Malwarebytes Anti-Malware
www.malwarebytes.org

ãÓÍ ÇáÊÇÑíÎ: 23-11-2016
ÇáãÓÍ ÇáÖæÆí ÇáæÞÊ: 15:07
ãáÝ ÇáÓÌá: delete.txt
ãÏíÑ ÇáÈÑäÇãÌ: äÚã

ÇáÅÕÏÇÑ: 2.2.1.1043
ÞÇÚÏÉ ÈíÇäÇÊ ÇáÈÑÇãÌ ÇáÖÇÑÉ: v2016.11.23.09
ÞÇÚÏÉ ÈíÇäÇÊ ÇáÌÐæÑ ÇáÎÝíÉ: v2016.11.20.01
ÇáÊÑÎíÕ: ãÌÇäÇð
ÇáÍãÇíÉ ãä ÇáÈÑÇãÌ ÇáÖÇÑÉ: Ðæí
ÍãÇíÉ ãæÇÞÚ æíÈ ÇáÖÇÑÉ: Ðæí
ÇáÍãÇíÉ ÇáÐÇÊíÉ: Ðæí

äÙÇã ÇáÊÔÛíá: Windows 10
æÍÏÉ ÇáãÚÇáÌÉ ÇáãÑßÒíÉ: x86
äÙÇã ÇáãáÝÇÊ: NTFS
ÇáãÓÊÎÏã: PC

äæÚ ÇáãÓÍ ÇáÖæÆí: ÇáÊåÏíÏ ÈÇáãÓÍ ÇáÖæÆí
ÇáäÊíÌÉ: ÃßãáÊ
ÇáßÇÆäÇÊ ÇáÊí Êã ãÓÍåÇ ÖæÆíÇð: 269862
ÇáæÞÊ ÇáãäÞÖí: ÏÞíÞÉ¡ 42 ËÇäíÉ 35

ÇáÐÇßÑÉ: Êãßíä
ÈÏÁ ÇáÊÔÛíá: Êãßíä
äÙÇã ÇáãáÝÇÊ: Êãßíä
ÇáãÍÝæÙÇÊ: Êãßíä
ÇáÌÐæÑ ÇáÎÝíÉ: Êãßíä
ÇáÇÓÊÏáÇá: Êãßíä
ÃáÌÑæ: Êãßíä
Èæã: Êãßíä

ÇáÚãáíÇÊ: 0
(ÇáßÔÝ Úä ÃíÉ ÚäÇÕÑ ÎÈíËÉ)

ÇáæÍÏÇÊ ÇáäãØíÉ: 0
(ÇáßÔÝ Úä ÃíÉ ÚäÇÕÑ ÎÈíËÉ)

ãÝÇÊíÍ ÇáÊÓÌíá: 1
PUP.Optional.PCKeeper, HKU\S-1-5-21-373802467-2294298891-4220601738-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\AUDIO\POLICYCONFIG\PROPERTYSTORE\D05BAEE9_0, ÇáÍÌÑ ÇáÕÍí, [3283a122a8f21f179b2fb7200ff3a35d],

Þíã ÇáÊÓÌíá: 1
PUP.Optional.PCKeeper, HKU\S-1-5-21-373802467-2294298891-4220601738-1000\SOFTWARE\MICROSOFT\INTERNET EXPLORER\LOWREGISTRY\AUDIO\POLICYCONFIG\PROPERTYSTORE\d05baee9_0, {2}.\\?\hdaudio#func_01&ven_10ec&dev_0262&subsys_104d4200&rev_1003#{6994ad04-93ef-11d0-a3cc-00a0c9223196}\eduplicatedhpspeakertopo/00010001|\Device\HarddiskVolume1\Program Files\Essentware\PCKeeper\PCKeeper.exe%b{00000000-0000-0000-0000-000000000000}, ÇáÍÌÑ ÇáÕÍí, [3283a122a8f21f179b2fb7200ff3a35d]

ÈíÇäÇÊ ÇáÊÓÌíá: 0
(ÇáßÔÝ Úä ÃíÉ ÚäÇÕÑ ÎÈíËÉ)

ÇáãÌáÏÇÊ: 0
(ÇáßÔÝ Úä ÃíÉ ÚäÇÕÑ ÎÈíËÉ)

ÇáãáÝÇÊ: 8
HackTool.IdleKMS, C:\Windows\SECOH-QAD.exe, ÇáÍÌÑ ÇáÕÍí, [169fefd43b5f4cea10e9d93b867b7888],
PUP.Optional.Youndoo, C:\Users\PC\AppData\Roaming\Profiles\Fifspmpasp.default\prefs.js, ÍÓä: (), ÓíÆÉ: (user_pref("browser.newtab.url", "http://www.youndoo.com/?z=07b36f5a9e4d9c9a01cf0b7gcz7m0c4e6efz7c0w5m&from=amz&uid=HitachiXHTS543225L9A300_090228FB0E06YKGE5M9CX&type=hp");), ÇÓÊÈÏÇá,[b2030ab9aaf093a3cb25ace05ea546ba]
PUP.Optional.Youndoo, C:\Users\PC\AppData\Roaming\Profiles\Fifspmpasp.default\prefs.js, ÍÓä: (), ÓíÆÉ: (apacity", 358400);
user_pref("browser.cache.disk.filesys), ÇÓÊÈÏÇá,[4471497a3169ce6815dbb9d32bd86997]
PUP.Optional.Youndoo, C:\Users\PC\AppData\Roaming\Profiles\Fifspmpasp.default\prefs.js, ÍÓä: (), ÓíÆÉ: (s file.
*
* If you make changes to this file while the application is running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to p), ÇÓÊÈÏÇá,[7e37b21159410432519f286416eda65a]
PUP.Optional.Youndoo, C:\Users\PC\AppData\Roaming\Profiles\Fifspmpasp.default\prefs.js, ÍÓä: (), ÓíÆÉ: (running,
* the changes will be overwritten when the application exits.
*
* To make a manual change to preferences, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind", t), ÇÓÊÈÏÇá,[6b4a645f9a00d6605c941973966d60a0]
PUP.Optional.Youndoo, C:\Users\PC\AppData\Roaming\Profiles\Fifspmpasp.default\prefs.js, ÍÓä: (), ÓíÆÉ: (, you can visit the URL about:config
*/

user_pref("accessibility.typeaheadfind", true);
user_pref("accessibility.typeaheadfind.flashBar", 0);
user_pref("app.update.auto", false);
user_pref("app.updat), ÇÓÊÈÏÇá,[5f568e351981092d3eb2aedebc47847c]
PUP.Optional.Youndoo, C:\Users\PC\AppData\Roaming\Profiles\Fifspmpasp.default\prefs.js, ÍÓä: (), ÓíÆÉ: (s will be overwritten when the application exits.
*
), ÇÓÊÈÏÇá,[a312aa1922786ec8e50b751734cffb05]
PUP.Optional.Youndoo, C:\Users\PC\AppData\Roaming\Profiles\Fifspmpasp.default\prefs.js, ÍÓä: (), ÓíÆÉ: (.typeaheadfind.flashBar", 0);
user_pref("app.update.auto", false);
user_pref("app.update.enabled", false);
user_pref("app.update.lastUpdateTime.addon-background-update-timer"), ÇÓÊÈÏÇá,[169fc0031189c2747a76c8c4f50ea45c]

ÇáÞØÇÚÇÊ ÇáãÇÏíÉ: 0
(ÇáßÔÝ Úä ÃíÉ ÚäÇÕÑ ÎÈíËÉ)


(end)