#1
|
||||
|
||||
![]()
السلام عليكم ورحمة الله وبركاته
لدي جهاز ويندوز اكس بي p2 اصيب بملف تجسس وتم القضاء عليه بواسطة برنامج Anti-Malware لكن ظهرت مشكلة عند فتح اي برنامج ظهور مربع فتح باستخدام حاولت استخدام اداة SREngPS.exe دون فائده لان الرساله تظهر ( فتح باستخدام ) ومرفق صوره من الرساله ![]() قمت بعمل ريبير بواسطة سيدي الويندوز دون فائده كذلك وهذا تقرير برنامج Anti-Malware ************' Anti-Malware 1.50.1.1100 Database version: 6321 Windows 5.1.2600 Service Pack 2 (Safe Mode) Internet Explorer 8.0.6001.18702 11/04/2011 03:03:14 ص mbam-log-2011-04-11 (03-03-14).txt Scan type: Full scan (C:\|D:\|E:\|) Objects scanned: 79191 Time elapsed: 31 minute(s), 39 second(s) Memory Processes Infected: 1 Memory Modules Infected: 0 Registry Keys Infected: 18 Registry Values Infected: 0 Registry Data Items Infected: 0 Folders Infected: 0 Files Infected: 6 Memory Processes Infected: c:\documents and settings\thunder\local settings\application data\geg.exe (Trojan.ExeShell.Gen) -> 1180 -> Unloaded process successfully. Memory Modules Infected: (No malicious items detected) Registry Keys Infected: HKEY_CLASSES_ROOT\CLSID\{CG08B0E5JF-4FCB-11CF-AAA5-00401C6XX500} (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{CG08B0E5JF-4FCB-11CF-AAA5-00401C6XX500} (Trojan.Agent) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{147A976F-EEE1-4377-8EA7-4716E4CDD239} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CLASSES_ROOT\CLSID\{A4730EBE-43A6-443e-9776-36915D323AD3} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{56256A51-B582-467e-B8D4-7786EDA79AE0} (Trojan.Vundo) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{00A6FAF1-072E-44CF-8957-5838F569A31D} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{07B18EA1-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{07B18EA9-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{07B18EAB-A523-4961-B6BB-170DE4475CCA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Ext\Stats\{BD56A320-23F2-42AD-F4E4-00AAC39CAA53} (Trojan.Ertfor) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{59C7FC09-1C83-4648-B3E6-003D2BBC7481} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{68AF847F-6E91-45dd-9B68-D6A12C30E5D7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{9170B96C-28D4-4626-8358-27E6CAEEF907} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{D1A71FA0-FF48-48dd-9B6D-7A13A3E42127} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{DDB1968E-EAD6-40fd-8DAE-FF14757F60C7} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{F138D901-86F0-4383-99B6-9CDD406036DA} (Adware.MyWebSearch) -> Quarantined and deleted successfully. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Ext\PreApproved\{1D4DB7D2-6EC9-47a3-BD87-1E41684E07BB} (Adware.MyWebSearch) -> Quarantined and deleted successfully. Registry Values Infected: (No malicious items detected) Registry Data Items Infected: (No malicious items detected) Folders Infected: (No malicious items detected) Files Infected: c:\documents and settings\thunder\local settings\application data\geg.exe (Trojan.ExeShell.Gen) -> Quarantined and deleted successfully. c:\WINDOWS\syberlink64x\syberlink64x.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\documents and settings\thunder\application data\thinstall\powerpoint to flash v1.6\1000000500002h\hh.exe (Trojan.Agent) -> Quarantined and deleted successfully. c:\program files\uninstall fun web products.dll (Adware.MyWebSearch) -> Quarantined and deleted successfully. c:\program files\intocartoonpro\Patch.exe (Trojan.Bancos) -> Quarantined and deleted successfully. c:\program files\Ozone\audio converter\record crack.exe (Trojan.Agent) -> Quarantined and deleted successfully. أكثر... |
مواقع النشر (المفضلة) |
|
|
![]() |
||||
الموضوع | كاتب الموضوع | المنتدى | مشاركات | آخر مشاركة |
مشكلة عدم فتح الافيرا ؛ ظهور رسالة فتح باستخدام ؛ ... | RSS | Arabic Rss | 0 | 04-09-2011 12:53 AM |
بطاقة للتسوق باستخدام النقال | RSS | المجاوشي للأخبار العامه والسياسية والرياضية | 0 | 02-15-2011 04:24 PM |
مشكلة في ويندوز 7 .. تم تسجيل الدخول باستخدام ملف تعريف مؤقت | RSS | Arabic Rss | 0 | 02-10-2011 10:23 AM |
فتح باستخدام | RSS | Arabic Rss | 0 | 11-16-2010 08:04 PM |
مشكلة ""فتح باستخدام"" | RSS | Arabic Rss | 0 | 09-05-2010 12:43 AM |
|