مشاكل وحلول ::. أخبرنا ماذا تواجه من مشكلة في برامجك أو ويندوز الخاص بك ونحن نجاوبك

المشاركة الأصلية كتبت بواسطة snsk

logfile of trend micro hijackthis v2.0.2
scan saved at 11:54:17 ص, on 28/07/10
platform: Windows vista  (winnt 6.00.1904)
msie: Internet explorer v7.00 (7.00.6000.16916)
boot mode: Normal
running processes:
C:\windows\system32\taskeng.exe
c:\windows\system32\dwm.exe
c:\windows\explorer.exe
c:\program files\eset\eset smart security\egui.exe
c:\program files\common files\real\update_ob\realsched.exe
c:\program files\windows sidebar\sidebar.exe
c:\program files\windows live\messenger\msnmsgr.exe
c:\windows\ehome\ehtray.exe
c:\program files\winzip\wzqkpick.exe
c:\windows\ehome\ehmsas.exe
c:\program files\internet explorer\iexplore.exe
c:\windows\jusched.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\internet explorer\iexplore.exe
c:\program files\windows live\toolbar\wltuser.exe
c:\program files\trend micro\hijackthis\hijackthis.exe
c:\windows\system32\searchfilterhost.exe
r1 - hklm\software\microsoft\internet explorer\main,default_page_url = http://go.microsoft.com/fwlink/?linkid=69157
r1 - hklm\software\microsoft\internet explorer\main,default_search_url = http://go.microsoft.com/fwlink/?linkid=54896
r1 - hklm\software\microsoft\internet explorer\main,search page = http://go.microsoft.com/fwlink/?linkid=54896
r0 - hklm\software\microsoft\internet explorer\main,start page = http://go.microsoft.com/fwlink/?linkid=69157
r0 - hklm\software\microsoft\internet explorer\search,searchassistant = 
r0 - hklm\software\microsoft\internet explorer\search,customizesearch = 
r0 - hkcu\software\microsoft\internet explorer\toolbar,linksfoldername = 
r3 - urlsearchhook: Urlsearchhook class - {00000000-6e41-4fd3-8538-502f5495e5fc} - c:\program files\ask.com\genericasktoolbar.dll
r3 - urlsearchhook: Yahoo! Toolbar - {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
r3 - urlsearchhook: 2shared toolbar - {ef468e5b-5b30-4136-a833-7f2e3a31afdf} - c:\program files\2shared\tb2sh1.dll (file missing)
r3 - urlsearchhook: Realorestudios toolbar - {03fee850-0101-4e9e-b6d4-6fc74d3db360} - c:\program files\realorestudios\tbrea1.dll
r3 - urlsearchhook: 4shared.com toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - c:\program files\4shared.com\tb4sh1.dll
o1 - hosts: ::1 localhost
o2 - bho: Yahoo! Toolbar helper - {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
o2 - bho: Realorestudios toolbar - {03fee850-0101-4e9e-b6d4-6fc74d3db360} - c:\program files\realorestudios\tbrea1.dll
o2 - bho: 4shared.com toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - c:\program files\4shared.com\tb4sh1.dll
o2 - bho: Realplayer download and record plugin for internet explorer - {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\program files\real\realplayer\rpbrowserrecordplugin.dll
o2 - bho: Search helper - {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\sepsearchhelperie.dll
o2 - bho: مساعد تسجيل الدخول إلى windows live - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll
o2 - bho: Google toolbar helper - {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\googletoolbar1.dll
o2 - bho: Ask toolbar bho - {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\genericasktoolbar.dll
o2 - bho: Windows live toolbar helper - {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
o2 - bho: (no name) - {e3cbda77-eece-45ac-a4c7-57b021be6ba0} - (no file)
o2 - bho: 2shared toolbar - {ef468e5b-5b30-4136-a833-7f2e3a31afdf} - c:\program files\2shared\tb2sh1.dll (file missing)
o3 - toolbar: &google - {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\googletoolbar1.dll
o3 - toolbar: Yahoo! Toolbar - {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
o3 - toolbar: &windows live toolbar - {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
o3 - toolbar: 2shared toolbar - {ef468e5b-5b30-4136-a833-7f2e3a31afdf} - c:\program files\2shared\tb2sh1.dll (file missing)
o3 - toolbar: Realorestudios toolbar - {03fee850-0101-4e9e-b6d4-6fc74d3db360} - c:\program files\realorestudios\tbrea1.dll
o3 - toolbar: 4shared.com toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - c:\program files\4shared.com\tb4sh1.dll
o3 - toolbar: Ask toolbar - {d4027c7f-154a-4066-a1ad-4243d8127440} - c:\program files\ask.com\genericasktoolbar.dll
o4 - hklm\..\run: [egui] "c:\program files\eset\eset smart security\egui.exe" /hide /waitservice
o4 - hklm\..\run: [frag eggs] "c:\programdata\this tons tons.5tmvug"
o4 - hklm\..\run: [tkbellexe] "c:\program files\common files\real\update_ob\realsched.exe"  -osboot
o4 - hkcu\..\run: [sidebar] c:\program files\windows sidebar\sidebar.exe /autorun
o4 - hkcu\..\run: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
o4 - hkcu\..\run: [ehtray.exe] c:\windows\ehome\ehtray.exe
o4 - hkcu\..\run: [nod32] c:\users\fasel\appdata\local\temp\nodqq.exe
o4 - hkcu\..\run: [dso32] c:\users\fasel\appdata\local\temp\dsoqq.exe
o4 - hkcu\..\run: [4shared desktop] "c:\program files\4shared desktop\desktop.exe" "startup"
o4 - hkcu\..\run: [java developer script browse] c:\windows\jusched.exe
o4 - hkus\s-1-5-19\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'local service')
o4 - hkus\s-1-5-19\..\run: [windowswelcomecenter] rundll32.exe oobefldr.dll,showwelcomecenter (user 'local service')
o4 - hkus\s-1-5-20\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'network service')
o4 - global startup: Adobe gamma loader.lnk = c:\program files\common files\adobe\calibration\adobe gamma loader.exe
o4 - global startup: Winzip quick pick.lnk = c:\program files\winzip\wzqkpick.exe
o8 - extra context menu item: &تصدير إلى microsoft excel - res://c:\progra~1\micros~3\office11\excel.exe/3000
o9 - extra button: تدوين هذا في المدونة - {219c3416-8cb2-491a-a3c7-d9fcddc9d600} - c:\program files\windows live\writer\writerbrowserextension.dll
o9 - extra 'tools' menuitem: &تدوين هذا في windows live writer - {219c3416-8cb2-491a-a3c7-d9fcddc9d600} - c:\program files\windows live\writer\writerbrowserextension.dll
o9 - extra button: بحث - {92780b25-18cc-41c8-b9be-3c9c571a8263} - c:\progra~1\micros~3\office11\refiebar.dll
o13 - gopher prefix: 
O20 - appinit_dlls: C:\progra~1\google\google~2\goec62~1.dll
o23 - service: Eset http server (ehttpsrv) - eset - c:\program files\eset\eset smart security\ehttpsrv.exe
o23 - service: Eset service (ekrn) - eset - c:\program files\eset\eset smart security\ekrn.exe
o23 - service: Google desktop manager 5.9.1005.12335 (googledesktopmanager-051210-111108) - google - c:\program files\google\google desktop search\googledesktop.exe
--
end of file - 7007 bytes

لو سمحت أخي ممكن تعطيني الرابط اللي يرسله الماسنجر على الخاص لتحليله
و شكرا