[تم حل المشكلة]بهذا التقرير أضع مشكلتي وكلي أمل بكم بعد الله

[ابونايف]

السلآم عليكم ورحمة وبركاته

كل عاماً وانتم بخير

وتقبل الله منا ومنكم صالح الأعمال
مشكلتي هي

1-تعليق مفاجئ في المتصفح

2- حذف الملفات المؤقتة والمحفوظات وملفات تعريف الارتباط وكلمات المرور المحفوظة ومعلومات نماذج ويب.
3- بِط في بداية التشغيل

مع العلم اني حريصاً على صيانة جهازي وتحديثه بشكل مستمر

وبرامج الصيانة

TuneUp Utilities 2009

و

Ace Utilities

وأستخدم متصفح 8 Explorer



وهذا نص التقرير بالهايجاك



Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:28:32 ص, on 21/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\fsproflt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\PROGRA~1\FREEDO~1\fdm.exe
C:\Documents and Settings\Administrator\سطح المكتب\Zyzoom.org_Tool_V_1.0.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zyaoom Tool\Hijack.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 9\SnagItBHO.dll
O2 - BHO: مساعد رابط Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 9\SnagItIEAddin.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O8 - Extra context menu item: Free Download Manager تحميل الفيديو بواسطة - file://C:\Program Files\Free Download Manager\dlfvideo.htm
O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: تحميل المحددة بفري داونلود مانيجر - file://C:\Program Files\Free Download Manager\dlselected.htm
O8 - Extra context menu item: تنزيل الكل بفري داونلود مانيجر - file://C:\Program Files\Free Download Manager\dlall.htm
O8 - Extra context menu item: تنزيل بفري داونلود مانيجر - file://C:\Program Files\Free Download Manager\dllink.htm
O9 - Extra button: تدوين هذا في المدونة - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &تدوين هذا في Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &لوحة مفاتيح ظاهرية - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: فحص عناوين المواقع (URL) - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} (ContactExtractor Class) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
O16 - DPF: {B7FDB0C3-4724-46D2-B8DB-6FA1DC63F7CA} (ReadUid.UserControlMacEntry) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA} -
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~2\mzvkbd3.dll,C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O20 - Winlogon Notify: Antiwpa - C:\WINDOWS\SYSTEM32\antiwpa.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: FSPro Filter Service (fsproflt) - FSPro Labs - C:\WINDOWS\system32\fsproflt.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 7704 bytes


وجزاكم الله خيراً ​

 

[ابونايف]

يرفع

 

[النقيب]

احذف القيم التالية


O2 - BHO: مساعد رابط Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (file missing)


O16 - DPF: {0CCA191D-13A6-4E29-B746-314DEE697D83} (Facebook Photo Uploader 5 Control) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {6D2EF4B4-CB62-4C0B-85F3-B79C236D702C} (ContactExtractor Class) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {B7FDB0C3-4724-46D2-B8DB-6FA1DC63F7CA} (ReadUid.UserControlMacEntry) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {CAFEEFAC-0013-0001-0018-ABCDEFFEDCBA} -

طريقة الحذف[/FONT]​

[/FONT]​

 

[bosaad]

حمل هذه الاداة
ATF-Cleaner

لتنظيف الجهاز

التحميل هنا

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

 

[ابونايف]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

بارك الله فيك وجزاك الله خير

المشكلة لآزالت موجوده

مع وكثير من المواقع لما ادخل عليها يعلق الجهاز حتى أدآرة المهام

انتظر الحل

​

 

[ابونايف]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

شكراً لك على تفاعلك

وحتى الآن المشكلة موجوده

 

[عزيووو]

طيب اخوي تفضل

عطل برامج الحماية عن العمل
ثم
حمل الاداة التالية واحفظها على سطح المكتب

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

عند تشغيلها بتظهر لك رسالة ,, اضغط على >> Yes
بعدها بتظهر لك رساله ثانيه ,, اضغط على >> Yes
اثناء الفحص ممكن يعاد تشغيل الجهاز
وبعد اعادة التشغيل ,, سوف تبدأ الاداة بالفحص مرره ثانيه
لا تقم بتشغيل اي برنامج ،، ومهما طالت عملية الفحص انتظر حتى تنتهي
انتظر حتى يظهر لك تقرير ،،انسخه والصقه بمشاركتك القادمة



​

​

[/B]
​

 

[ابونايف]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

هذا هو التقرير



ComboFix 09-09-21.01 - Administrator 09/22/2009 15:53.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1256.966.1025.18.3061.2374 [GMT 3:00]
Running from: c:\documents and settings\Administrator\سطح المكتب\ComboFix.exe
AV: برنامج Kaspersky لأمان الإنترنت *On-access scanning disabled* (Updated) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: برنامج Kaspersky لأمان الإنترنت *disabled* {2C4D4BC6-0793-4956-A9F9-E252435469C0}

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\documents and settings\Administrator\Application Data\Microsoft\Clip Organizer\mstore10.mgc
c:\documents and settings\Administrator\Application Data\Microsoft\Clip Organizer\Offic10.MGC
c:\windows\Installer\57f3b7.msi
c:\windows\Installer\57f3c0.msi
c:\windows\Installer\57f3f7.msi
c:\windows\system\oeminfo.ini
c:\windows\system32\cdky1.reg
c:\windows\system32\tmp.reg
c:\windows\UA000080.DLL
d:\docume~1\ADMINI~1\MYDOCU~1\2831~1\BDB2~1\rjLAlmtr.exe

.
((((((((((((((((((((((((( Files Created from 2009-08-22 to 2009-09-22 )))))))))))))))))))))))))))))))
.

2009-09-21 05:51 . 2009-09-21 05:51 -------- d-----w- c:\program files\IrfanView
2009-09-20 01:44 . 2009-09-20 01:44 604140 --sha-w- c:\windows\system32\drivers\ISwift3.dat
2009-09-20 01:42 . 2009-09-20 01:49 95259 ----a-w- c:\windows\system32\drivers\klick.dat
2009-09-20 01:42 . 2009-09-20 01:49 107547 ----a-w- c:\windows\system32\drivers\klin.dat
2009-09-20 01:42 . 2009-09-22 07:46 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab
2009-09-19 12:23 . 2009-09-19 12:24 -------- d-----w- c:\documents and settings\Administrator\Application Data\ooVoo Details
2009-09-14 08:25 . 2008-10-16 11:06 268648 ----a-w- c:\windows\system32\mucltui.dll
2009-09-14 08:25 . 2008-10-16 11:06 208744 ----a-w- c:\windows\system32\muweb.dll
2009-09-14 01:13 . 2009-09-22 12:57 -------- d-----w- c:\documents and settings\Administrator\Tracing
2009-09-14 00:35 . 2009-08-05 19:48 54752 ----a-w- c:\windows\system32\drivers\fssfltr_tdi.sys
2009-09-14 00:34 . 2006-11-29 10:06 3426072 ----a-w- c:\windows\system32\d3dx9_32.dll
2009-09-14 00:34 . 2009-09-14 00:34 -------- d-----w- c:\program files\Microsoft SQL Server Compact Edition
2009-09-14 00:33 . 2009-09-14 00:33 -------- d-----w- c:\program files\Microsoft
2009-09-14 00:33 . 2009-09-14 00:33 -------- d-----w- c:\program files\Windows Live SkyDrive
2009-09-11 14:43 . 2009-09-11 14:43 -------- d-----w- c:\documents and settings\Administrator\Application Data\ACD Systems
2009-09-11 00:09 . 2009-09-11 00:09 -------- d-----w- c:\program files\Common Files\Windows Live
2009-09-10 18:40 . 2009-09-10 18:41 -------- d-----w- c:\windows\system32\NtmsData
2009-09-09 12:02 . 2009-06-21 21:44 153088 -c----w- c:\windows\system32\dllcache\triedit.dll
2009-09-07 21:05 . 2008-02-29 13:27 676224 ----a-w- c:\windows\system32\OGACheckControl.dll
2009-09-07 20:55 . 2009-09-07 20:55 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\PCHealth
2009-09-07 20:23 . 2009-03-06 14:20 283136 -c----w- c:\windows\system32\dllcache\pdh.dll
2009-09-07 20:23 . 2009-02-09 11:22 2190592 -c----w- c:\windows\system32\dllcache\ntoskrnl.exe
2009-09-07 20:23 . 2009-02-09 11:21 110592 -c----w- c:\windows\system32\dllcache\services.exe
2009-09-07 20:23 . 2009-02-09 10:51 401408 -c----w- c:\windows\system32\dllcache\rpcss.dll
2009-09-07 20:23 . 2009-02-06 10:10 227840 -c----w- c:\windows\system32\dllcache\wmiprvse.exe
2009-09-07 20:23 . 2009-06-25 08:25 724480 -c----w- c:\windows\system32\dllcache\lsasrv.dll
2009-09-07 20:23 . 2009-02-09 10:51 681472 -c----w- c:\windows\system32\dllcache\advapi32.dll
2009-09-07 20:23 . 2009-02-09 10:51 693760 -c----w- c:\windows\system32\dllcache\ntdll.dll
2009-09-07 20:23 . 2009-02-09 10:51 473600 -c----w- c:\windows\system32\dllcache\fastprox.dll
2009-09-07 20:23 . 2009-02-09 10:51 453120 -c----w- c:\windows\system32\dllcache\wmiprvsd.dll
2009-09-07 20:23 . 2009-02-09 11:22 2025472 -c----w- c:\windows\system32\dllcache\ntkrpamp.exe
2009-09-07 20:23 . 2009-02-09 11:22 2146816 -c----w- c:\windows\system32\dllcache\ntkrnlmp.exe
2009-09-07 20:22 . 2008-05-08 14:02 203136 -c----w- c:\windows\system32\dllcache\rmcast.sys
2009-09-07 20:22 . 2008-10-24 11:21 455296 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
2009-09-07 20:22 . 2008-12-11 10:57 333952 -c----w- c:\windows\system32\dllcache\srv.sys
2009-09-07 20:22 . 2009-07-10 13:26 1315328 -c----w- c:\windows\system32\dllcache\msoe.dll
2009-09-07 20:21 . 2008-04-11 19:04 691712 -c----w- c:\windows\system32\dllcache\inetcomm.dll
2009-09-07 20:21 . 2008-06-14 17:31 271616 -c----w- c:\windows\system32\dllcache\bthport.sys
2009-09-07 20:21 . 2008-10-15 16:35 337408 -c----w- c:\windows\system32\dllcache\netapi32.dll
2009-09-07 20:15 . 2009-09-07 20:15 -------- d-----w- c:\windows\system32\bits
2009-09-07 20:15 . 2009-09-07 20:15 -------- d-----w- c:\windows\system32\ar
2009-09-07 20:15 . 2009-09-07 20:15 -------- d-----w- c:\windows\l2schemas
2009-09-07 20:05 . 2009-09-07 20:05 -------- d-----w- c:\program files\MSXML 4.0
2009-09-07 19:56 . 2009-09-07 19:56 -------- d-----w- c:\program files\Microsoft Works
2009-09-07 19:54 . 2009-09-07 19:54 -------- d-----w- c:\documents and settings\Administrator\Local Settings\Application Data\Microsoft Help
2009-09-07 19:54 . 2009-09-14 13:30 -------- d-----w- c:\documents and settings\All Users\Application Data\Microsoft Help
2009-09-07 19:54 . 2009-09-07 19:54 -------- d-----r- C:\MSOCache
2009-09-07 18:17 . 2009-09-07 19:58 -------- d-----w- c:\documents and settings\Administrator\Application Data\GetRightToGo
2009-09-07 18:12 . 2009-09-07 18:12 -------- d-----w- c:\program files\Windows Media Connect 2
2009-09-07 18:11 . 2009-09-10 14:29 -------- d-----w- c:\windows\system32\drivers\UMDF
2009-09-07 18:11 . 2009-09-07 18:11 -------- d-----w- c:\windows\system32\LogFiles
2009-09-07 17:53 . 2009-09-07 17:53 592 ----a-w- c:\windows\chgkey.vbs
2009-09-07 17:50 . 2009-09-07 17:50 -------- d-----w- c:\documents and settings\All Users\Application Data\Office Genuine Advantage
2009-09-06 23:50 . 2008-04-13 18:45 26112 ----a-w- c:\windows\system32\drivers\usbser.sys
2009-09-06 23:50 . 2008-03-21 10:57 14640 ------w- c:\windows\system32\spmsgXP_2k3.dll
2009-09-06 23:44 . 2009-03-19 11:48 136704 ----a-w- c:\windows\system32\drivers\nmwcdnsu.sys
2009-09-06 23:44 . 2009-03-19 11:48 8320 ----a-w- c:\windows\system32\drivers\nmwcdnsuc.sys
2009-09-06 23:44 . 2009-02-09 05:37 7808 ----a-w- c:\windows\system32\drivers\usbser_lowerfltj.sys
2009-09-06 23:44 . 2009-02-09 05:37 659968 ----a-w- c:\windows\system32\nmwcdcocls.dll
2009-09-06 23:44 . 2009-02-09 05:37 7808 ----a-w- c:\windows\system32\drivers\usbser_lowerflt.sys
2009-09-06 23:44 . 2009-02-09 05:37 22016 ----a-w- c:\windows\system32\drivers\ccdcmbo.sys
2009-09-06 23:44 . 2009-02-09 05:37 17664 ----a-w- c:\windows\system32\drivers\ccdcmb.sys
2009-09-06 22:49 . 2009-02-09 05:37 91136 ----a-w- c:\windows\system32\nmwcdcls.dll
2009-09-04 22:25 . 2009-09-04 22:25 -------- d-----w- c:\windows\system32\x64
2009-09-03 16:55 . 2001-09-18 11:03 32256 -c--a-w- c:\windows\system32\dllcache\diapi2NT.dll
2009-09-03 16:55 . 2001-08-17 09:12 37916 -c--a-w- c:\windows\system32\dllcache\cb102.sys
2009-09-03 16:55 . 2001-08-17 09:13 164923 -c--a-w- c:\windows\system32\dllcache\diapi2.sys
2009-09-03 16:55 . 2001-09-18 11:03 236032 -c--a-w- c:\windows\system32\dllcache\camext20.dll
2009-09-03 16:55 . 2001-09-18 11:03 74240 -c--a-w- c:\windows\system32\dllcache\camexo20.dll
2009-09-03 16:55 . 2001-08-17 11:04 171264 -c--a-w- c:\windows\system32\dllcache\camdrv30.sys
2009-09-03 16:55 . 2001-08-17 11:04 223232 -c--a-w- c:\windows\system32\dllcache\camdrv21.sys
2009-09-03 16:55 . 2001-08-17 11:05 314752 -c--a-w- c:\windows\system32\dllcache\camdro21.sys
2009-09-03 16:53 . 2001-08-17 11:07 101888 -c--a-w- c:\windows\system32\dllcache\adpu160m.sys
2009-09-03 16:52 . 2001-09-18 11:03 66048 -c--a-w- c:\windows\system32\dllcache\s3legacy.dll
2009-09-02 12:29 . 2009-09-02 12:31 -------- d-----w- c:\documents and settings\Administrator\Application Data\dvdcss
2009-08-31 16:22 . 2004-08-03 21:38 700928 ------w- c:\windows\system32\drivers\ati2mtag.sys
2009-08-30 13:47 . 2009-08-30 13:47 -------- d-----w- c:\program files\Crawler
2009-08-28 13:09 . 2009-08-28 13:09 -------- d-----w- c:\documents and settings\Administrator\Application Data\vlc
2009-08-28 11:38 . 2007-08-24 03:03 159744 ----a-r- c:\windows\system32\igfxres.dll
2009-08-27 23:48 . 2009-03-09 08:46 73392 ----a-w- c:\windows\system32\fsproflt.exe
2009-08-27 23:48 . 2008-06-05 15:37 43792 ----a-w- c:\windows\system32\drivers\FSPFltd.sys
2009-08-27 23:48 . 2009-08-27 23:50 -------- d-----w- c:\program files\Hide Folders 2009
2009-08-27 18:38 . 2009-08-27 18:38 -------- d-----w- c:\program files\MSECache
2009-08-27 18:32 . 2009-09-21 05:51 -------- d-----w- c:\documents and settings\Administrator\Application Data\OpenWith.org Downloaded Setups
2009-08-27 18:31 . 2009-08-27 18:31 -------- d-----w- c:\documents and settings\Administrator\Application Data\PCMM2009
2009-08-27 18:31 . 2009-08-27 18:31 -------- d-----w- c:\documents and settings\Administrator\Application Data\licenses

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2009-09-22 12:56 . 2009-08-04 11:40 -------- d-----w- c:\documents and settings\Administrator\Application Data\Free Download Manager
2009-09-21 22:42 . 2009-08-02 11:37 -------- d---a-w- c:\documents and settings\All Users\Application Data\TEMP
2009-09-21 19:14 . 2009-08-04 13:18 -------- d-----w- c:\documents and settings\Administrator\Application Data\cleaner
2009-09-21 05:50 . 2009-08-08 09:48 -------- d-----w- c:\documents and settings\Administrator\Application Data\OpenWith.org Cache
2009-09-21 00:56 . 2001-09-19 12:00 80130 ----a-w- c:\windows\system32\perfc001.dat
2009-09-21 00:56 . 2001-09-19 12:00 385566 ----a-w- c:\windows\system32\perfh001.dat
2009-09-20 01:42 . 2009-06-29 17:11 -------- d-----w- c:\program files\Kaspersky Lab
2009-09-20 01:33 . 2009-06-29 14:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2009-09-14 13:42 . 2009-06-29 16:59 -------- d-----w- c:\program files\Ace Utilities
2009-09-14 13:41 . 2009-08-04 11:36 -------- d-----w- c:\documents and settings\Administrator\Application Data\uTorrent
2009-09-14 00:35 . 2009-05-18 16:21 -------- d-----w- c:\program files\Windows Live
2009-09-10 14:30 . 2009-09-06 22:50 -------- d-----w- c:\documents and settings\Administrator\Application Data\PC Suite
2009-09-10 14:28 . 2009-09-06 22:51 -------- d-----w- c:\documents and settings\All Users\Application Data\PC Suite
2009-09-07 21:08 . 2009-08-02 14:04 348384 ----a-w- c:\windows\system32\GDIPFONTCACHEV1.DAT
2009-09-06 23:50 . 2009-09-06 23:50 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_ccdcmb_01007.Wdf
2009-09-06 23:50 . 2009-09-06 23:50 0 ---ha-w- c:\windows\system32\drivers\MsftWdf_Kernel_01007_Coinstaller_Critical.Wdf
2009-09-06 23:44 . 2009-09-06 22:49 -------- d-----w- c:\program files\Nokia
2009-09-06 23:43 . 2009-09-06 23:43 -------- d-----w- c:\program files\Common Files\Nokia
2009-09-06 23:41 . 2009-09-06 23:41 -------- d-----w- c:\documents and settings\All Users\Application Data\Installations
2009-09-06 23:03 . 2009-09-06 23:03 -------- d-----w- c:\documents and settings\All Users\Application Data\Nokia
2009-09-06 22:57 . 2009-09-06 22:57 -------- d-----w- c:\documents and settings\Administrator\Application Data\NSeries
2009-09-06 22:51 . 2009-09-06 22:49 -------- d-----w- c:\documents and settings\Administrator\Application Data\Nokia
2009-09-06 22:50 . 2009-09-06 22:50 -------- d-----w- c:\program files\Common Files\PCSuite
2009-09-06 22:50 . 2009-09-06 22:50 -------- d-----w- c:\program files\DIFX
2009-09-06 22:50 . 2009-09-06 22:50 -------- d-----w- c:\program files\PC Connectivity Solution
2009-09-02 00:28 . 2009-08-03 08:10 664 ----a-w- c:\windows\system32\d3d9caps.dat
2009-08-30 13:54 . 2009-05-18 16:17 -------- d-----w- c:\program files\Real_SC
2009-08-30 12:43 . 2009-06-30 06:53 -------- d-----w- c:\program files\BitSpirit
2009-08-30 12:42 . 2009-05-18 16:27 -------- d-----w- c:\program files\Golden Al-Wafi Translator
2009-08-28 19:58 . 2009-08-14 19:50 -------- d-----w- c:\documents and settings\Administrator\Application Data\Skype
2009-08-27 21:05 . 2009-06-29 17:26 -------- d-----w- c:\documents and settings\All Users\Application Data\DriverCure
2009-08-27 21:04 . 2009-08-03 13:18 -------- d-sh--w- c:\documents and settings\All Users\Application Data\{55A29068-F2CE-456C-9148-C869879E2357}
2009-08-27 20:27 . 2009-08-04 11:39 -------- d-----w- c:\documents and settings\Administrator\Application Data\DriverCure
2009-08-27 13:21 . 2009-08-13 17:57 -------- d-----w- c:\program files\Unlocker
2009-08-22 00:02 . 2009-08-22 00:02 -------- d-----w- c:\program files\MSBuild
2009-08-22 00:02 . 2009-08-22 00:02 -------- d-----w- c:\program files\Reference Assemblies
2009-08-21 16:38 . 2009-08-21 16:38 -------- d-----w- c:\documents and settings\Administrator\Application Data\DivX
2009-08-17 10:14 . 2009-08-06 09:09 -------- d-----w- c:\documents and settings\Administrator\Application Data\Paltalk
2009-08-17 09:41 . 2009-08-17 09:41 -------- d-----w- c:\program files\LtUcx
2009-08-14 08:30 . 2009-08-06 11:20 -------- d-----w- c:\program files\Text Copy Helper
2009-08-13 18:22 . 2009-08-13 17:57 -------- d-----w- c:\documents and settings\Administrator\Application Data\Desktopicon
2009-08-11 14:32 . 2009-05-18 16:29 -------- d-----w- c:\program files\Circle Developement
2009-08-11 14:32 . 2009-05-18 16:29 -------- d-----w- c:\program files\Messenger Plus! Live
2009-08-11 06:29 . 2009-08-11 06:29 -------- d-----w- c:\program files\UltraISO
2009-08-11 06:29 . 2009-08-11 06:29 -------- d-----w- c:\program files\Common Files\EZB Systems
2009-08-10 17:16 . 2009-05-18 15:43 -------- d-----w- c:\program files\Common Files\Adobe
2009-08-10 17:15 . 2009-05-17 14:30 -------- d--h--w- c:\program files\InstallShield Installation Information
2009-08-09 04:57 . 2009-07-31 01:12 -------- d-----w- c:\documents and settings\All Users\Application Data\Speedbit
2009-08-09 04:56 . 2009-08-05 07:40 -------- d-----w- c:\documents and settings\Administrator\Application Data\SlipStream
2009-08-07 16:50 . 2009-08-07 16:50 -------- d-----w- c:\program files\AbuMajed Abdullrahman Alabdully
2009-08-06 15:13 . 2009-08-06 11:18 -------- d-----w- c:\program files\Ad Muncher
2009-08-06 11:58 . 2009-08-06 11:58 -------- d-----w- c:\documents and settings\Administrator\Application Data\Thinstall
2009-08-06 11:20 . 2009-08-06 11:20 -------- d-----w- c:\documents and settings\Administrator\Application Data\Pretty-Soft
2009-08-06 09:15 . 2009-07-09 22:42 -------- d-----w- c:\program files\Paltalk Messenger
2009-08-05 08:59 . 2004-08-03 21:55 204800 ----a-w- c:\windows\system32\mswebdvd.dll
2009-08-04 13:18 . 2009-08-04 13:18 -------- d-----w- c:\documents and settings\Administrator\Application Data\CyberScrub
2009-08-04 11:43 . 2009-08-04 11:43 -------- d-----w- c:\documents and settings\Administrator\Application Data\TuneUp Software
2009-08-04 11:42 . 2009-08-04 11:42 -------- d-----w- c:\documents and settings\Administrator\Application Data\Uniblue
2009-08-04 11:40 . 2009-08-04 11:40 -------- d-----w- c:\documents and settings\Administrator\Application Data\Media Player Classic
2009-08-04 11:39 . 2009-08-04 11:39 -------- d-----w- c:\documents and settings\Administrator\Application Data\GRETECH
2009-08-04 11:36 . 2009-06-29 17:01 -------- d-----w- c:\program files\uTorrent
2009-08-03 13:43 . 2009-08-03 13:19 -------- d-----w- c:\program files\TuneUp Utilities 2009
2009-08-03 13:26 . 2009-08-03 13:26 362240 ----a-w- c:\windows\system32\TuneUpDefragService.exe
2009-08-03 13:22 . 2009-06-29 17:03 -------- d-----w- c:\program files\Common Files\Wise Installation Wizard
2009-08-03 13:19 . 2009-08-03 13:19 603904 ----a-w- c:\windows\system32\TUProgSt.exe
2009-08-03 09:34 . 2009-08-03 09:06 -------- d-----w- c:\program files\Invisible Browsing
2009-08-03 09:30 . 2001-09-19 12:00 32256 ----a-w- c:\windows\system32\ntsd.exe
2009-08-03 09:30 . 2001-09-19 12:00 132608 ----a-w- c:\windows\system32\rsvp.exe
2009-08-03 09:30 . 2009-05-18 14:04 176128 ----a-r- c:\windows\system32\S3Trayp.exe
2009-08-03 09:30 . 2001-09-19 12:00 47616 ----a-w- c:\windows\system32\drwtsn32.exe
2009-08-03 09:30 . 2001-09-19 12:00 9728 ----a-w- c:\windows\system32\winhlp32.exe
2009-08-03 09:20 . 2009-08-03 09:20 360320 ----a-w- c:\windows\system32\drivers\TCPIP.SYS.ORIGINAL
2009-08-03 09:11 . 2009-07-25 00:42 -------- d-----w- c:\program files\PC MightyMax 2009
2009-08-03 09:11 . 2009-06-30 06:51 -------- d-----w- c:\program files\Free Download Manager
2009-08-02 13:58 . 2009-05-17 14:33 -------- d-----w- c:\program files\Realtek
2009-08-02 13:56 . 2009-08-02 13:56 -------- d-----w- c:\program files\Microsoft IntelliType Pro
2009-08-02 13:54 . 2009-08-02 13:53 -------- d-----w- c:\program files\Microsoft IntelliPoint
2009-08-02 07:08 . 2009-05-18 16:29 -------- d-----w- c:\documents and settings\All Users\Application Data\avg8
2009-07-29 04:34 . 2004-08-03 21:55 119808 ----a-w- c:\windows\system32\t2embed.dll
2009-07-29 04:34 . 2001-09-19 12:00 81920 ----a-w- c:\windows\system32\fontsub.dll
2009-07-28 17:52 . 2009-07-28 17:44 -------- d-----w- c:\documents and settings\All Users\Application Data\Ulead Systems
2009-07-28 17:46 . 2009-07-28 17:46 -------- d-----w- c:\program files\Common Files\InterVideo
2009-07-28 17:46 . 2009-07-28 17:46 -------- d-----w- c:\documents and settings\All Users\Application Data\InterVideo
2009-07-28 17:45 . 2009-07-28 17:45 -------- d-----w- c:\program files\Windows Media Components
2009-07-28 17:45 . 2009-07-28 17:44 -------- d-----w- c:\program files\Common Files\Ulead Systems
2009-07-28 17:44 . 2009-07-28 17:44 -------- d-----w- c:\program files\Ulead Systems
2009-07-26 13:44 . 2009-07-26 13:44 48448 ----a-w- c:\windows\system32\sirenacm.dll
2009-07-25 00:55 . 2009-07-25 00:55 -------- d-----w- c:\program files\VideoLAN
2009-07-25 00:40 . 2009-07-25 00:40 -------- d-----w- c:\program files\OpenWith.org Desktop Tool
2009-07-17 18:55 . 2004-08-03 21:55 58880 ----a-w- c:\windows\system32\atl.dll
2009-07-13 20:43 . 2004-08-03 21:55 286208 ----a-w- c:\windows\system32\wmpdxm.dll
2009-07-12 11:27 . 2009-07-12 11:27 0 -c--a-w- c:\windows\nsreg.dat
2009-07-10 10:07 . 2009-07-10 10:07 306544 ----a-w- c:\windows\WLXPGSS.SCR
2009-07-03 16:55 . 2004-08-03 21:55 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-03 12:48 . 2009-07-03 12:48 219664 ----a-w- c:\windows\system32\klogon.dll
2009-07-03 12:45 . 2009-07-03 12:45 27507 ----a-w- c:\windows\system32\drivers\klopp.dat
2009-06-30 06:39 . 2009-06-30 06:39 47360 ----a-w- c:\windows\system32\drivers\Pcouffin.sys
2009-06-29 13:33 . 2009-05-17 14:29 16608 ----a-w- c:\windows\gdrv.sys
2009-06-25 18:35 . 2004-08-03 21:55 95744 ----a-w- c:\windows\system32\mqsec.dll
2009-06-25 18:35 . 2004-08-03 21:55 517120 ----a-w- c:\windows\system32\mqsnap.dll
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"msnmsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-07-26 3883856]
"ctfmon.exe"="c:\windows\system32\ctfmon.exe" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Persistence"="c:\windows\system32\igfxpers.exe" [2007-09-05 137752]
"avp"="c:\program files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe" [2009-07-03 303376]
"VTTimer"="VTTimer.exe" - c:\windows\system32\VTTimer.exe [2006-08-03 53248]
"S3Trayp"="S3trayp.exe" - c:\windows\system32\S3Trayp.exe [2009-08-03 176128]
"RTHDCPL"="RTHDCPL.EXE" - c:\windows\RTHDCPL.EXE [2008-12-30 18082304]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
"DriverCure"=c:\program files\ParetoLogic\DriverCure\DriverCure.exe -scan

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"RTHDCPL"=RTHDCPL.EXE
"IgfxTray"=c:\windows\system32\igfxtray.exe
"HotKeysCmds"=c:\windows\system32\hkcmd.exe
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" -osboot
"NSLauncher"=c:\program files\Nokia\Nokia Software Launcher\NSLauncher.exe /startup

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\Messenger\\msmsgs.exe"=
"c:\\Program Files\\uTorrent\\uTorrent.exe"=
"c:\\Documents and Settings\\All Users\\Application Data\\Kaspersky Lab Setup Files\\Kaspersky Internet Security 7.0.1.325\\English\\setup.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YServer.exe"=
"c:\\Program Files\\Paltalk Messenger\\paltalk.exe"=
"c:\\Program Files\\ooVoo\\ooVoo.exe"=
"c:\\Program Files\\Skype\\Phone\\Skype.exe"=
"c:\\Program Files\\Nokia\\Nokia Software Updater\\nsu_ui_client.exe"=
"c:\\Program Files\\Common Files\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"443:TCP"= 443:TCP:*isabledoVoo TCP المنفذ 443
"443:UDP"= 443:UDP:*isabledoVoo UDP المنفذ 443
"37674:TCP"= 37674:TCP:*isabledoVoo TCP المنفذ 37674
"37674:UDP"= 37674:UDP:*isabledoVoo UDP المنفذ 37674
"37675:UDP"= 37675:UDP:*isabledoVoo UDP المنفذ 37675

R0 FSProFilter;FSPro File Filter;c:\windows\system32\drivers\FSPFltd.sys [28/08/2009 02:48 ص 43792]
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\system32\drivers\klbg.sys [15/12/2008 08:41 م 33808]
R2 fsproflt;FSPro Filter Service;c:\windows\system32\fsproflt.exe [28/08/2009 02:48 ص 73392]
R2 fssfltr;FssFltr;c:\windows\system32\drivers\fssfltr_tdi.sys [14/09/2009 03:35 ص 54752]
R2 LANPkt;Realtek LANPkt Protocol Driver;c:\windows\system32\drivers\LANPkt.sys [02/08/2009 04:58 م 8568]
R2 TuneUp.ProgramStatisticsSvc;TuneUp Program Statistics Service;c:\windows\system32\TUProgSt.exe [03/08/2009 04:19 م 603904]
R3 klim5;Kaspersky Anti-Virus NDIS Filter;c:\windows\system32\drivers\klim5.sys [13/05/2009 05:46 م 31760]
R3 klmouflt;Kaspersky Lab KLMOUFLT;c:\windows\system32\drivers\klmouflt.sys [16/05/2009 08:59 م 19472]
S3 Diag69xp;Diag69xp;c:\windows\system32\drivers\diag69xp.sys [02/08/2009 04:58 م 11351]
S3 fsssvc;خدمة أمان العائلة في Windows Live;c:\program files\Windows Live\Family Safety\fsssvc.exe [05/08/2009 10:48 م 704864]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [07/09/2009 02:44 ص 136704]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [07/09/2009 02:44 ص 8320]
S3 RTLVLAN;Realtek VLAN Intermediate Driver;c:\windows\system32\drivers\RTLVLAN.SYS [02/08/2009 04:58 م 15360]
S3 S3GIGP;S3GIGP;c:\windows\system32\drivers\S3gIGPm.sys [18/05/2009 05:04 م 654848]

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
UxTuneUp

[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\system32\rundll32.exe" "c:\windows\system32\iedkcs32.dll",BrandIEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder

2009-09-22 c:\windows\Tasks\1-Click Maintenance.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-11-20 13:28]

2009-09-21 c:\windows\Tasks\DriverCure.job
- c:\program files\ParetoLogic\DriverCure\DriverCure.exe [2008-12-29 18:02]

2009-08-02 c:\windows\Tasks\Microsoft_Hardware_Launch_IPoint_exe.job
- c:\program files\Microsoft IntelliPoint\ipoint.exe [2009-06-01 10:51]

2009-08-02 c:\windows\Tasks\Microsoft_Hardware_Launch_IType_exe.job
- c:\program files\Microsoft IntelliType Pro\itype.exe [2009-06-01 10:43]

2009-09-21 c:\windows\Tasks\ParetoLogic Registration.job
- c:\program files\Common Files\ParetoLogic\UUS2\UUS.dll [2008-02-22 09:25]

2009-09-21 c:\windows\Tasks\ParetoLogic Update Version2.job
- c:\program files\Common Files\ParetoLogic\UUS2\Pareto_Update.exe [2008-02-22 09:25]

2009-09-22 c:\windows\Tasks\الصيانة بنقرة واحدة.job
- c:\program files\TuneUp Utilities 2009\OneClickStarter.exe [2008-11-20 13:28]
.
.
------- Supplementary Scan -------
.
uStart Page = about:blank
uInternet Settings,ProxyOverride = local
IE: Free Download Manager تحميل الفيديو بواسطة - file://c:\program files\Free Download Manager\dlfvideo.htm
IE: ت&صدير إلى Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: تحميل المحددة بفري داونلود مانيجر - file://c:\program files\Free Download Manager\dlselected.htm
IE: تنزيل الكل بفري داونلود مانيجر - file://c:\program files\Free Download Manager\dlall.htm
IE: تنزيل بفري داونلود مانيجر - file://c:\program files\Free Download Manager\dllink.htm
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {B7FDB0C3-4724-46D2-B8DB-6FA1DC63F7CA} - hxxp://67.228.197.18:1999/ReadUid.CAB
FF - ProfilePath - c:\documents and settings\Administrator\Application Data\Mozilla\Firefox\Profiles\dfsqte2k.default\
FF - prefs.js: network.proxy.type - 2
FF - component: c:\program files\Real\RealPlayer\browserrecord\components\nprpbrowserrecordplugin.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\

---- FIREFOX POLICIES ----
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: nglayout.initialpaint.delay - 600
FF - user.js: content.notify.interval - 600000
FF - user.js: content.max.tokenizing.time - 1800000
FF - user.js: content.switch.threshold - 600000
.
- - - - ORPHANS REMOVED - - - -

Notify-WgaLogon - (no file)
AddRemove-{B52F8C4B-FE88-4B59-9B80-1C93669D7DEB}_is1 - c:\program files\OpenWith.org



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer,

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

Rootkit scan 2009-09-22 15:57
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_USERS\S-1-5-21-484763869-1960408961-839522115-500\Software\Microsoft\Internet Explorer\User Preferences]
@Denied: (2) (Administrator)
"88D7D0879DAB32E14DE5B3A805A34F98AFF34F5977"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,39,00,6a,96,a8,1e,28,4f,8d,72,92,\
"2D53CFFC5C1A3DD2E97B7979AC2A92BD59BC839E81"=hex:01,00,00,00,d0,8c,9d,df,01,15,
d1,11,8c,7a,00,c0,4f,c2,97,eb,01,00,00,00,39,00,6a,96,a8,1e,28,4f,8d,72,92,\
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'explorer.exe'(3988)
c:\windows\system32\WININET.dll
c:\windows\system32\ieframe.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
------------------------ Other Running Processes ------------------------
.
c:\program files\Common Files\InterVideo\DeviceService\DevSvc.exe
c:\windows\system32\igfxsrvc.exe
c:\program files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
c:\windows\system32\wscntfy.exe
.
**************************************************************************
.
Completion time: 2009-09-22 16:00 - machine was rebooted
ComboFix-quarantined-files.txt 2009-09-22 13:00

Pre-Run: 34,734,129,152 bytes free
Post-Run: 34,693,169,152 bytes free

366 --- E O F --- 2009-09-14 13:31

 

[ابونايف]

يرفع

 

[النقيب]

اخوي عدت تشغيل الجهاز ؟؟
​

 

[سفير الدموع]

تقرير هايجاك جديد​

 

[ابونايف]

^
^

عدت التشغيل

الله يرضى عليك

 

[ابونايف]

تقرير هايجاك جديد

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:44:55 م, on 22/09/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\VTTimer.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
C:\WINDOWS\system32\fsproflt.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
D:\الصيانة\Zyzoom.org_Tool_V_1.0.exe
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\zyaoom Tool\Hijack.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = local
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:\Program Files\TechSmith\SnagIt 9\SnagItBHO.dll
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ievkbd.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: FDMIECookiesBHO Class - {CC59E0F9-7E43-44FA-9FAA-8377850BF205} - C:\Program Files\Free Download Manager\iefdm2.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O3 - Toolbar: SnagIt - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:\Program Files\TechSmith\SnagIt 9\SnagItIEAddin.dll
O4 - HKLM\..\Run: [VTTimer] VTTimer.exe
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [avp] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe"
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\ie_banner_deny.htm
O9 - Extra button: تدوين هذا في المدونة - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &تدوين هذا في Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: &لوحة مفاتيح ظاهرية - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: فحص عناوين المواقع (URL) - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\klwtbbho.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} -
O16 - DPF: {B7FDB0C3-4724-46D2-B8DB-6FA1DC63F7CA} (ReadUid.UserControlMacEntry) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~2\kloehk.dll
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2010\avp.exe
O23 - Service: Capture Device Service - InterVideo Inc. - C:\Program Files\Common Files\InterVideo\DeviceService\DevSvc.exe
O23 - Service: FSPro Filter Service (fsproflt) - FSPro Labs - C:\WINDOWS\system32\fsproflt.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
O23 - Service: Ulead Burning Helper (UleadBurningHelper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULCDRSvr.exe

--
End of file - 6443 bytes​

 

[ابونايف]

يبدو لي ان المشكله والله اعلم من المتصفح

وذلك بعد ان اجريت عمل صيانة كامله وحذف الملفات واستعادة افتراضيات المتصفح

ولكن دون جدوى

وأستعنت بالفايرفوكس ودخلت على المواقع التي يعلق بها متصفح الأكسبلورر وكانت النتيجه

الموقع شغال وبأحسن حال

فهل تكون المشكلة من المتصفح وما الحل ؟

 

[ابونايف]

يرفع

 

[ابونايف]

يرفع

 

[MAAX]

حدد التالي واحذفه

O16 - DPF: {B7FDB0C3-4724-46D2-B8DB-6FA1DC63F7CA} (ReadUid.UserControlMacEntry) -

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

طريقة الحذف ​

​

​

بعدها اذهب الى اضافة وازالة البرامج واحذف التولبار الموجود عندك (toolbar)>> ممكن ما يكون موجود
ثم نظف جهازك بهذه الاداة​

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

وبلغنا اخر النتائج​

 

[MAAX]

ايضا فعل التحديثات

اضغط على إبدأ >> تشغيل >> واكتب wuaucpl.cpl واضغط على موافق , واعمل كما بالصوره​

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

​

 

[ابونايف]

حذفت القيمة المصابه

والتحديثات مفعله


ولكن المشكلة لآ تزال

وهي اني عند الدخول الى بعض المواقع يعلق الجهاز ولأ استطيع التحكم به لآ عن إدآرة المهام ولا غيره

ويتوجب علي اعادة التشغيل مع العلم اني استعملت الفاير فوكس ودخلت على المواقع وكان بأحسن حال

شكراً لك ماكس
وجزاك الله خير الجزاء

 

[boob77]

جرب احذف الاكسبلورر 8 وارجع للسابع وشوف تروح المشكلة ولا لا ؟