بطيء وعليه فايروس دبل كليك

أخواني

جهازي بطيء جدا جدا

ثانيا برنامج باندا مره يطلعلي اشعار انه فيه 3 فايروسات ومو قادر يحذفها

واحيانا يطلعلي فايروسس واحد مو ثلاثة :cr:

سبق تم دخول هاكر من جده (عرفنا من شرركة الاتصالات لانه كلمة السر كانت رقم جوال خطيبي وهو يحسبه جوالي ودق وانفجع:d:)
دخل على جهازي وتم تفتيش جهازي وسرقة ايميلي وكلم خطيبي بايميلي وهدده انه مصورني ومصوره لكن الحمدلله ماقدر يسويلنا شي لاننا مملكين وانا سويت ايميل جديد واضفت ايميلي المسروق وكلمته والرجل اعتذر ورد علي ايميلي. وانتهت المشكله وفرمت الجهاز لكن مازلت اعاني من بطء الجهاز وتقطيع الانترنت كل شوي يفصل واحيانا رست واذيه مدري من وين:eek:

نزلت اداة باندا وطلعلي انه فيه 3 فايروسات منها دبليو كليك او دبل كليك كوكيز
ومرات ااسوي اسكان يطلعلي فايروس دبل كليك لحاله.:?:

الحين نزلت برنامج حق التقارير وسويت فحص للجهاز عبر موقع بيدفيندر وايضا اعطوني تقرير اخر

ابيكم تشوفوا مشكلتي وتوضحونها لي.

----------------------------

وسؤال الله يبارك فيكم

------------------------------

الحين انا حذفت صوري الشخصيه وسيرتي الذاتيه وشهاداتي وكل اشياءئي الشخصيه من لاب توبي نهائيا

لكن قريت انه حتى لو سويت فورمات للويندوز تبقى نسخه من جميع ملفات الجهاز في الذاكره ذاكرة الجهاز او شي كذا وانه فيه طرق وبرامج يسترجعون فيها الملفات حتى لو سوينا فورمات للجهاز يقدرون يرجعوا الملفات؟:er:

ايش الطريقه لحذف كل مافي جهازي من صور اهلي حتى اجدادي وشهاداتي حتى الهويه كنت حاطتها وصور بيت المستقبل وشهادات الجامعه والخ :hh:

كيف احذفها بلا رجعه بحيث ماترجع ابدا حتى لو جابوا الفانوس السحري ؟

كيف اعرف اي بي الهاكر علما بأني مااضفت أي مخلوق على ماسنجري سوى أبوي وأخواني واختي وخطيبي فقط ومابفتح مقاطع حرام ولاهالاشياء منتديات محدده بدخلها كلها تجاريه مااتوقع فيها هكر كيف تم اختراقي؟:?:

اتمنا لاتملوا ولاتطفشوا من كثرة أسئلتي خبرتي قليله بالحاسب واحتاج لتنوير واتمنى تجاوبوني على كل أسئلتي وتحلوا مشكلتي.:ok:

التقارير هي:


QuickScan Beta 32-bit v0.9.9.90
-------------------------------
Scan date: Thu Apr 28 22:42:16 2011
Machine ID: 4CCCAA5C

No infection found.
-------------------

Processes
---------
(unsigned) Realtek HD Sound Manager 1536 C:\WINDOWS\SOUNDMAN.EXE
(verified) Motorola Roaming Client 3708 C:\Program Files\Motorola\Connection Manager\MotoCM.exe
(verified) Intel(R) Common User Interface 1508 C:\WINDOWS\system32\igfxpers.exe
(verified) Intel(R) Common User Interface 1528 C:\WINDOWS\system32\igfxsrvc.exe
(verified) Java(TM) Platform SE 6 U20 1848 C:\Program Files\Java\jre6\bin\jqs.exe
(verified) Microsoft® Windows® Operating System 800 C:\WINDOWS\explorer.exe
(verified) Microsoft® Windows® Operating System 2916 C:\WINDOWS\system32\alg.exe
(verified) Microsoft® Windows® Operating System 856 C:\WINDOWS\system32\csrss.exe
(verified) Microsoft® Windows® Operating System 1728 C:\WINDOWS\system32\ctfmon.exe
(verified) Microsoft® Windows® Operating System 936 C:\WINDOWS\system32\lsass.exe
(verified) Microsoft® Windows® Operating System 924 C:\WINDOWS\system32\services.exe
(verified) Microsoft® Windows® Operating System 808 C:\WINDOWS\system32\smss.exe
(verified) Microsoft® Windows® Operating System 1608 C:\WINDOWS\system32\spoolsv.exe
(verified) Microsoft® Windows® Operating System 1128 C:\WINDOWS\system32\svchost.exe
(verified) Microsoft® Windows® Operating System 1196 C:\WINDOWS\system32\svchost.exe
(verified) Microsoft® Windows® Operating System 1228 C:\WINDOWS\system32\svchost.exe
(verified) Microsoft® Windows® Operating System 1296 C:\WINDOWS\system32\svchost.exe
(verified) Microsoft® Windows® Operating System 1404 C:\WINDOWS\system32\svchost.exe
(verified) Microsoft® Windows® Operating System 1804 C:\WINDOWS\system32\svchost.exe
(verified) Microsoft® Windows® Operating System 1952 C:\WINDOWS\system32\svchost.exe
(verified) Microsoft® Windows® Operating System 2604 C:\WINDOWS\system32\wbem\wmiapsrv.exe
(verified) Microsoft® Windows® Operating System 880 C:\WINDOWS\system32\winlogon.exe
(verified) Panda Cloud Antivirus 1884 C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
(verified) Panda Cloud Antivirus 1668 C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
(verified) Panda Security URL Filtering 1560 C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe
(verified) RcAppSvc 2028 C:\Program Files\Motorola\Connection Manager\RcAppSvc.exe
(verified) TuneUp Utilities 2009 376 C:\WINDOWS\system32\TUProgSt.exe
(verified) Windows® Internet Explorer 992 C:\Program Files\Internet Explorer\iexplore.exe
(verified) Windows® Internet Explorer 2736 C:\Program Files\Internet Explorer\iexplore.exe
(verified) Windows® Internet Explorer 3192 C:\Program Files\Internet Explorer\iexplore.exe
(verified) Windows® Internet Explorer 3232 C:\Program Files\Internet Explorer\iexplore.exe

Network activity
----------------
Process PSANHost.exe (1884) connected on port 80 (HTTP) --> 88.221.217.10
Process iexplore.exe (3192) connected on port 80 (HTTP) --> 199.7.51.190
Process iexplore.exe (3192) connected on port 80 (HTTP) --> 88.221.217.8
Process iexplore.exe (3232) connected on port 80 (HTTP) --> 64.4.61.130

Autoruns and critical files
---------------------------
(unsigned) AntiWPA3 C:\WINDOWS\system32\antiwpa.dll
(unsigned) Intel(R) Common User Interface C:\WINDOWS\system32\igfxdev.dll
(unsigned) Realtek HD Sound Manager C:\WINDOWS\SOUNDMAN.EXE
(verified) GrooveShellExtensions Module C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
(verified) Intel(R) Common User Interface C:\WINDOWS\system32\igfxpers.exe
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\browseui.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\crypt32.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\cryptnet.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\cscdll.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\ctfmon.exe
(verified) Microsoft® Windows® Operating System C:\WINDOWS\System32\logon.scr
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\logonui.exe
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\sclgntfy.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\shell32.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\stobject.dll
(verified) Microsoft® Windows® Operating System c:\windows\system32\userinit.exe
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\wlnotify.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\WPDShServiceObj.dll
(verified) Panda Cloud Antivirus C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
(verified) Panda Security URL Filtering C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe
(verified) RealUpgrade C:\Program Files\Real\RealUpgrade\realupgrade.exe
(verified) TuneUp Utilities C:\Program Files\TuneUp Utilities 2009\OneClickStarter.exe
(verified) Windows® Internet Explorer C:\WINDOWS\system32\webcheck.dll

Browser plugins
---------------
(unsigned) RealJukebox NS Plugin C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
(unsigned) RealNetworks(tm) RealPlayer Chrome Back C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPl ugins\nprpchromebrowserrecordext.dll
(unsigned) RealPlayer Version Plugin C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
(unsigned) RealPlayer(tm) HTML5VideoShim Plug-In ( C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPl ugins\nprphtml5videoshim.dll
(verified) AcroIEHelperShim Library C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
(verified) Adobe Acrobat C:\Program Files\Internet Explorer\plugins\nppdf32.dll
(verified) bdoscandel.exe C:\WINDOWS\bdoscandel.exe
(verified) bdscanonline C:\WINDOWS\Downloaded Program Files\oscan82.ocx
(verified) BitDefender QuickScan C:\WINDOWS\Downloaded Program Files\qsax.dll
(verified) GrooveShellExtensions Module C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
(verified) ipsupd.dll C:\WINDOWS\Downloaded Program Files\ipsupd.dll
(verified) Java(TM) Platform SE 6 U20 C:\Program Files\Java\jre6\bin\jp2ssv.dll
(verified) Java(TM) Platform SE 6 U20 C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
(verified) Messenger C:\Program Files\Messenger\msmsgs.exe
(verified) Microsoft® Windows Live Login Helper C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\mswsock.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\rsvpsp.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\winrnr.dll
(verified) Microsoft® Windows® Operating System C:\WINDOWS\system32\wshbth.dll
(verified) NPSWF32.dll C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
(verified) Panda Security Toolbar C:\Program Files\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll
(verified) RealPlayer Download and Record Plugin C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrow serrecordplugin.dll
(verified) RealPlayer(tm) G2 LiveConnect-Enabled P C:\Program Files\Real\RealPlayer\Netscape6\nppl3260.dll
(verified) Windows Presentation Foundation C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll
(verified) Windows® Internet Explorer C:\WINDOWS\system32\ieframe.dll

Missing files
-------------
File not found: C:\DOCUME~1\WINDOW~1\LOCALS~1\Temp\ATICDSDr.sys
--> HKLM\System\ControlSet001\services\ATICDSDr\"Image Path"
File not found: C:\Documents and Settings\Windows XP\fswagz.exe
--> HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\"Taskman"
File not found: C:\WINDOWS\gdrv.sys
--> HKLM\System\ControlSet001\services\gdrv\"ImagePath "
File not found: system32\drivers\viahduaa.sys
--> HKLM\System\ControlSet001\services\VIAHdAudAddServ ice\"ImagePath"

Scan
----
(unsigned) MD5: 530a06c01452eb3e776397ecaa4dbb42 C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPl ugins\nprpchromebrowserrecordext.dll
(unsigned) MD5: 3ed1d8a73cfad9d68085c5279b0b72c0 C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\MozillaPl ugins\nprphtml5videoshim.dll
(unsigned) MD5: 5a45430d95ae9888b3e83ec3d33e7355 C:\Program Files\Motorola\Connection Manager\AuthImpl.dll
(unsigned) MD5: 371a3ce6b0fa0df922c8e688fbd63ef9 C:\Program Files\Motorola\Connection Manager\ConApps.dll
(unsigned) MD5: 42f1c00f0d8a65b943e2ab9773c5dbdc C:\Program Files\Motorola\Connection Manager\CustomDiagDisplay.dll
(unsigned) MD5: 70e691146fdf9a6225618ef629beb466 C:\Program Files\Motorola\Connection Manager\Diagnostic.dll
(unsigned) MD5: ad4b890e917d028d326457f82bf5eba8 C:\Program Files\Motorola\Connection Manager\Eap.dll
(unsigned) MD5: 353310283a1d2360a8ebcc9e0ff6e93a C:\Program Files\Motorola\Connection Manager\EapTls.dll
(unsigned) MD5: 7684f26fb85bf77098f1f8a0c05bc837 C:\Program Files\Motorola\Connection Manager\EapTlsUi.dll
(unsigned) MD5: d460338b6faf76108f3cd9da5d6198ed C:\Program Files\Motorola\Connection Manager\EngineeringDiagnostics.dll
(unsigned) MD5: f38f2e386e31fb6a07037731714e968d C:\Program Files\Motorola\Connection Manager\Ethernet.dll
(unsigned) MD5: ba1e920ae2268ba6e23377fe987e21e6 C:\Program Files\Motorola\Connection Manager\EventMan.dll
(unsigned) MD5: 876c6fc8fc8c37337768c39df47fbbbd C:\Program Files\Motorola\Connection Manager\ExtendedTools.dll
(unsigned) MD5: f75751fd7141bd99802f48ee02dd2d1a C:\Program Files\Motorola\Connection Manager\FeatureMan.dll
(unsigned) MD5: e630c52dcafbbbb9b29ac433790a9a7b C:\Program Files\Motorola\Connection Manager\FileManager.dll
(unsigned) MD5: 8d0f1270da6465d7f9782596c6c5313d C:\Program Files\Motorola\Connection Manager\libxvi010.dll
(unsigned) MD5: d10302d1c432be8c11d351a574ce2171 C:\Program Files\Motorola\Connection Manager\NdisHelper.dll
(unsigned) MD5: 0f444dc139da85783ed99caab6333615 C:\Program Files\Motorola\Connection Manager\Pac.dll
(unsigned) MD5: de008e7b8cb729d4a8f60092742c2f31 C:\Program Files\Motorola\Connection Manager\PanelFrmwrk.dll
(unsigned) MD5: fe6c2eb5c730d5a1e59ce1a8b2c021a7 C:\Program Files\Motorola\Connection Manager\PRCApiCli.dll
(unsigned) MD5: b508d7bc6770a179d8034eb547782054 C:\Program Files\Motorola\Connection Manager\PRCApiSrv.dll
(unsigned) MD5: d5a36e60352e37e86dc02f0fe87a975e C:\Program Files\Motorola\Connection Manager\ProcUtil.dll
(unsigned) MD5: 3e9ac6900b90c93956eeed5f72f0b5e4 C:\Program Files\Motorola\Connection Manager\Profile.dll
(unsigned) MD5: 8dc6a6115130294918690cbceb9def9f C:\Program Files\Motorola\Connection Manager\RcCommon.dll
(unsigned) MD5: 25d615f7be3f592f940a94af9252ed15 C:\Program Files\Motorola\Connection Manager\RcEngine.dll
(unsigned) MD5: bfae5dc2517c36997b381f0fee86dd32 C:\Program Files\Motorola\Connection Manager\RpcSrvApi.dll
(unsigned) MD5: 75ad023963387c6cae1aefbf4e600c92 C:\Program Files\Motorola\Connection Manager\RulesMgr.dll
(unsigned) MD5: 0ac341928763c60cb59495b7c729762c C:\Program Files\Motorola\Connection Manager\ScrtMan.dll
(unsigned) MD5: a98170b1846354a22d5228d46a1dc6a9 C:\Program Files\Motorola\Connection Manager\SkinManager.dll
(unsigned) MD5: 2af96e367578c7c337719f14fdc9a287 C:\Program Files\Motorola\Connection Manager\Smartkey.dll
(unsigned) MD5: 1b332b500ef0c9ee3c672fa53353cdff C:\Program Files\Motorola\Connection Manager\TextTranslator.dll
(unsigned) MD5: c47a4a393edd0f2462905238a8796b04 C:\Program Files\Motorola\Connection Manager\ToolBx.dll
(unsigned) MD5: 1239d3ee286931c044ad9d44903156a5 C:\Program Files\Motorola\Connection Manager\Update.dll
(unsigned) MD5: b7792f8c8f9821096dada65e0c5bc110 C:\Program Files\Motorola\Connection Manager\VPNManager.dll
(unsigned) MD5: 7439c8259f392a75d96bc37a57b1473c C:\Program Files\Motorola\Connection Manager\Wifi.dll
(unsigned) MD5: 56397b3f7b8d96b6bd248a5cdb21e3f4 C:\Program Files\Motorola\Connection Manager\WiMaxCore.dll
(unsigned) MD5: 0cb6047251fd7cced1ff7e8ffcaf0761 C:\Program Files\Motorola\Connection Manager\WiMaxUi.dll
(unsigned) MD5: 8d80b8386ce660b3611b3570b6ad97f6 C:\Program Files\Motorola\Connection Manager\ZipArchive.dll
(unsigned) MD5: 40c2219f3aba0403bf46c70b29e53a6b C:\Program Files\Motorola\Connection Manager\zlib.dll
(unsigned) MD5: 5bda680c2be14d02274f95188fef651c C:\Program Files\Panda Security\Panda Cloud Antivirus\borlndmm.dll
(unsigned) MD5: 28bc28a3edc621f7c954ea8f88fe6e2d C:\Program Files\Panda Security\Panda Cloud Antivirus\cc3290mt.dll
(unsigned) MD5: dd82eb68d97944b192c7803eb585b03c C:\Program Files\Panda Security\Panda Cloud Antivirus\rtl120.bpl
(unsigned) MD5: 773ebd87010a6f644869a59d98792c9c C:\Program Files\Panda Security\Panda Cloud Antivirus\vcl120.bpl
(unsigned) MD5: 264bfcc11a0da6f0b449a40a14d15772 C:\Program Files\Panda Security\Panda Cloud Antivirus\vclx120.bpl
(unsigned) MD5: cb270f580ad0249cabcf61f654fbe545 C:\Program Files\Panda Security\Panda ID Protect\IEToolbar\di_Blowfish.dll
(unsigned) MD5: 5d6b95b9cc3a30bc8b69d5804f940860 C:\Program Files\Panda Security\Panda ID Protect\IEToolbar\diCryptoSys.dll
(unsigned) MD5: 0596cd3f49e502ee98c7488f2a0eb565 C:\Program Files\Panda Security\Panda ID Protect\IEToolbar\DtxGlueLib.dll
(unsigned) MD5: d45ee78f3883fe5ec020a9821f42990a C:\Program Files\Panda Security\Panda ID Protect\IEToolbar\FormFiller.dll
(unsigned) MD5: 7d3903af48e6c1dc2704eafcb608d031 C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
(unsigned) MD5: 56b73e1adfd768e80369c4a2e68f35df C:\Program Files\Real\RealPlayer\Netscape6\nprjplug.dll
(unsigned) MD5: e7856c9b1ae2ded52c98e69497308083 C:\Program Files\Real\RealPlayer\Netscape6\nprpjplug.dll
(unsigned) MD5: 3bf7213044dd0701e9e03cfed78bb088 C:\WINDOWS\assembly\GAC\Microsoft.mshtml\7.0.3300. 0__b03f5f7f11d50a3a\Microsoft.mshtml.dll
(unsigned) MD5: f2055ff9d81b2f595229e680816d8f5a C:\WINDOWS\assembly\GAC_32\CustomMarshalers\2.0.0. 0__b03f5f7f11d50a3a\CustomMarshalers.dll
(unsigned) MD5: 3426fd5780da7de689a27bd1477df3be C:\WINDOWS\assembly\GAC_MSIL\Interop.SurfSecret_Fo rmFiller\1.0.0.0__d7e6797a04c5c135\Interop.SurfSec ret_FormFiller.dll
(unsigned) MD5: b4243e892fd2cf0f643da68c3b715468 C:\WINDOWS\assembly\GAC_MSIL\mscorlib.resources\2. 0.0.0_ar_b77a5c561934e089\mscorlib.resources.dll
(unsigned) MD5: b7c3f1164e8b08e0710cabffd1b6b5d4 C:\WINDOWS\assembly\GAC_MSIL\System.Drawing\2.0.0. 0__b03f5f7f11d50a3a\System.Drawing.dll
(unsigned) MD5: 428414fcd23805381b7339990bc7ff4d C:\WINDOWS\assembly\GAC_MSIL\System.Windows.Forms\ 2.0.0.0__b77a5c561934e089\System.Windows.Forms.dll
(unsigned) MD5: 79ac9c0bd81180f62191d9df74ebfeff C:\WINDOWS\assembly\GAC_MSIL\System\2.0.0.0__b77a5 c561934e089\System.dll
(unsigned) MD5: b996d805365377ca3d2e8d551eb51dc0 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Cus tomMarshalers\c10ec9b4de2b366236ec83237dc31281\Cus tomMarshalers.ni.dll
(unsigned) MD5: da082d7cc5a7aa678fb788bc918df4c1 C:\WINDOWS\assembly\NativeImages_v2.0.50727_32\msc orlib\32e6f703c114f3a971cbe706586e3655\mscorlib.ni .dll
(unsigned) MD5: 0d034e8c4f88c5b2b0c1af3cf438cc4f C:\WINDOWS\SOUNDMAN.EXE
(unsigned) MD5: b80a024ddd9bfa1685d72feafba76db6 C:\WINDOWS\system32\antiwpa.dll
(unsigned) MD5: 48846b31be5a4fa662ccfde7a1ba86b9 C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
(unsigned) MD5: b2957d6c1226f029230dac2c46d34286 C:\WINDOWS\system32\drivers\RtkHDAud.sys
(unsigned) MD5: 1180852dbfadafc375dbba1f6b23eee7 C:\WINDOWS\system32\igfxdev.dll
(unsigned) MD5: 30db789a2d61dbe9bfcc07e3e9f3cda8 C:\WINDOWS\system32\igfxsrvc.dll
(unsigned) MD5: f35a584e947a5b401feb0fe01db4a0d7 C:\WINDOWS\system32\MFC71.dll
(unsigned) MD5: 8c22083ed515dc94d575438662f0be6a C:\WINDOWS\system32\msi.dll
(unsigned) MD5: 94e5d1795a0855e5f1fb5bdcf903f9da C:\WINDOWS\system32\spool\prtprocs\w32x86\filterpi pelineprintproc.dll
(unsigned) MD5: 4928ab3a304ddf05c354de3807a4a66b C:\WINDOWS\WinSxS\x86_Microsoft.VC80.MFC_1fc8b3b9a 1e18e3b_8.0.50727.4053_x-ww_b77cec8e\mfc80.dll

No file uploaded.
Scan finished - communication took 6 sec
Total traffic - 0.07 MB sent, 2.25 KB recvd
Scanned 1313 files and modules - 306 seconds
================================================== ============================
Logfile of Trend Micro HijackThis v2.0.a4
Scan saved at 11:44:26 م, on 28/04/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Java\jre6\bin\jqs.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\TUProgSt.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe
C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Motorola\Connection Manager\MotoCM.exe
C:\Program Files\Motorola\Connection Manager\RcAppSvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HiJackThis\HiJackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Documents and Settings\All Users\Application Data\Real\RealPlayer\BrowserRecordPlugin\IE\rpbrow serrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office12\GRA8E1~1.DLL
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Program Files\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Panda Security Toolbar - {B821BF60-5C2D-41EB-92DC-3E4CCD3A22E4} - C:\Program Files\Panda Security\Panda Security Toolbar\PandaSecurityDx.dll
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [Panda Security URL Filtering] "C:\Documents and Settings\All Users\Application Data\Panda Security URL Filtering\Panda_URL_Filtering.exe"
O4 - HKLM\..\Run: [PSUNMain] "C:\Program Files\Panda Security\Panda Cloud Antivirus\PSUNMain.exe" /Traybar
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {4B54A9DE-EF1C-4EBE-A328-7C28EA3B433A} (BitDefender QuickScan Control) - http://quickscan.bitdefender.com/qsax/qsax.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\PROGRA~1\MICROS~2\Office12\GR99D3~1.DLL
O20 - Winlogon Notify: Antiwpa - antiwpa.dll (file missing)
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: البرنامج الخفي لذاكرة التخزين المؤقت لفئات المكونات - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: Motorola RcAppSvc (MOTOROLARcAppSvc) - SmithMicro Inc. - C:\Program Files\Motorola\Connection Manager\RcAppSvc.exe
O23 - Service: Panda Cloud Antivirus Service (NanoServiceMain) - Panda Security, S.L. - C:\Program Files\Panda Security\Panda Cloud Antivirus\PSANHost.exe
O23 - Service: ServiceLayer - Nokia - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
--
End of file - 6448 bytes
-------------------------------------------------------------------------------








أكثر...