اذهبي الى المحتوى
** الفقيرة الى الله **

موقع الدرر السنية لا يفتح معي :(

المشاركات التي تم ترشيحها

السلام عليكم ورحمة الله وبركاته

 

عندي مشكلة : موقع الدرر السنية لا يفتح معي منذ مدة طويلة

 

و السبب ليس في الجهاز

 

يا ترى مشرفتي الحبيبة ما السبب ؟؟؟؟؟؟؟؟

شارك هذه المشاركه


رابط المشاركه
شارك

وعليكم السلام ورحمة الله وبركاته

 

حياكِ الله ياحبيبة

 

بعتذر عن التأخير فى الرد

 

طيب حبيبتى هل كانت تفتح معكِ ثم فجأة اصبح الموقع لايفتح؟

 

وهل قمتى بفرمته الجهاز قريباً؟

 

ايضاً بارك الله فيكِ مانوع الانتى فيرس لديكِ؟

 

فى انتظارك بإذن الله

شارك هذه المشاركه


رابط المشاركه
شارك

أختي الحبيبة زمردة

لا داعي للإعتذار حبيبتي

نعم الموقع كان يقتح معي عادي و لكن منذ أيام حوالي 20 يوما أو أكثر 

أصبح الموقع لا يفتح معي و لا أدري ما السبب

بالنسبة للفرمته لا لم نعمل له فرمته 

و بالنسبة للأنتي فيروس للأسف ليس عندي أي أنتي فيروس

:cry:

و فيكِ بارك الرحمن حبيبتي 

أنتظر ردك بفارغ الصبر

شارك هذه المشاركه


رابط المشاركه
شارك

كنت أظن ان عمل التقرير صعب جدا  و لكنه طلع سهل جدا و الحمد لله

ها هو التقرير يا غالية

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 11:29:59.PD, on 2010-11-20

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2900.5512)

Boot mode: Normal

 

Running processes:

C:\windows\System32\smss.exe

C:\windows\system32\winlogon.exe

C:\windows\system32\services.exe

C:\windows\system32\lsass.exe

C:\windows\system32\svchost.exe

C:\windows\System32\svchost.exe

C:\windows\system32\spoolsv.exe

C:\Documents and Settings\All Users\Application Data\BarDiscover\bardiscover151.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\windows\system32\svchost.exe

C:\windows\system32\WgaTray.exe

C:\WINDOWS\system32\sstext3d.scr

C:\windows\Explorer.exe

C:\Program Files\BarDiscover\bardiscover.exe

C:\WINDOWS\system32\SSVICHOSST.exe

C:\Golden Filter Pro\GFPro.exe

C:\windows\system32\wuauclt.exe

C:\Program Files\Hotbar\bin\11.0.175.0\HotbarSA.exe

C:\windows\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\windows\system32\logoneui.exe

C:\windows\system32\SSVICHOSST.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Program Files\Orbitdownloader\orbitdm.exe

C:\Program Files\Orbitdownloader\orbitnet.exe

C:\windows\PCHealth\HelpCtr\Binaries\HelpSvc.exe

C:\Program Files\Opera\opera.exe

C:\windows\TEMP\winwxtvi.exe

C:\windows\TEMP\winuuyirl.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://famous2.topcities.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll

F2 - REG:system.ini: Shell=Explorer.exe logoneui.exe

O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll

O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: ShoppingReport2 - {258C9770-1713-4021-8D7E-1F184A2BD754} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll

O2 - BHO: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Hotbar - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Hotbar\bin\11.0.175.0\HostIE.dll

O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL (file missing)

O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll

O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

O3 - Toolbar: Hotbar - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Hotbar\bin\11.0.175.0\HostIE.dll

O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [GoldenFilterPro] C:\Golden Filter Pro\GFPro.exe

O4 - HKLM\..\Run: [HotbarSA] "C:\Program Files\Hotbar\bin\11.0.175.0\HotbarSA.exe"

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [firewall 2008] C:\windows\system32\logoneui.exe

O4 - HKCU\..\Run: [Yahoo Messengger] C:\windows\system32\SSVICHOSST.exe

O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP

O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Hotbar\bin\11.0.175.0\Weather.exe" -auto

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe -update plugin

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')

O4 - Startup: Vidal CD.lnk = D:\VidalCD\VidalCD.exe

O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm

O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202

O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL

O9 - Extra button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{23E9BD65-04AB-48D2-9A2A-CA2CCD35378A}: NameServer = 41.221.20.4 66.28.0.45

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: Antiwpa - C:\windows\SYSTEM32\antiwpa.dll

O23 - Service: BarDiscover Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\BarDiscover\bardiscover151.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

 

--

End of file - 9582 bytes

 

جزاكِ الله خيرا

شارك هذه المشاركه


رابط المشاركه
شارك

حياكِ الله ياحبيبة

 

الحمد لله : )

 

طيب ياجميل الجهاز حالته صعبة جداً

 

وبه قيم كثيرة خطأ

 

وطبعاً مشكلة الا يكون على الجهاز انتى فيرس

 

بإذن الله ربنا يعينا ونضبطه وبحمل انتى فيرس

 

شغلي البرنامج مرة أخرى واعملى سكان

 

وبعد مايظهر لكِ التقرير الذى فى البرنامج نفسه وليس ملف التيكست اتبعى التالى

 

علمى صح أمام هذه القيم وانتبهى بارك الله فيكِ حتى لانفسد شىء

 

R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

 

R3 - URLSearchHook: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll

 

F2 - REG:system.ini: Shell=Explorer.exe logoneui.exe

 

O2 - BHO: ShoppingReport2 - {258C9770-1713-4021-8D7E-1F184A2BD754} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll

 

O2 - BHO: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll

 

O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)

 

O2 - BHO: Hotbar - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Hotbar\bin\11.0.175.0\HostIE.dll

 

O2 - BHO: Ask Toolbar BHO - {F0D4B231-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

 

O2 - BHO: DAPIELoader Class - {FF6C3CF0-4B15-11D1-ABED-709549C10000} - C:\PROGRA~1\DAP\DAPIEL~1.DLL (file missing)

 

O3 - Toolbar: Grab Pro - {C55BBCD6-41AD-48AD-9953-3609C48EACC7} - C:\Program Files\Orbitdownloader\GrabPro.dll

 

O3 - Toolbar: Ask Toolbar - {F0D4B239-DA4B-4daf-81E4-DFEE4931A4AA} - C:\Program Files\AskSBar\bar\1.bin\ASKSBAR.DLL

 

O3 - Toolbar: Hotbar - {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} - C:\Program Files\Hotbar\bin\11.0.175.0\HostIE.dll

 

O3 - Toolbar: Softonic_France Toolbar - {4daac69c-cba7-45e2-9bc8-1044483d3352} - C:\Program Files\Softonic_France\tbSof1.dll

 

O4 - HKLM\..\Run: [GoldenFilterPro] C:\Golden Filter Pro\GFPro.exe

 

O4 - HKLM\..\Run: [HotbarSA] "C:\Program Files\Hotbar\bin\11.0.175.0\HotbarSA.exe"

 

O4 - HKCU\..\Run: [firewall 2008] C:\windows\system32\logoneui.exe

 

O4 - HKCU\..\Run: [Yahoo Messengger] C:\windows\system32\SSVICHOSST.exe

 

O4 - HKCU\..\Run: [WeatherDPA] "C:\Program Files\Hotbar\bin\11.0.175.0\Weather.exe" -auto

 

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE LOCAL')

 

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICE RÉSEAU')

 

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')

 

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

 

O9 - Extra button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll

 

O9 - Extra button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll

 

بعد وضع علامة صح ثم اختارى fix وتابعى مثل الصور

 

post-25272-1268757216_thumb.png

 

ثم

 

post-25272-1268757236.png

 

بعد ذلك بنتظر تقرير جديد بارك الله فيكِ

 

فى انتظارك بإذن الله

شارك هذه المشاركه


رابط المشاركه
شارك

عملت مثل ما قلت حبيبتي و إن شاء الله ما كون أخطأت

و هاهو التقرير الجديد بارك الله فيكِ

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 1:27:45.MD, on 2010-11-20

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2900.5512)

Boot mode: Normal

 

Running processes:

C:\windows\System32\smss.exe

C:\windows\system32\winlogon.exe

C:\windows\system32\services.exe

C:\windows\system32\lsass.exe

C:\windows\system32\svchost.exe

C:\windows\System32\svchost.exe

C:\windows\system32\spoolsv.exe

C:\Documents and Settings\All Users\Application Data\BarDiscover\bardiscover151.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\windows\system32\svchost.exe

C:\windows\system32\WgaTray.exe

C:\WINDOWS\system32\sstext3d.scr

C:\windows\Explorer.exe

C:\Program Files\BarDiscover\bardiscover.exe

C:\windows\system32\wuauclt.exe

C:\windows\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\windows\system32\SSVICHOSST.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Program Files\Orbitdownloader\orbitdm.exe

C:\Program Files\Orbitdownloader\orbitnet.exe

C:\Program Files\Opera\opera.exe

C:\windows\TEMP\winwxtvi.exe

C:\windows\TEMP\winuuyirl.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\windows\TEMP\vkjhec.exe

C:\windows\TEMP\winwutv.exe

C:\windows\TEMP\mbeobt.exe

C:\windows\TEMP\winodeai.exe

C:\windows\TEMP\kuoxn.exe

C:\windows\TEMP\wingsqrlf.exe

C:\windows\TEMP\winoljp.exe

C:\windows\TEMP\winmudxlu.exe

C:\windows\system32\NOTEPAD.EXE

C:\windows\TEMP\aagh.exe

C:\windows\TEMP\winuxvn.exe

C:\windows\TEMP\tpywbs.exe

C:\windows\TEMP\winrjof.exe

C:\windows\system32\NOTEPAD.EXE

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://famous2.topcities.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll

O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\RunOnce: [FlashPlayerUpdate] C:\windows\system32\Macromed\Flash\FlashUtil10h_Plugin.exe -update plugin

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

O4 - Startup: Vidal CD.lnk = D:\VidalCD\VidalCD.exe

O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm

O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202

O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL

O9 - Extra button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll (file missing)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll (file missing)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{23E9BD65-04AB-48D2-9A2A-CA2CCD35378A}: NameServer = 41.221.20.4 66.28.0.45

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: Antiwpa - C:\windows\SYSTEM32\antiwpa.dll

O23 - Service: BarDiscover Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\BarDiscover\bardiscover151.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

 

--

End of file - 8006 bytes

 

شارك هذه المشاركه


رابط المشاركه
شارك

وفيكِ بارك المولى ياحبيبة

 

الحمد لله تمام : )

 

فقط هناك بعض القيم لم تُحذف

 

شغلي البرنامج مرة أخرى واعملى سكان

 

وبعد مايظهر لكِ التقرير الذى فى البرنامج نفسه وليس ملف التيكست اتبعى التالى

 

علمى صح أمام هذه القيم وانتبهى بارك الله فيكِ حتى لانفسد شىء

O4 - HKUS\S-1-5-20\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE RÉSEAU')

 

O9 - Extra button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll (file missing)

 

O9 - Extra button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll (file missing)

 

بعد وضع علامة صح ثم اختارى fix وتابعى مثل الصور

 

post-25272-1268757216_thumb.png

 

ثم

 

post-25272-1268757236.png

 

بعد ذلك Start --- control panel --- add and remove

 

وإذا وجدتى أى تولبار (ask - googel - yahoo) أو غيره احذفيه

 

بعد ذلك فضلاً حملى هذه الاداة

 

http://www.mediafire.com/?ajm934ztyhn

 

التوافق : ويندوز اكسبي فقط

 

شرح الاستخدام ,,,,,,

 

عند تشغيل ملف الاداة تظهر لك هذه الشاشه ,, انتظرى ( وتابعى مع الصور )

 

post-25272-1269983890_thumb.png

 

post-25272-1269983932_thumb.png

 

وعند ظهور هذه الشاشه ,, اضغطى على Close ليتم اعادة تشغيل جهازك (( لتكملة عملية التنظيف ))

 

post-25272-1269983952_thumb.png

 

بعد ذلك بارك الله فيكِ اتبعى هذه الخطوات

 

post-25272-1290258984.png

 

post-25272-1290258991.png

 

post-25272-1290258999.png

 

post-25272-1290259007.png

 

بعد ذلك حاولى تدخلى موقع الدرر السنية وبنتظر النتيجة بإذن الله

 

ايضاً مازال امامنا عمل على الجهاز

 

فقط انتهى من هذه الخطوات حتى نكمل

 

وطبعاً بنتظر تقرير جديد بارك الله فيكِ

 

فى انتظارك بإذن الله

شارك هذه المشاركه


رابط المشاركه
شارك

أختي الحبيبة زمردة قمت بالخطوة الأولى 

 

و عندما انتقلت للخطوة الثانية  Start --- control panel --- add and remove

 

وجدت تولبار ask بس ما حب يتحذف و يقولي في خطأ و أنه module spécifié est introuvable

 

هل أواصل و أقوم بتشغيل الأداة و أقوم بالخطوات القادمة ام ماذا أفعل ؟؟؟؟؟؟؟؟؟؟؟؟

 

جزاكِ الله خيرا أتعبتكِ معي حبيبتي  :icon15:

شارك هذه المشاركه


رابط المشاركه
شارك

لا أدري ما المشكلة قمت بكل الخطوات المطلوبه و إن شاء الله ما كون أخطأت

و لكن الموقع لا يريد أن يفتح

ها هو التقرير الجديد

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:23:55.MD, on 2010-11-20

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2900.5512)

Boot mode: Normal

 

Running processes:

C:\windows\System32\smss.exe

C:\windows\system32\winlogon.exe

C:\windows\system32\services.exe

C:\windows\system32\lsass.exe

C:\windows\system32\svchost.exe

C:\windows\System32\svchost.exe

C:\windows\system32\spoolsv.exe

C:\Documents and Settings\All Users\Application Data\BarDiscover\bardiscover151.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\windows\system32\svchost.exe

C:\windows\system32\WgaTray.exe

C:\windows\Explorer.EXE

C:\Program Files\BarDiscover\bardiscover.exe

C:\windows\system32\wuauclt.exe

C:\windows\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Program Files\Orbitdownloader\orbitdm.exe

C:\Program Files\Orbitdownloader\orbitnet.exe

C:\Program Files\Opera\opera.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://famous2.topcities.com

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll

O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\RunOnce: [Privacy Suite] "C:\Documents and Settings\pc2\Application Data\cleaner\CSPSeraser.exe" "/R:C:\Documents and Settings\pc2\Application Data\CyberScrub\Privacy Suite"

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

O4 - Startup: Vidal CD.lnk = D:\VidalCD\VidalCD.exe

O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm

O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202

O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL

O9 - Extra button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll (file missing)

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

O9 - Extra button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll (file missing)

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{23E9BD65-04AB-48D2-9A2A-CA2CCD35378A}: NameServer = 41.221.20.4 66.28.0.45

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O20 - Winlogon Notify: Antiwpa - C:\windows\SYSTEM32\antiwpa.dll

O23 - Service: BarDiscover Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\BarDiscover\bardiscover151.exe

O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

 

--

End of file - 7627 bytes

 

شارك هذه المشاركه


رابط المشاركه
شارك

حياكِ الله ياحبيبة

 

وانتِ من اهل الجزاء

 

شوفى حبوبتى واضح إن عندك متصفح الاوبرا صح

 

إذا نعم فهل فتحتى الموقع على الاكسبلولر والاوبرا أم على واحد منهما فقط؟

 

إذا ممكن تفتحى الموقع على الاتثنين وتبلغينى النتيجة ؟

 

ايضاً الحمد لله القيم الضارة بالجهاز فى تحسن فقط نريد اصلاح بعض القيم

 

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

 

R3 - URLSearchHook: (no name) - {0579B4B6-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

 

O2 - BHO: Ask Search Assistant BHO - {0579B4B1-0293-4d73-B02D-5EBB0BA0F0A2} - C:\Program Files\AskSBar\SrchAstt\1.bin\A2SRCHAS.DLL

 

O4 - HKCU\..\RunOnce: [Privacy Suite] "C:\Documents and Settings\pc2\Application Data\cleaner\CSPSeraser.exe" "/R:C:\Documents and Settings\pc2\Application Data\CyberScrub\Privacy Suite"

 

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

 

O9 - Extra button: ShopperReports - Compare product prices - {DB38E21A-0133-419d-92AD-ECDFD5244D6D} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll (file missing)

 

O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\windows\Network Diagnostic\xpnetdiag.exe

 

O9 - Extra button: ShopperReports - Compare travel rates - {EB620C54-E229-4942-87CE-E717109FC8C6} - C:\Program Files\ShoppingReport2\Bin\2.7.12\ShoppingReport.dll (file missing)

 

O23 - Service: BarDiscover Service - Unknown owner - C:\Documents and Settings\All Users\Application Data\BarDiscover\bardiscover151.exe

 

تفضلى حملى هذا البرنامج

 

http://67.222.53.25/noor/MWB.exe

 

دبل كليك على ايقونة البرنامج

 

post-25272-1262113042.gif

 

ستفتح لنا واجهة البرنامج

 

أول شىء أعملى له Updat

 

 

 

بعد الانتهاء من التحديث نبدأ عمل Scan

 

نضغط كما بالصورة لبدء الفحص

 

 

post-25272-1262113110_thumb.png

 

نحدد الأقراص المراد فحصها

 

post-25272-1262113168.gif

 

جارى عملية الفحص

 

 

post-25272-1262113515_thumb.png

 

بدء البرنامج يكتشف الإصابات

 

post-25272-1262114219_thumb.png

 

انتهى الفحص

 

post-25272-1262114253.gif

 

نضغط في المكان المشار اليه لرؤيــة النتائج

 

post-25272-1262113599_thumb.png

 

هذه هي الملفات الخبيثة التي اكتشفها

 

post-25272-1262113638_thumb.png

 

نقوم بحذفها

 

post-25272-1262113695_thumb.png

 

يطلب منا اعادة تشغيل الجهاز

 

post-25272-1262113724_thumb.png

 

وهنا ستجدى مجموعة برامج انتى فيرس مشاركة رقم 2 اختارى مايناسبك وحمليه بارك الله فيكِ

 

https://akhawat.islamway.net/forum/index.php?showtopic=188821

 

وطبعاً بنتظر تقرير جديد بارك الله فيكِ + رد على سؤال المتصفحات

 

فى انتظارك بإذن الله

شارك هذه المشاركه


رابط المشاركه
شارك

حياكِ الله ياحبيبة

 

هل على جهازك هذا البرنامج Golden Filter Pro

 

إذا نعم بنريد نحذفه بارك الله فيكِ

 

وطريقة حذفه هنا

 

https://akhawat.islamway.net/forum/index.ph...lden+Filter+Pro

 

لأنى اشك إنه السبب 80%

 

فى انتظارك بإذن الله

شارك هذه المشاركه


رابط المشاركه
شارك

السلام عليكم ورحمة الله وبركاته

كيف حالكِ زمردة الغالية ؟ إن شاء الله بخير

أعتذر جدا حبيبتي عن عدم إكمال ما قلت لي فعله سابقا

و آسفة لأنني أضعت وقتكِ مع أنّ المشكلة لم تحل بعد

و الله خجلة منكِ جدا ... ماذا أقول ؟؟؟

لو ممكن نعود لمتابعة حل المشكلة أكون لكِ جدّ شاكرة

فقد اشتقت جدا جدا لتخريج الأحاديث

و كم أتمنى أن أعود للمشاركة في هذا العمل

كلما رأيت في الشريط صفحة تخريج الأحاديث للشيخ ... أحِنُّ إلى ذلك كثيرا

يارب يسر الأمور و لا تحرمني :(... يارب

فأرجوك حبيبتي نواصل حل المشكلة بإذن الله

جزاكِ الله خيرا يا غالية :)

تم تعديل بواسطة ** الفقيرة الى الله **

شارك هذه المشاركه


رابط المشاركه
شارك

قمت بالخطوات التي طلبتها مني سابقا

حذفت Golden Filter Pro

و بعد ذلك قمت بعمل سكان بالجهاز الذي قلت لي أن أحمله

عملت سكان ل D و C

و هذا التقرير الجديد

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 1:50:37.PD, on 2010-12-10

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2900.5512)

Boot mode: Normal

 

Running processes:

C:\windows\System32\smss.exe

C:\windows\system32\winlogon.exe

C:\windows\system32\services.exe

C:\windows\system32\lsass.exe

C:\windows\system32\svchost.exe

C:\windows\System32\svchost.exe

C:\windows\system32\spoolsv.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\windows\system32\svchost.exe

C:\windows\system32\wuauclt.exe

C:\windows\system32\WgaTray.exe

C:\windows\Explorer.EXE

C:\windows\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Program Files\Orbitdownloader\orbitdm.exe

C:\Program Files\Orbitdownloader\orbitnet.exe

C:\Program Files\Opera\opera.exe

C:\DOCUME~1\pc2\LOCALS~1\Temp\wintgmm.exe

C:\DOCUME~1\pc2\LOCALS~1\Temp\yhobi.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

O4 - Startup: Vidal CD.lnk = D:\VidalCD\VidalCD.exe

O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm

O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202

O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{23E9BD65-04AB-48D2-9A2A-CA2CCD35378A}: NameServer = 41.221.20.4 66.28.0.45

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

 

--

End of file - 6290 bytes

 

شارك هذه المشاركه


رابط المشاركه
شارك

السلام عليكم ورحمة الله وبركاته

كيف حالكِ زمردة الغالية ؟ إن شاء الله بخير

أعتذر جدا حبيبتي عن عدم إكمال ما قلت لي فعله سابقا

و آسفة لأنني أضعت وقتكِ مع أنّ المشكلة لم تحل بعد

و الله خجلة منكِ جدا ... ماذا أقول ؟؟؟

لو ممكن نعود لمتابعة حل المشكلة أكون لكِ جدّ شاكرة

فقد اشتقت جدا جدا لتخريج الأحاديث

و كم أتمنى أن أعود للمشاركة في هذا العمل

كلما رأيت في الشريط صفحة تخريج الأحاديث للشيخ ... أحِنُّ إلى ذلك كثيرا

يارب يسر الأمور و لا تحرمني :(... يارب

فأرجوك حبيبتي نواصل حل المشكلة بإذن الله

جزاكِ الله خيرا يا غالية :)

وعليكم السلام ورحمة الله وبركاته

 

حياكِ الله ياحبيبة

 

الحمد لله بخير وبإذن الله تكونى بخير ايضاً

 

لاعليكِ ياحبيبة بإذن الله نتابع سوياً

 

وانتِ من اهل الجزاء

 

بإذن الله ربى ييسر الامور

 

لى عودة بتحليل التقرير

شارك هذه المشاركه


رابط المشاركه
شارك

حياكِ الله ياحبيبة

 

شغلي البرنامج مرة أخرى واعملى سكان

 

وبعد مايظهر لكِ التقرير الذى فى البرنامج نفسه وليس ملف التيكست اتبعى التالى

 

علمى صح أمام هذه القيم وانتبهى بارك الله فيكِ حتى لانفسد شىء

O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present

 

O7 - HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System, DisableRegedit=1

 

O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~1\Office12\REFIEBAR.DLL

 

بعد وضع علامة صح ثم اختارى fix وتابعى مثل الصور

 

post-25272-1268757216_thumb.png

 

ثم

 

post-25272-1268757236.png

 

بعد ذلك بنتظر تقرير جديد بارك الله فيكِ

قمت بالخطوات التي طلبتها مني سابقا

حذفت Golden Filter Pro

و بعد ذلك قمت بعمل سكان بالجهاز الذي قلت لي أن أحمله

عملت سكان ل D و C

اريد تقرير هذا البرنامج ياحبيبة

 

post-25272-1262113042.gif

 

يمكنكِ اظهار التقرير من البرنامج دون تشغيله

 

تابعى الصورة

 

post-25272-1280346179_thumb.png

 

بعد ذلك اعملى كوبى والصقيه فى ردك القادم

 

ايضاً هل استخدمتى هذه الاداة

 

http://www.mediafire.com/?ajm934ztyhn

 

التوافق : ويندوز اكسبي فقط

 

شرح الاستخدام ,,,,,,

 

عند تشغيل ملف الاداة تظهر لك هذه الشاشه ,, انتظرى ( وتابعى مع الصور )

 

post-25272-1269983890_thumb.png

 

post-25272-1269983932_thumb.png

 

وعند ظهور هذه الشاشه ,, اضغطى على Close ليتم اعادة تشغيل جهازك (( لتكملة عملية التنظيف ))

 

post-25272-1269983952_thumb.png

 

 

 

شوفى حبوبتى واضح إن عندك متصفح الاوبرا صح

 

إذا نعم فهل فتحتى الموقع على الاكسبلولر والاوبرا أم على واحد منهما فقط؟

 

إذا ممكن تفتحى الموقع على الاتثنين وتبلغينى النتيجة ؟

 

وطبعاً بنتظر تقرير جديد بارك الله فيكِ + رد على سؤال المتصفحات

 

فى انتظارك بإذن الله

شارك هذه المشاركه


رابط المشاركه
شارك

جزاكِ الله خيرا حبيبتي  زمردة 

 لا حرمكِ ربي الأجر

بعد ذلك بنتظر تقرير جديد بارك الله فيكِ

هاهو التقرير بعد حذف ما قلت عليه

Logfile of Trend Micro HijackThis v2.0.2

Scan saved at 10:16:12.MD, on 2010-12-10

Platform: Windows XP SP3 (WinNT 5.01.2600)

MSIE: Internet Explorer v6.00 (6.00.2900.5512)

Boot mode: Normal

 

Running processes:

C:\windows\System32\smss.exe

C:\windows\system32\winlogon.exe

C:\windows\system32\services.exe

C:\windows\system32\lsass.exe

C:\windows\system32\svchost.exe

C:\windows\System32\svchost.exe

C:\windows\system32\spoolsv.exe

C:\Program Files\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe

C:\windows\system32\svchost.exe

C:\windows\system32\WgaTray.exe

C:\windows\Explorer.EXE

C:\windows\system32\ctfmon.exe

C:\Program Files\Windows Live\Messenger\msnmsgr.exe

C:\Program Files\uTorrent\uTorrent.exe

C:\Program Files\Skype\Phone\Skype.exe

C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

C:\Program Files\Orbitdownloader\orbitdm.exe

C:\Program Files\Orbitdownloader\orbitnet.exe

C:\Program Files\Opera\opera.exe

C:\DOCUME~1\pc2\LOCALS~1\Temp\winotnego.exe

C:\DOCUME~1\pc2\LOCALS~1\Temp\abbpp.exe

C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

C:\windows\system32\NOTEPAD.EXE

 

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Liens

O2 - BHO: btorbit.com - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files\Orbitdownloader\orbitcth.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Fichiers communs\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Program Files\Microsoft\Search Enhancement Pack\Search Helper\SearchHelper.dll

O2 - BHO: Programme d'aide de l'Assistant de connexion Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Fichiers communs\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O4 - HKLM\..\Run: [siSPower] Rundll32.exe SiSPower.dll,ModeAgent

O4 - HKLM\..\Run: [iMJPMIG8.1] "C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32

O4 - HKLM\..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC

O4 - HKLM\..\Run: [PHIME2002ASync] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC

O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Fichiers communs\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k

O4 - HKCU\..\Run: [CTFMON.EXE] C:\windows\system32\ctfmon.exe

O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background

O4 - HKCU\..\Run: [uTorrent] "C:\Program Files\uTorrent\uTorrent.exe"

O4 - HKCU\..\Run: [DownloadAccelerator] "C:\Program Files\DAP\DAP.EXE" /STARTUP

O4 - HKCU\..\Run: [skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\pc2\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c

O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-19\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SERVICE LOCAL')

O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICE RÉSEAU')

O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')

O4 - HKUS\S-1-5-18\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')

O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')

O4 - HKUS\.DEFAULT\..\RunOnce: [nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')

O4 - Startup: Vidal CD.lnk = D:\VidalCD\VidalCD.exe

O4 - Global Startup: DSLMON.lnk = C:\Program Files\SAGEM\SAGEM F@st 800-840\dslmon.exe

O4 - Global Startup: Orbit.lnk = C:\Program Files\Orbitdownloader\orbitdm.exe

O8 - Extra context menu item: &Clean Traces - C:\Program Files\DAP\Privacy Package\dapcleanerie.htm

O8 - Extra context menu item: &Download by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/201

O8 - Extra context menu item: &Download with &DAP - C:\Program Files\DAP\dapextie.htm

O8 - Extra context menu item: &Grab video by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/204

O8 - Extra context menu item: Do&wnload selected by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/203

O8 - Extra context menu item: Down&load all by Orbit - res://C:\Program Files\Orbitdownloader\orbitmxt.dll/202

O8 - Extra context menu item: Download &all with DAP - C:\Program Files\DAP\dapextie2.htm

O8 - Extra context menu item: E&xporter vers Microsoft Excel - res://C:\PROGRA~1\MICROS~1\Office12\EXCEL.EXE/3000

O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shoc...ash/swflash.cab

O17 - HKLM\System\CCS\Services\Tcpip\..\{23E9BD65-04AB-48D2-9A2A-CA2CCD35378A}: NameServer = 41.221.20.4 66.28.0.45

O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\FICHIE~1\Skype\SKYPE4~1.DLL

O23 - Service: InstallDriver Table Manager (IDriverT) - Unknown owner - C:\Program Files\Fichiers communs\InstallShield\Driver\11\Intel 32\IDriverT.exe (file missing)

O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)

 

--

End of file - 6145 bytes

 

* * *

بعد ذلك اعملى كوبى والصقيه فى ردك القادم

هذا هو التقرير يا غالية لبرنامج

 

post-25272-1262113042.gif 

Malwarebytes' Anti-Malware 1.50

www.malwarebytes.org

 

Database version: 5214

 

Windows 5.1.2600 Service Pack 3

Internet Explorer 7.0.5730.13

 

2010-12-10 1:39:26 PD

mbam-log-2010-12-10 (01-39-26).txt

 

Scan type: Full scan (C:\|D:\|)

Objects scanned: 234119

Time elapsed: 2 hour(s), 16 minute(s), 40 second(s)

 

Memory Processes Infected: 0

Memory Modules Infected: 2

Registry Keys Infected: 113

Registry Values Infected: 9

Registry Data Items Infected: 8

Folders Infected: 44

Files Infected: 116

 

Memory Processes Infected:

(No malicious items detected)

 

Memory Modules Infected:

c:\documents and settings\tazebama.dll (Worm.Mabezat) -> Delete on reboot.

c:\WINDOWS\system32\AntiWPA.dll (Trojan.I.Stole.Windows) -> Delete on reboot.

 

Registry Keys Infected:

HKEY_CLASSES_ROOT\CLSID\{14113B47-D59C-4F0F-9D10-FF1730265584} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{148E1447-C728-48FD-BEEC-A7D06C5FFF58} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{8EE46F55-1CE1-4DB9-811A-68938EC7F3DD} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CntntCntr.CntntDic.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CntntCntr.CntntDic (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{A57470DE-14C7-4FCD-9D4C-E5711F24F0ED} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{2557DD3F-23A0-477C-BCD8-90FD0AECC4B8} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HBMain.CommBand.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HBMain.CommBand (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Explorer Bars\{2AA2FBF8-9C76-4E97-A226-25C5F4AB6358} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{2D00AA2A-69EF-487a-8A40-B3E27F07C91E} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{0729F461-8054-47DC-8D39-A31B61CC0119} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{40CA90F3-4098-4877-AE87-23EB612B18C7} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HbCoreSrv.DynamicProp.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HbCoreSrv.DynamicProp (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{2F9AD413-2E0B-4a85-BB2A-CF961238262A} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{3E2DFD6A-4E20-4D4C-AA8B-E1F9DBEF3C80} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{F244A744-534D-4A46-855F-C0C7E9F27DAA} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{030C9927-10FC-4169-97A2-55BECD5D88D8} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.IEButton.1 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.IEButton (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{62906E60-BCE2-4E1B-9ED0-8B9042EE15E4} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{C62A9E79-2B52-439B-AF57-2E60BB06E86C} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{15FD8424-D12A-4C51-8C6C-D5D57B80F781} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Toolbar.ToolbarCtl.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Toolbar.ToolbarCtl (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{70880CE6-308C-4204-A89E-B266C3F7B7FA} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{03D7FF6E-9781-40B5-BB7F-94291A361604} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{3CEB04AB-08AF-45F4-81B4-70D13C1F7B85} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Srv.CoreServices.1 (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Srv.CoreServices (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{714E0876-FCEE-49CE-A429-B9AD8AEFCB56} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA.1 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.IEButtonA (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{71F731B3-008B-4052-9EA4-4145ACCE40C3} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbr.HbMain.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\hbr.HbMain (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{86C5840B-80C4-4C30-A655-37344A542009} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CoreSrv.CoreServices.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CoreSrv.CoreServices (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{8C788AA2-7530-43BE-97B7-4D491F13BEA3} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{CDC73256-A88D-4642-844E-A8F20B76789C} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{D1063603-F045-475F-AFBC-8CBA7D5797FB} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HotbarWeather.WeatherController.1 (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HotbarWeather.WeatherController (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A078F691-9C07-4AF2-BF43-35E79EECF8B7} (Adware.Softomate) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{A3E67DAA-DA01-4da5-98BE-3088B554A11E} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{76D54105-99EB-4ECB-95B2-A944F50CC566} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{30B15818-E110-4527-9C05-46ACE5A3460D} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HotbarAX.UserProfiles.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HotbarAX.UserProfiles (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A3E67DAA-DA01-4DA5-98BE-3088B554A11E} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{A5B6FA30-D317-41CA-9CB1-C898D3C7F34E} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\TypeLib\{8292078F-F6E9-412B-8EB1-360C05C5ECE5} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{2447E305-5E90-42A8-BD1E-0BC333B807E1} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HostOL.MailAnim.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HostOL.MailAnim (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{A9C42A57-421C-4572-8B12-249C59183D1C} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CntntCntr.CntntDisp.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CntntCntr.CntntDisp (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{B0CB585F-3271-4E42-88D9-AE5C9330D554} (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CoreSrv.LfgAx.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CoreSrv.LfgAx (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{BDEA95CF-F0E6-41E0-BD3D-B00F39A4E939} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand.1 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.HbInfoBand (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{CC19A5F2-B4AD-41D5-A5C9-0680904C1483} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HostOL.WebmailSend.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HostOL.WebmailSend (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{D95C7240-0282-4c01-93F5-673BCA03DA86} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HotbarAX.Info.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HotbarAX.Info (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{D95C7240-0282-4C01-93F5-673BCA03DA86} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{DD15BCC0-5FE9-4690-A957-99FA60ED9D26} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.HbAx.1 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.HbAx (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{E8CFC029-8420-4EAE-ADEF-915BDC77E1DC} (Spyware.AdaEbook) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\mawsoaat_hadeeth_02.MyNSHandler (Spyware.AdaEbook) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\CLSID\{F9BFA98D-9935-4EA4-A05A-72C7F0778F02} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Toolbar.HtmlMenuUI.1 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Toolbar.HtmlMenuUI (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{B035BA6B-57CD-4F72-B545-65BE465FCAF6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Typelib\{D44FD6F0-9746-484E-B5C4-C66688393872} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\Interface\{0EB3F101-224A-4B2B-9E5B-DF720857529C} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{258C9770-1713-4021-8D7E-1F184A2BD754} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{EDDBB5EE-BB64-4bfc-9DBE-E7C85941335B} (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{69725738-CD68-4f36-8D02-8C43722EE5DA} (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\HotbarSA (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\Antiwpa (Trojan.I.Stole.Windows) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HostIE.Bho (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\HostIE.Bho.1 (Adware.Zango) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CLASSES_ROOT\ShoppingReport2.RprtCtrl.1 (Adware.ShopperReports) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\hotbarsa (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\Software\ShoppingReport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\BarDiscover (Adware.BarDiscover) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\ShoppingReport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BarDiscover (Adware.BarDiscover) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\ShoppingReport2 (Adware.Hotbar) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_AMSINT32 (Virus.Sality) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\Root\LEGACY_BARDISCOVER_SERVICE (Adware.BarDiscover) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\amsint32 (Virus.Sality) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\BarDiscover Service (Adware.BarDiscover) -> Quarantined and deleted successfully.

 

Registry Values Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419D-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419D-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{DB38E21A-0133-419d-92AD-ECDFD5244D6D} (Adware.ShoppingReport2) -> Value: {DB38E21A-0133-419d-92AD-ECDFD5244D6D} -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Extensions\CmdMapping\{EB620C54-E229-4942-87CE-E717109FC8C6} (Adware.ShoppingReport2) -> Value: {EB620C54-E229-4942-87CE-E717109FC8C6} -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Toolbar\WebBrowser\{90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} (Adware.Zango) -> Value: {90B8B761-DF2B-48AC-BBE0-BCC03A819B3B} -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\ForceClassicControlPanel (Hijack.ControlPanelStyle) -> Value: ForceClassicControlPanel -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NofolderOptions (Hijack.FolderOptions) -> Value: NofolderOptions -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Mozilla\Firefox\extensions\[email protected] (Adware.Hotbar) -> Value: [email protected] -> Quarantined and deleted successfully.

 

Registry Data Items Infected:

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\Start_ShowHelp (Hijack.StartMenu) -> Bad: (0) Good: (1) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\NoSMHelp (Hijack.Help) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableTaskMgr (Hijack.TaskManager) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\DisableRegistryTools (Hijack.Regedit) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Internet Explorer\Control Panel\HomePage (Hijack.Homepage) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\AntiVirusDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\UpdatesDisableNotify (Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

 

Folders Infected:

c:\documents and settings\all users\application data\2aca5cc3-0f83-453d-a079-1076fe1a8b65 (Adware.Seekmo) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\bardiscover (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\IESkins (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5 (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\HostOI (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\HostOI\dynamic (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\HostOL (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\HostOL\dynamic (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\dynamic (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\static (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\static\1 (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\static\2 (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\static\DownLoad (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weatherdpa (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weatherdpa\weather_xml (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weather_xml (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\HotbarSA (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\my security shield (Rogue.MySecurityShield) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\security master av (Rogue.SecurityMasterAV) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\db (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\dwld (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\report (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\res2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\weatherdpa (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\bardiscover (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0 (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\firefox (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\firefox\extensions (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\firefox\extensions\plugins (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\extensions\{ac57fcaf-e6fc-4be9-adc0-d00129c4c1e7} (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\extensions\{ac57fcaf-e6fc-4be9-adc0-d00129c4c1e7}\chrome (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\extensions\{ac57fcaf-e6fc-4be9-adc0-d00129c4c1e7}\defaults (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\extensions\{ac57fcaf-e6fc-4be9-adc0-d00129c4c1e7}\defaults\preferences (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\shoppingreport2 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\program files\shoppingreport2\Bin (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\program files\shoppingreport2\Bin\2.7.12 (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\all users\menu démarrer\programmes\Hotbar (Adware.Hotbar) -> Quarantined and deleted successfully.

 

Files Infected:

c:\documents and settings\tazebama.dll (Worm.Mabezat) -> Delete on reboot.

c:\program files\Hotbar\bin\11.0.175.0\cntntcntr.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\CoreSrv.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\Toolbar.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\Srv.exe (Adware.Softomate) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\Weather.exe (Adware.Softomate) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\hotbarsaax.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\HostOL.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\flyn.pif (Malware.Packer.Gen) -> Quarantined and deleted successfully.

c:\ipfolo.pif (Malware.Packer.Gen) -> Quarantined and deleted successfully.

c:\iqsnme.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

c:\mmwi.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

c:\onroqv.pif (Malware.Packer.Gen) -> Quarantined and deleted successfully.

c:\documents and settings\all users.windows.0\application data\ae33fd8\msae33_231.exe (Rogue.MySecuritySuite) -> Quarantined and deleted successfully.

c:\documents and settings\all users.windows.0\application data\ae33fd8\smae33_231.exe (Rogue.Installer) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\local settings\temporary internet files\Content.IE5\MZODNFDB\45cfc[1].exe (Rogue.MySecuritySuite) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\mes documents\my dap downloads\applicationsetup.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\mes documents\my dap downloads\applicationsetup_1.exe (Trojan.Downloader) -> Quarantined and deleted successfully.

c:\program files\bardiscover\bardiscover.dll (Adware.Agent.Gen) -> Quarantined and deleted successfully.

c:\program files\dealio toolbar\widgihelper.exe (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

c:\program files\dealio toolbar\FF\components\dealiotoolbarff.dll (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

c:\program files\dealio toolbar\IE\4.0.2\dealiotoolbarie.dll (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

c:\program files\trend micro\hijackthis\backups\backup-20101120-132550-808.dll (Adware.SmartShopper) -> Quarantined and deleted successfully.

c:\program files\trend micro\hijackthis\backups\backup-20101120-132551-282.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\HotbarSA.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\hotbarsadf.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\hotbarsahook.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\hotbaruninstaller.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\WeSkin.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\firefox\extensions\plugins\npclntax_hotbarsa.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\plugins\npclntax_hotbarsa.dll (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\RECYCLER\s-1-5-21-1993962763-1417001333-1275210071-1003\HRTF.FNJ (CrackTool.Agent) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0240081.exe (Rogue.MySecuritySuite) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0240183.dll (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0240184.dll (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0240737.exe (Rogue.Installer) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0243069.exe (Malware.Packer.Gen) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0243171.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0243173.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0243174.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0243175.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0243118.exe (Adware.WidgiToolbar) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP40\A0243172.exe (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\system volume information\_restore{4ca468cf-c132-4825-ab8d-aba9db45b15c}\RP41\A0243522.exe (Rogue.Installer) -> Quarantined and deleted successfully.

d:\dpda.pif (Malware.Packer.Gen) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\tazebama\zPharaoh.dat (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\tazebama\zPharaoh.dat (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\documents and settings\SYSTEM\application data\tazebama\zPharaoh.dat (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\documents and settings\hook.dl_ (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\documents and settings\tazebama.dl_ (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\Bureau\my security shield.lnk (Rogue.MySecurityShield) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\Bureau\security master av.lnk (Rogue.SecurityMasterAV) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\menu démarrer\programmes\my security shield.lnk (Rogue.MySecurityShield) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\menu démarrer\programmes\security master av.lnk (Rogue.SecurityMaster) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\microsoft\internet explorer\quick launch\my security shield.lnk (Rogue.MySecurityShield) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\microsoft\internet explorer\quick launch\security master av.lnk (Rogue.SecurityMasterAV) -> Quarantined and deleted successfully.

c:\Jojo.exe (Trojan.Agent) -> Quarantined and deleted successfully.

c:\logoneui.exe (Trojan.Agent) -> Quarantined and deleted successfully.

c:\zPharaoh.exe (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\menu démarrer\my security shield.lnk (Rogue.MySecurityShield) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\menu démarrer\security master av.lnk (Rogue.SecurityMasterAV) -> Quarantined and deleted successfully.

c:\WINDOWS\system32\AntiWPA.dll (Trojan.I.Stole.Windows) -> Delete on reboot.

c:\WINDOWS\system32\logoneui.exe (Worm.Mabezat) -> Quarantined and deleted successfully.

c:\WINDOWS\system32\ssvichosst.exe (Worm.Sohanad) -> Quarantined and deleted successfully.

c:\WINDOWS\ssvichosst.exe (Worm.Sohanad) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\bardiscover\bardiscover151.exe (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\bardiscover\bardiscover149.exe (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.txt (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\static\DownLoad\buttondir.xip (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.txt (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\v3.5\Hotbar\static\DownLoad\samplegroups2.xip (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\history (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weatherstartup.xml (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weatherdpa\Links (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weatherdpa\weatherpreferences (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weatherdpa\weather_xml\Display (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weatherdpa\weather_xml\Loading (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weatherdpa\weather_xml\screen2 (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weather_xml\Default (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weather_xml\Genera1 (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\Hotbar\Weather\weather_xml\General (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\HotbarSA\HotbarSA.dat (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\HotbarSA\hotbarsaabout.mht (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\HotbarSA\hotbarsaau.dat (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\HotbarSA\hotbarsaeula.mht (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\HotbarSA\hotbarsa_hpk.dat (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\application data\HotbarSA\hotbarsa_kyf_update.dat (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\my security shield\cookies.sqlite (Rogue.MySecurityShield) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\my security shield\instructions.ini (Rogue.MySecurityShield) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\security master av\cookies.sqlite (Rogue.SecurityMasterAV) -> Quarantined and deleted successfully.

c:\documents and settings\Eliot\application data\security master av\instructions.ini (Rogue.SecurityMasterAV) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\Config.xml (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\db\Aliases.dbs (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\db\Sites.dbs (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\dwld\whitelist.xip (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\report\aggr_storage.xml (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\report\send_storage.xml (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\pc2\application data\shoppingreport2\cs\res2\whitelist.dbs (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\program files\bardiscover\bardiscover.exe (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\bardiscover\uninstall.exe (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\arrow.ico (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\copyright.txt (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\firefox\extensions\chrome.manifest (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\Hotbar\bin\11.0.175.0\firefox\extensions\install.rdf (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\extensions\{ac57fcaf-e6fc-4be9-adc0-d00129c4c1e7}\chrome.manifest (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\extensions\{ac57fcaf-e6fc-4be9-adc0-d00129c4c1e7}\install.rdf (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\extensions\{ac57fcaf-e6fc-4be9-adc0-d00129c4c1e7}\chrome\bardiscover.jar (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\mozilla firefox\extensions\{ac57fcaf-e6fc-4be9-adc0-d00129c4c1e7}\defaults\preferences\prefs.js (Adware.BarDiscover) -> Quarantined and deleted successfully.

c:\program files\shoppingreport2\Uninst.exe (Adware.ShoppingReport2) -> Quarantined and deleted successfully.

c:\documents and settings\all users\menu démarrer\programmes\Hotbar\about hotbar.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\menu démarrer\programmes\Hotbar\hotbar customer support center.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\menu démarrer\programmes\Hotbar\hotbar games!.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\menu démarrer\programmes\Hotbar\hotbar uninstall instructions.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\menu démarrer\programmes\Hotbar\hotbar videos!.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\menu démarrer\programmes\Hotbar\reset cursor.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

c:\documents and settings\all users\menu démarrer\programmes\Hotbar\Weather.lnk (Adware.Hotbar) -> Quarantined and deleted successfully.

نعم قمت باستخدام تلك الأداة لما طلبت مني ذلك في المرة السابقة

 

شارك هذه المشاركه


رابط المشاركه
شارك

بالنسبة للمتصفحات

 

فتحت الموقع على الأوبرا ما رضي يفتح

 

و فتحت على الفايرفوكس و الاكسبلورر نفس الشيء ما حب يفتح معي

 

جزاكِ الله خيرا أتعبتكِ معي  

 

وفقكِ الله يا غالية

شارك هذه المشاركه


رابط المشاركه
شارك

وانتِ من اهل الجزاء ياحبيبة

 

كما ترين الجهاز ملغم : )

 

فضلاً ياحبيبة حملى هذه الاداة

 

http://www.runscanner.net/runscanner.exe

 

 

دبل كليك واتبعى الشرح بالصور

 

post-25272-1270302833.png

 

لبدء الفحص

 

post-25272-1270302842_thumb.png

 

post-25272-1270302864.png

 

لحفظ ملف التقرير

 

post-25272-1270302871_thumb.png

 

بعد حفظه قومى بضغط الملف ورفعه على أى مركز رفع وليكن هذا

 

http://www.arabiavoice.net/up/index.php

 

واكتبى لى الرابط هنا فى المشاركة القادمة

 

 

فى انتظارك

شارك هذه المشاركه


رابط المشاركه
شارك

حبيبتي كيف أقوم بضغط الملف ؟

حملت الأداة و عملت سكان و انتهى

في انتظارك بارك الله فيكِ

شارك هذه المشاركه


رابط المشاركه
شارك

حبيبتي كيف أقوم بضغط الملف ؟

حملت الأداة و عملت سكان و انتهى

في انتظارك بارك الله فيكِ

قفى على الملف ثم كليك يمين واختارى

 

post-25272-1292104140.png

 

بعد ذلك ارفعيه على مركز الرفع وضعى الرابط بردك القادم

 

فى انتظارك

شارك هذه المشاركه


رابط المشاركه
شارك

لم أستطع إرفاق الملف 

رفعته في الموقع الذي قلتلي عليه و على موقع آخر و لكن كل مرة أحاول إرفاقه مع الرد

تخرج هذه الرساله

لا تستطيع إضافة هذه الصورة بهذا الإمتداد . الإمتداد الصحيح:

http://www.domain.com/picture.gif, الإمتداد الخاطئ: http://www.domain.com/picture.one.gif

؟؟؟؟؟؟؟؟؟؟؟

سؤال من فضلك عندما أعمل كليك يمين على الملف أعمل إضافة للأرشيف أم ماذا؟؟؟؟؟

 

لأنه لم تخرج لي صفحة مثلك فيها كل الإختيارات السابقة

 

 

معلش تحمليني شوي :(

تم تعديل بواسطة ** الفقيرة الى الله **

شارك هذه المشاركه


رابط المشاركه
شارك

  إضغطي هنا

 

أظن أنه تحمل خلاص 

تم تعديل بواسطة ** الفقيرة الى الله **

شارك هذه المشاركه


رابط المشاركه
شارك

تفضلى ياحبيبة

 

فضلاً ياحبيبة حملى هذا الملف

 

runscanner2.zip

 

فكِ عنه الضغط واتبعى الصور بارك الله فيكِ

 

أختارى كما بالصورة

 

post-25272-1280013263_thumb.png

 

post-25272-1280013297.png

 

ربما يطلب إعادة تشغيل

 

بعد ذلك اريد تقرير هايجاك جديد وياريت تجربى تفتحى الموقع

 

ثم فضلاً حملى الانتى فيرس الذى تفضليه من ركن الشروحات واعملى سكان على الجهاز كله

 

فى انتظارك

 

شارك هذه المشاركه


رابط المشاركه
شارك

حبيبتي زخردة هل أقوم بالضغط كما في الصورة 

 

على item fixer  و  fix selected item

 

خفت ان أقوم بشيء خطأ

 

هل أقوم بحذف كل ما في الصفحة تلك

شارك هذه المشاركه


رابط المشاركه
شارك

إنشاء حساب جديد أو تسجيل دخول لتتمكني من إضافة تعليق جديد

يجب ان تكون عضوا لدينا لتتمكن من التعليق

إنشاء حساب جديد

سجلي حسابك الجديد لدينا في الموقع بمنتهي السهوله .

سجلي حساب جديد

تسجيل دخول

هل تمتلكين حسابًا بالفعل ؟ سجلي دخولك من هنا.

سجلي دخولك الان

  • من يتصفحن الموضوع الآن   0 عضوات متواجدات الآن

    لا توجد عضوات مسجلات يتصفحن هذه الصفحة

منتدى❤ أخوات طريق الإسلام❤

‏ أخبروهم بالسلاح الخفي القوي الذي لا يُهزم صاحبه ولا يضام خاطره، عدته ومكانه القلب، وجنوده اليقين وحسن الظن بالله، وشهوده وعده حق وقوله حق وهذا أكبر النصر، من صاحب الدعاء ولزم باب العظيم رب العالمين، جبر خاطره في الحين، وأراه الله التمكين، ربنا اغفر لنا وللمؤمنين والمؤمنات وارحم المستضعفات في فلسطين وفي كل مكان ..

×