- بادئ الموضوع عهود
- تاريخ البدء
أميرة العطور
زيزوومى متألق
غير متصل
من عند الساعه كلك مرتين تطلع نافذه ضبطي التاريخ والشهر والساعه
تأييد
0
MAAX
عضوشرف
غير متصل
حمل هذا البرنامج
شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
شغل البرنامج ==> واضغط على
Do a system scan and save log
لحظات .. ويظهر لك تقرير داخل المفكرة==> انسخه والصقه بردك القادم
التعديل الأخير بواسطة المشرف:
تأييد
0
هذا التقرير
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:26:42 PM, on 8/19/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe
C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\TypingMaster\quickphrase\quickphrase.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\TTMessenger\spool\PDFSaver.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\TODDSrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Zards software\Cleanse Uninstaller\Cleanse Uninstaller.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy1.emirates.net.ae:8080
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: GrabberObj Class - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\SPEEDB~1\Toolbar\grabber.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {63028642-5d5e-4290-99ea-18358a670111} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [QuickPhrase] "C:\Program Files\TypingMaster\quickphrase\quickphrase.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [TTMessengerPDF] "C:\Program Files\TTMessenger\spool\PDFSaver.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.09\AMVConverter\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.09\MediaManager\grab.html
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: EI??? ??C ?? C??I??E - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &EI??? ??C ?? Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Nod32 AV (EsetNod32Fix) - Unknown owner - C:\WINDOWS\
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\WINDOWS\system32\TODDSrv.exe
--
End of file - 13522 bytes
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 8:26:42 PM, on 8/19/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe
C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\TypingMaster\quickphrase\quickphrase.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\TTMessenger\spool\PDFSaver.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\TODDSrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\Program Files\Zards software\Cleanse Uninstaller\Cleanse Uninstaller.exe
C:\WINDOWS\system32\msiexec.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy1.emirates.net.ae:8080
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: GrabberObj Class - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\SPEEDB~1\Toolbar\grabber.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {63028642-5d5e-4290-99ea-18358a670111} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [DWQueuedReporting] "C:\PROGRA~1\COMMON~1\MICROS~1\DW\dwtrig20.exe" -t
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [QuickPhrase] "C:\Program Files\TypingMaster\quickphrase\quickphrase.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [TTMessengerPDF] "C:\Program Files\TTMessenger\spool\PDFSaver.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.09\AMVConverter\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.09\MediaManager\grab.html
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: EI??? ??C ?? C??I??E - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &EI??? ??C ?? Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Nod32 AV (EsetNod32Fix) - Unknown owner - C:\WINDOWS\
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\WINDOWS\system32\TODDSrv.exe
--
End of file - 13522 bytes
تأييد
0
احذفي التالي
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\TypingMaster\quickphrase\quickphrase.exe
C:\Program Files\Zards software\Cleanse Uninstaller\Cleanse Uninstaller.exe
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O3 - Toolbar: (no name) - {63028642-5d5e-4290-99ea-18358a670111} - (no file)
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKCU\..\Run: [QuickPhrase] "C:\Program Files\TypingMaster\quickphrase\quickphrase.exe"
O23 - Service: Nod32 AV (EsetNod32Fix) - Unknown owner - C:\WINDOWS\
استخدم هذه الاداة للتنظيف
ثم
عطل برنامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب
عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة
C:\Program Files\Search Settings\SearchSettings.exe
C:\Program Files\TypingMaster\quickphrase\quickphrase.exe
C:\Program Files\Zards software\Cleanse Uninstaller\Cleanse Uninstaller.exe
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O3 - Toolbar: (no name) - {63028642-5d5e-4290-99ea-18358a670111} - (no file)
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKCU\..\Run: [QuickPhrase] "C:\Program Files\TypingMaster\quickphrase\quickphrase.exe"
O23 - Service: Nod32 AV (EsetNod32Fix) - Unknown owner - C:\WINDOWS\
استخدم هذه الاداة للتنظيف
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
ثم
عطل برنامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة
تأييد
0
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 10:13:48 PM, on 8/19/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe
C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\TypingMaster\quickphrase\quickphrase.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\TTMessenger\spool\PDFSaver.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\TODDSrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy1.emirates.net.ae:8080
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: GrabberObj Class - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\SPEEDB~1\Toolbar\grabber.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {63028642-5d5e-4290-99ea-18358a670111} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [QuickPhrase] "C:\Program Files\TypingMaster\quickphrase\quickphrase.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [TTMessengerPDF] "C:\Program Files\TTMessenger\spool\PDFSaver.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.09\AMVConverter\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.09\MediaManager\grab.html
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: EI??? ??C ?? C??I??E - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &EI??? ??C ?? Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Nod32 AV (EsetNod32Fix) - Unknown owner - C:\WINDOWS\
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\WINDOWS\system32\TODDSrv.exe
--
End of file - 13772 bytes
Scan saved at 10:13:48 PM, on 8/19/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\WgaTray.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\TOSHIBA\ConfigFree\NDSTray.exe
C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
C:\Program Files\TOSHIBA\TOSHIBA Controls\TFncKy.exe
C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\ddwmon.exe
C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe
C:\WINDOWS\system32\agrsmsvc.exe
C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
C:\Program Files\Nero\Nero 7\InCD\InCD.exe
C:\Program Files\lg_fwupdate\fwupdate.exe
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe
C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Program Files\Search Settings\SearchSettings.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
C:\Program Files\TypingMaster\quickphrase\quickphrase.exe
C:\Program Files\DNA\btdna.exe
C:\Program Files\TTMessenger\spool\PDFSaver.exe
C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
C:\Program Files\Camera Assistant Software for Toshiba\CEC_MAIN.exe
C:\Program Files\HP\Digital Imaging\bin\hpqgalry.exe
C:\Program Files\CyberLink\Shared Files\RichVideo.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
C:\WINDOWS\system32\TODDSrv.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\HP\Digital Imaging\bin\hpqSTE08.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
C:\WINDOWS\system32\msiexec.exe
C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Windows Live\Family Safety\fsssvc.exe
C:\Program Files\Windows Live\Family Safety\fsui.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy1.emirates.net.ae:8080
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
R3 - URLSearchHook: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Windows Live Family Safety Browser Helper - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Program Files\Windows Live\Family Safety\fssbho.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.1.1309.15642\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: SearchSettings Class - {E312764E-7706-43F1-8DAB-FCDD2B1E416D} - C:\Program Files\Search Settings\kb128\SearchSettings.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: GrabberObj Class - {FF7C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\SPEEDB~1\Toolbar\grabber.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: (no name) - {63028642-5d5e-4290-99ea-18358a670111} - (no file)
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar.dll
O3 - Toolbar: Dealio Toolbar - {01398B87-61AF-4FFB-9AB5-1A1C5FB39A9C} - C:\Program Files\Dealio Toolbar\DealioToolbarIE.dll
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [THotkey] C:\Program Files\Toshiba\Toshiba Applet\thotkey.exe
O4 - HKLM\..\Run: [TPSMain] TPSMain.exe
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [SmoothView] C:\Program Files\TOSHIBA\TOSHIBA Zooming Utility\SmoothView.exe
O4 - HKLM\..\Run: [TFncKy] TFncKy.exe
O4 - HKLM\..\Run: [DDWMon] C:\Program Files\TOSHIBA\TOSHIBA Direct Disc Writer\\ddwmon.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\Toshiba Online Product Information\topi.exe -startup
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar.exe" /start
O4 - HKLM\..\Run: [CFSServ.exe] CFSServ.exe -NoClient
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [LanguageShortcut] "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Program Files\Common Files\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [SecurDisc] C:\Program Files\Nero\Nero 7\InCD\NBHGui.exe
O4 - HKLM\..\Run: [InCD] C:\Program Files\Nero\Nero 7\InCD\InCD.exe
O4 - HKLM\..\Run: [LGODDFU] "C:\Program Files\lg_fwupdate\fwupdate.exe" blrun
O4 - HKLM\..\Run: [HP Software Update] "C:\Program Files\HP\HP Software Update\HPWuSchd2.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [egui] "C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [SearchSettings] C:\Program Files\Search Settings\SearchSettings.exe
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [Synchronization Manager] %SystemRoot%\system32\mobsync.exe /logon
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [fssui] "C:\Program Files\Windows Live\Family Safety\fsui.exe" -autorun
O4 - HKCU\..\Run: [TOSCDSPD] C:\Program Files\TOSHIBA\TOSCDSPD\toscdspd.exe
O4 - HKCU\..\Run: [QuickPhrase] "C:\Program Files\TypingMaster\quickphrase\quickphrase.exe"
O4 - HKCU\..\Run: [BitTorrent DNA] "C:\Program Files\DNA\btdna.exe"
O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
O4 - HKCU\..\Run: [TTMessengerPDF] "C:\Program Files\TTMessenger\spool\PDFSaver.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Adobe Gamma.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqtra08.exe
O4 - Global Startup: HP Image Zone Fast Start.lnk = C:\Program Files\HP\Digital Imaging\bin\hpqthb08.exe
O8 - Extra context menu item: Add to AMV Converter... - C:\Program Files\MP3 Player Utilities 4.09\AMVConverter\grab.html
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: MediaManager tool grab multimedia file - C:\Program Files\MP3 Player Utilities 4.09\MediaManager\grab.html
O8 - Extra context menu item: Translate this web page with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/ActionTU.htm
O8 - Extra context menu item: Translate with Babylon - res://C:\Program Files\Babylon\Babylon-Pro\Utils\BabylonIEPI.dll/Action.htm
O9 - Extra button: EI??? ??C ?? C??I??E - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &EI??? ??C ?? Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O18 - Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_A8904FB862BD9564.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudio) - Agere Systems - C:\WINDOWS\system32\agrsmsvc.exe
O23 - Service: ConfigFree Service (CFSvcs) - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
O23 - Service: Eset HTTP Server (EhttpSrv) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: Eset Service (ekrn) - ESET - C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Nod32 AV (EsetNod32Fix) - Unknown owner - C:\WINDOWS\
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Program Files\Nero\Nero 7\InCD\InCDsrv.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NMIndexingService - Nero AG - C:\Program Files\Common Files\Ahead\Lib\NMIndexingService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared Files\RichVideo.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TOSHIBA Application Service (TAPPSRV) - TOSHIBA Corp. - C:\Program Files\TOSHIBA\TOSHIBA Applet\TAPPSRV.exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\WINDOWS\system32\TODDSrv.exe
--
End of file - 13772 bytes
تأييد
0
البارون
زيزوومى فضى
- إنضم
- 1 مارس 2008
- المشاركات
- 13,588
- مستوى التفاعل
- 506
- النقاط
- 920
غير متصل
عطل برنامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة
توقيع : البارون
تأييد
0
ComboFix 09-08-10.06 - TOSHIBA 08/19/2009 22:28.2.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1256.966.1033.18.1014.430 [GMT 4:00]
Running from: c:\documents and settings\TOSHIBA\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\Dealio Toolbar
c:\program files\Dealio Toolbar\config.ini
c:\program files\Dealio Toolbar\DealioToolbarIE.dll
c:\program files\Dealio Toolbar\Res\amazon.gif
c:\program files\Dealio Toolbar\Res\apple.gif
c:\program files\Dealio Toolbar\Res\barnes.gif
c:\program files\Dealio Toolbar\Res\bestbuy.gif
c:\program files\Dealio Toolbar\Res\dealio_logo.gif
c:\program files\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\Res\ebay.gif
c:\program files\Dealio Toolbar\Res\icon_settings.gif
c:\program files\Dealio Toolbar\Res\macys.gif
c:\program files\Dealio Toolbar\Res\newegg.gif
c:\program files\Dealio Toolbar\Res\overstock.gif
c:\program files\Dealio Toolbar\Res\search-button-hover.gif
c:\program files\Dealio Toolbar\Res\search-button.gif
c:\program files\Dealio Toolbar\Res\search-chevron-hover.gif
c:\program files\Dealio Toolbar\Res\search-chevron.gif
c:\program files\Dealio Toolbar\Res\search_amazon.gif
c:\program files\Dealio Toolbar\Res\search_dealio.gif
c:\program files\Dealio Toolbar\Res\search_ebay.gif
c:\program files\Dealio Toolbar\Res\search_yahoo.gif
c:\program files\Dealio Toolbar\Res\separator.gif
c:\program files\Dealio Toolbar\Res\target.gif
c:\program files\Dealio Toolbar\Res\walmart.gif
c:\program files\Dealio Toolbar\Res\widgets.xml
c:\program files\Dealio Toolbar\SearchSettingsKit.exe
c:\program files\Dealio Toolbar\WidgiHelper.exe
c:\program files\Search Settings
c:\program files\Search Settings\kb128\SearchSettings.dll
c:\program files\Search Settings\kb128\SearchSettingsRes409.dll
c:\program files\Search Settings\SearchSettings.exe
.
((((((((((((((((((((((((( Files Created from 2009-07-19 to 2009-08-19 )))))))))))))))))))))))))))))))
.
2009-08-19 18:17 . 2009-08-19 18:17 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-08-19 18:06 . 2009-08-05 18:48 54752 ----a-w- c:\windows\system32\drivers\fssfltr_tdi.sys
2009-08-19 18:05 . 2009-08-19 18:06 -------- d-----w- c:\windows\LastGood
2009-08-19 18:04 . 2009-08-19 18:06 -------- d-----w- c:\program files\Windows Live
2009-08-14 22:34 . 2009-08-14 22:39 -------- d-----w- c:\documents and settings\TOSHIBA\Local Settings\Application Data\Temp
2009-08-14 22:33 . 2009-08-14 22:33 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2009-08-14 22:03 . 2009-08-14 22:03 390664 ----a-w- c:\documents and settings\TOSHIBA\Application Data\Real\RealOne Player\setup\AU_setup.exe
2009-08-13 08:54 . 2009-08-13 08:54 -------- d-----w- c:\windows\ServicePackFiles
2009-08-12 13:38 . 2009-06-05 07:42 655872 -c----w- c:\windows\system32\dllcache\mstscax.dll
2009-08-11 19:07 . 2009-08-11 19:07 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Datalayer
2009-08-11 19:05 . 2009-08-13 09:35 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Nokia Multimedia Player
2009-08-11 19:03 . 2009-08-12 20:17 -------- d-sh--w- c:\documents and settings\TOSHIBA\Phone Browser
2009-08-11 18:56 . 2009-08-11 19:31 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Nokia
2009-08-11 18:56 . 2009-08-11 19:07 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
2009-08-10 19:46 . 2009-08-10 19:50 -------- d-----w- c:\program files\PromoToMobile
2009-08-10 12:29 . 2009-08-10 12:29 -------- d-----w- c:\program files\Microsoft Silverlight
2009-08-08 11:44 . 2004-08-03 19:10 38016 -c--a-w- c:\windows\system32\dllcache\bthmodem.sys
2009-08-08 11:44 . 2004-08-03 19:10 38016 ----a-w- c:\windows\system32\drivers\bthmodem.sys
2009-08-07 21:37 . 2009-08-07 21:37 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Dealio
2009-08-07 21:37 . 2009-08-07 21:37 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Search Settings
2009-08-07 21:34 . 2009-08-07 21:34 -------- d-----w- c:\documents and settings\TOSHIBA\Local Settings\Application Data\AVNEX_Ltd._(CY)
2009-08-07 21:28 . 2009-08-07 22:10 -------- d-----w- c:\program files\AV Music Morpher Gold
2009-08-07 21:09 . 2009-08-07 21:19 -------- d-----w- c:\program files\vanBasco's Karaoke Player
2009-08-05 12:10 . 2009-08-05 12:10 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-08-05 09:11 . 2009-08-05 09:11 204800 -c----w- c:\windows\system32\dllcache\mswebdvd.dll
2009-08-04 16:12 . 2009-08-04 16:14 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Vbuzzer Messenger
2009-08-04 14:58 . 2002-12-27 15:33 20569 ----a-w- c:\windows\system32\pxc25pm.dll
2009-08-04 14:58 . 2009-08-05 11:27 -------- d-----w- c:\program files\TTMessenger
2009-08-04 14:56 . 2009-08-04 14:56 3584 ----a-r- c:\documents and settings\TOSHIBA\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
2009-08-04 14:56 . 2009-08-04 14:56 -------- d-----w- c:\program files\Windows Installer Clean Up
2009-08-04 04:08 . 2009-08-04 04:08 -------- d-sh--w- c:\documents and settings\Administrator\PrivacIE
2009-08-03 23:57 . 2009-08-03 23:57 152576 ----a-w- c:\documents and settings\TOSHIBA\Application Data\Sun\Java\jre1.6.0_14\lzma.dll
2009-08-03 23:20 . 2009-08-04 14:56 -------- d-----w- c:\program files\MSECACHE
2009-08-03 23:15 . 2009-08-13 18:12 -------- d-----w- c:\program files\VS Revo Group
2009-08-03 23:09 . 2009-08-03 23:09 -------- d-----w- c:\program files\Trend Micro
2009-08-02 21:23 . 2006-06-29 09:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-08-02 21:22 . 2009-08-02 21:22 410128 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-08-02 21:21 . 2009-08-04 18:34 -------- d-----w- c:\windows\system32\XPSViewer
2009-08-02 21:21 . 2009-08-02 21:21 -------- d-----w- c:\program files\MSBuild
2009-08-02 21:21 . 2009-08-02 21:21 -------- d-----w- c:\program files\Reference Assemblies
2009-08-02 21:20 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-08-02 21:20 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-08-02 21:20 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-08-02 21:20 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2009-08-02 21:20 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-08-02 21:20 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-08-02 21:20 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-08-02 21:20 . 2009-08-02 21:21 -------- d-----w- C:\b540a8714fe2454d6aac74b72ea3
2009-08-01 16:55 . 2009-08-19 18:07 -------- d-----w- c:\documents and settings\TOSHIBA\Tracing
2009-08-01 16:19 . 2009-08-01 16:19 -------- d-----w- c:\program files\Zards software
2009-08-01 13:36 . 2008-03-03 14:21 568 ---ha-w- c:\windows\nod32fixtemdono.reg
2009-08-01 13:36 . 2008-03-03 10:25 5702 ---ha-w- c:\windows\nod32restoretemdono.reg
2009-08-01 13:25 . 2009-08-18 07:44 -------- d-----w- c:\program files\Registry Genius
2009-08-01 13:06 . 2009-08-01 13:06 -------- d-----w- C:\FU_Backup
2009-08-01 11:57 . 2009-08-10 12:39 -------- d-----w- c:\program files\FinalUninstaller
2009-07-31 23:44 . 2009-07-31 23:44 -------- d-----w- c:\program files\Common Files\Windows Live
2009-07-31 23:28 . 2009-07-31 23:28 238848 ----a-w- c:\windows\eins1247.dll
2009-07-31 22:32 . 2009-07-31 22:36 -------- d-----w- c:\program files\Registry Winner
2009-07-31 19:55 . 2007-11-02 09:00 245760 ----a-w- c:\windows\system32\FaxHelper.exe
2009-07-31 19:55 . 2007-11-02 08:06 57344 ----a-w- c:\windows\system32\FaxMonitor.dll
2009-07-31 19:04 . 2009-07-31 19:04 -------- d-----w- c:\documents and settings\TOSHIBA\Local Settings\Application Data\Identities
2009-07-31 18:36 . 2009-07-31 18:36 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\URSoft
2009-07-31 18:36 . 2009-07-31 21:09 -------- d-----w- c:\program files\Your Uninstaller 2008
2009-07-31 18:18 . 2009-08-18 08:09 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Ashampoo Cover Studio 2
2009-07-31 18:17 . 2009-07-31 18:17 -------- d-----w- c:\documents and settings\All Users\Application Data\page
2009-07-31 17:41 . 2009-07-31 17:41 238848 ----a-w- c:\windows\eins1909.dll
2009-07-31 15:06 . 2009-07-31 15:06 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2009-07-31 14:54 . 2009-07-31 20:31 -------- d-----w- C:\
2009-07-29 20:47 . 2009-08-01 13:35 -------- d--h--w- c:\program files\ESET
2009-07-29 20:00 . 2009-07-29 20:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Absolutist
2009-07-28 15:38 . 2009-07-28 15:38 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\ESET
2009-07-28 15:15 . 2009-07-28 15:15 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\MakeUpPilot
2009-07-28 15:12 . 2009-07-28 15:12 -------- d-----w- c:\program files\Two Pilots
2009-07-28 15:12 . 2009-07-28 15:12 -------- d-----w- c:\program files\MakeUp Pilot
2009-07-26 12:44 . 2009-07-26 12:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-12-30 04:02 . 2009-06-19 17:43 75820 ----a-w- c:\windows\Fonts\SC_DUBAI.ttf
2009-11-09 21:35 . 2008-11-16 20:12 117692 ----a-w- c:\windows\Fonts\TOPZXB.ttf
2009-11-09 21:35 . 2008-11-16 20:12 121240 ----a-w- c:\windows\Fonts\TOPZB.ttf
2009-11-09 21:34 . 2008-11-16 20:12 119756 ----a-w- c:\windows\Fonts\TOPZN.ttf
2009-11-09 21:32 . 2008-11-16 20:12 89320 ----a-w- c:\windows\Fonts\YQOTN.ttf
2009-11-09 21:31 . 2008-11-16 20:12 90156 ----a-w- c:\windows\Fonts\YQOTB.ttf
2009-11-09 21:31 . 2008-11-16 20:12 89860 ----a-w- c:\windows\Fonts\YQOTXB.ttf
2009-11-07 08:03 . 2008-11-16 20:12 38188 ----a-w- c:\windows\Fonts\wds052801.ttf
2009-08-19 18:28 . 2008-11-11 09:37 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\DNA
2009-08-19 17:27 . 2009-07-01 14:40 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-08-19 12:27 . 2008-11-11 06:22 -------- d-----w- c:\program files\lg_fwupdate
2009-08-19 12:27 . 2008-11-11 09:37 -------- d-----w- c:\program files\DNA
2009-08-18 15:18 . 2008-11-08 13:03 2496 ----a-w- c:\windows\bthservsdp.dat
2009-08-18 13:33 . 2009-04-22 17:25 -------- d-----w- c:\program files\Google
2009-08-18 08:02 . 2009-03-08 16:14 -------- d-----w- c:\program files\Acoustica MP3 Audio Mixer
2009-08-18 07:35 . 2009-08-04 18:14 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\cleaner
2009-08-14 22:13 . 2009-01-23 21:30 -------- d-----w- c:\program files\Common Files\Real
2009-08-13 18:10 . 2008-04-03 08:07 -------- d-----w- c:\program files\Intel
2009-08-13 08:59 . 2008-04-03 08:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-08-12 13:29 . 2009-07-02 15:58 261504 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2009-08-11 19:07 . 2009-08-11 18:55 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\PC Suite
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\Common Files\PCSuite
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\Common Files\Nokia
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\Nokia
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\DIFX
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\PC Connectivity Solution
2009-08-05 09:11 . 2008-04-03 07:09 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 18:14 . 2009-08-04 18:14 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\CyberScrub
2009-08-03 23:58 . 2008-04-03 08:06 -------- d-----w- c:\program files\Java
2009-08-03 23:57 . 2008-11-02 11:09 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee
2009-07-31 21:15 . 2008-11-11 08:47 -------- d-----w- c:\program files\Windows Media Connect 2
2009-07-31 18:54 . 2009-03-21 08:35 -------- d-----w- c:\program files\Ulead GIF Animator 4.0
2009-07-31 18:17 . 2008-12-15 19:17 -------- d-----w- c:\program files\Ashampoo
2009-07-31 17:51 . 2009-01-08 17:24 -------- d-----w- c:\documents and settings\All Users\Application Data\ashampoo
2009-07-31 14:13 . 2009-07-16 12:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Second Atom Okay Proxy
2009-07-28 15:35 . 2009-01-02 15:26 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2009-07-25 14:06 . 2009-05-16 13:12 -------- d-----w- c:\program files\free-mobile-downloads
2009-07-21 23:41 . 2008-11-11 06:44 -------- d-----w- c:\program files\JetAudio
2009-07-18 16:08 . 2009-07-18 15:34 -------- d-----w- c:\program files\Common Files\BitDefender
2009-07-18 15:36 . 2009-07-18 15:35 -------- d-----w- c:\documents and settings\All Users\Application Data\BitDefender
2009-07-17 18:55 . 2008-04-03 07:09 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-17 10:03 . 2008-11-11 07:27 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\DivX
2009-07-13 19:43 . 2008-04-03 07:09 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-10 09:07 . 2009-07-10 09:07 306544 ----a-w- c:\windows\WLXPGSS.SCR
2009-07-08 11:15 . 2008-12-19 15:09 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\uTorrent
2009-07-08 11:15 . 2008-11-11 09:37 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\BitTorrent
2009-07-04 13:24 . 2008-12-11 10:44 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Thinstall
2009-07-03 17:09 . 2008-04-03 07:09 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-02 21:08 . 2009-07-02 21:07 -------- d-----w- c:\program files\PhotoZoom Pro 2
2009-07-02 15:58 . 2008-11-02 11:04 8224 ----a-w- c:\documents and settings\TOSHIBA\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-02 12:03 . 2009-07-02 12:03 -------- d-----w- c:\program files\Photoshop
2009-07-02 10:47 . 2009-07-02 10:47 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\InterVideo
2009-07-02 10:30 . 2008-04-03 07:25 8224 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-01 14:43 . 2009-07-01 14:40 -------- d-----w- c:\documents and settings\All Users\Application Data\SpeedBit
2009-07-01 14:39 . 2009-07-01 14:39 -------- d-----w- c:\program files\SpeedBit Video Downloader
2009-06-27 17:04 . 2009-06-27 17:04 -------- d-----w- c:\program files\Karaoke5
2009-06-27 16:39 . 2009-06-27 16:39 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Wildfire
2009-06-26 11:58 . 2009-06-27 17:04 83456 ----a-w- c:\windows\system32\Kara_K.dll
2009-06-25 18:36 . 2008-04-03 07:09 95744 ----a-w- c:\windows\system32\mqsec.dll
2009-06-25 18:36 . 2008-04-03 07:09 661504 ----a-w- c:\windows\system32\mqqm.dll
2009-06-25 18:36 . 2008-04-03 07:09 517120 ----a-w- c:\windows\system32\mqsnap.dll
2009-06-25 18:36 . 2008-04-03 07:09 48640 ----a-w- c:\windows\system32\mqupgrd.dll
2009-06-25 18:36 . 2008-04-03 07:09 471552 ----a-w- c:\windows\system32\mqutil.dll
2009-06-25 18:36 . 2008-04-03 07:09 47104 ----a-w- c:\windows\system32\mqdscli.dll
2009-06-25 18:36 . 2008-04-03 07:09 225280 ----a-w- c:\windows\system32\mqoa.dll
2009-06-25 18:36 . 2008-04-03 07:09 186880 ----a-w- c:\windows\system32\mqtrig.dll
2009-06-25 18:36 . 2008-04-03 07:09 177152 ----a-w- c:\windows\system32\mqrt.dll
2009-06-25 18:36 . 2008-04-03 07:09 16896 ----a-w- c:\windows\system32\mqise.dll
2009-06-25 18:36 . 2008-04-03 07:09 138240 ----a-w- c:\windows\system32\mqad.dll
2009-06-25 18:36 . 2008-04-03 07:09 123392 ----a-w- c:\windows\system32\mqrtdep.dll
2009-06-25 08:44 . 2008-04-03 08:01 168448 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:44 . 2008-04-03 07:42 724480 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:44 . 2008-04-03 07:09 59392 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:44 . 2008-04-03 07:09 56320 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:44 . 2008-04-03 07:09 298496 ----a-w- c:\windows\system32\kerberos.dll
2009-06-25 08:44 . 2008-04-03 07:09 133632 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-22 11:49 . 2008-04-03 07:09 19968 ----a-w- c:\windows\system32\mqbkup.exe
2009-06-22 11:49 . 2008-04-03 07:09 117248 ----a-w- c:\windows\system32\mqtgsvc.exe
2009-06-22 11:49 . 2008-04-03 07:09 4608 ----a-w- c:\windows\system32\mqsvc.exe
2009-06-22 11:48 . 2008-04-03 07:09 91776 ----a-w- c:\windows\system32\drivers\mqac.sys
2009-06-22 11:34 . 2008-04-03 07:09 92544 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-21 08:27 . 2009-01-09 18:26 45056 ----a-w- c:\windows\NCUNINST.EXE
2009-06-19 13:14 . 2008-11-29 00:17 737280 ----a-w- c:\windows\iun6002.exe
2009-06-19 07:20 . 2009-06-27 17:04 11328 ----a-w- c:\windows\system32\Bassenk.dll
2009-06-19 07:17 . 2009-06-27 17:04 98872 ----a-w- c:\windows\system32\Bask.dll
2009-06-16 14:55 . 2008-04-03 07:09 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:55 . 2008-04-03 07:09 82432 ----a-w- c:\windows\system32\fontsub.dll
2009-06-12 11:50 . 2008-04-03 07:09 80896 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-12 11:50 . 2008-04-03 07:09 76288 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 14:21 . 2008-04-03 07:09 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 06:32 . 2008-04-03 07:56 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-05 07:42 . 2008-04-03 07:17 655872 ----a-w- c:\windows\system32\mstscax.dll
2009-06-03 19:27 . 2008-04-03 07:09 1290752 ----a-w- c:\windows\system32\quartz.dll
2009-05-26 16:32 . 2009-05-26 16:32 369665 ----a-w- c:\windows\system32\360x180° Mekan.scr
2009-05-26 16:06 . 2009-05-26 16:06 4096 ----a-w- c:\windows\d3dx.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
Microsoft Windows XP Professional 5.1.2600.2.1256.966.1033.18.1014.430 [GMT 4:00]
Running from: c:\documents and settings\TOSHIBA\Desktop\ComboFix.exe
AV: ESET NOD32 Antivirus 3.0 *On-access scanning disabled* (Updated) {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
c:\program files\Dealio Toolbar
c:\program files\Dealio Toolbar\config.ini
c:\program files\Dealio Toolbar\DealioToolbarIE.dll
c:\program files\Dealio Toolbar\Res\amazon.gif
c:\program files\Dealio Toolbar\Res\apple.gif
c:\program files\Dealio Toolbar\Res\barnes.gif
c:\program files\Dealio Toolbar\Res\bestbuy.gif
c:\program files\Dealio Toolbar\Res\dealio_logo.gif
c:\program files\Dealio Toolbar\Res\dealio_logo_hover.gif
c:\program files\Dealio Toolbar\Res\ebay.gif
c:\program files\Dealio Toolbar\Res\icon_settings.gif
c:\program files\Dealio Toolbar\Res\macys.gif
c:\program files\Dealio Toolbar\Res\newegg.gif
c:\program files\Dealio Toolbar\Res\overstock.gif
c:\program files\Dealio Toolbar\Res\search-button-hover.gif
c:\program files\Dealio Toolbar\Res\search-button.gif
c:\program files\Dealio Toolbar\Res\search-chevron-hover.gif
c:\program files\Dealio Toolbar\Res\search-chevron.gif
c:\program files\Dealio Toolbar\Res\search_amazon.gif
c:\program files\Dealio Toolbar\Res\search_dealio.gif
c:\program files\Dealio Toolbar\Res\search_ebay.gif
c:\program files\Dealio Toolbar\Res\search_yahoo.gif
c:\program files\Dealio Toolbar\Res\separator.gif
c:\program files\Dealio Toolbar\Res\target.gif
c:\program files\Dealio Toolbar\Res\walmart.gif
c:\program files\Dealio Toolbar\Res\widgets.xml
c:\program files\Dealio Toolbar\SearchSettingsKit.exe
c:\program files\Dealio Toolbar\WidgiHelper.exe
c:\program files\Search Settings
c:\program files\Search Settings\kb128\SearchSettings.dll
c:\program files\Search Settings\kb128\SearchSettingsRes409.dll
c:\program files\Search Settings\SearchSettings.exe
.
((((((((((((((((((((((((( Files Created from 2009-07-19 to 2009-08-19 )))))))))))))))))))))))))))))))
.
2009-08-19 18:17 . 2009-08-19 18:17 -------- d-sh--w- c:\documents and settings\LocalService\IETldCache
2009-08-19 18:06 . 2009-08-05 18:48 54752 ----a-w- c:\windows\system32\drivers\fssfltr_tdi.sys
2009-08-19 18:05 . 2009-08-19 18:06 -------- d-----w- c:\windows\LastGood
2009-08-19 18:04 . 2009-08-19 18:06 -------- d-----w- c:\program files\Windows Live
2009-08-14 22:34 . 2009-08-14 22:39 -------- d-----w- c:\documents and settings\TOSHIBA\Local Settings\Application Data\Temp
2009-08-14 22:33 . 2009-08-14 22:33 -------- d-----w- c:\documents and settings\NetworkService\Local Settings\Application Data\Google
2009-08-14 22:03 . 2009-08-14 22:03 390664 ----a-w- c:\documents and settings\TOSHIBA\Application Data\Real\RealOne Player\setup\AU_setup.exe
2009-08-13 08:54 . 2009-08-13 08:54 -------- d-----w- c:\windows\ServicePackFiles
2009-08-12 13:38 . 2009-06-05 07:42 655872 -c----w- c:\windows\system32\dllcache\mstscax.dll
2009-08-11 19:07 . 2009-08-11 19:07 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Datalayer
2009-08-11 19:05 . 2009-08-13 09:35 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Nokia Multimedia Player
2009-08-11 19:03 . 2009-08-12 20:17 -------- d-sh--w- c:\documents and settings\TOSHIBA\Phone Browser
2009-08-11 18:56 . 2009-08-11 19:31 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Nokia
2009-08-11 18:56 . 2009-08-11 19:07 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
2009-08-10 19:46 . 2009-08-10 19:50 -------- d-----w- c:\program files\PromoToMobile
2009-08-10 12:29 . 2009-08-10 12:29 -------- d-----w- c:\program files\Microsoft Silverlight
2009-08-08 11:44 . 2004-08-03 19:10 38016 -c--a-w- c:\windows\system32\dllcache\bthmodem.sys
2009-08-08 11:44 . 2004-08-03 19:10 38016 ----a-w- c:\windows\system32\drivers\bthmodem.sys
2009-08-07 21:37 . 2009-08-07 21:37 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Dealio
2009-08-07 21:37 . 2009-08-07 21:37 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Search Settings
2009-08-07 21:34 . 2009-08-07 21:34 -------- d-----w- c:\documents and settings\TOSHIBA\Local Settings\Application Data\AVNEX_Ltd._(CY)
2009-08-07 21:28 . 2009-08-07 22:10 -------- d-----w- c:\program files\AV Music Morpher Gold
2009-08-07 21:09 . 2009-08-07 21:19 -------- d-----w- c:\program files\vanBasco's Karaoke Player
2009-08-05 12:10 . 2009-08-05 12:10 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-08-05 09:11 . 2009-08-05 09:11 204800 -c----w- c:\windows\system32\dllcache\mswebdvd.dll
2009-08-04 16:12 . 2009-08-04 16:14 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Vbuzzer Messenger
2009-08-04 14:58 . 2002-12-27 15:33 20569 ----a-w- c:\windows\system32\pxc25pm.dll
2009-08-04 14:58 . 2009-08-05 11:27 -------- d-----w- c:\program files\TTMessenger
2009-08-04 14:56 . 2009-08-04 14:56 3584 ----a-r- c:\documents and settings\TOSHIBA\Application Data\Microsoft\Installer\{121634B0-2F4B-11D3-ADA3-00C04F52DD52}\Icon386ED4E3.exe
2009-08-04 14:56 . 2009-08-04 14:56 -------- d-----w- c:\program files\Windows Installer Clean Up
2009-08-04 04:08 . 2009-08-04 04:08 -------- d-sh--w- c:\documents and settings\Administrator\PrivacIE
2009-08-03 23:57 . 2009-08-03 23:57 152576 ----a-w- c:\documents and settings\TOSHIBA\Application Data\Sun\Java\jre1.6.0_14\lzma.dll
2009-08-03 23:20 . 2009-08-04 14:56 -------- d-----w- c:\program files\MSECACHE
2009-08-03 23:15 . 2009-08-13 18:12 -------- d-----w- c:\program files\VS Revo Group
2009-08-03 23:09 . 2009-08-03 23:09 -------- d-----w- c:\program files\Trend Micro
2009-08-02 21:23 . 2006-06-29 09:07 14048 ------w- c:\windows\system32\spmsg2.dll
2009-08-02 21:22 . 2009-08-02 21:22 410128 ----a-w- c:\documents and settings\LocalService\Local Settings\Application Data\FontCache3.0.0.0.dat
2009-08-02 21:21 . 2009-08-04 18:34 -------- d-----w- c:\windows\system32\XPSViewer
2009-08-02 21:21 . 2009-08-02 21:21 -------- d-----w- c:\program files\MSBuild
2009-08-02 21:21 . 2009-08-02 21:21 -------- d-----w- c:\program files\Reference Assemblies
2009-08-02 21:20 . 2008-07-06 12:06 89088 -c----w- c:\windows\system32\dllcache\filterpipelineprintproc.dll
2009-08-02 21:20 . 2008-07-06 12:06 575488 -c----w- c:\windows\system32\dllcache\xpsshhdr.dll
2009-08-02 21:20 . 2008-07-06 12:06 575488 ------w- c:\windows\system32\xpsshhdr.dll
2009-08-02 21:20 . 2008-07-06 12:06 1676288 -c----w- c:\windows\system32\dllcache\xpssvcs.dll
2009-08-02 21:20 . 2008-07-06 12:06 1676288 ------w- c:\windows\system32\xpssvcs.dll
2009-08-02 21:20 . 2008-07-06 12:06 117760 ------w- c:\windows\system32\prntvpt.dll
2009-08-02 21:20 . 2008-07-06 10:50 597504 -c----w- c:\windows\system32\dllcache\printfilterpipelinesvc.exe
2009-08-02 21:20 . 2009-08-02 21:21 -------- d-----w- C:\b540a8714fe2454d6aac74b72ea3
2009-08-01 16:55 . 2009-08-19 18:07 -------- d-----w- c:\documents and settings\TOSHIBA\Tracing
2009-08-01 16:19 . 2009-08-01 16:19 -------- d-----w- c:\program files\Zards software
2009-08-01 13:36 . 2008-03-03 14:21 568 ---ha-w- c:\windows\nod32fixtemdono.reg
2009-08-01 13:36 . 2008-03-03 10:25 5702 ---ha-w- c:\windows\nod32restoretemdono.reg
2009-08-01 13:25 . 2009-08-18 07:44 -------- d-----w- c:\program files\Registry Genius
2009-08-01 13:06 . 2009-08-01 13:06 -------- d-----w- C:\FU_Backup
2009-08-01 11:57 . 2009-08-10 12:39 -------- d-----w- c:\program files\FinalUninstaller
2009-07-31 23:44 . 2009-07-31 23:44 -------- d-----w- c:\program files\Common Files\Windows Live
2009-07-31 23:28 . 2009-07-31 23:28 238848 ----a-w- c:\windows\eins1247.dll
2009-07-31 22:32 . 2009-07-31 22:36 -------- d-----w- c:\program files\Registry Winner
2009-07-31 19:55 . 2007-11-02 09:00 245760 ----a-w- c:\windows\system32\FaxHelper.exe
2009-07-31 19:55 . 2007-11-02 08:06 57344 ----a-w- c:\windows\system32\FaxMonitor.dll
2009-07-31 19:04 . 2009-07-31 19:04 -------- d-----w- c:\documents and settings\TOSHIBA\Local Settings\Application Data\Identities
2009-07-31 18:36 . 2009-07-31 18:36 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\URSoft
2009-07-31 18:36 . 2009-07-31 21:09 -------- d-----w- c:\program files\Your Uninstaller 2008
2009-07-31 18:18 . 2009-08-18 08:09 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Ashampoo Cover Studio 2
2009-07-31 18:17 . 2009-07-31 18:17 -------- d-----w- c:\documents and settings\All Users\Application Data\page
2009-07-31 17:41 . 2009-07-31 17:41 238848 ----a-w- c:\windows\eins1909.dll
2009-07-31 15:06 . 2009-07-31 15:06 -------- d-sh--w- c:\documents and settings\Administrator\IETldCache
2009-07-31 14:54 . 2009-07-31 20:31 -------- d-----w- C:\
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
2009-07-29 20:47 . 2009-08-01 13:35 -------- d--h--w- c:\program files\ESET
2009-07-29 20:00 . 2009-07-29 20:00 -------- d-----w- c:\documents and settings\All Users\Application Data\Absolutist
2009-07-28 15:38 . 2009-07-28 15:38 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\ESET
2009-07-28 15:15 . 2009-07-28 15:15 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\MakeUpPilot
2009-07-28 15:12 . 2009-07-28 15:12 -------- d-----w- c:\program files\Two Pilots
2009-07-28 15:12 . 2009-07-28 15:12 -------- d-----w- c:\program files\MakeUp Pilot
2009-07-26 12:44 . 2009-07-26 12:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2016-12-30 04:02 . 2009-06-19 17:43 75820 ----a-w- c:\windows\Fonts\SC_DUBAI.ttf
2009-11-09 21:35 . 2008-11-16 20:12 117692 ----a-w- c:\windows\Fonts\TOPZXB.ttf
2009-11-09 21:35 . 2008-11-16 20:12 121240 ----a-w- c:\windows\Fonts\TOPZB.ttf
2009-11-09 21:34 . 2008-11-16 20:12 119756 ----a-w- c:\windows\Fonts\TOPZN.ttf
2009-11-09 21:32 . 2008-11-16 20:12 89320 ----a-w- c:\windows\Fonts\YQOTN.ttf
2009-11-09 21:31 . 2008-11-16 20:12 90156 ----a-w- c:\windows\Fonts\YQOTB.ttf
2009-11-09 21:31 . 2008-11-16 20:12 89860 ----a-w- c:\windows\Fonts\YQOTXB.ttf
2009-11-07 08:03 . 2008-11-16 20:12 38188 ----a-w- c:\windows\Fonts\wds052801.ttf
2009-08-19 18:28 . 2008-11-11 09:37 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\DNA
2009-08-19 17:27 . 2009-07-01 14:40 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-08-19 12:27 . 2008-11-11 06:22 -------- d-----w- c:\program files\lg_fwupdate
2009-08-19 12:27 . 2008-11-11 09:37 -------- d-----w- c:\program files\DNA
2009-08-18 15:18 . 2008-11-08 13:03 2496 ----a-w- c:\windows\bthservsdp.dat
2009-08-18 13:33 . 2009-04-22 17:25 -------- d-----w- c:\program files\Google
2009-08-18 08:02 . 2009-03-08 16:14 -------- d-----w- c:\program files\Acoustica MP3 Audio Mixer
2009-08-18 07:35 . 2009-08-04 18:14 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\cleaner
2009-08-14 22:13 . 2009-01-23 21:30 -------- d-----w- c:\program files\Common Files\Real
2009-08-13 18:10 . 2008-04-03 08:07 -------- d-----w- c:\program files\Intel
2009-08-13 08:59 . 2008-04-03 08:38 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-08-12 13:29 . 2009-07-02 15:58 261504 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2009-08-11 19:07 . 2009-08-11 18:55 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\PC Suite
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\Common Files\PCSuite
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\Common Files\Nokia
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\Nokia
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\DIFX
2009-08-11 18:55 . 2009-08-11 18:55 -------- d-----w- c:\program files\PC Connectivity Solution
2009-08-05 09:11 . 2008-04-03 07:09 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 18:14 . 2009-08-04 18:14 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\CyberScrub
2009-08-03 23:58 . 2008-04-03 08:06 -------- d-----w- c:\program files\Java
2009-08-03 23:57 . 2008-11-02 11:09 -------- d-----w- c:\documents and settings\All Users\Application Data\McAfee
2009-07-31 21:15 . 2008-11-11 08:47 -------- d-----w- c:\program files\Windows Media Connect 2
2009-07-31 18:54 . 2009-03-21 08:35 -------- d-----w- c:\program files\Ulead GIF Animator 4.0
2009-07-31 18:17 . 2008-12-15 19:17 -------- d-----w- c:\program files\Ashampoo
2009-07-31 17:51 . 2009-01-08 17:24 -------- d-----w- c:\documents and settings\All Users\Application Data\ashampoo
2009-07-31 14:13 . 2009-07-16 12:27 -------- d-----w- c:\documents and settings\All Users\Application Data\Second Atom Okay Proxy
2009-07-28 15:35 . 2009-01-02 15:26 -------- d-----w- c:\documents and settings\All Users\Application Data\ESET
2009-07-25 14:06 . 2009-05-16 13:12 -------- d-----w- c:\program files\free-mobile-downloads
2009-07-21 23:41 . 2008-11-11 06:44 -------- d-----w- c:\program files\JetAudio
2009-07-18 16:08 . 2009-07-18 15:34 -------- d-----w- c:\program files\Common Files\BitDefender
2009-07-18 15:36 . 2009-07-18 15:35 -------- d-----w- c:\documents and settings\All Users\Application Data\BitDefender
2009-07-17 18:55 . 2008-04-03 07:09 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-17 10:03 . 2008-11-11 07:27 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\DivX
2009-07-13 19:43 . 2008-04-03 07:09 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-10 09:07 . 2009-07-10 09:07 306544 ----a-w- c:\windows\WLXPGSS.SCR
2009-07-08 11:15 . 2008-12-19 15:09 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\uTorrent
2009-07-08 11:15 . 2008-11-11 09:37 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\BitTorrent
2009-07-04 13:24 . 2008-12-11 10:44 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Thinstall
2009-07-03 17:09 . 2008-04-03 07:09 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-02 21:08 . 2009-07-02 21:07 -------- d-----w- c:\program files\PhotoZoom Pro 2
2009-07-02 15:58 . 2008-11-02 11:04 8224 ----a-w- c:\documents and settings\TOSHIBA\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-02 12:03 . 2009-07-02 12:03 -------- d-----w- c:\program files\Photoshop
2009-07-02 10:47 . 2009-07-02 10:47 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\InterVideo
2009-07-02 10:30 . 2008-04-03 07:25 8224 ----a-w- c:\documents and settings\Administrator\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
2009-07-01 14:43 . 2009-07-01 14:40 -------- d-----w- c:\documents and settings\All Users\Application Data\SpeedBit
2009-07-01 14:39 . 2009-07-01 14:39 -------- d-----w- c:\program files\SpeedBit Video Downloader
2009-06-27 17:04 . 2009-06-27 17:04 -------- d-----w- c:\program files\Karaoke5
2009-06-27 16:39 . 2009-06-27 16:39 -------- d-----w- c:\documents and settings\TOSHIBA\Application Data\Wildfire
2009-06-26 11:58 . 2009-06-27 17:04 83456 ----a-w- c:\windows\system32\Kara_K.dll
2009-06-25 18:36 . 2008-04-03 07:09 95744 ----a-w- c:\windows\system32\mqsec.dll
2009-06-25 18:36 . 2008-04-03 07:09 661504 ----a-w- c:\windows\system32\mqqm.dll
2009-06-25 18:36 . 2008-04-03 07:09 517120 ----a-w- c:\windows\system32\mqsnap.dll
2009-06-25 18:36 . 2008-04-03 07:09 48640 ----a-w- c:\windows\system32\mqupgrd.dll
2009-06-25 18:36 . 2008-04-03 07:09 471552 ----a-w- c:\windows\system32\mqutil.dll
2009-06-25 18:36 . 2008-04-03 07:09 47104 ----a-w- c:\windows\system32\mqdscli.dll
2009-06-25 18:36 . 2008-04-03 07:09 225280 ----a-w- c:\windows\system32\mqoa.dll
2009-06-25 18:36 . 2008-04-03 07:09 186880 ----a-w- c:\windows\system32\mqtrig.dll
2009-06-25 18:36 . 2008-04-03 07:09 177152 ----a-w- c:\windows\system32\mqrt.dll
2009-06-25 18:36 . 2008-04-03 07:09 16896 ----a-w- c:\windows\system32\mqise.dll
2009-06-25 18:36 . 2008-04-03 07:09 138240 ----a-w- c:\windows\system32\mqad.dll
2009-06-25 18:36 . 2008-04-03 07:09 123392 ----a-w- c:\windows\system32\mqrtdep.dll
2009-06-25 08:44 . 2008-04-03 08:01 168448 ----a-w- c:\windows\system32\schannel.dll
2009-06-25 08:44 . 2008-04-03 07:42 724480 ----a-w- c:\windows\system32\lsasrv.dll
2009-06-25 08:44 . 2008-04-03 07:09 59392 ----a-w- c:\windows\system32\wdigest.dll
2009-06-25 08:44 . 2008-04-03 07:09 56320 ----a-w- c:\windows\system32\secur32.dll
2009-06-25 08:44 . 2008-04-03 07:09 298496 ----a-w- c:\windows\system32\kerberos.dll
2009-06-25 08:44 . 2008-04-03 07:09 133632 ----a-w- c:\windows\system32\msv1_0.dll
2009-06-22 11:49 . 2008-04-03 07:09 19968 ----a-w- c:\windows\system32\mqbkup.exe
2009-06-22 11:49 . 2008-04-03 07:09 117248 ----a-w- c:\windows\system32\mqtgsvc.exe
2009-06-22 11:49 . 2008-04-03 07:09 4608 ----a-w- c:\windows\system32\mqsvc.exe
2009-06-22 11:48 . 2008-04-03 07:09 91776 ----a-w- c:\windows\system32\drivers\mqac.sys
2009-06-22 11:34 . 2008-04-03 07:09 92544 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-06-21 08:27 . 2009-01-09 18:26 45056 ----a-w- c:\windows\NCUNINST.EXE
2009-06-19 13:14 . 2008-11-29 00:17 737280 ----a-w- c:\windows\iun6002.exe
2009-06-19 07:20 . 2009-06-27 17:04 11328 ----a-w- c:\windows\system32\Bassenk.dll
2009-06-19 07:17 . 2009-06-27 17:04 98872 ----a-w- c:\windows\system32\Bask.dll
2009-06-16 14:55 . 2008-04-03 07:09 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-06-16 14:55 . 2008-04-03 07:09 82432 ----a-w- c:\windows\system32\fontsub.dll
2009-06-12 11:50 . 2008-04-03 07:09 80896 ----a-w- c:\windows\system32\tlntsess.exe
2009-06-12 11:50 . 2008-04-03 07:09 76288 ----a-w- c:\windows\system32\telnet.exe
2009-06-10 14:21 . 2008-04-03 07:09 84992 ----a-w- c:\windows\system32\avifil32.dll
2009-06-10 06:32 . 2008-04-03 07:56 132096 ----a-w- c:\windows\system32\wkssvc.dll
2009-06-05 07:42 . 2008-04-03 07:17 655872 ----a-w- c:\windows\system32\mstscax.dll
2009-06-03 19:27 . 2008-04-03 07:09 1290752 ----a-w- c:\windows\system32\quartz.dll
2009-05-26 16:32 . 2009-05-26 16:32 369665 ----a-w- c:\windows\system32\360x180° Mekan.scr
2009-05-26 16:06 . 2009-05-26 16:06 4096 ----a-w- c:\windows\d3dx.dat
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
تأييد
0
MAAX
عضوشرف
غير متصل
حمل هذا البرنامج
ثبته على الجهاز ،، ثم شغله واعمل كما الشرح التالي لفحص الجهاز وعمل تقرير
وبعد انتهاء الفحص اعمل التالي
انسخ ما بداخل التقرير والصقه بمشاركتك القادمة
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
ثبته على الجهاز ،، ثم شغله واعمل كما الشرح التالي لفحص الجهاز وعمل تقرير
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
وبعد انتهاء الفحص اعمل التالي
يجب عليك
تسجيل الدخول
او
تسجيل لمشاهدة الرابط المخفي
انسخ ما بداخل التقرير والصقه بمشاركتك القادمة
تأييد
0
- الحالة