ساعدونى او سمحتم

يا جماعه غرونى حرااااااااااااااااااااااااااااااااااااااااااااااااااااممممممممممم

السلامـ عليكم،
اختي كمبيوترج لابت توب ولا مكتبيـ

لان سبب الرعشه خارجي ع الاغلبـ من الويرات اللى برا

تحياتي

اعدينى لو سمحت بيقولواجهازى مخترق

السلام عليكم

اعملي تقرير ببرنامج Hijackthis وحمليه من هالرابط

وطريقة استخدامه ،، دبل كليك عليه ثم Run
ثم I Agree ثم Install
ثم Do a system scan and save log
ثم بيسوي سكان وبيظهر لج التقرير ،، اعملي له نسخ ،، وارفقيه بردج القادم

وان شاء الله خير

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 09:22:47 ?, on 02/11/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\Explorer.EXE
C:\PROGRA~1\AVG\AVG8\avgrsx.exe
C:\PROGRA~1\AVG\AVG8\avgemc.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Winamp\winampa.exe
C:\WINDOWS\system32\rundll32.exe
C:\Program Files\MSN Messenger\MsnMsgr.Exe
C:\Program Files\Winamp Remote\bin\OrbTray.exe
C:\Documents and Settings\MH\Local Settings\Application Data\Google\Update\GoogleUpdate.exe
C:\Program Files\Electronic Arts\EADM\Core.exe
C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
C:\Program Files\IncrediMail\bin\IMApp.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.3roos.com/TCKiZR6BROl
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.3roos.com/ShuJ2ifNJJc
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = http://go.3roos.com/2Bc2gWA90L7*http://www.yahoo.com/ext/search/search.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.3roos.com/ShuJ2ifNJJc
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.3roos.com/TCKiZR6BROl
R3 - URLSearchHook: Winamp Search Class - {57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - C:\Program Files\Winamp Toolbar\winamptb.dll
O2 - BHO: WormRadar.com IESiteBlocker.NavFilter - {3CA2F312-6F6E-4B53-A66E-4E65E497C8C0} - C:\Program Files\AVG\AVG8\avgssie.dll
O2 - BHO: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
O3 - Toolbar: AVG Security Toolbar - {A057A204-BACC-4D26-9990-79A187E2698E} - C:\PROGRA~1\AVG\AVG8\AVGTOO~1.DLL
O4 - HKLM\..\Run: [SkyTel] SkyTel.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [AzMixerSel] C:\Program Files\Realtek\InstallShield\AzMixerSel.exe
O4 - HKLM\..\Run: [AGRSMMSG] AGRSMMSG.exe
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [WinampAgent] "C:\Program Files\Winamp\winampa.exe"
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [MP10_EnsureFileVer] C:\WINDOWS\inf\unregmp2.exe /EnsureFileVersions
O4 - HKLM\..\Run: [MS32DLL] C:\WINDOWS\MS32DLL.dll.vbs
O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\MSN Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Messenger (Yahoo!)] "C:\Program Files\Yahoo!\Messenger\YahooMessenger.exe" -quiet
O4 - HKCU\..\Run: [Orb] "C:\Program Files\Winamp Remote\bin\OrbTray.exe" /background
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\MH\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" /c
O4 - HKCU\..\Run: [IncrediMail] C:\Program Files\IncrediMail\bin\IncMail.exe /c
O4 - HKCU\..\Run: [EA Core] C:\Program Files\Electronic Arts\EADM\Core.exe -silent
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Cyber-shot Viewer Media Check Tool.lnk = C:\Program Files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe
O4 - Global Startup: Bluetooth.lnk = ?
O8 - Extra context menu item: Add to Windows &Live Favorites - http://go.3roos.com/nmVisAIfKzZ
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Open in new foreground tab - res://C:\Program Files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?0576b15103c44ac6b45d15819d38a0a5
O8 - Extra context menu item: Send to &Bluetooth Device... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: @btrez.dll,-4015 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra 'Tools' menuitem: @btrez.dll,-12650 - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O18 - Protocol: linkscanner - {F274614C-63F8-47D5-A4D1-FBDDE494F8D1} - C:\Program Files\AVG\AVG8\avgpp.dll
O20 - AppInit_DLLs: avgrsstx.dll
O23 - Service: AVG Free8 E-mail Scanner (avg8emc) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgemc.exe
O23 - Service: AVG Free8 WatchDog (avg8wd) - AVG Technologies CZ, s.r.o. - C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
--
End of file - 6439 bytes

ها هو التقرير والجهاز لاب توب اسر وجديد يعنى ولسه مسوياله فورمات من فتره قريبه ومو عارفه ليه كل شويه بيصير معه مشاكل ياريت تقوليلى الحل وياريت ما يكون معقد وبسرعه لانى محتاجه الحل ضروى وشكرا جدا

السلام عليكم

فعلاً بجهازج فيروس

O4 - HKLM\..\Run: [MS32DLL] C:\WINDOWS\MS32DLL.dll.vbs

لي عودة ان شاء الله بالحل

اولاً: اغلقي جميع البرامج وصفحات الانترنت ،، فقط شغلي برنامج Hijackthis

ثم احذفي هذه القيمة:

O4 - HKLM\..\Run: [MS32DLL] C:\WINDOWS\MS32DLL.dll.vbs

لحذفها اتبعي الاتي:


اعيدي عمل فحص ببرنامج Hijackthis ،،


ثم اعملي اشارة بجانب القيم المذكورة ثم اضغطي على Fix Chaked

كما بالصورة

ملحوظة : اغلقي جميع صفحات الانترنت والبرامج والملفات وعقب احذفي القيم المذكروه



---------------------------------------------------------------------------------------

ثم من ازالة واضافة البرامج : احذفي التول بارات:
Toolbar

------------------------------------
ثم حملي برنامج ComboFix

او من هالرابط combofix.exe

او حمليها من هالرابط

واحفظيها في سطح المكتب Desktop

ثم اغلقي جميع البرامج والمتصفح

ثم دبل كليك على combofix.exe

ثم بتظهر لج رسالة ،، اضغطي Yes
ثم بتظهر رساله اخرى ،، اضغطي Yes

ثم انتظري قليلا وسيعاد تشغيل الجهاز تلقائياً

ثم سيكمل اعادة الفحص ،،،

وعند الانتهاء بيظهر لج تقرير ،، ارفقي التقرير بردج القادم

ملاحظة هامة: عند عمل هالبرنامج فلا تضغطي على الفأرة ابدا لانه قد يسبب في تعليق البرنامج

اتركيه حتى يكمل

---------------------------------------------

ثم افحصي جهاز اونلاين من موقع الكاسبرسكاي

Kaspersky WebScanner

--------------------------

او يمكنك فحصه من موقع ميكروسوفت والرابط والطريقة موضحة في هالموضوع:


خدمة الفحص المجاني من ميكروسوفت Windows Live OneCare safety scanner

----------------------------------------------------------------------------------------------

عقب هالخطوات حملي هالاداة ATF Cleaner ونظفي جهازج برنامج ATF Cleaner حجم صغير وسريع وقوي لتنظيف اجهزة windows xp

----------------------------------

وفي الاخير اعملي تقرير اخر ببرنامج Hijackthis

ComboFix 08-11-05.02 - MH 11/06/2008 9:29:34.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.20.1033.18.670 [GMT 2:00]
Running from: c:\documents and settings\MH\Desktop\ComboFix.exe
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
D:\Autorun.inf
.
((((((((((((((((((((((((( Files Created from 2008-10-06 to 2008-11-06 )))))))))))))))))))))))))))))))
.
No new files created in this timespan
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2008-11-02 19:22 --------- d-----w c:\program files\Trend Micro
2008-10-30 16:36 --------- d-----w c:\documents and settings\MH\Application Data\uTorrent
2008-10-24 16:18 --------- d-----w c:\program files\Microsoft.NET
2008-10-24 16:18 --------- d-----w c:\program files\Microsoft ActiveSync
2008-10-23 17:35 --------- d-----w c:\program files\Electronic Arts
2008-10-22 19:13 --------- d-----w c:\program files\Rhapsody
2008-10-17 19:28 --------- d-----w c:\documents and settings\All Users\Application Data\IM
2008-10-17 19:27 --------- d-----w c:\program files\IncrediMail
2008-10-17 19:27 --------- d-----w c:\documents and settings\All Users\Application Data\IncrediMail
2008-10-14 16:06 --------- d-----w c:\program files\Creative Zone
2008-10-13 08:59 --------- d-----w c:\program files\Acoustica Mixcraft
2008-10-13 08:58 --------- d-----w c:\program files\Acoustica Shared Effects
2008-10-09 14:27 --------- d-----w c:\documents and settings\MH\Application Data\AVGTOOLBAR
2008-10-08 19:35 --------- d-----w c:\documents and settings\MH\Application Data\Winamp
2008-10-08 19:32 --------- d-----w c:\program files\Winamp
2008-10-08 19:30 --------- d-----w c:\program files\Winamp Remote
2008-10-08 19:30 --------- d-----w c:\documents and settings\All Users\Application Data\Winamp Toolbar
2008-10-08 19:30 --------- d-----w c:\documents and settings\All Users\Application Data\OrbNetworks
2008-10-08 19:17 --------- d-----w c:\documents and settings\All Users\Application Data\avg8
2008-10-08 19:14 155,995 ----a-w c:\windows\java\Packages\0DVH3DNJ.ZIP
2008-10-08 18:43 --------- d-----w c:\documents and settings\All Users\Application Data\Kaspersky Lab Setup Files
2008-10-07 15:03 --------- d-----w c:\documents and settings\MH\Application Data\Sony Corporation
2008-10-06 21:34 --------- d-----w c:\program files\Common Files\xing shared
2008-10-06 21:34 --------- d-----w c:\program files\Common Files\Real
2008-10-06 20:25 --------- d-----w c:\documents and settings\MH\Application Data\Yahoo!
2008-10-06 20:25 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo! Companion
2008-10-06 20:12 --------- d-----w c:\documents and settings\All Users\Application Data\Yahoo!
2008-10-06 20:11 --------- d-----w c:\program files\Yahoo!
2008-10-06 20:06 --------- d-----w c:\program files\Google
2008-10-06 20:04 --------- d-----w c:\program files\Real
2008-10-06 18:38 --------- d-----w c:\program files\Windows Live Favorites
2008-10-06 18:37 --------- d-----w c:\documents and settings\All Users\Application Data\Windows Live Toolbar
2008-10-06 18:33 --------- d-----w c:\program files\MSN Messenger
2008-10-06 13:16 --------- d-----w c:\program files\WIDCOMM
2008-10-06 13:00 88,204 ----a-w c:\windows\AGRSMMSG.exe
2008-10-06 13:00 68,096 ----a-w c:\windows\agrsmdel.exe
2008-10-06 13:00 68,096 ------w c:\windows\system32\agrsmdel.exe
2008-10-06 13:00 1,124,097 ----a-w c:\windows\system32\drivers\AGRSM.sys
2008-10-06 12:04 --------- d-----w c:\documents and settings\All Users\Application Data\QMI
2008-10-06 12:03 3,989,376 ------w c:\windows\system32\nv4_disp.dll
2008-10-06 12:03 3,675,776 ------w c:\windows\system32\drivers\nv4_mini.sys
2008-10-06 11:34 --------- d-----w c:\program files\Realtek
2008-10-06 11:06 97,928 ----a-w c:\windows\system32\drivers\avgldx86.sys
2008-10-06 11:06 76,040 ----a-w c:\windows\system32\drivers\avgtdix.sys
2008-10-06 11:06 10,520 ----a-w c:\windows\system32\avgrsstx.dll
2008-10-06 11:06 --------- d-----w c:\program files\AVG
2008-10-06 11:05 --------- d-----w c:\program files\Common Files\InstallShield
2008-10-06 11:04 162,432 ----a-w c:\windows\system32\drivers\tifm21.sys
2008-10-06 10:06 --------- d-----w c:\program files\Sony
2008-10-06 09:57 --------- d-----w c:\program files\microsoft frontpage
2008-09-15 12:12 1,846,400 ----a-w c:\windows\system32\win32k.sys
2008-09-08 10:41 333,824 ----a-w c:\windows\system32\drivers\srv.sys
2008-08-26 07:24 826,368 ----a-w c:\windows\system32\wininet.dll
2008-08-14 10:09 2,145,280 ----a-w c:\windows\system32\ntoskrnl.exe
2008-08-14 09:33 2,023,936 ----a-w c:\windows\system32\ntkrnlpa.exe
.
<pre>
----a-w 10,466,672 2004-08-18 08:00:00 c:\documents and settings\MH\Desktop\RealPlayer 10.5 GOLD .exe
</pre>

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\program files\MSN Messenger\MsnMsgr.Exe" [01/19/2007 12:54 PM 5674352]
"Messenger (Yahoo!)"="c:\program files\Yahoo!\Messenger\YahooMessenger.exe" [09/19/2008 05:34 PM 4347120]
"Orb"="c:\program files\Winamp Remote\bin\OrbTray.exe" [04/01/2008 03:54 AM 507904]
"Google Update"="c:\documents and settings\MH\Local Settings\Application Data\Google\Update\GoogleUpdate.exe" [10/13/2008 10:58 AM 133104]
"IncrediMail"="c:\program files\IncrediMail\bin\IncMail.exe" [10/12/2008 05:01 PM 243072]
"EA Core"="c:\program files\Electronic Arts\EADM\Core.exe" [06/13/2008 06:27 PM 2752512]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AzMixerSel"="c:\program files\Realtek\InstallShield\AzMixerSel.exe" [07/19/2006 09:41 AM 53248]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [10/06/2008 11:33 PM 180269]
"MP10_EnsureFileVer"="c:\windows\inf\unregmp2.exe" [04/14/2008 05:42 AM 208896]
"SkyTel"="SkyTel.EXE" [07/19/2006 09:42 AM 2879488 c:\windows\SkyTel.exe]
"AGRSMMSG"="AGRSMMSG.exe" [10/06/2008 03:00 PM 88204 c:\windows\AGRSMMSG.exe]
"BluetoothAuthenticationAgent"="bthprops.cpl" [04/14/2008 05:42 AM 110592 c:\windows\system32\bthprops.cpl]
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [04/14/2008 05:42 AM 15360]
c:\documents and settings\MH\Start Menu\Programs\Startup\
Cyber-shot Viewer Media Check Tool.lnk - c:\program files\Sony\Sony Picture Utility\VolumeWatcher\SPUVolumeWatcher.exe [2008-10-06 155648]
c:\documents and settings\All Users\Start Menu\Programs\Startup\
Bluetooth.lnk - c:\program files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-01-17 618557]
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll
[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgemc.exe"=
"c:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"c:\\Program Files\\MSN Messenger\\msnmsgr.exe"=
"c:\\Program Files\\MSN Messenger\\livecall.exe"=
"c:\\Program Files\\Yahoo!\\Messenger\\YahooMessenger.exe"=
"c:\\Program Files\\Winamp Remote\\bin\\Orb.exe"=
"c:\\Program Files\\Winamp Remote\\bin\\OrbTray.exe"=
"c:\\Program Files\\Winamp Remote\\bin\\OrbStreamerClient.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImApp.exe"=
"c:\\Program Files\\IncrediMail\\bin\\IncMail.exe"=
"c:\\Program Files\\IncrediMail\\bin\\ImpCnt.exe"=
"c:\\Program Files\\Electronic Arts\\EADM\\Core.exe"=
R1 AvgLdx86;AVG Free AVI Loader Driver x86;c:\windows\system32\Drivers\avgldx86.sys [10/06/2008 01:06 PM 97928]
R2 avg8emc;AVG Free8 E-mail Scanner;c:\progra~1\AVG\AVG8\avgemc.exe [10/06/2008 01:06 PM 875288]
R2 avg8wd;AVG Free8 WatchDog;c:\progra~1\AVG\AVG8\avgwdsvc.exe [10/06/2008 01:06 PM 231704]
R2 AvgTdiX;AVG Free8 Network Redirector;c:\windows\system32\Drivers\avgtdix.sys [10/06/2008 01:06 PM 76040]
*Newly Created Service* - PROCEXP90
.
Contents of the 'Scheduled Tasks' folder
2008-11-06 c:\windows\Tasks\Check Updates for Windows Live Toolbar.job
- c:\program files\Windows Live Toolbar\MSNTBUP.EXE []
2008-10-30 c:\windows\Tasks\GoogleUpdateTaskUser.job
- c:\documents and settings\MH\Local Settings\Application Data\Google\Update\GoogleUpdate.exe [10/13/2008 10:58 AM]
.
- - - - ORPHANS REMOVED - - - -
URLSearchHooks-{57BCA5FA-5DBB-45a2-B558-1755C3F6253B} - c:\program files\Winamp Toolbar\winamptb.dll

.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.com/
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://search.yahoo.com/search?p={searchTerms}&ei=utf-8&fr=b1ie7
R0 -: HKLM-Main,Search Bar = hxxp://us.rd.yahoo.com/customize/ie/defaults/sb/msgr9/*http://go.3roos.com/2Dx4kOSBXBN
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/keyword/%s
O8 -: Add to Windows &Live Favorites - http://go.3roos.com/nmVisAIfKzZ
O8 -: E&xport to Microsoft Excel - c:\progra~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 -: Open in new foreground tab - c:\program files\Windows Live Toolbar\Components\en-us\msntabres.dll.mui/230?0576b15103c44ac6b45d15819d38a0a5
O8 -: Send to &Bluetooth Device... - c:\program files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O16 -: Microsoft XML Parser for Java - http://go.3roos.com/nv8cnpf2xwd:\windows\Java\classes\xmldso.cab
c:\windows\Downloaded Program Files\Microsoft XML Parser for Java.osd
.
**************************************************************************
catchme 0.3.1367 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://go.3roos.com/XP68JmxSgb7
Rootkit scan 2008-11-06 09:30:55
Windows 5.1.2600 Service Pack 3 NTFS
scanning hidden processes ...
scanning hidden autostart entries ...
scanning hidden files ...
scan completed successfully
hidden files: 0
**************************************************************************
.
Completion time: 11/06/2008 9:31:25
ComboFix-quarantined-files.txt 2008-11-06 07:31:22
Pre-Run: 45,766,369,280 bytes free
Post-Run: 45,820,735,488 bytes free
160 --- E O F --- 2008-11-05 19:12:20

انا عملت كل اللى قولتى عليه بس مشكله الشاشه لسه قائمه يليز ساعدينى

السلام عليكم

عزيزتي غالباً مشكلة الشاشة احتمال كبير هي مشكلة هاردويير

بس بسألج هل حملتي برنامج معين او غيرتي في اعدادات الشاشة قبل لا تصير هالمشكلة ؟؟؟

جربي عمل استعادة للنظام

~¤ô_ô¤~ مهم للجميع ،،، طريقة إنشاء نقطة "لاستعادة للنظام" ~¤ô_ô¤~

واين تقرير Hijackthis؟؟؟