تم حل المشكلة مشكلة مع فيروس mystartsearch

المصدر: مشكلة مع فيروس mystartsearch
في منتدى : مشاكل الأعضاء التي تم الانتهاء منها

السلام عليكم ورحمة الله وبركاته


كيف حالكم عساكم بخير



عندي مشكلة وهي ان فيروس mystartsearch ناصب نفسه كصفحة رئيسية للمتصفح ولا اتسطيع تغييرها


واريد طريقة حذفه



ويعطيكم العافية

 

وعليكم السلام ورحمة الله

اعمل ● تقرير عن قائمة البرامج المثبتة ●

 

Adobe Flash Player 15 Plugin
Avast Internet Security
Borland C++ 5.02
HiJackThis
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Client Profile
Microsoft .NET Framework 4 Extended
Microsoft .NET Framework 4 Extended
Microsoft SQL Server 2008 Native Client
Microsoft SQL Server 2008 Setup Support Files
Microsoft SQL Server 2012
Microsoft SQL Server 2012 Native Client
Microsoft SQL Server 2012 RsFx Driver
Microsoft SQL Server 2012 Setup (English)
Microsoft SQL Server 2012 Transact-SQL ScriptDom
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219
Microsoft Visual Studio 2005 Tools for Applications - ENU
Microsoft Visual Studio 2005 Tools for Applications - ENU
Microsoft VSS Writer for SQL Server 2012
Mozilla Firefox 33.1 (x86 en-US)
Mozilla Maintenance Service
Realtek High Definition Audio Driver
SolidWorks 2014 SP03
SolidWorks 2014 SP03
SolidWorks Composer Player 2014 SP03
SolidWorks eDrawings 2014 SP03
SolidWorks Explorer 2014 SP03
SolidWorks Flow Simulation 2014 SP03
SolidWorks Plastics 2014 SP03
SQL Server 2012 Common Files
SQL Server 2012 Common Files
SQL Server 2012 Database Engine Services
SQL Server 2012 Database Engine Services
SQL Server 2012 Database Engine Shared
SQL Server 2012 Database Engine Shared
SQL Server Browser for SQL Server 2012
Sql Server Customer Experience Improvement Program
VLC media player
WinRAR archiver
Your Uninstaller! 7

 

المصدر: { 2014/ 8 /20 } قـوانـيـن قــســم الـهــاردويــر والـصـيـانـة [ عدم الاطلاع لا يعفى من المسؤولية ]
في منتدى : منتدى مشاكـل وحلول الحـاسب

6- يمنع رفع الموضوع قبل مضي 6 ساعات على اخر مشاركة

 

المصدر: { 2014/ 8 /20 } قـوانـيـن قــســم الـهــاردويــر والـصـيـانـة [ عدم الاطلاع لا يعفى من المسؤولية ]
في منتدى : منتدى مشاكـل وحلول الحـاسب

13- لا تقدم حل يناقض الحل المقدم من الاداريين اوعضو اخر حتى يثبت عدم نجاح الاول ،، حتى لا تسبب ارباك لصاحب المشكلة
17-يمنع منعا باتا المشاركة بحل المشاكل بالقسم لمن تقل مشاركاته عن 500 مشاركة

 

اخى اعمل فحص بـ ● اداة Adware Cleaner ●
ثم

حمل أداة Zoek قم بتشغيلها كمسئول واكتب الامر

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

ضع علامة امام Scan all users ثم اضغط Run Script

وبعد ذلك قم بعمل فحص بـ FRST >> اضغط Scan وبعد الانتهاء اضغط Clean

 

سويت الفحص ولا صار شيء الصفحة الرئيسية زي ماهي



Zoek.exe v5.0.0.0 Updated 16-November-2014
Tool run by abdullah on Tue 11/18/2014 at 18:50:14.07.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\abdullah\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

11/18/2014 6:52:48 PM Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Batch Command(s) Run By Tool======================


==== Deleting Files \ Folders ======================

C:\Program Files\Mozilla Firefox\browser\searchplugins\default-search.xml deleted
C:\Program Files\Mozilla Firefox\browser\searchplugins\mystartsearch.xml deleted
C:\Program Files\Device Doctor deleted
C:\PROGRA~2\Duplicaterecord.js deleted
C:\Users\abdullah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TornTvDownloader.lnk deleted
C:\Windows\patsearch.bin deleted
C:\Windows\system32\tasks\060184C3-9766-46a0-B258-F4518A0B2633 deleted
C:\Windows\system32\drivers\Msft_Kernel_webinstrNew_01009.Wdf deleted
C:\Windows\system32\GroupPolicy\Machine deleted
C:\Windows\system32\GroupPolicy\User deleted
C:\Windows\system32\GroupPolicy\gpt.ini deleted
C:\Users\abdullah\AppData\Roaming\1.exe deleted
C:\Users\abdullah\X16-32583.exe deleted
"C:\Users\abdullah\AppData\Roaming\SPK\SPK.exe" deleted
"C:\Users\abdullah\AppData\Roaming\SPK" deleted
"C:\Users\abdullah\AppData\Roaming\Fixs" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [11/12/2014 09:59 AM]

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\abdullah\AppData\Roaming\Mozilla\Firefox\Profiles\xf3rtzuv.default-1415791883588
67D325B5AEB28E381B84E8DE1A90C7A8 - C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll - Shockwave Flash
0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
EED1D8EB9B68CC8060660549D0364042 - C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll - RIM Handheld Application Loader


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[11/12/2014 09:59 AM]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[11/12/2014 09:59 AM]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.arabyonline.com/?src=1000"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.arabyonline.com/?src=1000"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{33BB0A4E-99AF-4226-BDF6-49120163DE86}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.arabyonline.com/?src=1000"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\abdullah\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M3Y3W0PA will be deleted at reboot
C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\abdullah\AppData\Local\Mozilla\Firefox\Profiles\xf3rtzuv.default-1415791883588\cache2 emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=11 folders=5 271296985 bytes)

==== Empty Temp Folders ======================

C:\Users\abdullah\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\abdullah\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M3Y3W0PA" not found

==== EOF on Tue 11/18/2014 at 19:17:35.00 ======================

 

# AdwCleaner v4.101 - Report created 18/11/2014 at 20:19:42
# Updated 09/11/2014 by Xplode
# Database : 2014-11-07.1 [Local]
# Operating System : Windows 7 Ultimate Service Pack 1 (32 bits)
# Username : abdullah - ABDULLAH-PC
# Running from : C:\Users\abdullah\Downloads\adwcleaner_4.101.exe
# Option : Clean

***** [ Services ] *****


***** [ Files / Folders ] *****


***** [ Scheduled Tasks ] *****


***** [ Shortcuts ] *****


***** [ Registry ] *****


***** [ Browsers ] *****

-\\ Internet Explorer v8.0.7601.17514


-\\ Mozilla Firefox v33.1 (x86 en-US)


*************************

AdwCleaner[R0].txt - [6167 octets] - [18/11/2014 17:37:40]
AdwCleaner[R1].txt - [6227 octets] - [18/11/2014 18:03:34]
AdwCleaner[R2].txt - [942 octets] - [18/11/2014 19:31:15]
AdwCleaner[R3].txt - [1002 octets] - [18/11/2014 20:17:06]
AdwCleaner[S0].txt - [6282 octets] - [18/11/2014 18:29:57]
AdwCleaner[S1].txt - [925 octets] - [18/11/2014 20:19:42]

########## EOF - C:\AdwCleaner\AdwCleaner[S1].txt - [984 octets] ##########

 

اعمل ● تقرير Runscanner ●
اخى

 

هذا runscanner

http://www.gulfup.com/?0lpAG8

 

حمل الملف التالى اخى
http://www.gulfup.com/?KMCiDr
وطبق عليه التنظيف كما بالشرح
● تنظيف runscanner ●

 

سويت عملية التنظيف وAnyCleaner

 

المشكلة الحين صارت الصفحة الرئيسية http://www.arabyonline.com

 

تمام .. حمل أداة Zoek قم بتشغيلها كمسئول واكتب الامر

createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b

ضع علامة امام Scan all users ثم اضغط Run Script

 

شغلت اداة Zoek

 

Zoek.exe v5.0.0.0 Updated 16-November-2014
Tool run by abdullah on Tue 11/18/2014 at 18:50:14.07.
Microsoft Windows 7 Ultimate 6.1.7601 Service Pack 1 x86
Running in: Normal Mode Internet Access Detected
Launched: C:\Users\abdullah\Downloads\zoek.exe [Scan all users] [Script inserted]

==== System Restore Info ======================

11/18/2014 6:52:48 PM Zoek.exe System Restore Point Created Succesfully.

==== Deleting CLSID Registry Keys ======================


==== Deleting CLSID Registry Values ======================


==== Deleting Services ======================


==== Batch Command(s) Run By Tool======================


==== Deleting Files \ Folders ======================

C:\Program Files\Mozilla Firefox\browser\searchplugins\default-search.xml deleted
C:\Program Files\Mozilla Firefox\browser\searchplugins\mystartsearch.xml deleted
C:\Program Files\Device Doctor deleted
C:\PROGRA~2\Duplicaterecord.js deleted
C:\Users\abdullah\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\TornTvDownloader.lnk deleted
C:\Windows\patsearch.bin deleted
C:\Windows\system32\tasks\060184C3-9766-46a0-B258-F4518A0B2633 deleted
C:\Windows\system32\drivers\Msft_Kernel_webinstrNew_01009.Wdf deleted
C:\Windows\system32\GroupPolicy\Machine deleted
C:\Windows\system32\GroupPolicy\User deleted
C:\Windows\system32\GroupPolicy\gpt.ini deleted
C:\Users\abdullah\AppData\Roaming\1.exe deleted
C:\Users\abdullah\X16-32583.exe deleted
"C:\Users\abdullah\AppData\Roaming\SPK\SPK.exe" deleted
"C:\Users\abdullah\AppData\Roaming\SPK" deleted
"C:\Users\abdullah\AppData\Roaming\Fixs" deleted

==== Firefox Extensions Registry ======================

[HKEY_LOCAL_MACHINE\Software\Mozilla\Firefox\Extensions]
"wrc@avast.com"="C:\Program Files\AVAST Software\Avast\WebRep\FF" [11/12/2014 09:59 AM]

==== Firefox Extensions ======================

AppDir: C:\Program Files\Mozilla Firefox
- Default - %AppDir%\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}

==== Firefox Plugins ======================

Profilepath: C:\Users\abdullah\AppData\Roaming\Mozilla\Firefox\Profiles\xf3rtzuv.default-1415791883588
67D325B5AEB28E381B84E8DE1A90C7A8 - C:\Windows\system32\Macromed\Flash\NPSWF32_15_0_0_223.dll - Shockwave Flash
0CA4180B21C6B728578F3B0433BB740E - C:\Program Files\VideoLAN\VLC\npvlc.dll - VLC Web Plugin
EED1D8EB9B68CC8060660549D0364042 - C:\Program Files\Common Files\Research In Motion\BBWebSLLauncher\NPWebSLLauncher.dll - RIM Handheld Application Loader


==== Chromium Look ======================

HKEY_LOCAL_MACHINE\SOFTWARE\Google\Chrome\Extensions
eofcbnmajmjmplflapaojjnihcjkigck - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChromeSp.crx[11/12/2014 09:59 AM]
gomekmidlodglbbmalcneegieacbdmki - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx[11/12/2014 09:59 AM]

==== Set IE to Default ======================

Old Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Start Page"="http://www.arabyonline.com/?src=1000"
"Default_Page_URL"="http://www.google.com"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://www.google.com"
"Default_Page_URL"="http://www.google.com"
"Start Page"="http://www.arabyonline.com/?src=1000"
"Search Page"="http://www.google.com"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{33BB0A4E-99AF-4226-BDF6-49120163DE86}"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86}] not found

New Values:
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://www.arabyonline.com/?src=1000"
[HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Main]
"Default_Search_URL"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Search Page"="http://go.microsoft.com/fwlink/?LinkId=54896"
"Default_Page_URL"="http://go.microsoft.com/fwlink/?LinkId=69157"
"Start Page"="http://go.microsoft.com/fwlink/?LinkId=69157"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes]
"DefaultScope"="{012E1000-F331-11DB-8314-0800200C9A66}"

==== All HKCU SearchScopes ======================

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\SearchScopes
{012E1000-F331-11DB-8314-0800200C9A66} Google Url="http://www.google.com/search?q={searchTerms}"
{0633EE93-D776-472f-A0FF-E1416B8B2E3A} Bing Url="http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC"

==== Deleting Registry Keys ======================

HKEY_LOCAL_MACHINE\Software\Policies\Google deleted successfully

==== Empty IE Cache ======================

C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5 emptied successfully
C:\Users\abdullah\AppData\Local\Temp\acro_rd_dir\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5 emptied successfully
C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M3Y3W0PA will be deleted at reboot
C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat will be deleted at reboot

==== Empty FireFox Cache ======================

C:\Users\abdullah\AppData\Local\Mozilla\Firefox\Profiles\xf3rtzuv.default-1415791883588\cache2 emptied successfully

==== Empty Chrome Cache ======================

No Chrome User Data found

==== Empty All Flash Cache ======================

Flash Cache Emptied Successfully

==== Empty All Java Cache ======================

No Java Cache Found

==== C:\zoek_backup content ======================

C:\zoek_backup (files=11 folders=5 271296985 bytes)

==== Empty Temp Folders ======================

C:\Users\abdullah\AppData\Local\Temp will be emptied at reboot
C:\Users\Default\AppData\Local\Temp emptied successfully
C:\Users\Default User\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\networkservice\AppData\Local\Temp emptied successfully
C:\Windows\serviceprofiles\Localservice\AppData\Local\Temp emptied successfully
C:\Windows\Temp will be emptied at reboot

==== After Reboot ======================

==== Empty Temp Folders ======================

C:\Windows\Temp successfully emptied
C:\Users\abdullah\AppData\Local\Temp successfully emptied

==== Empty Recycle Bin ======================

C:\$RECYCLE.BIN successfully emptied

==== Deleting Files / Folders ======================

"C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat" not found
"C:\Users\abdullah\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M3Y3W0PA" not found

==== EOF on Tue 11/18/2014 at 19:17:35.00 ======================

 

أخي الكريم

المشكلة بسيطة .. حمل هذا البرنامج وامسح جهازك وسأتابع معك .

http://www.yac.mx/

 

يحذف كل الملفات فيه ملفات احتاجها

ياليت يتم التوضيح

 

أي برنامج الذي يحذف أخي الكريم ؟

 

yac هذا البرنامج الي اقصده

هل هو يحذف كل الملفات اما لا وماهي طريقة استخدامه