جهازي عليه فايروس لا استطيع التخلص منه >>>

بسم الله الرحمن الرحيم

السلام عليكم ورحمة الله وبركاته

كيف اخباركم

اصيب جهازي مؤخرا بعدة فيروسات لا اعلم من اين اتت

المهم فحصت الجهاز عن طريق الكاسبر سكاي وما طلع ولا اي فايروس معاه

وبعدها فحصت الجهاز بالمالووير بايت وطلع 23 كائنات مصابة وما قدرت احذفهن عن طريقة

وهاي التقارير


09:57:44 Debian MESSAGE Protection started successfully
09:57:49 Debian MESSAGE IP Protection started successfully
10:05:04 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:05:09 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:10:48 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:10:48 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:10:56 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:11:22 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:11:37 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:12:35 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:12:43 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:12:54 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:12:54 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:13:01 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:13:03 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:13:37 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:13:51 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:14:05 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:14:25 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:14:31 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:14:57 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:14:57 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:15:06 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:15:20 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:15:34 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:15:45 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:15:54 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:16:09 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:16:13 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:16:13 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:16:25 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:16:48 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:16:48 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:16:51 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:17:14 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:17:15 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:17:24 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:17:48 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:17:54 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:18:07 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:18:08 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:18:09 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:18:19 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:39:17 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:39:17 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:39:48 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:40:28 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:40:38 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:40:49 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:42:25 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:42:25 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:50:21 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:50:24 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:50:26 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:50:27 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:50:28 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:50:28 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:50:43 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:56:51 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:56:52 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:57:03 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:57:15 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:57:24 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:57:36 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:57:37 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:57:45 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:58:11 Debian IP-BLOCK 193.107.16.108 (Type: outgoing, Port: 51232, Process: avp.exe)
10:58:13 Debian IP-BLOCK 193.107.16.108 (Type: outgoing, Port: 51234, Process: avp.exe)
10:58:13 Debian IP-BLOCK 193.107.16.108 (Type: outgoing, Port: 51236, Process: avp.exe)
10:58:21 Debian IP-BLOCK 193.107.16.103 (Type: outgoing, Port: 51238, Process: avp.exe)
10:58:45 Debian IP-BLOCK 193.107.16.103 (Type: outgoing, Port: 51249, Process: avp.exe)
10:58:54 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 51269, Process: avp.exe)
10:59:24 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
10:59:25 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:59:26 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 51399, Process: avp.exe)
10:59:34 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 51417, Process: avp.exe)
10:59:41 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
10:59:43 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 51426, Process: avp.exe)
10:59:59 Debian IP-BLOCK 193.107.16.108 (Type: outgoing, Port: 51481, Process: avp.exe)
10:59:59 Debian IP-BLOCK 193.107.16.108 (Type: outgoing, Port: 51483, Process: avp.exe)
11:00:52 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:01:10 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:01:18 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:01:19 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:01:25 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:01:27 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:01:31 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:01:32 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:01:39 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:02:02 Debian IP-BLOCK 193.107.16.103 (Type: outgoing, Port: 51525, Process: avp.exe)
11:02:02 Debian IP-BLOCK 193.107.16.103 (Type: outgoing, Port: 51527, Process: avp.exe)
11:02:31 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
11:02:34 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:03:35 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:05:08 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 51883, Process: avp.exe)
11:05:08 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 51957, Process: avp.exe)
11:05:33 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 52065, Process: avp.exe)
11:05:41 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 52109, Process: avp.exe)
11:06:05 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 52229, Process: avp.exe)
11:06:14 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 52277, Process: avp.exe)
11:06:14 Debian IP-BLOCK 92.241.168.41 (Type: outgoing, Port: 52301, Process: avp.exe)
11:18:29 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
11:18:29 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:18:33 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
11:18:42 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
11:18:42 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:19:25 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:19:28 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:20:13 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:22:09 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
11:22:09 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:22:21 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:22:32 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:22:38 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:22:38 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:22:44 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:22:51 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
11:22:53 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:23:30 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:23:43 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:23:47 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:23:48 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:23:53 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:24:02 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:24:57 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
11:24:58 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:25:09 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:56:31 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
11:57:13 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:00:16 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:01:17 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
12:01:17 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:01:35 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:02:02 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:02:27 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:02:51 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:03:36 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
12:03:37 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:03:59 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:04:16 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:04:25 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:04:47 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:05:21 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:07:50 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
12:07:51 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:07:58 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:12:10 Debian MESSAGE Scheduled update executed successfully
12:14:03 Debian MESSAGE IP Protection stopped
12:14:31 Debian MESSAGE Database updated successfully
12:14:33 Debian MESSAGE IP Protection started successfully
12:33:17 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
12:33:19 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
12:33:19 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:33:22 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW
12:33:23 Debian DETECTION C:\Program Files\RelevantKnowledge\rlls.dll Adware.RelevantKnowledge ALLOW
12:34:37 Debian DETECTION C:\PROGRAM FILES\RELEVANTKNOWLEDGE\RLLS.DLL Adware.RelevantKnowledge ALLOW


وكمان في تقرير تاني من نفس المالووير بايت

************' Anti-Malware 1.50.1.1100
www.************.org

نسخة قاعدة البيانات : 5742

Windows 6.1.7601 Service Pack 1
Internet Explorer 8.0.7601.17514

23/03/2011 01:55:17 م
mbam-log-2011-03-23 (13-55-17).txt

نوع الفحص : فحص كامل (C:\|D:\|E:\|F:\|)
الكائنات المفحوصة : 257099
الوقت المنقضي : 1 ساعة, 18 دقيقة, 52 ثانية

عمليات الذاكرة المصابة : 0
وحدات الذاكرة المصابة : 0
مفاتيح الريجستري المصابة : 0
قيم الريجستري المصابة : 0
مواد بيانات الريجستري المصابة : 0
المجلدات المصابة : 0
الملفات المصابة : 6

عمليات الذاكرة المصابة :
(لم يتم إكتشاف مواد ضارة)

وحدات الذاكرة المصابة :
(لم يتم إكتشاف مواد ضارة)

مفاتيح الريجستري المصابة :
(لم يتم إكتشاف مواد ضارة)

قيم الريجستري المصابة :
(لم يتم إكتشاف مواد ضارة)

مواد بيانات الريجستري المصابة :
(لم يتم إكتشاف مواد ضارة)

المجلدات المصابة :
(لم يتم إكتشاف مواد ضارة)

الملفات المصابة :
c:\program files\internet download manager\PaTch 6x.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
d:\برامج\winamp 5.601 build 3091 final\Keygen.exe (Trojan.Agent) -> Quarantined and deleted successfully.
d:\برامج\i.d.m6.04\myegy.com.internet download manager 6.04 build 1 final.by.mr ! hero\internet download manager 6.04 build 1 final\Keygen.exe (Trojan.Dropper.PGen) -> Quarantined and deleted successfully.
d:\برامج\i.d.m6.04\myegy.com.internet download manager 6.04 build 1 final.by.mr ! hero\internet download manager 6.04 build 1 final\PaTch.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
d:\برامج\internet download manager 6.02 build 2 beta\PaTch 6x.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
e:\babylonpropatch\babylon.pro.8.x-patch.exe (Trojan.Agent.CK) -> Quarantined and deleted successfully.






وبسسسس


تقرير الهايجاك



Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:41:20 م, on 24/05/2011
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v8.00 (8.00.7601.17514)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskhost.exe
C:\Windows\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\RelevantKnowledge\rlvknlg.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Zyzoom_Forum_Tools\zHijak.com
C:\Windows\system32\DllHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = Preserve
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://descargar.traducegratis.com/a...php?rvs=hompag
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://descargar.traducegratis.com/a...php?rvs=hompag
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://descargar.traducegratis.com/a...php?rvs=hompag
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://descargar.traducegratis.com/a...php?rvs=hompag
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: SuggestMeYesBHO - {0FB6A909-6086-458F-BD92-1F8EE10042A0} - C:\Program Files\AutocompletePro\AutocompletePro.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ievkbd.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~1\MICROS~2\Office14\GROOVEEX.DLL
O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Windows Live Messenger Companion Helper - {9FDDE16B-836F-4806-AB1F-1455CBEFF289} - C:\Program Files\Windows Live\Companion\companioncore.dll
O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~1\MICROS~2\Office14\URLREDIR.DLL
O2 - BHO: Bing Bar Helper - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\klwtbbho.dll
O3 - Toolbar: Bing Bar - {8dcb7100-df86-4384-8842-8fa844297b3f} - "C:\Program Files\Microsoft\BingBar\BingExt.dll" (file missing)
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe"
O4 - HKLM\..\Run: [************' Anti-Malware (reboot)] "C:\Users\Debian\AppData\Local\Temp\zxq1\mbam. exe" /runcleanupscript
O4 - HKLM\..\Run: [AdobeAAMUpdater-1.0] "C:\Program Files\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.e xe"
O4 - HKLM\..\Run: [SwitchBoard] C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe
O4 - HKLM\..\Run: [AdobeCS5ServiceManager] "C:\Program Files\Common Files\Adobe\CS5ServiceManager\CS5ServiceManager.ex e" -launchedbylogin
O4 - HKLM\..\Run: [************' Anti-Malware] "C:\Program Files\************' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\RunOnce: [************' Anti-Malware] C:\Program Files\************' Anti-Malware\mbamgui.exe /install /silent
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\ie_banner_deny.htm
O8 - Extra context menu item: Download all links with IDM - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: Download FLV video content with IDM - C:\Program Files\Internet Download Manager\IEGetVL.htm
O8 - Extra context menu item: Download with IDM - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: @C:\Program Files\Windows Live\Companion\companionlang.dll,-600 - {0000036B-C524-4050-81A0-243669A86B9F} - C:\Program Files\Windows Live\Companion\companioncore.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O10 - Unknown file in Winsock LSP: c:\program files\common files\microsoft shared\windows live\wlidnsp.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/pu...sh/swflash.cab
O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll
O18 - Filter hijack: text/xml - {807573E5-5146-11D5-A672-00B0D022E945} - C:\Program Files\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL
O20 - AppInit_DLLs: C:\PROGRA~1\KASPER~1\KASPER~1\mzvkbd3.dll, C:\PROGRA~1\KASPER~1\KASPER~1\kloehk.dll
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2011\avp.exe
O23 - Service: MBAMService - ************ Corporation - C:\Program Files\************' Anti-Malware\mbamservice.exe
O23 - Service: RelevantKnowledge - TMRG, Inc. - C:\Program Files\RelevantKnowledge\rlservice.exe
O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Program Files\Common Files\Adobe\SwitchBoard\SwitchBoard.exe

--
End of file - 6350 bytes




انا انتظركم

أكثر...