اغلاق الصفحة قبل الاذان ..عفوا اقصد قبل التصفح

[شيخ نفسه]

السلام عليكم ورحمة الله وبركاته : أخواني أعضاء منتديات إقلاع ..لقد نفد صبري ..ولم يعد للصبر على هذه المشكلة متسع ..
مشكلة سبق وأن قرأت عنها عند بعض الأخوة لكن الموضوع لم أجده .. المهم النظام عندي الفيستا وبمجرد ما أفتح صفحات الاكسبلور
قليلا وإن طالت الفترة نصف ساعة وتدور الدائرة وتبيض الصفحة ويعلن عن موعد اقفالها في إطار يظهره واعيد الكرة مرة اخرى وقليلا وتبدأ عملية الاقفال ... مشكلة ضاق صدري منها وبودي لو ارمي الكمبيوتر من على السطح لكنه لايستحق ..المهم حملت اداة
combo fixshort cut
وخرجت بالتقرير التالي من الجهاز ..فهل أجد لديكم حلا .. أرجوكم .. لاتهملوا موضوعي قبل أن اصير ارهابيه و انحره بالمطرقة وارتاح
وإليكم التقرير
ComboFix 09-09-08.06 - abc 09/09/2009 12:082 - NTFSx86
Microsoft® Windows Vista™ Home Premium 6.0.60011256.966.10332038.1024 [GMT 3:00]
Running from: c:\users\abc\Downloads\ComboFix.exe
AV: Norton Internet Security *On-access scanning enabled* (Updated) {E10A9785-9598-4754-B552-92431C1C35F8}
FW: Norton Internet Security *disabled* {7C21A4C9-F61F-4AC4-B722-A6E19C16F220}
SP: Norton Internet Security *disabled* (Outdated) {CBB7EE13-8244-4DAB-8B55-D5C7AA91E59A}
SP: Windows Defender *disabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))) )))))))))
.
c:\$recycle.bin\S-1-5-21-2152478756-3922319563-605102323-500
c:\$recycle.bin\S-1-5-21-3334628596-2655356485-2032451551-500
c:\$recycle.bin\S-1-5-21-4128940667-1882795991-2853372483-500
c:\program files\alexa toolbar
c:\program files\alexa toolbar\uninstall.exe
c:\program files\Internet Saving Optimizer
c:\program files\Internet Saving Optimizer\31.4630\adwpx.exe
c:\program files\Internet Saving Optimizer\31.4630\Data\config.md
c:\program files\Internet Saving Optimizer\31.4630\FF\chrome.manifest
c:\program files\Internet Saving Optimizer\31.4630\FF\chrome\content\N PAddOn.js
c:\program files\Internet Saving Optimizer\31.4630\FF\chrome\content\N PAddOn.xul
c:\program files\Internet Saving Optimizer\31.4630\FF\chrome\NPAddOn.j ar
c:\program files\Internet Saving Optimizer\31.4630\FF\components\NPFFA ddOn.dll
c:\program files\Internet Saving Optimizer\31.4630\FF\components\NPFFA ddOn.xpt
c:\program files\Internet Saving Optimizer\31.4630\FF\components\NPFFH elperComponent.js
c:\program files\Internet Saving Optimizer\31.4630\FF\install.rdf
c:\program files\Internet Saving Optimizer\31.4630\NPCommon.dll
c:\program files\Internet Saving Optimizer\31.4630\NPIEAddOn.dll
c:\program files\Internet Saving Optimizer\31.4630\unins000.dat
c:\program files\Internet Saving Optimizer\31.4630\unins000.exe
c:\users\abc\AppData\Local\Temp\ppcrlui_ 5756_2
c:\users\abc\Desktop\3D10~1\SeTUp.exe
c:\windows\Installer\WMEncoder.msi
c:\windows\system32\AutoRun.inf
.
((((((((((((((((((((((((( Files Created from 2009-08-09 to 2009-09-09 )))))))))))))))))))))))))))))))
.
2009-09-09 09:16 . 2009-09-09 09:16 -------- d-----w- c:\users\Default\AppData\Local\temp
2009-09-09 02:46 . 2009-06-15 15:21 499712 ----a-w- c:\windows\system32\kerberos.dll
2009-09-09 02:46 . 2009-06-15 15:22 213504 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-09 02:46 . 2009-06-15 15:24 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-09-09 02:46 . 2009-06-15 15:23 1256448 ----a-w- c:\windows\system32\lsasrv.dll
2009-09-09 02:46 . 2009-06-15 15:24 270848 ----a-w- c:\windows\system32\schannel.dll
2009-09-09 02:46 . 2009-06-15 18:20 439896 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-09-09 02:46 . 2009-06-15 12:57 9728 ----a-w- c:\windows\system32\lsass.exe
2009-09-09 02:46 . 2009-06-15 15:24 72704 ----a-w- c:\windows\system32\secur32.dll
2009-09-03 05:39 . 2009-09-03 05:39 -------- d-----w- c:\program files\System Search Dispatcher
2009-09-03 05:38 . 2009-09-03 05:38 -------- d-----w- c:\program files\DoubleD
2009-09-02 22:06 . 2009-08-28 12:39 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-09-02 22:06 . 2009-08-28 10:15 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-09-01 19:46 . 2009-06-22 10:22 2048 ----a-w- c:\windows\system32\tzres.dll
2009-09-01 19:38 . 2008-06-20 01:14 97800 ----a-w- c:\windows\system32\infocardapi.dll
2009-09-01 19:38 . 2008-06-20 01:14 105016 ----a-w- c:\windows\system32\PresentationCFFRaste rizerNative_v0300.dll
2009-09-01 19:38 . 2008-06-20 01:14 43544 ----a-w- c:\windows\system32\PresentationHostProx y.dll
2009-09-01 19:38 . 2008-06-20 01:14 11264 ----a-w- c:\windows\system32\icardres.dll
2009-09-01 19:38 . 2008-06-20 01:14 622080 ----a-w- c:\windows\system32\icardagt.exe
2009-09-01 19:37 . 2008-06-20 01:14 781344 ----a-w- c:\windows\system32\PresentationNative_v 0300.dll
2009-09-01 19:37 . 2008-06-20 01:14 326160 ----a-w- c:\windows\system32\PresentationHost.exe
2009-09-01 19:31 . 2008-07-27 18:03 96760 ----a-w- c:\windows\system32\dfshim.dll
2009-09-01 19:31 . 2008-07-27 18:03 282112 ----a-w- c:\windows\system32\mscoree.dll
2009-09-01 19:31 . 2008-07-27 18:03 41984 ----a-w- c:\windows\system32\netfxperf.dll
2009-09-01 19:31 . 2008-07-27 18:03 158720 ----a-w- c:\windows\system32\mscorier.dll
2009-09-01 19:31 . 2008-07-27 18:03 83968 ----a-w- c:\windows\system32\mscories.dll
2009-08-31 01:38 . 2009-07-17 14:35 71680 ----a-w- c:\windows\system32\atl.dll
2009-08-31 01:38 . 2009-06-10 12:12 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-08-31 01:38 . 2009-06-04 12:34 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-08-31 01:38 . 2009-06-10 12:07 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-08-31 01:36 . 2009-07-14 13:00 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-08-31 01:36 . 2009-07-14 12:58 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-08-31 01:36 . 2009-07-14 12:59 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-08-31 01:36 . 2009-07-14 10:59 8147456 ----a-w- c:\windows\system32\wmploc.DLL
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))) ))))))))))))
.
2009-09-09 09:07 . 2008-12-25 21:43 3168288 --sha-w- c:\windows\system32\drivers\fidbox.dat
2009-09-09 08:38 . 2008-12-25 21:43 671776 --sha-w- c:\windows\system32\drivers\fidbox2.dat
2009-09-09 08:35 . 2008-12-25 21:43 26600 --sha-w- c:\windows\system32\drivers\fidbox.idx
2009-09-09 07:35 . 2008-07-10 00:39 -------- d-----w- c:\programdata\Kaspersky Lab
2009-09-09 05:53 . 2008-12-25 21:43 4368 --sha-w- c:\windows\system32\drivers\fidbox2.idx
2009-09-09 01:26 . 2006-11-02 11:18 -------- d-----w- c:\program files\Windows Mail
2009-09-09 01:26 . 2008-05-20 21:00 -------- d-----w- c:\programdata\Microsoft Help
2009-08-14 17:07 . 2009-09-08 22:27 897608 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-08-14 16:29 . 2009-09-08 22:27 104960 ----a-w- c:\windows\system32\netiohlp.dll
2009-08-14 16:29 . 2009-09-08 22:27 17920 ----a-w- c:\windows\system32\netevent.dll
2009-08-14 14:16 . 2009-09-08 22:27 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-08-14 14:16 . 2009-09-08 22:27 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-08-14 14:16 . 2009-09-08 22:27 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-08-14 14:16 . 2009-09-08 22:27 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-08-14 14:16 . 2009-09-08 22:27 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-08-14 14:16 . 2009-09-08 22:27 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-08-14 14:16 . 2009-09-08 22:27 10240 ----a-w- c:\windows\system32\finger.exe
2009-08-01 17:59 . 2009-02-15 19:42 -------- d-----w- c:\program files\PConPoint
2009-08-01 12:13 . 2009-08-01 12:07 -------- d-----w- c:\users\abc\AppData\Roaming\Registry Help Pro
2009-08-01 02:05 . 2009-07-13 22:11 5648 ----a-w- c:\users\abc\AppData\Local\d3d9caps.dat
2009-07-21 21:52 . 2009-07-29 21:50 915456 ----a-w- c:\windows\system32\wininet.dll
2009-07-21 21:47 . 2009-07-29 21:50 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-07-21 21:47 . 2009-07-29 21:50 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-07-21 20:13 . 2009-07-29 21:50 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-07-11 19:32 . 2009-09-08 22:27 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-07-11 19:32 . 2009-09-08 22:27 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-07-11 19:32 . 2009-09-08 22:27 513024 ----a-w- c:\windows\system32\wlansvc.dll
2009-07-11 19:29 . 2009-09-08 22:27 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-06-15 15:24 . 2009-07-15 22:47 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-06-15 15:20 . 2009-07-15 22:47 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-06-15 15:20 . 2009-07-15 22:47 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-06-15 12:52 . 2009-07-15 22:47 289792 ----a-w- c:\windows\system32\atmfd.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))) ))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Win dows\CurrentVersion\Run]
"Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2008-01-19 1233920]
"MsnMsgr"="c:\program files\Windows Live\Messenger\msnmsgr.exe" [2009-02-06 3885408]
"ehTray.exe"="c:\windows\ehome\ehTray.ex e" [2008-01-19 125952]
"swg"="c:\program files\Google\GoogleToolbarNotifier\Googl eToolbarNotifier.exe" [2009-03-04 39408]
"WMPNSCFG"="c:\program files\Windows Media Player\WMPNSCFG.exe" [2008-01-19 202240]
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wi ndows\CurrentVersion\Run]
"Windows Defender"="c:\program files\Windows Defender\MSASCui.exe" [2008-01-19 1008184]
"TPwrMain"="c:\program files\TOSHIBA\Power Saver\TPwrMain.EXE" [2007-03-29 411192]
"HSON"="c:\program files\TOSHIBA\TBS\HSON.exe" [2006-12-07 55416]
"SmoothView"="c:\program files\Toshiba\SmoothView\SmoothView.exe" [2007-05-16 509496]
"00TCrdMain"="c:\program files\TOSHIBA\FlashCards\TCrdMain.exe" [2007-04-26 538744]
"SynTPEnh"="c:\program files\Synaptics\SynTP\SynTPEnh.exe" [2006-10-27 815104]
"topi"="c:\program files\TOSHIBA\Toshiba Online Product Information\topi.exe" [2007-04-02 577536]
"Desktop SMS"="c:\program files\IDM\Desktop SMS\DesktopSMS.exe" [2007-01-19 1507328]
"IgfxTray"="c:\windows\system32\igfxtray .exe" [2007-04-27 138008]
"HotKeysCmds"="c:\windows\system32\hkcmd .exe" [2007-04-27 154392]
"Persistence"="c:\windows\system32\igfxp ers.exe" [2007-04-27 133912]
"Camera Assistant Software"="c:\program files\Camera Assistant Software for Toshiba\traybar.exe" [2007-04-10 413696]
"IAAnotif"="c:\program files\Intel\Intel Matrix Storage Manager\iaanotif.exe" [2007-02-12 174872]
"Toshiba Registration"="c:\program files\Toshiba\Registration\ToshibaRegist ration.exe" [2007-05-04 571024]
"Symantec PIF AlertEng"="c:\program files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe" [2008-01-29 583048]
"Adobe Reader Speed Launcher"="c:\program files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2008-01-11 39792]
"TkBellExe"="c:\program files\Common Files\Real\Update_OB\realsched.exe" [2008-06-24 185896]
"HP Software Update"="c:\program files\HP\HP Software Update\HPWuSchd2.exe" [2007-03-11 49152]
"AVP"="c:\program files\Kaspersky Lab\Kaspersky Anti-Virus 2009\avp.exe" [2009-07-21 208616]
"HPUsageTracking"="c:\program files\HP\HP UT\bin\hppusg.exe" [2007-11-02 36864]
"PrnStatusMX"="c:\program files\Hewlett-Packard\PrnStatusMX\PrnStatusMX.exe" [2007-07-13 1077248]
"Malwarebytes' Anti-Malware"="c:\program files\Malwarebytes' Anti-Malware\mbamgui.exe" [2008-12-03 399504]
"RtHDVCpl"="RtHDVCpl.exe" - c:\windows\RtHDVCpl.exe [2007-05-18 4472832]
"Skytel"="Skytel.exe" - c:\windows\SkyTel.exe [2007-05-25 1826816]
c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
Bluetooth Manager.lnk - c:\program files\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe [2007-2-27 2756608]
HP Digital Imaging Monitor.lnk - c:\program files\HP\Digital Imaging\bin\hpqtra08.exe [2007-3-11 210520]
[HKEY_LOCAL_MACHINE\software\microsoft\wi ndows\currentversion\policies\system]
"EnableUIADesktopToggle"= 0 (0x0)
[HKEY_LOCAL_MACHINE\software\microsoft\wi ndows nt\currentversion\windows]
"AppInit_DLLs"=c:\progra~1\KASPER~1\KASP ER~1\mzvkbd.dll c:\progra~1\KASPER~1\KASPER~1\mzvkbd3.dl l
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl Set\Control\SafeBoot\Minimal\WinDefend]
@="Service"
[HKEY_LOCAL_MACHINE\software\microsoft\se curity center\Monitoring]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\se curity center\Monitoring\KasperskyAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\se curity center\Monitoring\SymantecAntiVirus]
"DisableMonitoring"=dword:00000001
[HKEY_LOCAL_MACHINE\software\microsoft\se curity center\Monitoring\SymantecFirewall]
"DisableMonitoring"=dword:00000001
[HKLM\~\services\sharedaccess\parameters\ firewallpolicy\FirewallRules]
"{8FC69950-DCF2-4391-88EB-FEE8FBD02945}"= TCP:6004|c:\program files\Microsoft Office\Office12\outlook.exe:Microsoft Office Outlook
R0 klbg;Kaspersky Lab Boot Guard Driver;c:\windows\System32\drivers\klbg. sys [29/01/08 06:29 م 33808]
R0 pavboot;pavboot;c:\windows\System32\driv ers\pavboot.sys [18/12/08 02:19 ص 28544]
R1 IDSvix86;Symantec Intrusion Prevention Driver;c:\progra~2\Symantec\DEFINI~1\Sym cData\idsdefs\20080709.001\IDSvix86.sys [10/07/08 01:23 ص 261680]
R1 KLIM6;Kaspersky Anti-Virus NDIS 6 Filter;c:\windows\System32\drivers\klim6 .sys [09/07/08 06:28 م 20496]
R2 BandLuxe_Service;BandLuxe Service;c:\program files\BandRich\BandLuxe HSDPA Utility R11\BRService.exe [03/10/08 10:41 ص 87264]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes' Anti-Malware\mbamservice.exe [01/01/09 02:17 ص 170640]
R3 MBAMProtector;MBAMProtector;c:\windows\S ystem32\drivers\mbam.sys [01/01/09 02:17 ص 15504]
R3 QIOMem;Generic IO & Memory Access;c:\windows\System32\drivers\QIOMe m.sys [09/04/07 05:13 م 8192]
S3 br3gmdm;BandLuxe 3.5G HSDPA Adapter - USB;c:\windows\System32\drivers\br3gmdm. sys [15/05/08 10:08 ص 104192]
[HKEY_LOCAL_MACHINE\software\microsoft\wi ndows nt\currentversion\svchost]
HPZ12 REG_MULTI_SZ Pml Driver HPZ12 Net Driver HPZ12
hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
[HKEY_LOCAL_MACHINE\software\microsoft\ac tive setup\installed components\>{60B49E34-C7CC-11D0-8953-00A0C90347FF}]
"c:\windows\System32\rundll32.exe" "c:\windows\System32\iedkcs32.dll",Brand IEActiveSetup SIGNUP
.
Contents of the 'Scheduled Tasks' folder
2009-09-09 c:\windows\Tasks\User_Feed_Synchronizati on-{C4325212-607C-4746-92C1-E5E2C68AF898}.job
- c:\windows\system32\msfeedssync.exe [2009-07-29 20:13]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.com/
mStart Page = hxxp://home.sweetim.com
IE: ت&صدير إلى Microsoft Excel - c:\progra~1\MICROS~2\Office12\EXCEL.EXE/3000
IE: {{76577871-04EC-495E-A12B-91F7C3600AFA} - http://rover.ebay.com/rover/1/710-44557-9400-3/4
IE: {{8A918C1D-E123-4E36-B562-5C1519E434CE} - http://www.amazon.co.uk/exec/obidos/...k-21&site=home
IE: {{c95fe080-8f5d-11d2-a20b-00aa003c157a}
.
- - - - ORPHANS REMOVED - - - -
WebBrowser-{EEE6C35B-6118-11DC-9C72-001320C79847} - (no file)
AddRemove-{03E66394-42F0-4745-85F7-0A2F8F35C09F} - c:\program files\HP\Digital Imaging\{03E66394-42F0-4745-85F7-0A2F8F35C09F}\setup\hpzscr01.exe -datfile hphscr15.dat

**************************************** **********************************
scanning hidden processes ...
scanning hidden autostart entries ...
HKCU\Software\Microsoft\Windows\CurrentV ersion\Run
MsnMsgr = "c:\program files\Windows Live\Messenger\msnmsgr.exe" /background??s
scanning hidden files ...
scan completed successfully
hidden files:
**************************************** **********************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------
[HKEY_LOCAL_MACHINE\system\ControlSet001\ Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0000\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
"MSCurrentCountry"=dword:000000b5
[HKEY_LOCAL_MACHINE\system\ControlSet001\ Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0001\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\system\ControlSet001\ Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0002\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
[HKEY_LOCAL_MACHINE\system\ControlSet001\ Control\Class\{4D36E96D-E325-11CE-BFC1-08002BE10318}\0003\AllUserSettings]
@Denied: (A) (Users)
@Denied: (A) (Everyone)
@Allowed: (B 1 2 3 4 5) (S-1-5-20)
"BlindDial"=dword:00000000
.
Completion time: 2009-09-09 12:18
ComboFix-quarantined-files.txt 2009-09-09 09:18
Pre-Run: 82,904,711,168 bytes free
Post-Run: 82,523,987,968 bytes free
Current=1 Default=1 Failed=0 LastKnownGood=54 Sets=1,2,3,4,5,6,7,8,9,10,11,12,13,14,15 ,16,17,18,19,20,21,22,23,24,25,26,27,28, 29,30,31,32,33,34,35,36,37,38,39,40,41,4 2,43,44,45,46,47,48,49,50,51,52,53,54
232 --- E O F --- 2009-09-09 02:53
وشكرا ..ارجو الرد سريعا إذا تفضلتوا