عندي مشكله بثبيت برامج الحماية

[الدرب المجهول]

السلام عليكم ورحمة الله وبركاته
أخباركم إن شاء الله بخير
أخواني انا عندي مشكله بثبيت برامج الحماية :er:
أول ما اجي اثبت برنامج الحماية
تجي لي هالعباراة :er:

وبعد ما اضغط موافق يطلع ولما ادخل مره ثانية تجين هالعباراة للمره الثانية وهكذا
مع اني فرمت الجهاز ونفس المشكله :er:
وياليت تساعدوني واكون شاكر لكم

 

[البارون]

حمل هذا البرنامج

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

اذا انتهى التحميل ==> شغل البرنامج ==> واضغط على Do a system scan and save log
لحظات .. ويظهر لك تقرير ==> انسخه والصقه بردك القادم​

 

[الدرب المجهول]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:07:58 م, on 07/08/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Common Files\ACD Systems\EN\DevDetect.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\wuauclt.exe
C:\DOCUME~1\asd\LOCALS~1\Temp\winhnues.exe
C:\DOCUME~1\asd\LOCALS~1\Temp\winkphl.exe
C:\DOCUME~1\asd\LOCALS~1\Temp\winvjwrgr.exe
C:\DOCUME~1\asd\LOCALS~1\Temp\w44f93.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\TELNET.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\TELNET.EXE
C:\WINDOWS\system32\wuauclt.exe
E:\برامج كمبيوتر\برامج مابعد الفورمات\كاسبر 2009\kis8.0.0.357en.exe
C:\Documents and Settings\asd\سطح المكتب\HiJackThis.exe
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar1.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar1.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Device Detector] DevDetect.exe -autorun
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
O4 - HKCU\..\RunOnce: [MPlayer2_FixUp] C:\WINDOWS\inf\unregmp2.exe /Fixups
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [TSClientMSIUninstaller] cmd.exe /C "cscript %systemroot%\Installer\TSClientMsiTrans\tscuinst.vbs" (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
--
End of file - 5443 bytes


___________________
هذا التقرير

 

[البارون]

عطل برامج الحماية عن العمل​

ثم ​

​

حمل الاداة التالية واحفظها على سطح المكتب​

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes​

بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes​

اثناء الفحص ممكن يعاد تشغيل الجهاز​

وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه​

لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي​

انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة​

 

[الدرب المجهول]

ComboFix 09-08-06.01 - asd 08/07/2009 20:22.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.966.1025.18.511.289 [GMT 3:00]
Running from: c:\documents and settings\asd\سطح المكتب\ComboFix.exe
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
.
-------\Legacy_AIC32P
-------\Service_aic32p

((((((((((((((((((((((((( Files Created from 2009-07-07 to 2009-08-07 )))))))))))))))))))))))))))))))
.
2009-08-07 17:25 . 2009-08-07 17:25 -------- d-----w- c:\documents and settings\All Users\Application Data\Messenger Plus!
2009-08-07 17:09 . 2009-08-07 17:09 -------- d-----w- c:\windows\system32\CatRoot_bak
2009-08-07 17:02 . 2009-08-07 17:02 -------- d-----w- c:\program files\مشغل الفلاش العربي
2009-08-07 16:52 . 2009-08-07 16:52 -------- d-----w- c:\windows\Sun
2009-08-07 16:42 . 2004-08-03 22:55 221184 ----a-w- c:\windows\system32\wmpns.dll
2009-08-07 16:42 . 2009-08-07 16:42 -------- d-----w- c:\windows\system32\LogFiles
2009-08-07 16:41 . 2009-08-07 16:42 -------- d-----w- c:\windows\system32\drivers\umdf
2009-08-07 16:40 . 2006-05-09 17:00 22752 ----a-w- c:\windows\system32\spupdsvc.exe
2009-08-07 16:40 . 2009-08-07 16:41 -------- d-----w- C:\3a203f03932e651f9c62f4
2009-08-07 16:39 . 2009-08-07 16:39 -------- d-----w- c:\documents and settings\asd\Contacts
2009-08-07 16:38 . 2009-08-07 16:38 -------- d-----w- c:\program files\Windows Live
2009-08-07 16:38 . 2009-08-07 16:38 -------- d-----w- c:\program files\Messenger Plus! Live
2009-08-07 16:38 . 2009-08-07 16:38 -------- dc----w- c:\windows\system32\DRVSTORE
2009-08-07 16:38 . 2009-08-07 16:38 -------- d-----w- c:\program files\MSN Messenger
2009-08-07 16:34 . 2009-08-07 16:34 27264 ----a-w- c:\documents and settings\asd\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-08-07 16:19 . 2009-08-07 16:19 -------- d-s---w- c:\documents and settings\asd\UserData
2009-08-07 16:18 . 2009-08-07 16:18 -------- d-----w- c:\documents and settings\asd\Application Data\Yahoo!
2009-08-07 16:18 . 2009-08-07 16:18 -------- d-----w- c:\documents and settings\All Users\Application Data\Yahoo! Companion
2009-08-07 16:09 . 2009-08-07 16:09 -------- d-----w- c:\documents and settings\asd\Local Settings\Application Data\ACD Systems
2009-08-07 16:09 . 2009-08-07 16:09 -------- d-----w- c:\documents and settings\asd\Application Data\ACD Systems
2009-08-07 16:09 . 2009-08-07 16:09 -------- d-----w- c:\program files\Yahoo!
2009-08-07 16:09 . 2009-08-07 16:09 -------- d-----w- c:\documents and settings\All Users\Application Data\ACD Systems
2009-08-07 16:09 . 2009-08-07 16:09 -------- d-----w- c:\program files\Common Files\ACD Systems
2009-08-07 16:09 . 2009-08-07 16:09 -------- d-----w- c:\program files\ACD Systems
2009-08-07 16:07 . 2009-08-07 16:07 -------- d-----w- c:\documents and settings\asd\Local Settings\Application Data\Downloaded Installations
2009-08-07 16:05 . 2009-08-07 16:05 -------- d-----w- c:\program files\Common Files\Adobe AIR
2009-08-07 16:05 . 2004-08-03 20:08 26496 -c--a-w- c:\windows\system32\dllcache\usbstor.sys
2009-08-07 16:03 . 2009-08-07 16:04 -------- d-----w- c:\program files\Common Files\Adobe
2009-08-07 16:01 . 2009-08-07 16:01 -------- d-----w- c:\program files\Sun
2009-08-07 15:59 . 2009-08-07 16:00 -------- d-----w- c:\program files\Java
2009-08-07 15:59 . 2009-08-07 15:59 -------- d-----w- c:\program files\Common Files\Java
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-08-07 16:46 . 2009-08-07 16:46 -------- d-----w- c:\program files\Common Files\xing shared
2009-08-07 16:46 . 2009-08-07 16:46 -------- d-----w- c:\program files\Common Files\Real
2009-08-07 16:46 . 2009-08-07 16:46 -------- d-----w- c:\program files\Google
2009-08-07 16:46 . 2009-08-07 16:46 499712 ----a-w- c:\windows\system32\msvcp71.dll
2009-08-07 16:46 . 2009-08-07 16:46 348160 ----a-w- c:\windows\system32\msvcr71.dll
2009-08-07 16:46 . 2009-08-07 16:46 -------- d-----w- c:\program files\Real
2009-08-07 11:25 . 2001-09-19 12:00 39982 ----a-w- c:\windows\system32\perfc001.dat
2009-08-07 11:25 . 2001-09-19 12:00 251478 ----a-w- c:\windows\system32\perfh001.dat
2009-08-07 11:20 . 2009-08-07 10:54 86327 ----a-w- c:\windows\pchealth\helpctr\OfflineCache\index.dat
2009-08-07 10:57 . 2009-08-07 10:57 -------- d-----w- c:\program files\microsoft frontpage
2009-08-07 10:56 . 2009-08-07 10:56 -------- d-----w- c:\program files\MSXML 4.0
2009-08-07 10:52 . 2009-08-07 10:52 22144 ----a-w- c:\windows\system32\emptyregdb.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [2007-01-19 5743984]
"swg"="c:\program files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe" [2009-08-07 171448]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"SunJavaUpdateSched"="c:\program files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 206224]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2008-06-11 96112]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2009-08-07 185896]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2004-08-03 15360]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"TSClientMSIUninstaller"="c:\windows\Installer\TSClientMsiTrans\tscuinst.vbs" [2007-04-23 12451]
"tscuninstall"="c:\windows\system32\tscupgrd.exe" [2004-08-03 44544]
"nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2004-08-03 99840]
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"e:\\برامج كمبيوتر\\برامج مابعد الفورمات\\الجافا\\Java Version 6 Update 7.exe"=
"c:\\Program Files\\Java\\jre1.6.0_07\\bin\\jusched.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=

--- Other Services/Drivers In Memory ---
*NewlyCreated* - AIC32P
.
- - - - ORPHANS REMOVED - - - -
HKLM-Run-Device Detector - DevDetect.exe

.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com.sa/
uSearch Page = hxxp://www.google.com
uSearch Bar = hxxp://www.google.com/ie
uSearchURL,(Default) = hxxp://www.google.com/search?q=%s
.
**************************************************************************
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول او تسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-08-07 20:25
Windows 5.1.2600 Service Pack 2 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------
- - - - - - - > 'explorer.exe'(2988)
c:\windows\system32\msi.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\ACD Systems\EN\DevDetect.exe
c:\windows\system32\notepad.exe
.
**************************************************************************
.
Completion time: 2009-08-07 20:28 - machine was rebooted
ComboFix-quarantined-files.txt 2009-08-07 17:28
Pre-Run: 22,619,185,152 bytes free
Post-Run: 22,499,545,088 bytes free
130 --- E O F --- 2009-08-07 11:38
ـــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــــ
وهذا التقرير الثاني تعبناك معنا يا الغالي

 

[البارون]

طيب سوي اعادة تشغيل للجهاز وجرب تركب برنامج حماية (( تاكد من ان النسخ اللي تركبها سليمة )) او نزلها من قسم الحماية

 

[الدرب المجهول]

طيب سوي اعادة تشغيل للجهاز وجرب تركب برنامج حماية (( تاكد من ان النسخ اللي تركبها سليمة )) او نزلها من قسم الحماية

اخوي كل شي تمام التمام وراحت المشكله الحمدلله
الله يجزاك كل خير يالغالي
اسم على مسمى والله
خبير صيانه

 

[البارون]

ويجزاك خير على الكلام الطيب

تم حل المشكلة ​