• بادئ الموضوع بادئ الموضوع whaj
  • تاريخ البدء تاريخ البدء
الحالة
مغلق و غير مفتوح للمزيد من الردود.

whaj

زيزوومى مميز
إنضم
2 أبريل 2009
المشاركات
473
مستوى التفاعل
35
النقاط
480
الإقامة
جــــــدة
غير متصل
السلام عليكم​
يارب الجميع يكون بخير​
برنامج Yontoo​

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

جنني كل ما أحذفه ارجع القاه مع العلم اني ماادري شلون جاء مااذكر اني حملته​
وانا قريت عنه في احد المواقع انه برنامج تجسس​
هالسالفه لها اكثر من ثلاث شهور ولا هو راضي ينحذف​
وهذي تقارير عن جهازي​

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

دمتم سالمين​
 

توقيع : whaj
السلام عليكم أخي الكريم
جمعة مباركة إن شاء الله
فضلا قم بالتالي بالترتيب :
من إضافة إزالة برامج إحذف برنامج YONTOO
حمل

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

... حدث قاعدة البيانات ... إفحص الجهاز ....إحذف الإصابات ..... أرفق التقرير بردك القادم
إحذف برنامج المالوير بايت ثم
حمل برنامج superantispyware وطبق الشرح الموجود و إحذف الإصابات و أرفق التقرير بردك القادم

ثم حمل

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

ثم أغلق جميع البرامج و المتصفحات ثم شغلها كمسؤول """ زر يمين عليها ثم تشغيل كمسؤول """

إضغط على بحث إنتظر قليلا ستظهر لك مفكرة .. ثم إضغط على حذف.....ستطلب منك إعادة إقلاع الجهاز أعدالإقلاع فضلا أرفق التقرير في ردك القادك

ثم إحذف برنامج


--------------
إن شاء الله لن يعود البرنامج ...نتابع بعد صلاة الجمعه إن شاء الله
 
الله يعافيك اخوي ابو همام
بالنسبة للخطوة الاولى وهي حذف البرنامج من اضافة وازالة ماقدرت كل مااسوي ازالة تثبيت تطلع نافذه انه لا يمكن حذفته ببرنامج Your Uninstaller زي كل مرة وانحذف
الخطوة التانية ( حمل

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

... حدث قاعدة البيانات ... إفحص الجهاز ....إحذف الإصابات ..... أرفق التقرير بردك القادم
إحذف برنامج المالوير بايت ) سويتها
الخطوة التالتة ( حمل برنامج superantispyware وطبق الشرح الموجود و إحذف الإصابات و أرفق التقرير بردك القادم ) سويت الجزء الأول حملت البرنامج بس ماقدرت اسوي الباقي لأني من حملت البرنامج والجهاز يعلق كل ماحاولت افتح البرنامج ويصير سطح المكتب شاشه سوداء
بقية الخطوات ماقدرت انفذها لأني غرزت عند الخطوة التالتة

ع فكرة يوم عرجت ابي احذف المالوير لقيت البرنامج اللي مايتسماشي اللي مجنني مرتز عقب ماحذفته

ابي حل بليز لا حرمني الله من وقفتكم معي
 
توقيع : whaj
السلام عليكم أخي الكريم نصب برنامج
superantispyware
من الوضع الآمن و افحص الجهاز كما في الشرح من الوضع الآمن وأزل الإصابات مع إرفاق التقرير في ردك القادم ثم أعد إقلاع الجهاز و تابع الخطوات
 
  • Like
التفاعلات: whaj
معليش اخوي اتحملني شوي
بس لازم هالبرنامج لأنه أمس عقدني وصار جهازي يعللق حتى امس سويت استعادة نظام مو راضي بسبته وحاولت احذفه مو راضي والجهاز صار بطيء ومثل ماعلمتك كل ماافتح شيء يخلي الشاشه سوداء وسويت من امس مثل ماطلبت الحين وربي رحت الوضع الآمن وحاولت اني افتحه علق اجهاز مدري وش قصته واليوم من الصبح اول شيء سويته من صحيت من نومي اني اسوي استعادة نظام والحمدلله طار برنامج superantispyware ورجعلي برنامج المالوير عموما اذا لابد منه ارجع احمله من جديد واسوي مثل ماطلبت :)

شف هنا لا هنت تقرير المالوير من امس

Malwarebytes Anti-Malware 1.70.0.1100

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي


نسخة قاعدة البيانات : v2013.06.07.04
Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
ميمي :: AZIZ [مدير]
28/07/34 02:47:57 م
mbam-log-2013-06-07 (14-47-57).txt
نوع الفحص : فحص كامل (C:\|D:\|E:\|F:\|G:\|H:\|)
خيارت الفحص الممكنة: الذاكرة | بدء التشغيل | الريجستري | نظام الملفات | أساليب بحثية/غير ذلك | PUP | PUM
خيارات الفحص المعطلة: Shuriken/أساليب بحثية | P2P
الكائنات المفحوصة : 501230
الوقت المنقضي : 2 ساعة, 44 دقيقة, 6 ثانية
عمليات الذاكرة المصابة : 0
(لم يتم إكتشاف مواد ضارة)
وحدات الذاكرة المصابة : 0
(لم يتم إكتشاف مواد ضارة)
مفاتيح الريجستري المصابة : 0
(لم يتم إكتشاف مواد ضارة)
قيم الريجستري المصابة : 0
(لم يتم إكتشاف مواد ضارة)
مواد بيانات الريجستري المصابة : 0
(لم يتم إكتشاف مواد ضارة)
المجلدات المصابة : 0
(لم يتم إكتشاف مواد ضارة)
الملفات المصابة : 3
C:\Users\ميمي\Desktop\منوع\Adobe After Effect CS5\amtlib.dll (PUP.RiskwareTool.CK) -> تم بنجاح العزل و الحذف
C:\Users\ميمي\Desktop\منوع\الاستماع\فرحة العيد\white-and-blue-balloon-vector-design-249.jpg (Extension.Mismatch) -> تم بنجاح العزل و الحذف
H:\برامج\Internet Download Manager\ss\استخدم هذا الباتش اولا\gsndk&p.exe (Spyware.Password) -> تم بنجاح العزل و الحذف
(و)
 
توقيع : whaj
السلام عليكم أخي الكريم نعم يفضل إستخدام البرنامج لذلك فضلا منك
نظف مخلفات الجهاز
ب سي كلينر
ب

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي



ثم قم بتفحص قرص النظام زر يمين على القرص c خصائص أدوات تدقيق الاقراص ضع إشارة الصح على المربعين ثم موافق ثم تظهر لك رسالة إضغط على جدولة تفحص الأقراص ثم أعد الإقلاع إنتظر حتى يتم التفحص بعد الإنتهاء
حاول تنصيب برنامج superantispyware
إذا سبب لك مشاكل قم بعملية إستعادة النظام كما فعلت سابقا :p ثم إفحص الجهاز بالمالوربايت حتى يتم حذف الإصابات السابقة ثم
تابع الخطوات بدونه و إن شاء الله خير
 
طيب امري لله برجع احمله بس سؤال صغنن لو سمحت وش معنى الاقلاع ماعرفت كيف يعني اسوي اقلاع للجهاز

احجزله تذكرة سفر يعني والا شلون :p
 
توقيع : whaj
  • Like
التفاعلات: whaj
بس :ROFLMAO:
سههههههههههله :LOL:
 
توقيع : whaj
مسيك بالخير اخوي بو همام
إليك رحلتي المكوكية مع جهازي المحترم :ROFLMAO:

نظف مخلفات الجهاز
ب سي كلينر <<<<< تم
ب

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

<<<<< تم ولكن لاحظت انه بعد هالخطوة طلعت مجلدات ومستندات غير نشطة على سطح المكتب وفي مجلد الصور وهالصورة توضح مااقصد

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي



ثم قم بتفحص قرص النظام زر يمين على القرص c خصائص أدوات تدقيق الاقراص ضع إشارة الصح على المربعين ثم موافق ثم تظهر لك رسالة إضغط على جدولة تفحص الأقراص ثم أعد الإقلاع إنتظر حتى يتم التفحص بعد الإنتهاء <<<<< تم

حاول تنصيب برنامج superantispyware <<<<< لم يتم
والسبب أنني قمت كما طلبت مني بتنصيبه في الوضع الآمن و بعد تنصيبه للأسف مارضي يفتح لا في الوضع الآمن ولا في الوضع العادي مثل ماعلمتك قبل تعلق الصفحات والجهاز يعلق ويصير سطح المكتب شاشه سوداء ماتبين كل الأشياء اللي فوقه لذلك قمت باستعادة النظام وش حيلة البليد غير مسح السبورة :LOL:

طبعا لما استعدت النظام طااااااااااااار كل شغلي في العجة :barefoot:

رديت طبقت الخطوات خطوة خطوة من جديد ياليل العنا :(

ثم إفحص الجهاز بالمالوربايت حتى يتم حذف الإصابات السابقة <<<<< تم

وإليك التقرير

Malwarebytes Anti-Malware 1.70.0.1100

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي


نسخة قاعدة البيانات : v2013.06.08.02
Windows 7 x64 NTFS
Internet Explorer 9.0.8112.16421
ميمي :: AZIZ [مدير]
29/07/34 04:28:11 م
mbam-log-2013-06-08 (16-28-11).txt
نوع الفحص : فحص كامل (C:\|G:\|H:\|)
خيارت الفحص الممكنة: الذاكرة | بدء التشغيل | الريجستري | نظام الملفات | أساليب بحثية/غير ذلك | PUP | PUM
خيارات الفحص المعطلة: Shuriken/أساليب بحثية | P2P
الكائنات المفحوصة : 490494
الوقت المنقضي : 2 ساعة, 45 دقيقة, 12 ثانية
عمليات الذاكرة المصابة : 0
(لم يتم إكتشاف مواد ضارة)
وحدات الذاكرة المصابة : 0
(لم يتم إكتشاف مواد ضارة)
مفاتيح الريجستري المصابة : 0
(لم يتم إكتشاف مواد ضارة)
قيم الريجستري المصابة : 0
(لم يتم إكتشاف مواد ضارة)
مواد بيانات الريجستري المصابة : 0
(لم يتم إكتشاف مواد ضارة)
المجلدات المصابة : 0
(لم يتم إكتشاف مواد ضارة)
الملفات المصابة : 1
C:\Users\ميمي\Desktop\منوع\Adobe After Effect CS5\amtlib.dll (PUP.RiskwareTool.CK) -> تم بنجاح العزل و الحذف
(و)


ملاحظة : معليش اخوي بو همام لا تزعل مني لأني ماطبقت خطوة البرنامج superantispyware السبب اننا مااتفقنا انا وهالبرنامج نهائي وبتاتا البتة
بس على فكرة
لاحظت انه المستندات الغير نشطة اختفت مع العملية الأخيرة

أما البرنامج اللي عشانه سويت هالموضوع مازال مرتز مع تكرار حذفه أكثر من مرة
وشكرا لسعة صدركم لبثارتي :rolleyes:
 
توقيع : whaj
اخي هل قمت بستعمال اداة ادوير كلينر لانك لم تقم بارفاق تقريرها

Sent from my HTC Incredible S using Tapatalk 2
 
  • Like
التفاعلات: whaj
ماقلت لي على ادوير كلينر ؟؟؟
 
توقيع : whaj
السلام عليكم أخي لا مشكلة حملها وتابع " لقد ذكرتها لك في المشاركة رقم 2 "

حمل
أداة أدوير كلينر

ثم

أغلق جميع البرامج و المتصفحات

ثم شغلها كمسؤول """ زر يمين عليها ثم تشغيل كمسؤول """

إضغط على بحث إنتظر قليلا ستظهر لك مفكرة .. ثم إضغط على حذف.....ستطلب منك إعادة إقلاع الجهاز أعدالإقلاع فضلا أرفق التقرير في ردك القادك
 
  • Like
التفاعلات: whaj
هذا تقرير ادوير كلينر

# AdwCleaner v2.302 - Logfile created 06/08/2013 at 21:21:36
# Updated 06/06/2013 by Xplode
# Operating system : Windows 7 Home Premium (64 bits)
# User : ميمي - AZIZ
# Boot Mode : Normal
# Running from : C:\Users\ميمي\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\CDWY6V7L\adwcleaner.exe
# Option [Delete]

***** [Services] *****

***** [Files / Folders] *****
Deleted on reboot : C:\Program Files (x86)\Mozilla Firefox\extensions\{1FD91A9C-410C-4090-BBCC-55D3450EF433}
Deleted on reboot : C:\Program Files (x86)\Searchqu Toolbar
Deleted on reboot : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\extensions\{1fd91a9c-410c-4090-bbcc-55d3450ef433}
File Deleted : C:\Program Files (x86)\Mozilla Firefox\searchplugins\babylon.xml
File Deleted : C:\Program Files (x86)\Mozilla FireFox\searchplugins\Search_Results.xml
File Deleted : C:\Users\ميمي\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data
File Deleted : C:\Users\ميمي\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences
File Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\bprotector_extensions.sqlite
File Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\bprotector_prefs.js
File Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\searchplugins\Askcom.xml
File Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\searchplugins\delta.xml
File Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\searchplugins\Search_Results.xml
Folder Deleted : C:\Program Files (x86)\Ask.com
Folder Deleted : C:\Program Files (x86)\Common Files\Wondershare
Folder Deleted : C:\Program Files (x86)\Conduit
Folder Deleted : C:\Program Files (x86)\Mozilla Firefox\Extensions\afurladvisor@anchorfree.com
Folder Deleted : C:\Program Files (x86)\RegClean Pro
Folder Deleted : C:\Program Files (x86)\Wondershare
Folder Deleted : C:\ProgramData\Babylon
Folder Deleted : C:\ProgramData\boost_interprocess
Folder Deleted : C:\ProgramData\BrowserProtect
Folder Deleted : C:\ProgramData\IBUpdaterService
Folder Deleted : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wondershare
Folder Deleted : C:\ProgramData\Tarma Installer
Folder Deleted : C:\ProgramData\Wondershare
Folder Deleted : C:\Users\ميمي\AppData\Local\AVG Secure Search
Folder Deleted : C:\Users\ميمي\AppData\Local\Conduit
Folder Deleted : C:\Users\ميمي\AppData\Local\Google\Chrome\User Data\Default\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Folder Deleted : C:\Users\ميمي\AppData\Local\Ilivid
Folder Deleted : C:\Users\ميمي\AppData\Local\Linkury
Folder Deleted : C:\Users\ميمي\AppData\Local\OpenCandy
Folder Deleted : C:\Users\ميمي\AppData\Local\PackageAware
Folder Deleted : C:\Users\ميمي\AppData\Local\Wondershare
Folder Deleted : C:\Users\ميمي\AppData\LocalLow\AskToolbar
Folder Deleted : C:\Users\ميمي\AppData\LocalLow\Conduit
Folder Deleted : C:\Users\ميمي\AppData\LocalLow\PriceGong
Folder Deleted : C:\Users\ميمي\AppData\LocalLow\Searchqutoolbar
Folder Deleted : C:\Users\ميمي\AppData\Roaming\BabSolution
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Babylon
Folder Deleted : C:\Users\ميمي\AppData\Roaming\file scout
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\CT1561552
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\CT3220468
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\CT3289075
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\extensions\{7473b6bd-4691-4744-a82b-7854eb3d70b6}
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\extensions\{96f454ea-9d38-474f-b504-56193e00c1a5}
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\extensions\{99079a25-328f-4bd4-be04-00955acaa0a7}
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\extensions\{c95a4e8e-816d-4655-8c79-d736da1adb6d}
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\extensions\SpecialSavings@SpecialSavings.com
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\extensions\toolbar@ask.com
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\Searchqutoolbar
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\Smartbar
Folder Deleted : C:\Users\ميمي\AppData\Roaming\OpenCandy
Folder Deleted : C:\Users\ميمي\AppData\Roaming\PerformerSoft
Folder Deleted : C:\Users\ميمي\AppData\Roaming\SpecialSavings
Folder Deleted : C:\Users\ميمي\AppData\Roaming\StatusWinks
Folder Deleted : C:\Users\ميمي\AppData\Roaming\Yontoo
Folder Deleted : C:\Windows\Installer\{86D4B82A-ABED-442A-BE86-96357B70F4FE}
***** [Registry] *****
Data Deleted : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\x64\datamngr.dll
Data Deleted : [x64] HKLM\..\Windows [AppInit_DLLs] = C:\PROGRA~2\SEARCH~1\Datamngr\x64\IEBHO.dll
Key Deleted : HKCU\Software\1ClickDownload
Key Deleted : HKCU\Software\Alexa Internet
Key Deleted : HKCU\Software\APN
Key Deleted : HKCU\Software\AppDataLow\Software\AskToolbar
Key Deleted : HKCU\Software\AppDataLow\Software\Conduit
Key Deleted : HKCU\Software\AppDataLow\Software\ConduitSearchScopes
Key Deleted : HKCU\Software\AppDataLow\Software\MyAshampoo\toolbar
Key Deleted : HKCU\Software\AppDataLow\Software\PriceGong
Key Deleted : HKCU\Software\AppDataLow\Software\SmartBar
Key Deleted : HKCU\Software\Ask.com
Key Deleted : HKCU\Software\BabylonToolbar
Key Deleted : HKCU\Software\Conduit
Key Deleted : HKCU\Software\DataMngr
Key Deleted : HKCU\Software\DataMngr_Toolbar
Key Deleted : HKCU\Software\ilivid
Key Deleted : HKCU\Software\InstallCore
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{DF7770F7-832F-4BDF-B144-100EDDD0C3AE}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F25AF245-4A81-40DC-92F9-E9021F207706}
Key Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : HKCU\Software\StartSearch
Key Deleted : HKCU\Software\5953888ae668e912
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4D79-A620-CCE0C0A66CC9}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes\{C99FDC39-A1AE-4B24-8D71-E5274F8D7C54}
Key Deleted : HKLM\Software\APN
Key Deleted : HKLM\Software\AskToolbar
Key Deleted : HKLM\Software\Babylon
Key Deleted : HKLM\Software\BabylonToolbar
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{9B0CB95C-933A-4B8C-B6D4-EDCD19A43874}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{AC662AF2-4601-4A68-84DF-A3FE83F1A5F9}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\{D97A8234-F2A2-4AD4-91D5-FECDB2C553AF}
Key Deleted : HKLM\SOFTWARE\Classes\AppID\BrowserConnection.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\DNSBHO.dll
Key Deleted : HKLM\SOFTWARE\Classes\AppID\GenericAskToolbar.DLL
Key Deleted : HKLM\SOFTWARE\Classes\Applications\ilividsetupv1.exe
Key Deleted : HKLM\SOFTWARE\Classes\BrowserConnection.Loader
Key Deleted : HKLM\SOFTWARE\Classes\BrowserConnection.Loader.1
Key Deleted : HKLM\SOFTWARE\Classes\DnsBHO.BHO
Key Deleted : HKLM\SOFTWARE\Classes\DnsBHO.BHO.1
Key Deleted : HKLM\SOFTWARE\Classes\Prod.cap
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard
Key Deleted : HKLM\SOFTWARE\Classes\SearchQUIEHelper.DNSGuard.1
Key Deleted : HKLM\SOFTWARE\Classes\Toolbar.CT3289075
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{5B4144E1-B61D-495A-9A50-CD1A95D86D15}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{6A4BCABA-C437-4C76-A54E-AF31B8A76CB9}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{841D5A49-E48D-413C-9C28-EB3D9081D705}
Key Deleted : HKLM\SOFTWARE\Classes\TypeLib\{9C049BA6-EA47-4AC3-AED6-A66D8DC9E1D8}
Key Deleted : HKLM\Software\Conduit
Key Deleted : HKLM\Software\DataMngr
Key Deleted : HKLM\Software\DeviceVM
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\ConduitInstaller_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\datamngrUI_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLivid_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\iLividSetupV1_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\MyBabylontb_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SearchquMediaBar_RASMANCS
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASAPI32
Key Deleted : HKLM\SOFTWARE\Microsoft\Tracing\SetupDataMngr_Searchqu_RASMANCS
Key Deleted : HKLM\Software\SearchquMediabarTb
Key Deleted : HKLM\SOFTWARE\Wow6432Node\5953888ae668e912
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{00000000-6E41-4FD3-8538-502F5495E5FC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{3C471948-F874-49F5-B338-4F214A2EE0B1}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{DE9028D0-5FFA-4E69-94E3-89EE8741F468}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{79FB5FC8-44B9-4AF5-BADD-CCE547F953E5}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\pgafcinpmmpklohkojmllohdhomoefph
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{99079A25-328F-4BD4-BE04-00955ACAA0A7}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{A5AA24EA-11B8-4113-95AE-9ED71DEAF12A}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Searchqu Toolbar
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{A40DC6C5-79D0-4CA8-A185-8FF989AF1115}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{CC1AC828-BB47-4361-AFB5-96EEE259DD87}
Key Deleted : HKLM\SOFTWARE\Classes\CLSID\{FEFD3AF5-A346-4451-AA23-A3AD54915515}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{03E2A1F3-4402-4121-8B35-733216D61217}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{10DE7085-6A1E-4D41-A7BF-9AF93E351401}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1AD27395-1659-4DFF-A319-2CFA243861A5}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{1B730ACF-26A3-447B-9994-14AEE0EB72CC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{44B619BC-3D2B-4990-AA4F-9AA366921792}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{6C434537-053E-486D-B62A-160059D9D456}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{91CF619A-4686-4CA4-9232-3B2E6B63AA92}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{9E3B11F6-4179-4603-A71B-A55F4BCB0BEC}
Key Deleted : HKLM\SOFTWARE\Classes\Interface\{AC71B60E-94C9-4EDE-BA46-E146747BB67E}
Key Deleted : HKLM\SOFTWARE\DataMngr
Key Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{9D717F81-9148-4F12-8568-69135F087DB0}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\A28B4D68DEBAA244EB686953B7074FEF
Key Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{889DF117-14D1-44EE-9F31-C5FB5D47F68B}
Key Deleted : HKLM\SOFTWARE\Tarma Installer
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Main [bprotector start page]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\SearchScopes [bProtectorDefaultScope]
Value Deleted : HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Yontoo Desktop]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [{0F827075-B026-42F3-885D-98981EE7B1AE}]
Value Deleted : HKCU\Software\Mozilla\Firefox\Extensions [statuswinks@StatusWinks]
Value Deleted : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run [DataMngr]
Value Deleted : HKLM\SOFTWARE\Mozilla\Firefox\Extensions [statuswinks@StatusWinks]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [{D4027C7F-154A-4066-A1AD-4243D8127440}]
Value Deleted : HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar [10]
Value Deleted : HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar [10]
***** [Internet Browsers] *****
-\\ Internet Explorer v9.0.8112.16476
[OK] Registry is clean.
-\\ Mozilla Firefox v21.0 (ar)
File : C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\prefs.js
C:\Users\ميمي\AppData\Roaming\Mozilla\Firefox\Profiles\5v6di0fh.default\user.js ... Deleted !
Deleted : user_pref("CT1561552.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT1561552.FirstTime", "true");
Deleted : user_pref("CT1561552.FirstTimeFF3", "true");
Deleted : user_pref("CT1561552.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT156[...]
Deleted : user_pref("CT1561552.UserID", "UN77340690239724375");
Deleted : user_pref("CT1561552.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT1561552.browser.search.defaultthis.engineName", true);
Deleted : user_pref("CT1561552.enableFix404ByUser", "TRUE");
Deleted : user_pref("CT1561552.firstTimeDialogOpened", "true");
Deleted : user_pref("CT1561552.fixPageNotFoundErrorByUser", "TRUE");
Deleted : user_pref("CT1561552.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT1561552.fixUrls", true);
Deleted : user_pref("CT1561552.installType", "Unknown");
Deleted : user_pref("CT1561552.isCheckedStartAsHidden", true);
Deleted : user_pref("CT1561552.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT1561552.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT1561552.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT1561552.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT1561552.keyword", true);
Deleted : user_pref("CT1561552.lastVersion", "10.16.2.509");
Deleted : user_pref("CT1561552.migrateAppsAndComponents", true);
Deleted : user_pref("CT1561552.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"\",\"EB_MAIN_FRAME_TITLE\":\"[...]
Deleted : user_pref("CT1561552.originalSearchAddressUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT15[...]
Deleted : user_pref("CT1561552.searchFromAddressBarEnabledByUser", "true");
Deleted : user_pref("CT1561552.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT1561552.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT1561552.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT1561552.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT1561552.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT1561552.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT1561552.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT1561552.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT1561552.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT1561552.serviceLayer_services_location_lastUpdate", "1370088932558");
Deleted : user_pref("CT1561552.serviceLayer_services_login_10.15.0.562_lastUpdate", "1367033392062");
Deleted : user_pref("CT1561552.serviceLayer_services_login_10.16.1.521_lastUpdate", "1368174430293");
Deleted : user_pref("CT1561552.serviceLayer_services_login_10.16.2.509_lastUpdate", "1370163807355");
Deleted : user_pref("CT1561552.serviceLayer_services_serviceMap_lastUpdate", "1370088931980");
Deleted : user_pref("CT1561552.serviceLayer_services_toolbarSettings_lastUpdate", "1370163807228");
Deleted : user_pref("CT1561552.serviceLayer_services_translation_lastUpdate", "1370088932339");
Deleted : user_pref("CT1561552.settingsINI", true);
Deleted : user_pref("CT1561552.showToolbarPermission", "false");
Deleted : user_pref("CT1561552.smartbar.CTID", "CT1561552");
Deleted : user_pref("CT1561552.smartbar.Uninstall", "0");
Deleted : user_pref("CT1561552.smartbar.homepage", true);
Deleted : user_pref("CT1561552.smartbar.isHidden", true);
Deleted : user_pref("CT1561552.smartbar.toolbarName", "Hotspot Shield ");
Deleted : user_pref("CT1561552.toolbarBornServerTime", "4-4-2013");
Deleted : user_pref("CT1561552.toolbarCurrentServerTime", "2-6-2013");
Deleted : user_pref("CT1561552.toolbarLoginClientTime", "Thu Apr 04 2013 02:19:03 GMT+0300");
Deleted : user_pref("CT1561552_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CT3220468.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM2ODc2ODkyMCwidXVpZCI6NDI4NDE0NTE4MzQxNzcsInN[...]
Deleted : user_pref("CT3220468.BT_Usage.enc", "eyJ1dWlkIjo0Mjg0MTQ1MTgzNDE3Nywic2VxX2lkIjoyfQ==");
Deleted : user_pref("CT3220468.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3220468.FirstTime", "true");
Deleted : user_pref("CT3220468.FirstTimeFF3", "true");
Deleted : user_pref("CT3220468.LoginRevertSettingsEnabled", true);
Deleted : user_pref("CT3220468.PG_ENABLE", "dHJ1ZQ==");
Deleted : user_pref("CT3220468.PG_ENABLE.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3220468.RevertSettingsEnabled", true);
Deleted : user_pref("CT3220468.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT322[...]
Deleted : user_pref("CT3220468.UserID", "UN07744507499746867");
Deleted : user_pref("CT3220468.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3220468.browser.search.defaultthis.engineName", true);
Deleted : user_pref("CT3220468.cb_user_id_000.enc", "Q0I4OTIyNjI3NjIzMzFfMTM2Njk2ODI1ODc0OV9GaXJlZm94");
Deleted : user_pref("CT3220468.cbfirsttime.enc", "VGh1IEFwciAwNCAyMDEzIDAxOjUwOjIxIEdNVCswMzAw");
Deleted : user_pref("CT3220468.embeddedsData", "[{\"appId\":\"129813684258939747\",\"apiPermissions\":{\"cross[...]
Deleted : user_pref("CT3220468.enableAlerts", "always");
Deleted : user_pref("CT3220468.enableFix404ByUser", "FALSE");
Deleted : user_pref("CT3220468.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3220468.fixPageNotFoundErrorByUser", "TRUE");
Deleted : user_pref("CT3220468.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3220468.fixUrls", true);
Deleted : user_pref("CT3220468.homepageuserchanged", true);
Deleted : user_pref("CT3220468.hxxp___toolbar_utorrent_com.APP_WIN_FEATURES.enc", "cmVzaXphYmxlPTAsc2F2ZXJlc2l[...]
Deleted : user_pref("CT3220468.installType", "Unknown");
Deleted : user_pref("CT3220468.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3220468.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3220468.isNewTabEnabled", false);
Deleted : user_pref("CT3220468.isPerformedSmartBarTransition", "true");
Deleted : user_pref("CT3220468.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3220468.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.keyword", true);
Deleted : user_pref("CT3220468.lastVersion", "10.15.0.562");
Deleted : user_pref("CT3220468.mam_gk_appStateReportTime.enc", "MTM2ODU1MTYzMTg3Mw==");
Deleted : user_pref("CT3220468.mam_gk_appState_CouponBuddy.enc", "b24=");
Deleted : user_pref("CT3220468.mam_gk_appState_PriceGong.enc", "b24=");
Deleted : user_pref("CT3220468.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Deleted : user_pref("CT3220468.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Deleted : user_pref("CT3220468.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Deleted : user_pref("CT3220468.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Deleted : user_pref("CT3220468.mam_gk_eventsCache.enc", "eyIyYzM3ZmNjOC1mZWZkLTQ0NzYtYWEyNS1lNjg5ODFjMmEwZjIiO[...]
Deleted : user_pref("CT3220468.mam_gk_first_time.enc", "MQ==");
Deleted : user_pref("CT3220468.mam_gk_gadgetOpen.enc", "MA==");
Deleted : user_pref("CT3220468.mam_gk_lastLoginTime.enc", "MTM2ODU1MTYzMjc0Nw==");
Deleted : user_pref("CT3220468.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiLYs9mK2KfY[...]
Deleted : user_pref("CT3220468.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3220468.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Deleted : user_pref("CT3220468.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3220468.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Deleted : user_pref("CT3220468.mam_gk_userId.enc", "NzZhZjAwNDAtZWYxMS00M2NjLWExOGYtM2M0ZWViZjFiNTY3");
Deleted : user_pref("CT3220468.migrateAppsAndComponents", true);
Deleted : user_pref("CT3220468.navigationAliasesJson", "{\"EB_SEARCH_TERM\":\"\",\"EB_MAIN_FRAME_URL\":\"hxxps[...]
Deleted : user_pref("CT3220468.price-gong.isManagedApp", "true");
Deleted : user_pref("CT3220468.search.searchAppId", "129813684258939747");
Deleted : user_pref("CT3220468.search.searchCount", "0");
Deleted : user_pref("CT3220468.searchInNewTabEnabled", "false");
Deleted : user_pref("CT3220468.searchInNewTabEnabledByUser", "false");
Deleted : user_pref("CT3220468.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3220468.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3220468.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3220468.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3220468.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3220468.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1368174432046");
Deleted : user_pref("CT3220468.serviceLayer_services_appsMetadata_lastUpdate", "1368768920990");
Deleted : user_pref("CT3220468.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1368551719581");
Deleted : user_pref("CT3220468.serviceLayer_services_location_lastUpdate", "1368769036980");
Deleted : user_pref("CT3220468.serviceLayer_services_login_10.13.40.15_lastUpdate", "1358418953317");
Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.370.524_lastUpdate", "1364277808496");
Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.40.128_lastUpdate", "1361789595194");
Deleted : user_pref("CT3220468.serviceLayer_services_login_10.14.65.43_lastUpdate", "1363939937613");
Deleted : user_pref("CT3220468.serviceLayer_services_login_10.15.0.562_lastUpdate", "1368769037587");
Deleted : user_pref("CT3220468.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1368551719776");
Deleted : user_pref("CT3220468.serviceLayer_services_searchAPI_lastUpdate", "1368769037344");
Deleted : user_pref("CT3220468.serviceLayer_services_serviceMap_lastUpdate", "1368769036801");
Deleted : user_pref("CT3220468.serviceLayer_services_toolbarContextMenu_lastUpdate", "1368551719660");
Deleted : user_pref("CT3220468.serviceLayer_services_toolbarSettings_lastUpdate", "1368768921207");
Deleted : user_pref("CT3220468.serviceLayer_services_translation_lastUpdate", "1368769037355");
Deleted : user_pref("CT3220468.settingsINI", true);
Deleted : user_pref("CT3220468.showToolbarPermission", "false");
Deleted : user_pref("CT3220468.smartbar.CTID", "CT3220468");
Deleted : user_pref("CT3220468.smartbar.Uninstall", "0");
Deleted : user_pref("CT3220468.smartbar.toolbarName", "uTorrentControl_v2 ");
Deleted : user_pref("CT3220468.toolbarBornServerTime", "26-10-2012");
Deleted : user_pref("CT3220468.toolbarCurrentServerTime", "17-5-2013");
Deleted : user_pref("CT3220468.toolbarLoginClientTime", "Fri Mar 22 2013 13:50:05 GMT+0300");
Deleted : user_pref("CT3220468.url_history0001.enc", "aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxlcjo6OjEz[...]
Deleted : user_pref("CT3220468_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("CT3289075.BT_Stats.enc", "eyJsYXN0X2xvZyI6MTM2NDk3NTIwNywidXVpZCI6ODg0MjMyODQzMDU5OTY5LCJ[...]
Deleted : user_pref("CT3289075.ENABALE_HISTORY", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289075.ENABLE_RETURN_WEB_SEARCH_ON_THE_PAGE", "{\"dataType\":\"string\",\"data\":\"tru[...]
Deleted : user_pref("CT3289075.FF19Solved", "true");
Deleted : user_pref("CT3289075.FirstTime", "true");
Deleted : user_pref("CT3289075.FirstTimeFF3", "true");
Deleted : user_pref("CT3289075.PG_ENABLE", "dHJ1ZQ==");
Deleted : user_pref("CT3289075.PG_ENABLE.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3289075.SearchFromAddressBarUrl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT328[...]
Deleted : user_pref("CT3289075.UserID", "UN55321850620568301");
Deleted : user_pref("CT3289075.addressBarTakeOverEnabledInHidden", "true");
Deleted : user_pref("CT3289075.autoDisableScopes", -1);
Deleted : user_pref("CT3289075.browser.search.defaultthis.engineName", "true");
Deleted : user_pref("CT3289075.defaultSearch", "true");
Deleted : user_pref("CT3289075.enableFix404ByUser", "FALSE");
Deleted : user_pref("CT3289075.enableSearchFromAddressBar", "true");
Deleted : user_pref("CT3289075.firstTimeDialogOpened", "true");
Deleted : user_pref("CT3289075.fixPageNotFoundError", "true");
Deleted : user_pref("CT3289075.fixPageNotFoundErrorByUser", "true");
Deleted : user_pref("CT3289075.fixPageNotFoundErrorInHidden", "true");
Deleted : user_pref("CT3289075.fixUrls", true);
Deleted : user_pref("CT3289075.installDate", "25/3/2013 8:47:56");
Deleted : user_pref("CT3289075.installType", "xpe");
Deleted : user_pref("CT3289075.installUsage", "2013-03-26T09:01:37.1401137+03:00");
Deleted : user_pref("CT3289075.installUsageEarly", "2013-03-26T09:01:36.0619611+03:00");
Deleted : user_pref("CT3289075.installerVersion", "1.3.6.5");
Deleted : user_pref("CT3289075.isCheckedStartAsHidden", true);
Deleted : user_pref("CT3289075.isEnableAllDialogs", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289075.isFirstTimeToolbarLoading", "false");
Deleted : user_pref("CT3289075.isToolbarShrinked", "{\"dataType\":\"string\",\"data\":\"false\"}");
Deleted : user_pref("CT3289075.isWelcomPage", "{\"dataType\":\"boolean\",\"data\":\"true\"}");
Deleted : user_pref("CT3289075.keyword", "true");
Deleted : user_pref("CT3289075.lastNewTabSettings", "{\"isEnabled\":true,\"newTabUrl\":\"hxxp://search.conduit[...]
Deleted : user_pref("CT3289075.lastVersion", "10.15.0.562");
Deleted : user_pref("CT3289075.mam_gk_appStateReportTime.enc", "MTM2NDk3NTIxNDIwNg==");
Deleted : user_pref("CT3289075.mam_gk_appState_CouponBuddy.enc", "b24=");
Deleted : user_pref("CT3289075.mam_gk_appState_PriceGong.enc", "b24=");
Deleted : user_pref("CT3289075.mam_gk_appsData.enc", "eyJhcHBzIjpbeyJpZCI6IlByaWNlR29uZyIsInVybCI6Imh0dHA6Ly9w[...]
Deleted : user_pref("CT3289075.mam_gk_appsDefaultEnabled.enc", "bnVsbA==");
Deleted : user_pref("CT3289075.mam_gk_configuration.enc", "eyJjb25maWd1cmF0aW9uIjpbeyJpZCI6IlByaWNlR29uZyIsImN[...]
Deleted : user_pref("CT3289075.mam_gk_currentVersion.enc", "MS40LjQuNg==");
Deleted : user_pref("CT3289075.mam_gk_eventsCache.enc", "eyIwY2E1ZjlmNS00NDJhLTQ3OTQtYmI2Zi1mMzBiZDA3ZGIwMzEiO[...]
Deleted : user_pref("CT3289075.mam_gk_first_time.enc", "MQ==");
Deleted : user_pref("CT3289075.mam_gk_gadgetOpen.enc", "d2VsY29tZQ==");
Deleted : user_pref("CT3289075.mam_gk_installer_preapproved.enc", "ZmFsc2U=");
Deleted : user_pref("CT3289075.mam_gk_lastLoginTime.enc", "MTM2NDk3NTIxMjE5MQ==");
Deleted : user_pref("CT3289075.mam_gk_localization.enc", "eyJnYWRnZXRDb250ZW50UG9saWN5Ijp7IlRleHQiOiJDb250ZW50[...]
Deleted : user_pref("CT3289075.mam_gk_pgUnloadedOnce.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3289075.mam_gk_settings1.4.4.6.enc", "eyJTdGF0dXMiOiJzdWNjZWVkZWQiLCJEYXRhIjp7ImludGVyd[...]
Deleted : user_pref("CT3289075.mam_gk_showCloseButton.enc", "dHJ1ZQ==");
Deleted : user_pref("CT3289075.mam_gk_showWelcomeGadget.enc", "ZmFsc2U=");
Deleted : user_pref("CT3289075.mam_gk_userId.enc", "ZDMzNDI0NjUtMTg3Mi00ZjQ2LTgyM2MtOWVkNjhhY2Q4M2M3");
Deleted : user_pref("CT3289075.migrateAppsAndComponents", true);
Deleted : user_pref("CT3289075.navigationAliasesJson", "{\"EB_MAIN_FRAME_URL\":\"hxxps%3A%2F%2Ftwitter.com%2FR[...]
Deleted : user_pref("CT3289075.openThankYouPage", "true");
Deleted : user_pref("CT3289075.openUninstallPage", "false");
Deleted : user_pref("CT3289075.revertSettingsEnabled", "FALSE");
Deleted : user_pref("CT3289075.search.searchAppId", "130064539389933152");
Deleted : user_pref("CT3289075.search.searchCount", "0");
Deleted : user_pref("CT3289075.searchFromAddressBarEnabledByUser", "true");
Deleted : user_pref("CT3289075.searchInNewTabEnabledByUser", "true");
Deleted : user_pref("CT3289075.searchInNewTabEnabledInHidden", "true");
Deleted : user_pref("CT3289075.selectToSearchBoxEnabled", "{\"dataType\":\"string\",\"data\":\"true\"}");
Deleted : user_pref("CT3289075.serviceLayer_service_login_isFirstLoginInvoked", "{\"dataType\":\"boolean\",\"d[...]
Deleted : user_pref("CT3289075.serviceLayer_service_login_loginCount", "{\"dataType\":\"number\",\"data\":\"4\[...]
Deleted : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeCTID", "{\"dataType\":\"string\",\"d[...]
Deleted : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeDownloadUrl", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_activeToolbarName", "{\"dataType\":\"strin[...]
Deleted : user_pref("CT3289075.serviceLayer_service_toolbarGrouping_invoked", "{\"dataType\":\"string\",\"data[...]
Deleted : user_pref("CT3289075.serviceLayer_services_appTrackingFirstTime_lastUpdate", "1364277694919");
Deleted : user_pref("CT3289075.serviceLayer_services_appsMetadata_lastUpdate", "1364541053731");
Deleted : user_pref("CT3289075.serviceLayer_services_gottenAppsContextMenu_lastUpdate", "1364277694699");
Deleted : user_pref("CT3289075.serviceLayer_services_installUsage_ToolbarInstallEarly_lastUpdate", "1364277693[...]
Deleted : user_pref("CT3289075.serviceLayer_services_installUsage_ToolbarInstall_lastUpdate", "1364277694938")[...]
Deleted : user_pref("CT3289075.serviceLayer_services_location_lastUpdate", "1368769035066");
Deleted : user_pref("CT3289075.serviceLayer_services_login_10.14.370.24_lastUpdate", "1364277694961");
Deleted : user_pref("CT3289075.serviceLayer_services_login_10.15.0.562_lastUpdate", "1368769035472");
Deleted : user_pref("CT3289075.serviceLayer_services_otherAppsContextMenu_lastUpdate", "1364277694763");
Deleted : user_pref("CT3289075.serviceLayer_services_searchAPI_lastUpdate", "1364277693466");
Deleted : user_pref("CT3289075.serviceLayer_services_serviceMap_lastUpdate", "1368769034679");
Deleted : user_pref("CT3289075.serviceLayer_services_toolbarContextMenu_lastUpdate", "1364277694632");
Deleted : user_pref("CT3289075.serviceLayer_services_toolbarSettings_lastUpdate", "1368769035376");
Deleted : user_pref("CT3289075.serviceLayer_services_translation_lastUpdate", "1368769036570");
Deleted : user_pref("CT3289075.settingsINI", true);
Deleted : user_pref("CT3289075.shouldFirstTimeDialog", "false");
Deleted : user_pref("CT3289075.showToolbarPermission", "false");
Deleted : user_pref("CT3289075.smartbar.CTID", "CT3289075");
Deleted : user_pref("CT3289075.smartbar.Uninstall", "0");
Deleted : user_pref("CT3289075.smartbar.homepage", "true");
Deleted : user_pref("CT3289075.smartbar.isHidden", true);
Deleted : user_pref("CT3289075.smartbar.toolbarName", "uTorrentControl_v6 ");
Deleted : user_pref("CT3289075.startPage", "true");
Deleted : user_pref("CT3289075.toolbarBornServerTime", "26-3-2013");
Deleted : user_pref("CT3289075.toolbarCurrentServerTime", "17-5-2013");
Deleted : user_pref("CT3289075.toolbarLoginClientTime", "Tue Mar 26 2013 09:01:34 GMT+0300");
Deleted : user_pref("CT3289075.url_history0001.enc", "aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo6OmNsaWNraGFuZGxlcjo6OjEz[...]
Deleted : user_pref("CT3289075_Firefox.csv", "[{\"from\":\"Abs Layer\",\"action\":\"loading toolbar\",\"time\"[...]
Deleted : user_pref("Smartbar.ConduitHomepagesList", "hxxp://search.conduit.com/?ctid=CT1561552&SearchSource=1[...]
Deleted : user_pref("Smartbar.ConduitSearchEngineList", "");
Deleted : user_pref("Smartbar.ConduitSearchUrlList", "");
Deleted : user_pref("Smartbar.SearchFromAddressBarSavedUrl", "hxxp://dts.search-results.com/sr?src=ffb&appid=0[...]
Deleted : user_pref("Smartbar.keywordURLSelectedCTID", "CT1561552");
Deleted : user_pref("browser.search.defaultthis.engineName", "uTorrentControl_v6 Customized Web Search");
Deleted : user_pref("browser.search.defaulturl", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT3289075&CUI[...]
Deleted : user_pref("browser.startup.homepage", "hxxp://search.conduit.com/?ctid=CT1561552&SearchSource=13&CUI[...]
Deleted : user_pref("extensions.delta.admin", false);
Deleted : user_pref("extensions.delta.aflt", "babsst");
Deleted : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
Deleted : user_pref("extensions.delta.autoRvrt", "false");
Deleted : user_pref("extensions.delta.dfltLng", "en");
Deleted : user_pref("extensions.delta.excTlbr", false);
Deleted : user_pref("extensions.delta.id", "2efcbd5c00000000000000ff99f3ff64");
Deleted : user_pref("extensions.delta.instlDay", "15791");
Deleted : user_pref("extensions.delta.instlRef", "sst");
Deleted : user_pref("extensions.delta.newTab", false);
Deleted : user_pref("extensions.delta.prdct", "delta");
Deleted : user_pref("extensions.delta.prtnrId", "delta");
Deleted : user_pref("extensions.delta.rvrt", "false");
Deleted : user_pref("extensions.delta.smplGrp", "none");
Deleted : user_pref("extensions.delta.tlbrId", "base");
Deleted : user_pref("extensions.delta.tlbrSrchUrl", "");
Deleted : user_pref("extensions.delta.vrsn", "1.8.10.0");
Deleted : user_pref("extensions.delta.vrsnTs", "1.8.10.010:42:15");
Deleted : user_pref("extensions.delta.vrsni", "1.8.10.0");
Deleted : user_pref("extentions.y2layers.defaultEnableAppsList", "twittube,buzzdock,YontooNewOffers");
Deleted : user_pref("extentions.y2layers.installId", "101f4f94-b17b-4899-8045-990d532ac0e4");
Deleted : user_pref("keyword.URL", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT1561552&SearchSource=2&CU[...]
Deleted : user_pref("smartbar.addressBarOwnerCTID", "CT1561552");
Deleted : user_pref("smartbar.conduitHomepageList", "hxxp://search.conduit.com/?ctid=CT3289075&CUI=UN553218506[...]
Deleted : user_pref("smartbar.conduitSearchAddressUrlList", "hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT[...]
Deleted : user_pref("smartbar.machineId", "AWXCN7PKGQ8NQYV4P+E9AKZ/OFFBUKSYUKMMFIN5MBAHRBHPGX24GYC7M+V0YO8BEO0[...]
Deleted : user_pref("smartbar.originalHomepage", "hxxps://twitter.com/");
Deleted : user_pref("smartbar.originalSearchAddressUrl", "hxxp://dts.search-results.com/sr?src=ffb&appid=0&sys[...]
Deleted : user_pref("smartbar.originalSearchEngine", "Search Results");
-\\ Google Chrome v [Unable to get version]
File : C:\Users\ميمي\AppData\Local\Google\Chrome\User Data\Default\Preferences
[OK] File is clean.
-\\ Chromium vns:64
File : C:\Users\ميمي\AppData\Local\Chromium\User Data\Default\Preferences
[OK] File is clean.
-\\ Opera v11.61.1250.0
File : C:\Users\ميمي\AppData\Roaming\Opera\Opera\operaprefs.ini
[OK] File is clean.
*************************
AdwCleaner[R1].txt - [39265 octets] - [08/06/2013 21:20:24]
AdwCleaner[S1].txt - [39827 octets] - [08/06/2013 21:21:36]
########## EOF - C:\AdwCleaner[S1].txt - [39888 octets] ##########
 
توقيع : whaj
مايخالف اسفه والله ماانتبهت :love:
 
توقيع : whaj
توقيع : slman00000
السلام عليكم أخي تقرير الأد وير كلينر يدل على حذف بعض من أجزاء أدوير "‪YONTOO‬"
وبما اننا لم نستطيع الفحص ب
برنامج
superantispyware

سنقوم بالتالي فضلا
إفحص الجهار ب

يجب عليك تسجيل الدخول أو التسجيل لمشاهدة الرابط المخفي

بعد الموافقة على الإتفاقية ضع إشارة الصح على
Scan archives
Remove found threats
ثم إختر Advanced settings
ثم ضع إشارة الصح على
Scan potentially unwanted applications
Scan for potentially unsafe applications
Enable Anti-Stealth technology
بعدها إبداء الفحص ثم بعد الإنتهاء صدر التقرير على سطح المكتب و أرفقه لنا
أعد إقلاع الجهاز بعد الإنتهاء
---------------
وبعد التقرير نتابع إن شاء الله ... لكن هل ذهبت مضايقات الأدوير YONTOO‬ بعد إستخدام الأدوير كلينر
 
وعليكم السلام اخوي بو همام

الله يسعدك يااارب ابشرك راح برنامج yontoo
بعد الله ثم الأدوير كلينر

هل أتابع ماطلبته مني والا خلاص
اقصد هل انت ترى انه جهازي يحتاج اني اكمل الخطوات اللي ذكرتها والا شلون ؟
 
توقيع : whaj
نعم أخي الأفضل تابع ... :)
 
ابشررررررررررررررررررررررررررررررررر :love:
 
توقيع : whaj
الحالة
مغلق و غير مفتوح للمزيد من الردود.
عودة
أعلى