04-07-2009, 01:21 PM
|
| |
رد: اطرح مشكلتك او طلبك لأي شيء هنا وسنجيبك يالغالي لازم التقرير كامل بهذا الشكل ليتم تحديد المشكلة من أي قرص ومن أي ملف بالذات كماهي الصورة التالية :
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 01 11 م, on 04/07/09
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.1870 2)
Boot mode: Normal
Running processes:
C:\Windows\syst em32\taskeng.ex e
C:\Windows\syst em32\Dwm.exe
C:\Windows\Expl orer.EXE
C:\Program Files\Java\jre6 \bin\jusched.ex e
C:\Program Files\Synaptics \SynTP\SynTPEnh .exe
C:\Program Files\Toshiba\B luetooth Toshiba Stack\ItSecMng. exe
C:\Program Files\Toshiba\C onfigFree\NDSTr ay.exe
C:\Program Files\Google\Go ogle Desktop Search\GoogleDe sktop.exe
C:\Program Files\Toshiba TEMPRO\Toshiba. Tempo.UI.TrayAp plication.exe
C:\Windows\RtHD VCpl.exe
C:\Program Files\ATI Technologies\AT I.ACE\Core-Static\MOM.exe
C:\Program Files\Camera Assistant Software for Toshiba\traybar .exe
C:\Program Files\Toshiba\H DMICtrlMan\HDMI CtrlMan.exe
C:\Program Files\Toshiba\P ower Saver\TPwrMain. exe
C:\Program Files\Toshiba\S moothView\Smoot hView.exe
C:\Program Files\Toshiba\F lashCards\TCrdM ain.exe
C:\Program Files\Toshiba\R egistration\Tos hibaRegistratio n.exe
C:\Program Files\Yahoo!\Se arch Protection\Sear chProtection.ex e
C:\Program Files\Unlocker\ UnlockerAssista nt.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
C:\Program Files\Common Files\Real\Upda te_OB\realsched .exe
C:\Program Files\Windows Sidebar\sidebar .exe
C:\Windows\ehom e\ehtray.exe
C:\Program Files\Windows Media Player\wmpnscfg .exe
C:\Program Files\Toshiba\B luetooth Toshiba Stack\TosBtMng. exe
C:\Program Files\WinZip\WZ QKPICK.EXE
C:\Windows\ehom e\ehmsas.exe
C:\Program Files\Toshiba\H DMICtrlMan\HCMS oundChanger.exe
C:\Program Files\Windows Sidebar\sidebar .exe
C:\Program Files\Toshiba\C onfigFree\CFSwM gr.exe
c:\Program Files\Toshiba\B luetooth Toshiba Stack\TosA2dp.e xe
C:\Program Files\ATI Technologies\AT I.ACE\Core-Static\CCC.exe
C:\Program Files\Google\Go ogle Desktop Search\GoogleDe sktop.exe
c:\Program Files\Toshiba\B luetooth Toshiba Stack\TosBtHid. exe
c:\Program Files\Toshiba\B luetooth Toshiba Stack\TosBtHsp. exe
c:\Program Files\Toshiba\B luetooth Toshiba Stack\TosAVRC.e xe
c:\Program Files\Toshiba\B luetooth Toshiba Stack\tosOBEX.e xe
C:\Program Files\Toshiba\B luetooth Toshiba Stack\TosBtProc .exe
C:\Program Files\Synaptics \SynTP\SynTPHel per.exe
C:\Program Files\Windows Live\Messenger\ msnmsgr.exe
C:\Program Files\Windows Live\Contacts\w lcomm.exe
C:\Program Files\Internet Explorer\IEXPLO RE.EXE
C:\Program Files\Internet Explorer\IEXPLO RE.EXE
C:\Program Files\Windows Live\Toolbar\wl tuser.exe
C:\Program Files\Internet Explorer\iexplo re.exe
C:\Program Files\Internet Explorer\iexplo re.exe
C:\Program Files\Internet Explorer\iexplo re.exe
C:\Windows\syst em32\Macromed\F lash\FlashUtil1 0b.exe
C:\Program Files\Internet Explorer\iexplo re.exe
C:\Program Files\Trend Micro\HijackThi s\HijackThis.ex e
C:\Windows\syst em32\SearchFilt erHost.exe
R1 - HKLM\Software\M icrosoft\Intern et Explorer\Main,D efault_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\M icrosoft\Intern et Explorer\Main,D efault_Search_U RL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\M icrosoft\Intern et Explorer\Main,S earch Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\M icrosoft\Intern et Explorer\Main,S tart Page = http://home.sweetim.com
R0 - HKCU\Software\M icrosoft\Intern et Explorer\Toolba r,LinksFolderNa me =
R3 - URLSearchHook: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Co mpanion\Install s\cpn0\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Co mpanion\Install s\cpn0\yt.dll
O2 - BHO: AcroIEHelperStu b - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acr obat\ActiveX\Ac roIEHelperShim. dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\Real Player\rpbrowse rrecordplugin.d ll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ievkbd.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft \Search Enhancement Pack\Search Helper\SEPsearc hhelperie.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiv eLogin.dll
O2 - BHO: MSN Toolbar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files\MSN\Toolb ar\3.0.1203.0\m sneshellx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6 \bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Program Files\Windows Live\Toolbar\wl tcore.dll
O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\Program Files\Yahoo!\Co mpanion\Install s\cpn0\YTSingle Instance.dll
O3 - Toolbar: &Windows Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Program Files\Windows Live\Toolbar\wl tcore.dll
O3 - Toolbar: Yahoo! Toolbar - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Co mpanion\Install s\cpn0\yt.dll
O3 - Toolbar: MSN Toolbar - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - C:\Program Files\MSN\Toolb ar\3.0.1203.0\m sneshellx.dll
O3 - Toolbar: &Save Flash - {4064EA35-578D-4073-A834-C96D82CBCF40} - C:\Program Files\Save Flash\SaveFlash .dll
O4 - HKLM\..\Run: [SunJavaUpdateSc hed] "C:\Program Files\Java\jre6 \bin\jusched.ex e"
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics \SynTP\SynTPEnh .exe
O4 - HKLM\..\Run: [ITSecMng] %ProgramFiles%\ TOSHIBA\Bluetoo th Toshiba Stack\ItSecMng. exe /START
O4 - HKLM\..\Run: [NDSTray.exe] NDSTray.exe
O4 - HKLM\..\Run: [topi] C:\Program Files\TOSHIBA\T oshiba Online Product Information\top i.exe -startup
O4 - HKLM\..\Run: [Google Desktop Search] "C:\Program Files\Google\Go ogle Desktop Search\GoogleDe sktop.exe" /startup
O4 - HKLM\..\Run: [Google EULA Launcher] c:\Program Files\Google\Go ogle EULA\GoogleEULA Launcher.exe IE PA
O4 - HKLM\..\Run: [Toshiba TEMPO] C:\Program Files\Toshiba TEMPRO\Toshiba. Tempo.UI.TrayAp plication.exe
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [StartCCC] "C:\Program Files\ATI Technologies\AT I.ACE\Core-Static\CLIStart .exe"
O4 - HKLM\..\Run: [Camera Assistant Software] "C:\Program Files\Camera Assistant Software for Toshiba\traybar .exe" /start
O4 - HKLM\..\Run: [HDMICtrlMan] C:\Program Files\TOSHIBA\H DMICtrlMan\HDMI CtrlMan.exe
O4 - HKLM\..\Run: [TPwrMain] %ProgramFiles%\ TOSHIBA\Power Saver\TPwrMain. EXE
O4 - HKLM\..\Run: [HSON] %ProgramFiles%\ TOSHIBA\TBS\HSO N.exe
O4 - HKLM\..\Run: [SmoothView] %ProgramFiles%\ Toshiba\SmoothV iew\SmoothView. exe
O4 - HKLM\..\Run: [00TCrdMain] %ProgramFiles%\ TOSHIBA\FlashCa rds\TCrdMain.ex e
O4 - HKLM\..\Run: [Toshiba Registration] C:\Program Files\Toshiba\R egistration\Tos hibaRegistratio n.exe
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Rea der 9.0\Reader\Read er_sl.exe"
O4 - HKLM\..\Run: [YSearchProtecti on] "C:\Program Files\Yahoo!\Se arch Protection\Sear chProtection.ex e"
O4 - HKLM\..\Run: [UnlockerAssista nt] "C:\Program Files\Unlocker\ UnlockerAssista nt.exe"
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe"
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Upda te_OB\realsched .exe" -osboot
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar .exe
O4 - HKCU\..\Run: [Search Protection] C:\Program Files\Yahoo!\Se arch Protection\Sear chProtection.ex e
O4 - HKCU\..\Run: [YSearchProtecti on] C:\Program Files\Yahoo!\Se arch Protection\Sear chProtection.ex e
O4 - HKCU\..\Run: [ehTray.exe] C:\Windows\ehom e\ehTray.exe
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG .exe
O4 - .DEFAULT User Startup: TRDCReminder.ln k = C:\Program Files\Toshiba\T RDCReminder\TRD CReminder.exe (User 'Default user')
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Cal ibration\Adobe Gamma Loader.exe
O4 - Global Startup: Bluetooth Manager.lnk = ?
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Program Files\WinZip\WZ QKPICK.EXE
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MIC ROS~2\OFFICE11\ EXCEL.EXE/3000
O8 - Extra context menu item: إضافة إلى حاجب إعلان الشعار - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\ie_banner_ deny.htm
O9 - Extra button: إحصائيات حماية حركة زيارة الويب - {1F460357-8A94-4D71-9CA3-AA4ACF32ED8E} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\SCIEPlgn.d ll
O9 - Extra button: تدوين هذا في المدونة - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\Wri terBrowserExten sion.dll
O9 - Extra 'Tools' menuitem: &تدوين هذا في Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\Wri terBrowserExten sion.dll
O9 - Extra button: eBay.co.uk - Buy It Sell It Love It - {76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/710-44557-9400-3/4 (file missing)
O9 - Extra button: Amazon.co.uk - {8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/...k-21&site=home (file missing)
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MIC ROS~2\OFFICE11\ REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Co mmon\Yinsthelpe r.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/ge...sh/swflash.cab
O23 - Service: Agere Modem Call Progress Audio (AgereModemAudi o) - Agere Systems - C:\Windows\syst em32\agrsmsvc.e xe
O23 - Service: Ati External Event Utility - ATI Technologies Inc. - C:\Windows\syst em32\Ati2evxx.e xe
O23 - Service: Kaspersky Internet Security (AVP) - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2009\avp.exe
O23 - Service: ConfigFree Service - TOSHIBA CORPORATION - C:\Program Files\TOSHIBA\C onfigFree\CFSvc s.exe
O23 - Service: getPlus(R) Helper - NOS Microsystems Ltd. - C:\Program Files\NOS\bin\g etPlus_HelperSv c.exe
O23 - Service: Google Desktop Manager 5.7.802.22438 (GoogleDesktopM anager-022208-143751) - Google - C:\Program Files\Google\Go ogle Desktop Search\GoogleDe sktop.exe
O23 - Service: خدمة تحديث Google (gupdate1c9eb58 9f068990) (gupdate1c9eb58 9f068990) - Google Inc. - C:\Program Files\Google\Up date\GoogleUpda te.exe
O23 - Service: SmartFaceVWatch Srv - Toshiba - C:\Program Files\Toshiba\S martFaceV\Smart FaceVWatchSrv.e xe
O23 - Service: Notebook Performance Tuning Service (TempoMonitorin gService) - Toshiba Europe GmbH - C:\Program Files\Toshiba TEMPRO\TempoSVC .exe
O23 - Service: TOSHIBA Navi Support Service (TNaviSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\T OSHIBA DVD PLAYER\TNaviSrv .exe
O23 - Service: TOSHIBA Optical Disc Drive Service (TODDSrv) - TOSHIBA Corporation - C:\Windows\syst em32\TODDSrv.ex e
O23 - Service: TOSHIBA Power Saver (TosCoSrv) - TOSHIBA Corporation - C:\Program Files\Toshiba\P ower Saver\TosCoSrv. exe
O23 - Service: TOSHIBA Bluetooth Service - TOSHIBA CORPORATION - c:\Program Files\Toshiba\B luetooth Toshiba Stack\TosBtSrv. exe
O23 - Service: TOSHIBA SMART Log Service - TOSHIBA Corporation - C:\Program Files\TOSHIBA\S MARTLogService\ TosIPCSrv.exe
O23 - Service: Ulead Burning Helper (UleadBurningHe lper) - Ulead Systems, Inc. - C:\Program Files\Common Files\Ulead Systems\DVD\ULC DRSvr.exe
O23 - Service: Yahoo! Updater (YahooAUService ) - Yahoo! Inc. - C:\Program Files\Yahoo!\So ftwareUpdate\Ya hooAUService.ex e
--
End of file - 11824 bytes
|