Malwarebytes Anti-Malware www.malwarebytes.org ãÓÍ ÇáÊÇÑíÎ: 29-04-2016 ÇáãÓÍ ÇáÖæÆí ÇáæÞÊ: 17:37 ãáÝ ÇáÓÌá: Malware rapport.txt ãÏíÑ ÇáÈÑäÇãÌ: äÚã ÇáÅÕÏÇÑ: 2.2.1.1043 ÞÇÚÏÉ ÈíÇäÇÊ ÇáÈÑÇãÌ ÇáÖÇÑÉ: v2016.04.29.05 ÞÇÚÏÉ ÈíÇäÇÊ ÇáÌÐæÑ ÇáÎÝíÉ: v2016.04.17.01 ÇáÊÑÎíÕ: ãÌÇäÇð ÇáÍãÇíÉ ãä ÇáÈÑÇãÌ ÇáÖÇÑÉ: Ðæí ÍãÇíÉ ãæÇÞÚ æíÈ ÇáÖÇÑÉ: Ðæí ÇáÍãÇíÉ ÇáÐÇÊíÉ: Ðæí äÙÇã ÇáÊÔÛíá: Windows 7 Service Pack 1 æÍÏÉ ÇáãÚÇáÌÉ ÇáãÑßÒíÉ: x64 äÙÇã ÇáãáÝÇÊ: NTFS ÇáãÓÊÎÏã: Mortada äæÚ ÇáãÓÍ ÇáÖæÆí: ÇáÊåÏíÏ ÈÇáãÓÍ ÇáÖæÆí ÇáäÊíÌÉ: ÃßãáÊ ÇáßÇÆäÇÊ ÇáÊí Êã ãÓÍåÇ ÖæÆíÇð: 322722 ÇáæÞÊ ÇáãäÞÖí: ÏÞíÞÉ¡ 27 ËÇäíÉ 12 ÇáÐÇßÑÉ: Êãßíä ÈÏÁ ÇáÊÔÛíá: Êãßíä äÙÇã ÇáãáÝÇÊ: Êãßíä ÇáãÍÝæÙÇÊ: Êãßíä ÇáÌÐæÑ ÇáÎÝíÉ: Êãßíä ÇáÇÓÊÏáÇá: Êãßíä ÃáÌÑæ: Êãßíä Èæã: Êãßíä ÇáÚãáíÇÊ: 9 PUP.Optional.Ghokswa.Gen, C:\ProgramData\vreXjvX\protect\protect.exe, 4672, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [9dfc02b20792f2444fab526244c013ed] PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, 5076, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2] PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, 4452, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2] PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, 1868, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2] PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, 2820, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2] PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, 772, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2] PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, 4136, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2] PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, 5168, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2] PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, 4956, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2] ÇáæÍÏÇÊ ÇáäãØíÉ: 18 PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_child.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_child.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_child.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_child.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_child.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_child.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\d3dcompiler_47.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\libegl.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\libglesv2.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], ãÝÇÊíÍ ÇáÊÓÌíá: 23 PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\INTERFACE\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\INTERFACE\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\INTERFACE\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{47A1DF02-BCE4-40C3-AE47-E3EA09A65E4A}, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\OCComSDK.ComSDK.1, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\OCComSDK.ComSDK, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OCComSDK.ComSDK, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\OCComSDK.ComSDK, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\WOW6432NODE\CLASSES\OCComSDK.ComSDK.1, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\OCComSDK.ComSDK.1, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.OpenCandy, HKLM\SOFTWARE\CLASSES\WOW6432NODE\CLSID\{B9D64D3B-BE75-4FA2-B94A-C4AE772A0146}, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], PUP.Optional.Ghokswa.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\vreXjvX_protect, ÇáÍÌÑ ÇáÕÍí, [9dfc02b20792f2444fab526244c013ed], PUP.Optional.Ghokswa.Gen, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\vreXjvX_update, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{20719F86-7604-4F54-B642-E183D5CBCF08}, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [e7b2e9cbff9a76c09969189d23e135cb], PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{8F733BA9-3421-47D6-B3D4-D0470CFFD0D0}, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [f9a00ca896039e98e0229520659f48b8], PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{CA64D6DA-AEEB-4E5B-84AC-B5790294DE6F}, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [aaef0ba9e1b8d36361a33f7672928d73], PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\vreXjvXBrowserUpdateCore, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [7f1addd76336cc6a61a4e5d0887ca35d], PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\vreXjvXBrowserUpdateUA, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [5d3ca1131d7c0432a75fffb629dbfb05], PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\vreXjvXCheckTask, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [6138f6bee4b5f145df2870457f8513ed], PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}, ÇáÍÌÑ ÇáÕÍí, [128706aee0b939fdffa267d80ff48878], PUP.Optional.Yontoo, HKLM\SOFTWARE\WOW6432NODE\CashKitten, ÇáÍÌÑ ÇáÕÍí, [118860548b0e63d326d01c24877c966a], Þíã ÇáÊÓÌíá: 10 PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{20719F86-7604-4F54-B642-E183D5CBCF08}|Path, \vreXjvXBrowserUpdateCore, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [e7b2e9cbff9a76c09969189d23e135cb] PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{8F733BA9-3421-47D6-B3D4-D0470CFFD0D0}|Path, \vreXjvXBrowserUpdateUA, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [f9a00ca896039e98e0229520659f48b8] PUP.Optional.Ghokswa.Gen, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{CA64D6DA-AEEB-4E5B-84AC-B5790294DE6F}|Path, \vreXjvXCheckTask, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [aaef0ba9e1b8d36361a33f7672928d73] PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|hp, http://www.hohosearch.com/?ts=AHEqA3UlAn4kCE..&v=20160415&uid=15E09C3B4927DD726D30C98AB03C6F3D&ptid=epf1&mode=ffsengext, ÇáÍÌÑ ÇáÕÍí, [128706aee0b939fdffa267d80ff48878] PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|tab, http://www.hohosearch.com/?ts=AHEqA3UlAn4kCE..&v=20160415&uid=15E09C3B4927DD726D30C98AB03C6F3D&ptid=epf1&mode=ffsengext, ÇáÍÌÑ ÇáÕÍí, [d2c7bcf85a3f4beb732e8ab561a29b65] PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|sp, http://www.hohosearch.com/chrome.php?uid=15E09C3B4927DD726D30C98AB03C6F3D&ptid=epf1&q={searchTerms}&ts=AHEqA3UlAn4kCE..&v=20160415&mode=ffsengext, ÇáÍÌÑ ÇáÕÍí, [1287bff5990064d2247d57e8ef14ba46] PUP.Optional.HohoSearch, HKLM\SOFTWARE\MOZILLA\FIREFOX\{EB52F1AB-3C2B-424F-9794-833C687025CF}|surl, http://www.hohosearch.com/chrome.php?uid=15E09C3B4927DD726D30C98AB03C6F3D&ptid=epf1&ts=AHEqA3UlAn4kCE..&v=20160415&mode=ffexttoolbar&q=, ÇáÍÌÑ ÇáÕÍí, [5e3b169e13860a2c435ea09fae55d22e] Hijack.AutoConfigURL.PrxySvrRST, HKLM\SYSTEM\CONTROLSET001\SERVICES\NLASVC\PARAMETERS\INTERNET\MANUALPROXIES, 0http://un-stop.biz/wpad.dat?2e02d64e8bae8067cba949250bce682c8942939, ÇáÍÌÑ ÇáÕÍí, [4e4b763e00990e289bcb535cf113bf41] Hijack.AutoConfigURL.PrxySvrRST, HKU\S-1-5-21-1959410866-558105716-412224720-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\INTERNET SETTINGS|AutoConfigUrl, http://un-stop.biz/wpad.dat?2e02d64e8bae8067cba949250bce682c8942939, ÇáÍÌÑ ÇáÕÍí, [b4e500b4831694a22441357ada2a33cd] PUM.Optional.LowRiskFileTypes, HKU\S-1-5-21-1959410866-558105716-412224720-1000\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\POLICIES\ASSOCIATIONS|LowRiskFileTypes, .avi;.bat;.com;.cmd;.exe;.htm;.html;.lnk;.mpg;.mpeg;.mov;.mp3;.msi;.m3u;.rar;.reg;.txt;.vbs;.wav;.zip;, ÇáÍÌÑ ÇáÕÍí, [4356f3c19aff191d8339f89560a48c74] ÈíÇäÇÊ ÇáÊÓÌíá: 0 (ÇáßÔÝ Úä ÃíÉ ÚäÇÕÑ ÎÈíËÉ) ÇáãÌáÏÇÊ: 8 PUP.Optional.Ghokswa.Gen, C:\ProgramData\vreXjvX\protect, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [9dfc02b20792f2444fab526244c013ed], PUP.Optional.Ghokswa.Gen, C:\ProgramData\vreXjvX, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [9dfc02b20792f2444fab526244c013ed], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\bin, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\Dictionaries, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\PepperFlash, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\VisualElements, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], ÇáãáÝÇÊ: 114 PUP.Optional.AdOffer, C:\Users\Mortada\AppData\Roaming\ZHP\Quarantine\bitool.dll, ÇáÍÌÑ ÇáÕÍí, [6633872de3b62a0c47d69bea748e2fd1], PUP.Optional.Amonetize, C:\Users\Mortada\AppData\Local\Temp\MediaPlayer__11426.exe, ÇáÍÌÑ ÇáÕÍí, [0a8f8c285742ca6c60b182b2ad552dd3], PUP.Optional.Yontoo, C:\Users\Mortada\AppData\Local\Temp\2uWpdAAXOn.exe, ÇáÍÌÑ ÇáÕÍí, [b1e85e56c6d3c6701b254fb9b74b1ae6], PUP.Optional.Ghokswa, C:\Users\Mortada\AppData\Local\Temp\9846.tmp, ÇáÍÌÑ ÇáÕÍí, [f1a8159f237676c024dd4002020336ca], Trojan.Dropper.IR, C:\Users\Mortada\AppData\Local\Temp\appstart.exe, ÇáÍÌÑ ÇáÕÍí, [60397b39188185b1566b54dffe04e41c], Trojan.Injector.VB, C:\Users\Mortada\AppData\Local\Temp\dxdiag.exe, ÇáÍÌÑ ÇáÕÍí, [3f5ae9cbaeebf93de3e9611022de09f7], Trojan.ExpressDownloader, C:\Users\Mortada\AppData\Local\Temp\ECEuQ5VX5g.tmp, ÇáÍÌÑ ÇáÕÍí, [0c8dcde7f0a97db9562a3e3131d451af], Trojan.Agent, C:\Users\Mortada\AppData\Local\Temp\lcm5dP6uvk.exe, ÇáÍÌÑ ÇáÕÍí, [742505af6b2efa3c34531eedff03e719], PUP.Optional.IStartSurf, C:\Users\Mortada\AppData\Local\Temp\CodecFixDivx.exe, ÇáÍÌÑ ÇáÕÍí, [0c8d674de0b955e15c5f12154db54cb4], Trojan.Agent.Generic, C:\Users\Mortada\AppData\Local\Temp\123462888\ic-0.dcb23317a1654.exe, ÇáÍÌÑ ÇáÕÍí, [ebae43716732cf677213a0db1ae7956b], PUP.Optional.OpenCandy, C:\Users\Mortada\AppData\Local\Temp\HYD4729.tmp.1458046572\HTA\install.1458046572.zip, ÇáÍÌÑ ÇáÕÍí, [d2c7783c0198ac8aeb1c4deb47be1ae6], PUP.Optional.OpenCandy, C:\Users\Mortada\AppData\Local\Temp\HYD4729.tmp.1458046572\HTA\3rdparty\OCComSDK.dll, ÇáÍÌÑ ÇáÕÍí, [5445872dd8c13df990771c1c9c694bb5], Trojan.Dropper.IR, C:\Users\Mortada\AppData\Local\Temp\_ir_sf_temp_2\after.exe, ÇáÍÌÑ ÇáÕÍí, [a0f99f15aced83b3a44560d328da847c], CrackTool.Agent.Steam, C:\Users\Mortada\Downloads\0xc0000142 by manafea (1).rar, ÇáÍÌÑ ÇáÕÍí, [dfba258f277278be1cdeef85c041f10f], CrackTool.Agent.Steam, C:\Users\Mortada\Downloads\0xc0000142 by manafea.rar, ÇáÍÌÑ ÇáÕÍí, [d9c05f551f7ae650da202e46d32ed42c], Trojan.ExpressDownloader, C:\Users\Mortada\Downloads\Jean_Staune_-_Les_cles_du_futur.rar_downloader.exe, ÇáÍÌÑ ÇáÕÍí, [c6d38a2a78211125e799ed82b2539d63], HackTool.Agent, C:\Users\Public\Desktop\activation et licence\Activation#74E5\Windows Loader v2.0.4 JUIN 2011\Windows Loader v2.0.4.zip, ÇáÍÌÑ ÇáÕÍí, [a3f64c6809909a9cb46c7bc961a0cb35], HackTool.Agent, C:\Users\Public\Desktop\activation et licence\Activation#74E5\Windows Loader v2.0.4 JUIN 2011\Windows Loader.exe, ÇáÍÌÑ ÇáÕÍí, [78211d974c4d64d2db452024c938a25e], HackTool.Agent, C:\Users\Public\Desktop\activation et licence\Activation#74E5\Windows Loader v2.02\Windows Loader.exe, ÇáÍÌÑ ÇáÕÍí, [6237f9bb3d5ca88eeb35c57f24dd2dd3], Ransom.FileCryptor, C:\Users\Mortada\AppData\Local\Temp\msconfig.exe, ÇáÍÌÑ ÇáÕÍí, [fa9f585c1d7c59dd82809afacd37ad53], PUP.Optional.AdNetworkPerformance, C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.adnetworkperformance.com_0.localstorage, ÇáÍÌÑ ÇáÕÍí, [fe9ba21236631c1a9da1c3dc9371c040], PUP.Optional.AdNetworkPerformance, C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_www.adnetworkperformance.com_0.localstorage-journal, ÇáÍÌÑ ÇáÕÍí, [6732ae066a2fcc6a6bd3cad5b252aa56], PUP.Optional.OnClickAds, C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_onclickads.net_0.localstorage, ÇáÍÌÑ ÇáÕÍí, [9ffa278d9ffa7fb73ae7782e996b08f8], PUP.Optional.OnClickAds, C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Local Storage\https_onclickads.net_0.localstorage-journal, ÇáÍÌÑ ÇáÕÍí, [fd9c02b2ebaecf670b169214956f02fe], PUP.Optional.OnClickAds, C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_onclickads.net_0.localstorage, ÇáÍÌÑ ÇáÕÍí, [5d3c3f754752db5b9889c8de20e41de3], PUP.Optional.OnClickAds, C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Local Storage\http_onclickads.net_0.localstorage-journal, ÇáÍÌÑ ÇáÕÍí, [cdccac08e7b2db5b938efea8956fe719], PUP.Optional.Ghokswa.Gen, C:\ProgramData\vreXjvX\protect\protect.exe, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [9dfc02b20792f2444fab526244c013ed], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\bin\vreXjvX_server.exe, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\bin\vreXjvX_browser.dll, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\bin\vreXjvX_update.dll, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\Extensions, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\50.4.2661.78.manifest, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome.exe, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_100_percent.pak, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_200_percent.pak, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_child.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_elf.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\chrome_watcher.dll, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\d3dcompiler_47.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\delegate_execute.exe, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\icudtl.dat, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\libegl.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\libexif.dll, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\libglesv2.dll, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\natives_blob.bin, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\resources.pak, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\secondarytile.png, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\snapshot_blob.bin, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\wow_helper.exe, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\hi.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\am.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ar.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\bg.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\bn.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ca.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\cs.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\da.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\de.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\el.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\en-GB.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\en-US.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\es-419.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\es.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\et.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\fa.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\fi.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\fil.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\fr.pak, ÍÐÝ Úáì ÅÚÇÏÉ ÇáÊÔÛíá, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\gu.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\he.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\hr.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\hu.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\id.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\it.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ja.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\kn.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ko.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\lt.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\lv.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ml.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\mr.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ms.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\nb.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\nl.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\pl.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\pt-BR.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\pt-PT.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ro.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ru.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\sk.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\sl.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\sr.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\sv.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\sw.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\ta.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\te.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\th.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\tr.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\uk.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\vi.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\zh-CN.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\locales\zh-TW.pak, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\PepperFlash\manifest.json, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\PepperFlash\pepflashplayer.dll, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\VisualElements\logo.png, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Program Files (x86)\vreXjvX\vreXjvX\VisualElements\smalllogo.png, ÇáÍÌÑ ÇáÕÍí, [009911a3564369cdb2493b79bd471ee2], PUP.Optional.Ghokswa.Gen, C:\Windows\System32\Tasks\vreXjvXBrowserUpdateCore, ÇáÍÌÑ ÇáÕÍí, [1f7a7f35acedef4740bcc7ed8084b44c], PUP.Optional.Ghokswa.Gen, C:\Windows\System32\Tasks\vreXjvXBrowserUpdateUA, ÇáÍÌÑ ÇáÕÍí, [c2d764502a6f9e986f8e08acf410936d], PUP.Optional.Ghokswa.Gen, C:\Windows\System32\Tasks\vreXjvXCheckTask, ÇáÍÌÑ ÇáÕÍí, [6732496ba2f78da9ca34d9db5ca86a96], PUP.Optional.BundleInstaller, C:\Users\Mortada\AppData\Local\Temp\binsis142.xml, ÇáÍÌÑ ÇáÕÍí, [1a7fbcf85643e650cf5da413e81c926e], PUP.Optional.BundleInstaller, C:\Users\Mortada\AppData\Local\Temp\binsischeck654.xml, ÇáÍÌÑ ÇáÕÍí, [fb9e3e76d3c6c76f012c9a1d51b33cc4], PUP.Optional.TerraClicks.ShrtCln, C:\Users\Mortada\AppData\Local\Google\Chrome\User Data\Default\Preferences, ÍÓä: (), ÓíÆÉ: (www.terraclicks.com), ÇÓÊÈÏÇá,[4950a014445549edc012cfadfd08847c] PUP.Optional.Amonetize, C:\Users\Mortada\AppData\Local\Temp\amipixel.cfg, ÇáÍÌÑ ÇáÕÍí, [55440ba92c6d9b9b994ab7c2897cf60a], ÇáÞØÇÚÇÊ ÇáãÇÏíÉ: 0 (ÇáßÔÝ Úä ÃíÉ ÚäÇÕÑ ÎÈíËÉ) (end)