[تم حل المشكلة]للخبراء تقرير

[مطفي_النور]

ما اتوقع الجهاز خالي بس الله يستر من تقريره

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 08:26:47, on 03/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\CManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Documents and Settings\tazebama.dl_
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{99FEDDC8-4ED1-413D-8057-39735280EE8E}: NameServer = 84.23.101.84 84.23.101.85
O23 - Service: AntiVir PersonalEdition Premium MailGuard (AntiVirMailService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium MailGuard helper service (AVEService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe (file missing)
O23 - Service: BandLuxe Service (BandLuxe_Service) - BandRich Inc. - C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
--
End of file - 3646 bytes

 

[bosaad]

عندك فايرس tazebama.dl_

جرب هذه الطريقة لحذفه

منقول

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

 

[bosaad]

شوف هذا الموضوع فيه نفس مشكلتك

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

​

 

[AbOdy]

حمل هذه الأداة

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

 

[مطفي_النور]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

حذفة اثنين وباقي وحد رفض ( tazebama.dll )

ولا حصلت في العمليات

 

[مطفي_النور]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

جاري الفحص

بس اخوي اذا حذفة الملفات ما تاثر على الملفات اللي عندي <<< جهاز العمل

 

[مطفي_النور]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

هذي صوره كل شوي تطلع عندي بعد استخدام الاداه

هذا التقرير بعد الفحص


Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:59:57, on 03/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\CManager.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Documents and Settings\tazebama.dl_
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{99FEDDC8-4ED1-413D-8057-39735280EE8E}: NameServer = 84.23.101.84 84.23.101.85
O23 - Service: AntiVir PersonalEdition Premium MailGuard (AntiVirMailService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium MailGuard helper service (AVEService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe (file missing)
O23 - Service: BandLuxe Service (BandLuxe_Service) - BandRich Inc. - C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
O23 - Service: Office Source Engine (ose) - Unknown owner - C:\Program Files\Common Files\Microsoft Shared\Source Engine\OSE.EXE (file missing)
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
--
End of file - 4331 bytes

 

[مطفي_النور]

للرفع

 

[مطفي_النور]

للرفع :er:

 

[MAAX]

اعمل فحص بهذه الاداة

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

وارفق التقرير هنا

 

[مطفي_النور]

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

وهذا التقرير



====== زيزوووم للأمن والحماية ======
======

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

======

====== تقرير المكافي ======

McAfee VirusScan for Win32 v5.40.0
Copyright (c) 1992-2008 McAfee, Inc. All rights reserved.
(408) 988-3832 EVALUATION COPY - Apr 16 2009
Scan engine v5.4.00 for Win32.
Virus data file v5751 created Sep 24 2009
Scanning for 559565 viruses, trojans and variants.

10/11/2009 15:56:59

Options:
/AD /ALL /MIME /DOHSM /MAILBOX /ALLOLE /ANALYZE /NOEXPIRE /PROGRAM /STREAMS /APPEND /REPORT MCAF.TXT /SUB /WINMEM /CLEAN /NOBREAK
Scanning C: []
Scanning C:\*.*
C:\Documents and Settings\Administrator\سطح المكتب\الدخيل\SmitfraudFix\Process.exe ... Found potentially unwanted program PrcViewer.
The file or process has been deleted.
C:\zyz_cleaner\zyzoom2.com ... Found potentially unwanted program PrcViewer.
The file or process has been deleted.
Summary report on C:\*.*
File(s)
Total files: ........... 44168
Clean: ................. 44149
Possibly Infected: ..... 0
Cleaned: ............... 0
Deleted: ............... 2
Non-critical Error(s): 1
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0
Scanning D: []
Scanning D:\*.*
Summary report on D:\*.*
File(s)
Total files: ........... 5173
Clean: ................. 5173
Possibly Infected: ..... 0
Cleaned: ............... 0
Master Boot Record(s): ......... 2
Possibly Infected: ..... 0
Boot Sector(s): ................ 1
Possibly Infected: ..... 0

Time: 00:39.37
Thank you for choosing to evaluate VirusScan from McAfee.
This version of the software is for Evaluation Purposes Only and may be
used for up to 30 days to determine if it meets your requirements. To
license the software, or to obtain assistance during the evaluation
process, please call (408) 988-3832. If you choose not to license the
software, you need to remove it from your system. All use of this
software is conditioned upon compliance with the license terms set forth
in the README.TXT file.

====== تقرير الافيرا ======

AntiVir/Win32-Console Version 7.6.0.59, (Jan 29 2008, 18:11:09)
Copyright(c) 2007 Avira GmbH
Report created on 10/11/2009 16:36:38
Command line: -allfiles -allhard -s -z -e -ren -r1 -rfavir.txt -ra -alltypes
-nobreak
AVPack-Version: 7.6.0.3
VDF version: 7.1.6.37 - FUP(0), created 09/25/2009
AVCLS license: 2203702813 for tyuyt jhyt
Drives:
A: Floppy
C: Harddisk
D: Harddisk
E: CDROM
checking the master boot record of drive 80h
checking the boot record of drive C:
checking the boot record of drive D:
checking drive/path (list): C:\
C:\pagefile.sys
Date: 11.10.2009 Time: 12:53:28 Size: 402653184
ERROR: could not open file for read access
file was not scanned at all!
C:\Documents and Settings\Administrator\ntuser.dat
Date: 11.10.2009 Time: 12:45:50 Size: 4980736
ERROR: could not open file for read access
file was not scanned at all!
C:\Documents and Settings\Administrator\ntuser.dat.LOG
Date: 11.10.2009 Time: 12:56:08 Size: 274432
ERROR: could not open file for read access
file was not scanned at all!
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
Date: 7.10.2009 Time: 09:48:54 Size: 208896
ERROR: could not open file for read access
file was not scanned at all!
C:\Documents and Settings\Administrator\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
Date: 11.10.2009 Time: 12:53:56 Size: 8192
ERROR: could not open file for read access
file was not scanned at all!
C:\Documents and Settings\Administrator\سطح المكتب\الدخيل\SmitfraudFix.exe
Date: 5.10.2009 Time: 17:23:52 Size: 1885088
ALERT: [SPR/Tool.Reboot.F] C:\Documents and Settings\Administrator\سطح المكتب\الدخيل\SmitfraudFix.exe --> SmitfraudFix\Reboot.exe <<< Contains detection pattern of the SPR/Tool.Reboot.F program
ALERT: [SPR/Tool.Hardoff.A] C:\Documents and Settings\Administrator\سطح المكتب\الدخيل\SmitfraudFix.exe --> SmitfraudFix\restart.exe <<< Contains detection pattern of the SPR/Tool.Hardoff.A program
C:\Documents and Settings\Administrator\سطح المكتب\الدخيل\SmitfraudFix\Reboot.exe
Date: 3.09.2008 Time: 08:39:16 Size: 24576
ALERT: [SPR/Tool.Reboot.F] C:\Documents and Settings\Administrator\سطح المكتب\الدخيل\SmitfraudFix\Reboot.exe <<< Contains detection pattern of the SPR/Tool.Reboot.F program
file is not repairable
file renamed.
C:\Documents and Settings\Administrator\سطح المكتب\الدخيل\SmitfraudFix\restart.exe
Date: 7.03.2006 Time: 19:45:34 Size: 16384
ALERT: [SPR/Tool.Hardoff.A] C:\Documents and Settings\Administrator\سطح المكتب\الدخيل\SmitfraudFix\restart.exe <<< Contains detection pattern of the SPR/Tool.Hardoff.A program
file is not repairable
file renamed.
C:\Documents and Settings\NetworkService\NTUSER.DAT
Date: 11.10.2009 Time: 12:41:50 Size: 229376
ERROR: could not open file for read access
file was not scanned at all!
C:\Documents and Settings\NetworkService\ntuser.dat.LOG
Date: 11.10.2009 Time: 12:53:50 Size: 20480
ERROR: could not open file for read access
file was not scanned at all!
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat
Date: 8.10.2009 Time: 16:07:14 Size: 8192
ERROR: could not open file for read access
file was not scanned at all!
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG
Date: 11.10.2009 Time: 12:53:50 Size: 8192
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\default
Date: 11.10.2009 Time: 12:41:50 Size: 409600
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\default.LOG
Date: 11.10.2009 Time: 12:53:34 Size: 8192
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\SAM
Date: 11.10.2009 Time: 12:41:50 Size: 24576
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\SAM.LOG
Date: 11.10.2009 Time: 12:53:54 Size: 1024
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\SECURITY
Date: 11.10.2009 Time: 12:41:50 Size: 49152
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\SECURITY.LOG
Date: 11.10.2009 Time: 12:53:48 Size: 16384
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\software
Date: 11.10.2009 Time: 12:41:50 Size: 21553152
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\software.LOG
Date: 11.10.2009 Time: 12:58:02 Size: 69632
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\system
Date: 11.10.2009 Time: 12:53:28 Size: 5505024
ERROR: could not open file for read access
file was not scanned at all!
C:\WINDOWS\system32\config\system.LOG
Date: 11.10.2009 Time: 12:55:52 Size: 950272
ERROR: could not open file for read access
file was not scanned at all!

checking drive/path (list): D:\
D:\الدخيل\SmitfraudFix\Reboot.Vxe
Date: 3.09.2008 Time: 08:39:16 Size: 24576
ALERT: [SPR/Tool.Reboot.F] D:\الدخيل\SmitfraudFix\Reboot.Vxe <<< Contains detection pattern of the SPR/Tool.Reboot.F program
file is not repairable
file renamed.
D:\الدخيل\SmitfraudFix\restart.Vxe
Date: 7.03.2006 Time: 19:45:34 Size: 16384
ALERT: [SPR/Tool.Hardoff.A] D:\الدخيل\SmitfraudFix\restart.Vxe <<< Contains detection pattern of the SPR/Tool.Hardoff.A program
file is not repairable
file renamed.

----- scan results -----
directories: 2670
files: 200409
alerts: 6
suspicious: 0
repaired: 0
deleted: 0
renamed: 4
scan time: 00:50:16
--------------------------
Thank you for using AntiVir


====== تقرير الكاسبرسكي ======

2009-10-11 17:28:02 Scan_Objects$0005 starting 1%
; --- Settings ---
; Action on detect: Disinfect automatically
; Scan objects: All objects
; Try disinfect: Yes
; Try delete: Yes
; Try delete container: Yes
; Exclude by mask: No
; Include by mask: No
; Objects to scan:
; "ALL" Enable=Yes Recursive=Yes
; ------------------
2009-10-11 17:28:02 Scan_Objects$0005 running 1%
2009-10-11 17:33:52 C:\Documents and Settings\All Users\Application Data\Downloaded Installations\{49AD8D2A-1643-458B-9EE7-7C091FDE10A5}\AVG_IDS_setup.msi//Data1.cab//internallist.zip/internalList.dat password protected
2009-10-11 17:33:53 C:\Documents and Settings\All Users\Application Data\Downloaded Installations\{49AD8D2A-1643-458B-9EE7-7C091FDE10A5}\AVG_IDS_setup.msi//Data1.cab//internallist.zip/info.enc password protected
2009-10-11 17:33:53 C:\Documents and Settings\All Users\Application Data\Downloaded Installations\{49AD8D2A-1643-458B-9EE7-7C091FDE10A5}\AVG_IDS_setup.msi//Data1.cab//internallist.zip/v=232;l=EN_US;t=2 password protected
2009-10-11 18:07:13 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/Audio/Click1.ogg password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/Audio/High1.ogg password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/autorun.cdd password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/Buttons/button.btn password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/Docs/kav new key downloader.exe password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/Docs/kis new key downloader.exe password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/Icons/ico.ico password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/Images/630_13.png password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/AutoPlay/Images/untitled.jpg password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/autorun.exe password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336104.exe/ico.ico password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/Audio/Click1.ogg password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/Audio/High1.ogg password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/autorun.cdd password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/Buttons/button.btn password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/Docs/kav new key downloader.exe password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/Docs/kis new key downloader.exe password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/Icons/ico.ico password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/Images/630_13.png password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/AutoPlay/Images/untitled.jpg password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/autorun.exe password protected
2009-10-11 18:07:14 C:\System Volume Information\_restore{AB83C8C4-82BA-4C23-9535-E134A74C3428}\RP188\A0336106.exe/ico.ico password protected
2009-10-11 18:52:53 Scan_Objects$0005 completed
; --- Statistics ---
; Time Start: 2009-10-11 17:27:17
; Time Finish: 2009-10-11 18:52:52
; Completion: 100%
; Processed objects: 112228
; Total detected: 0
; Detected exact: 0
; Suspicions: 0
; Treats detected: 0
; Untreated: 0
; Disinfected: 0
; Quarantined: 0
; Deleted: 0
; Skipped: 0
; Archived: 2009
; Packed: 888
; Password protected: 25
; Corrupted: 0
; Errors: 0
; Last object:
; ------------------

====== لتحليل التقرير ... فضلاا ضعه هنا ======

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

====== مع تحيات أخوانكم ======
بلال & ماكس & زيزوووم

 

[MAAX]

تمام
اعمل تقرير هايجاك جديد بالله

 

[مطفي_النور]

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 22:15:20, on 11/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\msfeedssync.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\CManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file)
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O9 - Extra button: تدوين هذا في المدونة - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &تدوين هذا في Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{99FEDDC8-4ED1-413D-8057-39735280EE8E}: NameServer = 84.23.101.84 84.23.101.85
O23 - Service: AntiVir PersonalEdition Premium MailGuard (AntiVirMailService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AntiVir PersonalEdition Premium MailGuard helper service (AVEService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe (file missing)
O23 - Service: BandLuxe Service (BandLuxe_Service) - BandRich Inc. - C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
--
End of file - 7018 bytes

 

[MAAX]

حدد التالي واحذفه

R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - (no file

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\5.3.4501.1418\s wg.dll

O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Program Files\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll

O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wltcore.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files\Google\Google Toolbar\GoogleToolbar_32.dll

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe

طريقة الحذف

بعدها اذهب الى اضافة وازالة البرامج واحذف التولبار الموجود عندك (toolbar)>> ممكن ما يكون موجود
ثم نظف جهازك بهذه الاداة

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

وبلغنا اخر النتائج

 

[مطفي_النور]

بشر :u:

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 23:23:36, on 11/10/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Program Files\Alwil Software\Avast4\ashDisp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\msfeedssync.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\CManager.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Windows Live\Toolbar\wltuser.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Live\Contacts\wlcomm.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarManager_E582EA556D8DE101.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Program Files\Alwil Software\Avast4\setup\avast.setup
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wltcore.dll
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [avast!] "C:\Program Files\Alwil Software\Avast4\ashDisp.exe"
O4 - HKCU\..\Run: [ccleaner] "C:\Program Files\CCleaner\CCleaner.exe" /AUTO
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: تدوين هذا في المدونة - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &تدوين هذا في Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O10 - Unknown file in Winsock LSP: c:\windows\system32\nwprovau.dll
O17 - HKLM\System\CCS\Services\Tcpip\..\{99FEDDC8-4ED1-413D-8057-39735280EE8E}: NameServer = 84.23.101.84 84.23.101.85
O23 - Service: AntiVir PersonalEdition Premium MailGuard (AntiVirMailService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avmailc.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium Scheduler (AntiVirScheduler) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\sched.exe (file missing)
O23 - Service: AntiVir PersonalEdition Premium Guard (AntiVirService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avguard.exe (file missing)
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
O23 - Service: AntiVir PersonalEdition Premium MailGuard helper service (AVEService) - Unknown owner - C:\Program Files\Avira\AntiVir PersonalEdition Premium\avesvc.exe (file missing)
O23 - Service: BandLuxe Service (BandLuxe_Service) - BandRich Inc. - C:\Program Files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
--
End of file - 6164 bytes

 

[MAAX]

عندي تمام
انت كيف الوضع ؟

 

[مطفي_النور]

وانا اشتغل على الانتر نت واقفل صفحة وافتح صفحة تحس فيه بلا بالقوه يفتح

وشنو معنااا هذي

اول شي ابدء وبعدين تشغيل system.ini


; for 16-bit app support
[drivers]
wave=mmdrv.dll
timer=timer.drv
[mci]
[driver32]
[386enh]
woafont=dosapp.FON
EGA80WOA.FON=EGA80850.FON
EGA40WOA.FON=EGA40850.FON
CGA80WOA.FON=CGA80850.FON
CGA40WOA.FON=CGA40850.FON
FileSysChange=off

 

[MAAX]

معناه كلاام فاضي :d:
هذي طريقة بعيدة عن الصحة ولا تشغل نفسك فيها

 

[مطفي_النور]

طيب اذا جيت افتح اي شي ما سنجر او غيره يطول

 

[MAAX]

عادي يطول الى 5 ثواني او 7
حسب مواصفات جهازك ايضا