New
#1
Delete my files all the time, re-start the system
Good evening to all
I have a problem which all of the following: When I download a file or not, or install any program or any action on the desktop once the reboot delete all your likes
Do you find you have a solution
Report
Code:logfile of trend micro hijackthis v2.0.2 scan saved at 0448 م, on 26/12/10 platform: Windows vista (winnt 6.00.1904) msie: Internet explorer v7.00 (7.00.6000.16386) boot mode: Normal running processes: C:\windows\system32\taskeng.exe c:\windows\system32\dwm.exe c:\windows\explorer.exe c:\windows\system32\hkcmd.exe c:\windows\system32\igfxpers.exe c:\windows\rthdvcpl.exe c:\windows\system32\igfxsrvc.exe c:\program files\common files\real\update_ob\realsched.exe c:\program files\avg\avg9\avgtray.exe c:\program files\common files\java\java update\jusched.exe c:\program files\windows sidebar\sidebar.exe c:\windows\ehome\ehtray.exe c:\program files\google\googletoolbarnotifier\googletoolbarno tifier.exe c:\program files\mcafee security scan\2.0.181\ssscheduler.exe c:\windows\ehome\ehmsas.exe c:\windows\integrator.exe c:\users\welcome\appdata\local\temp\rar$ex00.021\t eamviewer 4 arabic+portable by shrief shata.exe c:\users\welcome\appdata\local\temp\rarsfx17\teamv iewer.exe c:\program files\internet explorer\ieuser.exe c:\program files\common files\java\java update\jucheck.exe c:\program files\winrar\winrar.exe c:\program files\trend micro\hijackthis\hijackthis.exe c:\program files\vs revo group\revo uninstaller pro\revouninpro.exe c:\program files\internet explorer\iexplore.exe c:\windows\system32\searchfilterhost.exe r1 - hkcu\software\microsoft\internet explorer\main,search page = Bing r1 - hklm\software\microsoft\internet explorer\main,default_page_url = MSN.com r1 - hklm\software\microsoft\internet explorer\main,default_search_url = Bing r1 - hklm\software\microsoft\internet explorer\main,search page = Bing r0 - hklm\software\microsoft\internet explorer\main,start page = MSN.com r0 - hklm\software\microsoft\internet explorer\search,searchassistant = r0 - hklm\software\microsoft\internet explorer\search,customizesearch = r0 - hkcu\software\microsoft\internet explorer\toolbar,linksfoldername = r3 - urlsearchhook: Messengerpluslive saudi arabia tb toolbar - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - c:\program files\messengerpluslive_saudi_arabia_tb\tbmess.dll r3 - urlsearchhook: 4shared.com toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - c:\program files\4shared.com\tb4sh0.dll r3 - urlsearchhook: Hot mp3 toolbar - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - c:\program files\hot_mp3\tbhot1.dll o1 - hosts: ::1 localhost o2 - bho: Idm helper - {0055c089-8582-441b-a0bf-17b458c2a3a8} - c:\program files\internet download manager\idmiecc.dll o2 - bho: 4shared.com - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - c:\program files\4shared.com\tb4sh0.dll o2 - bho: Realplayer download and record plugin for internet explorer - {3049c3e9-b461-4bc5-8870-4c09146192ca} - c:\programdata\real\realplayer\browserrecordplugin \ie\rpbrowserrecordplugin.dll o2 - bho: Conduit engine - {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\conduitengin0.dll o2 - bho: Wormradar.com iesiteblocker.navfilter - {3ca2f312-6f6e-4b53-a66e-4e65e497c8c0} - c:\program files\avg\avg9\avgssie.dll o2 - bho: Radiobar toolbar - {5b291e6c-9a74-4034-971b-a4b007a0b315} - c:\program files\radiobar\toolbar.ni.dll o2 - bho: Java(tm) plug-in ssv helper - {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll o2 - bho: مساعد تسجيل الدخول إلى windows live - {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\windowslivelogin.dll o2 - bho: Hot mp3 toolbar - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - c:\program files\hot_mp3\tbhot1.dll o2 - bho: Google toolbar helper - {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\googletoolbar_32.dll o2 - bho: Google toolbar notifier bho - {af69de43-7d58-4638-b6fa-ce66b5ad205d} - c:\program files\google\googletoolbarnotifier\5.6.5805.1910\s wg.dll o2 - bho: Java(tm) plug-in 2 ssv helper - {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll o2 - bho: Messengerpluslive saudi arabia tb toolbar - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - c:\program files\messengerpluslive_saudi_arabia_tb\tbmess.dll o3 - toolbar: Radiobar toolbar - {5b291e6c-9a74-4034-971b-a4b007a0b315} - c:\program files\radiobar\toolbar.ni.dll o3 - toolbar: Messengerpluslive saudi arabia tb toolbar - {f78a8f02-19ee-4de8-8ea7-6138e8b524f4} - c:\program files\messengerpluslive_saudi_arabia_tb\tbmess.dll o3 - toolbar: 4shared.com toolbar - {09ec805c-cb2e-4d53-b0d3-a75a428b81c7} - c:\program files\4shared.com\tb4sh0.dll o3 - toolbar: Hot mp3 toolbar - {9384bd4c-dd14-4be9-80f7-f6277511e4f5} - c:\program files\hot_mp3\tbhot1.dll o3 - toolbar: Google toolbar - {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\googletoolbar_32.dll o3 - toolbar: Conduit engine - {30f9b915-b755-4826-820b-08fba6bd249d} - c:\program files\conduitengine\conduitengin0.dll o4 - hklm\..\run: [windows defender] %programfiles%\windows defender\msascui.exe -hide o4 - hklm\..\run: [igfxtray] c:\windows\system32\igfxtray.exe o4 - hklm\..\run: [hotkeyscmds] c:\windows\system32\hkcmd.exe o4 - hklm\..\run: [persistence] c:\windows\system32\igfxpers.exe o4 - hklm\..\run: [rthdvcpl] rthdvcpl.exe o4 - hklm\..\run: [skytel] skytel.exe o4 - hklm\..\run: [tkbellexe] "c:\program files\common files\real\update_ob\realsched.exe" -osboot o4 - hklm\..\run: [avg9_tray] c:\progra~1\avg\avg9\avgtray.exe o4 - hklm\..\run: [sunjavaupdatesched] "c:\program files\common files\java\java update\jusched.exe" o4 - hklm\..\runonce: [uninstall adobe download manager] "c:\program files\nos\bin\getplusuninst_adobe.exe" /get1noarp o4 - hkcu\..\run: [sidebar] c:\program files\windows sidebar\sidebar.exe /autorun o4 - hkcu\..\run: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background o4 - hkcu\..\run: [2 team] "c:\programdata\transdaledale.d6pjyba" o4 - hkcu\..\run: [okay proxy ooze each] "c:\programdata\bolt byte dead.1i3dj1" o4 - hkcu\..\run: [ehtray.exe] c:\windows\ehome\ehtray.exe o4 - hkcu\..\run: [swg] "c:\program files\google\googletoolbarnotifier\googletoolbarno tifier.exe" o4 - hkcu\..\run: [filehippo.com] "c:\program files\filehippo.com\updatechecker.exe" /background o4 - hkcu\..\run: [4shared desktop] "c:\program files\4shared desktop\desktop.exe" "startup" o4 - hkus\s-1-5-19\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'local service') o4 - hkus\s-1-5-19\..\run: [windowswelcomecenter] rundll32.exe oobefldr.dll,showwelcomecenter (user 'local service') o4 - hkus\s-1-5-20\..\run: [sidebar] %programfiles%\windows sidebar\sidebar.exe /detectmem (user 'network service') o4 - startup: Battery doubler.lnk = c:\program files\dachshund software\battery doubler\battery doubler.exe o4 - global startup: Mcafee security scan plus.lnk = ? O8 - extra context menu item: Google sidewiki... - res://c:\program files\google\google toolbar\component\googletoolbardynamic_mui_en_950d f09fab501e03.dll/cmsidewiki.html o8 - extra context menu item: ت&صدير إلى microsoft excel - res://c:\progra~1\micros~3\office12\excel.exe/3000 o13 - gopher prefix: O16 - dpf: {e2883e8f-472f-4fb0-9522-ac9bf37916a7} (get_atlcom class) - http://platformdl.adobe.com/nos/getplusplus/1.6/gp.cab o18 - protocol: Linkscanner - {f274614c-63f8-47d5-a4d1-fbdde494f8d1} - c:\program files\avg\avg9\avgpp.dll o18 - protocol: Toolbarchrome - {718733bc-ad64-4e5f-ac18-a85fbd75d54d} - c:\program files\radiobar\toolbar.ni.dll o20 - appinit_dlls: Avgrsstx.dll o23 - service: Avg free e-mail scanner (avg9emc) - avg technologies cz, s.r.o. - c:\program files\avg\avg9\avgemc.exe o23 - service: Avg free watchdog (avg9wd) - avg technologies cz, s.r.o. - c:\program files\avg\avg9\avgwdsvc.exe o23 - service: خدمة تحديث google (gupdate) (gupdate) - google inc. - c:\program files\google\update\googleupdate.exe o23 - service: Google software updater (gusvc) - google - c:\program files\google\common\google updater\googleupdaterservice.exe o23 - service: Mcafee security scan component host service (mccomponenthostservice) - mcafee, inc. - c:\program files\mcafee security scan\2.0.181\mcchsvc.exe -- end of file - 8412 bytes
Report of the installed programs
Code:Update for Microsoft Office 2007 (KB2508958) 4shared Desktop 4shared.com Toolbar Adobe Flash Player 10 ActiveX Apple Application Support Apple Mobile Device Support Apple Software Update Ask Toolbar AVG Free 9.0 Babylon Babylon toolbar on IE Battery Doubler 1.2.1 Bonjour CCleaner Conduit Engine FileHippo.com Update Checker FLVTube Player GOM Player Google Toolbar for Internet Explorer Google Toolbar for Internet Explorer Google Update Helper HijackThis 2.0.2 Hot_MP3 Toolbar Hotfix for Microsoft .NET Framework 3.5 SP1 (KB953595) Hotfix for Microsoft .NET Framework 3.5 SP1 (KB958484) Hunt TB Toolbar iMesh iMesh Intel(R) Graphics Media Accelerator Driver iTunes Java(TM) 6 Update 22 K-Lite Codec Pack 5.4.0 (Full) Messenger Plus! Live MessengerDiscovery 1.5.0800 MessengerPlusLive Saudi Arabia TB Toolbar Microsoft .NET Framework 3.5 SP1 Microsoft .NET Framework 3.5 SP1 Microsoft Choice Guard Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office 2007 Service Pack 2 (SP2) Microsoft Office Access MUI (Arabic) 2007 Microsoft Office Enterprise 2007 Microsoft Office Enterprise 2007 Microsoft Office Excel MUI (Arabic) 2007 Microsoft Office Groove MUI (English) 2007 Microsoft Office Groove Setup Metadata MUI (Arabic) 2007 Microsoft Office InfoPath MUI (Arabic) 2007 Microsoft Office OneNote MUI (Arabic) 2007 Microsoft Office Outlook MUI (Arabic) 2007 Microsoft Office PowerPoint MUI (Arabic) 2007 Microsoft Office Proof (Arabic) 2007 Microsoft Office Proof (English) 2007 Microsoft Office Proof (French) 2007 Microsoft Office Proofing (Arabic) 2007 Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Proofing Tools 2007 Service Pack 2 (SP2) Microsoft Office Publisher MUI (Arabic) 2007 Microsoft Office Shared MUI (Arabic) 2007 Microsoft Office Shared MUI (English) 2007 Microsoft Office Word MUI (Arabic) 2007 Microsoft Visual C++ 2005 Redistributable MSVCRT Palringo Power Mp3 Cutter(Mp3 Sound Cutter) 1.40 QuickTime RadioBar Toolbar RealPlayer Realtek High Definition Audio Driver RealUpgrade 1.0 Recuva Revo Uninstaller Pro 2.5.1 SearchCore for Browsers Security Update for 2007 Microsoft Office System (KB2288621) Security Update for 2007 Microsoft Office System (KB2288931) Security Update for 2007 Microsoft Office System (KB2345043) Security Update for 2007 Microsoft Office System (KB2553089) Security Update for 2007 Microsoft Office System (KB2553090) Security Update for 2007 Microsoft Office System (KB2584063) Security Update for 2007 Microsoft Office System (KB969559) Security Update for 2007 Microsoft Office System (KB976321) Security Update for Microsoft Office 2007 suites (KB2596785) 32-Bit Edition Security Update for Microsoft Office Access 2007 (KB979440) Security Update for Microsoft Office Access 2007 (KB979440) Security Update for Microsoft Office Groove 2007 (KB2552997) Security Update for Microsoft Office InfoPath 2007 (KB2510061) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office InfoPath 2007 (KB979441) Security Update for Microsoft Office PowerPoint 2007 (KB2596764) 32-Bit Edition Security Update for Microsoft Office PowerPoint 2007 (KB2596912) 32-Bit Edition Security Update for Microsoft Office Publisher 2007 (KB2596705) 32-Bit Edition Security Update for Microsoft Office system 2007 (972581) Security Update for Microsoft Office system 2007 (KB974234) Security Update for Microsoft Office Visio Viewer 2007 (KB973709) Security Update for Microsoft Office Word 2007 (KB2344993) SeePassword SeePassword Tag Cambridge Exams Demo 3.7.0.2 Topaz Vivacity Update for 2007 Microsoft Office System (KB967642) Update for Microsoft .NET Framework 3.5 SP1 (KB963707) Update for Microsoft Office 2007 suites (KB2596651) 32-Bit Edition Update for Microsoft Office 2007 suites (KB2596789) 32-Bit Edition Update for Microsoft Office 2007 System (KB2539530) Update for Microsoft Office Excel 2007 (KB2596596) 32-Bit Edition Update for Microsoft Office OneNote 2007 (KB980729) Update for Microsoft Office Outlook 2007 (KB2583910) Update for Outlook 2007 Junk Email Filter (KB2596560) Windows Live Communications Platform Windows Live Essentials Windows Live Essentials Windows Live Messenger Winrar
Last edited by Brink; 19 Dec 2011 at 16:07. Reason: code box
Quote