جهازي مخترق او لا ؟

السلام عليكم ورحمه الله وبركاته ..

كل عام وانتم بخير جميعا ..

موضوعي يااخوان واخوات إني شاكه ان جهازي مخترق :no:

لأني من فتره كنت فاتحه المسنجر وبعدين سجل خروج وطلع نافذه مكتوب ( لايمكن تسجيل دخولك من إصدارين من المسنجر )

معناها ان احد داخل من ايميلي بإصدار ثاني من إصدارات المسنجر عشان كذا طلعوني من المسن ..

فحصت جهازي ببرنامج الافيرا والحمد لله طلع على حسب كلام الافيرا سليم :ok:

بس لازلت شااكه :i:

عشان كذا دخلت منتدى زيزوم عشان اسأل الخبراء :smile:

بحط لكم تقرير الهايجاك والتقاير الي قلتوا سويها قبل تنزلين الموضوع وعلموني سليم
او مخترق :er:



التقرير الاول

تقرير HijackThis

اقتباس:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 03:41:23 م, on 27/09/10
Platform: Unknown Windows (WinNT 6.01.3504)
MSIE: Internet Explorer v8.00 (8.00.7600.16385)
Boot mode: Normal
Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\Common Files\Java\Java Update\jusched.exe
C:\Program Files\Avira\AntiVir Desktop\avgnt.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Sandboxie\SbieCtrl.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Users\SONY\Desktop\Zyzoom_HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: AL EJTEMA3YAH-EQ Toolbar - {b212e734-666c-4bca-b481-2732d66e7b50} - C:\Program Files\AL_EJTEMA3YAH-EQ\tbAL_0.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\Program Files\Real\RealPlayer\rpbrowserrecordplugin.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: مساعد تسجيل الدخول إلى Windows Live - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: AL EJTEMA3YAH-EQ Toolbar - {b212e734-666c-4bca-b481-2732d66e7b50} - C:\Program Files\AL_EJTEMA3YAH-EQ\tbAL_0.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O3 - Toolbar: AL EJTEMA3YAH-EQ Toolbar - {b212e734-666c-4bca-b481-2732d66e7b50} - C:\Program Files\AL_EJTEMA3YAH-EQ\tbAL_0.dll
O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\Common Files\Real\Update_OB\realsched.exe" -osboot
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Common Files\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [avgnt] "C:\Program Files\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SandboxieControl] "C:\Program Files\Sandboxie\SbieCtrl.exe"
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: ت&صدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
O9 - Extra button: إرسال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: إر&سال إلى OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\PROGRA~1\MICROS~2\Office12\ONBttnIE.dll
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\Windows\bdoscandel.exe
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\Office12\REFIEBAR.DLL
O13 - Gopher Prefix:
O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/reso...an8/oscan8.cab
O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
O16 - DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll
O23 - Service: Avira FireWall (AntiVirFirewallService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Scheduler (AntiVirSchedulerService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: Sandboxie Service (SbieSvc) - tzuk - C:\Program Files\Sandboxie\SbieSvc.exe
--
End of file - 5774 bytes




التقرير الثاني

تقرير عن قائمة البرامج المثبتة

اقتباس:
Adobe Flash Player 10 ActiveX
Adobe Flash Player 10 Plugin
Adobe Photoshop CS
Adobe Reader 9.3.4
AL_EJTEMA3YAH-EQ Toolbar
Avira Premium Security Suite
CCleaner (remove only)
DriverAgent by eSupport.com
Golden Al-Wafi Translator
Java(TM) 6 Update 21
K-Lite Mega Codec Pack 4.9.5
Messenger ****! Live
Microsoft Choice Guard
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office 2007 Service Pack 2 (SP2)
Microsoft Office Access MUI (Arabic) 2007
Microsoft Office Enterprise 2007
Microsoft Office Enterprise 2007
Microsoft Office Excel MUI (Arabic) 2007
Microsoft Office Groove MUI (English) 2007
Microsoft Office Groove Setup Metadata MUI (Arabic) 2007
Microsoft Office InfoPath MUI (Arabic) 2007
Microsoft Office OneNote MUI (Arabic) 2007
Microsoft Office Outlook MUI (Arabic) 2007
Microsoft Office PowerPoint MUI (Arabic) 2007
Microsoft Office Proof (Arabic) 2007
Microsoft Office Proof (English) 2007
Microsoft Office Proof (French) 2007
Microsoft Office Proofing (Arabic) 2007
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2)
Microsoft Office Publisher MUI (Arabic) 2007
Microsoft Office Shared MUI (Arabic) 2007
Microsoft Office Shared MUI (English) 2007
Microsoft Office Word MUI (Arabic) 2007
Microsoft Text-to-Speech Engine 4.0 (English)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Mozilla Firefox (3.6.8)
MSVCRT
RealPlayer
Sandboxie 3.46
Security Update for 2007 Microsoft Office System (KB2277947)
Security Update for 2007 Microsoft Office System (KB2288621)
Security Update for 2007 Microsoft Office System (KB969559)
Security Update for 2007 Microsoft Office System (KB976321)
Security Update for 2007 Microsoft Office System (KB982312)
Security Update for 2007 Microsoft Office System (KB982331)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Access 2007 (KB979440)
Security Update for Microsoft Office Excel 2007 (KB982308)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office InfoPath 2007 (KB979441)
Security Update for Microsoft Office Outlook 2007 (KB2288953)
Security Update for Microsoft Office PowerPoint 2007 (KB982158)
Security Update for Microsoft Office Publisher 2007 (KB982124)
Security Update for Microsoft Office system 2007 (972581)
Security Update for Microsoft Office system 2007 (KB974234)
Security Update for Microsoft Office Visio Viewer 2007 (KB973709)
Security Update for Microsoft Office Word 2007 (KB2251419)
Spelling Dictionaries Support For Adobe Reader 9
Update for 2007 Microsoft Office System (KB967642)
Update for Microsoft Office 2007 Help for Common Features (KB963673)
Update for Microsoft Office OneNote 2007 (KB980729)
Update for Microsoft Office Script Editor Help (KB963671)
Update for Outlook 2007 Junk Email Filter (kb2291599)
VLC media player 1.0.0
Windows Live Communications Platform
Windows Live Essentials
Windows Live Essentials
Windows Live Messenger
أداة التحميل Windows Live Upload Tool
أرشيف وينرار
تحديث لـ Microsoft Office Excel 2007 Help (KB963678)
تحديث لـ Microsoft Office Powerpoint 2007 Help (KB963669)
تحديث لـ Microsoft Office Word 2007 Help (KB963665)
مساعد تسجيل الدخول إلى Windows Live



(3) تقرير runscanner

اقتباس:
Runscanner logfile
* = signed file
- = file not found
General info
------------
Computer name : SONY-PC
Creation time : 27/09/10 04:18:15 م
Hosts 127.0.0.1 : 0
Hosts file location : %SystemRoot%\System32\drivers\etc
IE version : 8.0.7600.16385
OS : Windows 7 Ultimate
OS Build : 7600
OS SP :
RunScanner Version : 1.8.0.0
User Language : العربية (السعودية)‏
User rights : Administrator
Windows folder : C:\Windows
Running processes
-----------------
* C:\Windows\system32\csrss.exe (Microsoft Corporation)
* C:\Windows\system32\csrss.exe (Microsoft Corporation)
* C:\Windows\system32\conhost.exe (Microsoft Corporation)
* C:\Windows\system32\dwm.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\svchost.exe (Microsoft Corporation)
* C:\Windows\system32\taskhost.exe (Microsoft Corporation)
* C:\Windows\system32\taskhost.exe (Microsoft Corporation)
* C:\Windows\system32\lsass.exe (Microsoft Corporation)
* C:\Windows\system32\SearchIndexer.exe (Microsoft Corporation)
* RunScanner.exe (Runscanner.net)
* C:\Windows\system32\services.exe (Microsoft Corporation)
* C:\Windows\system32\spoolsv.exe (Microsoft Corporation)
* C:\Windows\system32\audiodg.exe (Microsoft Corporation)
* C:\Windows\system32\smss.exe (Microsoft Corporation)
* C:\Windows\system32\wininit.exe (Microsoft Corporation)
* C:\Windows\system32\winlogon.exe (Microsoft Corporation)
* C:\Windows\system32\lsm.exe (Microsoft Corporation)
* C:\Windows\explorer.exe (Microsoft Corporation)
Unrated items
-------------
002 * C:\Program Files\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
003 * C:\Program Files\Sandboxie\SbieCtrl.exe (tzuk)
005 C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
006 C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe (Adobe Systems, Inc.)
010 * C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe (@%systemroot%\Microsoft.NET\Framework\v3.0\Window s Communication Foundation\ServiceModelInstallRC.dll,-8193)
010 * C:\Windows\Microsoft.Net\Framework\v3.0\WPF\Presen tationFontCache.exe (@%SystemRoot%\system32\PresentationHost.exe,-3309)
010 * C:\Windows\system32\Wat\WatAdminSvc.exe (@%SystemRoot%\system32\Wat\WatUX.exe,-601)
010 * C:\Program Files\Avira\AntiVir Desktop\avguard.exe (Avira AntiVir Guard)
010 * C:\Program Files\Avira\AntiVir Desktop\avmailc.exe (Avira AntiVir MailGuard)
010 * C:\Program Files\Avira\AntiVir Desktop\sched.exe (Avira AntiVir Scheduler)
010 * C:\Program Files\Avira\AntiVir Desktop\AVWEBGRD.EXE (Avira AntiVir WebGuard)
010 * C:\Program Files\Avira\AntiVir Desktop\avfwsvc.exe (Avira FireWall)
010 * C:\Windows\Microsoft.NET\Framework\v2.0.50727\msco rsvw.exe (Microsoft .NET Framework NGEN v2.0.50727_X86)
010 * C:\Program Files\Sandboxie\SbieSvc.exe (Sandboxie Service)
011 * C:\Windows\system32\DRIVERS\avfwim.sys (AvFw Packet Filter Miniport)
011 * C:\Windows\system32\DRIVERS\avfwot.sys (avfwot)
011 * C:\Windows\system32\DRIVERS\avgntflt.sys (avgntflt)
011 * C:\Windows\system32\DRIVERS\avipbb.sys (avipbb)
011 * C:\Program Files\Sandboxie\SbieDrv.sys (SbieDrv)
011 * C:\Windows\system32\DRIVERS\ssmdrv.sys (ssmdrv)
011 C:\Windows\system32\DRIVERS\TVICHW32.SYS (TVICHW32)
030 * C:\Windows\system32\mscoree.dll (Microsoft Corporation) {1E66F26B-79EE-11D2-8710-00C04F79ED0D}
030 * C:\Windows\system32\mscoree.dll (Microsoft Corporation) {1E66F26B-79EE-11D2-8710-00C04F79ED0D}
030 * C:\Windows\system32\mscoree.dll (Microsoft Corporation) {1E66F26B-79EE-11D2-8710-00C04F79ED0D}
031 * C:\Program Files\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation) {88FED34C-F0CA-4636-A375-3CB6248B04CD}
031 * C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) {828030A1-22C1-4009-854F-8E305202313F}
031 * C:\PROGRA~1\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation) {828030A1-22C1-4009-854F-8E305202313F}
035 * C:\Windows\system32\mscories.dll (Microsoft Corporation) {89B4C1CD-B018-4511-B0A1-5476DBF70820}
040 C:\Program Files\AL_EJTEMA3YAH-EQ\tbAL_0.dll (Conduit Ltd.) {b212e734-666c-4bca-b481-2732d66e7b50}
041 C:\Program Files\AL_EJTEMA3YAH-EQ\tbAL_0.dll (Conduit Ltd.) {b212e734-666c-4bca-b481-2732d66e7b50}
042 C:\Windows\bdoscandel.exe {85d1f590-48f4-11d9-9669-0800200c9a66}
042 GUID / CLSID not found {92780B25-18CC-41C8-B9BE-3C9C571A8263}
042 GUID / CLSID not found {2670000A-7350-4f3c-8081-5663EE0C6C49}
045 C:\Program Files\AL_EJTEMA3YAH-EQ\tbAL_0.dll (Conduit Ltd.) {B212E734-666C-4BCA-B481-2732D66E7B50}
050 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {B5A7F190-DDA6-4420-B3BA-52453494E6CD}
052 C:\Program Files\AL_EJTEMA3YAH-EQ\tbAL_0.dll (Conduit Ltd.) {b212e734-666c-4bca-b481-2732d66e7b50}
052 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {72853161-30C5-4D22-B7F9-0BBC1D38A37E}
052 * C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation) {9030D464-4C02-4ABF-8ECC-5164760863C6}
060 GUID / CLSID not found {E6FB5E20-DE35-11CF-9C87-00AA005127ED}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {99FD978C-D287-4F50-827F-B2C658EDA8E7}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {920E6DB1-9907-4370-B3A0-BAFC03D81399}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {16F3DD56-1AF5-4347-846D-7C10C4192619}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {72853161-30C5-4D22-B7F9-0BBC1D38A37E}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {6C467336-8281-4E60-8204-430CED96822D}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {2A541AE1-5BF6-4665-A8A3-CFA9672E4291}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {B5A7F190-DDA6-4420-B3BA-52453494E6CD}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {A449600E-1DC6-4232-B948-9BD794D62056}
061 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {387E725D-DC16-4D76-B310-2C93ED4752A0}
061 * C:\PROGRA~1\MICROS~2\Office12\MLSHEXT.DLL (Microsoft Corporation) {00020D75-0000-0000-C000-000000000046}
061 C:\Program Files\Avira\AntiVir Desktop\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
061 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
068 * C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
068 * C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
068 * C:\Program Files\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
104 C:\Windows\DOWNLO~1\oscan82.ocx (BitDefender) {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499}
105 ت&صدير إلى Microsoft Excel : res://C:\PROGRA~1\MICROS~2\Office12\EXCEL.EXE/3000
173 C:\Program Files\Avira\AntiVir Desktop\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
173 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
173 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {6C467336-8281-4E60-8204-430CED96822D}
221 C:\Program Files\Avira\AntiVir Desktop\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
221 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
221 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {6C467336-8281-4E60-8204-430CED96822D}
223 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {6C467336-8281-4E60-8204-430CED96822D}
225 C:\Program Files\Avira\AntiVir Desktop\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
225 C:\Program Files\Avira\AntiVir Desktop\shlext.dll (Avira GmbH) {45AC2688-0253-4ED8-97DE-B5370FA7D48A}
225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
225 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {6C467336-8281-4E60-8204-430CED96822D}
225 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {6C467336-8281-4E60-8204-430CED96822D}
227 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
227 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {6C467336-8281-4E60-8204-430CED96822D}
229 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {6C467336-8281-4E60-8204-430CED96822D}
241 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {99FD978C-D287-4F50-827F-B2C658EDA8E7}
241 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {AB5C5600-7E6E-4B06-9197-9ECEF74D31CC}
241 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {920E6DB1-9907-4370-B3A0-BAFC03D81399}
241 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {16F3DD56-1AF5-4347-846D-7C10C4192619}
241 * C:\Program Files\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation) {2916C86E-86A6-43FE-8112-43ABE6BF8DCC}
251 C:\Program Files\WinRAR\rarext.dll {B41DB860-8EE4-11D2-9906-E49FADC173CA}
001 avfwsvc.exe
001 avgnt.exe
001 avguard.exe
001 avmailc.exe
001 avshadow.exe
001 avwebgrd.exe
001 GrooveMonitor.exe
001 jusched.exe
001 realsched.exe
001 SbieCtrl.exe
001 SbieSvc.exe
001 sched.exe
001 sidebar.exe
001 wmpnetwk.exe


تقرير (4) StartUp

رابط الملف

http://www.mobdi3ine.net/uploads/12855949071.rar

جيت بحمله على الموقع الي انتم حاطينه بس شكله خربان :f:

وحملته من موقع ثاني :b:

وبالنسبه للفحص السريع ببرنامج Bitdefender

علق وهو يفحص :f:


ومشكورين مقدما :smile:








أكثر...