 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\C77843B\B74607BA\SUMPBackend.dll
2009-04-29 09:45 . 2009-05-16 20:09 345008 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\4BF757A\B74607BA\IsLicense30.dll
2009-04-29 09:45 . 2009-05-16 20:09 236840 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\683B013A\B74607BA\PowerSuiteBackendUtils.dll
2009-04-29 09:45 . 2009-05-16 20:09 197968 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\6A0591D6\B74607BA\ICSharpCode.SharpZipLib.dll
2009-04-29 09:45 . 2009-05-16 20:09 1250600 -c--a-w- c:\documents and settings\All Users\Application Data\{A613CA96-150A-4A1D-90CE-67F81379DF8C}\SpeedUpMyPC2009\B430549D\B74607BA\SUMP.exe
2009-04-29 04:46 . 2004-08-04 07:56 666624 ----a-w- c:\windows\system32\wininet.dll
2009-04-29 04:46 . 2004-08-04 07:56 81920 ----a-w- c:\windows\system32\ieencode.dll
2009-04-25 17:03 . 2009-04-10 11:31 -------- d-----w- c:\documents and settings\S\Application Data\PC Suite
2009-04-25 16:57 . 2009-04-24 17:13 -------- d-----w- c:\documents and settings\S\Application Data\Nseries
2009-04-25 12:20 . 2009-04-25 11:43 -------- d-----w- c:\documents and settings\S\Application Data\Desktopicon
2009-04-24 23:18 . 2009-04-24 23:15 -------- d-----w- c:\program files\Mobiola Web Camera for S60
2009-04-24 17:47 . 2009-04-10 10:51 -------- d-----w- c:\documents and settings\S\Application Data\Nokia
2009-04-24 17:07 . 2009-04-10 11:31 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
2009-04-24 17:06 . 2009-04-24 17:06 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2009-04-24 17:06 . 2009-04-24 17:06 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2009-04-21 14:45 . 2009-04-21 14:45 62976 ----a-w- c:\windows\DTDraw.dll
2009-04-20 14:15 . 2009-04-20 14:15 79260 ---ha-w- c:\windows\system32\mlfcache.dat
2009-04-17 12:26 . 2004-08-04 06:17 1847168 ----a-w- c:\windows\system32\win32k.sys
2009-04-15 14:51 . 2004-08-04 07:56 585216 ----a-w- c:\windows\system32\rpcrt4.dll
2009-04-10 11:17 . 2009-04-10 11:17 3351812 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{EF4F620F-F295-41D7-92C0-6B635709C850}\Installer\CommonCustomActions\msxml6Exec.exe
2009-04-10 11:17 . 2009-04-10 11:17 3181612 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{EF4F620F-F295-41D7-92C0-6B635709C850}\Installer\CommonCustomActions\vcredistExec.exe
2009-04-10 11:17 . 2009-04-10 11:17 36864 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{EF4F620F-F295-41D7-92C0-6B635709C850}\Installer\CommonCustomActions\Sleep.exe
2009-04-10 11:16 . 2009-04-10 11:17 24568280 ----a-w- c:\documents and settings\All Users\Application Data\Installations\{EF4F620F-F295-41D7-92C0-6B635709C850}\NokiaSoftwareUpdaterSetup_1.4.98AR.exe
2001-08-13 12:51 . 2001-08-13 12:51 1396337 ----a-w- c:\program files\Captura.exe
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]
"IDMan"="c:\program files\Internet Download Manager\IDMan.exe" [2008-12-05 1384880]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-05-22 198160]
"QuickTime Task"="c:\program files\QuickTime\qttask.exe" [2008-09-06 413696]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe" [2009-02-04 201992]
"BluetoothAuthenticationAgent"="bthprops.cpl" - c:\windows\system32\bthprops.cpl [2008-04-14 110592]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 0 (0x0)
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 2009\\English\\setup.exe"=
"c:\\Program Files\\iTunes\\iTunes.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\BearFlix\\bearflix.exe"=
"c:\\WINDOWS\\system32\\dpvsetup.exe"=
"c:\\Program Files\\Paltalk Messenger\\paltalk.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Bonjour\\mDNSResponder.exe"=
"c:\\Program Files\\Mobiola Web Camera for S60\\webcam.exe"=
"c:\\Program Files\\DVBViewerTE\\ts_winlirc.exe"=
"c:\\Program Files\\TechniSat DVB\\bin\\Server4PC.exe"=
"c:\\Program Files\\ProgDVB\\ProgDVB.exe"=
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [29/01/2008 06:29 م 33808]
R2 NwSapAgent;SAP Agent;c:\windows\system32\svchost.exe -k netsvcs [04/08/2004 10:56 ص 14336]
R2 Uniblue DiskRescue;Uniblue DiskRescue;c:\program files\Uniblue\DiskRescue\UBDiskRescueSrv.exe [10/09/2008 06:22 م 229648]
R3 KLFLTDEV;Kaspersky Lab KLFltDev;c:\windows\system32\drivers\klfltdev.sys [13/03/2008 07:02 م 26640]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [25/03/2008 08:07 م 24592]
R3 SKYNET;TechniSat DVB-PC TV Star PCI;c:\windows\system32\drivers\SkyNET.sys [11/05/2008 03:38 م 462212]
S1 sp_rsdrv2;Spyware Terminator Driver 2; [x]
S2 gupdate1c98d38b70f26a;خدمة تحديث Google (gupdate1c98d38b70f26a);c:\program files\Google\Update\GoogleUpdate.exe [12/02/2009 08:33 م 133104]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [10/04/2009 02:19 م 138112]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [10/04/2009 02:19 م 8320]
S3 PRODIGY;PRODIGY;c:\windows\system32\drivers\prodigy.sys [24/04/2009 11:23 م 32377]
S3 tap0801;TAP-Win32 Adapter V8;c:\windows\system32\drivers\tap0801.sys [15/02/2007 08:48 م 26624]
.
Contents of the 'Scheduled Tasks' folder
2009-06-13 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\program files\Apple Software Update\SoftwareUpdate.exe [2007-08-29 09:34]
2009-06-19 c:\windows\Tasks\GoogleUpdateTaskMachine.job
- c:\program files\Google\Update\GoogleUpdate.exe [2009-02-12 17:33]
2009-06-19 c:\windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1123561945-57989841-725345543-1003.job
- c:\documents and settings\S\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [2008-12-12 00:34]
2009-06-18 c:\windows\Tasks\OGADaily.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 14:04]
2009-06-19 c:\windows\Tasks\OGALogon.job
- c:\windows\system32\OGAVerify.exe [2008-12-31 14:04]
2009-05-16 c:\windows\Tasks\Uniblue DiskRescue 2009.job
- c:\program files\Uniblue\DiskRescue\UBDiskRescue.exe [2008-09-10 15:22]
.
- - - - ORPHANS REMOVED - - - -
HKCU-Run-QUAD Windows service - c:\program files\QUAD Utilities\QUAD Registry Cleaner\QUAD Registry Cleaner.exe
SafeBoot-AVG Anti-Spyware Driver
SafeBoot-AVG Anti-Spyware Guard​

.
------- Supplementary Scan -------
.
uStart Page = about:blank
IE: &BitSpirit حمله باستخدام
IE: &تصدير إلى Microsoft Excel
IE: ت&صدير إلى Microsoft Excel
IE: تحميل الكل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEGetAll.htm
IE: تحميل بواسطة Internet Download Manager - c:\program files\Internet Download Manager\IEExt.htm
IE: يتوفر نسخ وظائف إضافية جديدة . هل تريد تركيبها ؟
DPF: Microsoft XML Parser for Java
DPF: {B0067CA5-2C37-4C6B-AAEC-5E2CE8635061} - hxxp://www.qurancomplex.com/Downloads/FontSmooth.cab
FF - ProfilePath -
.
.
------- File Associations -------
.
txtfile=c:\windows\notepad.exe %1
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-06-20 02:04
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...​

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{202f1b19-0e37-4e28-b99f-0ddb708be7fd}]
@Denied: (Full) (Everyone)
"Model"=dword:0000003b
"Therad"=dword:00000011
"MData"=hex(0):73,d5,cf,b8,a4,07,89,80,31,e4,35,6b,2a,ca,fe,43,86,34,7b,2f,4a,
78,5b,5b,04,a3,b7,bd,5b,11,77,40,5e,43,af,37,7d,aa,70,76,e4,ed,64,08,5f,b4,\
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C}]
@Denied: (Full) (Everyone)
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC}]
@Denied: (Full) (Everyone)
"scansk"=hex(0):02,20,22,86,4f,7e,0f,79,8d,96,c2,54,a5,48,52,7f,e5,36,98,61,bb,
a8,d0,22,b7,38,89,f5,0d,ee,1a,bb,93,83,dc,a3,ae,43,e3,11,00,00,00,00,00,00,\
[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{a96a741c-2fc3-4d3d-b5bd-7187f749c292}]
@Denied: (Full) (Everyone)
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
c:\program files\Bonjour\mDNSResponder.exe
c:\program files\Hotspot Shield\bin\openvpnas.exe
c:\windows\system32\rundll32.exe
c:\program files\Internet Explorer\iexplore.exe
c:\windows\system32\msiexec.exe
c:\program files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
.
**************************************************************************
.
Completion time: 2009-06-19 2:08 - machine was rebooted
ComboFix-quarantined-files.txt 2009-06-19 23:08
Pre-Run: 14,103,523,328 bytes free
Post-Run: 13,941,989,376 bytes free
300 --- E O F --- 2009-06-10 22:34​

 

[البارون]

تقرير هايجاك جديد الان

 

[الزين كول]

أبشر ​

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:19:27 ص, on 20/06/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal
Running processes:
C:\windows\System32\smss.exe
C:\windows\system32\winlogon.exe
C:\windows\system32\services.exe
C:\windows\system32\lsass.exe
C:\windows\system32\svchost.exe
C:\windows\System32\svchost.exe
C:\windows\system32\svchost.exe
C:\windows\system32\spoolsv.exe
C:\Program Files\Google\Update\GoogleUpdate.exe
C:\windows\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\windows\system32\svchost.exe
C:\windows\system32\rundll32.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\windows\system32\ctfmon.exe
C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\windows\system32\msiexec.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\windows\system32\notepad.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Internet Explorer\SearchURL,(Default) =

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\windows\system32\ctfmon.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra button: Web traffic protection statistics - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.dll
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\windows\system32\Shdocvw.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\windows\system32\Shdocvw.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O16 - DPF: {05CA9FB0-3E3E-4B36-BF41-0E3A5CAA8CD8} (Office Genuine Advantage Validation Tool) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O16 - DPF: {B0067CA5-2C37-4C6B-AAEC-5E2CE8635061} (FontDown Class) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: Bonjour Service - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe
O23 - Service: خدمة تحديث Google (gupdate1c98d38b70f26a) (gupdate1c98d38b70f26a) - Google Inc. - C:\Program Files\Google\Update\GoogleUpdate.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
O23 - Service: iPod Service - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Nokia\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Uniblue DiskRescue - Uniblue - C:\Program Files\Uniblue\DiskRescue\UBDiskRescueSrv.exe
O24 - Desktop Component 1: (no name) -

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

--
End of file - 7204 bytes​

 

[البارون]

ثم نزل هذه الاداة واتبع الشرح التالي

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

​

او

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

التوافق : ويندوز اكسبيفقط ​

شرح الاستخدام ,,,,,,
عند تشغيل ملف الاداة تظهر لك هذه الشاشه ,, انتظر ( وتابع مع الصور )

وعند ظهور هذه الشاشه ,, اضغط على Close ليتم اعادة تشغيل جهازك (( لتكملة عملية التنظيف ))

​

​

 

[الزين كول]

بارك الله فيك أخي البارون
قمت بتنزيل الاداة وأنتهت من الفحص

هل يوجد شئ أخر أقوم به ؟ أو أنه تم أصلاح المشكلة !

 

[البارون]

اخوي جهازك قدامك كيف الاوضاع الان التشغيل والايقاف اعادة التشغيل (( انتظر جوابك ))

 

[الأشـهب]

من الصور واضح ان المشكلة من

كرت الشاشة

يعني ممكن مروحة كرت الشاشة عطلانة او دورانها بطئ

مما يسبب ارتفاع درجة حرارة كرت الشاشة

وظهور هذه الصورة

افحص مروحة كرت الشاشة

وتابع مع الإستاذ عبد الرحمن :q:

وإن شاء الله يحصل خير

^_*

أخوك
عماد اللحام
​

 

[الزين كول]

بورك فيك أستاذي البارون
وكثر الله من أمثالك
وأسعدك دنيا وأخرة

لقد تم أعادة تشغيل الجهاز ثلاث مرات ولم يظهر التعليق الا الأن


أخي عماد جزاك الله خيراً

 

[البارون]

حياك الله اخوي

تم حل المشكلة​

 

[الأشـهب]

بورك فيك أستاذي البارون
وكثر الله من أمثالك
وأسعدك دنيا وأخرة

لقد تم أعادة تشغيل الجهاز ثلاث مرات ولم يظهر التعليق الا الأن


أخي عماد جزاك الله خيراً

الحمد لله​

 

[الزين كول]

أخوتي الأحبه
ما زالت المشكلة مستمرة وأحس أنها زادت حبتين
فمن له من صنديد

 

[الأشـهب]

أخوتي الأحبه
ما زالت المشكلة مستمرة وأحس أنها زادت حبتين
فمن له من صنديد

اخوي قلت لك من الأول أن المشكلة من كرت الشاشة :q:
افحص مروحة كرت الشاشة
ممكن دورانها بطئ او ممكن تكون واقفة :d:
​

 

[الزين كول]

حياك الله أخي عماد :hh:
كرت الشاشة عندي داخلي ولا يوجد مروحه له :no:

مثل هذه الصورة

 

[الأشـهب]

حياك الله أخي عماد :hh:

كرت الشاشة عندي داخلي ولا يوجد مروحه له :no:​

مثل هذه الصورة

​

​

​

​

​

​

الكرت عندك مدمج مش مشكلة ​

حاول تستعير كرت شاشة من عند أحد الأصدقاء :bleh:

وجربه عندك لو المشكلة إنحلت k:

​

​

يبقى شيبساية إنتل التابعة لكرت الشاشة معطوبة

وبهذي الحالة تحتاج لكرت شاشة :q:

هذا و الله أعلم

:king:
​

​

 

[عاشق الصيانة]

مصتغرب في اخي الاشهب اي يقع مروحة كرت الشاشة الاول مرة اسمع بها
اخي شي تعليق عندك بالجهاز تقدر تصورلي سطح المكتب وترفعها لي قي ردك القاااااااااااااااااادم

 

[الأشـهب]

مصتغرب في اخي الاشهب اي يقع مروحة كرت الشاشة الاول مرة اسمع بها
اخي شي تعليق عندك بالجهاز تقدر تصورلي سطح المكتب وترفعها لي قي ردك القاااااااااااااااااادم

أخي اسمك عاشق صيانة :q:
ولا تعرف مروحة كرت الشاشة :hh:
غريبة و الله
،،،،،،،،،،،،،،،،،،،،،،،،،،
تعرف على مروحة كرت الشاشة :bleh:

:king:​