ذكرى

السلام عليكم

عندي مشكلة بالجهاز

عندي عدة ايميلات كل مااشغل المسنجر منهم عادي يفتح ومايصير شي بالجهاز

الا ايميل معين كل ماافتح المسنجر الخاص فيه يتقفل جهازي فورا من اول ماتفتح صفحة المسنجر


التقارير :


إقتباس:
logfile of trend micro hijackthis v2.0.2
scan saved at 0441 ص, on 23/02/2012
platform: Windows xp sp3 (winnt 5.01.2600)
msie: Internet explorer v8.00 (8.00.6001.18702)
boot mode: Normal

running processes:
C:\windows\system32\smss.exe
c:\windows\system32\winlogon.exe
c:\windows\system32\services.exe
c:\windows\system32\lsass.exe
c:\windows\system32\svchost.exe
c:\windows\system32\svchost.exe
c:\program files\alwil software\avast5\afwserv.exe
c:\program files\alwil software\avast5\avastsvc.exe
c:\windows\explorer.exe
c:\windows\system32\spoolsv.exe
c:\windows\system32\vttimer.exe
c:\windows\system32\s3trayp.exe
c:\windows\rthdcpl.exe
c:\program files\real\realplayer\update\realsched.e xe
c:\program files\yuna software\messenger plus!\plusservice.exe
c:\program files\alwil software\avast5\avastui.exe
c:\program files\common files\****\**** update\jusched.exe
c:\windows\system32\ctfmon.exe
c:\program files\superantispyware\superantispyware. exe
c:\program files\messenger\msmsgs.exe
c:\********s and settings\welcome\local settings\application data\google\chrome\application\chrome.ex e
c:\program files\superantispyware\sascore.exe
c:\program files\****\jre6\bin\jqs.exe
c:\program files\common files\microsoft shared\vs7debug\mdm.exe
c:\********s and settings\welcome\local settings\application data\google\chrome\application\chrome.ex e
c:\windows\system32\svchost.exe
c:\********s and settings\welcome\local settings\application data\google\chrome\application\chrome.ex e
c:\********s and settings\welcome\local settings\application data\google\chrome\application\chrome.ex e
c:\program files\windows live\messenger\msnmsgr.exe
c:\program files\windows live\contacts\wlcomm.exe
c:\********s and settings\welcome\local settings\application data\google\chrome\application\chrome.ex e
c:\hijackthis.exe

r1 - hkcu\software\microsoft\internet explorer\main,search page = http://go.microsoft.com/fwlink/?linkid=54896
r1 - hklm\software\microsoft\internet explorer\main,default_page_url = http://go.microsoft.com/fwlink/?linkid=69157
r1 - hklm\software\microsoft\internet explorer\main,default_search_url = http://go.microsoft.com/fwlink/?linkid=54896
r1 - hklm\software\microsoft\internet explorer\main,search page = http://go.microsoft.com/fwlink/?linkid=54896
r0 - hklm\software\microsoft\internet explorer\main,start page = http://go.microsoft.com/fwlink/?linkid=69157
r0 - hklm\software\microsoft\internet explorer\search,searchassistant =
r0 - hklm\software\microsoft\internet explorer\search,customizesearch =
r1 - hkcu\software\microsoft\windows\currentv ersion\internet settings,proxyoverride = local
o2 - bho: Realplayer download and record plugin for internet explorer - {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\********s and settings\all users\application data\real\realplayer\browserrecordplugin \ie\rpbrowserrecordplugin.dll
o2 - bho: مساعد تسجيل الدخول إلى windows live - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
o2 - bho: ****(tm) plug-in 2 ssv helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\****\jre6\bin\jp2ssv.dll
o2 - bho: Jqsiestartdetectorimpl - {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\****\jre6\lib\deploy\jqs\ie\jqs_pl ugin.dll
o4 - hklm\..\run: [vttimer] vttimer.exe
o4 - hklm\..\run: [s3trayp] s3trayp.exe
o4 - hklm\..\run: [rthdcpl] rthdcpl.exe
o4 - hklm\..\run: [alcmtr] alcmtr.exe
o4 - hklm\..\run: [tkbellexe] "c:\program files\real\realplayer\update\realsched.e xe" -osboot
o4 - hklm\..\run: [plusservice] c:\program files\yuna software\messenger plus!\plusservice.exe
o4 - hklm\..\run: [avast] "c:\program files\alwil software\avast5\avastui.exe" /nogui
o4 - hklm\..\run: [sun****updatesched] "c:\program files\common files\****\**** update\jusched.exe"
o4 - hklm\..\run: [kernelfaultcheck] %systemroot%\system32\dumprep 0 -k
o4 - hkcu\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe
o4 - hkcu\..\run: [google update] "c:\********s and settings\welcome\local settings\application data\google\update\googleupdate.exe" /c
o4 - hkcu\..\run: [superantispyware] c:\program files\superantispyware\superantispyware. exe
o4 - hkcu\..\run: [msmsgs] "c:\program files\messenger\msmsgs.exe" /background
o4 - hkus\s-1-5-19\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'local service')
o4 - hkus\s-1-5-19\..\runonce: [nltide_2] regsvr32 /s /n /i:u ****l32 (user 'local service')
o4 - hkus\s-1-5-20\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'network service')
o4 - hkus\s-1-5-20\..\runonce: [nltide_2] regsvr32 /s /n /i:u ****l32 (user 'network service')
o4 - hkus\s-1-5-18\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'system')
o4 - hkus\s-1-5-18\..\runonce: [nltide_2] regsvr32 /s /n /i:u ****l32 (user 'system')
o4 - hkus\.default\..\run: [ctfmon.exe] c:\windows\system32\ctfmon.exe (user 'default user')
o4 - hkus\.default\..\runonce: [nltide_2] regsvr32 /s /n /i:u ****l32 (user 'default user')
o4 - global startup: Adobe gamma loader.lnk = c:\program files\common files\adobe\calibration\adobe gamma loader.exe
o8 - extra con**** menu item: &تصدير إلى microsoft excel - res://c:\progra~1\micros~1\office11\excel.exe/3000
o8 - extra con**** menu item: Advanced email extractor - res://d:\program%20files\advanced%20email%20ex tractor%20pro\aeepmsie.dll/page.html
o8 - extra con**** menu item: Scan link with aee - res://d:\program%20files\advanced%20email%20ex tractor%20pro\aeepmsie.dll/link.html
o9 - extra button: بحث - {92780b25-18cc-41c8-b9be-3c9c571a8263} - c:\progra~1\micros~1\office11\refiebar.d ll
o9 - extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - c:\windows\network diagnostic\xpnetdiag.exe
o9 - extra 'tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - c:\windows\network diagnostic\xpnetdiag.exe
o9 - extra button: Messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o9 - extra 'tools' menuitem: Windows messenger - {fb5f1910-f110-11d2-bb9e-00c04f795683} - c:\program files\messenger\msmsgs.exe
o9 - extra button: Email extractor - {afa7db99-3e4d-4396-94f8-b0b135bcb472} - res://d:\program%20files\advanced%20email%20ex tractor%20pro\aeepmsie.dll/page.html (file missing) (hkcu)
o9 - extra 'tools' menuitem: Advanced email extractor - {afa7db99-3e4d-4396-94f8-b0b135bcb472} - res://d:\program%20files\advanced%20email%20ex tractor%20pro\aeepmsie.dll/page.html (file missing) (hkcu)
o20 - winlogon notify: !saswinlogon - c:\program files\superantispyware\saswinlo.dll
o23 - service: Sas core service (!sascore) - superantispyware.com - c:\program files\superantispyware\sascore.exe
o23 - service: Avast! Antivirus - avast software - c:\program files\alwil software\avast5\avastsvc.exe
o23 - service: Avast! Firewall - avast software - c:\program files\alwil software\avast5\afwserv.exe
o23 - service: خدمة تحديث google (gupdate) (gupdate) - google inc. - c:\program files\google\update\googleupdate.exe
o23 - service: خدمة google update (gupdatem) (gupdatem) - google inc. - c:\program files\google\update\googleupdate.exe
o23 - service: **** quick starter (****quickstarterservice) - sun microsystems, inc. - c:\program files\****\jre6\bin\jqs.exe

--
end of file - 7364 bytes

شمس الحب

تستطيع المشاركة هنا والرد على الموضوع ومشاركة رأيك عبر حسابك في الفيس بوك

---

lshu]m [ih.d djrtg gphg, lu jaydg hglsk =(