ArabyOnline Removal

[Dedo]

Dear,

I face an issue of removing the Arabyonline from google chrome.
also when even trying to change the search engine in chrome, it said its enforced by administrator

attached the files.

 

[argus]

1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system

Start
HKLM\...\Policies\Explorer: [NoSMConfigurePrograms] 1
HKLM\...\Policies\Explorer: [NoMSAppLogo5ChannelNotify] 0
HKLM\...\Policies\Explorer: [NoToolbarCustomize] 0
HKLM\...\Policies\Explorer: [NoBandCustomize] 0
HKLM\...\Policies\Explorer: [NoControlPanel] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [HideSCAHealth] 1
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Home] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Fullscreen] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Tools] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Print] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Edit] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Cut] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Copy] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Paste] 0
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\...\Policies\Explorer: [Btn_Encoding] 0
GroupPolicy: Group Policy on Chrome detected <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = http://www.arabyonline.com/?src=1000
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKU\S-1-5-21-2053067395-845162621-1245804459-238242\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.arabyonline.com/?src=1000
Toolbar: HKCU - No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} -  No File
Toolbar: HKCU - No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
FF DefaultSearchEngine: VenteeRo
FF SearchEngineOrder.1: VenteeRo
FF SelectedSearchEngine: VenteeRo
FF Homepage: hxxp://www.arabyonline.com/?scr=90Qw8888
FF Keyword.URL: hxxp://www.arabyonline.com/search.php?src=1000&q={searchTerms}
FF Extension: No Name - C:\Users\emostafa\AppData\Roaming\Mozilla\Firefox\Profiles\m6n9yai0.default\extensions\addon@Vonteera.com [Not Found]
EmptyTemp:
End

2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It's important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.




============== Next =============







Please download Zoek tool by Smeenk (

) from here and save it to your Desktop.
Unpack the archive...

• Close any open browsers and temporarily disable your AntiVirus program. (if it is necessary)
  If you are unsure how to do this please read this or this Instruction.
  
• Double click on zoek.exe to run the tool. Please wait while the tool does not start...
• Copy the text present inside the code box below and paste it into the large window in the zoek tool:
  
  

  filesrcm;
  startupall;
  skipfix-iedefaults;
  firefoxlook;
  chromelook;
  installer-list;
  uninstall-list;

  
  
• Click on
  
  button.
  Please wait until a logreport will open (this can be after reboot)
  
• Save notepad to your Desktop and attach here zoek-results.log
  Note: It will also create a log in the C:\ directory named "zoek-results.log"