مشكلة نتج عن svchost + اختفاء تعريف كرت الصوت + تغير شكل شريط المهام

السلام عليكم ورحمة الله وبركاتة

أخواني انا الجهاز اخذ له فتره على هالحال
وامس قررت اعمل له صيانة

وجربت كل الطرق مع استخدام ادوات زيزوم
للفحص ومشاكل شريط المهام والريجستر إلخ

كانت مشكلتي بالبداية عد القدره على تثبيت البرامج
لكن حليتها بعد حذف مسميات المجلدات من الريجستر
وكل شي تمام

----------------------
لكن المشكلة الان
كل ما اعيد تشغيل الجهاز
يختفي كرت الصوت
وأجبر ان اعيد تثبيته

وتظهر لي هذي الصورة



وطوالي يتغير شريط المهام للشكل الكلاسيكي



وبعد اعادة التشغيل
يرجع يختفي كرت الصوت

وهذا تقرير
Hijack

كود PHP:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 01:44:30 ص, on 24/11/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:WINDOWSSystem32smss.exe
C:WINDOWSsystem32winlogon.exe
C:WINDOWSsystem32services.exe
C:WINDOWSsystem32lsass.exe
C:Program FilesIObitAdvanced SystemCare 5ASCService.exe
C:WINDOWSsystem32svchost.exe
C:WINDOWSsystem32spoolsv.exe
C:Program FilesCreativeShared FilesCTAudSvc.exe
C:Program FilesAviraAntiVir Desktopsched.exe
C:WINDOWSExplorer.EXE
C:Program FilesDeviceVMBrowser Configuration UtilityBCU.exe
C:program filesrealrealplayerupdaterealsched.exe
C:Program FilesAviraAntiVir Desktopavgnt.exe
C:Program FilesInternet Download Manager 6.04 Build 2Internet Download ManageIDMan.exe
C:WINDOWSsystem32ctfmon.exe
C:Program FilesWindows LiveMessengermsnmsgr.exe
C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
C:Program FilesGoogleUpdate1.3.21.79GoogleCrashHandler.exe
C:Program FilesSUPERAntiSpywareSASCORE.EXE
C:Program FilesAviraAntiVir Desktopavfwsvc.exe
C:Program FilesAviraAntiVir Desktopavguard.exe
C:AppServApache2.2binhttpd.exe
C:Program FilesAviraAntiVir Desktopavshadow.exe
C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
C:AppServApache2.2binhttpd.exe
C:Program FilesBandRichBandLuxe HSDPA Utility R11BRService.exe
C:Program FilesDeviceVMBrowser Configuration UtilityBCUService.exe
C:Program FilesBonjourmDNSResponder.exe
C:WINDOWSsystem32CTsvcCDA.exe
C:Program FilesJavajre6binjqs.exe
C:Program FilesCommon FilesMotiveMcciCMService.exe
C:AppServMySQLbinmysqld-nt.exe
C:Program FilesCommon FilesVMwareUSBvmware-usbarbitrator.exe
C:WINDOWSsystem32vmnat.exe
C:WINDOWSsystem32vmnetdhcp.exe
C:Program FilesVMwareVMware Workstationvmware-authd.exe
C:Program FilesAviraAntiVir Desktopavmailc.exe
C:Program FilesAviraAntiVir DesktopAVWEBGRD.EXE
C:Program FilesInternet Download Manager 6.04 Build 2Internet Download ManageIEMonitor.exe
C:Program FilesGoogleChromeApplicationchrome.exe
C:Program FilesGoogleChromeApplicationchrome.exe
C:Program FilesGoogleChromeApplicationchrome.exe
C:Program FilesGoogleChromeApplicationchrome.exe
C:Program FilesGoogleChromeApplicationchrome.exe
C:WINDOWSSystem32svchost.exe
C:WINDOWSsystem32svchost.exe
C:Program FilesGoogleChromeApplicationchrome.exe
C:Program FilesMozilla Firefoxfirefox.exe
C:Program FilesMozilla Firefoxplugin-container.exe
C:Program FilesTrend MicroHiJackThisHiJackThis.exe

R0 - HKLMSoftwareMicrosoftInternet ExplorerMain,Start Page = about:blank
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyServer = 175.100.114.170:8080
R1 - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings,ProxyOverride = local
F2 - REG:system.ini: UserInit=C:WINDOWSsystem32userinit.exe,,C:Program FilesuoILpnLIغب±[جshqrvoqi.exeshqrvoqi.exe
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:Program FilesInternet Download Manager 6.04 Build 2Internet Download ManageIDMIECC.dll
O2 - BHO: SnagIt Toolbar Loader - {00C6482D-C502-44C8-8409-FCE54AD9C208} - C:Program FilesTechSmithSnagit 10SnagitBHO.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:Program FilesCommon FilesAdobeAcrobatActiveXAcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:Documents and SettingsAll UsersApplication DataRealRealPlayerBrowserRecordPluginIErpbrowserre cordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:PROGRA~1MICROS~2Office12GRA8E1~1.DLL
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Program FilesCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll
O2 - BHO: Complitly - {D27FC31C-6E3D-4305-8D53-ACDAEFA5F862} - C:Documents and SettingsxpApplication DataCompitlyEngineComplitlyEngine.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:Program FilesJavajre6binjp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:Program FilesJavajre6libdeployjqsiejqs_plugin.dll
O2 - BHO: Updater For Complete Bar - {fe618700-e0ee-441e-8b1d-18ce226bb193} - C:Program FilescompletebartbauxicompletebarAu.dll
O3 - Toolbar: Snagit - {8FF5E183-ABDE-46EB-B09E-D2AAB95CABE3} - C:Program FilesTechSmithSnagit 10SnagitIEAddin.dll
O4 - HKLM..Run: [BCU] "C:\Program Files\DeviceVM\Browser Configuration Utility\BCU.exe"
O4 - HKLM..Run: [APSDaemon] "C:\Program Files\Common Files\Apple\Apple Application Support\APSDaemon.exe"
O4 - HKLM..Run: [QuickTime Task] "C:\Program Files\QuickTime\QTTask.exe" -atboottime
O4 - HKLM..Run: [TkBellExe] "C:\program files\real\realplayer\update\realsched.exe" -osboot
O4 - HKLM..Run: [KernelFaultCheck] %systemroot%system32dumprep 0 -k
O4 - HKLM..Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKLM..Run: [UserFaultCheck] %systemroot%system32dumprep 0 -u
O4 - HKLM..Run: [RRT-Auto] C:Documents and Settingsxpسطح المكتبRRT.exe auto
O4 - HKLM..RunOnce: [AvgUninstallURL] cmd.exe /c start http://www.avg.com/ww.special-uninstallation-feedback-lsf?lic=TlVIRDQtWUg5UEUtTzNQNEUtUVJERUstR0RKWjctVk 9YVUw"&"inst=NzctNzY3NTg4OTc2LVZPUCszLUZMKzgtWE84K zEtU1QxMk9JKzEtRERUKzAtRVVMQSsxLVNUMTJBUFArMS1TVDE yRkFQUCsx"&"prod=55"&"ver=2012.0.1831"&"mid=b6fb56 6a2a1847d1a06ad158f7e34a64-c0b0a53d92b0fdb3d6d8496b2223b8bc517dc1ef
O4 - HKCU..Run: [IDMan] C:Program FilesInternet Download Manager 6.04 Build 2Internet Download ManageIDMan.exe /onboot
O4 - HKCU..Run: [ctfmon.exe] C:WINDOWSsystem32ctfmon.exe
O4 - HKCU..Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU..Run: [SUPERAntiSpyware] C:Program FilesSUPERAntiSpywareSUPERAntiSpyware.exe
O4 - HKCU..Run: [Advanced SystemCare 5] "C:\Program Files\IObit\Advanced SystemCare 5\ASCTray.exe" /AutoStart
O4 - HKUSS-1-5-18..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'SYSTEM')
O4 - HKUS.DEFAULT..Run: [CTFMON.EXE] C:WINDOWSsystem32CTFMON.EXE (User 'Default user')
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerRestrictions present
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O6 - HKCUSoftwarePoliciesMicrosoftInternet ExplorerToolbarsRestrictions present
O6 - HKLMSoftwarePoliciesMicrosoftInternet ExplorerRestrictions present
O6 - HKLMSoftwarePoliciesMicrosoftInternet ExplorerControl Panel present
O6 - HKLMSoftwarePoliciesMicrosoftInternet ExplorerToolbarsRestrictions present
O8 - Extra context menu item: Google Sidewiki... - res://C:\Program Files\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_7461 B1589E8B4FB7.dll/cmsidewiki.html
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:Program FilesInternet Download Manager 6.04 Build 2Internet Download ManageIEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:Program FilesInternet Download Manager 6.04 Build 2Internet Download ManageIEExt.htm
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:PROGRA~1MICROS~2Office12ONBttnIE.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:PROGRA~1MIC273~1WEB2~1Office12REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:WINDOWSNetwork Diagnosticxpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:Program FilesMessengermsmsgs.exe
O16 - DPF: {6924091F-CD97-41E1-B1D4-D9079409D413} (IMCv1 Control) - http://204.45.87.66/talk.cab
O16 - DPF: {7253A666-683F-4D45-B6F1-549188BB79C1} (BMC Control) - http://72.9.156.178/bmc.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:PROGRA~1MICROS~2Office12GR99D3~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:Program FilesSUPERAntiSpywareSASWINLO.DLL
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:WINDOWSsystem32browseui.dll
O22 - SharedTaskScheduler: البرنامج الخفي لذاكرة التخزين المؤقت لفئات المكونات - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:WINDOWSsystem32browseui.dll
O23 - Service: SAS Core Service (!SASCORE) - SUPERAntiSpyware.com - C:Program FilesSUPERAntiSpywareSASCORE.EXE
O23 - Service: Adobe LM Service - Adobe Systems - C:Program FilesCommon FilesAdobe Systems SharedServiceAdobelmsvc.exe
O23 - Service: Advanced SystemCare Service 5 (AdvancedSystemCareService5) - IObit - C:Program FilesIObitAdvanced SystemCare 5ASCService.exe
O23 - Service: Avira FireWall (AntiVirFirewallService) - Avira GmbH - C:Program FilesAviraAntiVir Desktopavfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:Program FilesAviraAntiVir Desktopavmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:Program FilesAviraAntiVir Desktopsched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:Program FilesAviraAntiVir Desktopavguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:Program FilesAviraAntiVir DesktopAVWEBGRD.EXE
O23 - Service: Apache2.2 - Apache Software Foundation - C:AppServApache2.2binhttpd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:Program FilesCommon FilesAppleMobile Device SupportAppleMobileDeviceService.exe
O23 - Service: BandLuxe Service (BandLuxe_Service) - BandRich Inc. - C:Program FilesBandRichBandLuxe HSDPA Utility R11BRService.exe
O23 - Service: Browser Configuration Utility Service (BCUService) - DeviceVM, Inc. - C:Program FilesDeviceVMBrowser Configuration UtilityBCUService.exe
O23 - Service: Bonjour Service - Apple Inc. - C:Program FilesBonjourmDNSResponder.exe
O23 - Service: Creative Audio Engine Licensing Service - Creative Labs - C:Program FilesCommon FilesCreative Labs SharedServiceCTAELicensing.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:WINDOWSsystem32CTsvcCDA.exe
O23 - Service: Creative Audio Service (CTAudSvcService) - Creative Technology Ltd - C:Program FilesCreativeShared FilesCTAudSvc.exe
O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:Program FilesCommon FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe
O23 - Service: خدمة تحديث Google (gupdate) (gupdate) - Google Inc. - C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 - Service: خدمة Google Update (gupdatem) (gupdatem) - Google Inc. - C:Program FilesGoogleUpdateGoogleUpdate.exe
O23 - Service: iPod Service - Apple Inc. - C:Program FilesiPodbiniPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:Program FilesJavajre6binjqs.exe
O23 - Service: McciCMService - Motive Communications, Inc. - C:Program FilesCommon FilesMotiveMcciCMService.exe
O23 - Service: mysql - Unknown owner - C:AppServMySQLbinmysqld-nt.exe
O23 - Service: NMIndexingService - Nero AG - C:Program FilesCommon FilesAheadLibNMIndexingService.exe
O23 - Service: VMware Agent Service (ufad-ws60) - VMware, Inc. - C:Program FilesVMwareVMware Workstationvmware-ufad.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:Program FilesVMwareVMware Workstationvmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:WINDOWSsystem32vmnetdhcp.exe
O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:Program FilesCommon FilesVMwareUSBvmware-usbarbitrator.exe
O23 - Service: VMware NAT Service - VMware, Inc. - C:WINDOWSsystem32vmnat.exe

--
End of file - 12596 bytes

وآتمنى آني آقدر آحل هآلمشكلة بخبرتكم
:b:

الموضوع الأساسي: مشكلة نتج عن svchost + اختفاء تعريف كرت الصوت + تغير شكل شريط المهام
المصدر: زيزوووم للأمن والحماية








أكثر...