موت ميلاد

زيزوومي جديد
إنضم
13 مايو 2008
المشاركات
23
مستوى التفاعل
1
النقاط
20
الإقامة
الخبر
غير متصل
السلام عليكم ورحمة الله وبركاته

ياأخوان الجهاز عندي صار يطفى مايقعد 5 دقايق الا ويسوي ريستارت من نفسه

وهذا هو التقرير اللي ظهر لي ..

PHP:
Logfile of HijackThis v1.99.1
Scan saved at 08:05:55 م, on 05/07/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.exe
C:\Program Files\Faronics\Deep Freeze\Install C-0\_$Df\FrzState2k.exe
C:\WINDOWS\winsystem.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Documents and Settings\All Users\قائمة ابدأ\البرامج\بدء التشغيل\palstart.exe
C:\WINDOWS\system003.exe
C:\WINDOWS\system004.exe
C:\Program Files\Yahoo!\Messenger\ymsgr_tray.exe
C:\Program Files\Hotspot Shield\bin\openvpnas.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Common Files\Real\Update_OB\RealOneMessageCenter.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\آفاق\سطح المكتب\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hihi2.com/adv
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = 212.93.193.87:8080
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = http://10.0.0.100:918
F2 - REG:system.ini: Shell=Explorer.exe TheTime.exe
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: PaltalkWebLogin - {502C3BA4-2C3E-4317-BC29-C0445E82B1F9} - C:\Program Files\Common Files\Paltalk\PaltalkWebLogin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [manager1] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager2] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager3] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager4] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager5] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager6] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager7] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager8] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager9] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager10] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager11] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [manager12] C:\WINDOWS\TheTime.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe"  -osboot
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [mngr1] C:\WINDOWS\TheTime.exe
O4 - HKCU\..\Run: [mngr2] C:\WINDOWS\TheTime.exe
O4 - HKCU\..\Run: [mngr3] C:\WINDOWS\TheTime.exe
O4 - HKCU\..\Run: [Yahoo! Pager] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\WINDOWS\system32\Macromed\Flash\FlashUtil9c.exe
O4 - Global Startup: palstart.exe
O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O7 - HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O17 - HKLM\System\CCS\Services\Tcpip\..\{4B87C31F-BFAB-4C37-9BD4-925E28A3239B}: NameServer = 10.0.0.138
O17 - HKLM\System\CS1\Services\Tcpip\..\{4B87C31F-BFAB-4C37-9BD4-925E28A3239B}: NameServer = 10.0.0.138
O17 - HKLM\System\CS2\Services\Tcpip\..\{4B87C31F-BFAB-4C37-9BD4-925E28A3239B}: NameServer = 10.0.0.138
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O20 - Winlogon Notify: DfLogon - C:\WINDOWS\SYSTEM32\LogonDll.dll
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: DF5Serv - Faronics Corporation - C:\Program Files\Faronics\Deep Freeze\Install C-0\DF5Serv.exe
O23 - Service: Hotspot Shield Service (HotspotShieldService) - Unknown owner - C:\Program Files\Hotspot Shield\bin\openvpnas.exe
 

عودة
أعلى