منتديات العاشق - عرض مشاركة واحدة

كيـمـزهرة الكرزــو~♥ · 01-23-2017, 08:29 PM

تم عمل مسح وهذا هو التقرير :

اقتباس:

# AdwCleaner v6.042 - Logfile created 23/01/2017 at 20:12:35
# Updated on 06/01/2017 by Malwarebytes
# Database : 2017-01-23.1 [Server]
# Operating System : Windows 7 Home Premium Service Pack 1 (X64)
# Username : كيمو زهرة الكرز - WIN-C88V2HSK59E
# Running from : C:\Users\كيمو زهرة الكرز\Desktop\AdwCleaner.exe
# Mode: Clean
# Support : https://www.malwarebytes.com/support

***** [ Services ] *****

[-] Service deleted: FirefoxU
[-] Service deleted: WinSAPSvc
[-] Service deleted: Archer
[!] Service not deleted: iThemes5
[-] Service deleted: GubedZL

***** [ Folders ] *****

[-] Folder deleted: C:\ProgramData\WinSAPSvc
[#] Folder deleted on reboot: C:\ProgramData\winsapsvc
[#] Folder deleted on reboot: C:\ProgramData\Application Data\WinSAPSvc
[#] Folder deleted on reboot: C:\ProgramData\Application Data\winsapsvc
[-] Folder deleted: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Coupons
[-] Folder deleted: C:\Users\Public\Documents\pc faster
[-] Folder deleted: C:\Program Files (x86)\WinArcher
[#] Folder deleted on reboot: C:\Program Files (x86)\winarcher
[-] Folder deleted: C:\Program Files (x86)\Gubed
[-] Folder deleted: C:\Windows\SysWOW64\config\systemprofile\AppData\R oaming\Tencent
[-] Folder deleted: C:\Program Files (x86)\Firefox
[-] Folder deleted: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Mozilla\Firefox\naweriweentc ofise
[-] Folder deleted: C:\ProgramData\WinTools

***** [ Files ] *****

[-] File deleted: C:\Program Files (x86)\Common Files\SERVICES\ITHEMES.DLL
[-] File deleted: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Mozilla\Firefox\Profiles\unz gzux0.default-1467453788164\invalidprefs.js
[-] File deleted: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Mozilla\Firefox\Profiles\unz gzux0.default-1467453788164\searchplugins\amisites.xml

***** [ DLL ] *****

***** [ WMI ] *****

***** [ Shortcuts ] *****

[-] Shortcut disinfected: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
[-] Shortcut disinfected: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Opera.lnk
[-] Shortcut disinfected: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
[-] Shortcut disinfected: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
[-] Shortcut disinfected: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Google Chrome.lnk
[-] Shortcut disinfected: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk
[-] Shortcut disinfected: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Firefox.lnk
[-] Shortcut disinfected: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Opera.lnk
[-] Shortcut disinfected: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\Google Chrome.lnk
[-] Shortcut disinfected: C:\Users\كيمو زهرة الكرز\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\ImplicitAppShortcuts\69639df789022856\Googl e Chrome.lnk

***** [ Scheduled Tasks ] *****

[-] Task deleted: WinTOOL

***** [ Registry ] *****

[!] Value not deleted: HKLM\SYSTEM\CurrentControlSet\Services\Themes [DependOnService]
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\SparkSvc
[-] Key deleted: [x64] HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\services\SparkUpdater
[-] Key deleted: HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserTool bar
[-] Key deleted: HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserTool bar.1
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserTool bar
[#] Key deleted on reboot: [x64] HKLM\SOFTWARE\Classes\YBrowserToolbar.YBrowserTool bar.1
[-] Key deleted: HKLM\SOFTWARE\Classes\AppID\{C81BED3B-31BD-491F-813D-78EFC2638CE1}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
[-] Key deleted: HKLM\SOFTWARE\Classes\CLSID\{8BF0126F-A5B7-4720-ABB2-2414A0AF5474}
[-] Key deleted: HKCU\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \PreApproved\{02478D38-C3F9-4EFB-9B51-7695ECA05670}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext \PreApproved\{EF99BD32-C1FB-11D2-892F-0090271D4F88}
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Internet Explorer\ActiveX Compatibility\{9522B3FB-7A2B-4646-8AF6-36E7F593073C}
[-] Key deleted: HKU\.DEFAULT\Software\jhtrsq
[-] Key deleted: HKU\S-1-5-21-1164854244-2501526886-3237685686-1000\Software\DriverToolkit
[-] Key deleted: HKU\S-1-5-21-1164854244-2501526886-3237685686-1000\Software\AppDataLow\Software\Yahoo\Companion
[#] Key deleted on reboot: HKU\S-1-5-18\Software\jhtrsq
[#] Key deleted on reboot: HKCU\Software\DriverToolkit
[#] Key deleted on reboot: HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Key deleted: HKLM\SOFTWARE\Yahoo\Companion
[-] Key deleted: HKLM\SOFTWARE\{E6276374-DE18-4AA5-A365-9016A2F98A2D}
[-] Key deleted: HKLM\SOFTWARE\WinArcher
[-] Key deleted: HKLM\SOFTWARE\amisitesSoftware
[-] Key deleted: HKLM\SOFTWARE\jhtrsq
[#] Key deleted on reboot: [x64] HKCU\Software\DriverToolkit
[#] Key deleted on reboot: [x64] HKCU\Software\AppDataLow\Software\Yahoo\Companion
[-] Key deleted: [x64] HKLM\SOFTWARE\mweshield
[-] Key deleted: [x64] HKLM\SOFTWARE\jhtrsq
[-] Key deleted: [x64] HKLM\SOFTWARE\DtsEncodeTools
[-] Key deleted: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ins taller\UserData\S-1-5-21-1164854244-2501526886-3237685686-1000\Products\e08a85f973c37554e0d984752ae03d42
[-] Data restored: HKU\S-1-5-21-1164854244-2501526886-3237685686-1000\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data restored: HKU\S-1-5-21-1164854244-2501526886-3237685686-1000\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data restored: HKU\S-1-5-21-1164854244-2501526886-3237685686-1000\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data restored: HKU\S-1-5-21-1164854244-2501526886-3237685686-1000\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data restored: HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data restored: HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Search Page]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Search Page]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Start Page]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data restored: [x64] HKCU\Software\Microsoft\Internet Explorer\Main [Default_Search_URL]
[-] Data restored: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Default_Page_URL]
[-] Data restored: [x64] HKLM\SOFTWARE\Microsoft\Internet Explorer\Main [Start Page]
[-] Data restored: HKLM\SOFTWARE\Clients\StartMenuInternet\FIREFOX.EX E\shell\open\command [] "C:\Program Files (x86)\Mozilla Firefox\firefox.exe"
[-] Key deleted: HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\IMAGE FILE EXECUTION OPTIONS\RONZAP.EXE
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [WinSAPSvc]
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [ArcherGroupEx]
[-] Value deleted: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost [GubedZLGroupEx]

***** [ Web browsers ] *****

[-] Chrome preferences cleaned: "browser.startup.homepage" - "hxxp://www.amisites.com/?type=hp&ts=1485080616&z=2d961dbd04155c904191a38g1 zbb9w0e0b3e0q6g2w&from=archer1028&uid=HitachiXHTS5 47575A9E384_J2540054H2D99EH2D99EX"
[-] [C:\Users\كيمو زهرة الكرز\AppData\Local\Google\Chrome\User Data\Default\Web data] [Search Provider] Deleted: amisites
[-] [C:\Users\كيمو زهرة الكرز\AppData\Local\Google\Chrome\User Data\Default] [startup_urls] Deleted: hxxp://www.amisites.com/?type=hp&ts=1484746358&z=14640303a3e653837c01fa4g3 z7b0z2m8zaq6c6w9t&from=che0812&uid=HitachiXHTS5475 75A9E384_J2540054H2D99EH2D99EX
[-] [C:\Users\كيمو زهرة الكرز\AppData\Local\Google\Chrome\User Data\Default] [favicon_url] Deleted: hxxp://www.amisites.com/searchfavicon.ico
[-] [C:\Users\كيمو زهرة الكرز\AppData\Local\Google\Chrome\User Data\Default] [homepage] Deleted: hxxp://www.amisites.com/?type=hp&ts=1484746358&z=14640303a3e653837c01fa4g3 z7b0z2m8zaq6c6w9t&from=che0812&uid=HitachiXHTS5475 75A9E384_J2540054H2D99EH2D99EX

*************************

:: "Tracing" keys deleted
:: Winsock settings cleared

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [9531 Bytes] - [23/01/2017 20:12:35]
C:\AdwCleaner\AdwCleaner[S0].txt - [12331 Bytes] - [23/01/2017 20:07:42]

########## EOF - C:\AdwCleaner\AdwCleaner[C0].txt - [9678 Bytes] ##########

بالنسبة للحل الثاني تم تطبيقه وعمل أنتر وما صار شئ ^^"

وهالشكل رجع شكل الوندوز اختفت الشفافية

بس ممكن تشوف التقرير وتحدد لي الملفات الخاصة بخاصية الشفافية
لانه أكيد انحذفت خلال تنظيف النظام =")