اخواني عندي السي بي يو يعطيني انه مستخدم يشكل كبير ولا يكون اي برنامج يعمل و هذه صورة توضيحيه للأمر .



تقرير هايجاك


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 02:10:26 ص, on 28/01/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16421)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskhost.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe
C:\Windows\ZSSnp211.exe
C:\Windows\Domino.exe
C:\Windows\System32\hkcmd.exe
C:\Windows\System32\igfxpers.exe
C:\Program Files\Real\RealPlayer\Update\realsched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Windows\system32\igfxsrvc.exe
C:\Users\mosab\AppData\Local\Megamedia\Megakey\Meg akey.exe
C:\Users\mosab\AppData\Local\Megamedia\Megakey\Meg akeyUpdater.exe
C:\Program Files\Greenshot\Greenshot.exe
C:\Program Files\Internet Download Manager\IDMan.exe
C:\Program Files\Internet Download Manager\IEMonitor.exe
C:\Windows\system32\wuauclt.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtblfs.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Windows\system32\rundll32.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Users\mosab\AppData\Local\Google\Chrome\Applica tion\chrome.exe
C:\Zyzoom_Forum_Tools\zyzoom.exe
C:\Zyzoom_Forum_Tools\zHijak.com

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896

R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
O2 - BHO: IDM Helper - {0055C089-8582-441B-A0BF-17B458C2A3A8} - C:\Program Files\Internet Download Manager\IDMIECC.dll
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: RealPlayer Download and Record Plugin for Internet Explorer - {3049C3E9-B461-4BC5-8870-4C09146192CA} - C:\ProgramData\Real\RealPlayer\BrowserRecordPlugin \IE\rpbrowserrecordplugin.dll
O2 - BHO: IEVkbdBHO - {59273AB4-E7D3-40F9-A1A8-6FA9CCA1862C} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O2 - BHO: MegaIeHelperBHO - {77F4E711-789B-447F-9614-96759B2F83C6} - C:\Users\mosab\AppData\Local\Megamedia\Megakey\Meg aIeHelper.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files\Java\jre6\bin\jp2ssv.dll
O2 - BHO: link filter bho - {E33CF602-D945-461A-83F0-819F76A199F8} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O4 - HKLM\..\Run: [AVP] "C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe"
O4 - HKLM\..\Run: [BtTray] "C:\Program Files\IVT Corporation\BlueSoleil\BtTray.exe"
O4 - HKLM\..\Run: [ZSSnp211] C:\Windows\ZSSnp211.exe
O4 - HKLM\..\Run: [Domino] C:\Windows\Domino.exe
O4 - HKLM\..\Run: [IgfxTray] C:\Windows\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\Windows\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\Windows\system32\igfxpers.exe
O4 - HKLM\..\Run: [TkBellExe] "c:\program files\real\realplayer\Update\realsched.exe" -osboot
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [Megakey] C:\Users\mosab\AppData\Local\Megamedia\Megakey\Meg akey.exe /Tray
O4 - HKCU\..\Run: [MegakeyUpdater] C:\Users\mosab\AppData\Local\Megamedia\Megakey\Meg akeyUpdater.exe
O4 - HKCU\..\Run: [Greenshot] C:\Program Files\Greenshot\Greenshot.exe
O4 - HKCU\..\Run: [IDMan] C:\Program Files\Internet Download Manager\IDMan.exe /onboot
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'NETWORK SERVICE')
O8 - Extra context menu item: &تصدير إلى Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Add to Anti-Banner - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ie_banner_deny.htm
O8 - Extra context menu item: Capture Web Page - C:\Users\mosab\AppData\Local\Megamedia\Megakey\Cap tureWebPage.htm
O8 - Extra context menu item: Fetch to Megaupload - C:\Users\mosab\AppData\Local\Megamedia\Megakey\Meg aUpload.htm
O8 - Extra context menu item: Send by Bluetooth - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tsinfo.htm
O8 - Extra context menu item: Send via &Message... - C:\Program Files\IVT Corporation\BlueSoleil\TransSend\IE\tssms.htm
O8 - Extra context menu item: تحميل الكل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEGetAll.htm
O8 - Extra context menu item: تحميل بواسطة Internet Download Manager - C:\Program Files\Internet Download Manager\IEExt.htm
O9 - Extra button: &Virtual Keyboard - {4248FE82-7FCB-46AC-B270-339F08212110} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\ievkbd.dll
O9 - Extra button: بحث - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: URLs c&heck - {CCF151D8-D089-449F-A5A4-D9909053F20F} - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\klwtbbho.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O10 - Unknown file in Winsock LSP: c:\programdata\megamedia\megakey\msadm.dll
O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Windows\system32\skype4com.dll
O23 - Service: Kaspersky Anti-Virus Service (AVP) - Kaspersky Lab ZAO - C:\Program Files\Kaspersky Lab\Kaspersky Internet Security 2012\avp.exe
O23 - Service: BlueSoleilCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BlueSoleilCS.exe
O23 - Service: BsHelpCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsHelpCS.exe
O23 - Service: BsMobileCS - Unknown owner - C:\Program Files\IVT Corporation\BlueSoleil\BsMobileCS.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Program Files\CyberLink\Shared files\RichVideo.exe

--
End of file - 8682 bytes


تقرير البرامج المثبته




====== معلومات نظام التشغيل ======

X86 WIN_7 7601 Service Pack 1


====== قائمة البرامج المثبتة ======

Adobe Bridge CS3
Adobe Device Central CS3
Adobe Flash Player 11 Plugin
Adobe Linguistics CS3
Adobe Photoshop CS3
Adobe Reader X - Arabic
Adobe Setup
Advanced RAR Repair v1.2
Apple Application Support
Apple Software Update
Art Effects for PDR10
Bluesoleil 6.4.249.0
CCleaner
CyberLink PowerDirector 10
CyberLink PowerDirector 10
CyberLink WaveEditor
CyberLink WaveEditor
CyberLink YouCam
CyberLink YouCam
FormatFactory 2.80
GI-Arabic Now
GOM Player
Greenshot
HashTab 4.0.0.2
Intel(R) Graphics Media *********** Driver
Internet Download Manager
Java(TM) 6 Update 17
Kaspersky Internet Security 2012
Kaspersky Internet Security 2012
Media Player Classic - Home Cinema v1.3.2041.0
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Mozilla Firefox 10.0 (x86 ar)
MPEG2 Codec(libmpeg2/mad)
PE Explore 1.99.RC6
QuickTime
RealNetworks - Microsoft Visual C++ 2008 Runtime
RealPlayer
RealUpgrade 1.1
Skype™ 5.7
SmartSound Quicktracks 5
SmartSound Quicktracks 5
Tag&Rename 3.4
UltraISO Premium V9.52
VLC media player 1.1.11
Windows Media Player Firefox Plugin
WinRAR 4.01 (32-bit)
Yahoo! Messenger
Your Uninstaller! 7
ZSMC USB PC Camera (ZS211)

رن سكنر

http://www.eupload.org/shared/27218runscanner.rar

الموضوع الأساسي: السي بي يو مستخدم بشكل وهمي
المصدر: زيزوووم للأمن والحماية








أكثر...

المصدر: منتديات المجاوشي - من قسم: Arabic Rss